last executing test programs: 1m19.523807832s ago: executing program 4 (id=121): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000ff0000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000200)=@tcp6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) clock_getres(0x27421f8d85df8ea3, 0x0) 1m19.441470957s ago: executing program 4 (id=124): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x60}}, 0x4000000) 1m19.311256824s ago: executing program 4 (id=126): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1}, 0x40fd) 1m19.269874017s ago: executing program 4 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) pivot_root(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./bus\x00') 1m19.141610144s ago: executing program 4 (id=129): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nicvf0\x00', 0x2}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000180)={0x0, 0x3, [@remote, @dev, @broadcast]}) 1m19.000485552s ago: executing program 4 (id=133): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x2, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) 1m18.994633963s ago: executing program 32 (id=133): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x2, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) 1m5.858610064s ago: executing program 0 (id=465): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x0, 0x0, 0x0, @local, @local}}}}, 0x0) 1m5.790738708s ago: executing program 0 (id=466): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sync() 1m5.607531809s ago: executing program 0 (id=471): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0xffffffff}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x861}, 0x1c) 1m5.148892556s ago: executing program 0 (id=483): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@sysvgroups}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x6f}}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x560, &(0x7f0000000f00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') creat(&(0x7f0000000440)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0), &(0x7f00000003c0)=ANY=[], 0x361, 0x0) 1m5.092898999s ago: executing program 5 (id=485): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/27, 0x1b}, 0x5aa) sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) 1m5.017405674s ago: executing program 5 (id=487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 1m4.951553577s ago: executing program 0 (id=490): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1m4.611130137s ago: executing program 0 (id=496): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x7}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m4.542172801s ago: executing program 33 (id=496): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x7}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m4.137579945s ago: executing program 5 (id=499): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r0, 0x2c) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000500)='./file0/file0\x00', 0x1310000, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 1m3.985840524s ago: executing program 5 (id=501): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@sysvgroups}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x6f}}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x560, &(0x7f0000000f00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') creat(&(0x7f0000000440)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0), &(0x7f00000003c0)=ANY=[], 0x361, 0x0) 1m3.732044099s ago: executing program 5 (id=504): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410e9) sendfile(r1, r0, 0x0, 0x100000000) 1m3.404542958s ago: executing program 5 (id=509): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) flistxattr(r0, 0x0, 0x0) 1m3.404441188s ago: executing program 34 (id=509): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) flistxattr(r0, 0x0, 0x0) 39.454640204s ago: executing program 1 (id=1221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_cancel(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0xe2, 0xffffffffffffffff, 0x0, 0x0, 0x9b, 0x0, 0x1}, 0x0) 39.337177181s ago: executing program 1 (id=1222): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet6(r0, &(0x7f0000003080)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x2, @mcast1}, 0x1c, 0x0}}], 0x2, 0x0) close(0x3) 39.301243043s ago: executing program 1 (id=1223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='tlb_flush\x00', r2}, 0x18) 39.18099385s ago: executing program 1 (id=1224): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x0, 0xff, 0x6}) 38.929094754s ago: executing program 1 (id=1228): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0xfffffffffffffe82, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x2700) 38.560515927s ago: executing program 1 (id=1230): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x2, 0x1, 0x0, 0x6}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d58c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb6220030100dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000066d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c9727ec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f0dafc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa1c22015e53fd8a46be933ab460d8629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8f12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d61800aaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e3c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c59869c9200a1306ffa5a71ca69e89a69fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0dc4b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec086174439af6ee6c7fdb2d19c9280fa9a02e8fa6a38acfff09050d912635fed175fd06f577d40000000000000000000000000000754bffd73c0888ba8834f20b3acea57b7817663e12c1a5503bc4c13af59bda21688d68698c53ce3aa767657774db09ece7ec888d3af290207d36fa433b35e17dc0f3dc728ea1c633a4ef9e7d9bf81b57492e0544800921d1b751c5fbc163"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x800, 0x0, 0x2, 0x1}, 0x20) 38.539263277s ago: executing program 35 (id=1230): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x2, 0x1, 0x0, 0x6}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x800, 0x0, 0x2, 0x1}, 0x20) 3.699941572s ago: executing program 2 (id=2149): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0x0, 0xdbc, 0xfffe, 0x0, 0x2}, {0x80000, 0x0, 0x0, 0x0, 0x100, 0xffffffffffffffff, 0x3}, {0x200000000, 0x1, 0x0, 0x1000000000000000}, 0x400, 0x0, 0x1}, {{@in=@broadcast, 0x20000000, 0x32}, 0xa, @in6=@loopback, 0x3507, 0x4, 0x0, 0xb7, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 1.086466686s ago: executing program 2 (id=2159): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x439, 0x4000, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gre={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_TOS={0x5, 0x9, 0x3}, @IFLA_GRE_OKEY={0x8, 0x5, 0x9}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x54}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005ac0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @local}}}], 0x20, 0x11000000}}], 0x1, 0x0) 965.846603ms ago: executing program 2 (id=2170): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000eef000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 939.410645ms ago: executing program 8 (id=2161): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 924.421395ms ago: executing program 2 (id=2163): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@mss, @sack_perm, @window={0x3, 0x0, 0x8}, @mss, @window, @window, @window={0x3, 0x0, 0x7}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 820.550142ms ago: executing program 6 (id=2164): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) 525.803839ms ago: executing program 6 (id=2166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) pselect6(0x40, &(0x7f0000000080)={0xe, 0x9, 0x9, 0x10000000, 0x6, 0x8, 0xc2db, 0x7ff}, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 458.696183ms ago: executing program 8 (id=2169): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 421.949815ms ago: executing program 8 (id=2172): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0xeeee0000, 0x1000, &(0x7f0000000540)=""/4096}, {0x1, 0xef, &(0x7f0000000340)=""/239}]}) 411.765866ms ago: executing program 6 (id=2174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getrlimit(0x1, &(0x7f0000000000)) 395.979036ms ago: executing program 8 (id=2175): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 375.926948ms ago: executing program 3 (id=2177): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 363.699238ms ago: executing program 8 (id=2178): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f000001f480), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000300)=r3) close_range(r1, 0xffffffffffffffff, 0x0) 338.746539ms ago: executing program 6 (id=2179): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) unshare(0x20040600) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 323.993561ms ago: executing program 3 (id=2180): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) unshare(0x2000400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r2, 0x0, 0x0}, 0x20) 285.349653ms ago: executing program 3 (id=2183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001500000018010000716c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 270.248424ms ago: executing program 8 (id=2184): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0, "1241b72d7fffff5b000f000000462200"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "5a5f0020008a3fc945e8724a114177ffffef00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f0000006580)={0x2020}, 0xffffff80) 244.772825ms ago: executing program 6 (id=2185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)="f1fe5fe0360ab373d5026f29", 0xc}, {&(0x7f0000000040)='y\'', 0x2}], 0x2) 174.69658ms ago: executing program 3 (id=2187): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) 156.179601ms ago: executing program 3 (id=2188): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00'}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x4e22, @private=0xfffffffe}}) 155.680241ms ago: executing program 7 (id=2189): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x10}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x1, 0x2, {0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x7}}}, 0x32) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0xfffffffe}}, 0x2e) 132.991382ms ago: executing program 6 (id=2190): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x8, 0x0, 0xbfdf, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) 130.442962ms ago: executing program 7 (id=2191): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x4) sendmsg$TIPC_CMD_GET_NETID(r0, 0x0, 0x39f233fff1f91c7b) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) 114.868693ms ago: executing program 7 (id=2192): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014006500b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)={0x13, 0x70, 0x40000}, 0x20) 86.565694ms ago: executing program 7 (id=2193): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={@loopback, @private0, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000c3}) 73.197406ms ago: executing program 3 (id=2194): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) read(r2, &(0x7f0000000380)=""/189, 0x8) 50.833917ms ago: executing program 7 (id=2195): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000700)='mm_lru_insertion\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 21.307898ms ago: executing program 2 (id=2196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000240)={0x28, 0x0, 0x0, @host}, 0x10) 20.885079ms ago: executing program 7 (id=2197): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) 0s ago: executing program 2 (id=2198): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x40000000004) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r2, 0x8, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0300ffff0000", 0x6}]) kernel console output (not intermixed with test programs): 5232][ T1891] SELinux: Context $ is not valid (left unmapped). [ 48.744185][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.759811][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 48.768331][ T26] usb 2-1: SerialNumber: syz [ 48.794196][ T1815] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 48.814531][ T26] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 48.822566][ T26] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 48.833174][ T1914] 9pnet: p9_errstr2errno: server reported unknown error @ [ 48.845403][ T1897] EXT4-fs (loop3): 1 orphan inode deleted [ 48.851046][ T1897] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 48.882578][ T1897] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.008049][ T1925] loop7: detected capacity change from 0 to 256 [ 49.033125][ T26] usb 2-1: USB disconnect, device number 4 [ 49.108772][ T1925] FAT-fs (loop7): Directory bread(block 64) failed [ 49.135355][ T1925] FAT-fs (loop7): Directory bread(block 65) failed [ 49.153229][ T1925] FAT-fs (loop7): Directory bread(block 66) failed [ 49.174544][ T1925] FAT-fs (loop7): Directory bread(block 67) failed [ 49.186474][ T1925] FAT-fs (loop7): Directory bread(block 68) failed [ 49.192841][ T1925] FAT-fs (loop7): Directory bread(block 69) failed [ 49.199690][ T1925] FAT-fs (loop7): Directory bread(block 70) failed [ 49.206258][ T1925] FAT-fs (loop7): Directory bread(block 71) failed [ 49.212679][ T1925] FAT-fs (loop7): Directory bread(block 72) failed [ 49.218963][ T1925] FAT-fs (loop7): Directory bread(block 73) failed [ 49.326662][ T1933] loop3: detected capacity change from 0 to 40427 [ 49.344495][ T1933] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 49.361376][ T1933] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 49.384344][ T1933] F2FS-fs (loop3): invalid crc value [ 49.411239][ T1933] F2FS-fs (loop3): Found nat_bits in checkpoint [ 49.524425][ T1933] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 49.531376][ T1933] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 49.834567][ T1986] x_tables: duplicate underflow at hook 4 [ 49.906720][ T10] attempt to access beyond end of device [ 49.906720][ T10] loop3: rw=1, want=79976, limit=40427 [ 49.950771][ T10] attempt to access beyond end of device [ 49.950771][ T10] loop3: rw=1, want=81920, limit=40427 [ 49.981009][ T10] attempt to access beyond end of device [ 49.981009][ T10] loop3: rw=1, want=49832, limit=40427 [ 50.927756][ T2060] loop2: detected capacity change from 0 to 512 [ 50.998685][ T2060] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,grpquota,abort,,errors=continue. Quota mode: writeback. [ 51.018341][ T2060] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.147102][ T2070] loop6: detected capacity change from 0 to 512 [ 51.197231][ T2060] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #19: comm syz.2.731: corrupted inode contents [ 51.229597][ T2060] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #19: comm syz.2.731: mark_inode_dirty error [ 51.271364][ T2070] EXT4-fs (loop6): mounted filesystem without journal. Opts: nolazytime,bsddf,,errors=continue. Quota mode: writeback. [ 51.284418][ T2070] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.294901][ T2060] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #19: comm syz.2.731: corrupted inode contents [ 51.314122][ T2077] xt_bpf: check failed: parse error [ 51.321202][ T2060] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2961: inode #19: comm syz.2.731: mark_inode_dirty error [ 51.333165][ T2060] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2964: inode #19: comm syz.2.731: mark inode dirty (error -117) [ 51.346250][ T2060] EXT4-fs warning (device loop2): ext4_evict_inode:303: xattr delete (err -117) [ 51.498930][ T2084] loop6: detected capacity change from 0 to 512 [ 51.532689][ T2090] SELinux: security_context_str_to_sid(“) failed for (dev ?, type ?) errno=-22 [ 51.551581][ T2090] incfs: Backing dir is not set, filesystem can't be mounted. [ 51.577763][ T2084] EXT4-fs error (device loop6): ext4_acquire_dquot:6188: comm syz.6.741: Failed to acquire dquot type 1 [ 51.593596][ T2090] incfs: mount failed -2 [ 51.605110][ T2084] EXT4-fs (loop6): 1 truncate cleaned up [ 51.614293][ T2084] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 51.656294][ T2084] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.675618][ T2103] loop1: detected capacity change from 0 to 256 [ 51.764190][ T2103] FAT-fs (loop1): Directory bread(block 64) failed [ 51.787251][ T2103] FAT-fs (loop1): Directory bread(block 65) failed [ 51.803804][ T2103] FAT-fs (loop1): Directory bread(block 66) failed [ 51.822591][ T2103] FAT-fs (loop1): Directory bread(block 67) failed [ 51.842971][ T2103] FAT-fs (loop1): Directory bread(block 68) failed [ 51.872269][ T2103] FAT-fs (loop1): Directory bread(block 69) failed [ 51.879739][ T2103] FAT-fs (loop1): Directory bread(block 70) failed [ 51.901889][ T2103] FAT-fs (loop1): Directory bread(block 71) failed [ 51.918933][ T2103] FAT-fs (loop1): Directory bread(block 72) failed [ 51.934129][ T2103] FAT-fs (loop1): Directory bread(block 73) failed [ 52.002156][ T30] kauditd_printk_skb: 171 callbacks suppressed [ 52.002171][ T30] audit: type=1400 audit(1740163180.482:1086): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 52.270331][ T30] audit: type=1400 audit(1740163180.752:1087): avc: denied { create } for pid=2135 comm="syz.6.