last executing test programs: 41.621070891s ago: executing program 0 (id=129): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1cd02, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) r3 = gettid() tkill(r3, 0x11) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x7b}, [@ldst={0x6, 0x0, 0x3, 0x0, 0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x2dc0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 40.520229676s ago: executing program 0 (id=139): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000008c50000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) 39.619576271s ago: executing program 0 (id=141): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 39.592309531s ago: executing program 0 (id=142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='xprt_ping\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r3) r4 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000080), 0x1, 0x513, &(0x7f00000010c0)="$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") r5 = open(&(0x7f0000000040)='./bus\x00', 0x1ed37e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000e40)=ANY=[@ANYRESDEC=r5, @ANYRES64=r5, @ANYRESDEC=r6, @ANYRES32=r4, @ANYBLOB="03092e0da683a9959fa46f7a0378cea9b14754074e1c44ff2d06108a544c53df4c17acd0d2e8fe37eb4a999bf55ac07c91bd0851166b43da1ff21069d937160ec7815ceda226d14ea5568ce681c02a508b29aa4171fa75dd6b0451bc0093d72e172afc9d6068d9845acf9ec46f6675c1a9a323f39abe", @ANYRESOCT=r5], 0x1, 0x37f, &(0x7f0000000440)="$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") syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa00008, &(0x7f0000000240)={[{@lazytime}, {@nodioread_nolock}, {@norecovery}, {@nodioread_nolock}, {@dioread_nolock}, {@nombcache}, {@abort}, {@init_itable}, {@oldalloc}]}, 0x0, 0x7b8, &(0x7f0000000fc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') 39.037331274s ago: executing program 0 (id=147): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$tun(r3, 0x0, 0xfce) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) capget(&(0x7f0000000080)={0x20071026}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYBLOB="060000"]) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYRES32=r3]) recvmsg$unix(r7, &(0x7f0000000200)={0x0, 0xfffffffffffffeea, 0x0, 0x3}, 0x10162) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1f, 0xded, 0x4, 0x250, 0x40, r5, 0x92, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r9], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0xc0189436, &(0x7f0000000140)) 38.740394995s ago: executing program 0 (id=149): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1cd02, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) r3 = gettid() tkill(r3, 0x11) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x7b}, [@ldst={0x6, 0x0, 0x3, 0x0, 0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x2dc0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 38.740133875s ago: executing program 32 (id=149): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1cd02, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) r3 = gettid() tkill(r3, 0x11) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x7b}, [@ldst={0x6, 0x0, 0x3, 0x0, 0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x2dc0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7.169006216s ago: executing program 2 (id=366): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00', 0x0, 0x201000, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000840)=[@acquire, @acquire_done, @request_death], 0x0, 0x0, 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a0000000000007111140000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) recvfrom$inet_nvme(r3, &(0x7f0000000140), 0x0, 0x40000002, &(0x7f0000000300)=@generic={0x26, "ce43fa7beb6ec0596637fea578e274e07d225a41c5b0faa9b9a5bfa32505b3a57a954ee836cabe6a730b2b0424850cc13d190359b2257f3364cdaaf5cf20a91fd9f465b9ca94e5cbbabc394dba3bb2f83a14574676787c181c6429107ead7443b18d1f0661db47e610a8343c3a55c9f3e906a141c823ac580352ba9a5354"}, 0x80) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000280)=[{r4}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="10002dbd7000fedbdf25030000003400098008000100020000000800010007000000080002008b3edaf8713e9b1bd50000000800020004177f0008000100aa0000000200058007000100696200000800ef61d92e26de8fbb9109aad0e7daee5f660100657468005d53a87dbcbdec788087aa061c963b11c87bc59c5ccb8098016b9a24b532e085e9a5bbffef7e"], 0x5c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x40081) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000400)=@newtaction={0x1b0, 0x30, 0x12f, 0x0, 0x0, {}, [{0x19c, 0x1, [@m_ctinfo={0xdc, 0xb, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7f}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x959}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}]}, {0x97, 0x6, "fe452223949acbc2d827eaa150d7921a461970a15e344db2f2e8fb27564ffc924734df6a5fda7897c9afbcba8ad99c10fd929a9db7726f1c4aa1ea78c1d51f74b201d734d27111132f4f09fc99db2aaf800c083f8c202bccd62fe525d4a314d6e7b938f9f3ca24aa27859f033cbe41751a41802f8a4b606e8787840ea3f233598dadabd8b57e894f0c40cd474c26676c70b6db"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0xbc, 0x14, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x0, 0x5, 0x80000001, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x20ad, 0x3}}]}, {0x6c, 0x6, "4425ecad7fe9b9085b8c26feae38951d19e8d186968f5f96109373adafe7f5fef4fb1d8f15561664e9c509fcf9d6425fc53cedbe9c28f9683beb74143dec30b4488f04569ee80f7f1e6b188bf51f5bbae993622ee29eb7d11f765cf541647a16a853bce3bca1db49"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0xca5a1eaedccfa2a8}}}}]}]}, 0x1b0}}, 0x0) 7.102061876s ago: executing program 3 (id=367): ptrace(0x4206, 0x0) ptrace(0x8, 0x0) ptrace$setsig(0x4207, 0x0, 0x200000000000005, 0x0) 7.004285257s ago: executing program 2 (id=368): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 7.003707517s ago: executing program 2 (id=370): r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000200)=ANY=[@ANYRES32], 0x0) r1 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000280)={{0x12, 0x1, 0xe2dceb900c37a0d1, 0x7d, 0xca, 0xef, 0x8, 0x2100, 0x9e53, 0x6e20, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf9, 0x1, 0xa5, 0x6, 0x10, 0x7, [{{0x9, 0x4, 0x7, 0x3b, 0x1, 0xac, 0xf7, 0x6d, 0x6, [@generic={0x71, 0x7, "2c73657b31c6d47d066ccc2f87311d4147aa025bfe60345f2c16b3ba1d11ceb160b38618c0cf7cd2e016d397fc9a847dbc47d84c788844ebc392fd20b48db0ba94d0c821988ddbc83cda6326a4ca247239cddfc17c7a415edb38c0dec1e350d3cce337dfc3ae5121abdf3ee42b21a8"}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x6, 0x0, 0x5}]}], [{{0x9, 0x5, 0x4, 0x4, 0x400, 0xf8, 0x0, 0x80, [@generic={0x66, 0xa, "ac33950562f3f494d344527ac11d62b4a924f1569ea63e06518c12584be6c69a16f6432cb9203c54ee598a3b87e03f54982dce770147b4088379aa6fc935ff069309e7a57b09351d3161ba3c32e80e2ba1e343b8b8ad7c57e413cbc0074d8104906c8592"}]}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x2, 0x2, 0x1, 0x8, 0x8}, 0x10, &(0x7f0000000640)=ANY=[@ANYRES32=r0], 0x6, [{0x6e, &(0x7f0000000440)=@lang_id={0x0, 0x3, 0x380a}}, {0xca, &(0x7f00000008c0)=@string={0xca, 0x3, "cfc5e7feccaeccc0cd18c11b1529695745537890cbde349ae1c88d247c7e8f8de667955aeda99de54b87c0ae00b8bdf63b8496de4a16dc13d03d1eaf6b51a9e575c97a59c2d64d095ae523890463261dfc0fa3c41ecf632af9eadd06cc6efd63b7fd8ef173c6b853fbe8bc96643e3cf37723e1d8a9fe486e75aa62a674f1b4c72916e5456db14d2f9f2bd7f3c6b07b53637ed247a188c6e295cac515a1a48a870bb7fdaae0319fe2282b4be37987b702167dc9a305bea8d0784635c8e37005966971402156dde217"}}, {0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/378]}, {0x45, &(0x7f0000000500)=@string={0x45, 0x3, "d16e456ceed18ede32c1a5a82fc347adacb772491dcbed0ad752e268f9de42f6f9e0c95a8eb8b3805188f640266be9bb557974d4153b97c93d58c48c21a45af4b2b82e"}}, {0xf4, &(0x7f00000007c0)=ANY=[@ANYBLOB="f403681abef6fe54ea17bab3f3ecb947a1bf2a65d0b16d7e5f733b01045a62e8d632f1710a5d54f254a4496f4544dc7c97ea32e3b29bd5330290b4d032ddf5285e9ce811468cf0e98e2cd8b480dd2bc84af58965bacb743924b7228972ff47fe0ee4ec1844c3a92af7e1c379e969e443804e1effe6ee29a93a089864498e52589ae7281f345098af85e60dabc9bbf8aad4c2497bbac719b200f3845df0aeb287386d256aeb8075bc43ce6b4e927c318c603d4434d38df08056cf5dc70eef21841af8455b6bdf98767ab09c928fa37a95b75c78cdbf424b6e814805453d1f1c03e021a0bb972200"/244]}, {0x8f, &(0x7f0000000700)=@string={0x0, 0x3, "2a92e1554bc563df050f140836b3cce4823dafd2b3a21a5f96ed4d95665df4fd9fcbfa23e16ac08e27510faac175b5aaa8df7158bcd98d71502fc2d02e8499d5c28bf27623ecd00d84e6a92f812216ecb9ded11ec0e1a0bd0f92dd758f40728dfcf0931ba775e55b3b93a12d071d0a2299c66cd93e0744a9519e7aef40bb4cce25aca6641ca46ead50889071f7"}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) io_setup(0x8, &(0x7f00000008c0)=0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r4 = eventfd(0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) io_submit(r2, 0x1, &(0x7f00000004c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = dup2(r7, r7) r9 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(r8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000100)={@remote, @private1, @empty, 0x0, 0x40, 0x0, 0x100, 0x0, 0x20d008c, r10}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r14, &(0x7f0000000740)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r13, @ANYBLOB=',wfdno=', @ANYRESHEX=r14]) r15 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r15, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008000000", @ANYRESOCT=r15], 0x40}, 0x20000000) r16 = creat(&(0x7f0000000000)='./file0\x00', 0x8b) ioctl$F2FS_IOC_MOVE_RANGE(r15, 0xc020f509, &(0x7f0000000040)={r16, 0x3ff, 0x1d7e, 0x2}) r17 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r17, 0xc038480a, &(0x7f0000000240)={0x3, 0x200, 0x8, 0x7, 0x2, 0x8, 0x3, 0x1, 0x2005e31, 0x9, 0x4, 0x0, 0x3, 0x6}) 7.003407687s ago: executing program 3 (id=371): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xff4d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0xbffe, @none, 0x0, 0x1}, 0xe) listen(r1, 0x8) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (fail_nth: 3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) sendfile(0xffffffffffffffff, r3, 0x0, 0x3a) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x4008040) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r9, 0x800c6613, 0x0) 5.369145255s ago: executing program 3 (id=378): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.23129522s ago: executing program 3 (id=386): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1cd02, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$eJzs3E+LW1UYB+C3cWrHqfNHrdV2oQfduLo0s3AlSJApyASU2gitINw6NxpyTUJuGIiI1ZVbP4e4dCeIX2A2fgZ3s3HZhXiFpLVNTdUuOpH6PJv7kvf8cu8hEDjhnBy/8c2n/W6VdfNJNE6disYoIt1KkaIRd7y0P79eu77farf3rqR0uXW1+XpKaevlHz/4/LtXfpqcff/7rR/OxNHOh8e/7v5ydP7owvHvVz/pValXpcFwkvJ0Yzic5DfKIh30qn6W0rtlkVdF6g2qYrzQ75bD0Wia8sHB5sZoXFRVygfT1C+maTJMk/E05R/nvUHKsixtbgQPdPqfh3S+vVXXdURdn44no67r+qnYiLPxdGzGVnwZEc/Es/FcnIvn43y8EC/Ghdmok3h8AAAAAAAAAAAAAAAAAAAA+P/4u/P/27Hj/D8AAAAAAAAAAAAAAAAAAACcgPeuXd9vtdt7V1Jajyi/PuwcdubXeb/VjV6UUcSl2I7fYnb6f25eX367vXcpzezEV+XN2/mbh50nFvPN2d8J3M6vzXp38s15Pi3mz8TGvfnd2I5zy++/uzS/Hq+9ek8+i+34+aMYRhkHs3vfzX/RTOmtd9r35S/OxgEAAMDjIEt/Wrp+z7IH9ef5h/h94L719VpcXFvt3Imopp/187IsxovF+l9eUfz7ovGI3rkR/5EJKh7/YtXfTJyEux/6qp8EAAAAAAAAAACAh/GIdxGuxZKdZW+uZqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAD//99CzUo=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) r3 = gettid() tkill(r3, 0x11) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r9, r9, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x7b}, [@ldst={0x6, 0x0, 0x3, 0x0, 0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x2dc0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ftruncate(r9, 0x4000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.19579019s ago: executing program 4 (id=387): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1cd02, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) r3 = gettid() tkill(r3, 0x11) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x7b}, [@ldst={0x6, 0x0, 0x3, 0x0, 0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x2dc0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.992565671s ago: executing program 1 (id=389): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 3.904447671s ago: executing program 2 (id=390): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1cd02, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$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") prlimit64(0x0, 0xb, 0x0, 0x0) r3 = gettid() tkill(r3, 0x11) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r9, r9, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x7b}, [@ldst={0x6, 0x0, 0x3, 0x0, 0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x2dc0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ftruncate(r9, 0x4000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.444319128s ago: executing program 1 (id=391): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000000c0)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x24, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x8000, 0x8, 0x8, 0xab1, {{0x1e, 0x4, 0x0, 0x2d, 0x78, 0x68, 0x0, 0xe5, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x37}, {[@generic={0x83, 0xd, "f2fa05c92fcbe096a995ab"}, @timestamp_addr={0x44, 0x2c, 0x4e, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x17}, 0x1}, {@broadcast, 0x7}, {@empty, 0xc6000000}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x8000}, {@loopback, 0x4}]}, @generic={0x44, 0xf, "49bb69263f246ca3272fafab02"}, @timestamp_prespec={0x44, 0x1c, 0x39, 0x3, 0x1, [{@broadcast, 0x1}, {@private=0xa010101, 0x5}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x92}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x7f, 0x1, 0x43, @private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7, 0x8, 0x8000, 0x8}}) r5 = open(0x0, 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x4002011, r5, 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="100000000f00000003000000f8ffffff83480400", @ANYRES32=r9, @ANYBLOB="ff7f00"/20, @ANYRES32=r7, @ANYRES32=r5, @ANYBLOB="0500000005000000020000004e27fc475d2a3c6999ff43a1d5a02500c600000000000000001c6c32f7ff56"], 0x50) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000780)={@initdev, 0x0}, &(0x7f00000007c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0xfe, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x7800, 0x40, 0xfffff47f, 0x504}}) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r13, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r14}, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wg2\x00', 0x0}) r16 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0300001000000000000585b73302000000e400", @ANYRES32=r17, @ANYBLOB="00000000000000001c0012800900010069706970000000000c000280080003000a010100"], 0x3c}, 0x1, 0x2}, 0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = socket(0x10, 0x803, 0x0) getsockname$packet(r19, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r18, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000379e227600000006000000000000", @ANYRES32=r20, @ANYBLOB="cb140000000000002800128008000100736974001c000280080002007f00000106001000d506000006000f00"], 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x194, r1, 0x2, 0x70bd28, 0x3, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004030) 2.314852069s ago: executing program 3 (id=393): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) 2.314185429s ago: executing program 4 (id=394): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2.27247344s ago: executing program 1 (id=395): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1cd02, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$eJzs3E+LW1UYB+C3cWrHqfNHrdV2oQfduLo0s3AlSJApyASU2gitINw6NxpyTUJuGIiI1ZVbP4e4dCeIX2A2fgZ3s3HZhXiFpLVNTdUuOpH6PJv7kvf8cu8hEDjhnBy/8c2n/W6VdfNJNE6disYoIt1KkaIRd7y0P79eu77farf3rqR0uXW1+XpKaevlHz/4/LtXfpqcff/7rR/OxNHOh8e/7v5ydP7owvHvVz/pValXpcFwkvJ0Yzic5DfKIh30qn6W0rtlkVdF6g2qYrzQ75bD0Wia8sHB5sZoXFRVygfT1C+maTJMk/E05R/nvUHKsixtbgQPdPqfh3S+vVXXdURdn44no67r+qnYiLPxdGzGVnwZEc/Es/FcnIvn43y8EC/Ghdmok3h8AAAAAAAAAAAAAAAAAAAA+P/4u/P/27Hj/D8AAAAAAAAAAAAAAAAAAACcgPeuXd9vtdt7V1Jajyi/PuwcdubXeb/VjV6UUcSl2I7fYnb6f25eX367vXcpzezEV+XN2/mbh50nFvPN2d8J3M6vzXp38s15Pi3mz8TGvfnd2I5zy++/uzS/Hq+9ek8+i+34+aMYRhkHs3vfzX/RTOmtd9r35S/OxgEAAMDjIEt/Wrp+z7IH9ef5h/h94L719VpcXFvt3Imopp/187IsxovF+l9eUfz7ovGI3rkR/5EJKh7/YtXfTJyEux/6qp8EAAAAAAAAAACAh/GIdxGuxZKdZW+uZqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAD//99CzUo=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) r2 = gettid() tkill(r2, 0x11) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r8, r8, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x7b}, [@ldst={0x6, 0x0, 0x3, 0x0, 0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x2dc0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ftruncate(r8, 0x4000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) 2.207188879s ago: executing program 4 (id=396): sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x40816, &(0x7f0000000100)=ANY=[@ANYRES64], 0xfe, 0x2aa, &(0x7f0000000a40)="$eJzs3c9qY1UYAPDvpkka7SJZuBLBu5iFG8tkti7MIBXErpQs/AM6ODMwNGGggcCoGGflE7hw4Xu4cy+48Q0EH8Cdgwwcubm3SWzTtGlNK53fb9PDOd93z3dyTtvVPfn8teHB/cejh0+//j1arSxqvejFsyw6UYsj3wYAcJM8Syn+TKX1Muu1TdUEAGzWwv//xikh2ye73t50WQDABn340cfv393f3/sgz1sRw+/G/SzKn+X43YfxKAbxIG5HO55HpJmy/e57+3tRzwuduDWcjPtF5vCzX+ehMc3vRjs6y/O7eWkhfzLuN+LliCyLeNQrCrkT7XjlRH4xvndnSX70m/FGq1pkMf9utOO3L+JxDOJ+FLnz+b/p5vk76fu/vvqkCC7ys8m4vz2Nm0tbV703AAAAAAAAAAAAAAAAAAAAAADcXLv5TCduDYuu6v6drefT8d1/jU/v16lNx8v8LKI5bRy7H2iS4sej+3Vu53mesjJ+fr9PPV6tR/3aFg4AAAAAAAAAAAAAAAAAAAD/I6MnXx7cGwweHP4njeol/9lr/Rd9Tm+h5/VYHby91lyxVYUXtR6P6f7y6XDWUyziIsWPG3nEqpobJ3peKuo5+8l/p5RSlkVcbpsa55nrjMbO6pjiA/75h503D+5lZ32GraON+2lxqBmHoyfH9jSydSpMax2/5oqYZnVizvWcnUv+Er31RzlZ1ZOtsYpG1YjTjl9rrfN8dX+DAAAAAAAAAAAAAAAAAACA0vyl3yWDT1em1jZWFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcsfn3/6/RmFTJy2NSSpNZTzMOR9e8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF4A/wQAAP//+YxnlA==") syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x8000, &(0x7f0000000600)={[{@nogrpid}, {@discard}, {@dioread_nolock}, {@dioread_nolock}, {@bsdgroups}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@noblock_validity}]}, 0x0, 0x60e, &(0x7f0000001080)="$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") openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x123000, 0x0) mount(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0xa52033, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x243, &(0x7f0000000a00)="$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") 2.196549759s ago: executing program 3 (id=397): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001439) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20022, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_connect(0x0, 0x33, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xec, 0x13, 0xb2, 0x10, 0x46d, 0x8d3, 0xb28, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2, 0x2, 0x5, 0x5}, @as_header={0x7, 0x24, 0x1, 0x7, 0x9, 0x3}]}]}}]}}]}}, 0x0) 1.557383033s ago: executing program 1 (id=399): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000008c50000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) 1.478040913s ago: executing program 2 (id=401): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1cd02, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$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") prlimit64(0x0, 0xb, 0x0, 0x0) r3 = gettid() tkill(r3, 0x11) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r9, r9, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x7b}, [@ldst={0x6, 0x0, 0x3, 0x0, 0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x2dc0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ftruncate(r9, 0x4000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.416459213s ago: executing program 4 (id=402): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r0}, 0x18) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) r6 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r6, &(0x7f0000000900)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000240)="a9050000000074640021000000003552bde5c064c6a1e49db6cf48a9025ee904103073d7", 0x24}], 0x1}}], 0x1, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r7, 0x98f) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r8, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r7, 0x0, 0x0, 0x0) 1.381570933s ago: executing program 4 (id=403): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) close(r2) r3 = getpid() sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x4000000000000000) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7be17000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=0x0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x78}, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 553.798047ms ago: executing program 1 (id=406): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 424.627718ms ago: executing program 5 (id=408): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) umount2(&(0x7f0000000040)='./file0\x00', 0x1) 345.765738ms ago: executing program 1 (id=409): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1cd02, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) r2 = gettid() tkill(r2, 0x11) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r8, r8, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x7b}, [@ldst={0x6, 0x0, 0x3, 0x0, 0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x2dc0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ftruncate(r8, 0x4000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) 318.361299ms ago: executing program 5 (id=410): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) close(r2) 309.831579ms ago: executing program 4 (id=411): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1cd02, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) r3 = gettid() tkill(r3, 0x11) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x7b}, [@ldst={0x6, 0x0, 0x3, 0x0, 0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x2dc0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 255.063409ms ago: executing program 2 (id=412): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000400)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000800000000e300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r5}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'netdevsim0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xf, 0x18}, 0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)={[{0x2d, 'pids'}]}, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000800)={'ip_vti0\x00', 0x0, 0x9, 0x40, 0x8, 0x4, {{0x9, 0x4, 0x2, 0x5, 0x24, 0x67, 0x0, 0x7, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}, {[@lsrr={0x83, 0x7, 0xfa, [@private=0xa010102]}, @end, @cipso={0x86, 0x6, 0x1}]}}}}}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 122.796039ms ago: executing program 5 (id=413): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mkdir(0x0, 0x21) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r3 = dup(r2) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 102.282889ms ago: executing program 5 (id=414): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) umount2(&(0x7f0000000040)='./file0\x00', 0x1) 79.555839ms ago: executing program 5 (id=415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xd, &(0x7f00000003c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xb}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0db2b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec08647566b1bdd75d6a9a1e600aaf0f42ce94b4725d4c2da80150dc34e5975d6904f061ed9a7608959f2d24ee6ec4f2395d16e02f53c746f74b12013f738d76456c3407188eff97f31ca36e5d79e1f1c7c3b688ee21d37ba5ebf4afc2a61f16"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='7', 0x1}], 0x1) 0s ago: executing program 5 (id=416): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000040)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts. [ 20.036991][ T30] audit: type=1400 audit(1732186553.042:66): avc: denied { integrity } for pid=278 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 20.045406][ T30] audit: type=1400 audit(1732186553.052:67): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.046663][ T278] cgroup: Unknown subsys name 'net' [ 20.052765][ T30] audit: type=1400 audit(1732186553.052:68): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.061020][ T30] audit: type=1400 audit(1732186553.062:69): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.061186][ T278] cgroup: Unknown subsys name 'devices' [ 20.171088][ T278] cgroup: Unknown subsys name 'hugetlb' [ 20.176599][ T278] cgroup: Unknown subsys name 'rlimit' [ 