last executing test programs: 9.014694988s ago: executing program 3 (id=66): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000200850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 8.85689694s ago: executing program 3 (id=74): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000007000000080100000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 8.828022451s ago: executing program 3 (id=77): unshare(0x62040200) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x7003, [0x0, 0x9, 0x0, 0xfd4, 0x20000]}, &(0x7f0000000080)=0x54) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000380)={0x2, 0x4e24, @empty}, 0x10, 0x0}, 0x0) 8.705177912s ago: executing program 3 (id=83): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322024, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) 8.539601025s ago: executing program 3 (id=91): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000004c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@sb={'sb', 0x3d, 0x50cf}}, {@orlov}, {@norecovery}, {@barrier}, {@data_journal}]}, 0x66, 0x50a, &(0x7f0000000200)="$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") getdents(r0, 0x0, 0x0) 8.248602419s ago: executing program 3 (id=99): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000090000880"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 8.248467479s ago: executing program 32 (id=99): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000090000880"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 4.78949758s ago: executing program 1 (id=144): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f0000000280)={[{@usrquota}, {}, {@nobh}, {@grpjquota}, {@dioread_nolock}]}, 0x1, 0x3eb, &(0x7f0000000880)="$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") chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) 4.701060091s ago: executing program 1 (id=145): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 4.661786151s ago: executing program 1 (id=146): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e06bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488a0200000000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e4a59414329a7c7f2fad6bc871f5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561fe589e0d12969bc982ff3f0000006c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256a55591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ee40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a3dc4e97f7fda840bcdd3afaa0d7c3c229de4f0f4ac4d04f1a4e52e38325ca2e5f1f9caaa7234053eca09ec3c8c16940bc3edfb2e016f355391c0e7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x18, @multicast1}, {0x0, 0xe22, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x4}}}}}}, 0x0) 4.644608892s ago: executing program 0 (id=147): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 4.628730562s ago: executing program 1 (id=149): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000080)={[{@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@noinit_itable}, {@jqfmt_vfsv0}]}, 0x80, 0x63c, &(0x7f0000001bc0)="$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") open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) getdents64(r1, &(0x7f0000000080)=""/234, 0xea) 4.580821883s ago: executing program 0 (id=150): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000140)={0x2af, 0x4000, 0x3, 0xdedb, 0x6, "00000004f79cefe0"}) 4.495002124s ago: executing program 0 (id=153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000180)="c4e1fd2f0fb9fcfa0000b1b101d9660f78c4020a0f1bd9b805000000b90000c0fe0fae41d90100f2650f32b87f7f88264141000000000f30660fc775022e0fba600c980f320f35e6b957000f00d0", 0x4e}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000100)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.351171486s ago: executing program 0 (id=156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}], 0x1}, 0x0) 4.287016127s ago: executing program 0 (id=157): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e40)={0x34, &(0x7f0000000c00)={0x40, 0x15, 0x4, "00147800"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x20, 0x14, 0x4, "5c51a667"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.171403379s ago: executing program 1 (id=160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x3}) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0x79}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x8080000, 0x2000, 0xe599, 0x1, 0x7fff}) 4.170997409s ago: executing program 4 (id=162): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 4.134366999s ago: executing program 4 (id=164): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) splice(r1, 0x0, r3, 0x0, 0x10500, 0x0) write$cgroup_devices(r2, 0x0, 0xffdd) 4.0950209s ago: executing program 1 (id=165): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) 3.731551025s ago: executing program 2 (id=171): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000080)="76000000000f0018f12dcab999eb71", 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.631085486s ago: executing program 2 (id=176): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0xe0) 3.452934929s ago: executing program 5 (id=179): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_lock}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@sysvgroups}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x583, &(0x7f0000001080)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 3.312019401s ago: executing program 5 (id=180): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000fc0)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 3.290015732s ago: executing program 4 (id=181): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioprio_set$pid(0x2, 0x0, 0x6000) 3.238821492s ago: executing program 4 (id=182): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/27, 0x1b}], 0x1}, 0x5a2}], 0x1, 0x102, 0x0) sendto$inet(r0, &(0x7f0000000380)="d70f00c1", 0x4, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) 3.217079073s ago: executing program 4 (id=183): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREAD(r3, 0x0, 0xf) splice(r2, 0x0, r1, 0x0, 0xfffffffffffffffd, 0x0) write$binfmt_misc(r1, &(0x7f0000000e00)="32ef1b0f2bcab97d8dbc26dfc5ba03c9518a45b5c10e5de1bcc9a3920f20ce9a413c48bfcd2c5d5e910aab845ac967f7a74284eb216cc5ffe9db7306518aead6d1c07f0e7af682b73efce8b2432d493a0daaaab44a67ebe9792ed65dbd05df9eecfe80d81100000000", 0xffffff36) splice(r0, 0x0, r3, 0x0, 0x800, 0x6) 2.787351379s ago: executing program 2 (id=184): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) close(r1) 2.72283274s ago: executing program 2 (id=185): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r3, 0x7, r1, &(0x7f0000000100)={r2, 0xffffffffffffffff, 0x7}) 2.72236396s ago: executing program 2 (id=186): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001740)={0x2c, 0x0, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x3}, 0x0, &(0x7f00000015c0)={0x20, 0x1, 0x48, "ed85a064637badcba6f052501f7a3d466d7a676844670869ac916140b6af3b9f45ed680b441ba00f48f9bafb084541014a78338d2cdf59c4d4c90b4e3321729480f79a68c0200cb0"}, 