last executing test programs: 25.444297294s ago: executing program 4 (id=52): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0x2000000000000033, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000646c6c2500000000002008207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a35000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) 25.416662227s ago: executing program 4 (id=53): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x2, 0x3, 0x0, 0x3, 0x1a, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x4, 0x0, 0x3, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_key={0xa, 0x8, 0x208, 0x0, "67328c217950d4ed0ce9fd283e7a39cddf91db11b8d33fe41b6225fa8075fb71275ea059e57dbe5ddb41c0ece4532edb885207438d8c8ccd0b4736f5a7f78c02c1"}]}, 0xd0}, 0x1, 0x7}, 0x14) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x400) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @multicast1}, &(0x7f0000000100)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f0000000240)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x4, 0x4, 0x33, @mcast2, @empty, 0x40, 0x7, 0xfffffff9, 0x8001}}) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=@report={0x114, 0x20, 0x802, 0x70bd2d, 0x25dfdbfd, {0xff, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast1, 0x4e23, 0x9, 0x4e24, 0x40, 0x2, 0x80, 0x0, 0x2, r2, r3}}, [@algo_auth_trunc={0x8a, 0x14, {{'sha256-ssse3\x00'}, 0x1f0, 0x180, "77b4ed7e2c434fd75472cd2381c5b48002e04ce4a3b38aba719e3244c51d357741e1dbc61bccb9d9fc497d5d992f2734bb23ed8dc2b9eb1a772fe3a1b5c3"}}, @lifetime_val={0x24, 0x9, {0x8000, 0x2, 0x1, 0x4}}, @mark={0xc, 0x15, {0x35075c, 0x4}}, @offload={0xc, 0x1c, {r4, 0x2}}]}, 0x114}, 0x1, 0x0, 0x0, 0x42}, 0x15) 25.319715977s ago: executing program 4 (id=58): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x442, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0xd000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x2710, 0x2, 0xeeee8000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x3, 0x1, 0xdddd1000, 0x1000, &(0x7f0000fe9000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 25.228688696s ago: executing program 4 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 25.196749399s ago: executing program 4 (id=63): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x10001, 0x4) 25.101292618s ago: executing program 4 (id=64): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f28bd421850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000060000000000000000000000850000009e"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 25.068038522s ago: executing program 32 (id=64): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f28bd421850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000060000000000000000000000850000009e"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) 1.780892545s ago: executing program 2 (id=580): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@minixdf}]}, 0x6, 0x4dd, &(0x7f0000001180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) 1.668653876s ago: executing program 0 (id=588): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 1.592989983s ago: executing program 0 (id=590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f32098f400f300f0826f30fc7b2050000000f32660fc775022e0ffa600c980f320f3566b857000f00d0", 0x56}], 0x1, 0x1c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)={0x1, 0x0, [{0xd, 0x8, 0x7, 0x40, 0xfa}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.272573425s ago: executing program 2 (id=594): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) r2 = socket$packet(0x11, 0xa, 0x300) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x2, 0x0) 1.22070085s ago: executing program 0 (id=597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.180226354s ago: executing program 5 (id=599): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x1a1081, 0x18) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000480)={0x20, 0xe, 0x4, "e15ff9f3"}, 0x0, 0x0, 0x0, 0x0}) 1.133016248s ago: executing program 0 (id=601): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_rm_watch(0xffffffffffffffff, 0x0) 1.132758839s ago: executing program 0 (id=603): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff09"], 0x15) r3 = dup(r2) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1.12325024s ago: executing program 3 (id=604): r0 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa1\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x88m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x5, 0x2012, r0, 0x5401000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f000045a000/0x2000)=nil, 0x2000}, 0x1}) 1.106121981s ago: executing program 0 (id=605): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@minixdf}]}, 0x6, 0x4dd, &(0x7f0000001180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) 1.083748503s ago: executing program 2 (id=606): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) 1.083291953s ago: executing program 3 (id=607): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000007c0), 0x6, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 1.001454462s ago: executing program 3 (id=608): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r2}, 0x10) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 997.945352ms ago: executing program 2 (id=609): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 937.216508ms ago: executing program 2 (id=610): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeec, 0x9031, 0xffffffffffffffff, 0xe75f0000) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0) 936.934098ms ago: executing program 3 (id=611): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0) 630.417128ms ago: executing program 5 (id=614): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) rmdir(0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0xc595b7265369681b) getdents(r0, 0xfffffffffffffffd, 0x58) 528.716849ms ago: executing program 2 (id=616): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x3}, 0x0, 0x0) 524.837318ms ago: executing program 5 (id=617): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r2, 0x1, 0x0, 0x25dfdbfd, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) 400.649331ms ago: executing program 1 (id=618): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 379.872463ms ago: executing program 5 (id=619): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x30, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @mcast2}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 379.651763ms ago: executing program 1 (id=620): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x2400c080) 340.067507ms ago: executing program 1 (id=621): getpid() r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x8, 0x1}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18011}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x2, 0x4, 0x80, {0x9, 0x0, 0x7, 0x4, 0x1, 0x401}, {0x6, 0x0, 0x401, 0x8, 0x40a, 0x961f}, 0x2, 0x3ff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2be6c61d, 0x2, 0x8, 0xd, 0x4, 0x2289, 0xca4f, 0x0, 0xc96, 0xc5f, 0x7fff, 0x80000001, 0x7, 0x1, 0x0, 0x2, 0xc07, 0x6, 0x7ff, 0x7, 0x2e644b46, 0xfffffffe, 0x8, 0x132b, 0x8, 0x7, 0x9, 0x686, 0x7b1e, 0x1, 0xfffffffd, 0xf590, 0x28, 0x6, 0xda, 0x5, 0x7fff, 0x5, 0x400, 0x4, 0x5885, 0x7, 0x0, 0xffffffff, 0x2, 0x4, 0x7, 0xf82f, 0x2, 0x400, 0x20000, 0x9, 0x8, 0x6, 0x1ff, 0x0, 0x0, 0x8, 0x3, 0x7fff, 0x1, 0x8000, 0xfffffff3, 0x10, 0x2, 0x1252, 0x2, 0x0, 0xe3ec, 0x7fff, 0x4f32, 0x82a7, 0x9, 0x9, 0x2, 0x1, 0xfffffffd, 0x200, 0x10001, 0x8, 0x4, 0x8, 0x3, 0x10000, 0xfffffffb, 0x2, 0x1, 0x8, 0x5, 0x9, 0x4, 0x6, 0x2, 0xa, 0x9, 0xecf, 0x4, 0x8, 0xe9e8, 0x7d, 0x7f, 0x7fff, 0x1, 0x1, 0x6, 0x2, 0x52, 0x200, 0x3ff, 0x1, 0x1, 0xbe2, 0x9, 0x0, 0x4, 0xe, 0x7, 0x8001, 0x0, 0xff80000, 0x8, 0x3ff, 0xfffffffb, 0xd, 0x100, 0xfffffff7, 0x4, 0x8, 0x4, 0xa, 0x10, 0x7, 0xa03b, 0xfff, 0x0, 0x0, 0x1ff, 0x7c, 0xbae, 0x0, 0xc9, 0x1, 0x6, 0x6, 0x6, 0xd, 0x4, 0x0, 0x101, 0xf, 0x9e, 0x0, 0x7, 0x81, 0xdd2c, 0x5, 0x2, 0x0, 0x9, 0x1ff, 0x9, 0x40, 0xffff7fff, 0x81, 0x7, 0x2, 0x7, 0x3, 0x7, 0x9, 0xfffffffd, 0xcb8, 0x1e, 0x4, 0x9, 0x2, 0x38, 0x8000, 0x4, 0x2, 0xcc3, 0xffffffff, 0x2, 0xed, 0x33, 0x40, 0x8, 0x5, 0x1, 0xf, 0x6, 0x1, 0x0, 0x0, 0x4, 0x6, 0xfffffffb, 0x3, 0x0, 0x4, 0x0, 0xffffffc0, 0x3, 0x3, 0x0, 0x20, 0x6, 0x1, 0x1, 0x6, 0x401, 0xff, 0x6, 0x9, 0x8, 0xfffffc63, 0xb, 0x0, 0x19, 0x6ee, 0x5, 0x4, 0x9, 0x81, 0x5, 0x6, 0x6, 0x22, 0x9, 0x2, 0xb, 0xfffffffa, 