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.325540][ T30] audit: type=1400 audit(1740163180.772:1088): avc: denied { connect } for pid=2135 comm="syz.6.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.413751][ T30] audit: type=1400 audit(1740163180.892:1089): avc: denied { read write } for pid=2143 comm="syz.1.765" name="vhost-vsock" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.481736][ T30] audit: type=1400 audit(1740163180.922:1090): avc: denied { open } for pid=2143 comm="syz.1.765" path="/dev/vhost-vsock" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.548301][ T2152] loop1: detected capacity change from 0 to 512 [ 52.584413][ T30] audit: type=1400 audit(1740163180.922:1091): avc: denied { ioctl } for pid=2143 comm="syz.1.765" path="/dev/vhost-vsock" dev="devtmpfs" ino=260 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.644464][ T30] audit: type=1326 audit(1740163181.112:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2153 comm="syz.3.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ea533169 code=0x7ffc0000 [ 52.673407][ T30] audit: type=1326 audit(1740163181.112:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2153 comm="syz.3.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ea533169 code=0x7ffc0000 [ 52.709390][ T2161] loop3: detected capacity change from 0 to 512 [ 52.729814][ T30] audit: type=1326 audit(1740163181.112:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2153 comm="syz.3.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f28ea533169 code=0x7ffc0000 [ 52.754379][ T30] audit: type=1326 audit(1740163181.112:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2153 comm="syz.3.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ea533169 code=0x7ffc0000 [ 52.765925][ T2152] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,bsddf,,errors=continue. Quota mode: writeback. [ 52.805399][ T2152] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.824334][ T2161] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,grpjquota=,nolazytime,,errors=continue. Quota mode: writeback. [ 52.857190][ T2161] ext4 filesystem being mounted at /145/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.948176][ T2181] device veth0_vlan left promiscuous mode [ 52.954190][ T2181] device veth0_vlan entered promiscuous mode [ 52.962100][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.993542][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.001374][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.076521][ T2202] loop6: detected capacity change from 0 to 512 [ 53.129736][ T2202] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.790: inode #1: comm syz.6.790: iget: illegal inode # [ 53.169263][ T2202] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.790: error while reading EA inode 1 err=-117 [ 53.182156][ T2202] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.790: inode #1: comm syz.6.790: iget: illegal inode # [ 53.195820][ T2202] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.790: error while reading EA inode 1 err=-117 [ 53.209917][ T2202] EXT4-fs (loop6): 1 orphan inode deleted [ 53.215765][ T2202] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 53.356969][ T2226] loop3: detected capacity change from 0 to 512 [ 53.434546][ T2226] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 53.451259][ T2226] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.629956][ T2266] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 53.699266][ T2276] loop6: detected capacity change from 0 to 512 [ 53.750326][ T2276] EXT4-fs (loop6): Unrecognized mount option "permit_directio" or missing value [ 53.761617][ T2278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.823'. [ 53.925194][ T2299] overlayfs: missing 'lowerdir' [ 53.983869][ T2302] tipc: Started in network mode [ 53.999968][ T2302] tipc: Node identity ac14140f, cluster identity 4711 [ 54.026239][ T2302] tipc: New replicast peer: 255.255.255.255 [ 54.048036][ T2302] tipc: Enabled bearer , priority 10 [ 54.269841][ T2327] 9pnet: p9_errstr2errno: server reported unknown error õ1 g [ 54.327741][ T2329] device veth0_vlan left promiscuous mode [ 54.342265][ T2329] device veth0_vlan entered promiscuous mode [ 54.491326][ T2322] loop2: detected capacity change from 0 to 40427 [ 54.496148][ T314] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.544576][ T2342] netem: incorrect gi model size [ 54.549499][ T2342] netem: change failed [ 54.564992][ T2322] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 54.590559][ T2322] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 54.606282][ T2322] F2FS-fs (loop2): invalid crc value [ 54.644364][ T2356] loop1: detected capacity change from 0 to 512 [ 54.658114][ T2322] F2FS-fs (loop2): Found nat_bits in checkpoint [ 54.694305][ T2356] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000001000000,minixdf,,errors=continue. Quota mode: writeback. [ 54.720808][ T2356] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.758882][ T2322] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 54.779793][ T2322] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 54.891794][ T314] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.911530][ T314] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.922084][ T314] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 54.962857][ T314] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 54.972041][ T314] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.973252][ T2387] loop1: detected capacity change from 0 to 128 [ 54.985549][ T314] usb 8-1: config 0 descriptor?? [ 55.018989][ T2387] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 55.029774][ T2387] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.055426][ T8] attempt to access beyond end of device [ 55.055426][ T8] loop2: rw=1, want=79976, limit=40427 [ 55.079305][ T8] attempt to access beyond end of device [ 55.079305][ T8] loop2: rw=1, want=81920, limit=40427 [ 55.095714][ T8] attempt to access beyond end of device [ 55.095714][ T8] loop2: rw=1, want=51200, limit=40427 [ 55.118935][ T8] attempt to access beyond end of device [ 55.118935][ T8] loop2: rw=1, want=53248, limit=40427 [ 55.138796][ T8] attempt to access beyond end of device [ 55.138796][ T8] loop2: rw=1, want=61832, limit=40427 [ 55.156121][ T8] attempt to access beyond end of device [ 55.156121][ T8] loop2: rw=1, want=64536, limit=40427 [ 55.222945][ T2399] loop3: detected capacity change from 0 to 256 [ 55.236512][ T2399] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 55.255281][ T313] tipc: Node number set to 2886997007 [ 55.523869][ T314] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 55.535207][ T314] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 55.585431][ T2424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.886'. [ 55.683348][ T2430] netlink: 96 bytes leftover after parsing attributes in process `syz.6.889'. [ 56.037354][ T2432] loop1: detected capacity change from 0 to 512 [ 56.094459][ T2434] device wireguard0 entered promiscuous mode [ 56.103143][ T2432] EXT4-fs (loop1): Unrecognized mount option "permit_directio" or missing value [ 56.413245][ T2448] loop3: detected capacity change from 0 to 512 [ 56.434475][ T2450] netlink: 'syz.6.897': attribute type 15 has an invalid length. [ 56.442840][ T2448] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.477503][ T2448] EXT4-fs (loop3): 1 orphan inode deleted [ 56.483123][ T2448] EXT4-fs (loop3): 1 truncate cleaned up [ 56.491491][ T2448] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 56.557477][ T2459] 9pnet: p9_errstr2errno: server reported unknown error õ1 g [ 56.567793][ T2448] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 56.608750][ T2448] EXT4-fs (loop3): Remounting filesystem read-only [ 56.670874][ T2448] syz.3.896 (2448) used greatest stack depth: 19728 bytes left [ 56.802123][ T2478] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2478 comm=syz.3.910 [ 56.815270][ T2478] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2478 comm=syz.3.910 [ 56.871078][ T2482] loop1: detected capacity change from 0 to 512 [ 56.916908][ T2482] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.945356][ T2482] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm \: corrupted in-inode xattr [ 56.973488][ T2482] EXT4-fs (loop1): Remounting filesystem read-only [ 56.988947][ T2482] EXT4-fs (loop1): 1 truncate cleaned up [ 57.006439][ T2482] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,errors=remount-ro,noload,. Quota mode: none. [ 57.050860][ T20] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 57.291556][ T2515] loop6: detected capacity change from 0 to 2048 [ 57.366159][ T2515] EXT4-fs (loop6): Ignoring removed oldalloc option [ 57.368041][ T30] kauditd_printk_skb: 153 callbacks suppressed [ 57.368059][ T30] audit: type=1400 audit(1740167280.596:1249): avc: denied { ioctl } for pid=2521 comm="syz.1.931" path="socket:[24693]" dev="sockfs" ino=24693 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.386325][ T2515] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,noload,oldalloc,,errors=continue. Quota mode: none. [ 57.468863][ T2515] EXT4-fs (loop6): shut down requested (2) [ 57.489182][ T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.500316][ T20] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 57.515332][ T2529] loop7: detected capacity change from 0 to 512 [ 57.582861][ T2533] wireguard: wg2: Could not create IPv6 socket [ 57.590149][ T2533] device wg2 entered promiscuous mode [ 57.596108][ T20] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 57.610785][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 57.620229][ T2529] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000001000000,minixdf,,errors=continue. Quota mode: writeback. [ 57.627930][ T20] usb 3-1: SerialNumber: syz [ 57.643324][ T2529] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.675939][ T2537] netlink: 96 bytes leftover after parsing attributes in process `syz.6.937'. [ 57.765841][ T2551] xt_hashlimit: size too large, truncated to 1048576 [ 57.804366][ T30] audit: type=1400 audit(1740167281.007:1250): avc: denied { execute } for pid=2553 comm="syz.6.944" name="file0" dev="tmpfs" ino=558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.830767][ T30] audit: type=1400 audit(1740167281.007:1251): avc: denied { execute_no_trans } for pid=2553 comm="syz.6.944" path="/104/file0" dev="tmpfs" ino=558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.833009][ T314] usb 8-1: USB disconnect, device number 2 [ 57.861797][ T2556] incfs: Error accessing: ./file0. [ 57.872812][ T2556] incfs: mount failed -20 [ 57.949670][ T20] usb 3-1: 0:2 : does not exist [ 57.959903][ T20] usb 3-1: USB disconnect, device number 4 [ 58.073514][ T2559] loop6: detected capacity change from 0 to 40427 [ 58.098826][ T2559] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 58.107102][ T2559] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 58.118620][ T2559] F2FS-fs (loop6): invalid crc value [ 58.125870][ T2559] F2FS-fs (loop6): Found nat_bits in checkpoint [ 58.186124][ T2559] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 58.195700][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.217115][ T2559] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 58.223406][ T2574] loop3: detected capacity change from 0 to 2048 [ 58.262352][ T30] audit: type=1400 audit(1740167281.438:1252): avc: denied { create } for pid=2558 comm="syz.6.946" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 58.299876][ T2574] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 58.310674][ T30] audit: type=1326 audit(1740167281.484:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2558 comm="syz.6.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24841b9169 code=0x7ffc0000 [ 58.348431][ T45] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 58.359741][ T45] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 58.370461][ T293] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.377290][ T30] audit: type=1326 audit(1740167281.494:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2558 comm="syz.6.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f24841b9169 code=0x7ffc0000 [ 58.408464][ T30] audit: type=1400 audit(1740167281.494:1255): avc: denied { setattr } for pid=2558 comm="syz.6.946" name="file0" dev="loop6" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 58.430519][ T30] audit: type=1326 audit(1740167281.494:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2558 comm="syz.6.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24841b9169 code=0x7ffc0000 [ 58.454095][ T30] audit: type=1326 audit(1740167281.494:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2558 comm="syz.6.