last executing test programs: 1m4.55837253s ago: executing program 1 (id=226): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') readv(r0, &(0x7f0000000fc0)=[{0x0}, {0x0}, {&(0x7f0000000f00)=""/172, 0xac}], 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e20, 0x8000, 0x2}, {0xfffffffffffffffe, 0x1, 0x0, 0xfffffffffffb, 0x5, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x2, 0x10, 0xef, 0x5, 0xa, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x6e6bb8, 0x3, {0x6, 0x32, 0x2, 0x7, 0x0, 0xe, 0x0, @in6=@private2, @in6=@loopback}}]}, 0x50}}, 0x4000000) 1m4.274209467s ago: executing program 1 (id=229): socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x50) userfaultfd(0x801) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0xc, 0x8, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, 0xf}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1m4.131832771s ago: executing program 1 (id=231): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f000033a000/0x2000)=nil, 0x2000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1m3.161153435s ago: executing program 1 (id=243): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x1a04447, &(0x7f0000000640)=ANY=[], 0x8, 0x1e6, &(0x7f0000000400)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) 1m2.838576903s ago: executing program 1 (id=246): close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f0000000440)=ANY=[@ANYBLOB='discard,discard,utf8,uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x3, 0x1535, &(0x7f0000001380)="$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") socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1c\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c4}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r3) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 1m0.453338901s ago: executing program 1 (id=277): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m0.345825293s ago: executing program 32 (id=277): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 35.860558238s ago: executing program 4 (id=542): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000003b40), 0x0, 0x20b0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000009946"], 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x800) 35.79735311s ago: executing program 4 (id=543): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='.\x00', 0x200) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x4, 0x7, 0x0, 0x0, 0x3, 0x3e, 0xffffffeb, 0x400007c, 0x40, 0x2, 0x0, 0x9, 0x38, 0x1, 0xfffe, 0x3, 0x9}, [{0x3, 0xe, 0x3, 0x11, 0x5, 0xe5, 0x1, 0x3}]}, 0x78) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 35.79676131s ago: executing program 4 (id=544): syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000080)='./file4\x00', 0xa08454, &(0x7f00000014c0)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@numtail}, {@utf8}, {@rodir}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@utf8no}, {@shortname_mixed}, {@fat=@flush}, {@rodir}, {@fat=@flush}, {@shortname_win95}]}, 0x89, 0x2c6, &(0x7f0000001580)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, 0x0, 0x442, 0x1ff) 35.690754832s ago: executing program 4 (id=545): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000080)={[{@journal_ioprio}, {@debug}, {@nombcache}]}, 0x1, 0x533, &(0x7f0000000b00)="$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") socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2000000008, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103) 34.647039758s ago: executing program 4 (id=553): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) syslog(0x4, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)="eda927dc6cd68c77b2f52508f930c43d3a9c56e7a3957769af18e66d9dd63a293e90a83f823a743e163d574799e0659635550d2fa79a02f946086c234c68333759382788b86ddf0083528044d918543fbfa1a3033b82e8671303000000cc933fa3b9e29fe5613673eafacb2f51292663734b1992f4171a87588aec9a9420dc981e866ba58783beb16930c80a2099f059f3", 0x91}], 0x1}, 0x20000800) recvmmsg(r0, &(0x7f0000007e80)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001a80)=""/205, 0xcd}], 0x1, &(0x7f0000001740)=""/217, 0xd9}, 0xffffffff}], 0x1, 0x2041, 0x0) 34.15298649s ago: executing program 4 (id=561): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000"/38], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20008824}, 0x4800) 34.114164131s ago: executing program 33 (id=561): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000"/38], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20008824}, 0x4800) 30.215285156s ago: executing program 6 (id=659): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x1a00040, &(0x7f0000000480)={[{@fat=@flush}, {@shortname_win95}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@numtail}, {@shortname_winnt}, {@numtail}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x2}}, {@utf8no}, {@fat=@check_strict}, {@fat=@flush}]}, 0x3, 0x34f, &(0x7f0000000100)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000640)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000600)={0x9, 0xffffffffffffffff}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000580)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_usb_connect$uac3(0x2, 0xca, &(0x7f0000000b80)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb8, 0x3, 0x1, 0xa7, 0x0, 0xd0, {0x8, 0xb, 0x0, 0x1, 0x1, 0x25, 0x30, 0x9e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa, 0x800}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x3, 0x4, 0x1, 0x1, "2f65c0ba"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0xf4}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x3, 0x4, 0x6, 0x9, "0d823d8ae1f1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5d, 0x3, 0x0, {0xa, 0x25, 0x25, 0x7, 0x15, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x3, 0x58, 0x7, "", "5215ae"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x9, 0x1, "83d33876d9b3"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0xc9, 0x62, 0x80}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x80}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x83, 0x9, {0xa, 0x25, 0x25, 0x9, 0x1, 0x401}}}}}}}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x110, 0x9a, 0x9, 0x3, 0x20, 0x6}, 0x8, &(0x7f0000000cc0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x81c}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x42b}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1a00fe00000000bfa10000000000000701000000feffffb702000005000000b713000000dc000085000000c70000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41, 0x68) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4c0, &(0x7f00000006c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000000540)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 25.828740982s ago: executing program 6 (id=709): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) 25.813432603s ago: executing program 6 (id=714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) 25.755541234s ago: executing program 6 (id=719): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000080)={[{@journal_ioprio}, {@debug}, {@nombcache}]}, 0x1, 0x533, &(0x7f0000000b00)="$eJzs3e9rI2kdAPDvTJped7dncyqyHnh3uCe7h26yvXp3VeRuBdFXB+r5fi1tWkrTpjTpuS2H9vCFLwURFfwDfCP4Bwhyf4IIB/peVBTRPX2pO5Jkgv2RNKFNN73084Fpnmcm83y/z9BMZiYPMwFcWS9ExP2IKETESxExl89P8ykOOlPrfR88eme5NSWRZW/9I4kkn9dtq1Wfiogb+WozEfHNr0XcSk/GbeztbyzVatWdvF5pbm5XGnv7d9c3l9aqa9WthYX5VxdfW3xl8V6WO1c/SxHx+lf+8pMf/uKrr//mc9/544O/3fluK98vfaKTd0QsnytAH522i+1t0dXaRjsXEWxMWv0pFsadBQAAw2gdmn80Ij7dPv6fi0L7aA4AAACYJNkbs/GfJCIDAAAAJlYaEbORpOV8LMBspGm53BnD+/G4ntbqjeZnV+u7WyutZRGlKKar67XqvXyscCmKSas+n4+x7dZfPlZfiIhnIuLHc9fa9fJyvbYy7osfAAAAcEXceP7o+f+/59J2GQAAAJgwpb4VAAAAYFI45QcAAIDJ5/wfAAAAJtrX33yzNWXd53ivvL23u1F/++5KtbFR3txdLi/Xd7bLa/X6WvuefZuD2qvV69ufj63dh5VmtdGsNPb2H2zWd7eaD9aPPAIbAAAAeIKeef69PyQRcfDFa+0p8vsADjJ94ZkBl8qfx50AMEqFcScAjM3UuBMAxqY48B32EDDpkgHLTw7e6VwrjN9eTD4AAMDo3f7kyd//u7/tD742AHyYDTPWBwCYLH7dg6ureNYRgDdHnQkwLh/pvDzVb3nfm3cM8ft/5xpDlp0pMQAAYGRm21OSlvPj9NlI03I54un2YwGKyep6rXovPz/4/VzxqVZ9vr1mMnDMMAAAAAAAAAAAAAAAAAAAAAAAAADQkWVJZAAAAMBEi0j/mrTv5h9xe+7F2aNXB4499evnb/304VKzuTMfMZ38c641azoimj/L57+ceSQAAAAAXAKd8/T8dX7c2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwaT549M5yd3qScf/+5Ygo9Yo/FTPt15koRsT1fyUxdWi9JCIKI4h/8G5E3OwVP4nHWZaV8ix6xb92wfFL7U0zkyX5ew/HTyPixgjiw1X2Xmv/c7/X5y+NF9qvvT//U8c+j2fV3f9N5/XD8bv7v0Kf/c/Th+tp/xjPvv+rSt/470Y8O9WJez+O7n+68ZNO/CSOxb81ZB+//a39/Z4LDjXZa/93OFalubldaezt313fXFqrrlW3FhbmX118bfGVxXuV1fVaNf/bM8yPPvXrx6f1/3qf+KWj/T+x/V8cqvdZ/Pf9h48+1qkUe8W/c6v39+/NPvHT/LvvM3m5tfx2t3zQKR/23C9/99xp/V/p0/+ZAf2/M1T/4wsvfeP7f+q55MTWAACehMbe/sZSrVbdOaUwM8R7hi4URtLOGyPL57IU4nKkMa5C9r3O/+P52jnn6icKWfUHZ199KkaQxvSJz2khztpgEnHQamvIf0gAAGDC/P+gPxl3KgAAAAAAAAAAAAAAAAAAAHBlnfG2ZDMR0ZlTHHw7seMxD8bTVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAU/0vAAD//xluyPE=") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2000000008, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103) 24.913611405s ago: executing program 6 (id=748): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 24.493323675s ago: executing program 6 (id=769): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x1, &(0x7f0000002140)=""/4110, &(0x7f00000000c0)=0x100e) 24.427890626s ago: executing program 34 (id=769): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x1, &(0x7f0000002140)=""/4110, &(0x7f00000000c0)=0x100e) 4.018787433s ago: executing program 3 (id=1134): getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x2004000) 4.018505123s ago: executing program 3 (id=1135): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0xca}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xd8}}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = getpid() fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 4.018372453s ago: executing program 3 (id=1136): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 3.670761021s ago: executing program 5 (id=1145): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=2.1,nodfs\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="00000080fe534d424000010000000000000001000100"/33, 0x21, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)="00000078fe534d4240000100160000c00100010001000000000000000100000000000000000000000000000001000000000000000000000000000000000000000000000009000000480030004e544c4d53535000020000000000000000000000000208", 0x63, 0x0, 0x0, 0x0) 3.337423389s ago: executing program 7 (id=1147): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x40000000000032a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r4, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="a2", 0x1}], 0x1, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x8000000) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg(r3, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x20) 3.222769052s ago: executing program 2 (id=1148): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/block/sda/queue/discard_max_bytes\x00', 0x0, 0x0) read(r0, &(0x7f0000000400)=""/64, 0x40) 3.222679812s ago: executing program 2 (id=1149): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) ioctl$TCXONC(r1, 0x540a, 0x3) 3.222517752s ago: executing program 2 (id=1150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0xa, 0x3, 0xff) sendmmsg$unix(r3, &(0x7f0000004440)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x91}}], 0x1, 0x240088e0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f0000000480)=""/66, &(0x7f0000000500)=0x42) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f00000000c0)=""/45, 0x2d}], 0x2, 0x6, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) sendto(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES8=r5, @ANYRES16, @ANYRES64=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1) 2.285158505s ago: executing program 7 (id=1152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000440)='proc\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) 2.275330975s ago: executing program 3 (id=1153): chroot(&(0x7f0000000040)='./file0\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000004f00)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @dev={0xac, 0x14, 0x14, 0xa}}}}], 0x20}}], 0x1, 0x4) 2.273114045s ago: executing program 5 (id=1154): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x1fffffffffffffc}}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffff0300000000000000000000000000000000004000000000000000000200000000000000000200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 2.261014675s ago: executing program 0 (id=1155): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)="eda927dc6cd68c77b2f52508f930c43d3a9c56e7a3957769af18e66d9dd63a293e90a83f823a743e163d574799e0659635550d2fa79a02f946086c234c68333759382788b86ddf0083528044d918543fbfa1a3033b82e8671303000000cc933fa3b9e29fe5613673eafacb2f51292663734b1992f4171a87588aec9a9420dc981e866ba58783beb16930c80a2099f059f3", 0x91}], 0x1}, 0x20000800) recvmmsg(r1, &(0x7f0000007e80)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001a80)=""/205, 0xcd}], 0x1}, 0xffffffff}], 0x1, 0x2041, 0x0) 2.209462826s ago: executing program 0 (id=1156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 2.209341997s ago: executing program 0 (id=1157): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r2, &(0x7f0000000240)=""/173, 0xad, 0xb0) 2.209256897s ago: executing program 0 (id=1158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) 2.209079046s ago: executing program 5 (id=1159): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="000000004c900200010000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000404000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 2.095048239s ago: executing program 5 (id=1160): io_uring_setup(0x7, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0x4}, {0x300, 0x1}}}, 0x24}}, 0x0) 2.091983599s ago: executing program 3 (id=1161): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x22e01, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 2.009012791s ago: executing program 2 (id=1162): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f000000c2c0)='./file0\x00', 0xc08, &(0x7f00000001c0)=ANY=[], 0x3, 0x242, &(0x7f0000000380)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() pread64(0xffffffffffffffff, &(0x7f0000000480)=""/177, 0xffffffffffffff9f, 0xa8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x223, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) chdir(&(0x7f0000000140)='./file0\x00') prlimit64(r1, 0x4, 0x0, &(0x7f0000000240)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x34, 0x20, 0x2d2c6d60ea1da725, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xfffffffa}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x4001) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000400)='./trace/trace\x00', 0x80000, 0x0) 1.978722542s ago: executing program 5 (id=1163): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x40000000000032a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r4, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="a2", 0x1}], 0x1, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x8000000) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg(r3, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x20) 1.978366642s ago: executing program 0 (id=1164): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_setup(0x1f8c, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180), 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000000d00)={{&(0x7f00000009c0)=[{0xf3f, 0x4, 0xc29, {0x7, 0x664}, 0x7ffffffc, 0x800, 0x83a7}, {0x8, 0x7fffffff, 0xf, {0x9, 0x3}, 0x80, 0x7, 0x7f}, {0x400, 0x1, 0xaf8, {0xfffffffffffffffd, 0x5}, 0x8001, 0x2, 0x6}, {0x7, 0x4, 0x81, {0x5, 0x1}, 0xba, 0x3, 0xde44}, {0x7, 0x3, 0x0, {0x6, 0x9}, 0x9c99, 0x48, 0x5}, {0x47f, 0x2, 0x4, {0x3, 0x6}, 0x1ff, 0x1, 0x8}], 0x6, 0x40, 0x3, 0x10000}, {0x0, 0x0, 0x10, 0x7, 0x4}, {&(0x7f0000000c00)=[0x4], 0x1, 0x8, 0x40, 