0x7f, 0xc, 0x7f, 0x81, 0x2, 0x3ff, 0x908, 0x73517d5f, 0x1, 0xc, 0xffffffff, 0x2, 0x9, 0xabc, 0xe000000, 0x9, 0xfffffe65, 0xa7f, 0x3, 0x800, 0x8, 0x20000000, 0x7, 0x81]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd, 0x0, 0x7, 0x1, 0xffd5, 0x6, 0x2, 0xe6df, 0x1bcfcb20, 0x4, 0x3a44, 0x5, 0x5, 0x5, 0x8, 0xfff, 0x8, 0x5, 0x9, 0x5, 0x9e, 0xe34, 0x101, 0x46d1, 0xf, 0x7, 0x0, 0x8, 0x5, 0x1, 0x0, 0xffffffff, 0x7, 0x7fffffff, 0x7, 0x7, 0x1, 0x1, 0x7, 0x0, 0xffffffff, 0x5, 0x10, 0x8, 0x100, 0x2, 0xff, 0x0, 0xd, 0x1000, 0x4, 0x6, 0x3, 0x1, 0xffffb6d1, 0x9, 0x5, 0x9, 0x9, 0x4, 0x1ff, 0xffffff7f, 0x5, 0x8, 0x6, 0x1ff, 0x2, 0x40, 0x0, 0x3, 0x0, 0xfffffff9, 0x1, 0x4, 0x64, 0xbbc5, 0x10, 0x9, 0x6, 0xe88, 0x252, 0x5de5, 0x1, 0x0, 0x10, 0x7, 0x7ff, 0x349, 0x6, 0x1000, 0x5, 0xffffff00, 0x20000000, 0x1, 0x10, 0xf4, 0x7ff, 0x6, 0x3, 0x105, 0x0, 0xa, 0x9, 0x1, 0xd5, 0x7fff, 0x206, 0x4, 0xff, 0xba55349, 0x400, 0xfff, 0x5, 0x2, 0xfffffffd, 0x7fff, 0x9, 0xe, 0xe7, 0x80, 0xf, 0x54b14765, 0x8001, 0x1, 0xa84d, 0x1, 0x86, 0x8, 0xed, 0x6, 0x44, 0x81, 0x0, 0x7, 0x1, 0x4, 0x80000000, 0x5, 0x9, 0x3, 0xc91, 0xffffffff, 0xfff, 0xab81, 0x2, 0x9, 0x3, 0x6, 0x200, 0xd006, 0xb5, 0x7, 0x3, 0x80, 0x2, 0x0, 0x4, 0x1, 0x3, 0x1, 0x7, 0x7, 0x3, 0xa, 0x0, 0x31c7, 0xd, 0xfffffff8, 0xd2f0, 0x9, 0x6, 0xe, 0x400, 0xd14, 0x5, 0x9, 0x4, 0x2, 0x7, 0x3, 0x259, 0x4, 0x5, 0xa419, 0xd, 0x5, 0x0, 0x8, 0x80000001, 0x9, 0x0, 0x9, 0x3, 0x7, 0xafe, 0x3, 0xd, 0x40, 0x200, 0x80000001, 0xff, 0x7, 0x4, 0x80000000, 0x7be, 0x9, 0x8, 0x8, 0x0, 0x1, 0x2be, 0x2, 0xe, 0xfff, 0x9, 0x8, 0x1, 0x100, 0x200000, 0x3, 0x6, 0x1ff, 0x9, 0x9, 0x5, 0x1, 0x1, 0x401, 0x1, 0x7, 0x80000000, 0xcd7f, 0x5e, 0x0, 0x2, 0xe, 0x80000001, 0xffffffff, 0x7, 0x80, 0x6, 0x2, 0x1000, 0x3, 0x7, 0x2, 0x401, 0x5, 0x100, 0x7, 0x9d2, 0x3ff, 0x3, 0xa, 0x35d6, 0x1117]}]}]}}]}, 0x88c}}, 0x0) 209.29805ms ago: executing program 5 (id=622): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 209.11496ms ago: executing program 5 (id=623): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x6, {0x6, 0xc, "fbeb4797"}}, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_usb_control_io$hid(r0, 0x0, 0x0) 176.519163ms ago: executing program 1 (id=624): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000000000000100004002000000030000000500000001f0ffff06000000040000000000000000000000000000000d00000000000000030000000200000003000000000000000100010000000000000000000000000001000000000000000300000006000000bf5a63242ca7742d55"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 93.172141ms ago: executing program 1 (id=625): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 49.212036ms ago: executing program 3 (id=626): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 4.88365ms ago: executing program 1 (id=627): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x1, 0x0, 0x1000}}}}}}, 0x0) 0s ago: executing program 3 (id=628): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.82' (ED25519) to the list of known hosts. [ 21.749648][ T28] audit: type=1400 audit(1760356005.604:64): avc: denied { mounton } for pid=274 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.751155][ T274] cgroup: Unknown subsys name 'net' [ 21.772769][ T28] audit: type=1400 audit(1760356005.604:65): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.800546][ T28] audit: type=1400 audit(1760356005.634:66): avc: denied { unmount } for pid=274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.800787][ T274] cgroup: Unknown subsys name 'devices' [ 21.919271][ T274] cgroup: Unknown subsys name 'hugetlb' [ 21.925019][ T274] cgroup: Unknown subsys name 'rlimit' [ 22.061266][ T28] audit: type=1400 audit(1760356005.914:67): avc: denied { setattr } for pid=274 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.086166][ T28] audit: type=1400 audit(1760356005.914:68): avc: denied { mounton } for pid=274 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.112478][ T28] audit: type=1400 audit(1760356005.914:69): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.124652][ T276] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.146505][ T28] audit: type=1400 audit(1760356006.004:70): avc: denied { relabelto } for pid=276 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.173952][ T28] audit: type=1400 audit(1760356006.004:71): avc: denied { write } for pid=276 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.208674][ T28] audit: type=1400 audit(1760356006.064:72): avc: denied { read } for pid=274 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.236252][ T28] audit: type=1400 audit(1760356006.064:73): avc: denied { open } for pid=274 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.236335][ T274] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.037238][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.044402][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.052079][ T282] device bridge_slave_0 entered promiscuous mode [ 23.073191][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.080294][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.087841][ T282] device bridge_slave_1 entered promiscuous mode [ 23.107977][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.115133][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.122973][ T284] device bridge_slave_0 entered promiscuous mode [ 23.143473][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.150887][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.158629][ T284] device bridge_slave_1 entered promiscuous mode [ 23.174848][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.182199][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.190028][ T283] device bridge_slave_0 entered promiscuous mode [ 23.198459][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.205614][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.213310][ T283] device bridge_slave_1 entered promiscuous mode [ 23.306075][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.313418][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.321215][ T286] device bridge_slave_0 entered promiscuous mode [ 23.337092][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.344347][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.352091][ T285] device bridge_slave_0 entered promiscuous mode [ 23.361941][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.369794][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.377418][ T286] device bridge_slave_1 entered promiscuous mode [ 23.391744][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.399455][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.407473][ T285] device bridge_slave_1 entered promiscuous mode [ 23.559203][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.566639][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.577363][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.589137][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.609867][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.617887][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.625284][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.632373][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.647486][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.654813][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.662273][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.670467][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.743895][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.751497][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.758928][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.766554][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.774467][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.782260][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.789659][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.798474][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.821137][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.829490][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.837597][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.845814][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.852914][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.880173][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.888354][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.896247][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.905391][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.913103][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.920709][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.929367][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.936777][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.944412][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.952686][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.961035][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.969458][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.976492][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.005771][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.014426][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.023662][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.032421][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.054703][ T284] device veth0_vlan entered promiscuous mode [ 24.062639][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.070244][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.078940][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.088010][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.096759][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.104490][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.112777][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.121763][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.130601][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.137758][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.145175][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.154296][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.163026][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.171435][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.180316][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.188641][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.196140][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.217663][ T282] device veth0_vlan entered promiscuous mode [ 24.233111][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.241674][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.249988][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.259742][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.268511][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.277545][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.285705][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.294132][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.302714][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.311075][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.319463][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.327843][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.336111][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.344083][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.354193][ T284] device veth1_macvtap entered promiscuous mode [ 24.362776][ T282] device veth1_macvtap entered promiscuous mode [ 24.376553][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.384504][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.392889][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.401655][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.423596][ T283] device veth0_vlan entered promiscuous mode [ 24.430403][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.438832][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.448139][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.456869][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.465305][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.473421][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.481859][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.490510][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.501967][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.510256][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.517881][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.526295][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.548358][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.556053][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.556392][ T282] request_module fs-gadgetfs succeeded, but still no fs? [ 24.563886][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.579883][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.589553][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.598197][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.606565][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.614388][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.629952][ T286] device veth0_vlan entered promiscuous mode [ 24.644220][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.653076][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.661525][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.670920][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.679143][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.688239][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.696880][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.706070][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.715438][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.723084][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.747890][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.760358][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.778680][ T283] device veth1_macvtap entered promiscuous mode [ 24.791901][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.800516][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.809770][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.844640][ T286] device veth1_macvtap entered promiscuous mode [ 24.854697][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.865387][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.876354][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.886733][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.895754][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.911263][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.920286][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.923395][ T351] syz.1.8[351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 24.929106][ T351] syz.1.8[351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 24.931163][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.963556][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.973432][ T285] device veth0_vlan entered promiscuous mode [ 25.013816][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.027716][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.045251][ T351] syz.1.8 (351) used greatest stack depth: 21248 bytes left [ 25.046646][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.083021][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.107837][ T285] device veth1_macvtap entered promiscuous mode [ 25.119412][ T359] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.145619][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.164967][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.184153][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.196304][ T358] loop1: detected capacity change from 0 to 8192 [ 25.205171][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.223917][ T358] ======================================================= [ 25.223917][ T358] WARNING: The mand mount option has been deprecated and [ 25.223917][ T358] and is ignored by this kernel. Remove the mand [ 25.223917][ T358] option from the mount to silence this warning. [ 25.223917][ T358] ======================================================= [ 25.253369][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.289254][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.301438][ T282] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 25.302649][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.318156][ T282] FAT-fs (loop1): Filesystem has been set read-only [ 25.327521][ T366] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 25.465877][ T381] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18'. [ 25.477810][ T381] netem: change failed [ 25.507697][ T386] loop1: detected capacity change from 0 to 512 [ 25.515591][ T386] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 25.585108][ T386] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 