last executing test programs: 20.336101314s ago: executing program 2 (id=103): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) signalfd(0xffffffffffffffff, &(0x7f000000e0c0), 0x8) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) futex(&(0x7f000000cffc)=0x3, 0x5, 0x200000, 0x0, 0x0, 0x4fffffd) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 20.295749175s ago: executing program 2 (id=104): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x8000007, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC], 0x6, 0x2c1, &(0x7f0000001880)="$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") syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x2, 0x0, 0xe7, {[@generic={0x8, 0xa, "512e23468b1d58f2"}]}}}}}}}, 0x0) 20.208669808s ago: executing program 2 (id=105): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x31f}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c880) 20.208350518s ago: executing program 2 (id=107): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') unlink(&(0x7f0000000280)='./file1\x00') 19.776334263s ago: executing program 2 (id=114): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002900)=""/4096, 0x1000}], 0x1) 19.621902468s ago: executing program 2 (id=116): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 19.56822289s ago: executing program 32 (id=116): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 16.728697949s ago: executing program 4 (id=161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xf}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x5, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 16.711522469s ago: executing program 4 (id=162): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B\v', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="acbddf", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)="5bba4406c37b", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="0180", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f00)="e8b5880486801e29aac1506ea21503664e4d6c408ee727aabae8f5e0ce9405fe5989baf51b2959cfba7dc341", 0x2c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)="48f1de1cd7616a9eea86a41ecf04cceeddb4430a7b7742c38665fdbf5546ec1934a785745da823401d4304826be122f353357d2b8ab9187962b9c764046966d20ddca8b2eb5207508fc3c914521635f8495c492dc4c390435a1e88694b0e4ac3647c26591db6b517bf8604c677cea93f1704f2da01a05114ccf361516e7c2f8784400e1689e7aea4e9f2c2c5d809853907395a83e8678ad40130", 0x9a}, {&(0x7f0000000100)="9547ae6bf1d763cf0e7307ac24e6f3d40cea60303660212049ebaf94f33bf23d10", 0x21}, {&(0x7f0000000200)="3ff01ada8faac3fcb6902e16ecdf697ec7d2578a34acff6b93550d7cff77e63eed37cf26e57cb8b582d6f0f69216523ac93fadd3037755808e7957a334cb5fe1cd", 0x41}, {&(0x7f00000015c0)="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", 0x477}], 0x4}}], 0x6, 0x400c404) sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c00)='s', 0x1}], 0x1}}], 0x1, 0x84) 16.69789875s ago: executing program 4 (id=163): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$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") chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x81) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x3, 0x1731b, 0x3}) 16.606352763s ago: executing program 4 (id=164): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x3, 0x248, &(0x7f0000000880)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 16.527296976s ago: executing program 4 (id=165): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c6e66732c73686f72746e616d653d77696e6e742c726f6469722c696f636861727365743d6b6f69382d72752c73686f72746e616d653d6d697865642c757466383d302c756e695f786c6174653d312c756e695f786c6174653d312c006a4fcfcc9fc5ea902e1a6384d405e843e1dfa18259eaaba553a63617a0f84f2e66f4a8121e2cea67640f61a98cef24cdbc0121ddb0212c7365c895e70775f8c82357782f45acff678373e50747f0dbd34a6c51a45f248402fd4340c0024ca0ee5de3af9233d9e31dd6f105e2696137379613fb63ef2a91ccf785af00684cfa440b01bda2cbcd1b326a0ee91991ebfbd00ec2a75ac8d59d1e7793dfb73a16dd3b166bc6a158528f"], 0x1, 0x26c, &(0x7f0000000840)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2341842, 0x0, 0xfc, 0x0, &(0x7f0000000300)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 16.440276619s ago: executing program 4 (id=166): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, r2, 0x0, 0x3f06}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 16.426333009s ago: executing program 33 (id=166): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, r2, 0x0, 0x3f06}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 15.072389676s ago: executing program 1 (id=202): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x3}, 0xe) 15.028713548s ago: executing program 1 (id=206): sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="2a00eea69db33873d1", 0x9, 0x8840, 0x0, 0x0) socket(0x10, 0x803, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x810, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'cp737'}}, {@errors_remount}, {@keep_last_dots}, {@namecase}, {@namecase}, {@allow_utime={'allow_utime', 0x3d, 0xd96}}, {@keep_last_dots}, {@dmask={'dmask', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@errors_continue}]}, 0x2, 0x152b, &(0x7f0000000600)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 14.888396713s ago: executing program 1 (id=212): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1c14744, &(0x7f0000000080), 0x2, 0x4bb, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000100)={@desc={0x1, 0x0, @auto="d3cda8490300"}}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 14.491890996s ago: executing program 1 (id=215): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f0000000880)='./file0\x00') 14.423339169s ago: executing program 1 (id=217): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 14.260280145s ago: executing program 1 (id=219): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.134911329s ago: executing program 34 (id=219): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.308357691s ago: executing program 0 (id=427): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) 6.285442331s ago: executing program 0 (id=428): syz_usb_connect(0x5, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0xb2, 0x15, 0xf4, 0x40, 0x54c, 0x6c1, 0xbe87, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40095505, 0x0) 4.796813703s ago: executing program 0 (id=469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000010401f007000000000000010100000506000640000000000a000200fffffffe08000a000500010001"], 0x30}, 0x1, 0x0, 0x0, 0x260080d4}, 0xc0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000010401f007000000000000b0e64cc30506000640000000000a000200fffffffe080000000500010001"], 0x30}}, 0x24004000) close_range(r0, 0xffffffffffffffff, 0x0) 4.784205973s ago: executing program 0 (id=470): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file0\x00', 0x842, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1536, &(0x7f0000003480)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x186) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000500), 0xc802, 0x0) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 4.715745246s ago: executing program 0 (id=473): timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000001c0)) r0 = epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x5]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 4.6115861s ago: executing program 0 (id=474): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace$setsig(0x4203, r0, 0x80, &(0x7f00000000c0)={0x19, 0x7, 0x7}) 4.590744921s ago: executing program 35 (id=474): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083860090890e0878f0f1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d3b5d5036cd3b78070daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5003a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd7072f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d27df2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2c1cde360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace$setsig(0x4203, r0, 0x80, &(0x7f00000000c0)={0x19, 0x7, 0x7}) 1.549778126s ago: executing program 6 (id=589): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 1.517643417s ago: executing program 6 (id=590): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}, {0x0}], 0x2}, 0x20040051) 1.495007138s ago: executing program 6 (id=591): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000047"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 1.474190249s ago: executing program 6 (id=593): setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x401, 0x2) syz_usb_connect(0x3, 0x2e, &(0x7f00000009c0)={{0x12, 0x1, 0x110, 0xf5, 0x3b, 0x1b, 0x40, 0x1bc7, 0x1041, 0xb758, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x7, 0x81, 0x40, 0x1, "", [{{0x9, 0x4, 0xbd, 0x7, 0x0, 0x2, 0xe, 0x0, 0x47, [@uac_control={{0xa, 0x24, 0x1, 0xe7, 0xa}}]}}]}}]}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.313759254s ago: executing program 7 (id=596): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000300)={0x2, 0x0, @pic={0x5, 0xe, 0x3, 0xe, 0xd, 0xf9, 0xff, 0xa, 0x3, 0xa9, 0x4, 0x8, 0x7, 0x4, 0x3, 0x9}}) 1.236185737s ago: executing program 7 (id=599): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f0000000100)={&(0x7f0000000500)=@canfd={{}, 0x9, 0x2, 0x0, 0x0, "0e7692fddc9d8ba5a0ac79669b2947b81f0e3c8973fc2af287fa10b9126ea28baed9b57d82ab23db557c307ae88dad8c925a00"}, 0x48}, 0x2, 0x0, 0x0, 0x4105}, 0x4011) 1.224223007s ago: executing program 7 (id=601): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) unshare(0x22020600) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 969.045606ms ago: executing program 8 (id=609): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x96ea4000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) 648.762467ms ago: executing program 3 (id=612): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="1500000065fffffc7f00c56a"], 0x41) 610.526209ms ago: executing program 8 (id=613): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x8, 0x105, 0x0, 0x0, {0x5, 0x0, 0x8009}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040840) recvfrom(r1, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 598.899889ms ago: executing program 8 (id=614): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x40, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x900, 0x0, 0x0, 0xfffffffffe000001}) 573.52092ms ago: executing program 3 (id=615): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000880)='./file0\x00', 0x100c404, &(0x7f0000000280)=ANY=[], 0x1, 0x1ff, &(0x7f0000000580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7/file0\x00', 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x5) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 541.214651ms ago: executing program 3 (id=616): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010800000000fdffffff00000000", @ANYRES32=r2, @ANYBLOB="00000000048a00001c002b80", @ANYBLOB="0800030019000000080001"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) 478.659933ms ago: executing program 8 (id=628): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 476.711523ms ago: executing program 3 (id=619): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$eJzs3U9sI1cZAPBvJsnau02bLfQAqNClFBa0WjvxtquqF8qpQqgSokcO25B4o2jtOIqd0oSVyB65I1GJE5w4c0DigNQTdyQOcONSDkgFVqAGCQkjj8eJ88eJu5vYu/HvJ438Zp7j773Mznujz5t5AUysaxGxExGXIuLdiJjLjyf5Fm92t877Pnl4f2n34f2lJNrtd/6RZPWdY9H3Mx3P5J9ZjIjvvRXxg+RQ0D9GNLe27y3WatWN/FC5VV8vN7e2b67WF1eqK9W1SuX2wu3512+9Vjmzvr5U//XHlyPid7/94kd/2PnGjzrNms3r+vtxlrpdn9mLE9HOfsXfOY9gYzAVEdP5v59P7ZF+iLOURsRnIuLl7Pqfi6nsbB508DR9c4StAwDOQ7s9l9+R9vYBgIsuzXJgSVrKcwGzkaalUjeH90JcSWuNZuvG3cbm2nI3V3Y1ZtK7q7XqfJ4rvBozyd3V6epCVu7t16qVQ/u3IuL5iPhp4XK2X1pq1JbHeeMDABPsmUPz/78L3fkfALjgivvFwjjbAQCMTnHcDQAARs78DwCTx/wPAJPH/A8Ak8f8DwCTx/wPABPlu2+/3dnau/nzr5ff29q813jv5nK1ea9U31wqLTU21ksrjcZK9sye+mmfV2s01hdejc33y61qs1Vubm3fqTc211p3sud636nOjKRXAMBJnn/pwz8nEbHzxuVsi77n/Z86V7943q0DzlM67gYAYzM17gYAY3N0tS9gUsjHw+T6X7vdjr61eyPiwV6p72GgA/+L0AdDhUmtGwpPnuuff4z8P/BUk/+HyfVo+X/38nARyP/D5Gq3E2v+A8CEkeMHklPq+7//n2/37Qz3/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcSLPZlqSlfC3w2UjTUini2Yi4GjPJ3dVadT4inouIPxVmCp39hYiwbhAAPM3SvyX5+l/X516ZPVx7qfCfQvYaET/8+Ts/e3+x1dpYiLiU/HPveOuD/HhlHO0HAE7Tm6d783jPJw/vL/W2Ubbn4291FxftxN3Nt27NdExnr8Us13DlX0m+39W5X5k6g/g7DyLic8f1P8lyI1fzlU8Px+/Efnak8dMD8dOsrvva+V189gzaApPmw8748+Zx118a17LX46//YjZCPb7e+Ld7ZPxL98a/qQHj37VhY7z6+28fOdie69Y9iPjCdMRu78P7xp9e/GRA/FeGjP+XF7/08qC69i8irsdx/U8OxCq36uvl5tb2zdX64kp1pbpWqdxeuD3/+q3XKuUsR13uZaqP+vsbN54bFL/T/ysD4hdP6f9Xh+z/L//77ve/fEL8r39lP/6PY//8v3BC/M6c+LUh4y9e+U1xUF0n/vKA/p92/m8MGf+jv24vD/lWAGAEmlvb9xZrterG4xeKJ74nPYsQQxSSiJ1zDrFfKPzqJ2+d/ubCyNrziIUYVDX1pLTwwhQKT0YzhiiMe2QCztv+RT/ulgAAAAAAAAAAAAAAAIOM4s+Jxt1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALq7/BwAA//8inNZ5") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') unlink(&(0x7f0000000280)='./file1\x00') 461.425323ms ago: executing program 5 (id=620): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 435.394484ms ago: executing program 5 (id=621): sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0xe, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r0, &(0x7f0000000d40)=""/43, 0x2b) 397.622066ms ago: executing program 5 (id=622): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x12, 0x4) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r0, &(0x7f0000001480)=""/4096, 0x38) 343.291438ms ago: executing program 7 (id=623): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xbe2, &(0x7f0000000ec0)={@local, @remote, @val={@val={0x88a8, 0x1, 0x1, 0x3}, {0x8100, 0x3, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, "e7ddc2", 0xba4, 0x3a, 0xff, @empty, @dev={0xfe, 0x80, '\x00', 0x14}, {[@routing={0x3c, 0x0, 0x0, 0xff}], @echo_request={0x80, 0x0, 0x0, 0x5d, 0x3, "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"}}}}}}, 0x0) 