20.316951][ T30] audit: type=1400 audit(1732186553.322:70): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.340059][ T30] audit: type=1400 audit(1732186553.322:71): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.365075][ T30] audit: type=1400 audit(1732186553.322:72): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.390664][ T282] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.399419][ T30] audit: type=1400 audit(1732186553.412:73): avc: denied { relabelto } for pid=282 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.424970][ T30] audit: type=1400 audit(1732186553.412:74): avc: denied { write } for pid=282 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.425675][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.450732][ T30] audit: type=1400 audit(1732186553.432:75): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.080812][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.087668][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.095190][ T288] device bridge_slave_0 entered promiscuous mode [ 21.102882][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.109752][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.116963][ T288] device bridge_slave_1 entered promiscuous mode [ 21.198806][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.205787][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.213072][ T292] device bridge_slave_0 entered promiscuous mode [ 21.226615][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.233826][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.241061][ T292] device bridge_slave_1 entered promiscuous mode [ 21.285259][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.292328][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.299645][ T290] device bridge_slave_0 entered promiscuous mode [ 21.316011][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.322974][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.330205][ T290] device bridge_slave_1 entered promiscuous mode [ 21.363389][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.370409][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.377580][ T289] device bridge_slave_0 entered promiscuous mode [ 21.385666][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.392712][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.399986][ T289] device bridge_slave_1 entered promiscuous mode [ 21.489819][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.496675][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.504117][ T294] device bridge_slave_0 entered promiscuous mode [ 21.511102][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.517944][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.525344][ T294] device bridge_slave_1 entered promiscuous mode [ 21.574845][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.581710][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.588820][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.595611][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.611560][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.618411][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.625629][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.632406][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.686254][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.693207][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.700313][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.707083][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.721135][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.727970][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.735113][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.741875][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.785952][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.793222][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.800312][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.807677][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.815101][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.822294][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.829491][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.836671][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.843899][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.852650][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.860336][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.881431][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.889647][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.896482][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.905276][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.913549][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.920405][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.940017][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.947644][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.955905][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.962773][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.970763][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.978699][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.985547][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.011055][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.018298][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.026387][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.033242][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.040792][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.048740][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.055591][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.062915][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.070738][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.078427][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.086507][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.093362][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.100716][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.108670][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.115515][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.145186][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.153396][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.161459][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.169538][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.177247][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.185550][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.193720][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.201554][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.209434][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.216603][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.224056][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.232013][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.240674][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.248596][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.259240][ T292] device veth0_vlan entered promiscuous mode [ 22.272753][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.280582][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.288427][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.296944][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.305175][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.313472][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.324347][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.331725][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.350097][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.358133][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.365984][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.374219][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.382278][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.389119][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.396478][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.404661][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.413003][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.419846][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.427034][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.434972][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.442721][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.450633][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.461415][ T288] device veth0_vlan entered promiscuous mode [ 22.468458][ T292] device veth1_macvtap entered promiscuous mode [ 22.482415][ T289] device veth0_vlan entered promiscuous mode [ 22.489203][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.496721][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.505006][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.513765][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.521941][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.529970][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.537367][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.545697][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.553957][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.561798][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.569803][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.577064][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.584499][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.591808][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.608828][ T288] device veth1_macvtap entered promiscuous mode [ 22.615715][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.623871][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.632234][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.640665][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.648750][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.656999][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.665087][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.673746][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.696024][ T290] device veth0_vlan entered promiscuous mode [ 22.702227][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.711457][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.720344][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.728382][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.736823][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.744641][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.756920][ T294] device veth0_vlan entered promiscuous mode [ 22.772587][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.785556][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.793573][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.801722][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.809301][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.817451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.833277][ T294] device veth1_macvtap entered promiscuous mode [ 22.842874][ T289] device veth1_macvtap entered promiscuous mode [ 22.851240][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.864237][ T290] device veth1_macvtap entered promiscuous mode [ 22.873508][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.881769][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.890244][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.919525][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.939438][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.949290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.969630][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.989244][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.997364][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.011668][ T317] loop2: detected capacity change from 0 to 8192 [ 23.013812][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.026716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.036510][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.044952][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.066848][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.082097][ T317] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 23.085304][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.215550][ T320] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.274642][ T328] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure [ 23.291349][ T328] overlayfs: failed to resolve './file0': -2 [ 24.011345][ T338] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 24.020195][ T338] FAT-fs (loop2): Filesystem has been set read-only [ 24.026707][ T338] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 24.035277][ T338] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 24.043852][ T338] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 24.072213][ T338] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 24.080904][ T338] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 24.089585][ T338] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 24.098167][ T338] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 24.106815][ T338] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 24.115384][ T338] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 24.300565][ T352] loop0: detected capacity change from 0 to 256 [ 24.919333][ T39] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 24.927718][ T349] fuse: Bad value for 'group_id' [ 25.282239][ T30] kauditd_printk_skb: 138 callbacks suppressed [ 25.282255][ T30] audit: type=1400 audit(1732186558.292:214): avc: denied { create } for pid=360 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 25.343929][ T30] audit: type=1400 audit(1732186558.342:215): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 25.408986][ T30] audit: type=1400 audit(1732186558.372:216): avc: denied { mount } for pid=363 comm="syz.3.14" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 25.434461][ T369] loop3: detected capacity change from 0 to 256 [ 25.449127][ T30] audit: type=1400 audit(1732186558.392:217): avc: denied { create } for pid=363 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 25.478599][ T371] loop0: detected capacity change from 0 to 8192 [ 25.484984][ T30] audit: type=1400 audit(1732186558.392:218): avc: denied { unmount } for pid=363 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 25.491996][ T369] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 25.510426][ T30] audit: type=1326 audit(1732186558.402:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=365 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3ffd0819 code=0x7ffc0000 [ 25.555499][ T371] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 25.555712][ T369] exFAT-fs (loop3): hint_cluster is invalid (17) [ 25.572383][ T30] audit: type=1326 audit(1732186558.402:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=360 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a0478819 code=0x7ffc0000 [ 25.601429][ T30] audit: type=1326 audit(1732186558.402:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=360 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a0478819 code=0x7ffc0000 [ 25.624765][ T30] audit: type=1326 audit(1732186558.402:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=365 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f1d3ffd0819 code=0x7ffc0000 [ 25.649005][ T30] audit: type=1326 audit(1732186558.402:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=365 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3ffd0819 code=0x7ffc0000 [ 25.671035][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 25.682913][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.692560][ T39] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 25.701911][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.716449][ T39] usb 5-1: config 0 descriptor?? [ 25.845587][ T381] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 25.854861][ T381] FAT-fs (loop0): Filesystem has been set read-only [ 25.861380][ T381] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 25.869930][ T381] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 25.878563][ T381] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 25.887202][ T381] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 25.895782][ T381] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 25.904513][ T381] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 25.913104][ T381] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 25.921679][ T381] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 25.930621][ T381] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 25.960593][ T382] overlayfs: failed to resolve './file0': -2 [ 26.009691][ T386] loop2: detected capacity change from 0 to 8192 [ 26.027413][ T386] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 26.107033][ T390] loop3: detected capacity change from 0 to 1024 [ 26.139337][ T390] ======================================================= [ 26.139337][ T390] WARNING: The mand mount option has been deprecated and [ 26.139337][ T390] and is ignored by this kernel. Remove the mand [ 26.139337][ T390] option from the mount to silence this warning. [ 26.139337][ T390] ======================================================= [ 26.180400][ T347] Zero length message leads to an empty skb [ 26.188634][ T391] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 26.197332][ T391] FAT-fs (loop2): Filesystem has been set read-only [ 26.205710][ T39] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 26.209084][ T391] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 26.213000][ T39] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 26.221760][ T391] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 26.228562][ T39] hid-steam 0003:28DE:1102.0001: item fetching failed at offset 3/5 [ 26.237238][ T391] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 26.246447][ T39] hid-steam 0003:28DE:1102.0001: steam_probe:parse of hid interface failed [ 26.256792][ T391] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 26.262973][ T39] hid-steam: probe of 0003:28DE:1102.0001 failed with error -22 [ 26.274011][ T391] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 26.281024][ T390] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.23: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 26.286796][ T391] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 26.318183][ T391] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 26.320848][ T390] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.23: couldn't read orphan inode 11 (err -117) [ 26.326919][ T391] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 26.342523][ T390] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 26.348252][ T391] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 26.436300][ T6] usb 5-1: USB disconnect, device number 2 [ 26.464928][ T398] loop0: detected capacity change from 0 to 256 [ 26.493267][ T400] loop2: detected capacity change from 0 to 1024 [ 26.531872][ T398] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 26.548421][ T398] exFAT-fs (loop0): hint_cluster is invalid (17) [ 26.555826][ T404] loop3: detected capacity change from 0 to 256 [ 26.567379][ T400] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.24: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 26.585854][ T400] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.24: couldn't read orphan inode 11 (err -117) [ 26.597956][ T400] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 26.648128][ T409] overlayfs: failed to resolve './file0': -2 [ 26.652138][ T412] loop1: detected capacity change from 0 to 256 [ 26.656827][ T404] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 26.677557][ T404] exFAT-fs (loop3): hint_cluster is invalid (17) [ 26.695185][ T412] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 26.728024][ T412] exFAT-fs (loop1): hint_cluster is invalid (17) [ 26.741843][ T417] loop0: detected capacity change from 0 to 256 [ 26.753684][ T414] overlayfs: failed to resolve './file0': -2 [ 26.783370][ T419] loop3: detected capacity change from 0 to 1024 [ 26.901165][ T426] loop2: detected capacity change from 0 to 8192 [ 26.911863][ T419] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.33: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 26.930367][ T419] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.33: couldn't read orphan inode 11 (err -117) [ 26.941361][ T426] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 27.202077][ T419] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 27.377119][ T437] loop0: detected capacity change from 0 to 8192 [ 27.430190][ T437] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 27.464965][ T439] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 27.473635][ T439] FAT-fs (loop2): Filesystem has been set read-only [ 27.480299][ T439] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 27.488940][ T439] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 27.497554][ T439] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 27.506122][ T439] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 27.514740][ T439] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 27.523344][ T439] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 27.531922][ T439] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 27.540529][ T439] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 27.549129][ T439] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 27.742429][ T447] loop2: detected capacity change from 0 to 256 [ 27.762687][ T448] device vti0 entered promiscuous mode [ 27.811710][ T447] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 27.905263][ T450] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 27.913923][ T450] FAT-fs (loop0): Filesystem has been set read-only [ 27.920619][ T450] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 27.929433][ T450] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 27.938187][ T450] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 27.946824][ T450] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 27.955460][ T450] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 27.964029][ T450] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 27.972616][ T450] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 27.981194][ T450] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 28.025967][ T450] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 28.056598][ T447] exFAT-fs (loop2): hint_cluster is invalid (17) [ 28.067013][ T446] loop1: detected capacity change from 0 to 8192 [ 28.115517][ T448] syz.3.39 (448) used greatest stack depth: 21696 bytes left [ 28.123620][ T446] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 28.165093][ T457] loop3: detected capacity change from 0 to 256 [ 28.252010][ T457] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 28.381220][ T461] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 28.389990][ T461] FAT-fs (loop1): Filesystem has been set read-only [ 28.396660][ T461] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 28.405317][ T461] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 28.413998][ T461] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 28.422594][ T461] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 28.431164][ T461] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 28.439754][ T461] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 28.448342][ T461] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 28.456942][ T461] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 28.465553][ T461] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 28.581557][ T457] exFAT-fs (loop3): hint_cluster is invalid (17) [ 28.608449][ T466] device vti0 entered promiscuous mode [ 29.056492][ T471] loop3: detected capacity change from 0 to 256 [ 29.196869][ T480] loop2: detected capacity change from 0 to 256 [ 29.221060][ T480] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 29.252168][ T480] exFAT-fs (loop2): hint_cluster is invalid (17) [ 29.659006][ T488] loop0: detected capacity change from 0 to 256 [ 29.744128][ T493] loop4: detected capacity change from 0 to 8192 [ 29.764051][ T493] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 30.019770][ T504] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 30.028746][ T504] FAT-fs (loop4): Filesystem has been set read-only [ 30.036008][ T504] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 30.044912][ T504] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 30.053699][ T504] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 