0x800}, {&(0x7f0000000c40)=[{0xb7a, 0x8, 0x932, 0xbcb, 0xc722}], 0x1, 0x28, 0x0, 0x2}, {0x0, 0x0, 0x8, 0x6, 0x6}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 422.18046ms ago: executing program 2 (id=1165): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@errors_remount}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$uinput_user_dev(r0, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x69, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0xffffff58, 0x48d, 0x7ff, 0x4, 0x4007f, 0xfffffffe, 0x6, 0x4], [0xfff, 0x3, 0x4, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0xa, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x42, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x6, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x6, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x5, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffb, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x7, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x9, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x2, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x9, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x7f, 0x9, 0x9, 0x4, 0x463f, 0x3, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) 422.06611ms ago: executing program 7 (id=1166): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@deltaction={0x14, 0x31, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xa50bc282d99602a5}, 0x84800) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010426bd7000000000fe00000000", @ANYRES32=0x0, @ANYBLOB="42d4010028000100280012800b00010065727370616e"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x810) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 421.92458ms ago: executing program 0 (id=1167): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) shutdown(r0, 0x1) 421.80909ms ago: executing program 2 (id=1168): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) io_uring_setup(0x66a5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r5, 0x2000009) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r6) fcntl$setownex(r6, 0xf, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000040)="1400000052004f030e789e7e27286d", 0xf) 421.73644ms ago: executing program 7 (id=1169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x2c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000090605000000000000000000060000000900020073797a300000000014000780060004404e20000006000540362100000500010007"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 421.65774ms ago: executing program 7 (id=1170): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x1fffffffffffffc}}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffff0300000000000000000000000000000000004000000000000000000200000000000000000200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 355.405291ms ago: executing program 5 (id=1171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 334.823552ms ago: executing program 7 (id=1172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getpriority(0x0, r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0xffff, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x28}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x118, 0x111, 0x4b4, 0x118, 0xd4feffff, 0x1e8, 0x20a, 0x278, 0x1e8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0x0, 0xff000002, 0x0, 0xffffffff], [], 'ipvlan0\x00', 'lo\x00', {}, {}, 0x6, 0x0, 0x0, 0x10}, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc6, 0x5, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0xd00, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r7, 0xf01, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 0s ago: executing program 3 (id=1173): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r4, &(0x7f0000000480), 0x0, 0x40000002, 0x0) 0s ago: executing program 0 (id=1175): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="b702000001000000b703000000000000b7040000000000008500000032000000b70000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r2, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20) sendto(r1, &(0x7f0000000800)="01", 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 30.880427][ T475] loop2: detected capacity change from 0 to 256 [ 30.889765][ T475] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 30.918462][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 30.924898][ T39] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.936312][ T39] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.946432][ T39] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 30.959686][ T39] usb 4-1: config 0 interface 0 has no altsetting 0 [ 30.966369][ T39] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 30.975942][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.025066][ T39] usb 4-1: config 0 descriptor?? [ 31.035811][ T479] loop0: detected capacity change from 0 to 4096 [ 31.043576][ T479] EXT4-fs (loop0): Test dummy encryption mode enabled [ 31.053745][ T479] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 31.830763][ T289] EXT4-fs (loop0): unmounting filesystem. [ 31.853638][ T39] usbhid 4-1:0.0: can't add hid device: -71 [ 31.863996][ T39] usbhid: probe of 4-1:0.0 failed with error -71 [ 31.947487][ T39] usb 4-1: USB disconnect, device number 2 [ 32.042672][ T491] syz.1.60 (491) used greatest stack depth: 22152 bytes left [ 32.050488][ T494] loop4: detected capacity change from 0 to 128 [ 32.052670][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 32.052682][ T28] audit: type=1400 audit(1791160994.990:193): avc: denied { append } for pid=488 comm="syz.4.59" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 32.240072][ T497] FAT-fs (loop1): Directory bread(block 64) failed [ 32.248379][ T497] FAT-fs (loop1): Directory bread(block 65) failed [ 32.259460][ T497] FAT-fs (loop1): Directory bread(block 66) failed [ 32.266083][ T497] FAT-fs (loop1): Directory bread(block 67) failed [ 32.273768][ T497] FAT-fs (loop1): Directory bread(block 68) failed [ 32.280983][ T497] FAT-fs (loop1): Directory bread(block 69) failed [ 32.290114][ T497] FAT-fs (loop1): Directory bread(block 70) failed [ 32.296811][ T497] FAT-fs (loop1): Directory bread(block 71) failed [ 32.311204][ T497] FAT-fs (loop1): Directory bread(block 72) failed [ 32.334029][ T503] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 32.335139][ T497] FAT-fs (loop1): Directory bread(block 73) failed [ 32.429005][ T503] System zones: 1-12 [ 32.456524][ T503] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.63: missing EA_INODE flag [ 32.498922][ T508] exfat: Deprecated parameter 'utf8' [ 32.527458][ T508] exfat: Deprecated parameter 'namecase' [ 32.528522][ T503] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.63: error while reading EA inode 12 err=-117 [ 32.547928][ T503] EXT4-fs (loop2): 1 orphan inode deleted [ 32.549733][ T508] exfat: Deprecated parameter 'utf8' [ 32.560178][ T503] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 32.597091][ T508] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 32.708697][ T28] audit: type=1400 audit(1791160995.640:194): avc: denied { name_bind } for pid=514 comm="syz.0.68" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.798831][ T28] audit: type=1400 audit(1791160995.710:195): avc: denied { node_bind } for pid=514 comm="syz.0.68" saddr=::ffff:0.0.0.0 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 32.931327][ T520] erofs: (device loop3): mounted with root inode @ nid 36. [ 33.285887][ T525] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 33.797454][ T540] FAT-fs (loop0): Directory bread(block 64) failed [ 33.810122][ T540] FAT-fs (loop0): Directory bread(block 65) failed [ 33.826904][ T540] FAT-fs (loop0): Directory bread(block 66) failed [ 33.838980][ T540] FAT-fs (loop0): Directory bread(block 67) failed [ 33.851115][ T540] FAT-fs (loop0): Directory bread(block 68) failed [ 33.858966][ T540] FAT-fs (loop0): Directory bread(block 69) failed [ 33.868693][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.877979][ T540] FAT-fs (loop0): Directory bread(block 70) failed [ 33.893258][ T540] FAT-fs (loop0): Directory bread(block 71) failed [ 33.904881][ T540] FAT-fs (loop0): Directory bread(block 72) failed [ 33.911694][ T540] FAT-fs (loop0): Directory bread(block 73) failed [ 34.048472][ T24] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 34.068458][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 34.074774][ T6] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.103765][ T6] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.118451][ T6] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 34.138447][ T6] usb 2-1: config 0 interface 0 has no altsetting 0 [ 34.146121][ T293] EXT4-fs (loop2): unmounting filesystem. [ 34.152450][ T6] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 34.161732][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.190607][ T6] usb 2-1: config 0 descriptor?? [ 34.239601][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 34.258852][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 34.277871][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 34.292683][ T560] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 34.302465][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.311714][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.312293][ T560] EXT4-fs error (device loop2): ext4_empty_dir:3154: inode #12: block 80: comm syz.2.85: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 34.319898][ T24] usb 4-1: Product: syz [ 34.343285][ T24] usb 4-1: Manufacturer: syz [ 34.347336][ T560] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz.2.85: directory missing '..' [ 34.347896][ T24] usb 4-1: SerialNumber: syz [ 34.349051][ T538] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 34.371495][ T293] EXT4-fs (loop2): unmounting filesystem. [ 34.399512][ T566] EXT4-fs: test_dummy_encryption requires encrypt feature [ 34.408600][ T324] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 34.427216][ T566] set_capacity_and_notify: 7 callbacks suppressed [ 34.427235][ T566] loop2: detected capacity change from 0 to 512 [ 34.465779][ T566] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 34.474872][ T566] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.588931][ T538] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 34.619605][ T324] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 34.630545][ T324] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 34.630563][ T578] capability: warning: `syz.4.91' uses deprecated v2 capabilities in a way that may be insecure [ 34.630580][ T324] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 34.642923][ T578] printk: syz.4.91 (578): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 34.653452][ T324] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 34.688014][ T324] usb 1-1: config 0 interface 0 has no altsetting 0 [ 34.836195][ T584] loop4: detected capacity change from 0 to 512 [ 34.870917][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 34.887773][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 34.896165][ T584] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.947315][ T6] usb 2-1: USB disconnect, device number 2 [ 34.956112][ T584] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.960606][ T324] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 34.966150][ T584] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 34.993241][ T584] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.93: Allocating blocks 41-42 which overlap fs metadata [ 35.007113][ T584] Quota error (device loop4): write_blk: dquota write failed [ 35.014287][ T324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.014864][ T584] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 35.032106][ T584] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.93: Allocating blocks 41-42 which overlap fs metadata [ 35.032483][ T324] usb 1-1: config 0 descriptor?? [ 35.049149][ T584] Quota error (device loop4): write_blk: dquota write failed [ 35.051041][ T554] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 35.058095][ T584] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 35.075182][ T584] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.93: Failed to acquire dquot type 1 [ 35.086576][ T584] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 35.104443][ T584] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #12: comm syz.4.93: corrupted inode contents [ 35.116622][ T584] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #12: comm syz.4.93: mark_inode_dirty error [ 35.128005][ T584] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #12: comm syz.4.93: corrupted inode contents [ 35.140116][ T584] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.93: mark_inode_dirty error [ 35.151441][ T584] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #12: comm syz.4.93: corrupted inode contents [ 35.163407][ T584] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 35.172160][ T584] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #12: comm syz.4.93: corrupted inode contents [ 35.184350][ T584] EXT4-fs error (device loop4): ext4_truncate:4327: inode #12: comm syz.4.93: mark_inode_dirty error [ 35.195870][ T584] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 35.205223][ T584] EXT4-fs (loop4): 1 truncate cleaned up [ 35.211119][ T584] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 35.237290][ T294] EXT4-fs (loop4): unmounting filesystem. [ 35.243491][ T584] syz.4.93 (584) used greatest stack depth: 21824 bytes left [ 35.279410][ T553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.288893][ T553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.306218][ T538] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 35.307423][ T588] loop4: detected capacity change from 0 to 512 [ 35.318945][ T293] EXT4-fs (loop2): unmounting filesystem. [ 35.326627][ T588] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 35.335026][ T588] System zones: 1-12 [ 35.339972][ T588] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.94: missing EA_INODE flag [ 35.351711][ T588] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.94: error while reading EA inode 12 err=-117 [ 35.364142][ T588] EXT4-fs (loop4): 1 orphan inode deleted [ 35.364287][ T593] netlink: 'syz.2.96': attribute type 1 has an invalid length. [ 35.370054][ T588] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 35.377946][ T593] netlink: 'syz.2.96': attribute type 2 has an invalid length. [ 35.401555][ T593] netlink: 'syz.2.96': attribute type 1 has an invalid length. [ 35.412246][ T593] netlink: 'syz.2.96': attribute type 2 has an invalid length. [ 35.421500][ T595] loop1: detected capacity change from 0 to 256 [ 35.487782][ T28] audit: type=1400 audit(1791160998.420:196): avc: denied { relabelfrom } for pid=599 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 35.508512][ T28] audit: type=1400 audit(1791160998.420:197): avc: denied { relabelto } for pid=599 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 35.601888][ T24] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 35.608373][ T24] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 35.621530][ T24] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 36.146775][ T28] audit: type=1400 audit(1791160999.080:198): avc: denied { write } for pid=603 comm="syz.1.100" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 36.176478][ T24] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 36.281764][ T24] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 36.453446][ T24] usb 4-1: USB disconnect, device number 3 [ 36.548413][ C0] sched: RT throttling activated [ 36.584968][ T24] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 36.659314][ T294] EXT4-fs (loop4): unmounting filesystem. [ 36.723073][ T617] loop4: detected capacity change from 0 to 256 [ 36.830795][ T624] loop3: detected capacity change from 0 to 256 [ 36.882175][ T624] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 36.952630][ T640] loop4: detected capacity change from 0 to 1024 [ 36.999711][ T324] usbhid 1-1:0.0: can't add hid device: -71 [ 37.010859][ T640] EXT4-fs: Ignoring removed orlov option [ 37.016615][ T324] usbhid: probe of 1-1:0.0 failed with error -71 [ 37.026980][ T324] usb 1-1: USB disconnect, device number 3 [ 37.033657][ T640] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 37.086575][ T640] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52238!