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24841b9169 code=0x7ffc0000 [ 58.477652][ T30] audit: type=1400 audit(1740167281.512:1258): avc: denied { mounton } for pid=2573 comm="syz.3.951" path="/192/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.536531][ T2588] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(ááí«QÿNd [ 58.643297][ T2600] loop6: detected capacity change from 0 to 16 [ 58.681311][ T2600] erofs: (device loop6): mounted with root inode @ nid 36. [ 58.711709][ T2600] overlayfs: failed to set xattr on upper [ 58.922865][ T2642] loop6: detected capacity change from 0 to 16 [ 58.963933][ T2646] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 58.995745][ T2644] loop7: detected capacity change from 0 to 4096 [ 59.007915][ T2642] erofs: (device loop6): mounted with root inode @ nid 36. [ 59.071987][ T2652] loop1: detected capacity change from 0 to 128 [ 59.087502][ T2644] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 59.111361][ T2644] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,grpquota,init_itable,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 59.131773][ T2644] EXT4-fs error (device loop7): ext4_do_update_inode:5205: inode #15: comm syz.7.982: corrupted inode contents [ 59.158023][ T2644] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #15: comm syz.7.982: mark_inode_dirty error [ 59.195232][ T2644] EXT4-fs error (device loop7): ext4_do_update_inode:5205: inode #15: comm syz.7.982: corrupted inode contents [ 59.278936][ T2644] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #15: comm syz.7.982: mark_inode_dirty error [ 59.329800][ T2644] EXT4-fs error (device loop7): ext4_do_update_inode:5205: inode #15: comm syz.7.982: corrupted inode contents [ 59.374061][ T2675] loop3: detected capacity change from 0 to 256 [ 59.399999][ T2644] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #15: comm syz.7.982: mark_inode_dirty error [ 59.423473][ T2644] EXT4-fs error (device loop7): ext4_do_update_inode:5205: inode #15: comm syz.7.982: corrupted inode contents [ 59.438860][ T2644] EXT4-fs error (device loop7): ext4_truncate:4303: inode #15: comm syz.7.982: mark_inode_dirty error [ 59.460485][ T2644] EXT4-fs error (device loop7) in ext4_setattr:5609: Corrupt filesystem [ 59.481816][ T2663] EXT4-fs error (device loop7): ext4_do_update_inode:5205: inode #15: comm syz.7.982: corrupted inode contents [ 59.484462][ T2675] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 59.494687][ T2686] loop2: detected capacity change from 0 to 128 [ 59.575851][ T2686] EXT4-fs (loop2): Ignoring removed nobh option [ 59.585026][ T1535] EXT4-fs warning (device loop7): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 59.601524][ T2686] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 59.676277][ T2686] ext4 filesystem being mounted at /194/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.699735][ T2687] loop1: detected capacity change from 0 to 40427 [ 59.720261][ T2694] loop7: detected capacity change from 0 to 512 [ 59.779983][ T2694] EXT4-fs (loop7): 1 truncate cleaned up [ 59.785521][ T2694] EXT4-fs (loop7): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,sysvgroups,lazytime,errors=continue,grpjquota=,,errors=continue. Quota mode: writeback. [ 59.809140][ T2687] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 59.816807][ T2687] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 59.840454][ T2687] F2FS-fs (loop1): Found nat_bits in checkpoint [ 59.863030][ T2703] loop2: detected capacity change from 0 to 512 [ 59.916415][ T2687] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 59.923291][ T2687] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 59.940364][ T2703] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.1006: casefold flag without casefold feature [ 59.961195][ T2703] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1006: couldn't read orphan inode 15 (err -117) [ 59.991401][ T2703] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 60.079560][ T2706] loop7: detected capacity change from 0 to 40427 [ 60.121620][ T2715] loop2: detected capacity change from 0 to 512 [ 60.129251][ T2706] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 60.137349][ T2706] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 60.146854][ T2706] F2FS-fs (loop7): invalid crc value [ 60.156970][ T2706] F2FS-fs (loop7): Found nat_bits in checkpoint [ 60.198914][ T2715] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,delalloc,,errors=continue. Quota mode: writeback. [ 60.221162][ T2715] ext4 filesystem being mounted at /198/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.277792][ T2706] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 60.289908][ T2706] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 60.470981][ T45] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 60.491270][ T45] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 60.653511][ T2757] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2757 comm=syz.6.1028 [ 60.687287][ T2757] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2757 comm=syz.6.1028 [ 60.800980][ T2774] loop1: detected capacity change from 0 to 256 [ 60.859456][ T2784] loop3: detected capacity change from 0 to 128 [ 60.871559][ T2786] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1041'. [ 60.885253][ T2784] EXT4-fs (loop3): Test dummy encryption mode enabled [ 60.910400][ T2774] FAT-fs (loop1): Directory bread(block 64) failed [ 60.917916][ T2784] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 60.929379][ T2774] FAT-fs (loop1): Directory bread(block 65) failed [ 60.936884][ T2774] FAT-fs (loop1): Directory bread(block 66) failed [ 60.944509][ T2774] FAT-fs (loop1): Directory bread(block 67) failed [ 60.956577][ T2774] FAT-fs (loop1): Directory bread(block 68) failed [ 60.963140][ T2774] FAT-fs (loop1): Directory bread(block 69) failed [ 60.969613][ T2774] FAT-fs (loop1): Directory bread(block 70) failed [ 60.976088][ T2774] FAT-fs (loop1): Directory bread(block 71) failed [ 60.982573][ T2774] FAT-fs (loop1): Directory bread(block 72) failed [ 60.990244][ T2774] FAT-fs (loop1): Directory bread(block 73) failed [ 60.995791][ T2784] ext4 filesystem being mounted at /214/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.037337][ T2784] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 61.057909][ T2784] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 61.078055][ T2798] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0007 with DS=0xf [ 61.121006][ T2804] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 61.192942][ T2815] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2815 comm=syz.2.1051 [ 61.389011][ T2832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1061'. [ 61.480254][ T2824] loop3: detected capacity change from 0 to 40427 [ 61.520151][ T2824] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 61.527849][ T2824] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 61.537515][ T2824] F2FS-fs (loop3): invalid crc value [ 61.556435][ T2824] F2FS-fs (loop3): Found nat_bits in checkpoint [ 61.633672][ T2824] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 61.642923][ T2824] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 61.718666][ T694] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 61.728089][ T694] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 62.500030][ T2913] loop3: detected capacity change from 0 to 1024 [ 62.558152][ T2916] serio: Serial port ptm0 [ 62.584008][ T2913] EXT4-fs (loop3): Test dummy encryption mode enabled [ 62.590742][ T20] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 62.600902][ T2913] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,i_version,data=ordered,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 62.865808][ T20] usb 8-1: Using ep0 maxpacket: 32 [ 62.972689][ T1644] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 63.004836][ T20] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.015784][ T20] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.025368][ T20] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 63.039540][ T20] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.044150][ T30] kauditd_printk_skb: 252 callbacks suppressed [ 63.044169][ T30] audit: type=1400 audit(1740167285.909:1511): avc: denied { create } for pid=2931 comm="syz.3.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.053818][ T20] usb 8-1: config 0 descriptor?? [ 63.073283][ T30] audit: type=1400 audit(1740167285.909:1512): avc: denied { connect } for pid=2931 comm="syz.3.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.097292][ T30] audit: type=1400 audit(1740167285.909:1513): avc: denied { write } for pid=2931 comm="syz.3.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.117726][ T30] audit: type=1326 audit(1740167285.984:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2934 comm="syz.3.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ea533169 code=0x7ffc0000 [ 63.142101][ T20] hub 8-1:0.0: USB hub found [ 63.146845][ T30] audit: type=1326 audit(1740167285.984:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2934 comm="syz.3.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28ea533169 code=0x7ffc0000 [ 63.175622][ T2935] futex_wake_op: syz.3.1105 tries to shift op by 32; fix this program [ 63.177275][ T30] audit: type=1326 audit(1740167285.984:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2934 comm="syz.3.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ea533169 code=0x7ffc0000 [ 63.207913][ T30] audit: type=1326 audit(1740167285.984:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2934 comm="syz.3.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28ea533169 code=0x7ffc0000 [ 63.234503][ T30] audit: type=1326 audit(1740167285.984:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2934 comm="syz.3.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ea533169 code=0x7ffc0000 [ 63.258847][ T30] audit: type=1326 audit(1740167285.984:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2934 comm="syz.3.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28ea533169 code=0x7ffc0000 [ 63.283187][ T30] audit: type=1326 audit(1740167286.003:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2934 comm="syz.3.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ea533169 code=0x7ffc0000 [ 63.357622][ T20] hub 8-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 63.421791][ T1644] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 63.434164][ T1644] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.442780][ T1644] usb 7-1: config 0 descriptor?? [ 63.543619][ T2961] loop2: detected capacity change from 0 to 1024 [ 63.603761][ T2961] EXT4-fs (loop2): Ignoring removed oldalloc option [ 63.610306][ T2961] EXT4-fs (loop2): Ignoring removed orlov option [ 63.616549][ T2961] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 63.623617][ T2961] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 63.647043][ T2961] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c018, mo2=0002] [ 63.655017][ T2961] System zones: 0-1, 3-12 [ 63.659912][ T2961] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,max_dir_size_kb=0x0000000000000009,sysvgroups,oldalloc,dioread_nolock,orlov,debug,noauto_da_alloc,nomblk_io_submit,dioread_nolock,,errors=continue. Quota mode: none. [ 63.730290][ T2966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'. [ 63.812615][ T2972] loop1: detected capacity change from 0 to 512 [ 63.820583][ T20] hid-generic 0003:046D:C31C.0004: unknown main item tag 0x0 [ 63.836397][ T20] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.7-1/input0 [ 63.872668][ T2972] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 63.884528][ T2972] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.114474][ T2981] loop2: detected capacity change from 0 to 2048 [ 64.152086][ T2981] Alternate GPT is invalid, using primary GPT. [ 64.158268][ T2981] loop2: p2 p3 p7 [ 64.170119][ T20] usb 8-1: USB disconnect, device number 3 [ 64.247287][ T1186] udevd[1186]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 64.248888][ T1188] udevd[1188]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 64.276827][ T26] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 64.440294][ T2993] netlink: 'syz.2.1128': attribute type 2 has an invalid length. [ 64.463179][ T2997] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1130'. [ 64.547497][ T3006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3006 comm=syz.3.1132 [ 64.609092][ T3012] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 64.661782][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.688558][ T26] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.780259][ T26] usb 2-1: New USB device found, idVendor=20b7, idProduct=0000, bcdDevice= 0.00 [ 64.810282][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 64.818465][ T26] usb 2-1: SerialNumber: syz [ 64.843877][ T3036] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1148'. [ 64.854062][ T1644] usb 7-1: Cannot set autoneg [ 64.858653][ T1644] MOSCHIP usb-ethernet driver: probe of 7-1:0.0 failed with error -71 [ 64.874480][ T1644] usb 7-1: USB disconnect, device number 3 [ 65.065634][ T3065] loop3: detected capacity change from 0 to 256 [ 65.094255][ T3065] attempt to access beyond end of device [ 65.094255][ T3065] loop3: rw=2049, want=324, limit=256 [ 65.110292][ T3065] attempt to access beyond end of device [ 65.110292][ T3065] loop3: rw=34817, want=293, limit=256 [ 65.114872][ T3069] loop7: detected capacity change from 0 to 512 [ 65.128068][ T26] usb 2-1: 0:2 : does not exist [ 65.133534][ T26] usb 2-1: unit 48 not found! [ 65.139463][ T26] usb 2-1: USB disconnect, device number 5 [ 65.148381][ T3069] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 65.159970][ T3069] EXT4-fs (loop7): 1 truncate cleaned up [ 65.165917][ T3069] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.356728][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.425547][ T3095] loop6: detected capacity change from 0 to 256 [ 65.521309][ T3095] attempt to access beyond end of device [ 65.521309][ T3095] loop6: rw=2049, want=324, limit=256 [ 65.567240][ T3095] attempt to access beyond end of device [ 65.567240][ T3095] loop6: rw=34817, want=293, limit=256 [ 65.863281][ T3135] netem: change failed [ 65.979150][ T3141] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 66.062855][ T3148] loop7: detected capacity change from 0 to 256 [ 66.202600][ T3148] attempt to access beyond end of device [ 66.202600][ T3148] loop7: rw=2049, want=324, limit=256 [ 66.204780][ T3131] loop2: detected capacity change from 0 to 40427 [ 66.231936][ T3148] attempt to access beyond end of device [ 66.231936][ T3148] loop7: rw=34817, want=293, limit=256 [ 66.246961][ T3157] loop1: detected capacity change from 0 to 512 [ 66.308206][ T3131] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 66.318706][ T3131] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 66.328373][ T3131] F2FS-fs (loop2): invalid crc value [ 66.344460][ T3157] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #3: comm syz.1.1202: corrupted inode contents [ 66.356922][ T3157] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #3: comm syz.1.1202: mark_inode_dirty error [ 66.368880][ T3157] EXT4-fs error (device loop1): ext4_do_update_inode:5205: inode #3: comm syz.1.1202: corrupted inode contents [ 66.378716][ T3103] loop3: detected capacity change from 0 to 131072 [ 66.381232][ T3157] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.1202: mark_inode_dirty error [ 66.402949][ T3157] EXT4-fs error (device loop1): ext4_acquire_dquot:6188: comm syz.1.1202: Failed to acquire dquot type 0 [ 66.414207][ T3131] F2FS-fs (loop2): Found nat_bits in checkpoint [ 66.417135][ T3157] EXT4-fs (loop1): 1 orphan inode deleted [ 66.426323][ T3157] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.445255][ T3157] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.448155][ T3103] F2FS-fs (loop3): invalid crc value [ 66.501179][ T3168] loop6: detected capacity change from 0 to 128 [ 66.528797][ T3131] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 66.529836][ T3168] EXT4-fs (loop6): mounted filesystem without journal. Opts: minixdf,nodelalloc,,errors=continue. Quota mode: none. [ 66.537554][ T3131] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 66.554801][ T3168] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.577053][ T3103] F2FS-fs (loop3): Found nat_bits in checkpoint [ 66.606753][ T3168] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: none. [ 66.676753][ T3103] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 66.678062][ T3179] loop7: detected capacity change from 0 to 128 [ 66.691718][ T3168] EXT4-fs (loop6): re-mounted. Opts: usrquota,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="grpquota,jqfmt=vfsold,noblock_validity,. Quota mode: writeback. [ 66.977862][ T3196] x_tables: duplicate underflow at hook 4 [ 67.059094][ T10] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 67.073536][ T10] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 67.131805][ T3209] loop7: detected capacity change from 0 to 128 [ 67.233514][ T3209] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.266823][ T3209] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.412494][ T3217] loop1: detected capacity change from 0 to 1024 [ 67.467868][ T3218] loop2: detected capacity change from 0 to 4096 [ 67.484959][ T3218] EXT4-fs (loop2): Test dummy encryption mode enabled [ 67.492176][ T3218] EXT4-fs (loop2): Ignoring removed orlov option [ 67.499437][ T3218] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 67.499437][ T3218] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 67.499437][ T3218] [ 67.527580][ T3218] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,test_dummy_encryption,nolazytime,orlov,data_err=abort,errors=remount-ro,grpid,nouser_xattr,. Quota mode: writeback. [ 67.554555][ T3218] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 67.555206][ T3217] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 67.637872][ T289] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 67.656716][ T289] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 67.669418][ T289] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 67.683860][ T289] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 67.694862][ T289] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 67.705857][ T289] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 67.716598][ T289] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 67.727719][ T289] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 67.738479][ T289] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 67.749229][ T289] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 67.797286][ T289] bridge0: port 3(syz_tun) entered disabled state [ 67.819329][ T289] device syz_tun left promiscuous mode [ 67.830407][ T289] bridge0: port 3(syz_tun) entered disabled state [ 67.974169][ T26] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.986117][ T26] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.015133][ T26] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.022733][ T26] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.034308][ T26] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.044385][ T26] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.052553][ T26] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.063941][ T26] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [] on ýÿ [ 68.237046][ T3240] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.248904][ T3240] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.260750][ T3263] devpts: called with bogus options [ 68.263086][ T3240] device bridge_slave_0 entered promiscuous mode [ 68.273221][ T3240] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.288261][ T3240] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.295741][ T3240] device bridge_slave_1 entered promiscuous mode [ 68.362375][ T10] device bridge_slave_1 left promiscuous mode [ 68.368860][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.377748][ T10] device bridge_slave_0 left promiscuous mode [ 68.384470][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.394457][ T10] device veth1_macvtap left promiscuous mode [ 68.400451][ T10] device veth0_vlan left promiscuous mode [ 68.514074][ T3275] loop7: detected capacity change from 0 to 512 [ 68.597109][ T3240] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.597859][ T3275] EXT4-fs error (device loop7): ext4_do_update_inode:5205: inode #3: comm syz.7.1249: corrupted inode contents [ 68.604015][ T3240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.604167][ T3240] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.616255][ T3275] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #3: comm syz.7.1249: mark_inode_dirty error [ 68.622583][ T3240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.648006][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.655887][ T3275] EXT4-fs error (device loop7): ext4_do_update_inode:5205: inode #3: comm syz.7.1249: corrupted inode contents [ 68.668301][ T1561] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.670274][ T3275] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #3: comm syz.7.1249: mark_inode_dirty error [ 68.686418][ T1561] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.687004][ T3275] __quota_error: 1731 callbacks suppressed [ 68.687021][ T3275] Quota error (device loop7): write_blk: dquota write failed [ 68.706398][ T3275] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 68.716261][ T3275] EXT4-fs error (device loop7): ext4_acquire_dquot:6188: comm syz.7.1249: Failed to acquire dquot type 0 [ 68.729232][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.737496][ T1561] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.738452][ T3275] EXT4-fs (loop7): 1 orphan inode deleted [ 68.744374][ T1561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.750191][ T3275] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.767891][ T3275] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.784903][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.798636][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.805501][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.813983][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.821582][ T1644] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 68.829245][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.845719][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.858114][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.872667][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.880883][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.889640][ T3283] serio: Serial port ptm0 [ 68.889930][ T3240] device veth0_vlan entered promiscuous mode [ 68.907982][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.918425][ T3240] device veth1_macvtap entered promiscuous mode [ 68.928922][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.939638][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.959588][ T30] audit: type=1400 audit(1740167291.451:3250): avc: denied { mounton } for pid=3240 comm="syz-executor" path="/root/syzkaller.5Ud75I/syz-tmp" dev="sda1" ino=1956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.989672][ T30] audit: type=1400 audit(1740167291.451:3251): avc: denied { mount } for pid=3240 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.030992][ T30] audit: type=1400 audit(1740167291.451:3252): avc: denied { mount } for pid=3240 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.066045][ T30] audit: type=1400 audit(1740167291.451:3253): avc: denied { mounton } for pid=3240 comm="syz-executor" path="/root/syzkaller.5Ud75I/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.119082][ T1644] usb 7-1: Using ep0 maxpacket: 32 [ 69.148268][ T30] audit: type=1400 audit(1740167291.451:3254): avc: denied { mounton } for pid=3240 comm="syz-executor" path="/root/syzkaller.5Ud75I/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=26403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.194630][ T3302] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3302 comm=syz.7.1259 [ 69.213602][ T3302] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3302 comm=syz.7.1259 [ 69.226711][ T30] audit: type=1400 audit(1740167291.470:3255): avc: denied { mounton } for pid=3240 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.250310][ T30] audit: type=1400 audit(1740167291.470:3256): avc: denied { mount } for pid=3240 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.273683][ T30] audit: type=1400 audit(1740167291.470:3257): avc: denied { mounton } for pid=3240 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 69.298385][ T1644] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.316492][ T1644] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.326452][ T1644] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 69.345457][ T1644] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.353819][ T3308] loop7: detected capacity change from 0 to 128 [ 69.366294][ T3310] loop8: detected capacity change from 0 to 512 [ 69.375861][ T1644] usb 7-1: config 0 descriptor?? [ 69.395176][ T3308] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 69.422494][ T3308] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.440471][ T1644] hub 7-1:0.0: USB hub found [ 69.445619][ T3310] EXT4-fs error (device loop8): ext4_do_update_inode:5205: inode #3: comm syz.8.1263: corrupted inode contents [ 69.458056][ T3310] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #3: comm syz.8.1263: mark_inode_dirty error [ 69.470130][ T3310] EXT4-fs error (device loop8): ext4_do_update_inode:5205: inode #3: comm syz.8.1263: corrupted inode contents [ 69.482055][ T3310] EXT4-fs error (device loop8): __ext4_ext_dirty:183: inode #3: comm syz.8.1263: mark_inode_dirty error [ 69.498652][ T3310] EXT4-fs error (device loop8): ext4_acquire_dquot:6188: comm syz.8.1263: Failed to acquire dquot type 0 [ 69.501534][ T3323] loop2: detected capacity change from 0 to 128 [ 69.517696][ T3310] EXT4-fs (loop8): 1 orphan inode deleted [ 69.523302][ T3310] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.534270][ T3310] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.570189][ T3325] loop7: detected capacity change from 0 to 4096 [ 69.639861][ T3325] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.676884][ T3325] fs-verity: sha256 using implementation "sha256-avx2" [ 69.683746][ T1644] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 69.708637][ T3325] fs-verity (loop7, inode 16): fs-verity keyring is empty, rejecting signed file! [ 69.851218][ T3327] loop8: detected capacity change from 0 to 40427 [ 69.868689][ T3327] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 69.878848][ T3327] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 69.909514][ T3327] F2FS-fs (loop8): Found nat_bits in checkpoint [ 69.974334][ T3355] loop2: detected capacity change from 0 to 1024 [ 69.981699][ T3353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1278'. [ 69.990598][ T3327] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 69.999044][ T3353] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 70.008918][ T3327] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 70.031406][ T3327] attempt to access beyond end of device [ 70.031406][ T3327] loop8: rw=2049, want=45224, limit=40427 [ 70.054596][ T3327] attempt to access beyond end of device [ 70.054596][ T3327] loop8: rw=2049, want=45224, limit=40427 [ 70.068737][ T3355] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.136005][ T1644] hid-generic 0003:046D:C31C.0006: unknown main item tag 0x0 [ 70.155748][ T1644] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 70.166159][ T694] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 70.230952][ T694] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 70.254002][ T694] EXT4-fs (loop2): This should not happen!! Data will be lost [ 70.254002][ T694] [ 70.284203][ T694] EXT4-fs (loop2): Total free blocks count 0 [ 70.291304][ T694] EXT4-fs (loop2): Free/Dirty block details [ 70.297364][ T694] EXT4-fs (loop2): free_blocks=68451041280 [ 70.303078][ T694] EXT4-fs (loop2): dirty_blocks=16 [ 70.308300][ T694] EXT4-fs (loop2): Block reservation details [ 70.314178][ T694] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 70.329088][ T3371] loop7: detected capacity change from 0 to 40427 [ 70.397756][ T3371] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 70.411799][ T3371] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 70.435282][ T3371] F2FS-fs (loop7): invalid crc value [ 70.459712][ T3371] F2FS-fs (loop7): Found nat_bits in checkpoint [ 70.476803][ T6] usb 7-1: USB disconnect, device number 4 [ 70.497959][ T1644] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 70.542453][ T3371] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 70.549365][ T3371] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 70.606015][ T3401] loop8: detected capacity change from 0 to 1024 [ 70.649495][ T3401] EXT4-fs (loop8): Ignoring removed orlov option [ 70.658601][ T3401] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 70.680395][ T3401] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nolazytime,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 70.706584][ T3401] syz.8.1299[3401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.706679][ T3401] syz.8.1299[3401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.802365][ T3419] syz.2.1306[3419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.835428][ T3419] syz.2.1306[3419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.907258][ T1644] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.963868][ T1644] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.075298][ T1644] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 71.086487][ T1644] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 71.101250][ T1644] usb 4-1: SerialNumber: syz [ 71.140059][ T3431] input: syz1 as /devices/virtual/input/input5 [ 71.168171][ T45] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 71.186459][ T45] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 71.346393][ T3437] netem: incorrect ge model size [ 71.355829][ T3437] netem: change failed [ 71.397227][ T3439] input: syz0 as /devices/virtual/input/input6 [ 71.407340][ T1644] usb 4-1: 0:2 : does not exist [ 71.423693][ T1644] usb 4-1: USB disconnect, device number 3 [ 71.491757][ T3443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 71.508525][ T3447] loop8: detected capacity change from 0 to 128 [ 71.513173][ T3445] loop7: detected capacity change from 0 to 2048 [ 71.548572][ T3443] syz.6.1318 (3443) used greatest stack depth: 19384 bytes left [ 71.578494][ T3445] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 71.619887][ T3445] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 71.680492][ T1561] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm kworker/u4:6: bg 0: block 234: padding at end of block bitmap is not set [ 71.704333][ T1561] EXT4-fs (loop7): Remounting filesystem read-only [ 72.096319][ T3469] loop2: detected capacity change from 0 to 40427 [ 73.394673][ C0] sched: RT throttling activated [ 75.735883][ T3499] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1338'. [ 75.760832][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 75.760848][ T30] audit: type=1326 audit(1740167297.812:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.7.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142da9d169 code=0x7ffc0000 [ 75.810963][ T30] audit: type=1326 audit(1740167297.840:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.7.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f142da9d169 code=0x7ffc0000 [ 75.834370][ T30] audit: type=1326 audit(1740167297.840:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.7.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142da9d169 code=0x7ffc0000 [ 75.893816][ T30] audit: type=1400 audit(1740167297.840:3302): avc: denied { ioctl } for pid=3497 comm="syz.3.1339" path="socket:[27870]" dev="sockfs" ino=27870 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.972310][ T30] audit: type=1400 audit(1740167297.840:3303): avc: denied { getopt } for pid=3497 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.997117][ T30] audit: type=1400 audit(1740167297.915:3304): avc: denied { bind } for pid=3509 comm="syz.8.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.017823][ T3517] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1347'. [ 76.026767][ T30] audit: type=1400 audit(1740167297.915:3305): avc: denied { setopt } for pid=3509 comm="syz.8.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.080882][ T30] audit: type=1326 audit(1740167297.971:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3513 comm="syz.2.