30.062504][ T504] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 30.071298][ T504] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 30.079994][ T504] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 30.088638][ T504] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 30.097442][ T504] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 30.106326][ T504] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 31.324682][ T30] kauditd_printk_skb: 343 callbacks suppressed [ 31.324699][ T30] audit: type=1326 audit(1732186564.282:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=487 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3ffd0819 code=0x7fc00000 [ 31.398438][ T30] audit: type=1326 audit(1732186564.362:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=487 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f1d3ffd0819 code=0x7fc00000 [ 31.421814][ T30] audit: type=1400 audit(1732186564.402:569): avc: denied { read write } for pid=509 comm="syz.1.56" name="raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.444832][ T30] audit: type=1400 audit(1732186564.402:570): avc: denied { open } for pid=509 comm="syz.1.56" path="/dev/raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.445496][ T512] loop3: detected capacity change from 0 to 8192 [ 31.528690][ T514] loop2: detected capacity change from 0 to 8192 [ 31.547574][ T512] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 31.567116][ T514] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 31.577456][ T516] loop4: detected capacity change from 0 to 8192 [ 31.625543][ T30] audit: type=1326 audit(1732186564.632:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=519 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3ffd0819 code=0x7ffc0000 [ 31.686075][ T520] loop0: detected capacity change from 0 to 256 [ 31.692601][ T30] audit: type=1326 audit(1732186564.632:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=519 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3ffd0819 code=0x7ffc0000 [ 31.709712][ T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.726782][ T30] audit: type=1326 audit(1732186564.692:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=519 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1d3ffd0819 code=0x7ffc0000 [ 31.750018][ T30] audit: type=1326 audit(1732186564.692:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=519 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3ffd0819 code=0x7ffc0000 [ 31.754010][ T516] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 31.773417][ T30] audit: type=1326 audit(1732186564.692:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=519 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1d3ffd0819 code=0x7ffc0000 [ 31.825635][ T512] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 31.834276][ T512] FAT-fs (loop3): Filesystem has been set read-only [ 31.840776][ T512] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 31.849305][ T512] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 31.857857][ T512] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 31.866464][ T512] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 31.875063][ T512] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 31.883753][ T512] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 31.892326][ T512] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 31.900925][ T512] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 31.909516][ T512] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 32.049337][ T522] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 32.058104][ T522] FAT-fs (loop2): Filesystem has been set read-only [ 32.065839][ T522] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 32.074703][ T522] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 32.083524][ T522] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 32.092347][ T522] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 32.101152][ T522] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 32.109903][ T522] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 32.118504][ T522] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 32.127320][ T522] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 32.135885][ T522] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 32.208200][ T30] audit: type=1326 audit(1732186564.692:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=519 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3ffd0819 code=0x7ffc0000 [ 32.776752][ T527] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 32.785472][ T527] FAT-fs (loop4): Filesystem has been set read-only [ 32.792978][ T527] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 32.801832][ T527] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 32.810647][ T527] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 32.819541][ T527] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 32.828534][ T527] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 32.837325][ T527] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 32.846146][ T527] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 32.854957][ T527] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 32.863883][ T527] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 32.957968][ T529] loop3: detected capacity change from 0 to 8192 [ 32.989036][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 33.000249][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.010047][ T26] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 33.019015][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.028040][ T26] usb 2-1: config 0 descriptor?? [ 33.044801][ T39] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 33.052996][ T529] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.063863][ T39] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 33.099756][ T529] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 33.108406][ T529] FAT-fs (loop3): Filesystem has been set read-only [ 33.114879][ T529] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 33.123401][ T529] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 33.132052][ T529] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 33.140718][ T529] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 33.149740][ T529] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 33.158375][ T529] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 33.166997][ T529] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 33.175603][ T529] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 33.184168][ T529] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 33.341696][ T549] loop3: detected capacity change from 0 to 256 [ 33.555790][ T26] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 33.635453][ T26] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 33.724394][ T26] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 33.731774][ T26] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 33.748098][ T26] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 33.779244][ T26] hid-steam 0003:28DE:1102.0003: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 33.784193][ T554] loop4: detected capacity change from 0 to 8192 [ 33.817547][ T26] usb 2-1: USB disconnect, device number 2 [ 33.840158][ T554] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.934695][ T554] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 33.943604][ T554] FAT-fs (loop4): Filesystem has been set read-only [ 33.950075][ T554] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 33.958768][ T554] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 33.967537][ T554] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 33.976118][ T554] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 33.984770][ T554] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 33.993434][ T554] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 34.002036][ T554] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 34.010613][ T554] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 34.019218][ T554] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 34.301026][ T350] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.317426][ T350] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 34.710558][ T576] loop2: detected capacity change from 0 to 256 [ 34.776718][ T567] loop1: detected capacity change from 0 to 8192 [ 34.811651][ T576] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 34.831541][ T574] loop3: detected capacity change from 0 to 8192 [ 34.843390][ T576] exFAT-fs (loop2): hint_cluster is invalid (17) [ 34.862430][ T574] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.870753][ T567] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.397377][ T578] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 35.406036][ T578] FAT-fs (loop3): Filesystem has been set read-only [ 35.412507][ T578] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 35.421042][ T578] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 35.429618][ T578] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 35.438192][ T578] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 35.446808][ T578] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 35.455596][ T578] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 35.464302][ T578] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 35.473053][ T578] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 35.481652][ T578] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 35.855088][ T582] loop0: detected capacity change from 0 to 8192 [ 35.894754][ T582] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.011995][ T582] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 36.020855][ T582] FAT-fs (loop0): Filesystem has been set read-only [ 36.027300][ T582] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 36.035918][ T582] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 36.044475][ T582] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 36.053084][ T582] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 36.061728][ T582] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 36.070426][ T582] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 36.079177][ T582] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 36.087732][ T582] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 36.096408][ T582] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 36.856239][ T606] loop4: detected capacity change from 0 to 8192 [ 36.903828][ T606] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.942004][ T606] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 36.950672][ T606] FAT-fs (loop4): Filesystem has been set read-only [ 36.957352][ T606] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 36.966032][ T606] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 36.974589][ T606] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 36.983194][ T606] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 36.991814][ T606] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 37.000613][ T606] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 37.009349][ T606] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 37.018129][ T606] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 37.026974][ T606] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 37.139515][ T609] loop3: detected capacity change from 0 to 256 [ 37.196027][ T609] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 37.211121][ T609] exFAT-fs (loop3): hint_cluster is invalid (17) [ 37.236763][ T30] kauditd_printk_skb: 123 callbacks suppressed [ 37.236778][ T30] audit: type=1326 audit(1732186570.242:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 37.248744][ T612] loop4: detected capacity change from 0 to 256 [ 37.272883][ T350] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 37.294378][ T30] audit: type=1326 audit(1732186570.242:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 37.318005][ T30] audit: type=1326 audit(1732186570.242:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 37.341378][ T30] audit: type=1326 audit(1732186570.252:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 37.387351][ T30] audit: type=1326 audit(1732186570.252:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 37.462807][ T30] audit: type=1326 audit(1732186570.252:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 37.489031][ T30] audit: type=1326 audit(1732186570.252:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 37.512525][ T30] audit: type=1326 audit(1732186570.252:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 37.535885][ T30] audit: type=1326 audit(1732186570.252:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5e30a7b853 code=0x7ffc0000 [ 37.560061][ T30] audit: type=1326 audit(1732186570.252:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5e30a7a2ff code=0x7ffc0000 [ 37.679057][ T350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 37.700260][ T350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.745881][ T350] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 37.757126][ T620] overlayfs: failed to resolve './file0': -2 [ 37.778203][ T350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.810382][ T350] usb 3-1: config 0 descriptor?? [ 38.040228][ T627] loop0: detected capacity change from 0 to 1024 [ 38.129643][ T629] fuse: Bad value for 'group_id' [ 38.179470][ T627] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.92: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 38.224686][ T627] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.92: couldn't read orphan inode 11 (err -117) [ 38.279972][ T627] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 38.330258][ T350] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 38.351556][ T350] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 38.375961][ T350] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 38.404976][ T350] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 38.436521][ T350] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 38.496639][ T350] hid-steam 0003:28DE:1102.0005: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 38.545992][ T350] usb 3-1: USB disconnect, device number 2 [ 38.551734][ T634] fuse: Bad value for 'fd' [ 38.604369][ T636] loop4: detected capacity change from 0 to 256 [ 38.914778][ T641] loop1: detected capacity change from 0 to 256 [ 39.022078][ T641] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 39.044057][ T645] overlayfs: failed to resolve './file0': -2 [ 39.073241][ T641] exFAT-fs (loop1): hint_cluster is invalid (17) [ 39.239135][ T648] loop2: detected capacity change from 0 to 8192 [ 39.251476][ T650] loop3: detected capacity change from 0 to 8192 [ 39.330701][ T648] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.350010][ T650] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.596749][ T662] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 39.605411][ T662] FAT-fs (loop2): Filesystem has been set read-only [ 39.612161][ T662] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 39.620838][ T662] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 39.629410][ T662] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 39.637973][ T662] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 39.646597][ T662] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 39.655201][ T662] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 39.664146][ T662] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 39.672730][ T662] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 39.729106][ T662] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 39.825177][ T667] loop1: detected capacity change from 0 to 256 [ 39.844086][ T671] loop2: detected capacity change from 0 to 1024 [ 39.852236][ T672] loop4: detected capacity change from 0 to 1024 [ 39.937382][ T671] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.106: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 39.955912][ T672] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.108: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 40.030181][ T671] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.106: couldn't read orphan inode 11 (err -117) [ 40.062455][ T672] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.108: couldn't read orphan inode 11 (err -117) [ 40.095720][ T671] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 40.122108][ T672] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 40.145574][ T680] overlayfs: failed to resolve './file0': -2 [ 40.291425][ T685] loop4: detected capacity change from 0 to 8192 [ 40.310969][ T685] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.372082][ T687] loop2: detected capacity change from 0 to 8192 [ 40.477155][ T687] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.341554][ T706] loop0: detected capacity change from 0 to 256 [ 41.383688][ T706] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 41.394693][ T710] overlayfs: failed to resolve './file0': -2 [ 41.429217][ T706] exFAT-fs (loop0): hint_cluster is invalid (17) [ 41.676580][ T721] overlayfs: missing 'lowerdir' [ 41.742686][ T719] overlayfs: failed to resolve './file0': -2 [ 42.105197][ T724] loop1: detected capacity change from 0 to 1024 [ 42.187287][ T724] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.123: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 42.236403][ T724] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.123: couldn't read orphan inode 11 (err -117) [ 42.263989][ T30] kauditd_printk_skb: 432 callbacks suppressed [ 42.264005][ T30] audit: type=1326 audit(1732186575.272:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=731 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffae91d3819 code=0x7ffc0000 [ 42.300432][ T732] loop2: detected capacity change from 0 to 256 [ 42.319905][ T30] audit: type=1326 audit(1732186575.302:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=731 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffae91d3819 code=0x7ffc0000 [ 42.343248][ T30] audit: type=1326 audit(1732186575.302:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=731 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffae91d3819 code=0x7ffc0000 [ 42.366672][ T30] audit: type=1326 audit(1732186575.302:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=731 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffae91d3819 code=0x7ffc0000 [ 42.393660][ T724] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 42.431125][ T734] loop4: detected capacity change from 0 to 256 [ 42.435383][ T30] audit: type=1326 audit(1732186575.302:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=731 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffae91d3819 code=0x7ffc0000 [ 42.464564][ T30] audit: type=1326 audit(1732186575.302:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=731 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffae91d3819 code=0x7ffc0000 [ 42.487909][ T30] audit: type=1326 audit(1732186575.302:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=731 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffae91d3819 code=0x7ffc0000 [ 42.511695][ T83] audit: audit_backlog=65 > audit_backlog_limit=64 [ 42.512165][ T30] audit: type=1326 audit(1732186575.302:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=731 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffae91d3819 code=0x7ffc0000 [ 42.518020][ T83] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 42.670720][ T739] loop1: detected capacity change from 0 to 8192 [ 42.750121][ T739] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.218507][ T747] loop0: detected capacity change from 0 to 8192 [ 43.313596][ T751] loop2: detected capacity change from 0 to 8192 [ 43.319338][ T747] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.400830][ T751] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.578863][ T751] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 43.587515][ T751] FAT-fs (loop2): Filesystem has been set read-only [ 43.594012][ T751] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 43.602546][ T751] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 43.611245][ T751] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 43.619822][ T751] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 43.628390][ T751] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 43.637005][ T751] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 43.645589][ T751] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 43.654187][ T751] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 43.662851][ T751] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 43.705864][ T757] device syzkaller0 entered promiscuous mode [ 43.707340][ T759] overlayfs: failed to resolve './file0': -2 [ 43.712733][ T757] FAULT_INJECTION: forcing a failure. [ 43.712733][ T757] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.731307][ T757] CPU: 0 PID: 757 Comm: syz.4.133 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 43.740857][ T757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 43.750757][ T757] Call Trace: [ 43.753898][ T757] [ 43.756649][ T757] dump_stack_lvl+0x151/0x1c0 [ 43.761284][ T757] ? io_uring_drop_tctx_refs+0x190/0x190 [ 43.766855][ T757] ? __kasan_check_write+0x14/0x20 [ 43.771801][ T757] ? __alloc_skb+0x355/0x550 [ 43.776227][ T757] dump_stack+0x15/0x20 [ 43.780826][ T757] should_fail+0x3c6/0x510 [ 43.785080][ T757] should_fail_usercopy+0x1a/0x20 [ 43.789940][ T757] _copy_from_iter+0x22f/0xdc0 [ 43.794541][ T757] ? copy_mc_pipe_to_iter+0x760/0x760 [ 43.799750][ T757] ? __check_object_size+0x2ec/0x3d0 [ 43.804868][ T757] skb_copy_datagram_from_iter+0x100/0x6d0 [ 43.810509][ T757] tun_get_user+0x112d/0x3aa0 [ 43.815021][ T757] ? putname+0xfa/0x150 [ 43.819014][ T757] ? __x64_sys_openat+0x210/0x290 [ 43.823879][ T757] ? x64_sys_call+0x6bf/0x9a0 [ 43.828394][ T757] ? _kstrtoull+0x3a0/0x4a0 [ 43.832734][ T757] ? tun_do_read+0x2010/0x2010 [ 43.837322][ T757] ? kstrtouint_from_user+0x20a/0x2a0 [ 43.842706][ T757] ? kstrtol_from_user+0x310/0x310 [ 43.847659][ T757] ? avc_policy_seqno+0x1b/0x70 [ 43.852339][ T757] ? selinux_file_permission+0x2c4/0x570 [ 43.857809][ T757] tun_chr_write_iter+0x1e1/0x2e0 [ 43.862774][ T757] vfs_write+0xd5d/0x1110 [ 43.866946][ T757] ? putname+0xfa/0x150 [ 43.870933][ T757] ? file_end_write+0x1c0/0x1c0 [ 43.875620][ T757] ? __fdget_pos+0x209/0x3a0 [ 43.880043][ T757] ? ksys_write+0x77/0x2c0 [ 43.884297][ T757] ksys_write+0x199/0x2c0 [ 43.888464][ T757] ? __ia32_sys_read+0x90/0x90 [ 43.893064][ T757] ? debug_smp_processor_id+0x17/0x20 [ 43.898271][ T757] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 43.904174][ T757] __x64_sys_write+0x7b/0x90 [ 43.908602][ T757] x64_sys_call+0x2f/0x9a0 [ 43.912851][ T757] do_syscall_64+0x3b/0xb0 [ 43.917105][ T757] ? clear_bhb_loop+0x35/0x90 [ 43.921618][ T757] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 43.927346][ T757] RIP: 0033:0x7f5e30a7b819 [ 43.931603][ T757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.951297][ T757] RSP: 002b:00007f5e2f0f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.959696][ T757] RAX: ffffffffffffffda RBX: 00007f5e30c32fa0 RCX: 00007f5e30a7b819 [ 43.967505][ T757] RDX: 0000000000000012 RSI: 00000000200000c0 RDI: 0000000000000003 [ 43.975318][ T757] RBP: 00007f5e2f0f4090 R08: 0000000000000000 R09: 0000000000000000 [ 43.983218][ T757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.991027][ T757] R13: 0000000000000000 R14: 00007f5e30c32fa0 R15: 00007ffd6087ef88 [ 43.998842][ T757] [ 44.108325][ T763] loop1: detected capacity change from 0 to 8192 [ 44.167134][ T765] loop2: detected capacity change from 0 to 8192 [ 44.220290][ T763] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.296437][ T39] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 44.307148][ T765] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.589000][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 44.729390][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.778877][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.833073][ T39] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 44.860512][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.886360][ T39] usb 4-1: config 0 descriptor?? [ 45.135097][ T782] loop0: detected capacity change from 0 to 512 [ 45.140535][ T778] loop2: detected capacity change from 0 to 8192 [ 45.182430][ T782] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.199344][ T778] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.230871][ T782] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #3: comm