331.671599ms ago: executing program 5 (id=624): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 315.316219ms ago: executing program 5 (id=625): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 293.08049ms ago: executing program 7 (id=626): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x8000007, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000001140)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae352940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c5a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b", @ANYRES8, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC], 0x6, 0x2c1, &(0x7f0000001880)="$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") syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x2, 0x0, 0xe7, {[@generic={0x8, 0xa, "512e23468b1d58f2"}]}}}}}}}, 0x0) 286.02403ms ago: executing program 8 (id=627): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x14}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x6000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0x2c, 0x0, 0x2e, 0xd}, {0x41000, 0xffff6ffe, 0xf, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x1, 0x3, 0x1}, {0xdddd1000, 0x2, 0x9, 0x5, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xa9, 0x5, 0x81}, {0xdddd0000, 0x26000, 0x3, 0x5d, 0x4, 0x42, 0x9, 0x2, 0x6, 0x7, 0xe, 0x3}, {0x0, 0xd000, 0xb, 0x3, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x1000, 0xf, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0xfd}, {0x40000, 0x2, 0x10, 0x5, 0x7, 0x2, 0x5, 0x0, 0x1, 0x81, 0xff, 0x70}, {0xe000, 0x1000, 0xa, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xeeef0000, 0x30}, {0x10000, 0x86}, 0xc0000015, 0x0, 0x8000000, 0x42024, 0xf, 0x0, 0x3000, [0x6840000000000000, 0xd, 0x5e, 0xff]}) 285.86547ms ago: executing program 5 (id=629): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x40, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x900, 0x0, 0x0, 0xfffffffffe000001}) 244.898342ms ago: executing program 3 (id=630): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x5, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="639101c855b98600000000040000", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 200.523183ms ago: executing program 7 (id=631): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setresuid(r0, r0, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 190.886763ms ago: executing program 8 (id=632): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) r1 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) 137.410475ms ago: executing program 6 (id=633): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x99e86f6a6737948, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000400008510000002000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 97.603576ms ago: executing program 6 (id=634): setuid(0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x1, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x4040011) 28.236849ms ago: executing program 3 (id=635): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0xffffffff, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0x8, 0x3, 0x80000000}]}}]}, 0x7c}}, 0x24000084) 0s ago: executing program 36 (id=635): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0xffffffff, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0x8, 0x3, 0x80000000}]}}]}, 0x7c}}, 0x24000084) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts. [ 21.992509][ T28] audit: type=1400 audit(1772625170.215:64): avc: denied { mounton } for pid=274 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.993558][ T274] cgroup: Unknown subsys name 'net' [ 22.015205][ T28] audit: type=1400 audit(1772625170.215:65): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.042423][ T28] audit: type=1400 audit(1772625170.235:66): avc: denied { unmount } for pid=274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.042795][ T274] cgroup: Unknown subsys name 'devices' [ 22.184179][ T274] cgroup: Unknown subsys name 'hugetlb' [ 22.189801][ T274] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 22.292311][ T28] audit: type=1400 audit(1772625170.515:67): avc: denied { setattr } for pid=274 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.309715][ T276] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.315570][ T28] audit: type=1400 audit(1772625170.515:68): avc: denied { mounton } for pid=274 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.344009][ T274] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.348808][ T28] audit: type=1400 audit(1772625170.515:69): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.380593][ T28] audit: type=1400 audit(1772625170.545:70): avc: denied { relabelto } for pid=276 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.406040][ T28] audit: type=1400 audit(1772625170.545:71): avc: denied { write } for pid=276 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.431637][ T28] audit: type=1400 audit(1772625170.545:72): avc: denied { read } for pid=274 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.457479][ T28] audit: type=1400 audit(1772625170.545:73): avc: denied { open } for pid=274 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.160501][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.167621][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.175168][ T283] device bridge_slave_0 entered promiscuous mode [ 23.185110][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.192359][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.199826][ T283] device bridge_slave_1 entered promiscuous mode [ 23.229289][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.236358][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.243756][ T282] device bridge_slave_0 entered promiscuous mode [ 23.253946][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.261074][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.268619][ T284] device bridge_slave_0 entered promiscuous mode [ 23.275541][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.282741][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.290021][ T284] device bridge_slave_1 entered promiscuous mode [ 23.296688][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.303883][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.311390][ T285] device bridge_slave_0 entered promiscuous mode [ 23.318533][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.325602][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.333012][ T282] device bridge_slave_1 entered promiscuous mode [ 23.355502][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.362660][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.370084][ T285] device bridge_slave_1 entered promiscuous mode [ 23.467247][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.474344][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.481779][ T286] device bridge_slave_0 entered promiscuous mode [ 23.513233][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.520284][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.527674][ T286] device bridge_slave_1 entered promiscuous mode [ 23.605341][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.612474][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.619725][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.627657][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.656517][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.663597][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.671038][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.678081][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.690819][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.697889][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.705137][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.712165][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.738014][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.745072][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.752349][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.759364][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.773156][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.781245][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.788506][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.796072][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.803509][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.810721][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.818082][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.825665][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.832943][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.856672][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.864335][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.872602][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.879612][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.915874][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.924263][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.931300][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.938821][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.947294][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.954357][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.961701][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.969722][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.978017][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.985036][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.992402][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.000324][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.019350][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.027198][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.035116][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.043272][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.051380][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.058409][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.066097][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.074315][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.081320][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.115960][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.123505][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.130852][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.139150][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.146178][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.155285][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.163481][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.170490][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.178010][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.186011][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.194177][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.202556][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.209566][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.216929][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.225159][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.232207][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.239608][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.247669][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.255655][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.263769][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.271981][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.287619][ T282] device veth0_vlan entered promiscuous mode [ 24.297476][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.305168][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.313595][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.321831][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.329949][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.338136][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.346406][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.354083][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.369710][ T284] device veth0_vlan entered promiscuous mode [ 24.381150][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.389581][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.398373][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.406385][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.414380][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.421827][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.436198][ T284] device veth1_macvtap entered promiscuous mode [ 24.444164][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.452847][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.461077][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.469437][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.477810][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.485718][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.493751][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.501780][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.509398][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.519109][ T285] device veth0_vlan entered promiscuous mode [ 24.536704][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.545764][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.554547][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.563073][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.571260][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.579775][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.587832][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.596061][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.603662][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.616080][ T286] device veth0_vlan entered promiscuous mode [ 24.622808][ T283] device