0x0}) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, 0x0) 2.404504874s ago: executing program 5 (id=187): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) sendmsg$tipc(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040804}, 0x20000000) close(r1) 2.27687ms ago: executing program 2 (id=201): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount(0x0, &(0x7f0000002040)='./file0/file3\x00', 0x0, 0x200002, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xb) 0s ago: executing program 4 (id=202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1fff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. [ 22.950203][ T30] audit: type=1400 audit(1753768819.641:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.951422][ T273] cgroup: Unknown subsys name 'net' [ 22.972974][ T30] audit: type=1400 audit(1753768819.651:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.000400][ T30] audit: type=1400 audit(1753768819.671:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.000580][ T273] cgroup: Unknown subsys name 'devices' [ 23.172252][ T273] cgroup: Unknown subsys name 'hugetlb' [ 23.177996][ T273] cgroup: Unknown subsys name 'rlimit' [ 23.434035][ T30] audit: type=1400 audit(1753768820.131:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.457240][ T30] audit: type=1400 audit(1753768820.131:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.482064][ T30] audit: type=1400 audit(1753768820.131:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.487557][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.514011][ T30] audit: type=1400 audit(1753768820.211:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.539542][ T30] audit: type=1400 audit(1753768820.211:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.577348][ T30] audit: type=1400 audit(1753768820.281:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.577763][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.602840][ T30] audit: type=1400 audit(1753768820.281:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.040854][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.047997][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.055479][ T281] device bridge_slave_0 entered promiscuous mode [ 24.063351][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.070393][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.077756][ T281] device bridge_slave_1 entered promiscuous mode [ 24.174910][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.182054][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.189288][ T283] device bridge_slave_0 entered promiscuous mode [ 24.197396][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.204468][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.211819][ T283] device bridge_slave_1 entered promiscuous mode [ 24.251782][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.258819][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.266209][ T282] device bridge_slave_0 entered promiscuous mode [ 24.281682][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.288710][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.296077][ T282] device bridge_slave_1 entered promiscuous mode [ 24.326941][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.333987][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.341451][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.348459][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.371173][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.378209][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.385752][ T285] device bridge_slave_0 entered promiscuous mode [ 24.403922][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.411032][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.418278][ T285] device bridge_slave_1 entered promiscuous mode [ 24.449350][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.456660][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.464133][ T284] device bridge_slave_0 entered promiscuous mode [ 24.472219][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.479325][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.486691][ T284] device bridge_slave_1 entered promiscuous mode [ 24.579097][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.586168][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.593471][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.600498][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.623544][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.630964][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.638398][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.645841][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.654356][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.661911][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.692465][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.700082][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.708384][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.715418][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.722893][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.731087][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.738096][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.745563][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.753530][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.761605][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.769817][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.776862][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.784225][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.792447][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.799454][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.823278][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.832242][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.840631][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.848700][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.856990][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.864034][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.871857][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.879937][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.886965][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.894373][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.914920][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.928205][ T283] device veth0_vlan entered promiscuous mode [ 24.935373][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.943995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.951648][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.959053][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.967682][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.988193][ T281] device veth0_vlan entered promiscuous mode [ 24.998831][ T282] device veth0_vlan entered promiscuous mode [ 