syz.0.142: corrupted inode contents [ 45.243336][ T782] EXT4-fs error (device loop0): ext4_dirty_inode:6038: inode #3: comm syz.0.142: mark_inode_dirty error [ 45.255155][ T782] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #3: comm syz.0.142: corrupted inode contents [ 45.266999][ T782] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.142: mark_inode_dirty error [ 45.278870][ T782] EXT4-fs error (device loop0): ext4_acquire_dquot:6187: comm syz.0.142: Failed to acquire dquot type 0 [ 45.291923][ T782] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.142: corrupted inode contents [ 45.320270][ T782] EXT4-fs error (device loop0): ext4_dirty_inode:6038: inode #16: comm syz.0.142: mark_inode_dirty error [ 45.333744][ T782] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.142: corrupted inode contents [ 45.345721][ T782] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.142: mark_inode_dirty error [ 45.357298][ T782] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.142: corrupted inode contents [ 45.369404][ T782] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 45.379961][ T39] appleir 0003:05AC:8241.0006: unknown main item tag 0x0 [ 45.386834][ T39] appleir 0003:05AC:8241.0006: unknown main item tag 0x0 [ 45.393978][ T782] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.142: corrupted inode contents [ 45.412731][ T782] EXT4-fs error (device loop0): ext4_truncate:4303: inode #16: comm syz.0.142: mark_inode_dirty error [ 45.423875][ T39] appleir 0003:05AC:8241.0006: unknown main item tag 0x0 [ 45.432673][ T796] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 45.441324][ T796] FAT-fs (loop2): Filesystem has been set read-only [ 45.447737][ T796] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 45.456306][ T796] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 45.464891][ T796] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 45.473486][ T796] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 45.482078][ T796] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 45.490688][ T796] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 45.499372][ T796] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 45.507925][ T796] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 45.516536][ T796] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 45.526535][ T39] appleir 0003:05AC:8241.0006: unknown main item tag 0x0 [ 45.535687][ T782] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 45.543337][ T797] loop1: detected capacity change from 0 to 512 [ 45.544818][ T39] appleir 0003:05AC:8241.0006: unknown main item tag 0x0 [ 45.551455][ T782] EXT4-fs (loop0): 1 truncate cleaned up [ 45.557664][ T39] appleir 0003:05AC:8241.0006: No inputs registered, leaving [ 45.563069][ T782] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 45.572300][ T39] appleir 0003:05AC:8241.0006: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 45.581406][ T782] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.603254][ T577] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 45.634280][ T782] syz.0.142 (782) used greatest stack depth: 20344 bytes left [ 45.643188][ T292] EXT4-fs warning (device loop0): ext4_dirblock_csum_set:427: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 45.658808][ T292] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5834: Out of memory [ 45.667994][ T292] EXT4-fs error (device loop0): __ext4_unlink:3325: inode #2: comm syz-executor: mark_inode_dirty error [ 45.679213][ T797] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 45.689862][ T6] usb 4-1: USB disconnect, device number 2 [ 45.713791][ T797] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.146: bg 0: block 248: padding at end of block bitmap is not set [ 45.728229][ T797] EXT4-fs error (device loop1): ext4_acquire_dquot:6187: comm syz.1.146: Failed to acquire dquot type 1 [ 45.739933][ T797] EXT4-fs (loop1): 1 truncate cleaned up [ 45.745405][ T797] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,,errors=continue. Quota mode: writeback. [ 45.758302][ T797] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.759251][ T292] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5834: Out of memory [ 45.779983][ T292] EXT4-fs error (device loop0): ext4_dirty_inode:6038: inode #2: comm syz-executor: mark_inode_dirty error [ 45.792737][ T292] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5834: Out of memory [ 45.802093][ T292] EXT4-fs error (device loop0): ext4_quota_off:6476: inode #3: comm syz-executor: mark_inode_dirty error [ 45.813420][ T797] syz.1.146 (797) used greatest stack depth: 19824 bytes left [ 45.813960][ T292] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5834: Out of memory [ 45.829922][ T292] EXT4-fs error (device loop0): ext4_quota_off:6476: inode #4: comm syz-executor: mark_inode_dirty error [ 46.013383][ T810] loop2: detected capacity change from 0 to 256 [ 46.023437][ T804] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.030436][ T804] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.037663][ T804] device bridge_slave_0 entered promiscuous mode [ 46.046507][ T804] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.053393][ T804] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.063137][ T804] device bridge_slave_1 entered promiscuous mode [ 46.190722][ T804] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.197606][ T804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.204715][ T804] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.211496][ T804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.239203][ T577] usb 5-1: New USB device found, idVendor=0421, idProduct=0128, bcdDevice=a6.84 [ 46.248674][ T577] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.258543][ T577] usb 5-1: Product: syz [ 46.262634][ T577] usb 5-1: Manufacturer: syz [ 46.273145][ T577] usb 5-1: SerialNumber: syz [ 46.279560][ T577] usb 5-1: config 0 descriptor?? [ 46.295172][ T821] device syzkaller0 entered promiscuous mode [ 46.301871][ T821] FAULT_INJECTION: forcing a failure. [ 46.301871][ T821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.317934][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.325104][ T821] CPU: 1 PID: 821 Comm: syz.3.155 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 46.329648][ T577] rndis_host: probe of 5-1:0.0 failed with error -22 [ 46.334635][ T821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 46.334649][ T821] Call Trace: [ 46.334655][ T821] [ 46.334662][ T821] dump_stack_lvl+0x151/0x1c0 [ 46.352945][ T577] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 46.354165][ T821] ? io_uring_drop_tctx_refs+0x190/0x190 [ 46.356953][ T577] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 46.361540][ T821] ? __kasan_check_write+0x14/0x20 [ 46.361564][ T821] ? __alloc_skb+0x355/0x550 [ 46.380347][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.380898][ T821] dump_stack+0x15/0x20 [ 46.386334][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.390270][ T821] should_fail+0x3c6/0x510 [ 46.390294][ T821] should_fail_usercopy+0x1a/0x20 [ 46.419106][ T821] _copy_from_iter+0x22f/0xdc0 [ 46.423705][ T821] ? copy_mc_pipe_to_iter+0x760/0x760 [ 46.428909][ T821] ? __check_object_size+0x2ec/0x3d0 [ 46.429348][ T577] cdc_acm: probe of 5-1:0.0 failed with error -22 [ 46.434027][ T821] skb_copy_datagram_from_iter+0x100/0x6d0 [ 46.434057][ T821] tun_get_user+0x112d/0x3aa0 [ 46.450436][ T821] ? putname+0xfa/0x150 [ 46.454421][ T821] ? __x64_sys_openat+0x210/0x290 [ 46.459283][ T821] ? x64_sys_call+0x6bf/0x9a0 [ 46.463803][ T821] ? _kstrtoull+0x3a0/0x4a0 [ 46.468140][ T821] ? tun_do_read+0x2010/0x2010 [ 46.472741][ T821] ? kstrtouint_from_user+0x20a/0x2a0 [ 46.477943][ T821] ? kstrtol_from_user+0x310/0x310 [ 46.482897][ T821] ? avc_policy_seqno+0x1b/0x70 [ 46.487577][ T821] ? selinux_file_permission+0x2c4/0x570 [ 46.493050][ T821] tun_chr_write_iter+0x1e1/0x2e0 [ 46.498002][ T821] vfs_write+0xd5d/0x1110 [ 46.502170][ T821] ? putname+0xfa/0x150 [ 46.506164][ T821] ? file_end_write+0x1c0/0x1c0 [ 46.510841][ T821] ? __fdget_pos+0x209/0x3a0 [ 46.515263][ T821] ? ksys_write+0x77/0x2c0 [ 46.519517][ T821] ksys_write+0x199/0x2c0 [ 46.523687][ T821] ? __ia32_sys_read+0x90/0x90 [ 46.528282][ T821] ? debug_smp_processor_id+0x17/0x20 [ 46.533505][ T821] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 46.539395][ T821] __x64_sys_write+0x7b/0x90 [ 46.543820][ T821] x64_sys_call+0x2f/0x9a0 [ 46.548071][ T821] do_syscall_64+0x3b/0xb0 [ 46.552325][ T821] ? clear_bhb_loop+0x35/0x90 [ 46.556840][ T821] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.562568][ T821] RIP: 0033:0x7f7626d15819 [ 46.566820][ T821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.586265][ T821] RSP: 002b:00007f762538e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 46.594513][ T821] RAX: ffffffffffffffda RBX: 00007f7626eccfa0 RCX: 00007f7626d15819 [ 46.602319][ T821] RDX: 0000000000000012 RSI: 00000000200000c0 RDI: 0000000000000003 [ 46.610126][ T821] RBP: 00007f762538e090 R08: 0000000000000000 R09: 0000000000000000 [ 46.617940][ T821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.625756][ T821] R13: 0000000000000000 R14: 00007f7626eccfa0 R15: 00007ffef12a9498 [ 46.633567][ T821] [ 46.648392][ T45] device bridge_slave_1 left promiscuous mode [ 46.657901][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.665525][ T45] device bridge_slave_0 left promiscuous mode [ 46.671693][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.679958][ T45] device veth1_macvtap left promiscuous mode [ 46.685853][ T45] device veth0_vlan left promiscuous mode [ 46.808742][ T827] loop2: detected capacity change from 0 to 8192 [ 46.849180][ T39] usb 5-1: USB disconnect, device number 3 [ 46.854890][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.862997][ T827] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.869221][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.899378][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.918077][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.951423][ T804] device veth0_vlan entered promiscuous mode [ 46.972779][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.982489][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.991217][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.999164][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.014820][ T804] device veth1_macvtap entered promiscuous mode [ 47.025578][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.036002][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.043887][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.060410][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.075923][ T831] fuse: Bad value for 'rootmode' [ 47.081590][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.101226][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.129846][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.144588][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.153552][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.256083][ T839] overlayfs: failed to resolve './file0': -2 [ 47.269128][ T30] kauditd_printk_skb: 319 callbacks suppressed [ 47.269143][ T30] audit: type=1326 audit(1732186580.282:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=838 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 47.324102][ T837] loop1: detected capacity change from 0 to 8192 [ 47.342489][ T30] audit: type=1326 audit(1732186580.312:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=838 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 47.394766][ T837] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.399699][ T843] loop5: detected capacity change from 0 to 8192 [ 47.417387][ T30] audit: type=1326 audit(1732186580.312:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=838 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 47.477065][ T848] loop4: detected capacity change from 0 to 8192 [ 47.483517][ T30] audit: type=1326 audit(1732186580.312:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=838 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 47.507510][ T30] audit: type=1326 audit(1732186580.312:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=838 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 47.534422][ T843] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.539901][ T851] binder: BINDER_SET_CONTEXT_MGR already set [ 47.561002][ T848] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.611055][ T851] binder: 850:851 ioctl 4018620d 20000040 returned -16 [ 47.625211][ T30] audit: type=1326 audit(1732186580.312:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=838 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 47.685253][ T30] audit: type=1326 audit(1732186580.312:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=838 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 47.709095][ T30] audit: type=1326 audit(1732186580.312:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=838 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 47.770810][ T30] audit: type=1326 audit(1732186580.312:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=838 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 48.086926][ T30] audit: type=1400 audit(1732186580.542:1473): avc: denied { map } for pid=850 comm="syz.3.164" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.200395][ T861] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 48.200428][ T861] FAT-fs (loop5): Filesystem has been set read-only [ 48.200474][ T861] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 48.200497][ T861] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 48.200518][ T861] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 48.200538][ T861] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 48.200558][ T861] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 48.200578][ T861] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 48.200598][ T861] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 48.200618][ T861] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 48.200639][ T861] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 48.441827][ T866] loop3: detected capacity change from 0 to 256 [ 48.504412][ T869] loop5: detected capacity change from 0 to 1024 [ 48.567164][ T869] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz.5.167: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 48.585973][ T869] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.167: couldn't read orphan inode 11 (err -117) [ 48.610848][ T869] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 48.625677][ T875] loop2: detected capacity change from 0 to 1024 [ 48.698465][ T875] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.168: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 48.717186][ T875] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.168: couldn't read orphan inode 11 (err -117) [ 48.741093][ T875] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 48.873315][ T888] overlayfs: failed to resolve './file0': -2 [ 49.289213][ T39] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 49.343799][ T916] 9pnet: Insufficient options for proto=fd [ 49.369107][ T431] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 49.394715][ T924] overlayfs: failed to resolve './file0': -2 [ 49.528965][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 49.554881][ T934] loop4: detected capacity change from 0 to 8192 [ 49.565129][ T934] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.661441][ T431] usb 3-1: device descriptor read/64, error -71 [ 49.669157][ T39] usb 2-1: config 204 has too many interfaces: 217, using maximum allowed: 32 [ 49.678019][ T39] usb 2-1: config 204 has an invalid descriptor of length 227, skipping remainder of the config [ 49.688351][ T39] usb 2-1: config 204 has 0 interfaces, different from the descriptor's value: 217 [ 49.697442][ T39] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 49.706320][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.025427][ T6] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 50.156295][ T948] loop5: detected capacity change from 0 to 1024 [ 50.190315][ T948] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz.5.195: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 50.190648][ T904] loop1: detected capacity change from 0 to 512 [ 50.209243][ T948] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.195: couldn't read orphan inode 11 (err -117) [ 50.227064][ T948] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 50.249481][ T904] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 50.257378][ T904] System zones: 0-2, 18-18, 34-35 [ 50.262968][ T904] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 50.278970][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 50.285431][ T577] kernel write not supported for file /112/attr/fscreate (pid: 577 comm: kworker/0:5) [ 50.296011][ T904] UDC core: couldn't find an available UDC or it's busy: -16 [ 50.303441][ T904] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 50.319107][ T431] usb 3-1: device descriptor read/64, error -71 [ 50.353982][ T955] loop5: detected capacity change from 0 to 256 [ 50.409049][ T6] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 50.417141][ T6] usb 4-1: config 0 has no interface number 0 [ 50.499458][ T957] 9pnet: Insufficient options for proto=fd [ 50.527500][ T960] overlayfs: failed to resolve './file0': -2 [ 50.558992][ T39] usb 2-1: string descriptor 0 read error: -71 [ 50.572801][ T39] usb 2-1: USB disconnect, device number 3 [ 50.631365][ T431] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 50.669083][ T6] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 50.677987][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.685847][ T6] usb 4-1: Product: syz [ 50.689774][ T6] usb 4-1: Manufacturer: syz [ 50.694239][ T6] usb 4-1: SerialNumber: syz [ 50.705837][ T6] usb 4-1: config 0 descriptor?? [ 50.928985][ T431] usb 3-1: device descriptor read/64, error -71 [ 50.954466][ T6] usb 4-1: USB disconnect, device number 3 [ 51.131562][ T969] loop1: detected capacity change from 0 to 8192 [ 51.189894][ T969] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.422891][ T974] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 51.431549][ T974] FAT-fs (loop1): Filesystem has been set read-only [ 51.438261][ T974] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 51.446964][ T974] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 51.455611][ T974] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 51.464220][ T974] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 51.472822][ T974] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 51.481387][ T974] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 51.490063][ T974] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 51.498641][ T974] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 51.507315][ T974] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 51.523160][ T431] usb 3-1: device descriptor read/64, error -71 [ 51.659434][ T431] usb usb3-port1: attempt power cycle [ 51.726255][ T987] overlayfs: failed to resolve './file0': -2 [ 51.737842][ T992] 9pnet: Insufficient options for proto=fd [ 51.789598][ T998] loop3: detected capacity change from 0 to 8192 [ 51.797831][ T999] loop1: detected capacity change from 0 to 256 [ 51.845708][ T999] FAT-fs (loop1): Directory bread(block 64) failed [ 51.853027][ T999] FAT-fs (loop1): Directory bread(block 65) failed [ 51.861083][ T998] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.867672][ T999] FAT-fs (loop1): Directory bread(block 66) failed [ 51.877920][ T999] FAT-fs (loop1): Directory bread(block 67) failed [ 51.884503][ T999] FAT-fs (loop1): Directory bread(block 68) failed [ 51.890870][ T999] FAT-fs (loop1): Directory bread(block 69) failed [ 51.897194][ T999] FAT-fs (loop1): Directory bread(block 70) failed [ 51.906364][ T999] FAT-fs (loop1): Directory bread(block 71) failed [ 51.912893][ T999] FAT-fs (loop1): Directory bread(block 72) failed [ 51.919457][ T999] FAT-fs (loop1): Directory bread(block 73) failed [ 51.945239][ T350] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 51.974556][ T999] attempt to access beyond end of device [ 51.974556][ T999] loop1: rw=2049, want=1228, limit=256 [ 52.019031][ T39] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.105437][ T1003] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 52.114108][ T1003] FAT-fs (loop3): Filesystem has been set read-only [ 52.120843][ T1003] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 52.129500][ T1003] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 52.138084][ T1003] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 52.146707][ T1003] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 52.155309][ T1003] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 52.163968][ T1003] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 52.172571][ T1003] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 52.181159][ T1003] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 52.189785][ T1003] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 52.259662][ T431] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 52.269853][ T1002] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1002 comm=syz.1.214 [ 52.300818][ T1007] loop1: detected capacity change from 0 to 256 [ 52.339244][ T30] kauditd_printk_skb: 494 callbacks suppressed [ 52.339261][ T30] audit: type=1400 audit(1732186585.352:1968): avc: denied { remount } for pid=1006 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.419000][ T39] usb 6-1: Using ep0 maxpacket: 8 [ 52.429053][ T431] usb 3-1: device descriptor read/8, error -71 [ 52.437963][ T30] audit: type=1400 audit(1732186585.442:1969): avc: denied { create } for pid=1006 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.458947][ T30] audit: type=1400 audit(1732186585.472:1970): avc: denied { connect } for pid=1006 comm="syz.1.215" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.479349][ T30] audit: type=1400 audit(1732186585.492:1971): avc: denied { write } for pid=1006 comm="syz.1.215" path="socket:[18142]" dev="sockfs" ino=18142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.529026][ T350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.539869][ T350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.549669][ T350] usb 5-1: New USB device found, idVendor=04b3, idProduct=3105, bcdDevice= 0.00 [ 52.558549][ T350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.568237][ T350] usb 5-1: config 0 descriptor?? [ 52.621032][ T350] usbhid 5-1:0.0: can't add hid device: -22 [ 52.626965][ T350] usbhid: probe of 5-1:0.0 failed with error -22 [ 52.720897][ T431] usb 3-1: device descriptor read/8, error -71 [ 52.819060][ T39] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 52.827983][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.835964][ T39] usb 6-1: Product: syz [ 52.840039][ T39] usb 6-1: Manufacturer: syz [ 52.844671][ T39] usb 6-1: SerialNumber: syz [ 52.985913][ T39] r8152-cfgselector 6-1: config 0 descriptor?? [ 53.009076][ T30] audit: type=1400 audit(1732186585.902:1972): avc: denied { create } for pid=1010 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.044093][ T30] audit: type=1400 audit(1732186585.912:1973): avc: denied { bind } for pid=1010 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.070162][ T30] audit: type=1400 audit(1732186585.912:1974): avc: denied { listen } for pid=1010 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.091155][ T30] audit: type=1400 audit(1732186585.922:1975): avc: denied { write } for pid=1010 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.110550][ T30] audit: type=1400 audit(1732186585.932:1976): avc: denied { accept } for pid=1010 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.196912][ T1016] UDC core: couldn't find an available UDC or it's busy: -16 [ 53.204342][ T1016] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 53.213359][ T30] audit: type=1400 audit(1732186586.222:1977): avc: denied { confidentiality } for pid=982 comm="syz.4.207" lockdown_reason="use of bpf to read kernel RAM" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 53.243666][ T1016] UDC core: couldn't find an available UDC or it's busy: -16 [ 53.250983][ T431] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 53.250992][ T1016] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 53.389004][ T431] usb 3-1: device descriptor read/8, error -71 [ 53.618883][ T1028] 9pnet: Insufficient options for proto=fd [ 53.639330][ T431] usb 3-1: device descriptor