veth0_vlan entered promiscuous mode [ 24.631410][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.639804][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.648664][ T284] request_module fs-gadgetfs succeeded, but still no fs? [ 24.649028][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.675229][ T283] device veth1_macvtap entered promiscuous mode [ 24.685945][ T282] device veth1_macvtap entered promiscuous mode [ 24.695022][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.702905][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.712860][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.720546][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.728830][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.740879][ T285] device veth1_macvtap entered promiscuous mode [ 24.753101][ T286] device veth1_macvtap entered promiscuous mode [ 24.760091][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.768359][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.776686][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.784591][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.792880][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.801131][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.816763][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.825098][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.833653][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.841894][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.850466][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.858908][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.879273][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.887848][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.896516][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.904979][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.913542][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.925970][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.934473][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.943120][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.955507][ T345] loop0: detected capacity change from 0 to 512 [ 25.046648][ T345] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 25.049242][ T364] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.063302][ T361] loop4: detected capacity change from 0 to 1024 [ 25.083143][ T345] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.100001][ T345] EXT4-fs (loop0): shut down requested (0) [ 25.115008][ T284] EXT4-fs (loop0): unmounting filesystem. [ 25.129256][ T369] process 'syz.3.11' launched './file0' with NULL argv: empty string added [ 25.139601][ T369] Invalid argument reading file caps for ./file0 [ 25.155848][ T375] loop2: detected capacity change from 0 to 1024 [ 25.163731][ T361] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 25.229489][ T360] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 25.258507][ T386] loop1: detected capacity change from 0 to 1024 [ 25.311007][ T390] loop2: detected capacity change from 0 to 1024 [ 25.316453][ T379] syz.0.13 (379) used greatest stack depth: 22400 bytes left [ 25.318363][ T386] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 25.352428][ T390] ======================================================= [ 25.352428][ T390] WARNING: The mand mount option has been deprecated and [ 25.352428][ T390] and is ignored by this kernel. Remove the mand [ 25.352428][ T390] option from the mount to silence this warning. [ 25.352428][ T390] ======================================================= [ 25.406056][ T386] EXT4-fs error (device loop1): ext4_read_inline_dir:1611: inode #12: block 7: comm syz.1.18: path /2/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=327694, rec_len=0, size=80 fake=0 [ 25.460728][ T283] EXT4-fs (loop1): unmounting filesystem. [ 25.478867][ T286] EXT4-fs (loop4): unmounting filesystem. [ 25.494188][ T390] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 25.583447][ T412] xt_hashlimit: size too large, truncated to 1048576 [ 25.593532][ T285] EXT4-fs (loop2): unmounting filesystem. [ 25.604993][ T415] Illegal XDP return value 4294967274 on prog (id 5) dev N/A, expect packet loss! [ 25.628469][ T417] devpts: called with bogus options [ 25.740940][ T429] loop2: detected capacity change from 0 to 256 [ 25.760523][ T429] exfat: Deprecated parameter 'utf8' [ 25.775193][ T429] exfat: Deprecated parameter 'namecase' [ 25.794047][ T429] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 25.903323][ T439] netlink: 'syz.2.40': attribute type 15 has an invalid length. [ 25.948237][ T424] loop3: detected capacity change from 0 to 40427 [ 25.952461][ T441] xt_hashlimit: size too large, truncated to 1048576 [ 25.965231][ T424] F2FS-fs (loop3): fault_injection options not supported [ 25.982966][ T424] F2FS-fs (loop3): fault_type options not supported [ 26.019207][ T424] F2FS-fs (loop3): invalid crc value [ 26.047670][ T424] F2FS-fs (loop3): Found nat_bits in checkpoint [ 26.081244][ T455] loop0: detected capacity change from 0 to 256 [ 26.145144][ T424] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 26.221900][ T424] syz.3.32: attempt to access beyond end of device [ 26.221900][ T424] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 26.247773][ T470] xt_hashlimit: size too large, truncated to 1048576 [ 26.264386][ T424] syz.3.32: attempt to access beyond end of device [ 26.264386][ T424] loop3: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 26.296437][ T282] syz-executor: attempt to access beyond end of device [ 26.296437][ T282] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 26.402517][ T288] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.593209][ T288] usb 2-1: config 7 has an invalid interface number: 189 but max is 0 [ 26.610001][ T288] usb 2-1: config 7 has no interface number 0 [ 26.630143][ T288] usb 2-1: config 7 interface 189 has no altsetting 0 [ 26.652856][ T288] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=b7.58 [ 26.675968][ T288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.688725][ T288] usb 2-1: Product: syz [ 26.695419][ T288] usb 2-1: Manufacturer: syz [ 26.700107][ T288] usb 2-1: SerialNumber: syz [ 26.729353][ T499] loop3: detected capacity change from 0 to 512 [ 26.804476][ T507] loop3: detected capacity change from 0 to 512 [ 26.848782][ T507] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 26.872491][ T507] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.913926][ T288] cdc_mbim 2-1:7.189: CDC Union missing and no IAD found [ 26.921075][ T288] cdc_mbim 2-1:7.189: bind() failure [ 26.927777][ T288] usb 2-1: USB disconnect, device number 2 [ 26.930047][ T282] EXT4-fs (loop3): unmounting filesystem. [ 27.167406][ T551] mmap: syz.3.90 (551): VmData 40828928 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 27.397554][ T28] kauditd_printk_skb: 109 callbacks suppressed [ 27.397575][ T28] audit: type=1400 audit(1772625175.615:182): avc: denied { create } for pid=561 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.449387][ T569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.97'. [ 27.461328][ T28] audit: type=1400 audit(1772625175.645:183): avc: denied { write } for pid=561 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.481463][ T569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'. [ 27.501549][ T28] audit: type=1400 audit(1772625175.645:184): avc: denied { read } for pid=561 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.553642][ T567] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 27.562616][ T567] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.568599][ T28] audit: type=1400 audit(1772625175.785:185): avc: denied { mount } for pid=563 comm="syz.3.96" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.648473][ T282] EXT4-fs (loop3): unmounting filesystem. [ 27.657837][ T547] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 27.664669][ T547] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 27.673089][ T28] audit: type=1400 audit(1772625175.865:186): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.692691][ T547] F2FS-fs (loop0): invalid crc value [ 27.694168][ T580] EXT4-fs: Ignoring removed orlov option [ 27.719648][ T547] F2FS-fs (loop0): Found nat_bits in checkpoint [ 27.742577][ T589] syz.3.102[589] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.742720][ T589] syz.3.102[589] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.775757][ T580] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 27.836582][ T547] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 27.845261][ T547] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 27.851379][ T595] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 27.899157][ T595] ext4 filesystem being mounted at /25/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.912479][ T604] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 27.931930][ T604] EXT4-fs warning (device loop3): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 27.947388][ T28] audit: type=1400 audit(1772625176.165:187): avc: denied { create } for pid=603 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.023970][ T28] audit: type=1400 audit(1772625176.165:188): avc: denied { create } for pid=546 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 28.033816][ T595] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 28.081216][ T595] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 28.092385][ T28] audit: type=1400 audit(1772625176.185:189): avc: denied { append } for pid=546 comm="syz.0.87" path="/29/bus/cgroup.kill" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.111916][ T595] EXT4-fs error (device loop2): ext4_acquire_dquot:6822: comm syz.2.107: Failed to acquire dquot type 0 [ 28.117349][ T608] mmap: syz.3.112 (608) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 28.186594][ T285] EXT4-fs error (device loop2): ext4_acquire_dquot:6822: comm syz-executor: Failed to acquire dquot type 0 [ 28.229359][ T610] EXT4-fs: Ignoring removed bh option [ 28.268659][ T283] EXT4-fs (loop1): unmounting filesystem. [ 28.275219][ T610] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 28.292346][ T610] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.317868][ T609] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: comm syz.3.115: lblock 0 mapped to illegal pblock 0 (length 1) [ 28.333740][ T285] EXT4-fs (loop2): unmounting filesystem. [ 28.363240][ T614] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 28.373859][ T285] syz-executor (285) used greatest stack depth: 21856 bytes left [ 28.422657][ T609] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.115: lblock 0 mapped to illegal pblock 0 (length 1) [ 28.427739][ T614] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.453845][ T609] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.115: lblock 0 mapped to illegal pblock 0 (length 1) [ 28.470677][ T609] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.115: lblock 0 mapped to illegal pblock 0 (length 1) [ 28.485428][ T614] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 28.494614][ T614] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 28.512405][ T609] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.115: lblock 0 mapped to illegal pblock 0 (length 1) [ 28.533359][ T283] EXT4-fs (loop1): unmounting filesystem. [ 28.547998][ T609] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.115: lblock 0 mapped to illegal pblock 0 (length 1) [ 28.577445][ T609] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.115: lblock 0 mapped to illegal pblock 0 (length 1) [ 28.579672][ T623] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=623 comm=syz.0.118 [ 28.611498][ T609] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.115: lblock 0 mapped to illegal pblock 0 (length 1) [ 28.647528][ T609] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.115: lblock 0 mapped to illegal pblock 0 (length 1) [ 28.702472][ T609] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.115: lblock 0 mapped to illegal pblock 0 (length 1) [ 28.734764][ T282] EXT4-fs (loop3): unmounting filesystem. [ 28.811864][ T598] F2FS-fs (loop4): Test dummy encryption mode enabled [ 28.819976][ T598] F2FS-fs (loop4): invalid crc value [ 28.833818][ T598] F2FS-fs (loop4): Found nat_bits in checkpoint [ 28.888440][ T626] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.913957][ T626] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.918441][ T598] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 28.921496][ T626] device bridge_slave_0 entered promiscuous mode [ 28.948814][ T626] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.958819][ T626] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.966417][ T626] device bridge_slave_1 entered promiscuous mode [ 29.017661][ T598] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 29.083292][ T346] device bridge_slave_1 left promiscuous mode [ 29.089544][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.112574][ T346] device bridge_slave_0 left promiscuous mode [ 29.123486][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.154867][ T346] device veth1_macvtap left promiscuous mode [ 29.160920][ T346] device veth0_vlan left promiscuous mode [ 29.280006][ T626] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.287095][ T626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.294479][ T626] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.301497][ T626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.327225][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.341522][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.373162][ T686] EXT4-fs: Ignoring removed mblk_io_submit option [ 29.392543][ T686] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.415420][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.425213][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.438729][ T686] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 29.458826][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.474082][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.485058][ T686] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 29.491830][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.505078][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.518956][ T686] EXT4-fs (loop1): 1 truncate cleaned up [ 29.522607][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.533796][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.542075][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.543349][ T686] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 29.549152][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.566434][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.575564][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.583579][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.591700][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.611876][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.624258][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.644076][ T283] EXT4-fs (loop1): unmounting filesystem. [ 29.650176][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.678067][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.688701][ T696] EXT4-fs error (device loop3): ext4_acquire_dquot:6822: comm syz.3.144: Failed to acquire dquot type 1 [ 29.700613][ T626] device veth0_vlan entered promiscuous mode [ 29.708193][ T696] EXT4-fs error (device loop3): ext4_acquire_dquot:6822: comm syz.3.144: Failed to acquire dquot type 1 [ 29.709512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.741421][ T696] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.144: bg 0: block 248: padding at end of block bitmap is not set [ 29.760100][ T696] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 29.773267][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.781302][ T696] EXT4-fs error (device loop3): ext4_acquire_dquot:6822: comm syz.3.144: Failed to acquire dquot type 1 [ 29.787066][ T626] device veth1_macvtap entered promiscuous mode [ 29.799227][ T288] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 29.807923][ T696] EXT4-fs (loop3): 1 orphan inode deleted [ 29.814816][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.823552][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.831900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.837685][ T696] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 29.848318][ T696] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.867418][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.876302][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.878805][ T696] EXT4-fs error (device loop3): ext4_acquire_dquot:6822: comm syz.3.144: Failed to acquire dquot type 1 [ 29.885346][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.904938][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.915136][ T282] EXT4-fs (loop3): unmounting filesystem. [ 29.944073][ T709] Bluetooth: hci0: Frame reassembly failed (-84) [ 29.950784][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 29.983350][ T288] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 29.991408][ T288] usb 5-1: config 0 has no interface number 0 [ 29.997636][ T288] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.008650][ T288] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.018894][ T288] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.031730][ T288] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 30.040878][ T288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.049721][ T288] usb 5-1: config 0 descriptor?? [ 30.112177][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.292164][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 30.298468][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.309418][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 30.322253][ T6] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 30.331483][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.340704][ T6] usb 1-1: config 0 descriptor?? [ 30.658529][ T288] input: HID 28bd:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0001/input/input4 [ 30.671594][ T288] uclogic 0003:28BD:0042.0001: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1 [ 30.684977][ T288] usb 5-1: USB disconnect, device number 2 [ 30.706461][ T719] set_capacity_and_notify: 13 callbacks suppressed [ 30.706473][ T719] loop1: detected capacity change from 0 to 512 [ 30.724243][ T719] EXT4-fs (loop1): orphan cleanup on readonly fs [ 30.730861][ T719] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:984: inode #11: comm syz.1.151: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 30.749010][ T6] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 30.749405][ T717] fido_id[717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 30.771177][ T719] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.1.151: ea_inode dec ref err=-117 [ 30.773244][ T6] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 30.784420][ T719] EXT4-fs (loop1): 1 orphan inode deleted [ 30.796993][ T719] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 30.822223][ T6] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 30.829592][ T6] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 30.837379][ T283] EXT4-fs (loop1): unmounting filesystem. [ 30.837462][ T6] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 30.850625][ T6] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 30.858719][ T6] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 30.866184][ T6] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 30.873638][ T6] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 30.881024][ T6] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 30.888456][ T6] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 30.889069][ T727] loop1: detected capacity change from 0 to 1024 [ 30.896367][ T6] HID 045e:07da: Invalid code 65791 type 1 [ 30.908361][ T6] HID 045e:07da: Invalid code 768 type 1 [ 30.914182][ T6] HID 045e:07da: Invalid code 769 type 1 [ 30.919929][ T6] HID 045e:07da: Invalid code 770 type 1 [ 30.924016][ T727] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 30.925894][ T6] HID 045e:07da: Invalid code 771 type 1 [ 30.939958][ T6] HID 045e:07da: Invalid code 772 type 1 [ 30.945753][ T6] HID 045e:07da: Invalid code 773 type 1 [ 30.954439][ T6] HID 045e:07da: Invalid code 774 type 1 [ 30.960356][ T6] HID 045e:07da: Invalid code 775 type 1 [ 30.966494][ T6] HID 045e:07da: Invalid code 776 type 1 [ 30.973193][ T727] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3852: comm syz.1.154: Allocating blocks 449-513 which overlap fs metadata [ 30.987132][ T727] EXT4-fs (loop1): Remounting filesystem read-only [ 30.995708][ T726] EXT4-fs (loop1): pa ffff888116d3ad20: logic 48, phys. 177, len 21 [ 31.001899][ T6] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input5 [ 31.003797][ T726] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 4 [ 31.025657][ T726] EXT4-fs (loop1): Remounting filesystem read-only [ 31.045149][ T283] EXT4-fs (loop1): unmounting filesystem. [ 31.083949][ T6] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 31.124938][ T737] loop1: detected capacity change from 0 to 256 [ 31.314322][ T752] loop4: detected capacity change from 0 to 512 [ 31.335026][ T752] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 31.345191][ T752] ext4 filesystem being mounted at /24/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.370844][ T752] EXT4-fs error (device loop4): ext4_acquire_dquot:6822: comm syz.4.163: Failed to acquire dquot type 0 [ 31.391507][ T286] EXT4-fs (loop4): unmounting filesystem. [ 31.413554][ T756] loop4: detected capacity change from 0 to 128 [ 31.438447][ T756] incfs: ino conflict with backing FS 1 [ 31.448706][ T288] usb 1-1: USB disconnect, device number 2 [ 31.692627][ T758] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.699780][ T758] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.707317][ T758] device bridge_slave_0 entered promiscuous mode [ 31.716078][ T758] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.723340][ T758] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.730832][ T758] device bridge_slave_1 entered promiscuous mode [ 31.796322][ T758] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.803396][ T758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.810666][ T758] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.817700][ T758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.841935][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.849847][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.859203][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.876629][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.884903][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.891940][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.899809][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.913582][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.920639][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.940301][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.949508][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.972288][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.983956][ T758] device veth0_vlan entered promiscuous mode [ 31.995694][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.005808][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.013349][ T711] Bluetooth: hci0: command 0x1003 tx timeout [ 32.013392][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 32.037466][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.060114][ T758] device veth1_macvtap entered promiscuous mode [ 32.073909][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.080749][ T782] loop3: detected capacity change from 0 to 128 [ 32.086762][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.098094][ T10] device bridge_slave_1 left promiscuous mode [ 32.104925][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.122867][ T10] device bridge_slave_0 left promiscuous mode [ 32.129061][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.152778][ T10] device veth1_macvtap left promiscuous mode [ 32.158850][ T10] device veth0_vlan left promiscuous mode [ 32.163996][ T782] syz.3.174: attempt to access beyond end of device [ 32.163996][ T782] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 32.298024][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.307939][ T799] netlink: 136 bytes leftover after parsing attributes in process `syz.0.180'. [ 32.317478][ T799] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 32.358408][ T802] loop0: detected capacity change from 0 to 256 [ 32.385334][ T802] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 32.411095][ T802] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 32.442568][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 32.442581][ T28] audit: type=1400 audit(1772625180.665:231): avc: denied { remount } for pid=807 comm="syz.6.167" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.480336][ T28] audit: type=1400 audit(1772625180.665:232): avc: denied { remount } for pid=801 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 32.516593][ T815] loop0: detected capacity change from 0 to 128 [ 32.527362][ T28] audit: type=1400 audit(1772625180.735:233): avc: denied { unmount } for pid=758 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.537739][ T812] loop3: detected capacity change from 0 to 128 [ 32.558529][ T818] netlink: 'syz.1.189': attribute type 4 has an invalid length. [ 32.585716][ T815] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 32.587631][ T28] audit: type=1400 audit(1772625180.775:234): avc: denied { ioctl } for pid=817 comm="syz.1.189" path="socket:[17310]" dev="sockfs" ino=17310 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.621042][ T28] audit: type=1400 audit(1772625180.785:235): avc: denied { getopt } for pid=820 comm="syz.6.