25.011781][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.020722][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.028618][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.036108][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.044060][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.052531][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.060815][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.068165][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.075922][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.089876][ T281] device veth1_macvtap entered promiscuous mode [ 25.100969][ T283] device veth1_macvtap entered promiscuous mode [ 25.109084][ T282] device veth1_macvtap entered promiscuous mode [ 25.115963][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.124189][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.132979][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.140639][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.148663][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.156815][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.164998][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.172570][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.181432][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.189672][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.198426][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.206886][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.215097][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.222111][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.243200][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.250891][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.259094][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.267635][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.275167][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.282911][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.291436][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.299629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.308139][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.316326][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.323346][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.330804][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.339127][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.347298][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.354312][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.361754][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.369889][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.378364][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.386749][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.394987][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.402027][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.409580][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.424051][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.432439][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.441649][ T282] request_module fs-gadgetfs succeeded, but still no fs? [ 25.442078][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.457820][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.480625][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.488718][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.497277][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.506369][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.519764][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.527990][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.536118][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.544271][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.563332][ T285] device veth0_vlan entered promiscuous mode [ 25.582980][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.591585][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.600081][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.608872][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.617627][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.626328][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.643313][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.651526][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.662935][ T284] device veth0_vlan entered promiscuous mode [ 25.672012][ T285] device veth1_macvtap entered promiscuous mode [ 25.702771][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.722479][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.730962][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.745375][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.753851][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.761745][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.770110][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.788343][ T284] device veth1_macvtap entered promiscuous mode [ 25.796081][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.804970][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.812694][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.821072][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.829406][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.862899][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.872539][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.882023][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.890546][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.177316][ T381] SELinux: failed to load policy [ 26.222547][ T390] loop3: detected capacity change from 0 to 512 [ 26.235178][ T390] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 26.249400][ T390] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 26.264660][ T390] EXT4-fs (loop3): 1 truncate cleaned up [ 26.270501][ T390] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000040,stripe=0x0000000000004000,errors=remount-ro,minixdf,. Quota mode: none. [ 26.311649][ T390] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.24: corrupted in-inode xattr [ 26.324098][ T390] EXT4-fs (loop3): Remounting filesystem read-only [ 26.331407][ T390] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1760: inode #15: comm syz.3.24: unable to update i_inline_off [ 26.344176][ T390] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 26.360835][ T390] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.24: corrupted in-inode xattr [ 26.373011][ T390] EXT4-fs (loop3): Remounting filesystem read-only [ 26.374186][ T397] syz.0.26 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 26.470475][ T411] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.535753][ T416] netlink: 80 bytes leftover after parsing attributes in process `syz.2.35'. [ 26.740479][ T440] loop2: detected capacity change from 0 to 512 [ 26.805345][ T440] EXT4-fs (loop2): 1 orphan inode deleted [ 26.816274][ T440] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 