read/8, error -71 [ 53.667956][ T1030] overlayfs: failed to resolve './file0': -2 [ 53.748259][ T1035] loop3: detected capacity change from 0 to 8192 [ 53.759169][ T431] usb usb3-port1: unable to enumerate USB device [ 53.830050][ T1035] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.189152][ T39] r8152-cfgselector 6-1: Unknown version 0x0000 [ 54.198057][ T39] r8152-cfgselector 6-1: bad CDC descriptors [ 54.259018][ T39] r8152-cfgselector 6-1: Unknown version 0x0000 [ 54.271354][ T39] r8152-cfgselector 6-1: USB disconnect, device number 2 [ 54.276980][ T1043] loop1: detected capacity change from 0 to 256 [ 54.398985][ T431] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 54.436011][ T1049] FAULT_INJECTION: forcing a failure. [ 54.436011][ T1049] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 54.449149][ T1049] CPU: 0 PID: 1049 Comm: syz.1.229 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 54.458777][ T1049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 54.468680][ T1049] Call Trace: [ 54.471801][ T1049] [ 54.474680][ T1049] dump_stack_lvl+0x151/0x1c0 [ 54.479205][ T1049] ? io_uring_drop_tctx_refs+0x190/0x190 [ 54.484683][ T1049] ? arch_stack_walk+0xf3/0x140 [ 54.489350][ T1049] dump_stack+0x15/0x20 [ 54.493344][ T1049] should_fail+0x3c6/0x510 [ 54.497590][ T1049] should_fail_alloc_page+0x5a/0x80 [ 54.502627][ T1049] prepare_alloc_pages+0x15c/0x700 [ 54.507582][ T1049] ? __alloc_pages_bulk+0xe40/0xe40 [ 54.512609][ T1049] __alloc_pages+0x18c/0x8f0 [ 54.517030][ T1049] ? x64_sys_call+0x1b0/0x9a0 [ 54.521549][ T1049] ? prep_new_page+0x110/0x110 [ 54.526149][ T1049] __get_free_pages+0x10/0x30 [ 54.530661][ T1049] kasan_populate_vmalloc_pte+0x39/0x130 [ 54.536126][ T1049] ? __apply_to_page_range+0x8ca/0xbe0 [ 54.541507][ T1049] __apply_to_page_range+0x8dd/0xbe0 [ 54.546633][ T1049] ? kasan_populate_vmalloc+0x70/0x70 [ 54.551845][ T1049] ? kasan_populate_vmalloc+0x70/0x70 [ 54.557043][ T1049] apply_to_page_range+0x3b/0x50 [ 54.561816][ T1049] kasan_populate_vmalloc+0x65/0x70 [ 54.566853][ T1049] alloc_vmap_area+0x192f/0x1a80 [ 54.571626][ T1049] ? vm_map_ram+0xa90/0xa90 [ 54.575968][ T1049] ? kmem_cache_alloc_trace+0x115/0x210 [ 54.581455][ T1049] ? __get_vm_area_node+0x117/0x360 [ 54.586600][ T1049] __get_vm_area_node+0x158/0x360 [ 54.591448][ T1049] __vmalloc_node_range+0xe2/0x8d0 [ 54.596382][ T1049] ? copy_process+0x5c4/0x3290 [ 54.600982][ T1049] ? slab_post_alloc_hook+0x72/0x2c0 [ 54.606105][ T1049] ? dup_task_struct+0x53/0xc60 [ 54.610790][ T1049] ? dup_task_struct+0x53/0xc60 [ 54.615479][ T1049] dup_task_struct+0x416/0xc60 [ 54.620165][ T1049] ? copy_process+0x5c4/0x3290 [ 54.624894][ T1049] ? __kasan_check_write+0x14/0x20 [ 54.629837][ T1049] copy_process+0x5c4/0x3290 [ 54.634269][ T1049] ? __kasan_check_write+0x14/0x20 [ 54.639212][ T1049] ? selinux_file_permission+0x2c4/0x570 [ 54.644681][ T1049] ? proc_fail_nth_read+0x210/0x210 [ 54.649713][ T1049] ? fsnotify_perm+0x6a/0x5b0 [ 54.654229][ T1049] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 54.659178][ T1049] ? vfs_write+0x94d/0x1110 [ 54.663517][ T1049] kernel_clone+0x21e/0x9e0 [ 54.667875][ T1049] ? __kasan_check_write+0x14/0x20 [ 54.672803][ T1049] ? create_io_thread+0x1e0/0x1e0 [ 54.677662][ T1049] __x64_sys_clone+0x23f/0x290 [ 54.682264][ T1049] ? __do_sys_vfork+0x130/0x130 [ 54.686947][ T1049] ? debug_smp_processor_id+0x17/0x20 [ 54.692156][ T1049] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 54.698058][ T1049] ? exit_to_user_mode_prepare+0x39/0xa0 [ 54.703537][ T1049] x64_sys_call+0x1b0/0x9a0 [ 54.707865][ T1049] do_syscall_64+0x3b/0xb0 [ 54.712146][ T1049] ? clear_bhb_loop+0x35/0x90 [ 54.716628][ T1049] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 54.722358][ T1049] RIP: 0033:0x7f98a0478819 [ 54.726612][ T1049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.746142][ T1049] RSP: 002b:00007f989eaf0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 54.754386][ T1049] RAX: ffffffffffffffda RBX: 00007f98a062ffa0 RCX: 00007f98a0478819 [ 54.762197][ T1049] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.770102][ T1049] RBP: 00007f989eaf1090 R08: 0000000000000000 R09: 0000000000000000 [ 54.777919][ T1049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.785716][ T1049] R13: 0000000000000000 R14: 00007f98a062ffa0 R15: 00007ffe6e731368 [ 54.793660][ T1049] [ 54.797112][ T1049] syz.1.229: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 54.817572][ T1049] CPU: 1 PID: 1049 Comm: syz.1.229 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 54.827210][ T1049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 54.837100][ T1049] Call Trace: [ 54.840225][ T1049] [ 54.843009][ T1049] dump_stack_lvl+0x151/0x1c0 [ 54.847517][ T1049] ? io_uring_drop_tctx_refs+0x190/0x190 [ 54.853068][ T1049] ? pr_cont_kernfs_name+0xf0/0x100 [ 54.858106][ T1049] dump_stack+0x15/0x20 [ 54.862269][ T1049] warn_alloc+0x21a/0x390 [ 54.866437][ T1049] ? zone_watermark_ok_safe+0x270/0x270 [ 54.871818][ T1049] ? __get_vm_area_node+0x16e/0x360 [ 54.876964][ T1049] __vmalloc_node_range+0x2c1/0x8d0 [ 54.881996][ T1049] ? slab_post_alloc_hook+0x72/0x2c0 [ 54.887115][ T1049] ? dup_task_struct+0x53/0xc60 [ 54.891802][ T1049] ? dup_task_struct+0x53/0xc60 [ 54.896495][ T1049] dup_task_struct+0x416/0xc60 [ 54.901089][ T1049] ? copy_process+0x5c4/0x3290 [ 54.905690][ T1049] ? __kasan_check_write+0x14/0x20 [ 54.910639][ T1049] copy_process+0x5c4/0x3290 [ 54.915066][ T1049] ? __kasan_check_write+0x14/0x20 [ 54.920012][ T1049] ? selinux_file_permission+0x2c4/0x570 [ 54.925478][ T1049] ? proc_fail_nth_read+0x210/0x210 [ 54.930512][ T1049] ? fsnotify_perm+0x6a/0x5b0 [ 54.935026][ T1049] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 54.939969][ T1049] ? vfs_write+0x94d/0x1110 [ 54.944312][ T1049] kernel_clone+0x21e/0x9e0 [ 54.948649][ T1049] ? __kasan_check_write+0x14/0x20 [ 54.953599][ T1049] ? create_io_thread+0x1e0/0x1e0 [ 54.958460][ T1049] __x64_sys_clone+0x23f/0x290 [ 54.963406][ T1049] ? __do_sys_vfork+0x130/0x130 [ 54.968097][ T1049] ? debug_smp_processor_id+0x17/0x20 [ 54.973298][ T1049] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 54.979203][ T1049] ? exit_to_user_mode_prepare+0x39/0xa0 [ 54.984672][ T1049] x64_sys_call+0x1b0/0x9a0 [ 54.989008][ T1049] do_syscall_64+0x3b/0xb0 [ 54.993263][ T1049] ? clear_bhb_loop+0x35/0x90 [ 54.997774][ T1049] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 55.003504][ T1049] RIP: 0033:0x7f98a0478819 [ 55.007757][ T1049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.027372][ T1049] RSP: 002b:00007f989eaf0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 55.035617][ T1049] RAX: ffffffffffffffda RBX: 00007f98a062ffa0 RCX: 00007f98a0478819 [ 55.043427][ T1049] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.051241][ T1049] RBP: 00007f989eaf1090 R08: 0000000000000000 R09: 0000000000000000 [ 55.059053][ T1049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.066949][ T1049] R13: 0000000000000000 R14: 00007f98a062ffa0 R15: 00007ffe6e731368 [ 55.074764][ T1049] [ 55.078638][ T1049] Mem-Info: [ 55.081671][ T1049] active_anon:127 inactive_anon:7445 isolated_anon:0 [ 55.081671][ T1049] active_file:3634 inactive_file:3481 isolated_file:0 [ 55.081671][ T1049] unevictable:0 dirty:98 writeback:409 [ 55.081671][ T1049] slab_reclaimable:7980 slab_unreclaimable:70876 [ 55.081671][ T1049] mapped:31969 shmem:4125 pagetables:588 bounce:0 [ 55.081671][ T1049] kernel_misc_reclaimable:0 [ 55.081671][ T1049] free:1560195 free_pcp:17128 free_cma:0 [ 55.126601][ T1049] Node 0 active_anon:508kB inactive_anon:29780kB active_file:14536kB inactive_file:13924kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127876kB dirty:392kB writeback:136kB shmem:16500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4384kB pagetables:2352kB all_unreclaimable? no [ 55.157980][ T1049] DMA32 free:2974676kB min:62568kB low:78208kB high:93848kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2978968kB mlocked:0kB bounce:0kB free_pcp:4292kB local_pcp:4292kB free_cma:0kB [ 55.186809][ T1049] lowmem_reserve[]: 0 3941 3941 [ 55.191577][ T1049] Normal free:3265864kB min:84884kB low:106104kB high:127324kB reserved_highatomic:0KB active_anon:4908kB inactive_anon:25180kB active_file:14536kB inactive_file:13624kB unevictable:0kB writepending:448kB present:5242880kB managed:4035584kB mlocked:0kB bounce:0kB free_pcp:65596kB local_pcp:52348kB free_cma:0kB [ 55.233239][ T60] usb 5-1: USB disconnect, device number 4 [ 55.242152][ T1049] lowmem_reserve[]: 0 0 0 [ 55.247836][ T1049] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 723*4096kB (M) = 2974676kB [ 55.264043][ T1049] Normal: 194*4kB (UME) 160*8kB (UME) 108*16kB (UME) 246*32kB (UME) 92*64kB (UME) 54*128kB (UME) 12*256kB (UM) 5*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 788*4096kB (UM) = 3265928kB [ 55.282015][ T1049] 9659 total pagecache pages [ 55.286431][ T1049] 0 pages in swap cache [ 55.296358][ T350] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 55.305461][ T1049] Swap cache stats: add 0, delete 0, find 0/0 [ 55.316611][ T350] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 55.333137][ T1049] Free swap = 124996kB [ 55.339006][ T1049] Total swap = 124996kB [ 55.345435][ T1049] 2097051 pages RAM [ 55.349432][ T1049] 0 pages HighMem/MovableOnly [ 55.354035][ T1049] 343413 pages reserved [ 55.357950][ T1049] 0 pages cma reserved [ 55.377562][ T1055] loop5: detected capacity change from 0 to 512 [ 55.394783][ T431] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.406528][ T431] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.416802][ T431] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 55.425964][ T431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.499295][ T1063] 9pnet: Insufficient options for proto=fd [ 55.507368][ T431] usb 3-1: config 0 descriptor?? [ 55.946428][ T1069] overlayfs: failed to resolve './file0': -2 [ 56.258982][ T350] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 56.310115][ T1077] loop1: detected capacity change from 0 to 1024 [ 56.439011][ T431] usbhid 3-1:0.0: can't add hid device: -71 [ 56.445971][ T431] usbhid: probe of 3-1:0.0 failed with error -71 [ 56.453185][ T1077] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.239: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 56.460312][ T431] usb 3-1: USB disconnect, device number 7 [ 56.479575][ T1077] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.239: couldn't read orphan inode 11 (err -117) [ 56.499121][ T1077] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 56.619070][ T350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 56.650311][ T350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.667603][ T350] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 56.676571][ T350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.685159][ T350] usb 4-1: config 0 descriptor?? [ 56.786542][ T1090] loop1: detected capacity change from 0 to 8192 [ 56.811589][ T1090] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.321836][ T1099] loop5: detected capacity change from 0 to 128 [ 57.391608][ T30] kauditd_printk_skb: 124 callbacks suppressed [ 57.391631][ T30] audit: type=1400 audit(1732186590.402:2102): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 57.479653][ T350] usbhid 4-1:0.0: can't add hid device: -71 [ 57.488567][ T350] usbhid: probe of 4-1:0.0 failed with error -71 [ 57.531306][ T30] audit: type=1400 audit(1732186590.442:2103): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.534750][ T1099] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 57.563291][ T1099] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.581680][ T350] usb 4-1: USB disconnect, device number 4 [ 57.585143][ T30] audit: type=1400 audit(1732186590.442:2104): avc: denied { open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.643837][ T30] audit: type=1400 audit(1732186590.442:2105): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.666637][ T30] audit: type=1400 audit(1732186590.572:2106): avc: denied { mount } for pid=1093 comm="syz.5.243" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 57.688192][ T30] audit: type=1400 audit(1732186590.652:2107): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 57.711762][ T30] audit: type=1400 audit(1732186590.722:2108): avc: denied { confidentiality } for pid=1104 comm="syz.4.246" lockdown_reason="use of bpf to read kernel RAM" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 57.790312][ T30] audit: type=1400 audit(1732186590.802:2109): avc: denied { mount } for pid=1104 comm="syz.4.246" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 57.823366][ T30] audit: type=1400 audit(1732186590.822:2110): avc: denied { write } for pid=1104 comm="syz.4.246" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.844904][ T30] audit: type=1400 audit(1732186590.822:2111): avc: denied { add_name } for pid=1104 comm="syz.4.246" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.929752][ T1108] FAULT_INJECTION: forcing a failure. [ 57.929752][ T1108] name failslab, interval 1, probability 0, space 0, times 1 [ 57.965225][ T1112] loop5: detected capacity change from 0 to 1024 [ 57.971497][ T1108] CPU: 0 PID: 1108 Comm: syz.2.244 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 57.981123][ T1108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 57.991025][ T1108] Call Trace: [ 57.994139][ T1108] [ 57.996921][ T1108] dump_stack_lvl+0x151/0x1c0 [ 58.001433][ T1108] ? io_uring_drop_tctx_refs+0x190/0x190 [ 58.006917][ T1108] dump_stack+0x15/0x20 [ 58.010893][ T1108] should_fail+0x3c6/0x510 [ 58.015144][ T1108] __should_failslab+0xa4/0xe0 [ 58.019745][ T1108] ? shmem_alloc_inode+0x1a/0x30 [ 58.024516][ T1108] should_failslab+0x9/0x20 [ 58.028864][ T1108] slab_pre_alloc_hook+0x37/0xd0 [ 58.033632][ T1108] ? shmem_alloc_inode+0x1a/0x30 [ 58.038408][ T1108] kmem_cache_alloc+0x44/0x200 [ 58.043007][ T1108] ? shmem_match+0x180/0x180 [ 58.047430][ T1108] shmem_alloc_inode+0x1a/0x30 [ 58.052034][ T1108] new_inode_pseudo+0x64/0x220 [ 58.056632][ T1108] new_inode+0x28/0x1c0 [ 58.060626][ T1108] shmem_get_inode+0x328/0x9e0 [ 58.065229][ T1108] ? _raw_spin_unlock+0x4d/0x70 [ 58.069915][ T1108] __shmem_file_setup+0x111/0x2a0 [ 58.074798][ T1108] shmem_file_setup+0x2f/0x40 [ 58.079287][ T1108] __se_sys_memfd_create+0x1e1/0x3e0 [ 58.084409][ T1108] __x64_sys_memfd_create+0x5b/0x70 [ 58.089444][ T1108] x64_sys_call+0x871/0x9a0 [ 58.093779][ T1108] do_syscall_64+0x3b/0xb0 [ 58.098033][ T1108] ? clear_bhb_loop+0x35/0x90 [ 58.102547][ T1108] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 58.108359][ T1108] RIP: 0033:0x7ffae91d3819 [ 58.112618][ T1108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.132057][ T1108] RSP: 002b:00007ffae7809e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 58.140388][ T1108] RAX: ffffffffffffffda RBX: 0000000000000236 RCX: 00007ffae91d3819 [ 58.148196][ T1108] RDX: 00007ffae7809ef0 RSI: 0000000000000000 RDI: 00007ffae9246fca [ 58.156097][ T1108] RBP: 0000000020000300 R08: 00007ffae7809bb7 R09: 00007ffae7809e40 [ 58.163909][ T1108] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000280 [ 58.171805][ T1108] R13: 00007ffae7809ef0 R14: 00007ffae7809eb0 R15: 0000000020000000 [ 58.179625][ T1108] [ 58.204159][ T1117] loop3: detected capacity change from 0 to 1024 [ 58.220021][ T1116] overlayfs: failed to resolve './file0': -2 [ 58.416050][ T1112] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz.5.248: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 58.447104][ T1117] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.250: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 58.512127][ T1112] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.248: couldn't read orphan inode 11 (err -117) [ 58.524197][ T1112] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 58.549701][ T1117] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.250: couldn't read orphan inode 11 (err -117) [ 58.574952][ T1123] loop4: detected capacity change from 0 to 8192 [ 58.579361][ T1117] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 58.621912][ T1128] 9pnet: Insufficient options for proto=fd [ 58.659858][ T1123] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.673535][ T1130] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1130 comm=syz.2.254 [ 58.956321][ T1140] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 58.965050][ T1140] FAT-fs (loop4): Filesystem has been set read-only [ 58.971925][ T1140] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 58.980748][ T1140] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 58.989565][ T1140] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 58.998310][ T1140] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 59.007100][ T1140] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 59.015942][ T1140] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 59.024708][ T1140] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 59.033640][ T1140] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 59.047405][ T1140] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 59.103446][ T1139] loop1: detected capacity change from 0 to 8192 [ 59.190034][ T1139] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.274915][ T1148] fuse: Bad value for 'group_id' [ 60.431248][ T1167] 9pnet: Insufficient options for proto=fd [ 60.468071][ T1169] loop3: detected capacity change from 0 to 1024 [ 60.551478][ T1169] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.266: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 60.570126][ T1169] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.266: couldn't read orphan inode 11 (err -117) [ 60.581968][ T1169] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 60.669014][ T348] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 60.803710][ T350] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 60.844172][ T350] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 61.046843][ T431] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 61.099008][ T348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 61.110048][ T348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.119882][ T348] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 61.128798][ T348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.137576][ T348] usb 3-1: config 0 descriptor?? [ 61.328975][ T431] usb 5-1: Using ep0 maxpacket: 32 [ 61.406631][ T1186] fuse: Bad value for 'group_id' [ 61.451636][ T431] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 61.639562][ T431] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 61.655237][ T431] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.680929][ T431] usb 5-1: Product: syz [ 61.694127][ T431] usb 5-1: Manufacturer: syz [ 61.698964][ T431] usb 5-1: SerialNumber: syz [ 61.716014][ T431] usb 5-1: config 0 descriptor?? [ 61.783438][ T431] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 61.822131][ T1190] loop3: detected capacity change from 0 to 8192 [ 61.859299][ T348] usbhid 3-1:0.0: can't add hid device: -71 [ 61.865601][ T348] usbhid: probe of 3-1:0.0 failed with error -71 [ 61.869375][ T1190] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.911244][ T348] usb 3-1: USB disconnect, device number 8 [ 62.080419][ T1192] loop1: detected capacity change from 0 to 128 [ 62.128041][ T1193] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 62.136971][ T1193] FAT-fs (loop3): Filesystem has been set read-only [ 62.143510][ T1193] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 62.152133][ T1193] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 62.160801][ T1193] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 62.169487][ T1193] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 62.178181][ T1193] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 62.186814][ T1193] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 62.195383][ T1193] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 62.204234][ T1193] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 62.212840][ T1193] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 62.222182][ T39] usb 5-1: USB disconnect, device number 5 [ 62.243212][ T1192] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 62.258571][ T1192] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.455234][ T1204] loop2: detected capacity change from 0 to 8192 [ 62.457849][ T1206] 9pnet: Insufficient options for proto=fd [ 62.484537][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 62.484554][ T30] audit: type=1400 audit(1732186595.492:2191): avc: denied { read write } for pid=1207 comm="syz.5.278" name="ppp" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.518803][ T30] audit: type=1400 audit(1732186595.522:2192): avc: denied { open } for pid=1207 comm="syz.5.278" path="/dev/ppp" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.541964][ T30] audit: type=1400 audit(1732186595.522:2193): avc: denied { ioctl } for pid=1207 comm="syz.5.278" path="/dev/ppp" dev="devtmpfs" ino=150 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.550144][ T1204] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.580809][ T30] audit: type=1326 audit(1732186595.592:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1207 comm="syz.5.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa17af9819 code=0x7ffc0000 [ 62.622817][ T30] audit: type=1326 audit(1732186595.592:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1207 comm="syz.5.