=20869) [ 37.088632][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 37.088643][ T28] audit: type=1400 audit(1791161000.030:213): avc: denied { remove_name } for pid=647 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=1160 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.133098][ T640] EXT4-fs (loop4): invalid journal inode [ 37.158724][ T640] EXT4-fs (loop4): can't get journal size [ 37.187513][ T28] audit: type=1400 audit(1791161000.070:214): avc: denied { unlink } for pid=647 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=1160 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.202552][ T640] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.258502][ T640] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 37.258502][ T640] [ 37.310566][ T657] loop1: detected capacity change from 0 to 256 [ 37.328901][ T657] exfat: Deprecated parameter 'utf8' [ 37.334258][ T657] exfat: Deprecated parameter 'utf8' [ 37.359893][ T294] EXT4-fs (loop4): unmounting filesystem. [ 37.370532][ T657] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 37.472402][ T668] 9pnet_fd: Insufficient options for proto=fd [ 37.508267][ T670] loop1: detected capacity change from 0 to 256 [ 37.600103][ T649] loop0: detected capacity change from 0 to 40427 [ 37.627832][ T649] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 37.647938][ T678] EXT4-fs: Ignoring removed nobh option [ 37.651355][ T649] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 37.668752][ T28] audit: type=1400 audit(1791161000.610:215): avc: denied { write } for pid=679 comm="syz.4.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.669012][ T680] netlink: 68 bytes leftover after parsing attributes in process `syz.4.119'. [ 37.698499][ T649] F2FS-fs (loop0): Unrecognized mount option "whint_mode=user-based" or missing value [ 37.711014][ T28] audit: type=1400 audit(1791161000.610:216): avc: denied { nlmsg_write } for pid=679 comm="syz.4.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.741517][ T678] EXT4-fs (loop1): Test dummy encryption mode enabled [ 37.749913][ T678] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.809601][ T678] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.839657][ T678] EXT4-fs (loop1): 1 truncate cleaned up [ 37.855531][ T678] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 37.889589][ T689] netem: change failed [ 37.913345][ T678] EXT4-fs (loop1): Online defrag not supported for encrypted files [ 37.925604][ T28] audit: type=1400 audit(1791161000.870:217): avc: denied { mount } for pid=691 comm="syz.2.123" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 37.981793][ T694] EXT4-fs: Ignoring removed orlov option [ 37.983783][ T28] audit: type=1400 audit(1791161000.900:218): avc: denied { search } for pid=691 comm="syz.2.123" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 38.014675][ T288] EXT4-fs (loop1): unmounting filesystem. [ 38.015400][ T694] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 38.021358][ T28] audit: type=1400 audit(1791161000.900:219): avc: denied { read write } for pid=691 comm="syz.2.123" name="enable" dev="tracefs" ino=1284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 38.048459][ T694] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (52238!=20869) [ 38.055703][ T28] audit: type=1400 audit(1791161000.900:220): avc: denied { open } for pid=691 comm="syz.2.123" path="/29/trace/events/kvm/kvm_entry/enable" dev="tracefs" ino=1284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 38.084084][ T694] EXT4-fs (loop0): invalid journal inode [ 38.107537][ T696] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 38.115406][ T698] zero sized request [ 38.121515][ T694] EXT4-fs (loop0): can't get journal size [ 38.121499][ T493] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 38.127583][ T28] audit: type=1400 audit(1791161000.920:221): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 38.144970][ T696] FAT-fs (loop2): Filesystem has been set read-only [ 38.164669][ T694] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 38.181380][ T28] audit: type=1400 audit(1791161001.120:222): avc: denied { read } for pid=695 comm="syz.2.126" dev="nsfs" ino=4026532575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.216646][ T289] EXT4-fs (loop0): unmounting filesystem. [ 38.298829][ T493] usb 5-1: Using ep0 maxpacket: 16 [ 38.304747][ T716] 9pnet_fd: Insufficient options for proto=fd [ 38.305224][ T493] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.324919][ T714] support for the xor transformation has been removed. [ 38.331024][ T493] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 38.345023][ T493] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 38.368471][ T493] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.375071][ T719] EXT4-fs: Ignoring removed nobh option [ 38.385405][ T721] EXT4-fs: Ignoring removed nobh option [ 38.396089][ T493] usb 5-1: config 0 descriptor?? [ 38.403574][ T721] EXT4-fs (loop0): Test dummy encryption mode enabled [ 38.411086][ T721] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.426903][ T721] EXT4-fs (loop0): 1 truncate cleaned up [ 38.429051][ T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 38.432883][ T719] EXT4-fs (loop3): 1 truncate cleaned up [ 38.445879][ T721] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 38.454517][ T719] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 38.476416][ T289] EXT4-fs (loop0): unmounting filesystem. [ 38.476994][ T287] EXT4-fs (loop3): unmounting filesystem. [ 38.520620][ T729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 38.566141][ T732] EXT4-fs: Ignoring removed orlov option [ 38.575281][ T732] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 38.586392][ T732] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52238!=20869) [ 38.596245][ T732] EXT4-fs (loop3): invalid journal inode [ 38.602169][ T732] EXT4-fs (loop3): can't get journal size [ 38.610006][ T732] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 38.622255][ T737] FAT-fs (loop2): Unrecognized mount option "iochazset=utf8" or missing value [ 38.631751][ T287] EXT4-fs (loop3): unmounting filesystem. [ 38.632709][ T6] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.652689][ T6] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.669107][ T6] usb 2-1: config 0 interface 0 has no altsetting 0 [ 38.679515][ T6] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 38.691828][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.693347][ T741] kernel read not supported for file /policy (pid: 741 comm: syz.3.143) [ 38.704098][ T6] usb 2-1: config 0 descriptor?? [ 38.803014][ T750] 9pnet_fd: Insufficient options for proto=fd [ 38.810785][ T493] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 38.822853][ T493] HID 045e:07da: Invalid code 65791 type 1 [ 38.830819][ T493] HID 045e:07da: Invalid code 768 type 1 [ 38.836537][ T493] HID 045e:07da: Invalid code 769 type 1 [ 38.839597][ T753] EXT4-fs: Ignoring removed nobh option [ 38.844663][ T493] HID 045e:07da: Invalid code 770 type 1 [ 38.853763][ T753] EXT4-fs (loop3): Test dummy encryption mode enabled [ 38.854148][ T493] HID 045e:07da: Invalid code 771 type 1 [ 38.861176][ T753] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.872051][ T493] HID 045e:07da: Invalid code 772 type 1 [ 38.885352][ T753] EXT4-fs (loop3): 1 truncate cleaned up [ 38.887361][ T493] HID 045e:07da: Invalid code 773 type 1 [ 38.891212][ T753] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 38.897433][ T493] HID 045e:07da: Invalid code 774 type 1 [ 38.915949][ T493] HID 045e:07da: Invalid code 775 type 1 [ 38.921848][ T493] HID 045e:07da: Invalid code 776 type 1 [ 38.928889][ T287] EXT4-fs (loop3): unmounting filesystem. [ 38.937041][ T493] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0001/input/input4 [ 38.958971][ T756] netlink: 8896 bytes leftover after parsing attributes in process `syz.3.149'. [ 39.021824][ T493] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 39.316191][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 39.329534][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 39.369509][ T6] usb 2-1: USB disconnect, device number 3 [ 39.419976][ T780] EXT4-fs: Ignoring removed nobh option [ 39.426202][ T780] EXT4-fs (loop0): Test dummy encryption mode enabled [ 39.433225][ T780] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.445219][ T687] set_capacity_and_notify: 13 callbacks suppressed [ 39.445230][ T687] loop4: detected capacity change from 0 to 512 [ 39.463255][ T8] tipc: Subscription rejected, illegal request [ 39.469561][ T780] EXT4-fs (loop0): 1 truncate cleaned up [ 39.475229][ T780] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.478504][ T687] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.502799][ T289] EXT4-fs (loop0): unmounting filesystem. [ 39.509747][ T687] EXT4-fs (loop4): 1 truncate cleaned up [ 39.515419][ T687] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 39.538487][ T493] usb 5-1: USB disconnect, device number 3 [ 39.544118][ T791] loop0: detected capacity change from 0 to 256 [ 39.843884][ T801] loop1: detected capacity change from 0 to 512 [ 39.853406][ T801] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 39.866024][ T801] syz.1.168 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 40.057977][ T294] EXT4-fs (loop4): unmounting filesystem. [ 40.081322][ T809] loop4: detected capacity change from 0 to 512 [ 40.091999][ T809] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.105880][ T809] EXT4-fs (loop4): 1 truncate cleaned up [ 40.112135][ T809] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 40.130200][ T294] EXT4-fs (loop4): unmounting filesystem. [ 40.254634][ T816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 40.263671][ T816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.173'. [ 40.688186][ T324] kernel write not supported for file [eventfd] (pid: 324 comm: kworker/1:3) [ 40.888657][ T831] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.904598][ T831] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.351054][ T837] loop4: detected capacity change from 0 to 256 [ 42.080516][ T856] loop1: detected capacity change from 0 to 40427 [ 42.096288][ T856] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 42.102731][ T856] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 42.118537][ T856] F2FS-fs (loop1): invalid crc value [ 42.125277][ T856] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 42.149811][ T856] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 42.157208][ T856] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 42.189352][ T856] syz.1.189: attempt to access beyond end of device [ 42.189352][ T856] loop1: rw=2049, sector=53248, nr_sectors = 16 limit=40427 [ 42.204012][ T856] syz.1.189: attempt to access beyond end of device [ 42.204012][ T856] loop1: rw=2049, sector=53264, nr_sectors = 8 limit=40427 [ 42.224690][ T288] syz-executor: attempt to access beyond end of device [ 42.224690][ T288] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 42.275106][ T873] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 42.286322][ T873] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 42.296418][ T873] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 42.371178][ T28] kauditd_printk_skb: 128 callbacks suppressed [ 42.371195][ T28] audit: type=1400 audit(1791161005.310:351): avc: denied { create } for pid=883 comm="syz.2.200" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.403933][ T28] audit: type=1400 audit(1791161005.310:352): avc: denied { read } for pid=883 comm="syz.2.200" name="file0" dev="tmpfs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.427212][ T28] audit: type=1400 audit(1791161005.310:353): avc: denied { open } for pid=883 comm="syz.2.200" path="/51/file0" dev="tmpfs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.451134][ T28] audit: type=1400 audit(1791161005.310:354): avc: denied { ioctl } for pid=883 comm="syz.2.200" path="/51/file0" dev="tmpfs" ino=320 ioctlcmd=0x4c05 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.475058][ T28] audit: type=1400 audit(1791161005.310:355): avc: denied { unlink } for pid=293 comm="syz-executor" name="file0" dev="tmpfs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.497580][ T28] audit: type=1400 audit(1791161005.320:356): avc: denied { write } for pid=885 comm="syz.2.201" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.588487][ T324] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 42.752005][ T902] loop0: detected capacity change from 0 to 512 [ 42.758720][ T902] EXT4-fs: Ignoring removed nobh option [ 42.766394][ T902] EXT4-fs (loop0): 1 truncate cleaned up [ 42.772276][ T902] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 42.781837][ T324] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.792870][ T324] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.793659][ T289] EXT4-fs (loop0): unmounting filesystem. [ 42.805729][ T324] usb 5-1: config 0 interface 0 has no altsetting 0 [ 42.805758][ T324] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 42.805781][ T324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.829194][ T324] usb 5-1: config 0 descriptor?? [ 42.858707][ T908] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 42.867500][ T908] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 42.875869][ T908] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 42.932010][ T918] loop0: detected capacity change from 0 to 16 [ 42.944081][ T918] erofs: (device loop0): mounted with root inode @ nid 36. [ 42.952641][ T28] audit: type=1400 audit(1791161005.900:357): avc: denied { write } for pid=917 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.952655][ T918] netlink: 44 bytes leftover after parsing attributes in process `syz.0.213'. [ 42.952672][ T918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'. [ 43.003650][ T918] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=46 [ 43.013270][ T918] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=46 [ 43.022472][ T28] audit: type=1400 audit(1791161005.970:358): avc: denied { mounton } for pid=917 comm="syz.0.213" path="/39/file1/file0" dev="loop0" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.077011][ T922] Zero length message leads to an empty skb [ 43.125907][ T28] audit: type=1400 audit(1791161006.060:359): avc: denied { create } for pid=921 comm="syz.0.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.145436][ T28] audit: type=1400 audit(1791161006.090:360): avc: denied { write } for pid=921 comm="syz.0.