26.830762][ T440] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.069977][ T480] loop3: detected capacity change from 0 to 256 [ 27.078642][ T480] ======================================================= [ 27.078642][ T480] WARNING: The mand mount option has been deprecated and [ 27.078642][ T480] and is ignored by this kernel. Remove the mand [ 27.078642][ T480] option from the mount to silence this warning. [ 27.078642][ T480] ======================================================= [ 27.117157][ T480] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 27.255685][ T488] syz.3.66 (488) used greatest stack depth: 22304 bytes left [ 27.350285][ T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 27.442618][ T520] binder: 519:520 ioctl c018620c 200000000180 returned -22 [ 27.467698][ T524] loop3: detected capacity change from 0 to 512 [ 27.476689][ T522] SELinux: failed to load policy [ 27.519281][ T524] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 27.538200][ T524] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 27.558722][ T536] sch_fq: defrate 0 ignored. [ 27.580827][ T539] loop1: detected capacity change from 0 to 2048 [ 27.586707][ T524] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 32: comm syz.3.83: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 27.610286][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 27.623126][ T285] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 27.653331][ T285] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 27.675022][ T539] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.760304][ T6] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.790459][ T6] usb 5-1: config 0 interface 0 has no altsetting 0 [ 27.799437][ T6] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 27.806295][ T558] loop0: detected capacity change from 0 to 512 [ 27.810480][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.823860][ T6] usb 5-1: config 0 descriptor?? [ 27.841998][ T549] loop2: detected capacity change from 0 to 32768 [ 27.846396][ T560] loop1: detected capacity change from 0 to 512 [ 27.856862][ T285] syz-executor (285) used greatest stack depth: 21792 bytes left [ 27.872226][ T558] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 27.885703][ T549] loop2: p1 p3 < > [ 27.888276][ T558] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 27.904171][ T558] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.97: iget: bad i_size value: 2533274857506816 [ 27.917835][ T558] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.97: iget: bad i_size value: 2533274857506816 [ 27.931399][ T558] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.97: iget: bad i_size value: 2533274857506816 [ 27.956577][ T558] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.97: iget: bad i_size value: 2533274857506816 [ 27.970390][ T101] loop2: p1 p3 < > [ 27.974243][ T30] kauditd_printk_skb: 143 callbacks suppressed [ 27.974255][ T30] audit: type=1400 audit(1753768824.671:217): avc: denied { mounton } for pid=548 comm="syz.2.93" path="/proc/35/task" dev="proc" ino=16934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 27.987466][ T560] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 28.014845][ T560] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.059026][ T30] audit: type=1400 audit(1753768824.751:218): avc: denied { ioctl } for pid=559 comm="syz.1.98" path="/10/file0/file1" dev="loop1" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 28.084022][ T564] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.094058][ T564] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.117835][ T334] udevd[334]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 28.128752][ T531] udevd[531]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 28.138632][ T564] device bridge_slave_0 entered promiscuous mode [ 28.146962][ T564] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.154250][ T564] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.163806][ T564] device bridge_slave_1 entered promiscuous mode [ 28.164128][ T30] audit: type=1400 audit(1753768824.861:219): avc: denied { append } for pid=575 comm="syz.1.102" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.182791][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.193840][ T6] usbhid 5-1:0.0: can't add hid device: -71 [ 28.200305][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.214664][ T6] usbhid: probe of 5-1:0.0 failed with error -71 [ 28.226234][ T579] loop2: detected capacity change from 0 to 512 [ 28.227690][ T6] usb 5-1: USB disconnect, device number 2 [ 28.232973][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.240133][ T30] audit: type=1400 audit(1753768824.871:220): avc: denied { read write } for pid=577 comm="syz.0.103" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 28.255902][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.270379][ T30] audit: type=1400 audit(1753768824.871:221): avc: denied { open } for pid=577 comm="syz.0.103" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 28.292568][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.316100][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.331037][ T579] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 28.340222][ T30] audit: type=1400 audit(1753768824.911:222): avc: denied { write } for pid=577 comm="syz.0.103" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 28.342893][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.364402][ T30] audit: type=1400 audit(1753768824.911:223): avc: denied { open } for pid=577 comm="syz.0.103" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 28.373327][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.396405][ T30] audit: type=1400 audit(1753768825.011:224): avc: denied { ioctl } for pid=577 comm="syz.0.103" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x330e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 28.409227][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.427753][ T30] audit: type=1400 audit(1753768825.031:225): avc: denied { mounton } for pid=573 comm="syz.2.101" path="/17/bus" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.435190][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.467455][ T579] EXT4-fs (loop2): 1 truncate cleaned up [ 28.473882][ T579] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,lazytime,journal_path=./bus,bsdgroups,lazytime,noload,,errors=continue. Quota mode: none. [ 