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa17af9819 code=0x7ffc0000 [ 63.419021][ T6] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 63.931533][ T1229] loop3: detected capacity change from 0 to 8192 [ 63.959532][ T1231] loop2: detected capacity change from 0 to 8192 [ 63.977950][ T1231] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.988249][ T6] usb 6-1: Using ep0 maxpacket: 16 [ 64.010309][ T1229] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.143014][ T30] audit: type=1326 audit(1732186597.152:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1232 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 64.167198][ T30] audit: type=1326 audit(1732186597.152:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1232 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 64.182283][ T1233] overlayfs: failed to resolve './file0': -2 [ 64.191009][ T6] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 64.196605][ T30] audit: type=1326 audit(1732186597.152:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1232 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 64.278620][ T1237] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 64.287251][ T1237] FAT-fs (loop3): Filesystem has been set read-only [ 64.293707][ T1237] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 64.302264][ T1237] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 64.310899][ T1237] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 64.319450][ T1237] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 64.328023][ T1237] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 64.336662][ T1237] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 64.345436][ T1237] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 64.354121][ T1237] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 64.362735][ T1237] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 64.406442][ T6] usb 6-1: config 0 has no interface number 0 [ 64.412689][ T30] audit: type=1326 audit(1732186597.152:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1232 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 64.496792][ T30] audit: type=1326 audit(1732186597.152:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1232 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 64.589087][ T6] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 64.642827][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.652572][ T6] usb 6-1: Product: syz [ 64.656660][ T6] usb 6-1: Manufacturer: syz [ 64.664361][ T6] usb 6-1: SerialNumber: syz [ 64.686452][ T6] usb 6-1: config 0 descriptor?? [ 64.718971][ T315] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 64.807135][ T1253] 9pnet: Insufficient options for proto=fd [ 64.914717][ T1257] loop3: detected capacity change from 0 to 8192 [ 64.936366][ T1259] loop4: detected capacity change from 0 to 8192 [ 64.936624][ T6] usb 6-1: USB disconnect, device number 3 [ 64.970343][ T1259] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.001126][ T1257] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.079089][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 65.090821][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.104712][ T315] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 65.113816][ T315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.122653][ T315] usb 2-1: config 0 descriptor?? [ 65.191148][ T1264] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 65.199935][ T1264] FAT-fs (loop3): Filesystem has been set read-only [ 65.206617][ T1264] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 65.215318][ T1264] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 65.223983][ T1264] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 65.232567][ T1264] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 65.241194][ T1264] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 65.249750][ T1264] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 65.258325][ T1264] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 65.266969][ T1264] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 65.275678][ T1264] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 65.899043][ T315] usbhid 2-1:0.0: can't add hid device: -71 [ 65.904947][ T315] usbhid: probe of 2-1:0.0 failed with error -71 [ 65.937743][ T315] usb 2-1: USB disconnect, device number 4 [ 65.952169][ T1278] loop4: detected capacity change from 0 to 256 [ 66.072792][ T1279] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 66.735908][ T597] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 66.749827][ T1291] 9pnet: Insufficient options for proto=fd [ 66.755133][ T1289] loop2: detected capacity change from 0 to 8192 [ 66.811752][ T1293] loop3: detected capacity change from 0 to 8192 [ 66.845551][ T1295] fuse: Bad value for 'group_id' [ 66.855821][ T1293] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.880695][ T1289] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.754111][ T30] kauditd_printk_skb: 311 callbacks suppressed [ 67.754189][ T30] audit: type=1400 audit(1732186600.762:2512): avc: denied { open } for pid=1297 comm="syz.4.302" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 67.852917][ T1301] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 67.861625][ T1301] FAT-fs (loop2): Filesystem has been set read-only [ 67.868296][ T1301] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 67.876983][ T1301] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 67.885678][ T1301] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 67.894327][ T1301] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 67.902938][ T1301] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 67.911513][ T1301] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 67.920168][ T1301] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 67.928825][ T1301] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 67.937523][ T1301] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 68.066598][ T30] audit: type=1326 audit(1732186601.072:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1308 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffae91d3819 code=0x7ffc0000 [ 68.069582][ T1309] loop2: detected capacity change from 0 to 256 [ 68.095853][ T597] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 68.117785][ T1305] loop5: detected capacity change from 0 to 8192 [ 68.124274][ T597] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 68.138772][ T30] audit: type=1326 audit(1732186601.072:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1308 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffae91d3819 code=0x7ffc0000 [ 68.162057][ T30] audit: type=1326 audit(1732186601.072:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1308 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffae91d3819 code=0x7ffc0000 [ 68.220039][ T1305] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.301714][ T1313] loop4: detected capacity change from 0 to 8192 [ 68.314565][ T30] audit: type=1326 audit(1732186601.072:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1308 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffae91d3819 code=0x7ffc0000 [ 68.338035][ T30] audit: type=1326 audit(1732186601.072:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1308 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffae91d3819 code=0x7ffc0000 [ 68.371961][ T30] audit: type=1326 audit(1732186601.072:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1308 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ffae91d3819 code=0x7ffc0000 [ 68.395418][ T30] audit: type=1326 audit(1732186601.072:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1308 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffae91d3853 code=0x7ffc0000 [ 68.399020][ T597] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.418632][ T30] audit: type=1326 audit(1732186601.072:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1308 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffae91d22ff code=0x7ffc0000 [ 68.450292][ T30] audit: type=1326 audit(1732186601.072:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1308 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ffae91d38a7 code=0x7ffc0000 [ 68.477799][ T597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.479264][ T1313] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.496079][ T597] usb 2-1: Product: syz [ 68.500425][ T1315] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 68.509047][ T1315] FAT-fs (loop5): Filesystem has been set read-only [ 68.515479][ T1315] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 68.524074][ T1315] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 68.532706][ T1315] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 68.533200][ T597] usb 2-1: Manufacturer: syz [ 68.541307][ T1315] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 68.546356][ T597] usb 2-1: SerialNumber: syz [ 68.554536][ T1315] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 68.567276][ T1315] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 68.575886][ T1315] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 68.584489][ T1315] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 68.593238][ T1315] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 68.789141][ T1325] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 68.797782][ T1325] FAT-fs (loop4): Filesystem has been set read-only [ 68.804512][ T1325] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 68.813435][ T1325] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 68.822099][ T1325] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 68.830681][ T1325] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 68.839289][ T1325] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 68.847837][ T1325] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 68.856462][ T1325] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 68.865039][ T1325] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 68.873690][ T1325] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 68.957677][ T1323] loop3: detected capacity change from 0 to 8192 [ 68.969378][ T1283] loop1: detected capacity change from 0 to 1024 [ 69.052559][ T1283] EXT4-fs (loop1): test_dummy_encryption requires encrypt feature [ 69.065959][ T1323] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.120217][ T1330] loop5: detected capacity change from 0 to 256 [ 69.135609][ T350] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 69.219922][ T1283] loop1: detected capacity change from 0 to 128 [ 69.350797][ T1283] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 69.579023][ T350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 69.590286][ T350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.599940][ T350] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 69.613118][ T350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.624739][ T350] usb 3-1: config 0 descriptor?? [ 69.642440][ T1283] process 'syz.1.297' launched './file0' with NULL argv: empty string added [ 69.719042][ T597] cdc_ncm 2-1:1.0: bind() failure [ 69.724937][ T597] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 69.731930][ T597] cdc_ncm 2-1:1.1: bind() failure [ 69.738630][ T597] usb 2-1: USB disconnect, device number 5 [ 69.781841][ T1340] loop3: detected capacity change from 0 to 1024 [ 69.822227][ T1340] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.312: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 69.840988][ T1340] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.312: couldn't read orphan inode 11 (err -117) [ 69.852911][ T1340] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 69.979137][ T1345] loop3: detected capacity change from 0 to 1024 [ 70.013078][ T1347] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 70.035473][ T1345] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.313: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 70.054023][ T1345] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.313: couldn't read orphan inode 11 (err -117) [ 70.066039][ T1345] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 70.143948][ T1351] loop5: detected capacity change from 0 to 8192 [ 70.200888][ T1355] loop1: detected capacity change from 0 to 256 [ 70.219939][ T1351] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.369114][ T350] usbhid 3-1:0.0: can't add hid device: -71 [ 70.375260][ T350] usbhid: probe of 3-1:0.0 failed with error -71 [ 70.399417][ T1359] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 70.408054][ T1359] FAT-fs (loop5): Filesystem has been set read-only [ 70.414866][ T1359] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 70.423562][ T1359] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 70.432155][ T1359] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 70.440736][ T1359] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 70.449397][ T1359] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 70.458298][ T1359] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 70.466991][ T1359] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 70.475992][ T1359] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 70.517760][ T1359] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 70.532567][ T350] usb 3-1: USB disconnect, device number 9 [ 70.742398][ T1366] loop4: detected capacity change from 0 to 256 [ 70.788277][ T1368] loop5: detected capacity change from 0 to 1024 [ 70.862553][ T1368] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz.5.320: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 70.881089][ T1368] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.320: couldn't read orphan inode 11 (err -117) [ 70.893028][ T1368] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 71.441903][ T1390] overlayfs: missing 'workdir' [ 71.677468][ T1388] loop2: detected capacity change from 0 to 256 [ 71.740913][ T1395] loop1: detected capacity change from 0 to 256 [ 71.798856][ T39] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 71.807849][ T39] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 71.959713][ T1405] FAULT_INJECTION: forcing a failure. [ 71.959713][ T1405] name failslab, interval 1, probability 0, space 0, times 0 [ 71.977015][ T1405] CPU: 1 PID: 1405 Comm: syz.3.333 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 71.986740][ T1405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 71.996651][ T1405] Call Trace: [ 71.999761][ T1405] [ 72.002541][ T1405] dump_stack_lvl+0x151/0x1c0 [ 72.007142][ T1405] ? io_uring_drop_tctx_refs+0x190/0x190 [ 72.012609][ T1405] ? debug_smp_processor_id+0x17/0x20 [ 72.017907][ T1405] ? get_random_u32+0x368/0x660 [ 72.022599][ T1405] dump_stack+0x15/0x20 [ 72.026597][ T1405] should_fail+0x3c6/0x510 [ 72.030839][ T1405] __should_failslab+0xa4/0xe0 [ 72.035439][ T1405] should_failslab+0x9/0x20 [ 72.039777][ T1405] slab_pre_alloc_hook+0x37/0xd0 [ 72.044589][ T1405] __kmalloc+0x6d/0x270 [ 72.048555][ T1405] ? bpf_map_area_alloc+0x4c/0xf0 [ 72.053406][ T1405] bpf_map_area_alloc+0x4c/0xf0 [ 72.058092][ T1405] htab_map_alloc+0xbb2/0x1650 [ 72.062697][ T1405] map_create+0x411/0x2050 [ 72.066948][ T1405] __sys_bpf+0x296/0x760 [ 72.071023][ T1405] ? fput_many+0x160/0x1b0 [ 72.075280][ T1405] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 72.080487][ T1405] ? debug_smp_processor_id+0x17/0x20 [ 72.085692][ T1405] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 72.091598][ T1405] __x64_sys_bpf+0x7c/0x90 [ 72.095847][ T1405] x64_sys_call+0x87f/0x9a0 [ 72.100187][ T1405] do_syscall_64+0x3b/0xb0 [ 72.104450][ T1405] ? clear_bhb_loop+0x35/0x90 [ 72.109127][ T1405] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.114853][ T1405] RIP: 0033:0x7f7626d15819 [ 72.119116][ T1405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.138549][ T1405] RSP: 002b:00007f762538e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.146795][ T1405] RAX: ffffffffffffffda RBX: 00007f7626eccfa0 RCX: 00007f7626d15819 [ 72.154602][ T1405] RDX: 0000000000000048 RSI: 00000000200009c0 RDI: 0000000000000000 [ 72.162416][ T1405] RBP: 00007f762538e090 R08: 0000000000000000 R09: 0000000000000000 [ 72.170227][ T1405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.178038][ T1405] R13: 0000000000000000 R14: 00007f7626eccfa0 R15: 00007ffef12a9498 [ 72.185856][ T1405] [ 72.289702][ T39] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 72.315935][ T1415] loop5: detected capacity change from 0 to 1024 [ 72.397925][ T1415] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz.5.336: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 72.399577][ T1419] fuse: Bad value for 'group_id' [ 72.426290][ T1415] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.336: couldn't read orphan inode 11 (err -117) [ 72.438735][ T1415] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 72.623836][ T1421] loop5: detected capacity change from 0 to 256 [ 72.659214][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.670679][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.707642][ T39] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 72.717217][ T1423] loop4: detected capacity change from 0 to 256 [ 72.774106][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.797396][ T30] kauditd_printk_skb: 445 callbacks suppressed [ 72.797438][ T30] audit: type=1326 audit(1732186605.802:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.5.337" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa17af9819 code=0x0 [ 72.845597][ T39] usb 3-1: config 0 descriptor?? [ 72.963819][ T30] audit: type=1400 audit(1732186605.972:2968): avc: denied { read } for pid=1428 comm="syz.4.340" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 72.976967][ T1426] loop1: detected capacity change from 0 to 8192 [ 73.069399][ T30] audit: type=1400 audit(1732186605.972:2969): avc: denied { open } for pid=1428 comm="syz.4.340" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.092638][ T30] audit: type=1400 audit(1732186606.002:2970): avc: denied { ioctl } for pid=1428 comm="syz.4.340" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.121389][ T1426] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.131844][ T30] audit: type=1326 audit(1732186606.032:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1428 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 73.162820][ T1429] overlayfs: failed to resolve './file0': -2 [ 73.178958][ T30] audit: type=1326 audit(1732186606.032:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1428 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 73.211902][ T30] audit: type=1326 audit(1732186606.032:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1428 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 73.253347][ T30] audit: type=1326 audit(1732186606.042:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1428 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 73.320550][ T30] audit: type=1326 audit(1732186606.042:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1428 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 73.345752][ T30] audit: type=1326 audit(1732186606.042:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1428 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e30a7b819 code=0x7ffc0000 [ 73.389257][ T39] hid (null): bogus close delimiter [ 73.491149][ T1443] overlayfs: missing 'workdir' [ 73.924979][ T1445] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 73.933813][ T1445] FAT-fs (loop1): Filesystem has been set read-only [ 73.940567][ T1445] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 73.949309][ T1445] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 73.957876][ T1445] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 73.966560][ T1445] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 73.975251][ T1445] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 73.983847][ T1445] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 73.992502][ T1445] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.001124][ T1445] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.009712][ T1445] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.619166][ T39] uclogic 0003:256C:006D.000A: failed retrieving Huion firmware version: -71 [ 74.645943][ T39] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 74.663687][ T39] uclogic: probe of 0003:256C:006D.000A failed with error -71 [ 74.690940][ T39] usb 3-1: USB disconnect, device number 10 [ 74.699581][ T1467] loop3: detected capacity change from 0 to 1024 [ 74.756088][ T1469] loop1: detected capacity change from 0 to 8192 [ 74.770012][ T1442] kvm [1441]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 74.800940][ T1467] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.348: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 74.820164][ T1467] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.348: couldn't read orphan inode 11 (err -117) [ 74.832411][ T1467] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 74.856170][ T1469] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.152046][ T1478] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 75.160708][ T1478] FAT-fs (loop1): Filesystem has been set read-only [ 75.167382][ T1478] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 75.176055][ T1478] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 75.184622][ T1478] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 75.193221][ T1478] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 75.201843][ T1478] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 75.210560][ T1478] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 75.219202][ T1478] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 75.227792][ T1478] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 75.236444][ T1478] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 75.318133][ T1481] loop3: detected capacity change from 0 to 256 [ 75.421242][ T1489] request_module fs-adfs succeeded, but still no fs? [ 75.507459][ T1497] fuse: Bad value for 'group_id' [ 75.708222][ T431] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 75.731230][ T431] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 75.822254][ T1507] loop1: detected capacity change from 0 to 1024 [ 77.055471][ T1515] FAULT_INJECTION: forcing a failure. [ 77.055471][ T1515] name failslab, interval 1, probability 0, space 0, times 0 [ 77.068053][ T1515] CPU: 1 PID: 1515 Comm: syz.4.363 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 77.077632][ T1515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 77.087524][ T1515] Call Trace: [ 77.090649][ T1515] [ 77.093424][ T1515] dump_stack_lvl+0x151/0x1c0 [ 77.097941][ T1515] ? io_uring_drop_tctx_refs+0x190/0x190 [ 77.103409][ T1515] dump_stack+0x15/0x20 [ 77.107397][ T1515] should_fail+0x3c6/0x510 [ 77.111652][ T1515] ? mempool_free+0x310/0x310 [ 77.116172][ T1515] __should_failslab+0xa4/0xe0 [ 77.120765][ T1515] ? mempool_alloc_slab+0x1d/0x30 [ 77.125623][ T1515] should_failslab+0x9/0x20 [ 77.129966][ T1515] slab_pre_alloc_hook+0x37/0xd0 [ 77.134739][ T1515] ? mempool_free+0x310/0x310 [ 77.139253][ T1515] ? mempool_alloc_slab+0x1d/0x30 [ 77.144113][ T1515] kmem_cache_alloc+0x44/0x200 [ 77.148714][ T1515] ? mempool_free+0x310/0x310 [ 77.153236][ T1515] mempool_alloc_slab+0x1d/0x30 [ 77.157914][ T1515] mempool_alloc+0x149/0x550 [ 77.162341][ T1515] ? __kasan_check_read+0x11/0x20 [ 77.167199][ T1515] ? preempt_schedule_irq+0xe7/0x140 [ 77.172422][ T1515] ? __cond_resched+0x20/0x20 [ 77.176920][ T1515] ? __test_set_page_writeback+0x74b/0xa10 [ 77.182564][ T1515] ? mempool_resize+0x840/0x840 [ 77.187252][ T1515] ? irqentry_exit_cond_resched+0x2a/0x30 [ 77.192803][ T1515] ? irqentry_exit+0x30/0x40 [ 77.197315][ T1515] ? sysvec_reschedule_ipi+0x7d/0x150 [ 77.202527][ T1515] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 77.207992][ T1515] bio_alloc_bioset+0x22b/0x950 [ 77.212679][ T1515] ext4_bio_write_page+0x1295/0x1b80 [ 77.217801][ T1515] mpage_submit_page+0x18e/0x230 [ 77.222573][ T1515] mpage_process_page_bufs+0x6d2/0x8c0 [ 77.227869][ T1515] mpage_prepare_extent_to_map+0xa27/0xdd0 [ 77.233510][ T1515] ? ext4_iomap_swap_activate+0x40/0x40 [ 77.238889][ T1515] ? ext4_init_io_end+0x29/0x120 [ 77.243662][ T1515] ? kmem_cache_alloc+0xf5/0x200 [ 77.248436][ T1515] ? __kasan_check_write+0x14/0x20 [ 77.253386][ T1515] ext4_writepages+0xde7/0x4000 [ 77.258070][ T1515] ? release_firmware_map_entry+0x190/0x190 [ 77.263799][ T1515] ? __kasan_check_read+0x11/0x20 [ 77.268659][ T1515] ? preempt_schedule_irq+0xe7/0x140 [ 77.273780][ T1515] ? __kernel_text_address+0x9b/0x110 [ 77.278992][ T1515] ? ext4_readpage+0x230/0x230 [ 77.283588][ T1515] ? kvm_sched_clock_read+0x18/0x40 [ 77.288622][ T1515] ? sched_clock+0x9/0x10 [ 77.292787][ T1515] ? sched_clock_cpu+0x18/0x3b0 [ 77.297472][ T1515] ? plist_del+0x40e/0x420 [ 77.301725][ T1515] ? plist_add+0x3e0/0x460 [ 77.305980][ T1515] ? _raw_spin_unlock+0x4d/0x70 [ 77.310669][ T1515] ? finish_task_switch+0x167/0x7b0 [ 77.315701][ T1515] ? __kasan_check_write+0x14/0x20 [ 77.320648][ T1515] ? release_firmware_map_entry+0x190/0x190 [ 77.326374][ T1515] ? __switch_to+0x62a/0x1190 [ 77.330890][ T1515] ? ext4_readpage+0x230/0x230 [ 77.335495][ T1515] do_writepages+0x40e/0x670 [ 77.339916][ T1515] ? __writepage+0x130/0x130 [ 77.344344][ T1515] ? plist_del+0x40e/0x420 [ 77.348599][ T1515] ? __kasan_check_write+0x14/0x20 [ 77.353541][ T1515] ? _raw_spin_lock+0xa4/0x1b0 [ 77.358144][ T1515] ? _raw_spin_unlock+0x4d/0x70 [ 77.362834][ T1515] filemap_fdatawrite_wbc+0x248/0x2a0 [ 77.368041][ T1515] file_write_and_wait_range+0x1cb/0x2b0 [ 77.373510][ T1515] ? __filemap_set_wb_err+0x120/0x120 [ 77.378717][ T1515] ? wait_for_completion_killable_timeout+0x10/0x10 [ 77.385136][ T1515] ext4_sync_file+0x1a2/0xa50 [ 77.389652][ T1515] vfs_fsync_range+0x17b/0x190 [ 77.394249][ T1515] __se_sys_msync+0x3c1/0x550 [ 77.398763][ T1515] __x64_sys_msync+0x7b/0x90 [ 77.403196][ T1515] x64_sys_call+0xde/0x9a0 [ 77.407445][ T1515] do_syscall_64+0x3b/0xb0 [ 77.411693][ T1515] ? clear_bhb_loop+0x35/0x90 [ 77.416211][ T1515] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.421936][ T1515] RIP: 0033:0x7f5e30a7b819 [ 77.426215][ T1515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.445631][ T1515] RSP: 002b:00007f5e2f0b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 77.453874][ T1515] RAX: ffffffffffffffda RBX: 00007f5e30c33160 RCX: 00007f5e30a7b819 [ 77.461686][ T1515] RDX: 0000000000000006 RSI: 087abbe8d1cc6ad9 RDI: 0000000020952000 [ 77.469498][ T1515] RBP: 00007f5e2f0b2090 R08: 0000000000000000 R09: 0000000000000000 [ 77.477309][ T1515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.485124][ T1515] R13: 0000000000000000 R14: 00007f5e30c33160 R15: 00007ffd6087ef88 [ 77.492936][ T1515] [ 77.534727][ T1507] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.361: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 77.563157][ T1507] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.361: couldn't read orphan inode 11 (err -117) [ 77.583651][ T1520] loop5: detected capacity change from 0 to 8192 [ 77.585181][ T1507] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 77.634292][ T1520] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.960876][ T1543] FAULT_INJECTION: forcing a failure. [ 77.960876][ T1543] name failslab, interval 1, probability 0, space 0, times 0 [ 77.973402][ T1543] CPU: 1 PID: 1543 Comm: syz.3.371 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 77.982977][ T1543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 77.992871][ T1543] Call Trace: [ 77.995993][ T1543] [ 77.998769][ T1543] dump_stack_lvl+0x151/0x1c0 [ 78.003284][ T1543] ? io_uring_drop_tctx_refs+0x190/0x190 [ 78.008752][ T1543] ? __kasan_check_write+0x14/0x20 [ 78.013700][ T1543] dump_stack+0x15/0x20 [ 78.017691][ T1543] should_fail+0x3c6/0x510 [ 78.021947][ T1543] __should_failslab+0xa4/0xe0 [ 78.026542][ T1543] should_failslab+0x9/0x20 [ 78.030882][ T1543] slab_pre_alloc_hook+0x37/0xd0 [ 78.035659][ T1543] kmem_cache_alloc_trace+0x48/0x210 [ 78.040779][ T1543] ? __get_vm_area_node+0x117/0x360 [ 78.045821][ T1543] __get_vm_area_node+0x117/0x360 [ 78.050674][ T1543] ? preempt_schedule_irq+0xe7/0x140 [ 78.055793][ T1543] __vmalloc_node_range+0xe2/0x8d0 [ 78.060740][ T1543] ? bpf_prog_alloc_no_stats+0x3b/0x2f0 [ 78.066122][ T1543] ? selinux_capset+0xf0/0xf0 [ 78.070633][ T1543] ? irqentry_exit_cond_resched+0x2a/0x30 [ 78.076191][ T1543] ? irqentry_exit+0x30/0x40 [ 78.080842][ T1543] ? sysvec_reschedule_ipi+0x7d/0x150 [ 78.086045][ T1543] ? bpf_prog_alloc_no_stats+0x3b/0x2f0 [ 78.091433][ T1543] __vmalloc+0x7a/0x90 [ 78.095336][ T1543] ? bpf_prog_alloc_no_stats+0x3b/0x2f0 [ 78.100717][ T1543] bpf_prog_alloc_no_stats+0x3b/0x2f0 [ 78.105922][ T1543] ? bpf_prog_alloc+0x15/0x1e0 [ 78.110611][ T1543] bpf_prog_alloc+0x1f/0x1e0 [ 78.115037][ T1543] bpf_prog_load+0x800/0x1b50 [ 78.119552][ T1543] ? __kasan_check_read+0x11/0x20 [ 78.124415][ T1543] ? map_freeze+0x370/0x370 [ 78.128751][ T1543] ? selinux_bpf+0xcb/0x100 [ 78.133093][ T1543] ? security_bpf+0x82/0xb0 [ 78.137434][ T1543] __sys_bpf+0x4bc/0x760 [ 78.141506][ T1543] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 78.146718][ T1543] ? __kasan_check_write+0x14/0x20 [ 78.151663][ T1543] ? switch_fpu_return+0x15f/0x2e0 [ 78.156612][ T1543] __x64_sys_bpf+0x7c/0x90 [ 78.160864][ T1543] x64_sys_call+0x87f/0x9a0 [ 78.165203][ T1543] do_syscall_64+0x3b/0xb0 [ 78.169457][ T1543] ? clear_bhb_loop+0x35/0x90 [ 78.173971][ T1543] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.179698][ T1543] RIP: 0033:0x7f7626d15819 [ 78.183951][ T1543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.203404][ T1543] RSP: 002b:00007f762534c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.211634][ T1543] RAX: ffffffffffffffda RBX: 00007f7626ecd160 RCX: 00007f7626d15819 [ 78.219467][ T1543] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 78.227260][ T1543] RBP: 00007f762534c090 R08: 0000000000000000 R09: 0000000000000000 [ 78.235091][ T1543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.243008][ T1543] R13: 0000000000000000 R14: 00007f7626ecd160 R15: 00007ffef12a9498 [ 78.250830][ T1543] [ 78.254114][ T1543] syz.3.371: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 78.270077][ T1543] CPU: 1 PID: 1543 Comm: syz.3.371 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 78.279683][ T1543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 78.289583][ T1543] Call Trace: [ 78.292705][ T1543] [ 78.295480][ T1543] dump_stack_lvl+0x151/0x1c0 [ 78.299997][ T1543] ? io_uring_drop_tctx_refs+0x190/0x190 [ 78.305465][ T1543] ? pr_cont_kernfs_name+0xf0/0x100 [ 78.310497][ T1543] dump_stack+0x15/0x20 [ 78.314575][ T1543] warn_alloc+0x21a/0x390 [ 78.318740][ T1543] ? zone_watermark_ok_safe+0x270/0x270 [ 78.324215][ T1543] ? kmem_cache_alloc_trace+0x115/0x210 [ 78.329589][ T1543] ? __get_vm_area_node+0x117/0x360 [ 78.334623][ T1543] ? __get_vm_area_node+0x347/0x360 [ 78.339657][ T1543] ? preempt_schedule_irq+0xe7/0x140 [ 78.344783][ T1543] __vmalloc_node_range+0x2c1/0x8d0 [ 78.349813][ T1543] ? selinux_capset+0xf0/0xf0 [ 78.354327][ T1543] ? irqentry_exit_cond_resched+0x2a/0x30 [ 78.360315][ T1543] ? irqentry_exit+0x30/0x40 [ 78.364742][ T1543] ? sysvec_reschedule_ipi+0x7d/0x150 [ 78.369953][ T1543] ? bpf_prog_alloc_no_stats+0x3b/0x2f0 [ 78.375330][ T1543] __vmalloc+0x7a/0x90 [ 78.379238][ T1543] ? bpf_prog_alloc_no_stats+0x3b/0x2f0 [ 78.384616][ T1543] bpf_prog_alloc_no_stats+0x3b/0x2f0 [ 78.389823][ T1543] ? bpf_prog_alloc+0x15/0x1e0 [ 78.394427][ T1543] bpf_prog_alloc+0x1f/0x1e0 [ 78.398854][ T1543] bpf_prog_load+0x800/0x1b50 [ 78.403364][ T1543] ? __kasan_check_read+0x11/0x20 [ 78.408228][ T1543] ? map_freeze+0x370/0x370 [ 78.412569][ T1543] ? selinux_bpf+0xcb/0x100 [ 78.416906][ T1543] ? security_bpf+0x82/0xb0 [ 78.421247][ T1543] __sys_bpf+0x4bc/0x760 [ 78.425328][ T1543] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 78.430532][ T1543] ? __kasan_check_write+0x14/0x20 [ 78.435475][ T1543] ? switch_fpu_return+0x15f/0x2e0 [ 78.440427][ T1543] __x64_sys_bpf+0x7c/0x90 [ 78.444678][ T1543] x64_sys_call+0x87f/0x9a0 [ 78.449027][ T1543] do_syscall_64+0x3b/0xb0 [ 78.453273][ T1543] ? clear_bhb_loop+0x35/0x90 [ 78.457782][ T1543] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.463511][ T1543] RIP: 0033:0x7f7626d15819 [ 78.467770][ T1543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.487292][ T1543] RSP: 002b:00007f762534c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.495537][ T1543] RAX: ffffffffffffffda RBX: 00007f7626ecd160 RCX: 00007f7626d15819 [ 78.503352][ T1543] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 78.511179][ T1543] RBP: 00007f762534c090 R08: 0000000000000000 R09: 0000000000000000 [ 78.518970][ T1543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.526784][ T1543] R13: 0000000000000000 R14: 00007f7626ecd160 R15: 00007ffef12a9498 [ 78.534599][ T1543] [ 78.537537][ T1543] Mem-Info: [ 78.537749][ T1540] loop3: detected capacity change from 0 to 128 [ 78.540429][ T1543] active_anon:156 inactive_anon:13241 isolated_anon:0 [ 78.540429][ T1543] active_file:3705 inactive_file:3766 isolated_file:0 [ 78.540429][ T1543] unevictable:0 dirty:684 writeback:0 [ 78.540429][ T1543] slab_reclaimable:8175 slab_unreclaimable:70132 [ 78.540429][ T1543] mapped:38095 shmem:9889 pagetables:619 bounce:0 [ 78.540429][ T1543] kernel_misc_reclaimable:0 [ 78.540429][ T1543] free:1557907 free_pcp:13959 free_cma:0 [ 78.546742][ T1223] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 78.587744][ T1543] Node 0 active_anon:624kB inactive_anon:52964kB active_file:14820kB inactive_file:15064kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:152380kB dirty:2736kB writeback:0kB shmem:39556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4524kB pagetables:2476kB all_unreclaimable? no [ 78.625599][ T1543] DMA32 free:2974676kB min:62568kB low:78208kB high:93848kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2978968kB mlocked:0kB bounce:0kB free_pcp:4292kB local_pcp:0kB free_cma:0kB [ 78.630232][ T1539] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 78.652419][ T1543] lowmem_reserve[]: 0 3941 3941 [ 78.652455][ T1543] Normal free:3256952kB min:84884kB low:106104kB high:127324kB reserved_highatomic:0KB active_anon:624kB inactive_anon:52964kB active_file:14820kB inactive_file:15064kB unevictable:0kB writepending:2728kB present:5242880kB managed:4035584kB mlocked:0kB bounce:0kB free_pcp:51532kB local_pcp:12460kB free_cma:0kB [ 78.660983][ T1539] FAT-fs (loop5): Filesystem has been set read-only [ 78.665660][ T1543] lowmem_reserve[]: 0 [ 78.694758][ T1539] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 78.701105][ T1543] 0 0 [ 78.704897][ T1539] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 78.713518][ T1543] [ 78.716003][ T1539] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 78.724601][ T1543] DMA32: 3*4kB [ 78.726772][ T1539] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 78.735586][ T1543] (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 723*4096kB (M) = 2974676kB [ 78.735731][ T1543] Normal: 8*4kB (ME) 49*8kB (UE) 37*16kB (UE) 16*32kB (UME) 54*64kB (UME) 54*128kB (UM) 12*256kB (UM) 18*512kB (M) 7*1024kB (ME) [ 78.739153][ T1539] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 78.747688][ T1543] 3*2048kB [ 78.761803][ T1539] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 78.775203][ T1543] (ME) [ 78.783738][ T1539] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 78.786659][ T1543] 786*4096kB [ 78.795357][ T1539] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 78.797858][ T1543] (UM) = 3256952kB [ 78.806476][ T1539] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 78.809587][ T1543] 17349 total pagecache pages [ 78.809595][ T1543] 0 pages in swap cache [ 78.809602][ T1543] Swap cache stats: add 0, delete 0, find 0/0 [ 78.824834][ T30] kauditd_printk_skb: 216 callbacks suppressed [ 78.824852][ T30] audit: type=1400 audit(1732186611.262:3193): avc: denied { getopt } for pid=1531 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.830466][ T1543] Free swap = 124996kB [ 78.874327][ T1543] Total swap = 124996kB [ 78.878318][ T1543] 2097051 pages RAM [ 78.881982][ T1543] 0 pages HighMem/MovableOnly [ 78.886473][ T1543] 343413 pages reserved [ 78.890518][ T1543] 0 pages cma reserved [ 78.924138][ T431] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 78.936462][ T431] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 78.969983][ T1540] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.980530][ T1540] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.990528][ C1] sched: RT throttling activated [ 79.042669][ T1551] loop1: detected capacity change from 0 to 8192 [ 79.142962][ T1223] usb 3-1: Using ep0 maxpacket: 8 [ 79.153248][ T1551] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.165452][ T30] audit: type=1400 audit(1732186612.172:3194): avc: denied { read } for pid=1552 comm="syz.4.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.234433][ T30] audit: type=1400 audit(1732186612.242:3195): avc: denied { confidentiality } for pid=1554 comm="syz.5.376" lockdown_reason="use of bpf to read kernel RAM" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 79.287827][ T30] audit: type=1400 audit(1732186612.292:3196): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 79.349018][ T1223] usb 3-1: unable to get BOS descriptor or descriptor too short [ 79.443336][ T1562] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 79.452016][ T1562] FAT-fs (loop1): Filesystem has been set read-only [ 79.458734][ T1562] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 79.467413][ T1562] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 79.475961][ T1562] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 79.484557][ T1562] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 79.493181][ T1562] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 79.501756][ T1562] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 79.510388][ T1562] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 79.519040][ T1562] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 79.527633][ T1562] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 79.622451][ T1560] loop5: detected capacity change from 0 to 8192 [ 79.629164][ T1223] usb 3-1: config 165 has an invalid interface number: 7 but max is 0 [ 79.660126][ T1223] usb 3-1: config 165 has no interface number 0 [ 79.672994][ T1223] usb 3-1: config 165 interface 7 altsetting 59 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 79.700723][ T1560] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.711053][ T1223] usb 3-1: config 165 interface 7 has no altsetting 0 [ 79.726217][ T1567] loop1: detected capacity change from 0 to 8192 [ 79.759014][ T1223] usb 3-1: string descriptor 0 read error: -22 [ 79.765363][ T1223] usb 3-1: New USB device found, idVendor=2100, idProduct=9e53, bcdDevice=6e.20 [ 79.774880][ T1223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.859680][ T1223] ftdi_sio 3-1:165.7: FTDI USB Serial Device converter detected [ 79.941504][ T1570] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 79.950175][ T1570] FAT-fs (loop5): Filesystem has been set read-only [ 79.956827][ T1570] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 79.965530][ T1570] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 79.974209][ T1570] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 79.982873][ T1570] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 79.991882][ T1570] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 80.000547][ T1570] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 80.009668][ T1570] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 80.018336][ T1570] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 80.027150][ T1570] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 80.067912][ T1223] usb 3-1: Detected FT-X [ 80.082521][ T1567] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.109635][ T1223] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 80.169027][ T1223] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 80.178974][ T30] audit: type=1400 audit(1732186613.162:3197): avc: denied { create } for pid=1534 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.210299][ T30] audit: type=1400 audit(1732186613.162:3198): avc: denied { write } for pid=1534 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.235930][ T30] audit: type=1400 audit(1732186613.162:3199): avc: denied { ioctl } for pid=1534 comm="syz.2.370" path="socket:[20061]" dev="sockfs" ino=20061 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.260530][ T1223] ftdi_sio 3-1:165.7: GPIO initialisation failed: -71 [ 80.269041][ T1223] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 80.269094][ T1575] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 80.285491][ T1575] FAT-fs (loop1): Filesystem has been set read-only [ 80.291974][ T1575] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 80.299311][ T1223] usb 3-1: USB disconnect, device number 11 [ 80.300502][ T1575] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 80.314849][ T1575] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 80.317663][ T1223] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 80.323425][ T1575] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 80.323450][ T1575] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 80.323472][ T1575] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 80.323492][ T1575] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 80.346890][ T1223] ftdi_sio 3-1:165.7: device disconnected [ 80.349719][ T1575] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 80.368140][ T1583] loop5: detected capacity change from 0 to 256 [ 80.372636][ T1575] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 80.466730][ T1583] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 80.499794][ T30] audit: type=1400 audit(1732186613.512:3200): avc: denied { mount } for pid=1577 comm="syz.5.383" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.519109][ T1586] loop3: detected capacity change from 0 to 8192 [ 80.556740][ T30] audit: type=1400 audit(1732186613.562:3201): avc: denied { unmount } for pid=804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.559640][ T1590] loop4: detected capacity change from 0 to 8192 [ 80.584658][ T1586] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.628949][ T1590] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.696077][ T30] audit: type=1400 audit(1732186613.702:3202): avc: denied { mount } for pid=1597 comm="syz.1.389" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 80.719485][ T1598] 9pnet: Insufficient options for proto=fd [ 81.436935][ T1599] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 81.445634][ T1599] FAT-fs (loop3): Filesystem has been set read-only [ 81.452933][ T1599] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 81.461724][ T1599] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 81.470547][ T1599] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 81.479296][ T1599] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 81.488381][ T1599] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 81.497335][ T1599] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 81.506178][ T1599] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 81.514946][ T1599] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 81.523830][ T1599] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.286818][ T1604] loop2: detected capacity change from 0 to 8192 [ 82.302804][ T1608] loop5: detected capacity change from 0 to 512 [ 82.350287][ T1604] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.449908][ T1608] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 82.452711][ T1610] loop1: detected capacity change from 0 to 8192 [ 82.469889][ T1608] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.487570][ T1619] loop4: detected capacity change from 0 to 256 [ 82.495224][ T1608] FAULT_INJECTION: forcing a failure. [ 82.495224][ T1608] name failslab, interval 1, probability 0, space 0, times 0 [ 82.509662][ T1610] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.514611][ T1608] CPU: 0 PID: 1608 Comm: syz.5.392 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 82.529534][ T1608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 82.539431][ T1608] Call Trace: [ 82.542555][ T1608] [ 82.545331][ T1608] dump_stack_lvl+0x151/0x1c0 [ 82.549847][ T1608] ? io_uring_drop_tctx_refs+0x190/0x190 [ 82.555314][ T1608] ? stack_trace_save+0x113/0x1c0 [ 82.560189][ T1608] dump_stack+0x15/0x20 [ 82.564180][ T1608] should_fail+0x3c6/0x510 [ 82.568422][ T1608] __should_failslab+0xa4/0xe0 [ 82.573016][ T1608] should_failslab+0x9/0x20 [ 82.577355][ T1608] slab_pre_alloc_hook+0x37/0xd0 [ 82.582216][ T1608] kmem_cache_alloc_trace+0x48/0x210 [ 82.587338][ T1608] ? alloc_pipe_info+0xe7/0x4b0 [ 82.592023][ T1608] alloc_pipe_info+0xe7/0x4b0 [ 82.596536][ T1608] splice_direct_to_actor+0xa15/0xbe0 [ 82.601765][ T1608] ? kstrtol_from_user+0x310/0x310 [ 82.606692][ T1608] ? avc_policy_seqno+0x1b/0x70 [ 82.611383][ T1608] ? selinux_file_permission+0x2c4/0x570 [ 82.616847][ T1608] ? do_splice_direct+0x3c0/0x3c0 [ 82.621711][ T1608] ? fsnotify_perm+0x6a/0x5b0 [ 82.626232][ T1608] ? pipe_to_sendpage+0x340/0x340 [ 82.631085][ T1608] ? security_file_permission+0x86/0xb0 [ 82.636468][ T1608] ? rw_verify_area+0xa7/0x1c0 [ 82.641067][ T1608] do_splice_direct+0x27f/0x3c0 [ 82.645755][ T1608] ? splice_direct_to_actor+0xbe0/0xbe0 [ 82.651132][ T1608] ? fsnotify_perm+0x6a/0x5b0 [ 82.655647][ T1608] ? security_file_permission+0x86/0xb0 [ 82.661036][ T1608] do_sendfile+0x613/0xfe0 [ 82.665286][ T1608] ? do_preadv+0x350/0x350 [ 82.669711][ T1608] ? __fdget_pos+0x2ee/0x3a0 [ 82.674133][ T1608] ? ksys_write+0x24f/0x2c0 [ 82.678475][ T1608] __x64_sys_sendfile64+0x1ce/0x230 [ 82.683598][ T1608] ? __ia32_sys_sendfile+0x240/0x240 [ 82.688715][ T1608] ? debug_smp_processor_id+0x17/0x20 [ 82.693931][ T1608] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 82.694753][ T1623] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.699849][ T1608] ? exit_to_user_mode_prepare+0x39/0xa0 [ 82.699877][ T1608] x64_sys_call+0x140/0x9a0 [ 82.699899][ T1608] do_syscall_64+0x3b/0xb0 [ 82.717325][ T1623] FAT-fs (loop2): Filesystem has been set read-only [ 82.718220][ T1608] ? clear_bhb_loop+0x35/0x90 [ 82.733512][ T1608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.739235][ T1608] RIP: 0033:0x7ffa17af9819 [ 82.743491][ T1608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.762939][ T1608] RSP: 002b:00007ffa16172038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 82.771175][ T1608] RAX: ffffffffffffffda RBX: 00007ffa17cb0fa0 RCX: 00007ffa17af9819 [ 82.778993][ T1608] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 82.786799][ T1608] RBP: 00007ffa16172090 R08: 0000000000000000 R09: 0000000000000000 [ 82.794614][ T1608] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.802427][ T1608] R13: 0000000000000000 R14: 00007ffa17cb0fa0 R15: 00007fff81b53768 [ 82.810239][ T1608] [ 82.836682][ T1623] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.857403][ T1623] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.876427][ T1623] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.906580][ T1619] loop4: detected capacity change from 0 to 1024 [ 82.912006][ T1623] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.926748][ T1623] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.935657][ T1623] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.945525][ T1623] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.954749][ T297] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 82.962581][ T1619] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.962722][ T1625] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.983041][ T1625] FAT-fs (loop1): Filesystem has been set read-only [ 82.989470][ T1625] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.998001][ T1625] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.006615][ T1625] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.015219][ T1625] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.022896][ T1623] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.023809][ T1625] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.040981][ T1625] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.049583][ T1625] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.058162][ T1625] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.066794][ T1625] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.085334][ T1623] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.155026][ T1619] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 83.171732][ T1619] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,discard,dioread_nolock,dioread_nolock,bsdgroups,nodelalloc,inode_readahead_blks=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: writeback. [ 83.200421][ T1619] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 83.256421][ T39] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 83.274960][ T39] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 83.299853][ T1639] loop2: detected capacity change from 0 to 8192 [ 83.333407][ T1639] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.358949][ T297] usb 4-1: Using ep0 maxpacket: 16 [ 83.404909][ T1647] loop5: detected capacity change from 0 to 256 [ 83.478980][ T297] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 83.487003][ T297] usb 4-1: config 0 has no interface number 0 [ 83.545096][ T1650] fuse: Bad value for 'group_id' [ 83.623141][ T1651] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.633768][ T1651] FAT-fs (loop2): Filesystem has been set read-only [ 83.640613][ T1651] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.651503][ T1653] FAULT_INJECTION: forcing a failure. [ 83.651503][ T1653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.664684][ T1653] CPU: 1 PID: 1653 Comm: syz.5.405 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 83.667885][ T1651] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.674302][ T1653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 83.674317][ T1653] Call Trace: [ 83.674323][ T1653] [ 83.674331][ T1653] dump_stack_lvl+0x151/0x1c0 [ 83.699402][ T1651] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.703341][ T1653] ? io_uring_drop_tctx_refs+0x190/0x190 [ 83.703373][ T1653] ? irqentry_exit_cond_resched+0x2a/0x30 [ 83.722955][ T1653] dump_stack+0x15/0x20 [ 83.726037][ T1651] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.726943][ T1653] should_fail+0x3c6/0x510 [ 83.739801][ T1653] should_fail_usercopy+0x1a/0x20 [ 83.744650][ T1653] _copy_to_user+0x20/0x90 [ 83.745324][ T1651] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.748899][ T1653] simple_read_from_buffer+0xc7/0x150 [ 83.748924][ T1653] proc_fail_nth_read+0x1a3/0x210 [ 83.748950][ T1653] ? proc_fault_inject_write+0x390/0x390 [ 83.761953][ T1651] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.762788][ T1653] ? fsnotify_perm+0x269/0x5b0 [ 83.773855][ T1651] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.781714][ T1653] ? security_file_permission+0x86/0xb0 [ 83.781746][ T1653] ? proc_fault_inject_write+0x390/0x390 [ 83.781769][ T1653] vfs_read+0x27d/0xd40 [ 83.781790][ T1653] ? kernel_read+0x1f0/0x1f0 [ 83.794968][ T1651] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.800311][ T1653] ? __kasan_check_write+0x14/0x20 [ 83.800339][ T1653] ? mutex_lock+0xb6/0x1e0 [ 83.800362][ T1653] ? wait_for_completion_killable_timeout+0x10/0x10 [ 83.811930][ T1651] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.814174][ T1653] ? __fdget_pos+0x2e7/0x3a0 [ 83.814198][ T1653] ? ksys_read+0x77/0x2c0 [ 83.855665][ T1653] ksys_read+0x199/0x2c0 [ 83.859741][ T1653] ? vfs_write+0x1110/0x1110 [ 83.864167][ T1653] ? __kasan_check_write+0x14/0x20 [ 83.869114][ T1653] ? switch_fpu_return+0x15f/0x2e0 [ 83.874066][ T1653] __x64_sys_read+0x7b/0x90 [ 83.878397][ T1653] x64_sys_call+0x28/0x9a0 [ 83.882768][ T1653] do_syscall_64+0x3b/0xb0 [ 83.887022][ T1653] ? clear_bhb_loop+0x35/0x90 [ 83.891532][ T1653] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.897262][ T1653] RIP: 0033:0x7ffa17af825c [ 83.901512][ T1653] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 