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.297346][ T934] overlayfs: missing 'lowerdir' [ 43.367734][ T949] loop3: detected capacity change from 0 to 512 [ 43.550002][ T324] usbhid 5-1:0.0: can't add hid device: -71 [ 43.566970][ T324] usbhid: probe of 5-1:0.0 failed with error -71 [ 43.582910][ T324] usb 5-1: USB disconnect, device number 4 [ 43.672284][ T956] capability: warning: `syz.3.230' uses 32-bit capabilities (legacy support in use) [ 44.336592][ T967] overlayfs: missing 'lowerdir' [ 44.832000][ T994] loop1: detected capacity change from 0 to 16 [ 44.842197][ T994] erofs: (device loop1): mounted with root inode @ nid 36. [ 44.868578][ T994] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=86 [ 44.890393][ T994] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 44.906656][ T994] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 44.928531][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 44.936880][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 44.945669][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 44.954121][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 44.962664][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 44.971055][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 44.979564][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 44.987830][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 44.996191][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.004557][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.012839][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.021197][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.029511][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.037801][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.046134][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.054361][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.062634][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.070824][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.078991][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.087157][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.095283][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.103580][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.111845][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.120106][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.128268][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.136511][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.144667][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.152878][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.161208][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.169392][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.177551][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.185775][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.193924][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.202140][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.210272][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.218390][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.226673][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.235249][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.243460][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.251773][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.260091][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.268317][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.276567][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.285080][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.293657][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.302406][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.302926][ T998] overlayfs: missing 'lowerdir' [ 45.310853][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.323723][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.331959][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.343754][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.352161][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.360476][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.368838][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.380363][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.388830][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.397893][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.406184][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.414482][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.423048][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.431442][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.439702][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.447940][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.456194][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.464363][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.472546][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.480655][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.488897][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.497027][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.505195][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.513316][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.521462][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.529592][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.537817][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.546428][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.554572][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.562766][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.570964][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.579206][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.587524][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.596344][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.607481][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.615705][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.623975][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.632269][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.640723][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.650410][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.659379][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.667708][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.676058][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.684312][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.692841][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.701147][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.709456][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.717555][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.725781][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.734112][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.742421][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.750607][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.758868][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.767176][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.775408][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.784375][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.792634][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.800826][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.809022][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.817322][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.825512][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.833635][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.841862][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.850024][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.858519][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.866907][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.875168][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.883548][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.891879][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.900423][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.909056][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.917489][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.926992][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.936103][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.944554][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.952857][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.962490][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.970822][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.983472][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 45.991718][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.000341][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.008669][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.016845][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.025104][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.033865][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.042119][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.050438][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.058920][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.067185][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.075444][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.085524][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.093938][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.102306][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.116698][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.125692][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.134079][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.142515][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.151076][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.159512][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.167728][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.176241][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.184765][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.193184][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.201528][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.209949][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.225413][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.242354][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.259988][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.270599][ T1026] netlink: 'syz.0.260': attribute type 1 has an invalid length. [ 46.278775][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.286860][ T1026] netlink: 'syz.0.260': attribute type 2 has an invalid length. [ 46.295309][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.303930][ T1026] netlink: 'syz.0.260': attribute type 1 has an invalid length. [ 46.312031][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.320290][ T1026] netlink: 'syz.0.260': attribute type 2 has an invalid length. [ 46.328328][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.345998][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.363599][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.378461][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.388356][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.397164][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.406445][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.415086][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.423907][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.433310][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.448912][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.465360][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.500579][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.527378][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.553454][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.568703][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.582174][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.591831][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.600351][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.609254][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.618179][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.627725][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.636288][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.644532][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.652934][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.661233][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.669455][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.677757][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.686148][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.694356][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.702958][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.711246][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.719445][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.727910][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.736139][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.744382][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.752665][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.760997][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.769596][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.777978][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.786263][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.794516][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.802805][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.811029][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.819981][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.829943][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.838203][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.847340][ T1037] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 46.861387][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.869724][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.898344][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.915319][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.924338][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.933326][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.946010][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.954786][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.964859][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.973312][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.983919][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 46.997901][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 47.009175][ T1053] netlink: 'syz.4.272': attribute type 1 has an invalid length. [ 47.009236][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 47.025135][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 47.026985][ T1053] netlink: 'syz.4.272': attribute type 2 has an invalid length. [ 47.033956][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 47.049654][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 47.057883][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 47.069301][ T1053] netlink: 'syz.4.272': attribute type 1 has an invalid length. [ 47.069447][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 47.085384][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 47.087110][ T1053] netlink: 'syz.4.272': attribute type 2 has an invalid length. [ 47.093721][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 47.109517][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 47.124089][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 47.139874][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 47.150814][ T1057] loop4: detected capacity change from 0 to 512 [ 47.152700][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 47.186794][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 47.200550][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 47.208606][ T1057] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 47.208682][ T1057] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.238031][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 47.248058][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 47.256324][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 47.264607][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 