28.477583][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.503187][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.513679][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.521118][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.528509][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.536120][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.543561][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.551081][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.558600][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.566762][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.574291][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.582314][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.589727][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.597512][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.605109][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.612872][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.620510][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.620802][ T30] audit: type=1326 audit(1753768825.321:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=587 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d74bff9a9 code=0x7ffc0000 [ 28.655784][ T564] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.662952][ T564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.670270][ T564] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.677383][ T564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.683578][ T598] loop1: detected capacity change from 0 to 512 [ 28.684742][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.710925][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.718356][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.728621][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.730438][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.743538][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.743714][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.751160][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.759606][ T598] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 28.765497][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.784161][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.791576][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.798959][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.800316][ T598] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 28.806542][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.824279][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.824323][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.831695][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.846099][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.853549][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.860977][ T454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.871189][ T454] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 28.881539][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.898192][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.905266][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.922413][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.970897][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.977978][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.998879][ T356] udevd[356]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 29.011393][ T531] udevd[531]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 29.058405][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.074416][ T605] fido_id[605]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 29.106014][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.158261][ T612] device wireguard0 entered promiscuous mode [ 29.175022][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.186843][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.204502][ T564] device veth0_vlan entered promiscuous mode [ 29.211911][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.220093][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.234423][ T564] device veth1_macvtap entered promiscuous mode [ 29.242603][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.250731][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.258553][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.267607][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.276384][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.309519][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.324419][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.343415][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.356829][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.434407][ T619] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 29.453489][ T619] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 29.516690][ T633] loop2: detected capacity change from 0 to 2048 [ 29.520244][ T611] loop1: detected capacity change from 0 to 40427 [ 29.548008][ T637] loop0: detected capacity change from 0 to 512 [ 30.258951][ T611] F2FS-fs (loop1): invalid crc value [ 30.275400][ T611] F2FS-fs (loop1): Found nat_bits in checkpoint [ 30.282694][ T633] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 30.325773][ T633] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 30.343409][ T633] EXT4-fs (loop2): Remounting filesystem read-only [ 30.351793][ T611] F2FS-fs (loop1): Start checkpoint disabled! [ 30.356167][ T637] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,mb_optimize_scan=0x0000000000000000,stripe=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 30.381154][ T652] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 30.393440][ T611] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 30.401739][ T332] device bridge_slave_1 left promiscuous mode [ 30.407888][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.417004][ T652] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 30.460612][ T332] device bridge_slave_0 left promiscuous mode [ 30.485553][ T654] loop2: detected capacity change from 0 to 512 [ 30.497756][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.505171][ T637] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.517315][ T332] device veth1_macvtap left promiscuous mode [ 30.539342][ T332] device veth0_vlan left promiscuous mode [ 30.567404][ T654] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 30.601036][ T654] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.710932][ T45] attempt to access beyond end of device [ 30.710932][ T45] loop1: rw=1, want=45104, limit=40427 [ 30.724613][ T45] attempt to access beyond end of device [ 30.724613][ T45] loop1: rw=2049, want=45112, limit=40427 [ 30.920256][ T391] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 31.070028][ T693] loop1: detected capacity change from 0 to 40427 [ 31.088133][ T693] F2FS-fs (loop1): invalid crc value [ 31.096272][ T693] F2FS-fs (loop1): Found nat_bits in checkpoint [ 31.129821][ T693] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 31.170233][ T391] usb 6-1: Using ep0 maxpacket: 16 [ 31.183473][ T284] attempt to access beyond end of device [ 31.183473][ T284] loop1: rw=2049, want=45104, limit=40427 [ 31.310487][ T391] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 31.322476][ T391] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 31.332188][ T391] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 31.350303][ T391] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 