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.623618][ T815] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 32.646049][ T812] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 32.683126][ T812] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.713897][ T28] audit: type=1400 audit(1772625180.935:236): avc: denied { relabelfrom } for pid=829 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 32.734635][ T28] audit: type=1400 audit(1772625180.935:237): avc: denied { relabelto } for pid=829 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 32.746956][ T833] loop5: detected capacity change from 0 to 512 [ 32.792964][ T284] EXT4-fs (loop0): unmounting filesystem. [ 32.798027][ T833] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 32.808004][ T282] EXT4-fs (loop3): unmounting filesystem. [ 32.817336][ T28] audit: type=1400 audit(1772625181.035:238): avc: denied { mounton } for pid=832 comm="syz.5.193" path="/6/file0/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.849042][ T626] EXT4-fs (loop5): unmounting filesystem. [ 32.879884][ T28] audit: type=1400 audit(1772625181.035:239): avc: denied { mounton } for pid=832 comm="syz.5.193" path="/6/file0/file0" dev="incremental-fs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.911251][ T28] audit: type=1400 audit(1772625181.035:240): avc: denied { write } for pid=832 comm="syz.5.193" name="file0" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.001111][ T860] exfat: Deprecated parameter 'namecase' [ 33.015886][ T860] exfat: Deprecated parameter 'namecase' [ 33.048196][ T860] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 33.082525][ T871] xt_hashlimit: size too large, truncated to 1048576 [ 33.098058][ T867] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.121788][ T867] EXT4-fs (loop5): Test dummy encryption mode enabled [ 33.153348][ T878] can0: slcan on ptm0. [ 33.164512][ T867] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 33.204089][ T877] EXT4-fs error (device loop1): ext4_iget_extra_inode:4758: inode #12: comm syz.1.212: corrupted in-inode xattr [ 33.273516][ T858] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 33.281630][ T867] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 33.299965][ T877] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.212: couldn't read orphan inode 12 (err -117) [ 33.321979][ T858] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 33.346133][ T626] EXT4-fs (loop5): unmounting filesystem. [ 33.357573][ T877] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 33.369860][ T878] F2FS-fs (loop3): fault_injection options not supported [ 33.381964][ T878] F2FS-fs (loop3): invalid crc value [ 33.385694][ T858] F2FS-fs (loop0): Found nat_bits in checkpoint [ 33.397217][ T878] F2FS-fs (loop3): Found nat_bits in checkpoint [ 33.472942][ T877] EXT4-fs (loop1): shut down requested (1) [ 33.492817][ T901] ext4: Unknown parameter 'fowner' [ 33.501939][ T878] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 33.514551][ T283] EXT4-fs (loop1): unmounting filesystem. [ 33.541934][ T858] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 33.572276][ T858] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 33.657356][ T878] can0 (unregistered): slcan off ptm0. [ 34.164989][ T954] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.172080][ T954] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.182215][ T347] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 34.187960][ T954] device bridge_slave_0 entered promiscuous mode [ 34.206986][ T954] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.225433][ T954] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.233200][ T954] device bridge_slave_1 entered promiscuous mode [ 34.257352][ T970] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 34.273916][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 34.292496][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.300832][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 34.310417][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.320057][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.328356][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.337040][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.345935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.375051][ T347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.396454][ T347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.422450][ T347] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 34.431143][ T988] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 34.436474][ T347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.486871][ T347] usb 4-1: config 0 descriptor?? [ 34.638456][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.646506][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.693760][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.696302][ T347] usbhid 4-1:0.0: can't add hid device: -71 [ 34.703305][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.716871][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.721706][ T347] usbhid: probe of 4-1:0.0 failed with error -71 [ 34.723937][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.727315][ T1020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'. [ 34.730412][ T1018] netlink: 8 bytes leftover after parsing attributes in process `syz.6.251'. [ 34.737747][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.751172][ T347] usb 4-1: USB disconnect, device number 2 [ 34.763609][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.764389][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.784550][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.793267][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.801703][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.815058][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.823517][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.832056][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.841258][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.849762][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.859419][ T1018] netlink: 8 bytes leftover after parsing attributes in process `syz.6.251'. [ 34.879462][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.888535][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.897940][ T954] device veth0_vlan entered promiscuous mode [ 34.905109][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.917856][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.933297][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.943007][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.951844][ T954] device veth1_macvtap entered promiscuous mode [ 34.963202][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.971230][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.972314][ T1033] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 34.980649][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.988591][ T1033] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.010593][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.021564][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.055295][ T758] EXT4-fs (loop6): unmounting filesystem. [ 35.102647][ T1041] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 35.169503][ T1049] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.183685][ T1049] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 35.197105][ T1049] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3852: comm syz.7.262: Allocating blocks 449-513 which overlap fs metadata [ 35.211124][ T1049] EXT4-fs (loop7): Remounting filesystem read-only [ 35.220657][ T1049] EXT4-fs (loop7): pa ffff888116d3a690: logic 131072, phys. 417, len 6 [ 35.228982][ T1049] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 4 [ 35.239602][ T1049] EXT4-fs (loop7): Remounting filesystem read-only [ 35.252127][ T954] EXT4-fs (loop7): unmounting filesystem. [ 35.266875][ T1053] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.277851][ T1053] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 35.287683][ T1053] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 35.342217][ T347] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.392215][ T40] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 35.533566][ T347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.544540][ T347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.554370][ T347] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 35.563497][ T347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.572426][ T347] usb 4-1: config 0 descriptor?? [ 35.593197][ T40] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.603393][ T40] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 35.616469][ T40] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 35.625551][ T40] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.634868][ T40] usb 7-1: config 0 descriptor?? [ 35.640664][ T40] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 35.861426][ T1041] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.258: inode #9: comm syz.6.258: iget: illegal inode # [ 35.874655][ T1041] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.258: error while reading EA inode 9 err=-117 [ 35.893771][ T6] usb 7-1: USB disconnect, device number 2 [ 35.964791][ T1087] set_capacity_and_notify: 11 callbacks suppressed [ 35.964804][ T1087] loop0: detected capacity change from 0 to 256 [ 35.984679][ T347] hid-generic 0003:1038:12B6.0003: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 36.210494][ T6] usb 4-1: USB disconnect, device number 3 [ 36.292177][ T1094] loop0: detected capacity change from 0 to 131072 [ 36.301698][ T1094] F2FS-fs (loop0): Test dummy encryption mode enabled [ 36.309702][ T1094] F2FS-fs (loop0): invalid crc value [ 36.343266][ T1094] F2FS-fs (loop0): Found nat_bits in checkpoint [ 36.380030][ T1094] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 36.409307][ T758] EXT4-fs (loop6): unmounting filesystem. [ 36.484016][ T1112] loop6: detected capacity change from 0 to 8192 [ 36.657873][ T1122] loop5: detected capacity change from 0 to 1024 [ 36.695204][ T1122] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 36.713271][ T626] EXT4-fs (loop5): unmounting filesystem. [ 36.738584][ T1135] netlink: 104 bytes leftover after parsing attributes in process `syz.3.295'. [ 36.805736][ T1138] loop3: detected capacity change from 0 to 8192 [ 36.832175][ T1144] loop6: detected capacity change from 0 to 256 [ 36.840978][ T1144] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 36.949383][ T1134] loop5: detected capacity change from 0 to 40427 [ 36.971351][ T1134] F2FS-fs (loop5): invalid crc value [ 36.981841][ T1134] F2FS-fs (loop5): Found nat_bits in checkpoint [ 37.039974][ T1134] F2FS-fs (loop5): Start checkpoint disabled! [ 37.047762][ T1134] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 37.072354][ T1134] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 37.293460][ T10] kworker/u4:1: attempt to access beyond end of device [ 37.293460][ T10] loop5: rw=1, sector=77824, nr_sectors = 8 limit=40427 [ 37.318737][ T10] kworker/u4:1: attempt to access beyond end of device [ 37.318737][ T10] loop5: rw=1, sector=77832, nr_sectors = 4088 limit=40427 [ 37.335562][ T10] kworker/u4:1: attempt to access beyond end of device [ 37.335562][ T10] loop5: rw=1, sector=49152, nr_sectors = 8 limit=40427 [ 37.359353][ T10] kworker/u4:1: attempt to access beyond end of device [ 37.359353][ T10] loop5: rw=1, sector=49160, nr_sectors = 4088 limit=40427 [ 37.362178][ T288] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 37.375366][ T10] kworker/u4:1: attempt to access beyond end of device [ 37.375366][ T10] loop5: rw=1, sector=57344, nr_sectors = 8 limit=40427 [ 37.406023][ T10] kworker/u4:1: attempt to access beyond end of device [ 37.406023][ T10] loop5: rw=1, sector=57352, nr_sectors = 4064 limit=40427 [ 37.422840][ T10] kworker/u4:1: attempt to access beyond end of device [ 37.422840][ T10] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 37.452862][ T28] kauditd_printk_skb: 397 callbacks suppressed [ 37.452874][ T28] audit: type=1326 audit(1772625185.675:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1145 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f997a95cfce code=0x7ffc0000 [ 37.508689][ T28] audit: type=1326 audit(1772625185.705:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1145 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f997a95cfce code=0x7ffc0000 [ 37.561747][ T28] audit: type=1326 audit(1772625185.705:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1145 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f997a95cfce code=0x7ffc0000 [ 37.567555][ T288] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 37.617442][ T1180] loop5: detected capacity change from 0 to 4096 [ 37.624995][ T288] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 37.627466][ T28] audit: type=1326 audit(1772625185.705:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1145 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f997a95cfce code=0x7ffc0000 [ 37.654976][ T288] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 37.660063][ T1180] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.673203][ T1184] loop0: detected capacity change from 0 to 512 [ 37.677730][ T28] audit: type=1326 audit(1772625185.705:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1145 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f997a95cfce code=0x7ffc0000 [ 37.709047][ T1180] EXT4-fs (loop5): Test dummy encryption mode enabled [ 37.714693][ T288] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 37.725540][ T28] audit: type=1326 audit(1772625185.705:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1145 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f997a95cfce code=0x7ffc0000 [ 37.732214][ T288] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.749455][ T28] audit: type=1326 audit(1772625185.705:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1145 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f997a95cfce code=0x7ffc0000 [ 37.773414][ T288] usb 8-1: Product: syz [ 37.784406][ T288] usb 8-1: Manufacturer: syz [ 37.789556][ T288] usb 8-1: SerialNumber: syz [ 37.798885][ T1180] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 37.804132][ T28] audit: type=1326 audit(1772625185.705:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1145 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f997a95cfce code=0x7ffc0000 [ 37.808980][ T1184] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 37.833413][ T288] hub 8-1:1.0: bad descriptor, ignoring hub [ 37.847701][ T288] hub: probe of 8-1:1.0 failed with error -5 [ 37.855250][ T28] audit: type=1326 audit(1772625185.705:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1145 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f997a95cfce code=0x7ffc0000 [ 37.878702][ T28] audit: type=1326 audit(1772625185.705:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1145 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f997a95cfce code=0x7ffc0000 [ 37.914504][ T626] EXT4-fs (loop5): unmounting filesystem. [ 37.972728][ T1192] loop3: detected capacity change from 0 to 512 [ 37.982271][ T1192] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.995433][ T1192] EXT4-fs error (device loop3): ext4_init_orphan_info:584: comm syz.3.318: inode #0: comm syz.3.318: iget: illegal inode # [ 38.008629][ T1192] EXT4-fs (loop3): Remounting filesystem read-only [ 38.019669][ T1192] EXT4-fs (loop3): get orphan inode failed [ 38.026115][ T1192] EXT4-fs (loop3): mount failed [ 38.041140][ T288] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 38.053655][ T284] EXT4-fs (loop0): unmounting filesystem. [ 38.100628][ T1202] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 38.118002][ T1202] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.135034][ T1210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 38.138885][ T1202] EXT4-fs error (device loop5): ext4_do_update_inode:5274: inode #2: comm syz.5.323: corrupted inode contents [ 38.145437][ T1210] Zero length message leads to an empty skb [ 38.159002][ T1202] EXT4-fs error (device loop5): ext4_dirty_inode:6139: inode #2: comm syz.5.323: mark_inode_dirty error [ 38.186439][ T1202] EXT4-fs error (device loop5): ext4_do_update_inode:5274: inode #2: comm syz.5.323: corrupted inode contents [ 38.200162][ T1202] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.323: mark_inode_dirty error [ 38.249259][ T626] EXT4-fs (loop5): unmounting filesystem. [ 38.256270][ T1218] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 38.306809][ T284] EXT4-fs (loop0): unmounting filesystem. [ 38.533464][ T1244] F2FS-fs (loop6): invalid crc value [ 38.539888][ T1244] F2FS-fs (loop6): Found nat_bits in checkpoint [ 38.568533][ T1244] F2FS-fs (loop6): Start checkpoint disabled! [ 38.575158][ T1244] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 38.583472][ T1244] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 38.712186][ T1244] syz.6.337: attempt to access beyond end of device [ 38.712186][ T1244] loop6: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 38.725906][ T1163] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 38.734902][ T1244] syz.6.337: attempt to access beyond end of device [ 38.734902][ T1244] loop6: rw=2049, sector=77832, nr_sectors = 8 limit=40427 [ 38.749233][ T1244] syz.6.337: attempt to access beyond end of device [ 38.749233][ T1244] loop6: rw=2049, sector=77840, nr_sectors = 8 limit=40427 [ 38.956078][ T1163] usb 8-1: device firmware changed [ 38.961565][ T6] usb 8-1: USB disconnect, device number 2 [ 38.980389][ T6] usblp0: removed [ 39.057690][ T1263] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 39.111279][ T1269] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.142154][ T6] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 39.154964][ T1274] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 39.170633][ T1274] EXT4-fs (loop6): 1 truncate cleaned up [ 39.176512][ T1274] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 39.197388][ T1274] EXT4-fs error (device loop6): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.6.349: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 39.219776][ T1274] EXT4-fs (loop6): Remounting filesystem read-only [ 39.226890][ T1274] EXT4-fs error (device loop6) in ext4_delete_entry:2800: Corrupt filesystem [ 39.236552][ T1274] EXT4-fs (loop6): Remounting filesystem read-only [ 39.246659][ T1274] EXT4-fs warning (device loop6): ext4_rename_delete:3778: inode #2: comm syz.6.349: Deleting old file: nlink 5, error=-117 [ 39.273231][ T758] EXT4-fs (loop6): unmounting filesystem. [ 39.323241][ T6] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 39.334500][ T6] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 39.345074][ T6] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.365316][ T6] usb 8-1: string descriptor 0 read error: -22 [ 39.374953][ T6] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 39.384309][ T6] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.404098][ T6] hub 8-1:1.0: bad descriptor, ignoring hub [ 39.410293][ T6] hub: probe of 8-1:1.0 failed with error -5 [ 39.421753][ T1295] binder: 1294:1295 ioctl c0306201 200000000680 returned -14 [ 39.603417][ T6] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 39.642550][ T6] usb 8-1: USB disconnect, device number 3 [ 39.648172][ T1318] EXT4-fs: Ignoring removed bh option [ 39.650209][ T6] usblp0: removed [ 39.661206][ T1318] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 39.673986][ T1318] EXT4-fs (loop0): 1 truncate cleaned up [ 39.679648][ T1318] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.696893][ T1316] F2FS-fs (loop3): heap/no_heap options were deprecated [ 39.704158][ T1316] F2FS-fs (loop3): fault_injection options not supported [ 39.711304][ T1316] F2FS-fs (loop3): fault_type options not supported [ 39.718896][ T1316] F2FS-fs (loop3): invalid crc value [ 39.734847][ T1316] F2FS-fs (loop3): Found nat_bits in checkpoint [ 39.742292][ T284] EXT4-fs (loop0): unmounting filesystem. [ 39.768228][ T1316] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 39.822300][ T287] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 40.014919][ T287] usb 7-1: unable to get BOS descriptor or descriptor too short [ 40.030605][ T287] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.041485][ T287] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 40.050762][ T287] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 40.061603][ T287] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 40.077727][ T287] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 40.087107][ T287] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.099579][ T287] usb 7-1: Product: syz [ 40.103976][ T287] usb 7-1: Manufacturer: syz [ 40.108974][ T287] usb 7-1: SerialNumber: syz [ 40.114264][ T1355] netlink: 116 bytes leftover after parsing attributes in process `syz.3.383'. [ 40.216722][ T1373] exfat: Deprecated parameter 'utf8' [ 40.224253][ T1373] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 40.247083][ T1373] xt_hashlimit: max too large, truncated to 1048576 [ 40.290998][ T1380] xt_hashlimit: size too large, truncated to 1048576 [ 40.328420][ T287] usb 7-1: 0:2 : does not exist [ 40.336613][ T287] usb 7-1: USB disconnect, device number 3 [ 40.451311][ T1384] SELinux: ebitmap: map size 16580607 does not match my size 64 (high bit was 64) [ 40.460701][ T1384] SELinux: failed to load policy [ 40.479168][ T1388] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 40.488201][ T1388] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.508852][ T1388] EXT4-fs warning (device loop5): ext4_group_add:1723: Can't resize non-sparse filesystem further [ 40.523983][ T626] EXT4-fs (loop5): unmounting filesystem. [ 40.552841][ T360] udevd[360]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.578226][ T1400] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 40.611088][ T1405] netlink: 4 bytes leftover after parsing attributes in process `syz.5.405'. [ 40.772171][ T288] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 40.873881][ T1413] netlink: 216 bytes leftover after parsing attributes in process `syz.6.408'. [ 40.894207][ T40] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 40.936816][ T1422] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 40.963176][ T288] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 3 [ 40.973116][ T288] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.001374][ T288] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 41.019189][ T288] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 41.035116][ T288] usb 8-1: Product: syz [ 41.042659][ T288] usb 8-1: Manufacturer: syz [ 41.050718][ T288] usb 8-1: SerialNumber: syz [ 41.063866][ T1394] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 41.088243][ T40] usb 6-1: Using ep0 maxpacket: 8 [ 41.094428][ T40] usb 6-1: config 0 has an invalid interface number: 30 but max is 0 [ 41.112177][ T40] usb 6-1: config 0 has no interface number 0 [ 41.118375][ T40] usb 6-1: too many endpoints for config 0 interface 30 altsetting 222: 254, using maximum allowed: 30 [ 41.130573][ T40] usb 6-1: config 0 interface 30 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.141966][ T40] usb 6-1: config 0 interface 30 altsetting 222 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.152240][ T40] usb 6-1: config 0 interface 30 altsetting 222 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 41.165783][ T40] usb 6-1: config 0 interface 30 has no altsetting 0 [ 41.172658][ T40] usb 6-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 41.181768][ T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.190819][ T40] usb 6-1: config 0 descriptor?? [ 41.275617][ T288] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 41.354068][ T1438] set_capacity_and_notify: 12 callbacks suppressed [ 41.354086][ T1438] loop6: detected capacity change from 0 to 512 [ 41.483003][ C1] usblp0: nonzero write bulk status received: -71 [ 41.490555][ T347] usb 8-1: USB disconnect, device number 4 [ 41.497834][ T347] usblp0: removed [ 41.516945][ T1443] option changes via remount are deprecated (pid=1442 comm=syz.0.422) [ 41.532428][ T1443] cgroup: option or name mismatch, new: 0x10000 "", old: 0x0 "" [ 41.603722][ T40] uclogic 0003:256C:006E.0004: interface is invalid, ignoring [ 41.675504][ T1451] device batadv_slave_0 entered promiscuous mode [ 41.683101][ T1450] device batadv_slave_0 left promiscuous mode [ 41.812074][ T6] usb 6-1: USB disconnect, device number 2 [ 41.912176][ T40] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 41.992159][ T288] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 42.058016][ T1476] loop7: detected capacity change from 0 to 256 [ 42.102201][ T40] usb 7-1: Using ep0 maxpacket: 32 [ 42.108630][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.120257][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.132378][ T40] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 42.141502][ T40] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.150412][ T40] usb 7-1: config 0 descriptor?? [ 42.156475][ T40] hub 7-1:0.0: USB hub found [ 42.193254][ T288] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.203574][ T288] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 42.212656][ T288] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 42.221903][ T288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.230713][ T288] usb 1-1: config 0 descriptor?? [ 42.357674][ T40] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 42.366651][ T1493] netlink: 4 bytes leftover after parsing attributes in process `syz.7.445'. [ 42.413601][ T1501] loop5: detected capacity change from 0 to 512 [ 42.428876][ T1493] syz.7.445 (1493) used greatest stack depth: 21696 bytes left [ 42.429422][ T1501] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 42.451402][ T1501] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.497201][ T626] EXT4-fs (loop5): unmounting filesystem. [ 42.499928][ T1510] loop7: detected capacity change from 0 to 256 [ 42.570965][ T6] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=6 comm=kworker/0:0 [ 42.584205][ T287] kernel read not supported for file /newroot/66 (pid: 287 comm: kworker/0:2) [ 42.652675][ T1455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.661212][ T1455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.686537][ T288] usb 1-1: USB disconnect, device number 3 [ 42.759295][ T40] hid-generic 0003:046D:C31C.0005: unknown main item tag 0x0 [ 42.772460][ T40] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 42.970613][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 42.970628][ T28] audit: type=1400 audit(1772625191.185:748): avc: denied { append } for pid=1448 comm="syz.6.425" name="hidraw0" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 43.182323][ T6] usb 7-1: USB disconnect, device number 4 [ 43.226903][ T1549] loop0: detected capacity change from 0 to 256 [ 43.243897][ T1553] loop3: detected capacity change from 0 to 512 [ 43.245136][ T1549] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 43.251730][ T1553] EXT4-fs: dax option not supported [ 43.340280][ T1553] loop3: detected capacity change from 0 to 512 [ 43.352837][ T1553] EXT4-fs (loop3): Test dummy encryption mode enabled [ 43.367210][ T1553] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 43.378858][ T1553] EXT4-fs (loop3): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 43.407368][ T282] EXT4-fs (loop3): unmounting filesystem. [ 43.432990][ T1559] loop3: detected capacity change from 0 to 128 [ 43.500643][ T1563] loop3: detected capacity change from 0 to 2048 [ 43.513715][ T1563] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 43.524701][ T1563] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.543877][ T28] audit: type=1400 audit(1772625191.765:749): avc: denied { read } for pid=1562 comm="syz.3.478" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 43.571414][ T282] EXT4-fs (loop3): unmounting filesystem. [ 43.577279][ T1566] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.584748][ T1566] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.594677][ T1566] device bridge_slave_0 entered promiscuous mode [ 43.606387][ T1566] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.613745][ T1566] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.620865][ T28] audit: type=1400 audit(1772625191.835:750): avc: denied { read } for pid=1572 comm="syz.3.480" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 43.634378][ T1566] device bridge_slave_1 entered promiscuous mode [ 43.644736][ T28] audit: type=1400 audit(1772625191.835:751): avc: denied { open } for pid=1572 comm="syz.3.480" path="/dev/usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 43.674220][ T28] audit: type=1400 audit(1772625191.835:752): avc: denied { ioctl } for pid=1572 comm="syz.3.480" path="/dev/usbmon7" dev="devtmpfs" ino=180 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 43.720218][ T1580] loop6: detected capacity change from 0 to 16 [ 43.728990][ T1580] erofs: (device loop6): mounted with