25.613204][ T395] loop2: detected capacity change from 0 to 128 [ 25.621708][ T386] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.20: bg 0: block 248: padding at end of block bitmap is not set [ 25.642566][ T386] EXT4-fs error (device loop1): ext4_acquire_dquot:6803: comm syz.1.20: Failed to acquire dquot type 1 [ 25.657603][ T386] EXT4-fs (loop1): 1 truncate cleaned up [ 25.663378][ T386] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 25.672878][ T395] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 25.686804][ T395] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 25.741486][ T386] syz.1.20 (386) used greatest stack depth: 21120 bytes left [ 25.750667][ T282] EXT4-fs (loop1): unmounting filesystem. [ 25.809178][ T285] EXT4-fs (loop2): unmounting filesystem. [ 25.844938][ T423] loop4: detected capacity change from 0 to 512 [ 25.856551][ T423] EXT4-fs: Ignoring removed orlov option [ 25.923778][ T423] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.30: corrupted in-inode xattr [ 25.962682][ T423] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.30: couldn't read orphan inode 15 (err -117) [ 26.011715][ T423] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 26.054634][ T423] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 12: comm syz.4.30: lblock 3 mapped to illegal pblock 12 (length 1) [ 26.067169][ T19] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.183102][ T286] EXT4-fs (loop4): unmounting filesystem. [ 26.256963][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 26.266140][ T19] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 26.279968][ T545] loop0: detected capacity change from 0 to 1024 [ 26.290783][ T19] usb 2-1: config 179 has no interface number 0 [ 26.304370][ T19] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 26.316581][ T19] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 26.329659][ T545] EXT4-fs (loop0): orphan cleanup on readonly fs [ 26.336733][ T19] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 26.350908][ T19] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 26.369011][ T19] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 26.384924][ T545] EXT4-fs (loop0): 1 truncate cleaned up [ 26.390932][ T19] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 26.400614][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.414777][ T408] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 26.426232][ T545] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 26.495290][ T545] tmpfs: Unsupported parameter 'mpol' [ 26.538219][ T284] EXT4-fs (loop0): unmounting filesystem. [ 26.601422][ T566] loop0: detected capacity change from 0 to 16 [ 26.622582][ T566] erofs: (device loop0): mounted with root inode @ nid 36. [ 26.671902][ T19] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input4 [ 26.733064][ T569] rtc_cmos 00:00: Alarms can be up to one day in the future [ 26.782552][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 26.782567][ T28] audit: type=1400 audit(1760356010.634:160): avc: denied { read } for pid=573 comm="syz.3.39" dev="nsfs" ino=4026532379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.857656][ T28] audit: type=1400 audit(1760356010.654:161): avc: denied { open } for pid=573 comm="syz.3.39" path="net:[4026532379]" dev="nsfs" ino=4026532379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.881619][ T28] audit: type=1400 audit(1760356010.654:162): avc: denied { create } for pid=573 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.911941][ T408] loop1: detected capacity change from 0 to 1024 [ 26.937524][ T408] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 26.937910][ T28] audit: type=1400 audit(1760356010.654:163): avc: denied { bind } for pid=573 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.971945][ T580] device wireguard0 entered promiscuous mode [ 26.988547][ T28] audit: type=1400 audit(1760356010.654:164): avc: denied { setopt } for pid=573 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.008766][ T28] audit: type=1400 audit(1760356010.654:165): avc: denied { read } for pid=573 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.029149][ T28] audit: type=1400 audit(1760356010.694:166): avc: denied { create } for pid=576 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.048823][ T28] audit: type=1400 audit(1760356010.694:167): avc: denied { write } for pid=576 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.049344][ T408] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 27.069579][ T28] audit: type=1400 audit(1760356010.764:168): avc: denied { create } for pid=579 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.091323][ T19] rtc_cmos 00:00: Alarms can be up to one day in the future [ 27.097767][ T28] audit: type=1400 audit(1760356010.774:169): avc: denied { ioctl } for pid=579 comm="syz.3.41" path="socket:[15939]" dev="sockfs" ino=15939 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.127607][ T19] rtc_cmos 00:00: Alarms can be up to one day in the future [ 27.137691][ T408] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.138988][ T19] rtc_cmos 00:00: Alarms can be up to one day in the future [ 27.157007][ T19] rtc_cmos 00:00: Alarms can be up to one day in the future [ 27.164659][ T19] rtc rtc0: __rtc_set_alarm: err=-22 [ 27.201120][ T408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.229110][ T408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.283690][ T590] xt_bpf: check failed: parse error [ 27.320329][ T596] process 'syz.2.47' launched './file0' with NULL argv: empty string added [ 27.449157][ T341] usb 2-1: USB disconnect, device number 2 [ 27.449218][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 27.463817][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 27.471169][ T341] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 27.789957][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 27.829649][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 27.842551][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.862809][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 27.877981][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.907492][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.941696][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.952003][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.964973][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.975703][ T282] EXT4-fs (loop1): unmounting filesystem. [ 28.207785][ T643] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.237100][ T643] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.251194][ T643] device bridge_slave_0 entered promiscuous mode [ 28.273961][ T643] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.288884][ T643] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.306813][ T643] device bridge_slave_1 entered promiscuous mode [ 28.368502][ T664] loop2: detected capacity change from 0 to 1024 [ 28.377605][ T664] EXT4-fs: Ignoring removed orlov option [ 28.425908][ T664] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 28.455215][ T664] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 28.491034][ T285] EXT4-fs (loop2): unmounting filesystem. [ 28.625858][ T643] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.625881][ T643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.625975][ T643] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.625992][ T643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.635613][ T528] device bridge_slave_1 left promiscuous mode [ 28.635723][ T528] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.636693][ T528] device bridge_slave_0 left promiscuous mode [ 28.636780][ T528] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.638529][ T528] device veth1_macvtap left promiscuous mode [ 28.638599][ T528] device veth0_vlan left promiscuous mode [ 28.839735][ T466] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.840775][ T466] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.862311][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.862628][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.870771][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.871047][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.871248][ T466] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.871265][ T466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.872472][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.872804][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.873006][ T466] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.873026][ T466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.900704][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.901066][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.901341][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.901563][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.942560][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.942991][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.943342][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.943628][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.944137][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.944393][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.945219][ T643] device veth0_vlan entered promiscuous mode [ 29.044091][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.044396][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.046153][ T643] device veth1_macvtap entered promiscuous mode [ 29.076060][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.076329][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.076613][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.078506][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.078764][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.212601][ T687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=687 comm=syz.5.65 [ 29.212664][ T687] netlink: 32 bytes leftover after parsing attributes in process `syz.5.65'. [ 29.489037][ T692] loop3: detected capacity change from 0 to 8192 [ 29.501154][ T699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 29.515737][ T700] loop2: detected capacity change from 0 to 1024 [ 29.541514][ T700] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.598365][ T285] EXT4-fs (loop2): unmounting filesystem. [ 29.670522][ T717] loop0: detected capacity change from 0 to 512 [ 29.688626][ T717] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.708358][ T717] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 29.733256][ T717] EXT4-fs (loop0): 1 truncate cleaned up [ 29.739623][ T720] loop1: detected capacity change from 0 to 128 [ 29.739949][ T717] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 29.778609][ T720] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 29.806043][ T720] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 29.821046][ T284] EXT4-fs (loop0): unmounting filesystem. [ 29.822130][ T715] loop3: detected capacity change from 0 to 32768 [ 29.874436][ T282] EXT4-fs (loop1): unmounting filesystem. [ 29.887666][ T294] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.921950][ T730] Illegal XDP return value 4294967274 on prog (id 57) dev syz_tun, expect packet loss! [ 29.973988][ T734] loop0: detected capacity change from 0 to 128 [ 30.000899][ T734] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 30.015897][ T734] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 30.067984][ T284] EXT4-fs (loop0): unmounting filesystem. [ 30.097013][ T294] usb 3-1: Using ep0 maxpacket: 32 [ 30.103763][ T294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.115823][ T294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.126150][ T294] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 30.135821][ T294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.145038][ T294] usb 3-1: config 0 descriptor?? [ 30.151058][ T294] hub 3-1:0.0: USB hub found [ 30.177001][ T341] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.337019][ T19] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 30.351597][ T294] hub 3-1:0.0: 1 port detected [ 30.357040][ T334] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.358350][ T341] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 30.378357][ T341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.391851][ T341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.402843][ T341] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 30.419933][ T341] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 30.431022][ T341] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 30.440717][ T341] usb 2-1: Manufacturer: syz [ 30.447485][ T341] usb 2-1: config 0 descriptor?? [ 30.516984][ T19] usb 6-1: Using ep0 maxpacket: 8 [ 30.523447][ T19] usb 6-1: config 0 interface 0 altsetting 42 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.534202][ T19] usb 6-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.547439][ T334] usb 1-1: Using ep0 maxpacket: 16 [ 30.552687][ T19] usb 6-1: config 0 interface 0 has no altsetting 0 [ 30.560655][ T19] usb 6-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 30.570352][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.578829][ T334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.590577][ T334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.600754][ T19] usb 6-1: config 0 descriptor?? [ 30.606188][ T334] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 30.619658][ T334] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 30.630037][ T334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.639968][ T334] usb 1-1: config 0 descriptor?? [ 30.797105][ T41] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.857696][ T341] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 30.865291][ T341] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 30.874588][ T341] appleir 0003:05AC:8243.0001: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 30.978301][ T41] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.990251][ T41] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.997527][ T294] hub 3-1:0.0: activate --> -90 [ 31.002223][ T41] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 31.014665][ T41] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 31.022749][ T41] usb 4-1: Manufacturer: syz [ 31.029028][ T41] usb 4-1: config 0 descriptor?? [ 31.051696][ T334] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 31.059346][ T334] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 31.073668][ T334] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 31.081198][ T334] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 31.088613][ T334] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 31.096070][ T334] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 31.104099][ T334] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 31.112184][ T334] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 31.119925][ T334] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 31.127616][ T334] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 31.135046][ T334] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 31.142706][ T334] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 31.150135][ T334] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 31.157622][ T334] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 31.165696][ T334] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 31.181166][ T334] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input8 [ 31.196357][ T334] microsoft 0003:045E:07DA.0003: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 31.244692][ T19] usb 6-1: USB disconnect, device number 2 [ 31.273919][ T341] usb 1-1: USB disconnect, device number 2 [ 31.409871][ T334] usb 3-1: USB disconnect, device number 2 [ 31.437611][ T41] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 31.444569][ T41] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 31.451610][ T41] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 31.458786][ T41] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 31.466137][ T41] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 31.473654][ T41] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 31.480850][ T41] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 31.488579][ T41] pyra 0003:1E7D:2CF6.0004: hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 31.777004][ T294] usb 3-1-port1: config error [ 31.791745][ T755] netlink: 'syz.5.105': attribute type 12 has an invalid length. [ 31.801824][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 31.801838][ T28] audit: type=1400 audit(1760356015.664:203): avc: denied { connect } for pid=754 comm="syz.5.105" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.828693][ T28] audit: type=1400 audit(1760356015.664:204): avc: denied { write } for pid=754 comm="syz.5.105" laddr=172.20.20.170 lport=256 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.085879][ T884] loop5: detected capacity change from 0 to 1024 [ 32.098847][ T884] EXT4-fs: Ignoring removed orlov option [ 32.113944][ T884] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 32.155892][ T889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=889 comm=syz.2.110 [ 32.169806][ T889] netlink: 32 bytes leftover after parsing attributes in process `syz.2.110'. [ 32.171029][ T643] EXT4-fs (loop5): unmounting filesystem. [ 32.222460][ T891] loop5: detected capacity change from 0 to 512 [ 32.251210][ T891] EXT4-fs: Ignoring removed nobh option [ 32.273117][ T891] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.288097][ T891] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.112: iget: bad i_size value: 38620345925642 [ 32.303489][ T891] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.112: couldn't read orphan inode 15 (err -117) [ 32.324970][ T891] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 32.402720][ T894] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.112: bg 0: block 5: invalid block bitmap [ 32.431305][ T894] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 32.445746][ T894] EXT4-fs (loop5): This should not happen!! Data will be lost [ 32.445746][ T894] [ 32.464356][ T41] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 32.479637][ T894] EXT4-fs (loop5): Total free blocks count 0 [ 32.484203][ T41] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 32.494176][ T894] EXT4-fs (loop5): Free/Dirty block details [ 32.504062][ T41] pyra: probe of 0003:1E7D:2CF6.0004 failed with error -71 [ 32.510344][ T894] EXT4-fs (loop5): free_blocks=0 [ 32.522320][ T41] usb 4-1: USB disconnect, device number 2 [ 32.533376][ T894] EXT4-fs (loop5): dirty_blocks=2688 [ 32.548554][ T894] EXT4-fs (loop5): Block reservation details [ 32.562124][ T894] EXT4-fs (loop5): i_reserved_data_blocks=2688 [ 32.571100][ T28] audit: type=1400 audit(1760356016.424:205): avc: denied { create } for pid=890 comm="syz.5.112" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.604011][ T926] fido_id[926]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 32.617532][ T429] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 632 with error 28 [ 32.640052][ T28] audit: type=1400 audit(1760356016.494:206): avc: denied { ioctl } for pid=890 comm="syz.5.112" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17692 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.732575][ T959] netlink: 52 bytes leftover after parsing attributes in process `syz.5.113'. [ 32.743268][ T959] netlink: 52 bytes leftover after parsing attributes in process `syz.5.113'. [ 32.754636][ T28] audit: type=1400 audit(1760356016.604:207): avc: denied { name_bind } for pid=957 comm="syz.1.114" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.826892][ T28] audit: type=1400 audit(1760356016.604:208): avc: denied { node_bind } for pid=957 comm="syz.1.114" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 32.851796][ T28] audit: type=1400 audit(1760356016.654:209): avc: denied { write } for pid=961 comm="syz.5.115" name="001" dev="devtmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 33.007417][ T294] usb 2-1: USB disconnect, device number 3 [ 33.040554][ T28] audit: type=1400 audit(1760356016.894:210): avc: denied { unlink } for pid=980 comm="syz.1.122" name="#3" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 33.072831][ T981] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 33.116425][ T28] audit: type=1400 audit(1760356016.964:211): avc: denied { create } for pid=985 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.140817][ T28] audit: type=1400 audit(1760356016.994:212): avc: denied { connect } for pid=985 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.227076][ T41] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.416966][ T41] usb 1-1: Using ep0 maxpacket: 32 [ 33.423521][ T41] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.444153][ T41] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.462313][ T1016] netlink: 72 bytes leftover after parsing attributes in process `syz.1.139'. [ 33.472194][ T1016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.139'. [ 33.481927][ T41] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 33.488682][ T1016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 33.493417][ T41] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 33.507579][ T1016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 33.514818][ T41] usb 1-1: Product: syz [ 33.528598][ T41] usb 1-1: Manufacturer: syz [ 33.540247][ T1022] syz.1.141[1022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.540328][ T1022] syz.1.141[1022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.553203][ T41] hub 1-1:4.0: USB hub found [ 33.723743][ T1035] loop3: detected capacity change from 0 to 128 [ 33.732191][ T1035] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.739626][ T1035] EXT4-fs (loop3): Test dummy encryption mode enabled [ 33.748915][ T1035] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 33.754179][ T41] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 33.766958][ T1035] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.792025][ T1035] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 33.823737][ T283] EXT4-fs (loop3): unmounting filesystem. [ 33.829980][ T1042] netlink: 96 bytes leftover after parsing attributes in process `syz.5.148'. [ 34.087149][ T294] usb 1-1: USB disconnect, device number 3 [ 34.185541][ T1083] loop5: detected capacity change from 0 to 128 [ 34.205043][ T1083] syz.5.165: attempt to access beyond end of device [ 34.205043][ T1083] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 34.395915][ T1096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.169'. [ 34.726855][ T1126] loop2: detected capacity change from 0 to 128 [ 34.726979][ T341] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 34.744674][ T1126] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.754811][ T1126] EXT4-fs (loop2): Test dummy encryption mode enabled [ 34.778226][ T1126] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 34.787837][ T1131] bridge: RTM_NEWNEIGH with invalid ether address [ 34.793250][ T1126] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.853724][ T285] EXT4-fs (loop2): unmounting filesystem. [ 34.905146][ T1145] SELinux: Context system_u:object_r:ssh_agent_exec_t:s0 is not valid (left unmapped). [ 34.937042][ T341] usb 2-1: Using ep0 maxpacket: 8 [ 34.944421][ T341] usb 2-1: config 0 interface 0 altsetting 42 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.956686][ T341] usb 2-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.970829][ T341] usb 2-1: config 0 interface 0 has no altsetting 0 [ 34.977988][ T341] usb 2-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 34.987383][ T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.050243][ T341] usb 2-1: config 0 descriptor?? [ 35.073290][ T1163] loop2: detected capacity change from 0 to 512 [ 35.103900][ T1163] EXT4-fs error (device loop2): __ext4_fill_super:5391: inode #2: comm syz.2.198: casefold flag without casefold feature [ 35.129413][ T1163] EXT4-fs (loop2): get root inode failed [ 35.136098][ T1163] EXT4-fs (loop2): mount failed [ 35.163206][ T1167] loop0: detected capacity change from 0 to 128 [ 35.172295][ T1167] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.180108][ T1167] EXT4-fs (loop0): Test dummy encryption mode enabled [ 35.200446][ T1167] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 35.209455][ T1167] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.242172][ T284] EXT4-fs (loop0): unmounting filesystem. [ 35.284589][ T1175] user requested TSC rate below hardware speed [ 35.305567][ T1175] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 35.328980][ T1183] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 35.522794][ T1206] syz.3.225[1206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.522876][ T1206] syz.3.225[1206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.539210][ T1208] loop5: detected capacity change from 0 to 128 [ 35.577382][ T1208] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.588297][ T1212] input: syz1 as /devices/virtual/input/input12 [ 35.604273][ T1208] EXT4-fs (loop5): Test dummy encryption mode enabled [ 35.631919][ T1208] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 35.649917][ T1208] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.681407][ T341] usb 2-1: USB disconnect, device number 4 [ 35.741751][ T643] EXT4-fs (loop5): unmounting filesystem. [ 35.915413][ T1245] loop3: detected capacity change from 0 to 256 [ 35.929114][ T1245] FAT-fs (loop3): Directory bread(block 64) failed [ 35.936790][ T1245] FAT-fs (loop3): Directory bread(block 65) failed [ 35.944291][ T1245] FAT-fs (loop3): Directory bread(block 66) failed [ 35.951080][ T1245] FAT-fs (loop3): Directory bread(block 67) failed [ 35.957857][ T1245] FAT-fs (loop3): Directory bread(block 68) failed [ 35.964853][ T1245] FAT-fs (loop3): Directory bread(block 69) failed [ 35.971709][ T1245] FAT-fs (loop3): Directory bread(block 70) failed [ 35.978776][ T1245] FAT-fs (loop3): Directory bread(block 71) failed [ 35.985802][ T1245] FAT-fs (loop3): Directory bread(block 72) failed [ 35.992950][ T1245] FAT-fs (loop3): Directory bread(block 73) failed [ 36.051953][ T1250] loop5: detected capacity change from 0 to 2048 [ 36.097731][ T1250] loop5: p1 < > p4 [ 36.102772][ T1250] loop5: p4 size 8388608 extends beyond EOD, truncated [ 36.115891][ T102] loop5: p1 < > p4 [ 36.120545][ T102] loop5: p4 size 8388608 extends beyond EOD, truncated [ 36.148408][ T1256] syz.3.239[1256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.148569][ T1256] syz.3.239[1256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.181728][ T1261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.241'. [ 36.183385][ T751] udevd[751]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 36.227941][ T413] udevd[413]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 36.260800][ T413] udevd[413]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 36.275097][ T751] udevd[751]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 36.517011][ T294] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 36.711270][ T294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.726439][ T294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.739914][ T294] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 36.756132][ T294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.769583][ T294] usb 4-1: config 0 descriptor?? [ 36.807021][ T41] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 36.836998][ T19] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 36.998173][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.010822][ T341] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 37.030751][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.037162][ T19] usb 1-1: Using ep0 maxpacket: 8 [ 37.044019][ T41] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 37.052749][ T19] usb 1-1: config 0 interface 0 altsetting 42 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.056147][ T41] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 37.077229][ T41] usb 3-1: Manufacturer: syz [ 37.086395][ T41] usb 3-1: config 0 descriptor?? [ 37.086965][ T19] usb 1-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 37.108605][ T19] usb 1-1: config 0 interface 0 has no altsetting 0 [ 37.115575][ T19] usb 1-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 37.135730][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.147577][ T19] usb 1-1: config 0 descriptor?? [ 37.246964][ T341] usb 6-1: Using ep0 maxpacket: 16 [ 37.253735][ T341] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.265645][ T341] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.276196][ T341] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 37.289518][ T341] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 37.298893][ T341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.308901][ T341] usb 6-1: config 0 descriptor?? [ 37.377553][ T294] hid-led 0003:1D34:000A.0006: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 37.391420][ T294] hid-led 0003:1D34:000A.0006: Dream Cheeky Webmail Notifier initialized [ 37.510024][ T41] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 37.517101][ T41] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 37.524174][ T41] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 37.531618][ T41] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 37.539220][ T41] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 37.546637][ T41] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 37.553584][ T41] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 37.561512][ T41] pyra 0003:1E7D:2CF6.0007: hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 37.579753][ T19] usb 4-1: USB disconnect, device number 3 [ 37.726207][ T341] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 37.733612][ T341] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 37.741545][ T341] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 37.749242][ T341] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 37.757195][ T341] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 37.764994][ T341] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 37.772676][ T341] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 37.777312][ T294] usb 1-1: USB disconnect, device number 4 [ 37.780448][ T341] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 37.794270][ T341] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 37.801593][ T341] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 37.809288][ T341] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 37.817056][ T341] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 37.824811][ T341] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 37.832890][ T341] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 37.840891][ T341] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 37.853883][ T341] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0009/input/input16 [ 37.867517][ T341] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 37.942089][ T341] usb 6-1: USB disconnect, device number 3 [ 38.417054][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 38.459838][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 38.459853][ T28] audit: type=1400 audit(1760356022.314:256): avc: denied { mount } for pid=1401 comm="syz.5.275" name="/" dev="ramfs" ino=19658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 38.512407][ T41] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device [ 38.527060][ T41] pyra 0003:1E7D:2CF6.0007: couldn't install mouse [ 38.536174][ T41] pyra: probe of 0003:1E7D:2CF6.0007 failed with error -71 [ 38.555519][ T41] usb 3-1: USB disconnect, device number 3 [ 38.597446][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 38.605253][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.646992][ T341] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 38.653799][ T1409] fido_id[1409]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 38.660398][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.696040][ T1411] fido_id[1411]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 38.711871][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 38.737608][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.757557][ T24] usb 4-1: config 0 descriptor?? [ 38.768096][ T24] hub 4-1:0.0: USB hub found [ 38.838176][ T341] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 38.849489][ T341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.861190][ T341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.871677][ T341] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 38.885755][ T341] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 38.894904][ T341] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 38.903380][ T341] usb 1-1: Manufacturer: syz [ 38.909006][ T341] usb 1-1: config 0 descriptor?? [ 38.967834][ T24] hub 4-1:0.0: 1 port detected [ 39.125912][ T1421] loop7: detected capacity change from 0 to 16384 [ 39.218742][ T1429] loop5: detected capacity change from 0 to 1024 [ 39.226103][ T1429] EXT4-fs: Ignoring removed orlov option [ 39.233552][ T1429] EXT4-fs: Ignoring removed nobh option [ 39.240140][ T1429] EXT4-fs: Ignoring removed bh option [ 39.262595][ T1429] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 39.282671][ T1429] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3836: comm syz.5.286: Allocating blocks 481-513 which overlap fs metadata [ 39.311532][ T643] EXT4-fs (loop5): unmounting filesystem. [ 39.324871][ T341] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 39.333165][ T341] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 39.344114][ T341] appleir 0003:05AC:8243.000A: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 39.367015][ T41] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 39.372069][ T28] audit: type=1400 audit(1760356023.224:257): avc: denied { setopt } for pid=1439 comm="syz.5.