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6fd7f169 code=0x7ffc0000 [ 76.102046][ T3519] loop7: detected capacity change from 0 to 512 [ 76.148169][ T30] audit: type=1326 audit(1740167297.971:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3507 comm="syz.3.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ea533169 code=0x7ffc0000 [ 76.232369][ T30] audit: type=1326 audit(1740167297.971:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3507 comm="syz.3.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f28ea533169 code=0x7ffc0000 [ 76.260453][ T3519] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.1346: casefold flag without casefold feature [ 76.274246][ T3540] loop6: detected capacity change from 0 to 512 [ 76.276466][ T3519] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.1346: couldn't read orphan inode 15 (err -117) [ 76.292505][ T3519] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.375453][ T3550] loop3: detected capacity change from 0 to 512 [ 76.389279][ T3540] EXT4-fs (loop6): mounted filesystem without journal. Opts: nolazytime,bsddf,,errors=continue. Quota mode: writeback. [ 76.389984][ T3556] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1364'. [ 76.433294][ T3540] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.459271][ T3564] loop7: detected capacity change from 0 to 512 [ 76.473940][ T3550] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 76.484657][ T3550] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 76.527435][ T3550] EXT4-fs (loop3): 1 truncate cleaned up [ 76.535532][ T3550] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue. Quota mode: none. [ 76.547596][ T3564] EXT4-fs (loop7): mounted filesystem without journal. Opts: nolazytime,bsddf,,errors=continue. Quota mode: writeback. [ 76.557903][ T3550] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 76.591562][ T3564] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.665134][ T3579] loop8: detected capacity change from 0 to 128 [ 76.717934][ T3564] EXT4-fs error (device loop7): ext4_do_update_inode:5205: inode #19: comm syz.7.1367: corrupted inode contents [ 76.763519][ T3564] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #19: comm syz.7.1367: mark_inode_dirty error [ 76.800219][ T3564] EXT4-fs error (device loop7): ext4_do_update_inode:5205: inode #19: comm syz.7.1367: corrupted inode contents [ 76.850815][ T3564] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2961: inode #19: comm syz.7.1367: mark_inode_dirty error [ 76.879476][ T3564] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2964: inode #19: comm syz.7.1367: mark inode dirty (error -117) [ 76.900937][ T3564] EXT4-fs warning (device loop7): ext4_evict_inode:303: xattr delete (err -117) [ 76.901655][ T3593] loop3: detected capacity change from 0 to 512 [ 76.950520][ T3585] loop2: detected capacity change from 0 to 40427 [ 76.977173][ T3593] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 76.995277][ T3585] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 77.013456][ T3585] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 77.026650][ T3585] F2FS-fs (loop2): invalid crc value [ 77.034047][ T3605] syz.7.1383[3605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.034320][ T3605] syz.7.1383[3605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.048638][ T3608] futex_wake_op: syz.8.1384 tries to shift op by 36; fix this program [ 77.072449][ T3593] EXT4-fs (loop3): 1 truncate cleaned up [ 77.097972][ T3593] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 77.130856][ T3585] F2FS-fs (loop2): Found nat_bits in checkpoint [ 77.158906][ T3613] xt_bpf: check failed: parse error [ 77.234983][ T3585] F2FS-fs (loop2): Start checkpoint disabled! [ 77.253048][ T3585] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 77.262574][ T3585] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 77.307457][ T3624] bridge0: port 3(vlan2) entered blocking state [ 77.324595][ T3624] bridge0: port 3(vlan2) entered disabled state [ 77.368574][ T3585] attempt to access beyond end of device [ 77.368574][ T3585] loop2: rw=2049, want=53384, limit=40427 [ 77.424319][ T3637] netlink: 'syz.6.1395': attribute type 4 has an invalid length. [ 77.434774][ T3637] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1395'. [ 77.469928][ T1561] attempt to access beyond end of device [ 77.469928][ T1561] loop2: rw=2049, want=40992, limit=40427 [ 77.600503][ T3650] syz.8.1403[3650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.600578][ T3650] syz.8.1403[3650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.679315][ T3656] device wireguard0 entered promiscuous mode [ 77.826581][ T3670] syz.6.1410[3670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.826661][ T3670] syz.6.1410[3670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.875080][ T3673] syz.2.1411[3673] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.916490][ T3673] syz.2.1411[3673] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.973353][ T3641] loop7: detected capacity change from 0 to 40427 [ 78.019691][ T3678] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.033977][ T3678] FAT-fs (loop5): unable to read boot sector [ 78.047982][ T3641] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 78.071143][ T3641] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 78.090912][ T3641] F2FS-fs (loop7): invalid crc value [ 78.122370][ T3641] F2FS-fs (loop7): Found nat_bits in checkpoint [ 78.208159][ T3641] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 78.220208][ T3641] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 78.408028][ T26] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 78.503884][ T3730] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3730 comm=syz.3.1438 [ 78.686232][ T26] usb 9-1: Using ep0 maxpacket: 16 [ 78.737997][ T3722] loop6: detected capacity change from 0 to 40427 [ 78.815241][ T26] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.840608][ T3722] F2FS-fs (loop6): Fix alignment : done, start(4096) end(16896) block(12288) [ 78.846362][ T26] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.856831][ T3722] F2FS-fs (loop6): Invalid segment/section count (31, 24 x 1) [ 78.872924][ T3722] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 78.894212][ T3736] loop3: detected capacity change from 0 to 40427 [ 78.896431][ T26] usb 9-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 78.909517][ T26] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.918852][ T26] usb 9-1: config 0 descriptor?? [ 78.948783][ T3736] F2FS-fs (loop3): invalid crc value [ 78.955847][ T3736] F2FS-fs (loop3): Found nat_bits in checkpoint [ 79.009145][ T3736] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 79.376597][ T3782] loop6: detected capacity change from 0 to 128 [ 79.434634][ T3782] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.436200][ T26] wacom 0003:056A:00B3.0007: unknown main item tag 0x0 [ 79.445662][ T3782] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.462367][ T26] wacom 0003:056A:00B3.0007: unknown main item tag 0x0 [ 79.469294][ T26] wacom 0003:056A:00B3.0007: item fetching failed at offset 2/5 [ 79.477171][ T26] wacom 0003:056A:00B3.0007: parse failed [ 79.482753][ T26] wacom: probe of 0003:056A:00B3.0007 failed with error -22 [ 79.491682][ T3782] overlayfs: upper fs does not support tmpfile. [ 79.498725][ T20] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 79.666606][ T26] usb 9-1: USB disconnect, device number 2 [ 79.765508][ T20] usb 4-1: Using ep0 maxpacket: 32 [ 79.894390][ T20] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 79.913134][ T20] usb 4-1: config 0 has no interface number 0 [ 79.919849][ T20] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.930868][ T20] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.947341][ T20] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 79.967122][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.989477][ T20] usb 4-1: config 0 descriptor?? [ 80.046025][ T3801] loop7: detected capacity change from 0 to 40427 [ 80.098345][ T3801] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 80.105983][ T3801] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 80.116639][ T3801] F2FS-fs (loop7): Found nat_bits in checkpoint [ 80.148528][ T3801] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 80.155598][ T3801] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 80.171728][ T1644] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 80.184255][ T3801] attempt to access beyond end of device [ 80.184255][ T3801] loop7: rw=2049, want=77960, limit=40427 [ 80.216243][ T45] attempt to access beyond end of device [ 80.216243][ T45] loop7: rw=1, want=77832, limit=40427 [ 80.232346][ T45] attempt to access beyond end of device [ 80.232346][ T45] loop7: rw=1, want=77856, limit=40427 [ 80.245914][ T1535] attempt to access beyond end of device [ 80.245914][ T1535] loop7: rw=2051, want=77848, limit=40427 [ 80.258509][ T1535] F2FS-fs (loop7): Issue discard(9729, 9729, 2) failed, ret: -5 [ 80.300025][ T6] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 80.417138][ T3829] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 80.428524][ T3829] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 80.523259][ T3839] loop7: detected capacity change from 0 to 128 [ 80.578026][ T1644] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.595045][ T3844] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 80.596871][ T1644] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.621890][ T1644] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.635023][ T1644] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.644501][ T1644] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.656667][ T1644] usb 3-1: config 0 descriptor?? [ 80.716919][ T6] usb 7-1: config 1 has an invalid interface number: 129 but max is 1 [ 80.729545][ T6] usb 7-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 80.739031][ T6] usb 7-1: config 1 has no interface number 2 [ 80.744941][ T6] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.758744][ T6] usb 7-1: too many endpoints for config 1 interface 129 altsetting 3: 64, using maximum allowed: 30 [ 80.771446][ T20] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0094.0008/input/input7 [ 80.784289][ T6] usb 7-1: config 1 interface 129 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 80.805474][ T20] uclogic 0003:28BD:0094.0008: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.3-1/input1 [ 80.818273][ T6] usb 7-1: config 1 interface 129 has no altsetting 0 [ 80.920643][ T3867] loop7: detected capacity change from 0 to 256 [ 80.956181][ T3873] input: syz1 as /devices/virtual/input/input8 [ 80.964348][ T3867] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 80.989389][ T20] usb 4-1: USB disconnect, device number 4 [ 81.001234][ T3875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3875 comm=syz.8.1500 [ 81.015344][ T3867] exFAT-fs (loop7): hint_cluster is invalid (17) [ 81.015842][ T3875] device ipip0 entered promiscuous mode [ 81.027090][ T6] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.035874][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.052153][ T6] usb 7-1: Product: syz [ 81.056162][ T6] usb 7-1: Manufacturer: syz [ 81.060972][ T6] usb 7-1: SerialNumber: syz [ 81.104532][ T3881] loop8: detected capacity change from 0 to 128 [ 81.167072][ T1644] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 81.183279][ T1644] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 81.337844][ T30] kauditd_printk_skb: 344 callbacks suppressed [ 81.337861][ T30] audit: type=1400 audit(1740167303.033:3653): avc: denied { bind } for pid=3893 comm="syz.8.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.385148][ T3896] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 81.412009][ T3898] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3898 comm=syz.8.1511 [ 81.424349][ T3898] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3898 comm=syz.8.1511 [ 81.478010][ T30] audit: type=1400 audit(1740167303.164:3654): avc: denied { create } for pid=3901 comm="syz.8.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.497563][ T30] audit: type=1400 audit(1740167303.164:3655): avc: denied { connect } for pid=3901 comm="syz.8.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.650486][ T3905] loop8: detected capacity change from 0 to 40427 [ 81.733607][ T20] usb 3-1: USB disconnect, device number 5 [ 81.746187][ T3905] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 81.764069][ T3905] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 81.779060][ T3905] F2FS-fs (loop8): invalid crc value [ 81.786171][ T3905] F2FS-fs (loop8): Found nat_bits in checkpoint [ 81.831439][ T3905] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 81.838421][ T3905] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 81.840423][ T3913] loop3: detected capacity change from 0 to 40427 [ 81.882987][ T3913] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 81.890671][ T3913] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 81.902926][ T3913] F2FS-fs (loop3): invalid crc value [ 81.909902][ T3913] F2FS-fs (loop3): Found nat_bits in checkpoint [ 81.952330][ T3913] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 81.959481][ T3913] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 82.090646][ T3928] loop7: detected capacity change from 0 to 128 [ 82.156731][ T3930] device wireguard0 entered promiscuous mode [ 82.266892][ T6] cdc_ncm 7-1:1.0: bind() failure [ 82.321018][ T6] cdc_ncm: probe of 7-1:1.1 failed with error -71 [ 82.343413][ T6] cdc_mbim: probe of 7-1:1.1 failed with error -71 [ 82.372198][ T6] usb 7-1: USB disconnect, device number 5 [ 82.393193][ T30] audit: type=1326 audit(1740167304.006:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.7.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142da9d169 code=0x7ffc0000 [ 82.462974][ T30] audit: type=1326 audit(1740167304.043:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.7.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142da9d169 code=0x7ffc0000 [ 82.497932][ T3905] attempt to access beyond end of device [ 82.497932][ T3905] loop8: rw=2049, want=40432, limit=40427 [ 82.509196][ T30] audit: type=1326 audit(1740167304.043:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.7.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f142da9d169 code=0x7ffc0000 [ 82.532959][ T30] audit: type=1326 audit(1740167304.043:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.7.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142da9d169 code=0x7ffc0000 [ 82.562838][ T30] audit: type=1326 audit(1740167304.043:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="syz.7.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142da9d169 code=0x7ffc0000 [ 82.586626][ T45] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 82.609713][ T45] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 82.844660][ T3974] af_packet: tpacket_rcv: packet too big, clamped from 64726 to 4294967272. macoff=96 [ 82.913485][ T30] audit: type=1400 audit(1740167304.501:3661): avc: denied { write } for pid=3976 comm="syz.8.1532" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 83.011462][ T3991] loop8: detected capacity change from 0 to 256 [ 83.025798][ T30] audit: type=1326 audit(1740167304.604:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.2.