31.360044][ T391] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 31.380579][ T391] usb 6-1: config 1 interface 0 has no altsetting 0 [ 31.385469][ T720] loop1: detected capacity change from 0 to 512 [ 31.387203][ T391] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 31.402635][ T391] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.412974][ T720] EXT4-fs (loop1): Ignoring removed nobh option [ 31.421077][ T720] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,grpjquota=,dioread_nolock,,errors=continue. Quota mode: writeback. [ 31.450773][ T391] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 31.538936][ T730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.147'. [ 31.553422][ T732] netlink: 44 bytes leftover after parsing attributes in process `syz.2.148'. [ 31.560260][ T734] loop1: detected capacity change from 0 to 1024 [ 31.571325][ T734] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 31.589628][ T734] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 31.600220][ T734] EXT4-fs (loop1): orphan cleanup on readonly fs [ 31.606685][ T734] EXT4-fs error (device loop1): ext4_free_blocks:6223: comm syz.1.149: Freeing blocks not in datazone - block = 0, count = 4096 [ 31.621042][ T734] EXT4-fs (loop1): Remounting filesystem read-only [ 31.627947][ T734] EXT4-fs (loop1): 1 orphan inode deleted [ 31.633765][ T734] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,barrier=0x0000000000000004,barrier=0x0000000000000009,noinit_itable,jqfmt=vfsv0,. Quota mode: writeback. [ 31.658435][ T734] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.149: iget: bad i_size value: 1970324836974602 [ 31.671026][ T391] scsi host1: usb-storage 6-1:1.0 [ 31.672826][ T734] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz.1.149: path /24/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 31.696462][ T734] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 17: comm syz.1.149: path /24/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 31.726929][ T734] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 18: comm syz.1.149: path /24/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 31.767678][ T734] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 19: comm syz.1.149: path /24/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 31.808911][ T734] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 20: comm syz.1.149: path /24/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 31.838993][ T734] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 21: comm syz.1.149: path /24/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 31.883044][ T734] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 22: comm syz.1.149: path /24/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 31.889980][ T60] usb 6-1: USB disconnect, device number 2 [ 31.917551][ T734] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 23: comm syz.1.149: path /24/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 32.040058][ T772] loop2: detected capacity change from 0 to 512 [ 32.087645][ T772] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 32.104082][ T772] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.180272][ T454] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.188442][ T789] process 'syz.2.168' launched '/dev/fd/3' with NULL argv: empty string added [ 32.303764][ T793] loop2: detected capacity change from 0 to 40427 [ 32.355437][ T793] F2FS-fs (loop2): Found nat_bits in checkpoint [ 32.379662][ T793] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 32.405652][ T45] attempt to access beyond end of device [ 32.405652][ T45] loop2: rw=2049, want=45104, limit=40427 [ 32.420297][ T454] usb 1-1: Using ep0 maxpacket: 32 [ 32.540308][ T454] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 32.548589][ T454] usb 1-1: config 0 has no interface number 0 [ 32.554991][ T454] usb 1-1: config 0 interface 184 has no altsetting 0 [ 32.586375][ T813] loop5: detected capacity change from 0 to 2048 [ 32.681467][ T813] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 32.693754][ T813] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.178: bg 0: block 120: padding at end of block bitmap is not set [ 32.720323][ T454] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 32.729721][ T454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.745607][ T454] usb 1-1: Product: syz [ 32.749968][ T454] usb 1-1: Manufacturer: syz [ 32.754977][ T454] usb 1-1: SerialNumber: syz [ 32.755030][ T818] loop5: detected capacity change from 0 to 1024 [ 32.760418][ T454] usb 1-1: config 0 descriptor?? [ 32.791197][ T818] EXT4-fs (loop5): Ignoring removed bh option [ 32.797365][ T818] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.810633][ T454] smsc75xx v1.0.0 [ 32.811686][ T818] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 33.690214][ T60] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 34.040271][ T42] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 34.050304][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.061281][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.071015][ T60] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 34.083992][ T60] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 34.093036][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.100485][ T391] Bluetooth: hci0: command 0x1003 tx timeout [ 34.101881][ T60] usb 3-1: config 0 descriptor?? [ 34.108513][ T781] Bluetooth: hci0: sending frame failed (-49) [ 34.120277][ T454] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 34.131158][ T454] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 34.160448][ T454] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 34.171281][ T454] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 34.180949][ T454] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 34.191243][ T454] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 34.200729][ T454] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 34.209632][ T454] usb 1-1: USB disconnect, device number 2 [ 34.280295][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 34.400434][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.411628][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.421559][ T42] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 34.430639][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.439374][ T42] usb 6-1: config 0 descriptor?? [ 34.481021][ T42] hub 6-1:0.0: USB hub found [ 34.591375][ T60] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 34.600766][ T60] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 34.780306][ T42] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 35.221291][ T42] hid-generic 0003:046D:C31C.0003: item fetching failed at offset 0/1 [ 35.229657][ T42] hid-generic: probe of 0003:046D:C31C.0003 failed with error -22 [ 35.260307][ C0] plantronics 0003:047F:FFFF.0002: hid_field_extract() called with n (132) > 32! (swapper/0) [ 35.461217][ T391] usb 3-1: USB disconnect, device