83.920963][ T1653] RSP: 002b:00007ffa16172030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.929199][ T1653] RAX: ffffffffffffffda RBX: 00007ffa17cb0fa0 RCX: 00007ffa17af825c [ 83.937016][ T1653] RDX: 000000000000000f RSI: 00007ffa161720a0 RDI: 0000000000000005 [ 83.944842][ T1653] RBP: 00007ffa16172090 R08: 0000000000000000 R09: 0000000000000000 [ 83.952722][ T1653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.960527][ T1653] R13: 0000000000000000 R14: 00007ffa17cb0fa0 R15: 00007fff81b53768 [ 83.968345][ T1653] [ 83.972540][ T297] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 83.982124][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 83.982191][ T30] audit: type=1326 audit(1732186616.982:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7626d1541b code=0x7ffc0000 [ 83.982284][ T297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.019180][ T297] usb 4-1: Product: syz [ 84.023274][ T297] usb 4-1: Manufacturer: syz [ 84.027664][ T297] usb 4-1: SerialNumber: syz [ 84.035315][ T297] usb 4-1: config 0 descriptor?? [ 84.059352][ T30] audit: type=1326 audit(1732186617.072:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7626d1541b code=0x7ffc0000 [ 84.093258][ T30] audit: type=1326 audit(1732186617.072:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7626d1541b code=0x7ffc0000 [ 84.123350][ T30] audit: type=1326 audit(1732186617.072:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7626d1541b code=0x7ffc0000 [ 84.211857][ T30] audit: type=1326 audit(1732186617.092:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7626d47905 code=0x7ffc0000 [ 84.276404][ T30] audit: type=1400 audit(1732186617.282:3247): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.321084][ T6] usb 4-1: USB disconnect, device number 5 [ 84.393439][ T30] audit: type=1400 audit(1732186617.282:3248): avc: denied { remove_name } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.442016][ T1663] loop1: detected capacity change from 0 to 8192 [ 84.448231][ T30] audit: type=1400 audit(1732186617.282:3249): avc: denied { rename } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.470333][ T30] audit: type=1400 audit(1732186617.282:3250): avc: denied { add_name } for pid=83 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.492938][ T30] audit: type=1400 audit(1732186617.282:3251): avc: denied { unlink } for pid=83 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.497472][ T1665] loop4: detected capacity change from 0 to 8192 [ 84.538496][ T1663] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.607379][ T1665] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.713482][ T1676] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 84.722258][ T1676] FAT-fs (loop1): Filesystem has been set read-only [ 84.728871][ T1676] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 84.737509][ T1676] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 84.746130][ T1676] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 84.754714][ T1676] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 84.763312][ T1676] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 84.771904][ T1676] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 84.780593][ T1676] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 84.789222][ T1676] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 84.797880][ T1676] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 89.088928][ T30] kauditd_printk_skb: 185 callbacks suppressed [ 89.088949][ T30] audit: type=1326 audit(1732186621.092:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 90.070437][ T30] audit: type=1326 audit(1732186621.092:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 92.078952][ T30] audit: type=1326 audit(1732186621.092:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 95.068958][ T30] audit: type=1326 audit(1732186621.092:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 96.089213][ T30] audit: type=1326 audit(1732186621.092:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 96.238987][ T1676] fat_get_cluster: 2 callbacks suppressed [ 96.239019][ T1676] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 96.253354][ T1676] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 96.261912][ T1676] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 98.088951][ T30] audit: type=1326 audit(1732186621.092:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 101.068973][ T30] audit: type=1326 audit(1732186621.092:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 105.058933][ T30] audit: type=1326 audit(1732186621.092:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 106.058929][ T30] audit: type=1326 audit(1732186621.092:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 107.078934][ T30] audit: type=1326 audit(1732186621.092:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 110.088958][ T30] audit: type=1326 audit(1732186621.092:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 115.058940][ T30] audit: type=1326 audit(1732186621.092:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 119.058936][ T30] audit: type=1326 audit(1732186621.092:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 124.060642][ T30] audit: type=1326 audit(1732186621.092:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 129.058954][ T30] audit: type=1326 audit(1732186621.092:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 133.088937][ T30] audit: type=1326 audit(1732186621.092:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 139.048986][ T30] audit: type=1326 audit(1732186621.092:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 144.058910][ T30] audit: type=1326 audit(1732186621.092:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 146.078935][ T30] audit: type=1326 audit(1732186621.092:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 153.078923][ T30] audit: type=1326 audit(1732186621.092:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 161.058916][ T30] audit: type=1326 audit(1732186621.092:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 170.068910][ T30] audit: type=1326 audit(1732186621.092:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 175.058949][ T30] audit: type=1326 audit(1732186621.092:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 182.050594][ T30] audit: type=1326 audit(1732186621.092:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 184.708876][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 184.715701][ C0] (detected by 0, t=10002 jiffies, g=8677, q=1964) [ 184.722089][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294955687-4294945684), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 184.735284][ C0] rcu: rcu_preempt kthread starved for 10004 jiffies! g8677 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 184.746223][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 184.756030][ C0] rcu: RCU grace-period kthread stack dump: [ 184.761932][ C0] task:rcu_preempt state:R running task stack:28224 pid: 14 ppid: 2 flags:0x00004000 [ 184.772517][ C0] Call Trace: [ 184.775649][ C0] [ 184.778420][ C0] __schedule+0xccc/0x1590 [ 184.782673][ C0] ? release_firmware_map_entry+0x190/0x190 [ 184.788402][ C0] ? __kasan_check_write+0x14/0x20 [ 184.793345][ C0] schedule+0x11f/0x1e0 [ 184.797340][ C0] schedule_timeout+0x18c/0x370 [ 184.802025][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 184.807064][ C0] ? console_conditional_schedule+0x30/0x30 [ 184.812873][ C0] ? update_process_times+0x200/0x200 [ 184.818255][ C0] ? prepare_to_swait_event+0x308/0x320 [ 184.823641][ C0] rcu_gp_fqs_loop+0x2af/0xf80 [ 184.828238][ C0] ? debug_smp_processor_id+0x17/0x20 [ 184.833444][ C0] ? __note_gp_changes+0x4ab/0x920 [ 184.838396][ C0] ? rcu_gp_init+0xc30/0xc30 [ 184.842816][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 184.847855][ C0] ? rcu_gp_init+0x9cf/0xc30 [ 184.852281][ C0] rcu_gp_kthread+0xa4/0x350 [ 184.856706][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 184.861393][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 184.865909][ C0] ? __kasan_check_read+0x11/0x20 [ 184.870765][ C0] ? __kthread_parkme+0xb2/0x200 [ 184.875542][ C0] kthread+0x421/0x510 [ 184.879446][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 184.883958][ C0] ? kthread_blkcg+0xd0/0xd0 [ 184.888387][ C0] ret_from_fork+0x1f/0x30 [ 184.892642][ C0] [ 184.895500][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 184.901687][ C0] NMI backtrace for cpu 0 [ 184.905829][ C0] CPU: 0 PID: 1676 Comm: syz.1.409 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 184.915465][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 184.925360][ C0] Call Trace: [ 184.928482][ C0] [ 184.931180][ C0] dump_stack_lvl+0x151/0x1c0 [ 184.935690][ C0] ? io_uring_drop_tctx_refs+0x190/0x190 [ 184.941158][ C0] dump_stack+0x15/0x20 [ 184.945149][ C0] nmi_cpu_backtrace+0x2f7/0x300 [ 184.949924][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 184.955909][ C0] ? panic+0x760/0x760 [ 184.959818][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 184.965725][ C0] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 184.971533][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 184.977434][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 184.983161][ C0] rcu_check_gp_kthread_starvation+0x1e3/0x250 [ 184.989154][ C0] print_other_cpu_stall+0x112d/0x1340 [ 184.994448][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 184.999219][ C0] ? __kasan_check_read+0x11/0x20 [ 185.004083][ C0] rcu_sched_clock_irq+0xaec/0x12f0 [ 185.009116][ C0] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 185.015100][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 185.020141][ C0] update_process_times+0x198/0x200 [ 185.025174][ C0] tick_sched_timer+0x188/0x240 [ 185.029855][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 185.035236][ C0] __hrtimer_run_queues+0x41a/0xad0 [ 185.040286][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 185.045384][ C0] ? clockevents_program_event+0x22f/0x300 [ 185.051019][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 185.056924][ C0] hrtimer_interrupt+0x40c/0xaa0 [ 185.061697][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 185.067420][ C0] sysvec_apic_timer_interrupt+0x95/0xc0 [ 185.072889][ C0] [ 185.075778][ C0] [ 185.078552][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 185.084485][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x57/0x80 [ 185.090730][ C0] Code: ad 86 e8 fc 8e cb fc 48 83 3d 7c 38 c6 01 00 74 35 48 89 df e8 0e f3 6d fc 66 90 41 f7 c6 00 02 00 00 74 01 fb bf 01 00 00 00 24 3c 65 fc 65 8b 05 05 4c 1b 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 185.110158][ C0] RSP: 0018:ffffc90000cb7bd0 EFLAGS: 00000206 [ 185.116059][ C0] RAX: 0000000000000001 RBX: ffff88812d0f2bc0 RCX: dffffc0000000000 [ 185.123871][ C0] RDX: ffffc90002b51000 RSI: 0000000000000246 RDI: 0000000000000001 [ 185.131681][ C0] RBP: ffffc90000cb7be0 R08: ffffffff8145311c R09: ffffed1022f31769 [ 185.139495][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11022b5f108 [ 185.147305][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000000 [ 185.155126][ C0] ? __send_signal+0x95c/0xcb0 [ 185.159719][ C0] do_send_sig_info+0xfb/0x230 [ 185.164316][ C0] group_send_sig_info+0x113/0x460 [ 185.169267][ C0] ? __lock_task_sighand+0x100/0x100 [ 185.174383][ C0] ? arch_do_signal_or_restart+0x132a/0x1680 [ 185.180201][ C0] bpf_send_signal_common+0x2d8/0x420 [ 185.185411][ C0] ? trace_raw_output_bpf_trace_printk+0xd0/0xd0 [ 185.191572][ C0] bpf_send_signal+0x19/0x20 [ 185.195995][ C0] bpf_prog_7ba5217f62dcd359+0x38/0x708 [ 185.201385][ C0] bpf_trace_run2+0xec/0x210 [ 185.205815][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 185.210492][ C0] __bpf_trace_sys_enter+0x62/0x70 [ 185.215441][ C0] syscall_enter_from_user_mode+0x197/0x1b0 [ 185.221170][ C0] do_syscall_64+0x1e/0xb0 [ 185.225422][ C0] ? clear_bhb_loop+0x35/0x90 [ 185.229935][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.235661][ C0] RIP: 0033:0x7f98a04141a9 [ 185.239915][ C0] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 185.259354][ C0] RSP: 002b:00007f989eacfb40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 185.267599][ C0] RAX: ffffffffffffffda RBX: 00007f98a0630088 RCX: 00007f98a04141a9 [ 185.275411][ C0] RDX: 00007f989eacfb40 RSI: 00007f989eacfc70 RDI: 0000000000000011 [ 185.283225][ C0] RBP: 00007f98a0630080 R08: 0000000000000000 R09: 0000000000000000 [ 185.291036][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98a063008c [ 185.298844][ C0] R13: 0000000000000000 R14: 00007ffe6e731280 R15: 00007ffe6e731368 [ 185.306661][ C0] [ 192.049111][ T30] audit: type=1326 audit(1732186621.092:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 197.078907][ T30] audit: type=1326 audit(1732186621.092:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 201.078895][ T30] audit: type=1326 audit(1732186621.092:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 204.088891][ T30] audit: type=1326 audit(1732186621.092:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 211.088892][ T30] audit: type=1326 audit(1732186621.092:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 220.049339][ T30] audit: type=1326 audit(1732186621.092:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 227.058920][ T30] audit: type=1326 audit(1732186621.092:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 229.058974][ T31] INFO: task syz.1.409:1662 blocked for more than 126 seconds. [ 229.066362][ T31] Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 236.058877][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.067497][ T31] task:syz.1.409 state:D stack:23568 pid: 1662 ppid: 290 flags:0x00004006 [ 237.049050][ T30] audit: type=1326 audit(1732186621.092:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 241.058866][ T31] Call Trace: [ 241.061998][ T31] [ 241.064771][ T31] __schedule+0xccc/0x1590 [ 242.088885][ T31] ? release_firmware_map_entry+0x190/0x190 [ 242.094639][ T31] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 243.048917][ T30] audit: type=1326 audit(1732186621.092:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 245.078861][ T31] ? prepare_to_wait_event+0x3e6/0x420 [ 246.068887][ T31] schedule+0x11f/0x1e0 [ 246.072928][ T31] synchronize_rcu_expedited+0x49d/0x600 [ 246.078388][ T31] ? synchronize_rcu+0x120/0x120 [ 249.078883][ T30] audit: type=1326 audit(1732186621.092:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 251.078867][ T31] ? locks_remove_file+0x41a/0x1180 [ 251.083938][ T31] ? rcu_exp_handler+0x360/0x360 [ 251.088700][ T31] ? locks_remove_posix+0x610/0x610 [ 255.078854][ T31] ? io_schedule+0x120/0x120 [ 255.083318][ T31] ? memset+0x35/0x40 [ 255.087132][ T31] ? __kasan_check_read+0x11/0x20 [ 256.049302][ T30] audit: type=1326 audit(1732186621.092:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 259.088867][ T31] synchronize_net+0x2d/0x40 [ 259.093427][ T31] __tun_detach+0x7e1/0x1510 [ 259.097853][ T31] ? tun_chr_open+0x530/0x530 [ 263.068855][ T31] tun_chr_close+0x92/0x140 [ 263.073303][ T31] __fput+0x228/0x8c0 [ 263.077121][ T31] ____fput+0x15/0x20 [ 265.049004][ T30] audit: type=1326 audit(1732186621.092:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 266.068849][ T31] task_work_run+0x129/0x190 [ 266.073298][ T31] get_signal+0x15a9/0x1630 [ 266.077647][ T31] arch_do_signal_or_restart+0xbd/0x1680 [ 270.078855][ T31] ? __kasan_check_write+0x14/0x20 [ 270.083924][ T31] ? _raw_spin_lock+0xa4/0x1b0 [ 270.088521][ T31] ? _raw_spin_trylock_bh+0x190/0x190 [ 271.068868][ T30] audit: type=1326 audit(1732186621.092:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 276.089111][ T30] audit: type=1326 audit(1732186621.092:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 278.068898][ T31] ? __kasan_check_write+0x14/0x20 [ 278.073988][ T31] ? task_work_add+0x168/0x1d0 [ 278.078589][ T31] ? get_sigframe_size+0x10/0x10 [ 280.068925][ T31] ? pick_file+0x2d0/0x2d0 [ 280.073213][ T31] exit_to_user_mode_loop+0xa0/0xe0 [ 280.078246][ T31] exit_to_user_mode_prepare+0x5a/0xa0 [ 282.058913][ T30] audit: type=1326 audit(1732186621.092:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 283.058853][ T31] syscall_exit_to_user_mode+0x26/0x160 [ 283.064261][ T31] do_syscall_64+0x47/0xb0 [ 283.068509][ T31] ? clear_bhb_loop+0x35/0x90 [ 283.068608][ T30] audit: type=1326 audit(1732186621.092:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 289.058857][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 289.064693][ T31] RIP: 0033:0x7f98a0478819 [ 292.050658][ T31] RSP: 002b:00007ffe6e7314c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 292.078914][ T30] audit: type=1326 audit(1732186621.092:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 293.078837][ T31] RAX: 0000000000000000 RBX: 00007f98a0631ba0 RCX: 00007f98a0478819 [ 293.086657][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 297.058851][ T31] RBP: 00007f98a0631ba0 R08: 0000000000002de0 R09: 00007ffe6e7317bf [ 297.066677][ T31] R10: 00007f98a0631ac0 R11: 0000000000000246 R12: 0000000000018416 [ 298.078890][ T30] audit: type=1326 audit(1732186621.092:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 302.078879][ T31] R13: 00007ffe6e7315d0 R14: 0000000000000032 R15: ffffffffffffffff [ 302.086790][ T31] [ 307.059025][ T30] audit: type=1326 audit(1732186621.092:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 308.089045][ T31] NMI backtrace for cpu 0 [ 308.093310][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 308.102857][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 308.112749][ T31] Call Trace: [ 308.115873][ T31] [ 308.118654][ T31] dump_stack_lvl+0x151/0x1c0 [ 308.123170][ T31] ? io_uring_drop_tctx_refs+0x190/0x190 [ 308.128633][ T31] dump_stack+0x15/0x20 [ 308.132656][ T31] nmi_cpu_backtrace+0x2f7/0x300 [ 308.137400][ T31] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 308.143651][ T31] ? sched_show_task+0x3d8/0x620 [ 308.148422][ T31] ? __rcu_read_unlock+0xd0/0xd0 [ 308.153200][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 308.159103][ T31] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 308.164920][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 308.170901][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 308.176636][ T31] watchdog+0xdd7/0xf50 [ 308.180623][ T31] ? __kasan_check_write+0x14/0x20 [ 308.185574][ T31] ? hungtask_pm_notify+0x50/0x50 [ 308.190514][ T31] ? __kasan_check_read+0x11/0x20 [ 308.195375][ T31] ? __kthread_parkme+0xb2/0x200 [ 308.200153][ T31] kthread+0x421/0x510 [ 308.204060][ T31] ? hungtask_pm_notify+0x50/0x50 [ 308.208918][ T31] ? kthread_blkcg+0xd0/0xd0 [ 308.213341][ T31] ret_from_fork+0x1f/0x30 [ 308.217598][ T31] [ 308.220543][ T31] Sending NMI from CPU 0 to CPUs 1: [ 308.225501][ C1] NMI backtrace for cpu 1 [ 308.225511][ C1] CPU: 1 PID: 1669 Comm: syz.2.412 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 308.225531][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 308.225542][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x1/0x60 [ 308.225576][ C1] Code: 00 00 0f 0b 0f 1f 44 00 00 55 48 89 e5 53 48 89 fb e8 13 00 00 00 48 8b 3d b4 44 b9 05 48 89 de e8 04 96 41 00 5b 5d c3 cc 55 <48> 89 e5 48 8b 45 08 65 48 8b 0d 10 16 92 7e 65 8b 15 11 16 92 7e [ 308.225590][ C1] RSP: 0018:ffffc90000aa7a10 EFLAGS: 00000097 [ 308.225606][ C1] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffff88811c3d62c0 [ 308.225618][ C1] RDX: ffff88811c3d62c0 RSI: 0000000000000011 RDI: 0000000000000012 [ 308.225630][ C1] RBP: ffffc90000aa7b08 R08: ffffffff81456498 R09: ffffed1023297af1 [ 308.225643][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000010 [ 308.225655][ C1] R13: 0000000000010000 R14: 0000000000000011 R15: dffffc0000000000 [ 308.225667][ C1] FS: 00007ffae784c6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 308.225683][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.225695][ C1] CR2: 00007ffa16150d40 CR3: 000000012a5c5000 CR4: 00000000003506a0 [ 308.225711][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 308.225721][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 308.225732][ C1] Call Trace: [ 308.225736][ C1] [ 308.225742][ C1] ? show_regs+0x58/0x60 [ 308.225760][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 308.225782][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 308.225803][ C1] ? __sanitizer_cov_trace_pc+0x1/0x60 [ 308.225822][ C1] ? __sanitizer_cov_trace_pc+0x1/0x60 [ 308.225840][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 308.225859][ C1] ? nmi_handle+0xa8/0x280 [ 308.225877][ C1] ? __sanitizer_cov_trace_pc+0x1/0x60 [ 308.225896][ C1] ? default_do_nmi+0x69/0x160 [ 308.225914][ C1] ? exc_nmi+0xad/0x100 [ 308.225928][ C1] ? end_repeat_nmi+0x16/0x31 [ 308.225947][ C1] ? prepare_signal+0x298/0xc20 [ 308.225966][ C1] ? __sanitizer_cov_trace_pc+0x1/0x60 [ 308.225985][ C1] ? __sanitizer_cov_trace_pc+0x1/0x60 [ 308.226004][ C1] ? __sanitizer_cov_trace_pc+0x1/0x60 [ 308.226023][ C1] [ 308.226028][ C1] [ 308.226033][ C1] ? prepare_signal+0x4df/0xc20 [ 308.226050][ C1] ? recalc_sigpending+0x1a5/0x230 [ 308.226069][ C1] ? send_sigqueue+0x650/0x650 [ 308.226086][ C1] ? set_current_blocked+0x40/0x40 [ 308.226105][ C1] __send_signal+0xa1/0xcb0 [ 308.226122][ C1] ? signal_setup_done+0x446/0x5f0 [ 308.226140][ C1] send_signal+0x43a/0x590 [ 308.226156][ C1] ? memcpy+0x56/0x70 [ 308.226174][ C1] do_send_sig_info+0xde/0x230 [ 308.226192][ C1] group_send_sig_info+0x113/0x460 [ 308.226210][ C1] ? __lock_task_sighand+0x100/0x100 [ 308.226227][ C1] ? arch_do_signal_or_restart+0x132a/0x1680 [ 308.226246][ C1] bpf_send_signal_common+0x2d8/0x420 [ 308.226267][ C1] ? trace_raw_output_bpf_trace_printk+0xd0/0xd0 [ 308.226290][ C1] bpf_send_signal+0x19/0x20 [ 308.226314][ C1] bpf_prog_7ba5217f62dcd359+0x38/0x708 [ 308.226328][ C1] bpf_trace_run2+0xec/0x210 [ 308.226346][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 308.226366][ C1] __bpf_trace_sys_enter+0x62/0x70 [ 308.226384][ C1] syscall_enter_from_user_mode+0x197/0x1b0 [ 308.226403][ C1] do_syscall_64+0x1e/0xb0 [ 308.226417][ C1] ? clear_bhb_loop+0x35/0x90 [ 308.226433][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 308.226449][ C1] RIP: 0033:0x7ffae916f1a9 [ 308.226463][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 308.226476][ C1] RSP: 002b:00007ffae784ba80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 308.226493][ C1] RAX: ffffffffffffffda RBX: 00007ffae938afa0 RCX: 00007ffae916f1a9 [ 308.226506][ C1] RDX: 00007ffae784ba80 RSI: 00007ffae784bbb0 RDI: 0000000000000011 [ 308.226518][ C1] RBP: 00007ffae924675e R08: 0000000000000000 R09: 0000000000000000 [ 308.226529][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 308.226539][ C1] R13: 0000000000000000 R14: 00007ffae938afa0 R15: 00007ffc4fcecc38 [ 308.226555][ C1] [ 313.068910][ T30] audit: type=1326 audit(1732186621.092:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 318.059508][ T30] audit: type=1326 audit(1732186621.092:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 322.050529][ T30] audit: type=1326 audit(1732186621.092:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 326.058903][ T30] audit: type=1326 audit(1732186621.092:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 334.068831][ T30] audit: type=1326 audit(1732186621.092:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 340.058068][ T30] audit: type=1326 audit(1732186621.092:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 346.059168][ T30] audit: type=1326 audit(1732186621.092:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 352.070481][ T30] audit: type=1326 audit(1732186621.092:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 359.058864][ T30] audit: type=1326 audit(1732186621.092:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 365.058867][ T30] audit: type=1326 audit(1732186621.092:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 365.059206][ T31] INFO: task kworker/0:3:315 blocked for more than 178 seconds. [ 371.068841][ T30] audit: type=1326 audit(1732186621.092:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 371.078800][ T31] Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 376.068823][ T30] audit: type=1326 audit(1732186621.092:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 376.088815][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.078881][ T30] audit: type=1326 audit(1732186621.092:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7626cb11a9 code=0x7ffc0000 [ 381.058820][ T31] task:kworker/0:3 state:D stack:24128 pid: 315 ppid: 2 flags:0x00004000 [ 381.067887][ T31] Workqueue: ipv6_addrconf addrconf_verify_work