47.272914][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 47.281395][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 47.290201][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 47.290696][ T294] EXT4-fs (loop4): unmounting filesystem. [ 47.298603][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 47.312177][ T288] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 47.320447][ T288] format_corename failed [ 47.324740][ T288] Aborting core [ 47.396498][ T1064] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.403746][ T1064] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.431099][ T288] syz-executor (288) used greatest stack depth: 21024 bytes left [ 47.848612][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 47.848630][ T28] audit: type=1400 audit(1791161010.720:374): avc: denied { mounton } for pid=1072 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.010969][ T1072] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.034218][ T1072] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.057900][ T1072] device bridge_slave_0 entered promiscuous mode [ 48.094083][ T1072] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.120766][ T1072] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.152098][ T1072] device bridge_slave_1 entered promiscuous mode [ 48.274034][ T8] device bridge_slave_1 left promiscuous mode [ 48.283507][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.312459][ T8] device bridge_slave_0 left promiscuous mode [ 48.417671][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.426377][ T8] device veth1_macvtap left promiscuous mode [ 48.432614][ T8] device veth0_vlan left promiscuous mode [ 51.588588][ T28] audit: type=1400 audit(1791161014.520:375): avc: denied { read } for pid=1043 comm="syz.2.268" path="socket:[18073]" dev="sockfs" ino=18073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.635567][ T1087] loop4: detected capacity change from 0 to 512 [ 51.701712][ T1090] overlayfs: missing 'workdir' [ 51.750259][ T1087] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 51.758261][ T1087] System zones: 1-12 [ 51.789743][ T1095] format_corename failed [ 51.794185][ T1087] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.282: missing EA_INODE flag [ 51.805867][ T1095] Aborting core [ 51.819646][ T1087] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.282: error while reading EA inode 12 err=-117 [ 51.840140][ T1097] overlayfs: failed to clone upperpath [ 51.848794][ T1087] EXT4-fs (loop4): 1 orphan inode deleted [ 51.861397][ T1087] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 52.001683][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.018762][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.342636][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.368516][ T28] audit: type=1400 audit(1791161015.300:376): avc: denied { mount } for pid=1103 comm="syz.2.288" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 52.395097][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.457119][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.464233][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.474431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.488169][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.496642][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.503709][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.511170][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.519324][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.527345][ T1105] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 52.542566][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.551016][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.560448][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.568036][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.578133][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.610168][ T1072] device veth0_vlan entered promiscuous mode [ 52.611044][ T294] EXT4-fs (loop4): unmounting filesystem. [ 52.624912][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.635099][ T1072] device veth1_macvtap entered promiscuous mode [ 52.652273][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.654041][ T1114] loop4: detected capacity change from 0 to 256 [ 52.661034][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.685130][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.696775][ T28] audit: type=1400 audit(1791161015.640:377): avc: denied { mounton } for pid=1072 comm="syz-executor" path="/root/syzkaller.9IrQww/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 52.698033][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.766999][ T1116] process 'syz.0.291' launched './file1' with NULL argv: empty string added [ 52.776293][ T28] audit: type=1400 audit(1791161015.720:378): avc: denied { execute_no_trans } for pid=1115 comm="syz.0.291" path="/61/file1" dev="tmpfs" ino=361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 52.882989][ T1123] loop5: detected capacity change from 0 to 256 [ 52.889657][ T1123] exfat: Deprecated parameter 'utf8' [ 52.895010][ T1123] exfat: Deprecated parameter 'namecase' [ 52.900731][ T1123] exfat: Deprecated parameter 'namecase' [ 52.906443][ T1123] exfat: Deprecated parameter 'namecase' [ 52.915363][ T1123] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 52.952768][ T1126] overlayfs: failed to clone upperpath [ 52.975772][ T1130] overlayfs: failed to clone upperpath [ 53.138499][ T493] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 53.232712][ T1152] overlayfs: failed to clone upperpath [ 53.328463][ T493] usb 5-1: Using ep0 maxpacket: 16 [ 53.335290][ T493] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.346093][ T493] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.357331][ T493] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.367389][ T493] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 53.380490][ T493] usb 5-1: config 0 interface 0 has no altsetting 0 [ 53.387167][ T493] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 53.396738][ T493] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.406188][ T493] usb 5-1: config 0 descriptor?? [ 53.638228][ T1158] fuse: Bad value for 'fd' [ 53.751245][ T28] audit: type=1400 audit(1791161016.690:379): avc: denied { nlmsg_write } for pid=1166 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 53.818069][ T493] logitech-djreceiver 0003:046D:C53A.0002: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.4-1/input0 [ 53.848744][ T1176] overlayfs: failed to clone upperpath [ 53.910984][ T1161] loop5: detected capacity change from 0 to 40427 [ 53.924808][ T28] audit: type=1400 audit(1791161016.860:380): avc: denied { create } for pid=1189 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.949204][ T1161] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 53.959217][ T1161] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 53.964442][ T28] audit: type=1400 audit(1791161016.860:381): avc: denied { write } for pid=1189 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.977244][ T1161] F2FS-fs (loop5): Unrecognized mount option "whint_mode=user-based" or missing value [ 54.033573][ T493] usb 5-1: USB disconnect, device number 5 [ 54.471238][ T1212] overlayfs: failed to clone upperpath [ 54.575412][ T1217] loop4: detected capacity change from 0 to 256 [ 54.604831][ T1217] exfat: Deprecated parameter 'utf8' [ 54.639315][ T1217] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 54.815939][ T1227] loop4: detected capacity change from 0 to 8192 [ 54.854353][ T1235] overlayfs: failed to clone upperpath [ 55.035737][ T28] audit: type=1400 audit(1791161017.970:382): avc: denied { map } for pid=1248 comm="syz.0.347" path="/81" dev="tmpfs" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 55.998688][ T1260] overlayfs: failed to clone upperpath [ 56.845287][ T1268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.350'. [ 57.441285][ T1283] loop5: detected capacity change from 0 to 512 [ 57.528447][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 57.558303][ T1283] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 57.566906][ T1283] System zones: 1-12 [ 57.571867][ T1283] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.358: missing EA_INODE flag [ 57.584022][ T1283] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.358: error while reading EA inode 12 err=-117 [ 57.889094][ T1283] EXT4-fs (loop5): 1 orphan inode deleted [ 57.897003][ T1283] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 57.908470][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.980850][ T24] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 58.125636][ T1283] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 58.224403][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.226309][ T1072] EXT4-fs (loop5): unmounting filesystem. [ 58.240879][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.257187][ T24] usb 5-1: Product: syz [ 58.266562][ T24] usb 5-1: Manufacturer: syz [ 58.275309][ T24] usb 5-1: SerialNumber: syz [ 58.298916][ T24] cdc_mbim 5-1:1.0: skipping garbage [ 58.369738][ T1304] ip_tables: iptables: counters copy to user failed while replacing table [ 58.433705][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.441030][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.501205][ T1274] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 58.667311][ T1321] loop5: detected capacity change from 0 to 256 [ 58.676506][ T28] audit: type=1400 audit(1791161021.590:383): avc: denied { lock } for pid=1316 comm="syz.5.371" path="socket:[18405]" dev="sockfs" ino=18405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 58.728567][ T28] audit: type=1400 audit(1791161021.590:384): avc: denied { ioctl } for pid=1316 comm="syz.5.371" path="socket:[18404]" dev="sockfs" ino=18404 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.764671][ T1321] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x0b1b2bd0) [ 58.775026][ T1321] exFAT-fs (loop5): invalid boot region [ 58.780633][ T1321] exFAT-fs (loop5): failed to recognize exfat type [ 58.940349][ T28] audit: type=1400 audit(1791161021.770:385): avc: denied { getopt } for pid=1316 comm="syz.5.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.188086][ T1325] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 59.539375][ T1274] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 59.554240][ T24] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 59.578529][ T24] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 12:36:eb:10:b6:a9 [ 59.683281][ T28] audit: type=1400 audit(1791161022.620:386): avc: denied { ioctl } for pid=1345 comm="syz.2.382" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18429 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.692382][ T1348] loop5: detected capacity change from 0 to 512 [ 59.719606][ T1348] EXT4-fs: Ignoring removed nobh option [ 59.731570][ T1348] EXT4-fs (loop5): Test dummy encryption mode enabled [ 59.742497][ T1348] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 59.762522][ T28] audit: type=1400 audit(1791161022.680:387): avc: denied { read } for pid=1345 comm="syz.2.382" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.764221][ T1348] EXT4-fs (loop5): 1 truncate cleaned up [ 59.789837][ T307] usb 5-1: USB disconnect, device number 6 [ 59.803254][ T307] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 59.869286][ T1348] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 60.553871][ T1072] EXT4-fs (loop5): unmounting filesystem. [ 61.536384][ T28] audit: type=1400 audit(1791161024.470:388): avc: denied { setattr } for pid=1403 comm="syz.4.398" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.601307][ T1419] loop4: detected capacity change from 0 to 512 [ 61.683889][ T1419] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 61.700203][ T1419] System zones: 1-12 [ 61.716242][ T1419] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.402: missing EA_INODE flag [ 61.738857][ T1419] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.402: error while reading EA inode 12 err=-117 [ 61.751929][ T1419] EXT4-fs (loop4): 1 orphan inode deleted [ 61.757718][ T1419] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 64.726604][ T28] audit: type=1400 audit(1791161027.660:389): avc: denied { setopt } for pid=1431 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.841954][ T28] audit: type=1400 audit(1791161028.740:390): avc: denied { write } for pid=1443 comm="syz.5.410" name="usbmon8" dev="devtmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 65.963376][ T294] EXT4-fs (loop4): unmounting filesystem. [ 65.986559][ T6] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 65.993506][ T28] audit: type=1400 audit(1791161028.750:391): avc: denied { open } for pid=1443 comm="syz.5.410" path="/dev/usbmon8" dev="devtmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 66.019272][ T1456] netlink: 20 bytes leftover after parsing attributes in process `syz.2.412'. [ 66.028178][ T1456] netlink: 20 bytes leftover after parsing attributes in process `syz.2.412'. [ 66.127071][ T28] audit: type=1400 audit(1791161029.060:392): avc: denied { bind } for pid=1460 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.164877][ T1467] loop5: detected capacity change from 0 to 256 [ 66.179251][ T1467] exfat: Deprecated parameter 'utf8' [ 66.184816][ T1467] exfat: Deprecated parameter 'namecase' [ 66.192985][ T1467] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf0f4daa6, utbl_chksum : 0xe619d30d) [ 66.227978][ T1473] netlink: 9028 bytes leftover after parsing attributes in process `syz.5.423'. [ 66.253091][ T1477] loop5: detected capacity change from 0 to 512 [ 66.263324][ T1477] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 66.271368][ T1477] System zones: 1-12 [ 66.276272][ T1477] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.425: missing EA_INODE flag [ 66.288155][ T1477] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.425: error while reading EA inode 12 err=-117 [ 66.300995][ T1477] EXT4-fs (loop5): 1 orphan inode deleted [ 66.306836][ T1477] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 66.789102][ T324] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 66.834222][ T28] audit: type=1326 audit(1791161029.770:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1501 comm="syz.2.435" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8cd9e159 code=0x7ffc0000 [ 66.860521][ T28] audit: type=1326 audit(1791161029.770:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1501 comm="syz.2.435" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8cd9e159 code=0x7ffc0000 [ 66.886043][ T28] audit: type=1326 audit(1791161029.770:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1501 comm="syz.2.435" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8a8cd9e159 code=0x7ffc0000 [ 66.910934][ T28] audit: type=1326 audit(1791161029.770:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1501 comm="syz.2.435" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8cd9e159 code=0x7ffc0000 [ 66.935932][ T28] audit: type=1326 audit(1791161029.770:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1501 comm="syz.2.435" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8cd9e159 code=0x7ffc0000 [ 66.961446][ T28] audit: type=1326 audit(1791161029.770:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1501 comm="syz.2.435" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a8cd9e159 code=0x7ffc0000 [ 67.637359][ T324] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 67.652326][ T324] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 67.663189][ T324] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 67.674571][ T1072] EXT4-fs (loop5): unmounting filesystem. [ 67.687333][ T324] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 