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6fd7f169 code=0x7ffc0000 [ 83.079496][ T3991] exfat: Deprecated parameter 'utf8' [ 83.084741][ T3991] exfat: Deprecated parameter 'namecase' [ 83.096399][ T3991] exfat: Deprecated parameter 'utf8' [ 83.133613][ T3991] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 83.299510][ T3983] loop6: detected capacity change from 0 to 40427 [ 83.383388][ T3983] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 83.394786][ T3983] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 83.424703][ T3983] F2FS-fs (loop6): invalid crc value [ 83.467477][ T3983] F2FS-fs (loop6): Found nat_bits in checkpoint [ 83.600455][ T3983] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 83.609151][ T3983] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 83.618293][ T4028] loop3: detected capacity change from 0 to 128 [ 83.738404][ T4028] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.759152][ T4028] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.779228][ T4028] overlayfs: upper fs does not support tmpfile. [ 83.848704][ T4051] Zero length message leads to an empty skb [ 83.956674][ T694] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 83.966792][ T694] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 84.174694][ T4057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1573'. [ 84.201624][ T4057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1573'. [ 84.209774][ T4063] syz.6.1574[4063] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.210378][ T4063] syz.6.1574[4063] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.289753][ T4067] device batadv_slave_0 entered promiscuous mode [ 84.323524][ T4067] device lo entered promiscuous mode [ 84.329030][ T4066] device lo left promiscuous mode [ 84.334779][ T4066] device batadv_slave_0 left promiscuous mode [ 84.403496][ T4079] loop2: detected capacity change from 0 to 128 [ 84.423348][ T4083] netlink: 'syz.6.1583': attribute type 4 has an invalid length. [ 84.434532][ T4083] netlink: 'syz.6.1583': attribute type 4 has an invalid length. [ 84.491547][ T4079] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.509095][ T4079] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.553858][ T4079] overlayfs: upper fs does not support tmpfile. [ 84.685485][ T4102] loop2: detected capacity change from 0 to 256 [ 84.704356][ T4102] exfat: Deprecated parameter 'utf8' [ 84.709605][ T4102] exfat: Deprecated parameter 'namecase' [ 84.715708][ T4102] exfat: Deprecated parameter 'utf8' [ 84.717890][ T4105] loop8: detected capacity change from 0 to 2048 [ 84.749796][ T4102] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 84.812516][ T4105] EXT4-fs (loop8): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: none. [ 84.915756][ T4121] loop3: detected capacity change from 0 to 512 [ 84.927516][ T4123] device wireguard0 entered promiscuous mode [ 84.946208][ T4128] loop7: detected capacity change from 0 to 1024 [ 84.954102][ T4121] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 84.966687][ T4121] EXT4-fs (loop3): Ignoring removed bh option [ 84.977269][ T4128] EXT4-fs (loop7): Ignoring removed bh option [ 84.978506][ T4132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1604'. [ 84.983299][ T4128] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.992238][ T4121] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.019254][ T4128] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,max_batch_time=0x0000000000000002,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 85.035810][ T4121] EXT4-fs (loop3): 1 truncate cleaned up [ 85.063312][ T4121] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,quota,nogrpid,,errors=continue. Quota mode: writeback. [ 85.473730][ T1644] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 85.531602][ T4168] syz.6.1618[4168] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.531716][ T4168] syz.6.1618[4168] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.740819][ T1644] usb 4-1: Using ep0 maxpacket: 16 [ 85.911885][ T1644] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.928173][ T1644] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.948629][ T1644] usb 4-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 85.967816][ T1644] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.985164][ T1644] usb 4-1: config 0 descriptor?? [ 86.149715][ T4180] loop7: detected capacity change from 0 to 131072 [ 86.175571][ T4180] F2FS-fs (loop7): invalid crc value [ 86.182737][ T4180] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 86.207876][ T4174] loop6: detected capacity change from 0 to 131072 [ 86.229831][ T4180] F2FS-fs (loop7): Mounted with checkpoint version = 753bd00b [ 86.329720][ T4174] F2FS-fs (loop6): invalid crc value [ 86.336662][ T4174] F2FS-fs (loop6): Found nat_bits in checkpoint [ 86.376935][ T4174] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 86.479911][ T1644] wacom 0003:056A:00B3.000A: unknown main item tag 0x0 [ 86.490365][ T1644] wacom 0003:056A:00B3.000A: unknown main item tag 0x0 [ 86.503982][ T1644] wacom 0003:056A:00B3.000A: item fetching failed at offset 2/5 [ 86.531679][ T1644] wacom 0003:056A:00B3.000A: parse failed [ 86.542566][ T1644] wacom: probe of 0003:056A:00B3.000A failed with error -22 [ 86.698997][ T6] usb 4-1: USB disconnect, device number 5 [ 87.193440][ T4210] netlink: 'syz.8.1632': attribute type 27 has an invalid length. [ 87.221977][ T4210] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.229090][ T4210] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.343812][ T4210] device ipip0 left promiscuous mode [ 87.415844][ T4211] device veth0_vlan left promiscuous mode [ 87.423062][ T4211] device veth0_vlan entered promiscuous mode [ 87.430593][ T4211] device veth1_macvtap left promiscuous mode [ 87.437253][ T4211] device veth1_macvtap entered promiscuous mode [ 87.454682][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.472914][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.494174][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.523812][ T1561] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.530723][ T1561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.558422][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.567792][ T4224] loop6: detected capacity change from 0 to 512 [ 87.574791][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.602468][ T1561] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.609360][ T1561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.616713][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.624999][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 87.633140][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.641373][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 87.644312][ T4224] EXT4-fs (loop6): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,dioread_lock,errors=remount-ro,max_batch_time=0x0000000000000080,. Quota mode: writeback. [ 87.667786][ T4224] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.672731][ T4230] loop3: detected capacity change from 0 to 1024 [ 87.687173][ T4224] EXT4-fs error (device loop6): ext4_readdir:260: inode #2: block 12: comm syz.6.1631: path /223/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 87.689003][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.708572][ T4224] EXT4-fs (loop6): Remounting filesystem read-only [ 87.722615][ T4224] EXT4-fs error (device loop6): ext4_readdir:260: inode #2: block 13: comm syz.6.1631: path /223/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 87.723049][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.744736][ T4224] EXT4-fs (loop6): Remounting filesystem read-only [ 87.752304][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.757943][ T4224] EXT4-fs error (device loop6): ext4_readdir:260: inode #2: block 14: comm syz.6.1631: path /223/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 87.768344][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.785717][ T4224] EXT4-fs (loop6): Remounting filesystem read-only [ 87.799926][ T4224] EXT4-fs error (device loop6): ext4_readdir:260: inode #2: block 15: comm syz.6.1631: path /223/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 87.801183][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.827795][ T4224] EXT4-fs (loop6): Remounting filesystem read-only [ 87.829761][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.834115][ T4224] EXT4-fs error (device loop6): ext4_readdir:260: inode #2: block 16: comm syz.6.1631: path /223/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 87.842886][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.867140][ T4224] EXT4-fs (loop6): Remounting filesystem read-only [ 87.877677][ T4224] EXT4-fs error (device loop6): ext4_readdir:260: inode #2: block 17: comm syz.6.1631: path /223/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 87.878028][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.906472][ T4230] EXT4-fs (loop3): Unrecognized mount option "euid=00000000000000000000" or missing value [ 87.912383][ T4224] EXT4-fs (loop6): Remounting filesystem read-only [ 87.916712][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.923771][ T4224] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #2: block 18: comm syz.6.1631: lblock 23 mapped to illegal pblock 18 (length 1) [ 87.931018][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.944864][ T4224] EXT4-fs (loop6): Remounting filesystem read-only [ 87.952963][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.960057][ T4224] EXT4-fs error (device loop6): ext4_readdir:260: inode #2: block 19: comm syz.6.1631: path /223/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 87.967706][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.987790][ T4224] EXT4-fs (loop6): Remounting filesystem read-only [ 87.994940][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.001181][ T4224] EXT4-fs error (device loop6): ext4_readdir:260: inode #2: block 20: comm syz.6.1631: path /223/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 88.018286][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.035317][ T4224] EXT4-fs (loop6): Remounting filesystem read-only [ 88.041927][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.043299][ T4224] EXT4-fs error (device loop6): ext4_readdir:260: inode #2: block 21: comm syz.6.1631: path /223/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 88.052062][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.079435][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.087704][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.097681][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.106677][ T4224] EXT4-fs (loop6): Remounting filesystem read-only [ 88.107416][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.129149][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.137473][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.145691][ T4221] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1635'. [ 88.179220][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.342287][ T30] kauditd_printk_skb: 109 callbacks suppressed [ 88.342304][ T30] audit: type=1400 audit(1740167309.581:3772): avc: denied { create } for pid=4241 comm="syz.8.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 88.356679][ T4253] loop7: detected capacity change from 0 to 8192 [ 88.386609][ T30] audit: type=1400 audit(1740167309.581:3773): avc: denied { write } for pid=4241 comm="syz.8.1645" path="socket:[29643]" dev="sockfs" ino=29643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 88.416598][ T30] audit: type=1400 audit(1740167309.581:3774): avc: denied { nlmsg_write } for pid=4241 comm="syz.8.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 88.453955][ T30] audit: type=1400 audit(1740167309.684:3775): avc: denied { watch watch_reads } for pid=4252 comm="syz.7.1649" path="/190/file0/file0" dev="loop7" ino=1048658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 88.483546][ T4261] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1652'. [ 88.506762][ T4261] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1652'. [ 88.519764][ T30] audit: type=1400 audit(1740167309.750:3776): avc: denied { ioctl } for pid=4263 comm="syz.2.1654" path="socket:[30288]" dev="sockfs" ino=30288 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.632388][ T30] audit: type=1326 audit(1740167309.853:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.7.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142da9d169 code=0x7ffc0000 [ 88.660136][ T4274] overlayfs: missing 'lowerdir' [ 88.683327][ T30] audit: type=1326 audit(1740167309.853:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.7.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f142da9d169 code=0x7ffc0000 [ 88.708905][ T30] audit: type=1326 audit(1740167309.853:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.7.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142da9d169 code=0x7ffc0000 [ 88.733261][ T30] audit: type=1326 audit(1740167309.853:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.7.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f142da9d169 code=0x7ffc0000 [ 88.758288][ T30] audit: type=1326 audit(1740167309.853:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.7.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142da9d169 code=0x7ffc0000 [ 88.883695][ T314] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 88.911299][ T4290] loop2: detected capacity change from 0 to 8192 [ 88.993307][ T4287] loop7: detected capacity change from 0 to 40427 [ 89.066186][ T4287] F2FS-fs (loop7): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 89.073922][ T4287] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 89.089696][ T4287] F2FS-fs (loop7): invalid crc value [ 89.118013][ T4287] F2FS-fs (loop7): Found nat_bits in checkpoint [ 89.139977][ T314] usb 4-1: Using ep0 maxpacket: 16 [ 89.223212][ T4287] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 89.237343][ T4287] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 89.268322][ T314] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.285962][ T314] usb 4-1: config 0 has no interfaces? [ 89.306978][ T314] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 89.326930][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.335232][ T1535] attempt to access beyond end of device [ 89.335232][ T1535] loop7: rw=2049, want=45104, limit=40427 [ 89.340451][ T4330] loop6: detected capacity change from 0 to 512 [ 89.359168][ T4332] futex_wake_op: syz.2.1682 tries to shift op by 32; fix this program [ 89.364352][ T314] usb 4-1: config 0 descriptor?? [ 89.391934][ T4336] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 89.418321][ T4330] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 89.438210][ T4330] EXT4-fs (loop6): Ignoring removed bh option [ 89.446217][ T4330] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 89.482417][ T4330] EXT4-fs (loop6): 1 truncate cleaned up [ 89.487914][ T4330] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,quota,nogrpid,,errors=continue. Quota mode: writeback. [ 89.568232][ T4343] capability: warning: `syz.8.1690' uses 32-bit capabilities (legacy support in use) [ 89.626974][ T6] usb 4-1: USB disconnect, device number 6 [ 89.684613][ T4363] loop6: detected capacity change from 0 to 512 [ 89.760334][ T4363] EXT4-fs (loop6): Ignoring removed bh option [ 89.766347][ T4363] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 89.774770][ T4363] EXT4-fs (loop6): invalid journal inode [ 89.862889][ T4363] xt_nat: multiple ranges no longer supported [ 90.477427][ T4429] cgroup: Name too long [ 90.578666][ T4442] loop8: detected capacity change from 0 to 512 [ 90.667000][ T4454] syz.2.1738[4454] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.667096][ T4454] syz.2.1738[4454] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.679504][ T4442] EXT4-fs (loop8): mounted filesystem without journal. Opts: nolazytime,bsddf,,errors=continue. Quota mode: writeback. [ 90.703606][ T4442] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.715668][ T4457] loop6: detected capacity change from 0 to 128 [ 90.801626][ T45] attempt to access beyond end of device [ 90.801626][ T45] loop6: rw=1, want=1041, limit=128 [ 