root inode @ nid 36. [ 43.757029][ T1566] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.764108][ T1566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.771415][ T1566] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.778475][ T1566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.831303][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.841503][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.850836][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.895273][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.907538][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.914629][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.919450][ T348] Bluetooth: hci0: Frame reassembly failed (-84) [ 43.928497][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.929854][ T28] audit: type=1400 audit(1772625192.145:753): avc: denied { ioctl } for pid=1604 comm="syz.6.493" path="socket:[21202]" dev="sockfs" ino=21202 ioctlcmd=0x48e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.937043][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.968526][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.977022][ T10] device bridge_slave_1 left promiscuous mode [ 43.983275][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.990779][ T10] device bridge_slave_0 left promiscuous mode [ 43.997147][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.004954][ T10] device veth1_macvtap left promiscuous mode [ 44.010984][ T10] device veth0_vlan left promiscuous mode [ 44.078977][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.093011][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.110658][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.127522][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 44.151064][ T1566] device veth0_vlan entered promiscuous mode [ 44.163464][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.174984][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.182762][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.190442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 44.198805][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.207299][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 44.215572][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.224097][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.232859][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.241761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.250450][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.258434][ T28] audit: type=1400 audit(1772625192.465:754): avc: denied { bind } for pid=1624 comm="syz.5.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.272273][ T1566] device veth1_macvtap entered promiscuous mode [ 44.286145][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.298515][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.307525][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.321024][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.329794][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.341191][ T28] audit: type=1400 audit(1772625192.555:755): avc: denied { mount } for pid=1566 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 44.447187][ T1641] x_tables: ip6_tables: CT target: only valid in raw table, not . [ 44.466132][ T6] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 44.585079][ T1655] netlink: 104 bytes leftover after parsing attributes in process `syz.5.514'. [ 44.638034][ T28] audit: type=1400 audit(1772625192.855:756): avc: denied { setopt } for pid=1660 comm="syz.5.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.658686][ T6] usb 8-1: Using ep0 maxpacket: 32 [ 44.669337][ T6] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.690659][ T6] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.707352][ T6] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 44.722137][ T6] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 44.736923][ T6] usb 8-1: Product: syz [ 44.742825][ T6] usb 8-1: Manufacturer: syz [ 44.749178][ T1667] netlink: 'syz.5.520': attribute type 15 has an invalid length. [ 44.753034][ T6] hub 8-1:4.0: USB hub found [ 44.757292][ T1667] netlink: 24 bytes leftover after parsing attributes in process `syz.5.520'. [ 44.842147][ T287] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 44.877499][ T28] audit: type=1400 audit(1772625193.095:757): avc: denied { write } for pid=1688 comm="syz.5.530" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 44.928207][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 44.954934][ T6] hub 8-1:4.0: config failed, hub has too many ports! (err -19) [ 45.033306][ T287] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.044607][ T287] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.055021][ T287] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 45.068199][ T287] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 45.077268][ T287] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.089563][ T287] usb 9-1: config 0 descriptor?? [ 45.292678][ T6] usb 8-1: USB disconnect, device number 5 [ 45.500870][ T287] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 45.509062][ T287] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 45.517598][ T287] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 45.674512][ T1727] netlink: 'syz.3.547': attribute type 15 has an invalid length. [ 45.682822][ T1727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.547'. [ 45.802945][ T40] usb 9-1: USB disconnect, device number 2 [ 45.916176][ T1761] netlink: 'syz.7.563': attribute type 15 has an invalid length. [ 45.924219][ T1761] netlink: 24 bytes leftover after parsing attributes in process `syz.7.563'. [ 45.932301][ T710] Bluetooth: hci0: command 0x1003 tx timeout [ 45.939120][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.945988][ T1605] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 45.977858][ T1766] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.998315][ T1766] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 46.010564][ T1766] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.043266][ T954] EXT4-fs (loop7): unmounting filesystem. [ 46.112293][ T347] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 46.140011][ T1783] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 46.157309][ T1795] xt_hashlimit: size too large, truncated to 1048576 [ 46.195539][ T758] EXT4-fs (loop6): unmounting filesystem. [ 46.302147][ T347] usb 4-1: Using ep0 maxpacket: 32 [ 46.308406][ T347] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.339637][ T347] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.351912][ T347] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 46.371166][ T347] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 46.386364][ T1810] netlink: 20 bytes leftover after parsing attributes in process `syz.5.595'. [ 46.398264][ T347] usb 4-1: Product: syz [ 46.403491][ T347] usb 4-1: Manufacturer: syz [ 46.408400][ T1810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.595'. [ 46.418884][ T347] hub 4-1:4.0: USB hub found [ 46.544923][ T1830] set_capacity_and_notify: 5 callbacks suppressed [ 46.544939][ T1830] loop8: detected capacity change from 0 to 1024 [ 46.574009][ T1830] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 46.620857][ T347] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 46.621600][ T1566] EXT4-fs (loop8): unmounting filesystem. [ 46.718252][ T1843] loop8: detected capacity change from 0 to 256 [ 46.832150][ T694] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 46.942274][ T347] usb 4-1: USB disconnect, device number 4 [ 47.014248][ T1867] syz.8.608[1867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.014327][ T1867] syz.8.608[1867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.026769][ T694] usb 7-1: config 7 has an invalid interface number: 189 but max is 0 [ 47.048289][ T694] usb 7-1: config 7 has no interface number 0 [ 47.050191][ T1869] xt_hashlimit: size too large, truncated to 1048576 [ 47.054717][ T694] usb 7-1: config 7 interface 189 has no altsetting 0 [ 47.079434][ T694] usb 7-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=b7.58 [ 47.088660][ T694] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.096720][ T694] usb 7-1: Product: syz [ 47.101040][ T694] usb 7-1: Manufacturer: syz [ 47.111154][ T694] usb 7-1: SerialNumber: syz [ 47.320134][ T694] cdc_mbim 7-1:7.189: CDC Union missing and no IAD found [ 47.332176][ T694] cdc_mbim 7-1:7.189: bind() failure [ 47.338760][ T694] usb 7-1: USB disconnect, device number 5 [ 47.410120][ T1879] loop8: detected capacity change from 0 to 512 [ 47.444257][ T1883] loop3: detected capacity change from 0 to 256 [ 47.461283][ T1879] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 47.468464][ T1886] netlink: 20 bytes leftover after parsing attributes in process `syz.3.616'. [ 47.479300][ T1879] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.489579][ T1886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.616'. [ 47.531717][ T1566] EXT4-fs (loop8): unmounting filesystem. [ 47.541082][ T1892] loop3: detected capacity change from 0 to 512 [ 47.580063][ T1892] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 47.593460][ T1892] ext4 filesystem being mounted at /112/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.675710][ T1892] EXT4-fs error (device loop3): ext4_acquire_dquot:6822: comm syz.3.619: Failed to acquire dquot type 0 [ 47.747133][ T1915] loop7: detected capacity change from 0 to 256 [ 47.763463][ T282] EXT4-fs error (device loop3): ext4_acquire_dquot:6822: comm syz-executor: Failed to acquire dquot type 0 [ 47.832950][ T1920] loop8: detected capacity change from 0 to 1024 [ 47.839266][ T1918] loop7: detected capacity change from 0 to 2048 [ 47.841097][ T1920] EXT4-fs: Ignoring removed orlov option [ 47.865984][ T282] EXT4-fs (loop3): unmounting filesystem. [ 47.877679][ T1923] syz.6.633[1923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.877808][ T1923] syz.6.633[1923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.880061][ T1920] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 47.936040][ T1918] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 47.952292][ T1918] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.012131][ C0] ================================================================== [ 48.020225][ C0] BUG: KASAN: use-after-free in __run_timers+0x340/0x9f0 [ 48.027275][ C0] Write of size 8 at addr ffff888130794a00 by task syz.7.631/1918 [ 48.035090][ C0] [ 48.037441][ C0] CPU: 0 PID: 1918 Comm: syz.7.631 Not tainted syzkaller #0 [ 48.044729][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 48.054908][ C0] Call Trace: [ 48.058196][ C0] [ 48.061060][ C0] __dump_stack+0x21/0x24 [ 48.065413][ C0] dump_stack_lvl+0x110/0x170 [ 48.070120][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 48.075162][ C0] ? update_rq_clock+0x536/0x5c0 [ 48.080118][ C0] ? __run_timers+0x340/0x9f0 [ 48.084814][ C0] print_address_description+0x71/0x200 [ 48.090406][ C0] print_report+0x4a/0x60 [ 48.094756][ C0] kasan_report+0x122/0x150 [ 48.099334][ C0] ? __run_timers+0x340/0x9f0 [ 48.104024][ C0] __asan_report_store8_noabort+0x17/0x20 [ 48.109726][ C0] __run_timers+0x340/0x9f0 [ 48.114240][ C0] ? sched_clock+0x9/0x10 [ 48.118547][ C0] ? sched_clock_cpu+0x6e/0x260 [ 48.123393][ C0] ? calc_index+0x200/0x200 [ 48.127886][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 48.133063][ C0] run_timer_softirq+0x6a/0xf0 [ 48.137802][ C0] handle_softirqs+0x1d7/0x600 [ 48.142543][ C0] ? irqtime_account_irq+0xc4/0x240 [ 48.147728][ C0] __irq_exit_rcu+0x52/0xf0 [ 48.152206][ C0] irq_exit_rcu+0x9/0x10 [ 48.156511][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 48.162123][ C0] [ 48.165030][ C0] [ 48.167940][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 48.173899][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x36/0x80 [ 48.180733][ C0] Code: f0 fb 90 7e 65 8b 15 f1 fb 90 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 6c 0b 00 00 00 74 4e 8b 91 48 0b 00 00 <83> fa 03 75 43 48 8b 91 50 0b 00 00 44 8b 89 4c 0b 00 00 49 c1 e1 [ 48.200313][ C0] RSP: 0018:ffffc900047f7410 EFLAGS: 00000246 [ 48.206356][ C0] RAX: ffffffff81aa949e RBX: 000000110c2aa000 RCX: ffff88811b3e8000 [ 48.214303][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.222247][ C0] RBP: ffffc900047f7410 R08: ffff88811b3e8007 R09: 1ffff1102367d000 [ 48.230203][ C0] R10: dffffc0000000000 R11: ffffed102367d001 R12: 00000000001151c8 [ 48.238154][ C0] R13: 1ffff110255f9000 R14: 80000001151c8025 R15: ffff88812a978b58 [ 48.246104][ C0] ? vm_normal_page+0x6e/0x200 [ 48.250864][ C0] vm_normal_page+0x6e/0x200 [ 48.255430][ C0] unmap_page_range+0xccb/0x2330 [ 48.260432][ C0] ? __cfi_unmap_page_range+0x10/0x10 [ 48.265779][ C0] ? lru_add_fn+0x51b/0x670 [ 48.270259][ C0] unmap_vmas+0x34c/0x480 [ 48.274616][ C0] ? __cfi_unmap_vmas+0x10/0x10 [ 48.279445][ C0] ? __cfi_lru_add_drain_cpu+0x10/0x10 [ 48.284882][ C0] ? __kasan_check_write+0x14/0x20 [ 48.289968][ C0] exit_mmap+0x29b/0xc10 [ 48.294191][ C0] ? task_cputime_adjusted+0x220/0x230 [ 48.299628][ C0] ? __cfi_exit_mmap+0x10/0x10 [ 48.304369][ C0] ? __cfi_exit_aio+0x10/0x10 [ 48.309036][ C0] ? uprobe_clear_state+0x2c1/0x320 [ 48.314227][ C0] __mmput+0x93/0x360 [ 48.318192][ C0] ? mmput+0x43/0x150 [ 48.322153][ C0] mmput+0x4b/0x150 [ 48.325940][ C0] do_exit+0x994/0x2660 [ 48.330072][ C0] ? __cfi_do_exit+0x10/0x10 [ 48.334641][ C0] ? plist_del+0x3df/0x3f0 [ 48.339036][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 48.343915][ C0] ? __kasan_check_write+0x14/0x20 [ 48.349004][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 48.354008][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 48.359538][ C0] do_group_exit+0x210/0x2d0 [ 48.364116][ C0] ? __kasan_check_write+0x14/0x20 [ 48.369206][ C0] get_signal+0x13b5/0x1520 [ 48.373698][ C0] arch_do_signal_or_restart+0xd1/0x1140 [ 48.379304][ C0] ? do_futex+0x2e2/0x430 [ 48.383621][ C0] ? __cfi_do_futex+0x10/0x10 [ 48.388272][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 48.394401][ C0] ? __se_sys_futex+0x136/0x310 [ 48.399223][ C0] ? fput+0x154/0x1a0 [ 48.403178][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 48.408351][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 48.413781][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 48.419215][ C0] do_syscall_64+0x58/0xa0 [ 48.423611][ C0] ? clear_bhb_loop+0x30/0x80 [ 48.428265][ C0] ? clear_bhb_loop+0x30/0x80 [ 48.432921][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.438793][ C0] RIP: 0033:0x7f7ef9d9c799 [ 48.443186][ C0] Code: Unable to access opcode bytes at 0x7f7ef9d9c76f. [ 48.450180][ C0] RSP: 002b:00007f7efabe50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 48.458565][ C0] RAX: fffffffffffffe00 RBX: 00007f7efa015fa8 RCX: 00007f7ef9d9c799 [ 48.466605][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7efa015fa8 [ 48.474551][ C0] RBP: 00007f7efa015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 48.482496][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.490443][ C0] R13: 00007f7efa016038 R14: 00007ffd74286ff0 R15: 00007ffd742870d8 [ 48.498482][ C0] [ 48.501480][ C0] [ 48.503785][ C0] Allocated by task 1605: [ 48.508081][ C0] kasan_set_track+0x4b/0x70 [ 48.512648][ C0] kasan_save_alloc_info+0x25/0x30 [ 48.517735][ C0] __kasan_kmalloc+0x95/0xb0 [ 48.522298][ C0] __kmalloc+0xb1/0x1e0 [ 48.526422][ C0] hci_alloc_dev_priv+0x27/0x1bd0 [ 48.531422][ C0] hci_uart_tty_ioctl+0x3c8/0xa20 [ 48.536421][ C0] tty_ioctl+0x8ef/0xc60 [ 48.540638][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 48.545291][ C0] __x64_sys_ioctl+0x7b/0x90 [ 48.549853][ C0] x64_sys_call+0x58b/0x9a0 [ 48.554336][ C0] do_syscall_64+0x4c/0xa0 [ 48.558727][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.564688][ C0] [ 48.566986][ C0] Freed by task 1605: [ 48.570934][ C0] kasan_set_track+0x4b/0x70 [ 48.575505][ C0] kasan_save_free_info+0x31/0x50 [ 48.580519][ C0] ____kasan_slab_free+0x132/0x180 [ 48.585605][ C0] __kasan_slab_free+0x11/0x20 [ 48.590343][ C0] slab_free_freelist_hook+0xc2/0x190 [ 48.595689][ C0] __kmem_cache_free+0xb7/0x1b0 [ 48.600512][ C0] kfree+0x6f/0xf0 [ 48.604225][ C0] hci_release_dev+0x12a3/0x13b0 [ 48.609137][ C0] bt_host_release+0x82/0x90 [ 48.613707][ C0] device_release+0xa4/0x1d0 [ 48.618270][ C0] kobject_put+0x19d/0x280 [ 48.622661][ C0] put_device+0x1f/0x30 [ 48.626791][ C0] hci_dev_cmd+0x279/0x740 [ 48.631178][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 48.635834][ C0] sock_do_ioctl+0x114/0x330 [ 48.640394][ C0] sock_ioctl+0x4bd/0x710 [ 48.644695][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 48.649367][ C0] __x64_sys_ioctl+0x7b/0x90 [ 48.653931][ C0] x64_sys_call+0x58b/0x9a0 [ 48.658419][ C0] do_syscall_64+0x4c/0xa0 [ 48.662830][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.668730][ C0] [ 48.671026][ C0] Last potentially related work creation: [ 48.676715][ C0] kasan_save_stack+0x3a/0x60 [ 48.681377][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 48.686725][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 48.692506][ C0] insert_work+0x51/0x300 [ 48.696807][ C0] __queue_work+0x9b1/0xd30 [ 48.701293][ C0] queue_work_on+0xde/0x150 [ 48.705770][ C0] __hci_cmd_sync_sk+0xa7f/0xd30 [ 48.710685][ C0] hci_cmd_sync_status+0x53/0x120 [ 48.715690][ C0] hci_dev_cmd+0x648/0x740 [ 48.720097][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 48.724749][ C0] sock_do_ioctl+0x114/0x330 [ 48.729311][ C0] sock_ioctl+0x4bd/0x710 [ 48.733614][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 48.738262][ C0] __x64_sys_ioctl+0x7b/0x90 [ 48.742822][ C0] x64_sys_call+0x58b/0x9a0 [ 48.747303][ C0] do_syscall_64+0x4c/0xa0 [ 48.751695][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.757564][ C0] [ 48.759863][ C0] Second to last potentially related work creation: [ 48.766413][ C0] kasan_save_stack+0x3a/0x60 [ 48.771064][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 48.776411][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 48.782190][ C0] insert_work+0x51/0x300 [ 48.786497][ C0] __queue_work+0x9b1/0xd30 [ 48.790974][ C0] queue_work_on+0xde/0x150 [ 48.795466][ C0] hci_cmd_timeout+0x191/0x200 [ 48.800206][ C0] process_one_work+0x71f/0xc40 [ 48.805033][ C0] worker_thread+0xa29/0x11e0 [ 48.809758][ C0] kthread+0x281/0x320 [ 48.813857][ C0] ret_from_fork+0x1f/0x30 [ 48.818255][ C0] [ 48.820554][ C0] The buggy address belongs to the object at ffff888130794000 [ 48.820554][ C0] which belongs to the cache kmalloc-8k of size 8192 [ 48.834585][ C0] The buggy address is located 2560 bytes inside of [ 48.834585][ C0] 8192-byte region [ffff888130794000, ffff888130796000) [ 48.848107][ C0] [ 48.850419][ C0] The buggy address belongs to the physical page: [ 48.856804][ C0] page:ffffea0004c1e400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x130790 [ 48.867046][ C0] head:ffffea0004c1e400 order:3 compound_mapcount:0 compound_pincount:0 [ 48.875345][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 48.881399][ C0] raw: 4000000000010200 ffffea00044eda00 dead000000000002 ffff888100043500 [ 48.889955][ C0] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 48.898514][ C0] page dumped because: kasan: bad access detected [ 48.904899][ C0] page_owner tracks the page as allocated [ 48.910584][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 285, tgid 285 (syz-executor), ts 23149587183, free_ts 0 [ 48.932660][ C0] post_alloc_hook+0x1f5/0x210 [ 48.937406][ C0] prep_new_page+0x1c/0x110 [ 48.941884][ C0] get_page_from_freelist+0x2d12/0x2d80 [ 48.947404][ C0] __alloc_pages+0x1d9/0x480 [ 48.951968][ C0] alloc_slab_page+0x6e/0xf0 [ 48.956544][ C0] new_slab+0x98/0x3d0 [ 48.960589][ C0] ___slab_alloc+0x6bd/0xb20 [ 48.965158][ C0] __slab_alloc+0x5e/0xa0 [ 48.969463][ C0] __kmem_cache_alloc_node+0x203/0x2c0 [ 48.974900][ C0] __kmalloc_node+0xa1/0x1e0 [ 48.979548][ C0] kvmalloc_node+0x28a/0x460 [ 48.984109][ C0] alloc_netdev_mqs+0x8d/0xf90 [ 48.988853][ C0] rtnl_create_link+0x319/0xb10 [ 48.993707][ C0] rtnl_newlink+0x1439/0x20b0 [ 48.998357][ C0] rtnetlink_rcv_msg+0xb3b/0xe00 [ 49.003268][ C0] netlink_rcv_skb+0x20f/0x460 [ 49.008011][ C0] page_owner free stack trace missing [ 49.013362][ C0] [ 49.015660][ C0] Memory state around the buggy address: [ 49.021259][ C0] ffff888130794900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.029293][ C0] ffff888130794980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.037327][ C0] >ffff888130794a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.045360][ C0] ^ [ 49.049422][ C0] ffff888130794a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.057457][ C0] ffff888130794b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.065576][ C0] ================================================================== [ 49.073613][ C0] Disabling lock debugging due to kernel taint [ 49.080264][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 49.091983][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 49.100482][ C0] CPU: 0 PID: 1918 Comm: syz.7.631 Tainted: G B syzkaller #0 [ 49.109243][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 49.119281][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 49.124562][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 48 46 29 00 4c 89 ff e8 60 70 b8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 9c 78 6e 00 49 8b 7d 00 e8 f3 6b [ 49.144148][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 49.150198][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88811b3e8000 [ 49.158149][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 49.166102][ C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: fffffffffffffffb [ 49.174057][ C0] R10: dffffc0000000000 R11: ffffed10260f2939 R12: dffffc0000000000 [ 49.182010][ C0] R13: 0000000000000000 R14: ffff8881307949c8 R15: 0000000000000008 [ 49.189965][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 49.198963][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.205535][ C0] CR2: 0000001b2f316ff8 CR3: 000000013fc0a000 CR4: 00000000003506b0 [ 49.213499][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.221451][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.229406][ C0] Call Trace: [ 49.232669][ C0] [ 49.235499][ C0] delayed_work_timer_fn+0x61/0x80 [ 49.240602][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 49.246394][ C0] call_timer_fn+0x46/0x2a0 [ 49.250881][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 49.256670][ C0] __run_timers+0x689/0x9f0 [ 49.261159][ C0] ? calc_index+0x200/0x200 [ 49.265656][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 49.270846][ C0] run_timer_softirq+0x6a/0xf0 [ 49.275687][ C0] handle_softirqs+0x1d7/0x600 [ 49.280432][ C0] ? irqtime_account_irq+0xc4/0x240 [ 49.285616][ C0] __irq_exit_rcu+0x52/0xf0 [ 49.290100][ C0] irq_exit_rcu+0x9/0x10 [ 49.294325][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 49.299943][ C0] [ 49.302857][ C0] [ 49.305768][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 49.311741][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x36/0x80 [ 49.318621][ C0] Code: f0 fb 90 7e 65 8b 15 f1 fb 90 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 6c 0b 00 00 00 74 4e 8b 91 48 0b 00 00 <83> fa 03 75 43 48 8b 91 50 0b 00 00 44 8b 89 4c 0b 00 00 49 c1 e1 [ 49.338217][ C0] RSP: 0018:ffffc900047f7410 EFLAGS: 00000246 [ 49.344272][ C0] RAX: ffffffff81aa949e RBX: 000000110c2aa000 RCX: ffff88811b3e8000 [ 49.352229][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.360268][ C0] RBP: ffffc900047f7410 R08: ffff88811b3e8007 R09: 1ffff1102367d000 [ 49.368222][ C0] R10: dffffc0000000000 R11: ffffed102367d001 R12: 00000000001151c8 [ 49.376178][ C0] R13: 1ffff110255f9000 R14: 80000001151c8025 R15: ffff88812a978b58 [ 49.384135][ C0] ? vm_normal_page+0x6e/0x200 [ 49.388892][ C0] vm_normal_page+0x6e/0x200 [ 49.393470][ C0] unmap_page_range+0xccb/0x2330 [ 49.398400][ C0] ? __cfi_unmap_page_range+0x10/0x10 [ 49.403757][ C0] ? lru_add_fn+0x51b/0x670 [ 49.408255][ C0] unmap_vmas+0x34c/0x480 [ 49.412569][ C0] ? __cfi_unmap_vmas+0x10/0x10 [ 49.417407][ C0] ? __cfi_lru_add_drain_cpu+0x10/0x10 [ 49.422853][ C0] ? __kasan_check_write+0x14/0x20 [ 49.427955][ C0] exit_mmap+0x29b/0xc10 [ 49.432298][ C0] ? task_cputime_adjusted+0x220/0x230 [ 49.437815][ C0] ? __cfi_exit_mmap+0x10/0x10 [ 49.442569][ C0] ? __cfi_exit_aio+0x10/0x10 [ 49.447237][ C0] ? uprobe_clear_state+0x2c1/0x320 [ 49.452418][ C0] __mmput+0x93/0x360 [ 49.456385][ C0] ? mmput+0x43/0x150 [ 49.460351][ C0] mmput+0x4b/0x150 [ 49.464142][ C0] do_exit+0x994/0x2660 [ 49.468285][ C0] ? __cfi_do_exit+0x10/0x10 [ 49.472858][ C0] ? plist_del+0x3df/0x3f0 [ 49.477263][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 49.482185][ C0] ? __kasan_check_write+0x14/0x20 [ 49.487279][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 49.492290][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 49.497822][ C0] do_group_exit+0x210/0x2d0 [ 49.502398][ C0] ? __kasan_check_write+0x14/0x20 [ 49.507489][ C0] get_signal+0x13b5/0x1520 [ 49.511984][ C0] arch_do_signal_or_restart+0xd1/0x1140 [ 49.517604][ C0] ? do_futex+0x2e2/0x430 [ 49.521914][ C0] ? __cfi_do_futex+0x10/0x10 [ 49.526574][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 49.532719][ C0] ? __se_sys_futex+0x136/0x310 [ 49.537551][ C0] ? fput+0x154/0x1a0 [ 49.541517][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 49.546700][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 49.552138][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 49.557577][ C0] do_syscall_64+0x58/0xa0 [ 49.561981][ C0] ? clear_bhb_loop+0x30/0x80 [ 49.566674][ C0] ? clear_bhb_loop+0x30/0x80 [ 49.571335][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 49.577304][ C0] RIP: 0033:0x7f7ef9d9c799 [ 49.581699][ C0] Code: Unable to access opcode bytes at 0x7f7ef9d9c76f. [ 49.588697][ C0] RSP: 002b:00007f7efabe50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 49.597093][ C0] RAX: fffffffffffffe00 RBX: 00007f7efa015fa8 RCX: 00007f7ef9d9c799 [ 49.605060][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7efa015fa8 [ 49.613011][ C0] RBP: 00007f7efa015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 49.620962][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.628910][ C0] R13: 00007f7efa016038 R14: 00007ffd74286ff0 R15: 00007ffd742870d8 [ 49.636872][ C0] [ 49.639877][ C0] Modules linked in: [ 49.643832][ C0] ---[ end trace 0000000000000000 ]--- [ 49.649261][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 49.654545][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 48 46 29 00 4c 89 ff e8 60 70 b8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 9c 78 6e 00 49 8b 7d 00 e8 f3 6b [ 49.674225][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 49.680299][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88811b3e8000 [ 49.688258][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 49.696211][ C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: fffffffffffffffb [ 49.704171][ C0] R10: dffffc0000000000 R11: ffffed10260f2939 R12: dffffc0000000000 [ 49.712149][ C0] R13: 0000000000000000 R14: ffff8881307949c8 R15: 0000000000000008 [ 49.720190][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 49.729104][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.735670][ C0] CR2: 0000001b2f316ff8 CR3: 000000013fc0a000 CR4: 00000000003506b0 [ 49.743626][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.751579][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.759540][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 49.767097][ C0] Kernel Offset: disabled [ 49.771402][ C0] Rebooting in 86400 seconds..