67.697330][ T324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.727014][ T1465] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 67.739169][ T1465] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 67.747007][ T324] pl2303 5-1:1.0: pl2303 converter detected [ 67.762946][ T324] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 68.118607][ T1465] pl2303 ttyUSB0: pl2303_get_line_request - failed: -110 [ 68.129925][ T1465] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 68.147437][ T1465] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 68.163101][ T1465] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 68.478588][ T1464] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 68.492050][ T1464] pl2303 ttyUSB0: error sending break = -32 [ 68.510185][ T6] usb 5-1: USB disconnect, device number 7 [ 68.520635][ T6] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 68.547166][ T6] pl2303 5-1:1.0: device disconnected [ 68.555018][ T1530] syz.2.447 (1530) used greatest stack depth: 20744 bytes left [ 69.111057][ T1574] erofs: (device loop7): erofs_read_superblock: cannot find valid erofs superblock [ 69.198467][ T6] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 69.293216][ T1586] loop4: detected capacity change from 0 to 256 [ 69.389462][ T6] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.400411][ T6] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.413225][ T6] usb 6-1: config 0 interface 0 has no altsetting 0 [ 69.419970][ T6] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 69.429057][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.440984][ T6] usb 6-1: config 0 descriptor?? [ 69.618448][ T307] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 69.751693][ T8] tipc: Subscription rejected, illegal request [ 69.819520][ T307] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 69.829515][ T307] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 69.846987][ T307] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 69.868475][ T307] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 69.877571][ T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.887179][ T1588] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 69.903886][ T1588] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 69.914122][ T307] pl2303 5-1:1.0: pl2303 converter detected [ 69.939535][ T307] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 70.003739][ T1607] ip_tables: iptables: counters copy to user failed while replacing table [ 70.060572][ T6] usbhid 6-1:0.0: can't add hid device: -71 [ 70.073142][ T6] usbhid: probe of 6-1:0.0 failed with error -71 [ 70.083227][ T6] usb 6-1: USB disconnect, device number 3 [ 70.278504][ T1588] pl2303 ttyUSB0: pl2303_get_line_request - failed: -110 [ 70.288794][ T1588] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 70.298642][ T1588] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 70.313322][ T1588] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 70.464173][ T1645] overlayfs: failed to clone upperpath [ 70.638696][ T1587] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 70.649059][ T1587] pl2303 ttyUSB0: error sending break = -32 [ 70.667033][ T324] usb 5-1: USB disconnect, device number 8 [ 70.680548][ T324] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 70.705337][ T324] pl2303 5-1:1.0: device disconnected [ 70.746783][ T1669] loop5: detected capacity change from 0 to 8192 [ 70.775913][ T1669] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.810513][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 70.810530][ T28] audit: type=1400 audit(1791161033.750:430): avc: denied { watch } for pid=1668 comm="syz.5.508" path="/33/file1/file1" dev="loop5" ino=1048629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 71.159269][ T6] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 71.211470][ T1708] ip_tables: iptables: counters copy to user failed while replacing table [ 71.290787][ T43] tipc: Subscription rejected, illegal request [ 71.349552][ T6] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.370619][ T6] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.399750][ T6] usb 6-1: config 0 interface 0 has no altsetting 0 [ 71.406659][ T6] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 71.416254][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.440006][ T6] usb 6-1: config 0 descriptor?? [ 72.049792][ T8] tipc: Subscription rejected, illegal request [ 72.096532][ T6] usbhid 6-1:0.0: can't add hid device: -71 [ 72.102574][ T6] usbhid: probe of 6-1:0.0 failed with error -71 [ 72.107901][ T1746] loop4: detected capacity change from 0 to 256 [ 72.121251][ T6] usb 6-1: USB disconnect, device number 4 [ 72.181106][ T1748] loop4: detected capacity change from 0 to 512 [ 72.239111][ T1748] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 72.247282][ T1748] System zones: 0-2, 18-18, 34-34 [ 72.259554][ T1748] EXT4-fs (loop4): 1 orphan inode deleted [ 72.265432][ T1748] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 72.274133][ T1748] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.287887][ T28] audit: type=1400 audit(1791161035.220:431): avc: denied { mounton } for pid=1747 comm="syz.4.545" path="/86/file0/proc" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.439040][ T1748] FAULT_INJECTION: forcing a failure. [ 72.439040][ T1748] name failslab, interval 1, probability 0, space 0, times 0 [ 72.452072][ T1748] CPU: 1 PID: 1748 Comm: syz.4.545 Not tainted syzkaller #0 [ 72.459388][ T1748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 72.469463][ T1748] Call Trace: [ 72.472778][ T1748] [ 72.475717][ T1748] __dump_stack+0x21/0x24 [ 72.480073][ T1748] dump_stack_lvl+0x110/0x170 [ 72.484752][ T1748] ? __cfi_dump_stack_lvl+0x8/0x8 [ 72.489790][ T1748] dump_stack+0x15/0x24 [ 72.493948][ T1748] should_fail_ex+0x3bf/0x510 [ 72.498630][ T1748] ? security_inode_alloc+0x33/0x120 [ 72.503924][ T1748] __should_failslab+0xac/0xf0 [ 72.508691][ T1748] should_failslab+0x9/0x20 [ 72.513204][ T1748] kmem_cache_alloc+0x3b/0x320 [ 72.517965][ T1748] security_inode_alloc+0x33/0x120 [ 72.523080][ T1748] inode_init_always+0x6ee/0x950 [ 72.528078][ T1748] ? __cfi_ext4_alloc_inode+0x10/0x10 [ 72.533490][ T1748] iget_locked+0x1f3/0x840 [ 72.537940][ T1748] __ext4_iget+0x233/0x3e70 [ 72.542468][ T1748] ? ext4_ci_compare+0x3f0/0x3f0 [ 72.547615][ T1748] ? __cfi___ext4_iget+0x10/0x10 [ 72.552581][ T1748] ext4_lookup+0x28e/0x710 [ 72.557028][ T1748] ? __cfi_ext4_lookup+0x10/0x10 [ 72.562081][ T1748] ? d_alloc+0x1f4/0x260 [ 72.566353][ T1748] lookup_one_qstr_excl+0x125/0x270 [ 72.571576][ T1748] filename_create+0x23d/0x440 [ 72.576373][ T1748] ? kern_path_create+0x1b0/0x1b0 [ 72.581411][ T1748] ? __check_object_size+0x45a/0x600 [ 72.586687][ T1748] do_mknodat+0xdb/0x790 [ 72.590931][ T1748] ? getname_flags+0x205/0x510 [ 72.595695][ T1748] __x64_sys_mknodat+0xa9/0xc0 [ 72.600474][ T1748] x64_sys_call+0x220/0x9a0 [ 72.605102][ T1748] do_syscall_64+0x4c/0xa0 [ 72.609526][ T1748] ? clear_bhb_loop+0x30/0x80 [ 72.614214][ T1748] ? clear_bhb_loop+0x30/0x80 [ 72.618884][ T1748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.624775][ T1748] RIP: 0033:0x7fd1ee59e159 [ 72.629198][ T1748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.648810][ T1748] RSP: 002b:00007fd1ef3f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 72.657251][ T1748] RAX: ffffffffffffffda RBX: 00007fd1ee825fa0 RCX: 00007fd1ee59e159 [ 72.665238][ T1748] RDX: 0000000000008000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 72.673228][ T1748] RBP: 00007fd1ee63506b R08: 0000000000000000 R09: 0000000000000000 [ 72.681218][ T1748] R10: 0000000000010103 R11: 0000000000000246 R12: 0000000000000000 [ 72.689201][ T1748] R13: 00007fd1ee826038 R14: 00007fd1ee825fa0 R15: 00007ffef9415d98 [ 72.697283][ T1748] [ 72.821786][ T1767] loop5: detected capacity change from 0 to 512 [ 72.839971][ T1767] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec018, mo2=0002] [ 72.848190][ T1767] System zones: 0-2, 18-18, 34-35 [ 72.856399][ T1767] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 72.919118][ T1767] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.977931][ T28] audit: type=1400 audit(1791161035.910:432): avc: denied { setattr } for pid=1766 comm="syz.5.551" path="/35/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.002537][ T1767] EXT4-fs warning (device loop5): ext4_group_extend:1899: can't read last block, resize aborted [ 73.013571][ T294] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /86/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 73.055276][ T1072] EXT4-fs (loop5): unmounting filesystem. [ 73.062159][ T294] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 73.081553][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 73.093748][ T294] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /86/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 73.116528][ T294] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 73.135683][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 73.147849][ T294] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /86/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 73.169339][ T294] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 73.188423][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 73.200383][ T294] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /86/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 73.222435][ T294] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 73.241490][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 73.253341][ T294] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /86/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 73.282440][ T294] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 73.308251][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 73.322436][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 73.323727][ T1781] netlink: 8 bytes leftover after parsing attributes in process `syz.5.558'. [ 73.334834][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 73.355240][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 73.368063][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 73.407560][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 73.628560][ T1290] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 73.730193][ T294] EXT4-fs (loop4): unmounting filesystem. [ 73.818502][ T1290] usb 6-1: Using ep0 maxpacket: 32 [ 73.824949][ T1290] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 73.836087][ T1290] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 73.848491][ T1290] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 73.862354][ T1290] usb 6-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 73.872271][ T1290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.460534][ T1290] usb 6-1: config 0 descriptor?? [ 74.543260][ T1791] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.550543][ T1791] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.558617][ T1791] device bridge_slave_0 entered promiscuous mode [ 74.566003][ T1791] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.573096][ T1791] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.581479][ T1791] device bridge_slave_1 entered promiscuous mode [ 74.648351][ T1791] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.655454][ T1791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.662773][ T1791] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.669850][ T1791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.708113][ T1812] tipc: Failed to remove unknown binding: 66,0,0/0:1204630986/1204630988 [ 74.719233][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.726860][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.738139][ T1812] tipc: Failed to remove unknown binding: 66,0,0/0:1204630986/1204630987 [ 74.743342][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.754583][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.761942][ T1815] tipc: Failed to remove unknown binding: 66,0,0/0:1204630986/1204630988 [ 74.778457][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.786944][ T1815] tipc: Failed to remove unknown binding: 66,0,0/0:1204630986/1204630987 [ 74.796309][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.805724][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.812797][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.821536][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.835636][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.845797][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.852875][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.871826][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.880407][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.888777][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.897046][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.907727][ T1290] thrustmaster 0003:044F:B65A.0003: hidraw0: USB HID v0.05 Device [HID 044f:b65a] on usb-dummy_hcd.5-1/input0 [ 74.929390][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.937974][ T1290] thrustmaster 0003:044F:B65A.0003: no inputs found [ 74.950581][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.969904][ T1791] device veth0_vlan entered promiscuous mode [ 74.976957][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.985984][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.002378][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.011489][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.025883][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.034368][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.047223][ T1791] device veth1_macvtap entered promiscuous mode [ 75.072095][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.086226][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.095164][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.110510][ T324] usb 6-1: USB disconnect, device number 5 [ 75.121517][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.134885][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.830890][ T1870] loop5: detected capacity change from 0 to 512 [ 75.847374][ T1870] EXT4-fs (loop5): 1 truncate cleaned up [ 75.853210][ T1870] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 75.892599][ T1072] EXT4-fs (loop5): unmounting filesystem. [ 76.159855][ T1901] loop6: detected capacity change from 0 to 512 [ 76.179794][ T1901] EXT4-fs (loop6): 1 truncate cleaned up [ 76.185492][ T1901] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 76.237367][ T1791] EXT4-fs (loop6): unmounting filesystem. [ 76.341993][ T28] audit: type=1400 audit(1791161039.280:433): avc: denied { name_bind } for pid=1914 comm="syz.6.616" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 76.386399][ T1882] loop5: detected capacity change from 0 to 131072 [ 76.406499][ T1882] F2FS-fs (loop5): invalid crc value [ 76.439912][ T1882] F2FS-fs (loop5): Found nat_bits in checkpoint [ 76.487507][ T1882] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 76.565457][ T1943] loop6: detected capacity change from 0 to 16 [ 76.581463][ T1943] erofs: (device loop6): mounted with root inode @ nid 36. [ 76.785491][ T1959] erofs: (device loop6): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 77.099020][ T43] tipc: Subscription rejected, illegal request [ 77.536953][ T1992] loop6: detected capacity change from 0 to 512 [ 77.543860][ T1992] EXT4-fs: Ignoring removed nobh option [ 77.569651][ T1992] EXT4-fs (loop6): 1 truncate cleaned up [ 77.591239][ T1992] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 77.612513][ T1791] EXT4-fs (loop6): unmounting filesystem. [ 77.701275][ T2021] loop6: detected capacity change from 0 to 256 [ 77.721983][ T2021] FAT-fs (loop6): Directory bread(block 64) failed [ 77.734687][ T2021] FAT-fs (loop6): Directory bread(block 65) failed [ 77.752233][ T2021] FAT-fs (loop6): Directory bread(block 66) failed [ 77.768180][ T2021] FAT-fs (loop6): Directory bread(block 67) failed [ 77.783084][ T2021] FAT-fs (loop6): Directory bread(block 68) failed [ 77.797929][ T2021] FAT-fs (loop6): Directory bread(block 69) failed [ 77.811822][ T2021] FAT-fs (loop6): Directory bread(block 70) failed [ 77.825641][ T2021] FAT-fs (loop6): Directory bread(block 71) failed [ 77.845734][ T2021] FAT-fs (loop6): Directory bread(block 72) failed [ 77.859785][ T2021] FAT-fs (loop6): Directory bread(block 73) failed [ 78.054109][ T2047] loop5: detected capacity change from 0 to 512 [ 78.079614][ T2047] EXT4-fs (loop5): 1 truncate cleaned up [ 78.089090][ T2047] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 78.259151][ T1436] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 78.510538][ T1436] usb 7-1: not running at top speed; connect to a high speed hub [ 78.544708][ T1436] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 93, changing to 4 [ 78.685278][ T1436] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 78.703786][ T1072] EXT4-fs (loop5): unmounting filesystem. [ 79.185818][ T1436] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 0.40 [ 79.195247][ T1436] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.223474][ T1436] usb 7-1: Product: syz [ 79.227712][ T1436] usb 7-1: Manufacturer: Ы [ 79.245468][ T1436] usb 7-1: SerialNumber: syz [ 79.377849][ T28] audit: type=1326 audit(1791161042.310:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.0.684" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6973b9e159 code=0x7ffc0000 [ 79.430725][ T28] audit: type=1326 audit(1791161042.340:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.0.684" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6973b9e159 code=0x7ffc0000 [ 79.461832][ T28] audit: type=1326 audit(1791161042.340:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.0.684" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6973b9e159 code=0x7ffc0000 [ 79.989681][ T2086] syz.6.659: attempt to access beyond end of device [ 79.989681][ T2086] loop6: rw=2049, sector=1224, nr_sectors = 136 limit=256 [ 80.804036][ T28] audit: type=1326 audit(1791161042.340:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.0.684" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f6973b9e159 code=0x7ffc0000 [ 80.826934][ T2085] syz.5.687 uses obsolete (PF_INET,SOCK_PACKET) [ 80.833627][ T28] audit: type=1326 audit(1791161042.340:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.0.684" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6973b9e159 code=0x7ffc0000 [ 80.859878][ T28] audit: type=1326 audit(1791161042.340:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.0.684" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6973b9e159 code=0x7ffc0000 [ 80.919491][ T28] audit: type=1326 audit(1791161042.340:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.0.684" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6973b9e159 code=0x7ffc0000 [ 80.969729][ T28] audit: type=1326 audit(1791161042.340:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.0.684" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6973b9e159 code=0x7ffc0000 [ 80.975943][ T2106] loop5: detected capacity change from 0 to 512 [ 80.994759][ T28] audit: type=1400 audit(1791161042.980:442): avc: denied { connect } for pid=2016 comm="syz.6.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.070503][ T2119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.702'. [ 81.936597][ T2132] format_corename failed [ 81.952908][ T2132] Aborting core [ 81.990026][ T1436] snd-usb-audio: probe of 7-1:1.0 failed with error -2 [ 82.021448][ T1436] snd-usb-audio: probe of 7-1:1.1 failed with error -2 [ 82.056727][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 82.056743][ T28] audit: type=1400 audit(1791161044.990:445): avc: denied { connect } for pid=2138 comm="syz.3.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.091182][ T2146] netlink: 4 bytes leftover after parsing attributes in process `syz.5.713'. [ 82.110324][ T1436] snd-usb-audio: probe of 7-1:1.2 failed with error -2 [ 82.111828][ T28] audit: type=1400 audit(1791161045.020:446): avc: denied { write } for pid=2138 comm="syz.3.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.139081][ T2151] loop5: detected capacity change from 0 to 128 [ 82.146525][ T2155] bridge0: port 3(syz_tun) entered blocking state [ 82.153904][ T1439] udevd[1439]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 82.154499][ T2155] bridge0: port 3(syz_tun) entered disabled state [ 82.170475][ T1436] usb 7-1: USB disconnect, device number 2 [ 82.176651][ T2155] device syz_tun entered promiscuous mode [ 82.185107][ T2159] loop6: detected capacity change from 0 to 512 [ 82.218774][ T2163] format_corename failed [ 82.229388][ T2163] Aborting core [ 82.272170][ T2159] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 82.286824][ T2159] System zones: 0-2, 18-18, 34-34 [ 82.296647][ T2159] EXT4-fs (loop6): 1 orphan inode deleted [ 82.302696][ T2159] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 82.312632][ T2159] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.315962][ T2184] loop5: detected capacity change from 0 to 512 [ 82.401954][ T2195] format_corename failed [ 82.406252][ T2195] Aborting core [ 82.421412][ T2159] FAULT_INJECTION: forcing a failure. [ 82.421412][ T2159] name failslab, interval 1, probability 0, space 0, times 0 [ 82.434226][ T2159] CPU: 0 PID: 2159 Comm: syz.6.719 Not tainted syzkaller #0 [ 82.441545][ T2159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 82.451626][ T2159] Call Trace: [ 82.454925][ T2159] [ 82.457877][ T2159] __dump_stack+0x21/0x24 [ 82.462247][ T2159] dump_stack_lvl+0x110/0x170 [ 82.466962][ T2159] ? __cfi_dump_stack_lvl+0x8/0x8 [ 82.472021][ T2159] dump_stack+0x15/0x24 [ 82.476213][ T2159] should_fail_ex+0x3bf/0x510 [ 82.480915][ T2159] ? security_inode_alloc+0x33/0x120 [ 82.486230][ T2159] __should_failslab+0xac/0xf0 [ 82.491016][ T2159] should_failslab+0x9/0x20 [ 82.495547][ T2159] kmem_cache_alloc+0x3b/0x320 [ 82.500334][ T2159] security_inode_alloc+0x33/0x120 [ 82.505464][ T2159] inode_init_always+0x6ee/0x950 [ 82.510416][ T2159] ? __cfi_ext4_alloc_inode+0x10/0x10 [ 82.515807][ T2159] iget_locked+0x1f3/0x840 [ 82.520250][ T2159] __ext4_iget+0x233/0x3e70 [ 82.524773][ T2159] ? ext4_ci_compare+0x3f0/0x3f0 [ 82.529736][ T2159] ? __cfi___ext4_iget+0x10/0x10 [ 82.534696][ T2159] ext4_lookup+0x28e/0x710 [ 82.539131][ T2159] ? __cfi_ext4_lookup+0x10/0x10 [ 82.544098][ T2159] ? d_alloc+0x1f4/0x260 [ 82.548364][ T2159] lookup_one_qstr_excl+0x125/0x270 [ 82.553587][ T2159] filename_create+0x23d/0x440 [ 82.558380][ T2159] ? kern_path_create+0x1b0/0x1b0 [ 82.563440][ T2159] ? __check_object_size+0x45a/0x600 [ 82.568750][ T2159] do_mknodat+0xdb/0x790 [ 82.573016][ T2159] ? getname_flags+0x205/0x510 [ 82.577802][ T2159] __x64_sys_mknodat+0xa9/0xc0 [ 82.582596][ T2159] x64_sys_call+0x220/0x9a0 [ 82.587128][ T2159] do_syscall_64+0x4c/0xa0 [ 82.591578][ T2159] ? clear_bhb_loop+0x30/0x80 [ 82.596285][ T2159] ? clear_bhb_loop+0x30/0x80 [ 82.600988][ T2159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 82.606905][ T2159] RIP: 0033:0x7f47eb19e159 [ 82.611339][ T2159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.630966][ T2159] RSP: 002b:00007f47ec016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 82.639407][ T2159] RAX: ffffffffffffffda RBX: 00007f47eb425fa0 RCX: 00007f47eb19e159 [ 82.647385][ T2159] RDX: 0000000000008000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 82.655355][ T2159] RBP: 00007f47eb23506b R08: 0000000000000000 R09: 0000000000000000 [ 82.663326][ T2159] R10: 0000000000010103 R11: 0000000000000246 R12: 0000000000000000 [ 82.671312][ T2159] R13: 00007f47eb426038 R14: 00007f47eb425fa0 R15: 00007fff886b8fd8 [ 82.679295][ T2159] [ 82.798263][ T1791] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /22/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 82.869368][ T1791] EXT4-fs error (device loop6): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 82.942276][ T1791] EXT4-fs warning (device loop6): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 82.960294][ T1791] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /22/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 82.990060][ T28] audit: type=1400 audit(1791161045.930:447): avc: denied { create } for pid=2222 comm="syz.2.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 83.000704][ T1791] EXT4-fs error (device loop6): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 83.029232][ T1791] EXT4-fs warning (device loop6): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 83.041141][ T1791] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /22/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 83.063214][ T1791] EXT4-fs error (device loop6): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 83.082738][ T1791] EXT4-fs warning (device loop6): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 83.094350][ T1791] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /22/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 83.115065][ T2252] TCP: TCP_TX_DELAY enabled [ 83.116001][ T1791] EXT4-fs error (device loop6): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 83.141776][ T1791] EXT4-fs warning (device loop6): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 83.153488][ T1791] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /22/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 83.174646][ T1791] EXT4-fs error (device loop6): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 83.195738][ T1791] EXT4-fs warning (device loop6): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 83.209326][ T1791] EXT4-fs warning (device loop6): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 83.221305][ T1791] EXT4-fs warning (device loop6): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 83.233698][ T1791] EXT4-fs warning (device loop6): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 83.245832][ T1791] EXT4-fs warning (device loop6): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 83.265443][ T1791] EXT4-fs warning (device loop6): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 83.377926][ T1791] EXT4-fs (loop6): unmounting filesystem. [ 83.638974][ T2299] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.646569][ T2299] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.655681][ T2299] device bridge_slave_0 entered promiscuous mode [ 83.672297][ T2299] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.705735][ T2299] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.749700][ T2299] device bridge_slave_1 entered promiscuous mode [ 83.896150][ T2299] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.903454][ T2299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.910811][ T2299] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.917852][ T2299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.955622][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.963598][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.971797][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.990237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.998824][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.005903][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.025597][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.034241][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.041340][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.050612][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.058745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.078767][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.088072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.096699][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.104842][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.113242][ T2299] device veth0_vlan entered promiscuous mode [ 84.120279][ T43] device bridge_slave_1 left promiscuous mode [ 84.126762][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.134667][ T43] device bridge_slave_0 left promiscuous mode [ 84.141041][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.150037][ T43] device veth1_macvtap left promiscuous mode [ 84.156139][ T43] device veth0_vlan left promiscuous mode [ 84.236890][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.246555][ T2299] device veth1_macvtap entered promiscuous mode [ 84.256074][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.266214][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.395312][ T2325] loop7: detected capacity change from 0 to 512 [ 84.414439][ T2325] EXT4-fs (loop7): 1 truncate cleaned up [ 84.423641][ T2325] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 84.488015][ T2329] ip_tables: iptables: counters copy to user failed while replacing table [ 84.497538][ T2299] EXT4-fs (loop7): unmounting filesystem. [ 84.865203][ T28] audit: type=1400 audit(1791161047.800:448): avc: denied { create } for pid=2363 comm="syz.3.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 85.161298][ T2370] ip_tables: iptables: counters copy to user failed while replacing table [ 85.314078][ T2393] ip_tables: iptables: counters copy to user failed while replacing table [ 85.372790][ T28] audit: type=1400 audit(1791161048.310:449): avc: denied { bind } for pid=2400 comm="syz.5.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.380776][ T2401] device vlan2 entered promiscuous mode [ 85.404705][ T2401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.816'. [ 85.647460][ T2422] overlayfs: failed to clone upperpath [ 85.652497][ T2418] ip_tables: iptables: counters copy to user failed while replacing table [ 85.698620][ T2428] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 85.706477][ T2428] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 85.715334][ T2428] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 85.723174][ T2428] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 85.731503][ T2428] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 85.850060][ T2428] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 85.870088][ T2428] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 86.072182][ T28] audit: type=1400 audit(1791161049.010:450): avc: denied { bind } for pid=2435 comm="syz.3.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.084539][ T2439] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.385064][ T2452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2452 comm=syz.0.837 [ 86.496576][ T2455] ip_tables: iptables: counters copy to user failed while replacing table [ 86.564179][ T28] audit: type=1400 audit(1791161049.500:451): avc: denied { create } for pid=2464 comm="syz.2.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.584164][ T28] audit: type=1400 audit(1791161049.500:452): avc: denied { setopt } for pid=2464 comm="syz.2.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.603852][ T28] audit: type=1400 audit(1791161049.500:453): avc: denied { bind } for pid=2464 comm="syz.2.