90.977917][ T4477] loop6: detected capacity change from 0 to 256 [ 91.277487][ T4495] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.289680][ T4495] FAT-fs (loop7): unable to read boot sector [ 91.626636][ T4525] syz.3.1771[4525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.626719][ T4525] syz.3.1771[4525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.841133][ T4544] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1780'. [ 91.936323][ T4553] xt_bpf: check failed: parse error [ 92.003161][ T4564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1789'. [ 92.025746][ T4564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1789'. [ 92.036083][ T4566] loop6: detected capacity change from 0 to 128 [ 92.069470][ T4566] attempt to access beyond end of device [ 92.069470][ T4566] loop6: rw=34817, want=241, limit=128 [ 92.109959][ T1561] attempt to access beyond end of device [ 92.109959][ T1561] loop6: rw=1, want=1041, limit=128 [ 92.278038][ T4583] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1797'. [ 92.405636][ T4597] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 92.465783][ T4603] device bridge_slave_0 left promiscuous mode [ 92.472110][ T4603] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.548720][ T4613] loop7: detected capacity change from 0 to 512 [ 92.612495][ T4613] EXT4-fs (loop7): mounted filesystem without journal. Opts: nolazytime,bsddf,,errors=continue. Quota mode: writeback. [ 92.625219][ T4613] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.842739][ T4623] loop6: detected capacity change from 0 to 40427 [ 92.897538][ T4623] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 92.915639][ T4623] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 92.941926][ T4623] F2FS-fs (loop6): invalid crc value [ 92.957876][ T4623] F2FS-fs (loop6): Found nat_bits in checkpoint [ 93.011036][ T4623] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 93.018258][ T4623] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 93.343504][ T4623] attempt to access beyond end of device [ 93.343504][ T4623] loop6: rw=2049, want=79896, limit=40427 [ 93.372666][ T4623] attempt to access beyond end of device [ 93.372666][ T4623] loop6: rw=2049, want=81920, limit=40427 [ 93.393688][ T4623] attempt to access beyond end of device [ 93.393688][ T4623] loop6: rw=2049, want=51568, limit=40427 [ 93.414142][ T4623] attempt to access beyond end of device [ 93.414142][ T4623] loop6: rw=2049, want=53248, limit=40427 [ 93.456691][ T4623] attempt to access beyond end of device [ 93.456691][ T4623] loop6: rw=2049, want=61200, limit=40427 [ 93.643333][ T4623] attempt to access beyond end of device [ 93.643333][ T4623] loop6: rw=2049, want=77824, limit=40427 [ 93.781043][ T30] kauditd_printk_skb: 323 callbacks suppressed [ 93.781060][ T30] audit: type=1400 audit(1740167314.670:4105): avc: denied { setopt } for pid=4700 comm="syz.2.1850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.812161][ T694] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 93.827057][ T694] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 93.879557][ T30] audit: type=1400 audit(1740167314.764:4106): avc: denied { read write } for pid=4704 comm="syz.2.1853" name="raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.953936][ T30] audit: type=1400 audit(1740167314.764:4107): avc: denied { open } for pid=4704 comm="syz.2.1853" path="/dev/raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.015049][ T30] audit: type=1400 audit(1740167314.764:4108): avc: denied { ioctl } for pid=4704 comm="syz.2.1853" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.049497][ T30] audit: type=1326 audit(1740167314.811:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.8.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536ea23169 code=0x7ffc0000 [ 94.095374][ T30] audit: type=1326 audit(1740167314.811:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.8.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f536ea23169 code=0x7ffc0000 [ 94.130588][ T30] audit: type=1326 audit(1740167314.811:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.8.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536ea23169 code=0x7ffc0000 [ 94.154665][ T30] audit: type=1326 audit(1740167314.811:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.8.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f536ea23169 code=0x7ffc0000 [ 94.178528][ T313] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 94.186567][ T30] audit: type=1326 audit(1740167314.811:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.8.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f536ea1a127 code=0x7ffc0000 [ 94.215485][ T30] audit: type=1326 audit(1740167314.811:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.8.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f536e9bf359 code=0x7ffc0000 [ 94.384296][ T4746] loop3: detected capacity change from 0 to 512 [ 94.431900][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 94.455043][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 94.466371][ T4746] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #3: comm syz.3.1868: corrupted inode contents [ 94.466622][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 94.478577][ T313] usb 3-1: Using ep0 maxpacket: 32 [ 94.491374][ T4746] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #3: comm syz.3.1868: mark_inode_dirty error [ 94.502389][ T4756] loop8: detected capacity change from 0 to 8192 [ 94.513581][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 94.521444][ T4746] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #3: comm syz.3.1868: corrupted inode contents [ 94.534808][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 94.534954][ T4746] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.1868: mark_inode_dirty error [ 94.545514][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 94.554628][ T4746] EXT4-fs error (device loop3): ext4_acquire_dquot:6188: comm syz.3.1868: Failed to acquire dquot type 0 [ 94.562447][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 94.579481][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 94.581909][ T4746] EXT4-fs (loop3): 1 orphan inode deleted [ 94.592048][ T4746] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.603120][ T4746] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.613546][ T313] usb 3-1: config 67 has an invalid interface number: 38 but max is 0 [ 94.624210][ T313] usb 3-1: config 67 has no interface number 0 [ 94.785051][ T4773] loop8: detected capacity change from 0 to 256 [ 94.794233][ T4773] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 94.811119][ T4773] exFAT-fs (loop8): hint_cluster is invalid (17) [ 94.816648][ T313] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=a9.d3 [ 94.845400][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.854945][ T313] usb 3-1: Product: syz [ 94.859550][ T313] usb 3-1: Manufacturer: syz [ 94.868989][ T313] usb 3-1: SerialNumber: syz [ 94.934976][ T313] usb_ehset_test: probe of 3-1:67.38 failed with error -32 [ 95.150696][ T657] usb 3-1: USB disconnect, device number 6 [ 95.564322][ T4838] loop3: detected capacity change from 0 to 1024 [ 95.573858][ T4838] EXT4-fs (loop3): Ignoring removed nobh option [ 95.580259][ T4838] EXT4-fs (loop3): Ignoring removed bh option [ 95.586955][ T4838] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.608695][ T4838] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 95.646009][ T4838] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3876: comm syz.3.1909: Allocating blocks 497-513 which overlap fs metadata [ 95.660557][ T4838] EXT4-fs (loop3): pa ffff88812843e690: logic 128, phys. 385, len 8 [ 95.668452][ T4838] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 95.753866][ T4846] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4846 comm=syz.2.1913 [ 95.766271][ T4846] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4846 comm=syz.2.1913 [ 95.931962][ T4869] loop2: detected capacity change from 0 to 128 [ 95.953137][ T4869] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.964075][ T4869] ext4 filesystem being mounted at /401/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.127854][ T4887] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1932'. [ 96.156222][ T4897] fuse: Invalid rootmode [ 96.167588][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.183690][ T4897] device veth0_to_team entered promiscuous mode [ 96.273535][ T4908] 9pnet: p9_fd_create_unix (4908): problem connecting socket: éq‰Y’3aK: -111 [ 96.380307][ T4921] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1944'. [ 96.523426][ T4941] loop2: detected capacity change from 0 to 512 [ 96.596715][ T4941] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1957: inode #1: comm syz.2.1957: iget: illegal inode # [ 96.616714][ T4941] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1957: error while reading EA inode 1 err=-117 [ 96.633127][ T4941] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1957: inode #1: comm syz.2.1957: iget: illegal inode # [ 96.648279][ T4941] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1957: error while reading EA inode 1 err=-117 [ 96.668436][ T4941] EXT4-fs (loop2): 1 orphan inode deleted [ 96.674008][ T4941] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 96.867496][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 96.899512][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 96.929039][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 96.938891][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 96.952485][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 96.965907][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 96.974604][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 97.015227][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 97.386842][ T5007] loop8: detected capacity change from 0 to 40427 [ 97.441345][ T5007] F2FS-fs (loop8): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 97.456338][ T5007] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 97.483653][ T5007] F2FS-fs (loop8): invalid crc value [ 97.491749][ T5039] syz.2.2002[5039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.491830][ T5039] syz.2.2002[5039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.536004][ T5007] F2FS-fs (loop8): Found nat_bits in checkpoint [ 97.660417][ T5007] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 97.667308][ T5007] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 97.789509][ T3240] handle_bad_sector: 2 callbacks suppressed [ 97.789528][ T3240] attempt to access beyond end of device [ 97.789528][ T3240] loop8: rw=2049, want=45104, limit=40427 [ 97.802108][ T5061] loop2: detected capacity change from 0 to 1024 [ 97.898411][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 97.926295][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 97.943937][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 97.965571][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 97.993024][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 98.006175][ T5073] loop7: detected capacity change from 0 to 512 [ 98.024945][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 98.077881][ T5073] EXT4-fs (loop7): Ignoring removed bh option [ 98.092446][ T5073] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 98.110422][ T5073] EXT4-fs (loop7): invalid journal inode [ 98.157459][ T5066] loop6: detected capacity change from 0 to 40427 [ 98.199512][ T5066] F2FS-fs (loop6): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 98.213693][ T5066] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 98.226062][ T5066] F2FS-fs (loop6): invalid crc value [ 98.240460][ T5073] xt_nat: multiple ranges no longer supported [ 98.244798][ T5066] F2FS-fs (loop6): Found nat_bits in checkpoint [ 98.320001][ T5066] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 98.331932][ T5066] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 98.346048][ T5104] loop2: detected capacity change from 0 to 256 [ 98.373658][ T5110] syz.8.2030[5110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.373742][ T5110] syz.8.2030[5110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.386274][ T1497] attempt to access beyond end of device [ 98.386274][ T1497] loop6: rw=2049, want=45104, limit=40427 [ 98.471713][ T5114] loop2: detected capacity change from 0 to 512 [ 98.510898][ T5114] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 98.534642][ T5114] EXT4-fs (loop2): Ignoring removed bh option [ 98.541209][ T5114] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.569246][ T5114] EXT4-fs (loop2): 1 truncate cleaned up [ 98.574748][ T5114] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,quota,nogrpid,,errors=continue. Quota mode: writeback. [ 98.846696][ T6] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 99.113962][ T6] usb 7-1: Using ep0 maxpacket: 16 [ 99.153575][ T30] kauditd_printk_skb: 266 callbacks suppressed [ 99.153593][ T30] audit: type=1326 audit(1740167319.686:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.7.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142da9d169 code=0x7ffc0000 [ 99.207481][ T30] audit: type=1326 audit(1740167319.686:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.7.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142da9d169 code=0x7ffc0000 [ 99.246944][ T30] audit: type=1326 audit(1740167319.686:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.7.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f142da9d169 code=0x7ffc0000 [ 99.283414][ T30] audit: type=1326 audit(1740167319.686:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.7.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142da9d169 code=0x7ffc0000 [ 99.309001][ T30] audit: type=1326 audit(1740167319.686:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.7.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142da9d169 code=0x7ffc0000 [ 99.332327][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.333124][ T30] audit: type=1326 audit(1740167319.686:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.7.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f142da9d169 code=0x7ffc0000 [ 99.346425][ T5178] loop2: detected capacity change from 0 to 512 [ 99.373392][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.380028][ T30] audit: type=1326 audit(1740167319.686:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.7.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142da9d169 code=0x7ffc0000 [ 99.389592][ T6] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.412137][ T30] audit: type=1326 audit(1740167319.686:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.7.