number 2 [ 35.540299][ T42] usb 6-1: USB disconnect, device number 3 [ 35.942909][ T848] loop5: detected capacity change from 0 to 1024 [ 36.010950][ T848] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.031704][ T848] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 36.068348][ T848] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3876: comm syz.5.189: Allocating blocks 497-513 which overlap fs metadata [ 36.082420][ T848] EXT4-fs (loop5): pa ffff8881119b0dc8: logic 128, phys. 385, len 8 [ 36.090431][ T848] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 36.107517][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 36.107529][ T30] audit: type=1400 audit(1753768832.801:299): avc: denied { append } for pid=846 comm="syz.5.189" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.137277][ T30] audit: type=1400 audit(1753768832.831:300): avc: denied { setattr } for pid=846 comm="syz.5.189" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.160319][ T45] ================================================================== [ 36.168392][ T45] BUG: KASAN: use-after-free in ext4_find_extent+0xbeb/0xe20 [ 36.170212][ T307] Bluetooth: hci0: command 0x1001 tx timeout [ 36.175781][ T45] Read of size 4 at addr ffff88812e8b5018 by task kworker/u4:2/45 [ 36.175797][ T45] [ 36.175809][ T45] CPU: 1 PID: 45 Comm: kworker/u4:2 Not tainted 5.15.189-syzkaller-00079-ga71626bd56a5 #0 [ 36.182359][ T781] Bluetooth: hci0: sending frame failed (-49) [ 36.189554][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 36.217845][ T45] Workqueue: writeback wb_workfn (flush-7:5) [ 36.223833][ T45] Call Trace: [ 36.227100][ T45] [ 36.230011][ T45] __dump_stack+0x21/0x30 [ 36.234329][ T45] dump_stack_lvl+0xee/0x150 [ 36.238922][ T45] ? show_regs_print_info+0x20/0x20 [ 36.244109][ T45] ? load_image+0x3a0/0x3a0 [ 36.248604][ T45] print_address_description+0x7f/0x2c0 [ 36.254133][ T45] ? ext4_find_extent+0xbeb/0xe20 [ 36.259139][ T45] kasan_report+0xf1/0x140 [ 36.263552][ T45] ? __read_extent_tree_block+0x1e8/0x790 [ 36.269254][ T45] ? ext4_find_extent+0xbeb/0xe20 [ 36.274271][ T45] __asan_report_load4_noabort+0x14/0x20 [ 36.279888][ T45] ext4_find_extent+0xbeb/0xe20 [ 36.284720][ T45] ext4_ext_map_blocks+0x1de/0x6280 [ 36.289996][ T45] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 36.295785][ T45] ? __stack_depot_save+0x442/0x480 [ 36.300977][ T45] ? __kasan_slab_alloc+0xcf/0xf0 [ 36.305985][ T45] ? __kasan_slab_alloc+0xbd/0xf0 [ 36.310987][ T45] ? slab_post_alloc_hook+0x4f/0x2b0 [ 36.316261][ T45] ? kmem_cache_alloc+0xf7/0x260 [ 36.321176][ T45] ? ext4_alloc_io_end_vec+0x2a/0x160 [ 36.326526][ T45] ? ext4_writepages+0xec8/0x2f90 [ 36.331552][ T45] ? do_writepages+0x48a/0x6c0 [ 36.336394][ T45] ? wb_workfn+0x38f/0xe20 [ 36.340798][ T45] ? process_one_work+0x6be/0xba0 [ 36.345814][ T45] ? worker_thread+0xa59/0x1200 [ 36.350646][ T45] ? ext4_ext_release+0x10/0x10 [ 36.355480][ T45] ? ext4_es_lookup_extent+0x32d/0x8c0 [ 36.360917][ T45] ext4_map_blocks+0x97b/0x1b20 [ 36.365748][ T45] ? slab_post_alloc_hook+0x6d/0x2b0 [ 36.371013][ T45] ? should_failslab+0x9/0x20 [ 36.375685][ T45] ? ext4_issue_zeroout+0x250/0x250 [ 36.380864][ T45] ? ext4_inode_journal_mode+0x19a/0x480 [ 36.386479][ T45] ext4_writepages+0x11e7/0x2f90 [ 36.391399][ T45] ? __kasan_check_read+0x11/0x20 [ 36.396404][ T45] ? mark_page_accessed+0x3b6/0x8d0 [ 36.401590][ T45] ? __activate_page+0xd40/0xd40 [ 36.406507][ T45] ? ext4_readpage+0x220/0x220 [ 36.411247][ T45] ? update_curr+0x2f3/0x5b0 [ 36.415825][ T45] ? blk_finish_plug+0x4c/0x80 [ 36.420573][ T45] ? memcpy+0x56/0x70 [ 36.424536][ T45] ? copy_page_from_iter_atomic+0x784/0x1350 [ 36.430499][ T45] ? xas_load+0x2ea/0x300 [ 36.434811][ T45] ? ext4_readpage+0x220/0x220 [ 36.439559][ T45] do_writepages+0x48a/0x6c0 [ 36.444136][ T45] ? update_curr+0x2f3/0x5b0 [ 36.448709][ T45] ? __writepage+0x130/0x130 [ 36.453280][ T45] ? enqueue_task_fair+0xaa7/0x2120 [ 36.458474][ T45] ? __kasan_check_write+0x14/0x20 [ 36.463564][ T45] ? _raw_spin_lock+0x8e/0xe0 [ 36.468223][ T45] __writeback_single_inode+0xd5/0x9c0 [ 36.473667][ T45] ? wbc_attach_and_unlock_inode+0x194/0x5f0 [ 36.479630][ T45] writeback_sb_inodes+0x9c0/0x1590 [ 36.484843][ T45] ? psi_task_change+0x212/0x370 [ 36.489770][ T45] ? tracing_record_taskinfo+0x7c/0x220 [ 36.495305][ T45] ? queue_io+0x4c0/0x4c0 [ 36.499617][ T45] ? __kasan_check_read+0x11/0x20 [ 36.504623][ T45] ? queue_io+0x382/0x4c0 [ 36.508933][ T45] wb_writeback+0x3f1/0x980 [ 36.513506][ T45] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 36.519471][ T45] ? set_worker_desc+0x155/0x1c0 [ 36.524414][ T45] ? __kasan_check_write+0x14/0x20 [ 36.529686][ T45] wb_workfn+0x38f/0xe20 [ 36.533923][ T45] ? inode_wait_for_writeback+0x200/0x200 [ 36.539626][ T45] ? compat_start_thread+0x20/0x20 [ 36.544720][ T45] ? _raw_spin_unlock+0x4d/0x70 [ 36.549598][ T45] ? finish_task_switch+0x16b/0x780 [ 36.554894][ T45] ? __switch_to_asm+0x3a/0x60 [ 36.559662][ T45] ? __schedule+0xb76/0x14c0 [ 36.564243][ T45] process_one_work+0x6be/0xba0 [ 36.569097][ T45] worker_thread+0xa59/0x1200 [ 36.573777][ T45] kthread+0x411/0x500 [ 36.577831][ T45] ? worker_clr_flags+0x190/0x190 [ 36.582844][ T45] ? kthread_blkcg+0xd0/0xd0 [ 36.587434][ T45] ret_from_fork+0x1f/0x30 [ 36.591923][ T45] [ 36.594926][ T45] [ 36.597231][ T45] The buggy address belongs to the page: [ 36.602840][ T45] page:ffffea0004ba2d40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12e8b5 [ 36.613165][ T45] flags: 0x4000000000000000(zone=1) [ 36.618356][ T45] raw: 4000000000000000 0000000000000000 ffffffff04ba0201 0000000000000000 [ 36.626930][ T45] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 36.635495][ T45] page dumped because: kasan: bad access detected [ 36.641892][ T45] page_owner tracks the page as freed [ 36.647238][ T45] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 635, ts 29903862384, free_ts 35974120666 [ 36.667020][ T45] post_alloc_hook+0x192/0x1b0 [ 36.671769][ T45] prep_new_page+0x1c/0x110 [ 36.676271][ T45] get_page_from_freelist+0x2cc5/0x2d50 [ 36.681797][ T45] __alloc_pages+0x18f/0x440 [ 36.686367][ T45] new_slab+0xa1/0x4d0 [ 36.690423][ T45] ___slab_alloc+0x381/0x810 [ 36.694997][ T45] __slab_alloc+0x49/0x90 [ 36.699308][ T45] __kmalloc_track_caller+0x169/0x2c0 [ 36.704663][ T45] pskb_expand_head+0x11b/0x11d0 [ 36.709597][ T45] skb_ensure_writable+0x2e7/0x460 [ 36.714775][ T45] bpf_clone_redirect+0x10b/0x380 [ 36.719803][ T45] bpf_prog_1aaa155e944a1304+0xa41/0xaa0 [ 36.725513][ T45] bpf_test_run+0x33d/0x8d0 [ 36.729995][ T45] bpf_prog_test_run_skb+0x9ec/0x1150 [ 36.735361][ T45] bpf_prog_test_run+0x3d5/0x620 [ 36.740284][ T45] __sys_bpf+0x52c/0x730 [ 36.744508][ T45] page last free stack trace: [ 36.749245][ T45] free_unref_page_prepare+0x542/0x550 [ 36.754683][ T45] free_unref_page+0xa2/0x550 [ 36.759346][ T45] __free_pages+0x6c/0x100 [ 36.763741][ T45] __free_slab+0xe8/0x1e0 [ 36.768054][ T45] __unfreeze_partials+0x160/0x190 [ 36.773141][ T45] put_cpu_partial+0xc6/0x120 [ 36.777807][ T45] __slab_free+0x1d4/0x290 [ 36.782210][ T45] ___cache_free+0x104/0x120 [ 36.786781][ T45] qlink_free+0x4d/0x90 [ 36.790917][ T45] qlist_free_all+0x5f/0xb0 [ 36.795400][ T45] kasan_quarantine_reduce+0x14a/0x170 [ 36.800838][ T45] __kasan_slab_alloc+0x2f/0xf0 [ 36.805759][ T45] slab_post_alloc_hook+0x4f/0x2b0 [ 36.810871][ T45] kmem_cache_alloc_trace+0xfb/0x270 [ 36.816225][ T45] __get_vm_area_node+0x11d/0x350 [ 36.821240][ T45] __vmalloc_node_range+0xe8/0x840 [ 36.826339][ T45] [ 36.828642][ T45] Memory state around the buggy address: [ 36.834252][ T45] ffff88812e8b4f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 36.842289][ T45] ffff88812e8b4f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 36.850333][ T45] >ffff88812e8b5000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 36.858363][ T45] ^ [ 36.863185][ T45] ffff88812e8b5080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 36.871378][ T45] ffff88812e8b5100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 36.879426][ T45] ================================================================== [ 36.887460][ T45] Disabling lock debugging due to kernel taint [ 36.895264][ T45] ------------[ cut here ]------------ [ 36.901361][ T45] kernel BUG at fs/ext4/inode.c:2433! [ 36.906775][ T30] audit: type=1400 audit(1753768833.601:301): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 36.928810][ T45] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 36.934888][ T45] CPU: 1 PID: 45 Comm: kworker/u4:2 Tainted: G B 5.15.189-syzkaller-00079-ga71626bd56a5 #0 [ 36.944106][ T30] audit: type=1400 audit(1753768833.601:302): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.946157][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 36.946169][ T45] Workqueue: writeback wb_workfn [ 36.971473][ T30] audit: type=1400 audit(1753768833.601:303): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.977624][ T45] (flush-7:5) [ 36.982667][ T30] audit: type=1400 audit(1753768833.601:304): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.003676][ T45] RIP: 0010:ext4_writepages+0x2eed/0x2f90 [ 37.003704][ T45] Code: 00 74 08 48 89 df e8 22 01 ce ff 48 8b 3b 48 8b 74 24 28 48 8b 54 24 30 44 89 e9 45 89 f0 e8 6a 9b 07 00 eb 51 e8 a3 88 8f ff <0f> 0b e8 9c 88 8f ff eb 2f e8 95 88 8f ff eb 5f e8 8e 88 8f ff 31 [ 37.003717][ T45] RSP: 0018:ffffc900002ef100 EFLAGS: 00010293 [ 37.007150][ T30] audit: type=1400 audit(1753768833.601:305): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.027599][ T45] [ 37.027604][ T45] RAX: ffffffff81d9272d RBX: ffff8881119fbbc8 RCX: ffff888108782780 [ 37.027616][ T45] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.027624][ T45] RBP: ffffc900002ef470 R08: dffffc0000000000 R09: ffffed102233f772 [ 37.027635][ T45] R10: ffffed102233f772 R11: 1ffff1102233f771 R12: dffffc0000000000 [ 37.027647][ T45] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 37.027656][ T45] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.033646][ T30] audit: type=1400 audit(1753768833.601:306): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.052919][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.052932][ T45] CR2: 00007f727080cd58 CR3: 0000000121441000 CR4: 00000000003506a0 [ 37.052945][ T45] DR0: 000000000000b2d1 DR1: 0010000000000000 DR2: 0001000000000004 [ 37.052956][ T45] DR3: 0000000000000002 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.052966][ T45] Call Trace: [ 37.052971][ T45] [ 37.052981][ T45] ? __kasan_check_read+0x11/0x20 [ 37.053001][ T45] ? mark_page_accessed+0x3b6/0x8d0 [ 37.071783][ T30] audit: type=1400 audit(1753768833.601:307): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.079584][ T45] ? __activate_page+0xd40/0xd40 [ 37.079606][ T45] ? ext4_readpage+0x220/0x220 [ 37.232469][ T45] ? update_curr+0x2f3/0x5b0 [ 37.237120][ T45] ? blk_finish_plug+0x4c/0x80 [ 37.241878][ T45] ? memcpy+0x56/0x70 [ 37.245843][ T45] ? copy_page_from_iter_atomic+0x784/0x1350 [ 37.251917][ T45] ? xas_load+0x2ea/0x300 [ 37.256242][ T45] ? ext4_readpage+0x220/0x220 [ 37.260989][ T45] do_writepages+0x48a/0x6c0 [ 37.265561][ T45] ? update_curr+0x2f3/0x5b0 [ 37.270133][ T45] ? __writepage+0x130/0x130 [ 37.274719][ T45] ? enqueue_task_fair+0xaa7/0x2120 [ 37.279898][ T45] ? __kasan_check_write+0x14/0x20 [ 37.284990][ T45] ? _raw_spin_lock+0x8e/0xe0 [ 37.289643][ T45] __writeback_single_inode+0xd5/0x9c0 [ 37.295082][ T45] ? wbc_attach_and_unlock_inode+0x194/0x5f0 [ 37.301303][ T45] writeback_sb_inodes+0x9c0/0x1590 [ 37.306482][ T45] ? psi_task_change+0x212/0x370 [ 37.311475][ T45] ? tracing_record_taskinfo+0x7c/0x220 [ 37.317004][ T45] ? queue_io+0x4c0/0x4c0 [ 37.321339][ T45] ? __kasan_check_read+0x11/0x20 [ 37.326360][ T45] ? queue_io+0x382/0x4c0 [ 37.330672][ T45] wb_writeback+0x3f1/0x980 [ 37.335163][ T45] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 37.341219][ T45] ? set_worker_desc+0x155/0x1c0 [ 37.346163][ T45] ? __kasan_check_write+0x14/0x20 [ 37.351273][ T45] wb_workfn+0x38f/0xe20 [ 37.355533][ T45] ? inode_wait_for_writeback+0x200/0x200 [ 37.361233][ T45] ? compat_start_thread+0x20/0x20 [ 37.366324][ T45] ? _raw_spin_unlock+0x4d/0x70 [ 37.371153][ T45] ? finish_task_switch+0x16b/0x780 [ 37.376353][ T45] ? __switch_to_asm+0x3a/0x60 [ 37.381096][ T45] ? __schedule+0xb76/0x14c0 [ 37.385741][ T45] process_one_work+0x6be/0xba0 [ 37.390576][ T45] worker_thread+0xa59/0x1200 [ 37.395237][ T45] kthread+0x411/0x500 [ 37.399286][ T45] ? worker_clr_flags+0x190/0x190 [ 37.404400][ T45] ? kthread_blkcg+0xd0/0xd0 [ 37.408992][ T45] ret_from_fork+0x1f/0x30 [ 37.413388][ T45] [ 37.416395][ T45] Modules linked in: [ 37.421497][ T45] ---[ end trace bb39660072f854ab ]--- [ 37.429097][ T45] RIP: 0010:ext4_writepages+0x2eed/0x2f90 [ 37.435383][ T45] Code: 00 74 08 48 89 df e8 22 01 ce ff 48 8b 3b 48 8b 74 24 28 48 8b 54 24 30 44 89 e9 45 89 f0 e8 6a 9b 07 00 eb 51 e8 a3 88 8f ff <0f> 0b e8 9c 88 8f ff eb 2f e8 95 88 8f ff eb 5f e8 8e 88 8f ff 31 [ 37.455335][ T45] RSP: 0018:ffffc900002ef100 EFLAGS: 00010293 [ 37.463603][ T45] RAX: ffffffff81d9272d RBX: ffff8881119fbbc8 RCX: ffff888108782780 [ 37.472202][ T45] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.480256][ T45] RBP: ffffc900002ef470 R08: dffffc0000000000 R09: ffffed102233f772 [ 37.488218][ T45] R10: ffffed102233f772 R11: 1ffff1102233f771 R12: dffffc0000000000 [ 37.496389][ T45] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 37.504529][ T45] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.513468][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.520041][ T45] CR2: 00007fa54f478178 CR3: 000000011e0ba000 CR4: 00000000003506a0 [ 37.528032][ T45] DR0: 000000000000b2d1 DR1: 0010000000000000 DR2: 0001000000000004 [ 37.536095][ T45] DR3: 0000000000000002 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.544068][ T45] Kernel panic - not syncing: Fatal exception [ 37.550338][ T45] Kernel Offset: disabled [ 37.554643][ T45] Rebooting in 86400 seconds..