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.758995][ T2478] ip_tables: iptables: counters copy to user failed while replacing table [ 87.181717][ T28] audit: type=1400 audit(1791161050.120:454): avc: denied { ioctl } for pid=2510 comm="syz.7.863" path="socket:[22235]" dev="sockfs" ino=22235 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.295918][ T2528] loop7: detected capacity change from 0 to 512 [ 87.312580][ T2528] EXT4-fs (loop7): 1 truncate cleaned up [ 87.318464][ T2528] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 87.345340][ T2299] EXT4-fs (loop7): unmounting filesystem. [ 87.658604][ T307] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 87.878987][ T307] usb 8-1: Using ep0 maxpacket: 32 [ 88.148808][ T307] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 88.160837][ T307] usb 8-1: config 0 has no interface number 0 [ 88.167024][ T307] usb 8-1: config 0 interface 184 has no altsetting 0 [ 88.175268][ T307] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 88.184376][ T307] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.192765][ T307] usb 8-1: Product: syz [ 88.196972][ T307] usb 8-1: Manufacturer: syz [ 88.201638][ T307] usb 8-1: SerialNumber: syz [ 88.207106][ T307] usb 8-1: config 0 descriptor?? [ 88.302351][ T307] smsc75xx v1.0.0 [ 89.682476][ T2599] ./dev/sda1: Can't open blockdev [ 89.747888][ T307] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 89.759245][ T307] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 89.771758][ T307] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 89.782777][ T307] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 89.794467][ T307] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 89.806291][ T307] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 89.815814][ T307] smsc75xx: probe of 8-1:0.184 failed with error -71 [ 89.830575][ T307] usb 8-1: USB disconnect, device number 2 [ 89.876993][ T2624] fuse: Bad value for 'fd' [ 89.984865][ T2635] FAULT_INJECTION: forcing a failure. [ 89.984865][ T2635] name fail_futex, interval 1, probability 0, space 0, times 1 [ 90.004109][ T2635] CPU: 0 PID: 2635 Comm: syz.7.918 Not tainted syzkaller #0 [ 90.011435][ T2635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 90.021511][ T2635] Call Trace: [ 90.024808][ T2635] [ 90.027747][ T2635] __dump_stack+0x21/0x24 [ 90.032110][ T2635] dump_stack_lvl+0x110/0x170 [ 90.036816][ T2635] ? __cfi_dump_stack_lvl+0x8/0x8 [ 90.041867][ T2635] dump_stack+0x15/0x24 [ 90.046050][ T2635] should_fail_ex+0x3bf/0x510 [ 90.050754][ T2635] should_fail+0xb/0x10 [ 90.054938][ T2635] get_futex_key+0x143/0xb10 [ 90.059564][ T2635] ? __cfi_get_futex_key+0x10/0x10 [ 90.064727][ T2635] ? ttwu_queue_wakelist+0x307/0x4d0 [ 90.070051][ T2635] futex_wait_setup+0xb8/0x260 [ 90.074848][ T2635] ? __cfi_futex_wait_setup+0x10/0x10 [ 90.080244][ T2635] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 90.086080][ T2635] ? futex_setup_timer+0xb0/0xc0 [ 90.091046][ T2635] futex_wait+0x1ce/0x900 [ 90.095403][ T2635] ? __cfi_futex_wait+0x10/0x10 [ 90.100278][ T2635] ? __cfi_futex_wake+0x10/0x10 [ 90.105150][ T2635] ? __kasan_check_write+0x14/0x20 [ 90.110716][ T2635] ? copy_pid_ns+0x6a1/0x8a0 [ 90.115334][ T2635] do_futex+0x2e2/0x430 [ 90.119508][ T2635] ? __kasan_check_write+0x14/0x20 [ 90.124643][ T2635] ? __cfi_do_futex+0x10/0x10 [ 90.129351][ T2635] __se_sys_futex+0x136/0x310 [ 90.134049][ T2635] ? __kasan_check_write+0x14/0x20 [ 90.139183][ T2635] ? __x64_sys_futex+0x100/0x100 [ 90.144139][ T2635] ? __cfi_ksys_unshare+0x10/0x10 [ 90.149186][ T2635] __x64_sys_futex+0xe5/0x100 [ 90.153867][ T2635] x64_sys_call+0x7ec/0x9a0 [ 90.158375][ T2635] do_syscall_64+0x4c/0xa0 [ 90.162889][ T2635] ? clear_bhb_loop+0x30/0x80 [ 90.167568][ T2635] ? clear_bhb_loop+0x30/0x80 [ 90.172240][ T2635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.178142][ T2635] RIP: 0033:0x7fc12ef9e159 [ 90.182560][ T2635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.202179][ T2635] RSP: 002b:00007fc12d9f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 90.210604][ T2635] RAX: ffffffffffffffda RBX: 00007fc12f225fa8 RCX: 00007fc12ef9e159 [ 90.218577][ T2635] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc12f225fa8 [ 90.226546][ T2635] RBP: 00007fc12f225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 90.234602][ T2635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.242574][ T2635] R13: 00007fc12f226038 R14: 00007ffc58f0c780 R15: 00007ffc58f0c868 [ 90.250552][ T2635] [ 90.886689][ T28] audit: type=1400 audit(1791161053.820:455): avc: denied { read } for pid=2644 comm="syz.7.923" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.978641][ T28] audit: type=1400 audit(1791161053.860:456): avc: denied { open } for pid=2644 comm="syz.7.923" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.053000][ T28] audit: type=1400 audit(1791161053.860:457): avc: denied { ioctl } for pid=2644 comm="syz.7.923" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.108671][ T28] audit: type=1400 audit(1791161053.860:458): avc: denied { set_context_mgr } for pid=2644 comm="syz.7.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 91.148449][ T28] audit: type=1400 audit(1791161053.860:459): avc: denied { map } for pid=2644 comm="syz.7.923" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.207530][ T28] audit: type=1400 audit(1791161053.860:460): avc: denied { call } for pid=2644 comm="syz.7.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 91.227557][ T2664] device ip6_vti0 entered promiscuous mode [ 91.261874][ T28] audit: type=1400 audit(1791161053.910:461): avc: denied { bind } for pid=2648 comm="syz.7.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.297197][ T28] audit: type=1400 audit(1791161053.910:462): avc: denied { write } for pid=2648 comm="syz.7.926" path="socket:[22522]" dev="sockfs" ino=22522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.321471][ T28] audit: type=1400 audit(1791161054.120:463): avc: denied { ioctl } for pid=2657 comm="syz.5.930" path="socket:[23568]" dev="sockfs" ino=23568 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.396211][ T2688] device ip6_vti0 entered promiscuous mode [ 92.319240][ T2714] tipc: Started in network mode [ 92.324155][ T2714] tipc: Node identity 1e2caac4e815, cluster identity 4711 [ 92.351723][ T2714] tipc: Enabled bearer , priority 0 [ 92.394006][ T2714] device syzkaller0 entered promiscuous mode [ 92.408891][ T2714] tipc: Resetting bearer [ 92.428003][ T2713] tipc: Resetting bearer [ 92.488024][ T2713] tipc: Disabling bearer [ 92.611120][ T2745] loop7: detected capacity change from 0 to 512 [ 92.660777][ T2745] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 92.669673][ T2745] System zones: 1-12 [ 92.684670][ T2745] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.971: missing EA_INODE flag [ 92.696880][ T2745] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.971: error while reading EA inode 12 err=-117 [ 92.709506][ T2745] EXT4-fs (loop7): 1 orphan inode deleted [ 92.715256][ T2745] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 95.729214][ T2299] EXT4-fs (loop7): unmounting filesystem. [ 95.838855][ T2786] Illegal XDP return value 4294967262 on prog (id 16) dev N/A, expect packet loss! [ 96.097802][ T2816] tipc: Started in network mode [ 96.111682][ T2816] tipc: Node identity 4, cluster identity 4711 [ 96.134082][ T2816] tipc: Node number set to 4 [ 96.135781][ T2822] overlayfs: overlapping lowerdir path [ 96.233731][ T2828] format_corename failed [ 96.238044][ T2828] Aborting core [ 96.252873][ T28] audit: type=1400 audit(1791161059.170:464): avc: denied { create } for pid=2810 comm="syz.5.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 96.321379][ T2832] loop7: detected capacity change from 0 to 512 [ 96.329355][ T28] audit: type=1400 audit(1791161059.170:465): avc: denied { sys_admin } for pid=2810 comm="syz.5.997" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 97.157562][ T28] audit: type=1400 audit(1791161060.090:466): avc: denied { mount } for pid=2831 comm="syz.7.1004" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 97.277429][ T2852] overlayfs: failed to clone upperpath [ 97.866399][ T2885] format_corename failed [ 97.870799][ T2885] Aborting core [ 97.909444][ T2889] ./dev/sda1: Can't open blockdev [ 99.428012][ T2924] format_corename failed [ 99.432373][ T2924] Aborting core [ 100.566047][ T28] audit: type=1400 audit(1791161063.500:467): avc: denied { bind } for pid=2950 comm="syz.2.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.657645][ T28] audit: type=1400 audit(1791161063.540:468): avc: denied { connect } for pid=2950 comm="syz.2.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.972844][ T2985] fuse: Bad value for 'fd' [ 101.326319][ T28] audit: type=1400 audit(1791161064.260:469): avc: denied { create } for pid=2980 comm="syz.0.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 101.861891][ T3010] format_corename failed [ 101.866223][ T3010] Aborting core [ 102.126283][ T3037] format_corename failed [ 102.130747][ T3037] Aborting core [ 102.262311][ T3043] format_corename failed [ 102.266609][ T3043] Aborting core [ 102.273901][ T3042] cgroup: Unknown subsys name 'hugetlb' [ 102.302962][ T3045] overlayfs: unrecognized mount option "verity=on" or missing value [ 102.363545][ T3048] format_corename failed [ 102.367838][ T3048] Aborting core [ 102.684957][ T3058] format_corename failed [ 102.689508][ T3058] Aborting core [ 102.809242][ T3067] format_corename failed [ 102.813537][ T3067] Aborting core [ 102.835186][ T3069] overlayfs: failed to clone upperpath [ 102.966658][ T3078] format_corename failed [ 102.971236][ T3078] Aborting core [ 103.369787][ T28] audit: type=1400 audit(1791161066.310:470): avc: denied { map } for pid=3099 comm="syz.5.1116" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 103.400594][ T28] audit: type=1400 audit(1791161066.320:471): avc: denied { write } for pid=3099 comm="syz.5.1116" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 103.425627][ T28] audit: type=1400 audit(1791161066.320:472): avc: denied { create } for pid=3101 comm="syz.2.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 103.445988][ T28] audit: type=1400 audit(1791161066.330:473): avc: denied { map } for pid=3099 comm="syz.5.1116" path="socket:[23502]" dev="sockfs" ino=23502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 103.588207][ T3128] format_corename failed [ 103.592543][ T3128] Aborting core [ 103.605356][ T3129] format_corename failed [ 103.609693][ T3129] Aborting core [ 103.751183][ T3144] format_corename failed [ 103.755478][ T3144] Aborting core [ 103.788159][ T28] audit: type=1400 audit(1791161066.720:474): avc: denied { setopt } for pid=3145 comm="syz.2.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.809407][ T28] audit: type=1400 audit(1791161066.750:475): avc: denied { read } for pid=3145 comm="syz.2.1132" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.855256][ T3151] ./dev/sda1: Can't open blockdev [ 104.048307][ T3158] format_corename failed [ 104.052640][ T3158] Aborting core [ 105.749270][ T3214] format_corename failed [ 105.753657][ T3214] Aborting core [ 105.868415][ T3216] format_corename failed [ 105.872760][ T3216] Aborting core [ 106.708920][ T3229] overlayfs: failed to clone upperpath [ 107.375872][ T3234] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1166'. [ 107.400247][ T3234] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1166'. [ 107.423307][ T3234] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1166'. [ 107.432570][ T3234] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1166'. [ 107.545458][ T3247] format_corename failed [ 107.549812][ T3247] Aborting core [ 107.552312][ T3248] format_corename failed [ 107.557557][ T3248] Aborting core [ 108.116797][ C0] hrtimer: interrupt took 19796 ns [ 108.251496][ T3262] ================================================================== [ 108.259627][ T3262] BUG: KASAN: slab-out-of-bounds in sk_skb_adjust_room+0x34e/0x610 [ 108.267644][ T3262] Read of size 8 at addr ffff88810f3e7c48 by task syz.0.1175/3262 [ 108.275463][ T3262] [ 108.277801][ T3262] CPU: 0 PID: 3262 Comm: syz.0.1175 Not tainted syzkaller #0 [ 108.285193][ T3262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 108.295268][ T3262] Call Trace: [ 108.298577][ T3262] [ 108.301530][ T3262] __dump_stack+0x21/0x24 [ 108.305911][ T3262] dump_stack_lvl+0x110/0x170 [ 108.310618][ T3262] ? __cfi_dump_stack_lvl+0x8/0x8 [ 108.315673][ T3262] ? pskb_expand_head+0x436/0x12b0 [ 108.320903][ T3262] ? sk_skb_adjust_room+0x34e/0x610 [ 108.326217][ T3262] print_address_description+0x71/0x200 [ 108.331795][ T3262] print_report+0x4a/0x60 [ 108.336156][ T3262] kasan_report+0x122/0x150 [ 108.340688][ T3262] ? sk_skb_adjust_room+0x34e/0x610 [ 108.345914][ T3262] __asan_report_load8_noabort+0x14/0x20 [ 108.351563][ T3262] sk_skb_adjust_room+0x34e/0x610 [ 108.356612][ T3262] bpf_prog_e15ab8bd9cea3c06+0x19/0x20 [ 108.362088][ T3262] sk_psock_verdict_recv+0x6d8/0x7b0 [ 108.367405][ T3262] unix_stream_read_skb+0x12e/0x2f0 [ 108.372622][ T3262] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 108.378543][ T3262] ? __cfi_sk_psock_verdict_recv+0x10/0x10 [ 108.384372][ T3262] ? __cfi_unix_stream_read_skb+0x10/0x10 [ 108.390105][ T3262] ? __kasan_check_write+0x14/0x20 [ 108.395216][ T3262] ? _raw_spin_lock+0x94/0xf0 [ 108.399904][ T3262] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 108.405900][ T3262] sk_psock_verdict_data_ready+0xaf/0x1d0 [ 108.411619][ T3262] unix_stream_sendmsg+0x631/0xa80 [ 108.416722][ T3262] ? __cfi_unix_stream_sendmsg+0x10/0x10 [ 108.422429][ T3262] ? security_socket_sendmsg+0x93/0xb0 [ 108.427880][ T3262] __sys_sendto+0x4ac/0x660 [ 108.432381][ T3262] ? __cfi___sys_sendto+0x10/0x10 [ 108.437400][ T3262] ? __this_cpu_preempt_check+0x13/0x20 [ 108.442939][ T3262] ? xfd_validate_state+0x70/0x150 [ 108.448057][ T3262] ? __kasan_check_write+0x14/0x20 [ 108.453160][ T3262] __x64_sys_sendto+0xe5/0x100 [ 108.458021][ T3262] x64_sys_call+0x83/0x9a0 [ 108.462434][ T3262] do_syscall_64+0x4c/0xa0 [ 108.466848][ T3262] ? clear_bhb_loop+0x30/0x80 [ 108.471518][ T3262] ? clear_bhb_loop+0x30/0x80 [ 108.476193][ T3262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.482076][ T3262] RIP: 0033:0x7f6973b9e159 [ 108.486481][ T3262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.506076][ T3262] RSP: 002b:00007f69749b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 108.514497][ T3262] RAX: ffffffffffffffda RBX: 00007f6973e25fa0 RCX: 00007f6973b9e159 [ 108.522559][ T3262] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000004 [ 108.530517][ T3262] RBP: 00007f6973c3506b R08: 0000000000000000 R09: 0000000000000000 [ 108.538477][ T3262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.546453][ T3262] R13: 00007f6973e26038 R14: 00007f6973e25fa0 R15: 00007fff1363ef28 [ 108.554436][ T3262] [ 108.557441][ T3262] [ 108.559751][ T3262] Allocated by task 3262: [ 108.564083][ T3262] kasan_set_track+0x4b/0x70 [ 108.568665][ T3262] kasan_save_alloc_info+0x1f/0x30 [ 108.573777][ T3262] __kasan_slab_alloc+0x72/0x80 [ 108.578619][ T3262] slab_post_alloc_hook+0x4f/0x2d0 [ 108.583722][ T3262] kmem_cache_alloc+0x166/0x320 [ 108.588565][ T3262] sk_prot_alloc+0x5f/0x320 [ 108.593057][ T3262] sk_alloc+0x3b/0x460 [ 108.597111][ T3262] unix_create1+0xb8/0x710 [ 108.601515][ T3262] unix_create+0x149/0x200 [ 108.605917][ T3262] __sock_create+0x39e/0x7c0 [ 108.610499][ T3262] __sys_socketpair+0x218/0x5b0 [ 108.615339][ T3262] __x64_sys_socketpair+0x9b/0xb0 [ 108.620442][ T3262] x64_sys_call+0x6e/0x9a0 [ 108.624863][ T3262] do_syscall_64+0x4c/0xa0 [ 108.629271][ T3262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.635236][ T3262] [ 108.637544][ T3262] The buggy address belongs to the object at ffff88810f3e7700 [ 108.637544][ T3262] which belongs to the cache UNIX-STREAM of size 1152 [ 108.651667][ T3262] The buggy address is located 200 bytes to the right of [ 108.651667][ T3262] 1152-byte region [ffff88810f3e7700, ffff88810f3e7b80) [ 108.665542][ T3262] [ 108.667939][ T3262] The buggy address belongs to the physical page: [ 108.674352][ T3262] page:ffffea00043cf900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f3e4 [ 108.684572][ T3262] head:ffffea00043cf900 order:2 compound_mapcount:0 compound_pincount:0 [ 108.692881][ T3262] flags: 0x4000000000010200(slab|head|zone=1) [ 108.698946][ T3262] raw: 4000000000010200 dead0000