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142da9d169 code=0x7ffc0000 [ 99.425944][ T6] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 99.452657][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.463181][ T6] usb 7-1: config 0 descriptor?? [ 99.496428][ T5178] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #3: comm syz.2.2058: corrupted inode contents [ 99.510385][ T5178] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #3: comm syz.2.2058: mark_inode_dirty error [ 99.522064][ T5178] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #3: comm syz.2.2058: corrupted inode contents [ 99.534979][ T5178] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.2058: mark_inode_dirty error [ 99.546573][ T5178] Quota error (device loop2): write_blk: dquota write failed [ 99.554446][ T5178] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 99.564325][ T5178] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.2058: Failed to acquire dquot type 0 [ 99.577193][ T5178] EXT4-fs (loop2): 1 orphan inode deleted [ 99.586374][ T5178] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.597561][ T5178] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.002303][ T6] koneplus 0003:1E7D:2E22.000B: item fetching failed at offset 0/2 [ 100.010155][ T6] koneplus 0003:1E7D:2E22.000B: parse failed [ 100.016063][ T6] koneplus: probe of 0003:1E7D:2E22.000B failed with error -22 [ 100.227124][ T6] usb 7-1: USB disconnect, device number 6 [ 100.790478][ T5205] blk_update_request: I/O error, dev loop17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.802767][ T5205] FAT-fs (loop17): unable to read boot sector [ 101.044580][ T5245] bridge0: port 3(syz_tun) entered disabled state [ 101.058998][ T5245] device syz_tun left promiscuous mode [ 101.070164][ T5245] bridge0: port 3(syz_tun) entered disabled state [ 101.180117][ T5256] cgroup: Name too long [ 101.204711][ T5259] loop7: detected capacity change from 0 to 512 [ 101.232317][ T5265] loop2: detected capacity change from 0 to 512 [ 101.277223][ T5265] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.288277][ T5265] ext4 filesystem being mounted at /446/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.332834][ T5259] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 101.357847][ T5259] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.727047][ T5326] device pim6reg1 entered promiscuous mode [ 101.827469][ T5332] loop6: detected capacity change from 0 to 512 [ 101.902274][ T5332] EXT4-fs error (device loop6): ext4_do_update_inode:5205: inode #3: comm syz.6.2121: corrupted inode contents [ 101.947227][ T5332] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #3: comm syz.6.2121: mark_inode_dirty error [ 101.969112][ T5332] EXT4-fs error (device loop6): ext4_do_update_inode:5205: inode #3: comm syz.6.2121: corrupted inode contents [ 101.997151][ T5332] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #3: comm syz.6.2121: mark_inode_dirty error [ 102.010005][ T5332] EXT4-fs error (device loop6): ext4_acquire_dquot:6188: comm syz.6.2121: Failed to acquire dquot type 0 [ 102.031519][ T5332] EXT4-fs (loop6): 1 orphan inode deleted [ 102.041215][ T5332] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.055748][ T5332] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.478039][ T5378] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2141'. [ 102.592792][ T5390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2146'. [ 102.602526][ T5390] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2146'. [ 105.620013][ T5428] loop3: detected capacity change from 0 to 512 [ 105.651998][ T30] kauditd_printk_skb: 101 callbacks suppressed [ 105.652015][ T30] audit: type=1400 audit(1740167325.766:4486): avc: denied { ioctl } for pid=5434 comm="syz.6.2162" path="socket:[34533]" dev="sockfs" ino=34533 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.708982][ T30] audit: type=1326 audit(1740167325.822:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.6.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24841b9169 code=0x7ffc0000 [ 105.732972][ T30] audit: type=1326 audit(1740167325.822:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.6.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24841b9169 code=0x7ffc0000 [ 105.756643][ T30] audit: type=1326 audit(1740167325.822:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.6.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24841b9169 code=0x7ffc0000 [ 105.768980][ T5428] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2160: inode #1: comm syz.3.2160: iget: illegal inode # [ 105.780258][ T30] audit: type=1326 audit(1740167325.822:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.6.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24841b9169 code=0x7ffc0000 [ 105.815877][ T30] audit: type=1326 audit(1740167325.822:4491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.6.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24841b9169 code=0x7ffc0000 [ 105.839770][ T30] audit: type=1326 audit(1740167325.831:4492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.6.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24841b9169 code=0x7ffc0000 [ 105.840696][ T5428] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2160: error while reading EA inode 1 err=-117 [ 105.863019][ T30] audit: type=1326 audit(1740167325.831:4493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.6.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24841b9169 code=0x7ffc0000 [ 105.863055][ T30] audit: type=1326 audit(1740167325.831:4494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.6.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24841b9169 code=0x7ffc0000 [ 105.863080][ T30] audit: type=1326 audit(1740167325.831:4495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.6.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24841b9169 code=0x7ffc0000 [ 105.947073][ T5428] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2160: inode #1: comm syz.3.2160: iget: illegal inode # [ 105.960463][ T5428] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2160: error while reading EA inode 1 err=-117 [ 105.973150][ T5428] EXT4-fs (loop3): 1 orphan inode deleted [ 105.991075][ T5428] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 106.043166][ T5443] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2165'. [ 106.202645][ T5465] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 106.576557][ T5510] xt_hashlimit: size too large, truncated to 1048576 [ 106.609182][ C1] ================================================================== [ 106.617092][ C1] BUG: KASAN: use-after-free in dev_map_generic_redirect+0xa0/0x6f0 [ 106.624901][ C1] Read of size 8 at addr ffff888128217800 by task kworker/1:0/26 [ 106.632451][ C1] [ 106.634622][ C1] CPU: 1 PID: 26 Comm: kworker/1:0 Not tainted 5.15.178-syzkaller-00193-g058abb720bd1 #0 [ 106.644269][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 106.654151][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 106.660054][ C1] Call Trace: [ 106.663176][ C1] [ 106.665880][ C1] dump_stack_lvl+0x151/0x1c0 [ 106.670381][ C1] ? io_uring_drop_tctx_refs+0x190/0x190 [ 106.675849][ C1] ? panic+0x760/0x760 [ 106.679756][ C1] print_address_description+0x87/0x3b0 [ 106.685139][ C1] kasan_report+0x179/0x1c0 [ 106.689475][ C1] ? dev_map_generic_redirect+0xa0/0x6f0 [ 106.694943][ C1] ? dev_map_generic_redirect+0xa0/0x6f0 [ 106.700409][ C1] __asan_report_load8_noabort+0x14/0x20 [ 106.705880][ C1] dev_map_generic_redirect+0xa0/0x6f0 [ 106.711170][ C1] ? ____kasan_slab_free+0x131/0x160 [ 106.716295][ C1] ? bq_enqueue+0x3e0/0x3e0 [ 106.720633][ C1] ? bpf_prog_run_generic_xdp+0x965/0x1070 [ 106.726276][ C1] xdp_do_generic_redirect+0x42e/0xb40 [ 106.731571][ C1] do_xdp_generic+0x50b/0x7c0 [ 106.736082][ C1] ? kasan_set_track+0x4b/0x70 [ 106.740683][ C1] ? kasan_set_free_info+0x23/0x40 [ 106.745629][ C1] ? ____kasan_slab_free+0x126/0x160 [ 106.750752][ C1] ? generic_xdp_tx+0x490/0x490 [ 106.755436][ C1] ? __do_softirq+0xb/0xd [ 106.759603][ C1] ? worker_thread+0xad5/0x12a0 [ 106.764290][ C1] ? migrate_disable+0xd9/0x190 [ 106.768974][ C1] __netif_receive_skb_core+0x1706/0x3640 [ 106.774541][ C1] ? set_rps_cpu+0x5e0/0x5e0 [ 106.778961][ C1] ? debug_smp_processor_id+0x17/0x20 [ 106.784164][ C1] ? kasan_quarantine_put+0x34/0x1a0 [ 106.789284][ C1] ? kmem_cache_free+0x115/0x330 [ 106.794058][ C1] ? __kasan_slab_free+0x11/0x20 [ 106.798832][ C1] __netif_receive_skb+0x11c/0x530 [ 106.803778][ C1] ? file_free_rcu+0x9f/0xb0 [ 106.808206][ C1] ? deliver_ptype_list_skb+0x3b0/0x3b0 [ 106.813591][ C1] ? __kasan_check_write+0x14/0x20 [ 106.818535][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 106.823133][ C1] ? _raw_spin_trylock_bh+0x190/0x190 [ 106.828350][ C1] process_backlog+0x31c/0x650 [ 106.833100][ C1] __napi_poll+0xc4/0x5a0 [ 106.837240][ C1] net_rx_action+0x47d/0xc50 [ 106.841667][ C1] ? net_tx_action+0x550/0x550 [ 106.846272][ C1] ? __sched_clock_gtod_offset+0xa0/0x100 [ 106.851824][ C1] handle_softirqs+0x25e/0x5c0 [ 106.856427][ C1] __do_softirq+0xb/0xd [ 106.860415][ C1] do_softirq+0xf6/0x150 [ 106.864495][ C1] [ 106.867269][ C1] [ 106.870044][ C1] ? __local_bh_enable_ip+0x80/0x80 [ 106.875080][ C1] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 106.880719][ C1] __local_bh_enable_ip+0x75/0x80 [ 106.885578][ C1] _raw_read_unlock_bh+0x29/0x30 [ 106.890355][ C1] wg_socket_send_skb_to_peer+0x178/0x1d0 [ 106.895911][ C1] wg_packet_tx_worker+0x1e6/0x530 [ 106.900857][ C1] process_one_work+0x6bb/0xc10 [ 106.905545][ C1] worker_thread+0xad5/0x12a0 [ 106.910059][ C1] kthread+0x421/0x510 [ 106.914075][ C1] ? worker_clr_flags+0x180/0x180 [ 106.918936][ C1] ? kthread_blkcg+0xd0/0xd0 [ 106.923365][ C1] ret_from_fork+0x1f/0x30 [ 106.927622][ C1] [ 106.930479][ C1] [ 106.932648][ C1] Allocated by task 4977: [ 106.936816][ C1] ____kasan_kmalloc+0xdb/0x110 [ 106.941505][ C1] __kasan_kmalloc+0x9/0x10 [ 106.945841][ C1] kmem_cache_alloc_trace+0x11a/0x270 [ 106.951047][ C1] nf_nat_masq_schedule+0x2f3/0x620 [ 106.956085][ C1] masq_inet6_event+0x124/0x180 [ 106.960770][ C1] atomic_notifier_call_chain+0x95/0x100 [ 106.966240][ C1] inet6addr_notifier_call_chain+0x24/0x30 [ 106.971877][ C1] addrconf_ifdown+0xe21/0x1ae0 [ 106.976566][ C1] addrconf_notify+0x37d/0xdd0 [ 106.981166][ C1] raw_notifier_call_chain+0x8c/0xf0 [ 106.986289][ C1] call_netdevice_notifiers_mtu+0x189/0x220 [ 106.992017][ C1] dev_set_mtu_ext+0x4b0/0x690 [ 106.996615][ C1] do_setlink+0x8c9/0x3d80 [ 107.000866][ C1] rtnl_newlink+0x10c6/0x2050 [ 107.005381][ C1] rtnetlink_rcv_msg+0x951/0xc40 [ 107.010158][ C1] netlink_rcv_skb+0x1cf/0x410 [ 107.014752][ C1] rtnetlink_rcv+0x1c/0x20 [ 107.019009][ C1] netlink_unicast+0x8df/0xac0 [ 107.023606][ C1] netlink_sendmsg+0xa0a/0xd20 [ 107.028207][ C1] ____sys_sendmsg+0x59e/0x8f0 [ 107.032805][ C1] ___sys_sendmsg+0x252/0x2e0 [ 107.037319][ C1] __se_sys_sendmsg+0x19a/0x260 [ 107.042007][ C1] __x64_sys_sendmsg+0x7b/0x90 [ 107.046605][ C1] x64_sys_call+0x16a/0x9a0 [ 107.050951][ C1] do_syscall_64+0x3b/0xb0 [ 107.055197][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.060926][ C1] [ 107.063096][ C1] Last potentially related work creation: [ 107.068657][ C1] kasan_save_stack+0x3b/0x60 [ 107.073166][ C1] __kasan_record_aux_stack+0xd3/0xf0 [ 107.078379][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 107.084013][ C1] insert_work+0x56/0x320 [ 107.088179][ C1] __queue_work+0x92a/0xcd0 [ 107.092519][ C1] queue_work_on+0x105/0x170 [ 107.096943][ C1] nf_nat_masq_schedule+0x4d6/0x620 [ 107.101978][ C1] masq_inet6_event+0x124/0x180 [ 107.106665][ C1] atomic_notifier_call_chain+0x95/0x100 [ 107.112136][ C1] inet6addr_notifier_call_chain+0x24/0x30 [ 107.117776][ C1] addrconf_ifdown+0xe21/0x1ae0 [ 107.122461][ C1] addrconf_notify+0x37d/0xdd0 [ 107.127065][ C1] raw_notifier_call_chain+0x8c/0xf0 [ 107.132183][ C1] call_netdevice_notifiers_mtu+0x189/0x220 [ 107.137913][ C1] dev_set_mtu_ext+0x4b0/0x690 [ 107.142511][ C1] do_setlink+0x8c9/0x3d80 [ 107.146766][ C1] rtnl_newlink+0x10c6/0x2050 [ 107.151277][ C1] rtnetlink_rcv_msg+0x951/0xc40 [ 107.156051][ C1] netlink_rcv_skb+0x1cf/0x410 [ 107.160653][ C1] rtnetlink_rcv+0x1c/0x20 [ 107.164907][ C1] netlink_unicast+0x8df/0xac0 [ 107.169506][ C1] netlink_sendmsg+0xa0a/0xd20 [ 107.174113][ C1] ____sys_sendmsg+0x59e/0x8f0 [ 107.178790][ C1] ___sys_sendmsg+0x252/0x2e0 [ 107.183302][ C1] __se_sys_sendmsg+0x19a/0x260 [ 107.187991][ C1] __x64_sys_sendmsg+0x7b/0x90 [ 107.192591][ C1] x64_sys_call+0x16a/0x9a0 [ 107.196929][ C1] do_syscall_64+0x3b/0xb0 [ 107.201184][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.206912][ C1] [ 107.209080][ C1] Second to last potentially related work creation: [ 107.215505][ C1] kasan_save_stack+0x3b/0x60 [ 107.220158][ C1] __kasan_record_aux_stack+0xd3/0xf0 [ 107.225345][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 107.230976][ C1] call_rcu+0x123/0x10b0 [ 107.235053][ C1] replace+0x19b/0x4b0 [ 107.238959][ C1] resize+0xbaf/0x1d60 [ 107.242875][ C1] fib_insert_alias+0xb20/0x1060 [ 107.247724][ C1] fib_trie_unmerge+0x2f6/0x1380 [ 107.252621][ C1] fib_unmerge+0xc4/0x370 [ 107.256875][ C1] fib4_rule_delete+0x45/0x370 [ 107.261474][ C1] fib_nl_delrule+0x16bc/0x1e90 [ 107.266161][ C1] rtnetlink_rcv_msg+0x951/0xc40 [ 107.270936][ C1] netlink_rcv_skb+0x1cf/0x410 [ 107.275533][ C1] rtnetlink_rcv+0x1c/0x20 [ 107.279786][ C1] netlink_unicast+0x8df/0xac0 [ 107.284390][ C1] netlink_sendmsg+0xa0a/0xd20 [ 107.289006][ C1] ____sys_sendmsg+0x59e/0x8f0 [ 107.293591][ C1] ___sys_sendmsg+0x252/0x2e0 [ 107.298192][ C1] __se_sys_sendmsg+0x19a/0x260 [ 107.302880][ C1] __x64_sys_sendmsg+0x7b/0x90 [ 107.307476][ C1] x64_sys_call+0x16a/0x9a0 [ 107.311812][ C1] do_syscall_64+0x3b/0xb0 [ 107.316067][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.321797][ C1] [ 107.323965][ C1] The buggy address belongs to the object at ffff888128217800 [ 107.323965][ C1] which belongs to the cache kmalloc-96 of size 96 [ 107.337773][ C1] The buggy address is located 0 bytes inside of [ 107.337773][ C1] 96-byte region [ffff888128217800, ffff888128217860) [ 107.350624][ C1] The buggy address belongs to the page: [ 107.356106][ C1] page:ffffea0004a085c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x128217 [ 107.366156][ C1] flags: 0x4000000000000200(slab|zone=1) [ 107.371635][ C1] raw: 4000000000000200 ffffea000436db00 0000001900000019 ffff888100042900 [ 107.380228][ C1] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000 [ 107.388633][ C1] page dumped because: kasan: bad access detected [ 107.394898][ C1] page_owner tracks the page as allocated [ 107.400455][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 291, ts 23625213017, free_ts 23624983289 [ 107.416152][ C1] post_alloc_hook+0x1a3/0x1b0 [ 107.420746][ C1] prep_new_page+0x1b/0x110 [ 107.425085][ C1] get_page_from_freelist+0x3550/0x35d0 [ 107.430651][ C1] __alloc_pages+0x27e/0x8f0 [ 107.435076][ C1] new_slab+0x9a/0x4e0 [ 107.438981][ C1] ___slab_alloc+0x39e/0x830 [ 107.443414][ C1] __slab_alloc+0x4a/0x90 [ 107.447574][ C1] __kmalloc+0x172/0x2c0 [ 107.451743][ C1] kvmalloc_node+0x1f0/0x4d0 [ 107.456167][ C1] nf_hook_entries_grow+0x2ff/0x720 [ 107.461494][ C1] __nf_register_net_hook+0x1b3/0x7c0 [ 107.466783][ C1] nf_register_net_hook+0xb6/0x190 [ 107.471732][ C1] nf_register_net_hooks+0x44/0x1b0 [ 107.476764][ C1] ip6t_register_table+0x4d0/0x7b0 [ 107.481717][ C1] ip6table_mangle_table_init+0x41/0x70 [ 107.487096][ C1] xt_find_table_lock+0x36e/0x440 [ 107.491955][ C1] page last free stack trace: [ 107.496468][ C1] free_unref_page_prepare+0x7c8/0x7d0 [ 107.501760][ C1] free_unref_page+0xe8/0x750 [ 107.506271][ C1] __free_pages+0x61/0xf0 [ 107.510441][ C1] __vunmap+0x7c1/0x940 [ 107.514431][ C1] vfree+0x7f/0xb0 [ 107.517989][ C1] do_ip6t_get_ctl+0x11da/0x1890 [ 107.522763][ C1] nf_getsockopt+0x26c/0x290 [ 107.527189][ C1] ipv6_getsockopt+0x1de6/0x3050 [ 107.531970][ C1] tcp_getsockopt+0x249/0x7030 [ 107.536564][ C1] sock_common_getsockopt+0x99/0xb0 [ 107.541597][ C1] __sys_getsockopt+0x290/0x4f0 [ 107.546285][ C1] __x64_sys_getsockopt+0xbf/0xd0 [ 107.551152][ C1] x64_sys_call+0x1a9/0x9a0 [ 107.555484][ C1] do_syscall_64+0x3b/0xb0 [ 107.559736][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.565467][ C1] [ 107.567636][ C1] Memory state around the buggy address: [ 107.573107][ C1] ffff888128217700: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 107.581005][ C1] ffff888128217780: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 107.588904][ C1] >ffff888128217800: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 107.596800][ C1] ^ [ 107.600706][ C1] ffff888128217880: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 107.608606][ C1] ffff888128217900: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 107.616513][ C1] ================================================================== [ 107.624399][ C1] Disabling lock debugging due to kernel taint