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.398244][ T28] audit: type=1400 audit(1760356023.254:258): avc: denied { listen } for pid=1439 comm="syz.5.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.422198][ T28] audit: type=1400 audit(1760356023.254:259): avc: denied { accept } for pid=1439 comm="syz.5.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.567068][ T41] usb 3-1: Using ep0 maxpacket: 8 [ 39.574422][ T41] usb 3-1: config 0 interface 0 altsetting 42 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.584449][ T41] usb 3-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.600247][ T41] usb 3-1: config 0 interface 0 has no altsetting 0 [ 39.607707][ T41] usb 3-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 39.618084][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.626884][ T41] usb 3-1: config 0 descriptor?? [ 39.633524][ T341] hub 4-1:0.0: activate --> -90 [ 39.876978][ T294] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 40.033933][ T24] usb 4-1: USB disconnect, device number 4 [ 40.058451][ T294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.070118][ T294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.081860][ T294] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 40.091569][ T294] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 40.099672][ T294] usb 2-1: Manufacturer: syz [ 40.105549][ T294] usb 2-1: config 0 descriptor?? [ 40.251887][ T19] usb 3-1: USB disconnect, device number 4 [ 40.407026][ T341] usb 4-1-port1: config error [ 40.515000][ T294] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 40.523253][ T294] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 40.531293][ T294] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 40.538526][ T294] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 40.546832][ T294] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 40.558066][ T294] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 40.566639][ T294] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 40.577301][ T294] pyra 0003:1E7D:2CF6.000C: hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 40.729992][ T1477] netlink: 'syz.3.304': attribute type 6 has an invalid length. [ 40.738836][ T1477] __nla_validate_parse: 1 callbacks suppressed [ 40.738870][ T1477] netlink: 32 bytes leftover after parsing attributes in process `syz.3.304'. [ 40.805917][ T28] audit: type=1400 audit(1760356024.654:260): avc: denied { create } for pid=1483 comm="syz.2.307" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 40.827079][ T28] audit: type=1400 audit(1760356024.654:261): avc: denied { remount } for pid=1483 comm="syz.2.307" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.857622][ T1486] input: syz1 as /devices/virtual/input/input20 [ 40.944494][ T28] audit: type=1400 audit(1760356024.794:262): avc: denied { bind } for pid=1488 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.964485][ T28] audit: type=1400 audit(1760356024.794:263): avc: denied { read } for pid=1488 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.181828][ T1507] device wireguard0 entered promiscuous mode [ 41.209381][ T1511] loop3: detected capacity change from 0 to 2048 [ 41.238280][ T1511] loop3: p1 < > p4 [ 41.243203][ T1511] loop3: p4 size 8388608 extends beyond EOD, truncated [ 41.303989][ T337] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 41.309147][ T283] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 41.317367][ T413] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 41.332133][ T337] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 41.348429][ T1513] loop0: detected capacity change from 0 to 1024 [ 41.355599][ T413] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 41.365403][ T337] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 41.367657][ T1515] loop3: detected capacity change from 0 to 4096 [ 41.374752][ T413] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 41.387828][ T1515] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.401311][ T1513] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.413100][ T1513] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.431188][ T1515] EXT4-fs (loop3): Test dummy encryption mode enabled [ 41.443409][ T1513] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 41.466061][ T744] usb 1-1: USB disconnect, device number 5 [ 41.466832][ T284] EXT4-fs (loop0): unmounting filesystem. [ 41.481902][ T1515] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 41.520403][ T28] audit: type=1400 audit(1760356025.374:264): avc: denied { append } for pid=1514 comm="syz.3.319" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.546249][ T294] pyra 0003:1E7D:2CF6.000C: couldn't init struct pyra_device [ 41.559107][ T294] pyra 0003:1E7D:2CF6.000C: couldn't install mouse [ 41.565635][ T337] udevd[337]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 41.568238][ T294] pyra: probe of 0003:1E7D:2CF6.000C failed with error -71 [ 41.580626][ T1521] loop5: detected capacity change from 0 to 512 [ 41.592926][ T413] udevd[413]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 41.598841][ T1520] loop0: detected capacity change from 0 to 128 [ 41.607905][ T1521] EXT4-fs: Ignoring removed orlov option [ 41.610862][ T28] audit: type=1400 audit(1760356025.374:265): avc: denied { map } for pid=1514 comm="syz.3.319" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.644178][ T1522] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 41.654623][ T294] usb 2-1: USB disconnect, device number 5 [ 41.660913][ T1522] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 41.661193][ T1521] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.331: corrupted in-inode xattr [ 41.680412][ T1520] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 41.698075][ T1520] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.755940][ T1526] fido_id[1526]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 41.756017][ T1521] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.331: couldn't read orphan inode 15 (err -117) [ 41.786638][ T413] udevd[413]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 41.786686][ T751] udevd[751]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 41.816565][ T1521] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 41.826478][ T283] EXT4-fs (loop3): unmounting filesystem. [ 41.865077][ T284] EXT4-fs (loop0): unmounting filesystem. [ 41.884727][ T1521] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #2: block 12: comm syz.5.331: lblock 3 mapped to illegal pblock 12 (length 1) [ 41.922982][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 41.933099][ T643] EXT4-fs (loop5): unmounting filesystem. [ 41.942304][ T854] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 41.951309][ T854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.972712][ T854] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 41.982556][ T854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.991274][ T854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.000133][ T854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.009428][ T854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.017946][ T854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.028775][ T1535] tipc: Enabling of bearer rejected, failed to enable media [ 42.137081][ T334] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 42.222082][ T1569] loop1: detected capacity change from 0 to 2048 [ 42.257707][ T1569] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 42.313580][ T282] EXT4-fs (loop1): unmounting filesystem. [ 42.337050][ T334] usb 4-1: Using ep0 maxpacket: 16 [ 42.347410][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.350473][ T1594] loop2: detected capacity change from 0 to 16 [ 42.366967][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.378820][ T334] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 42.379542][ T1594] erofs: (device loop2): mounted with root inode @ nid 36. [ 42.396779][ T334] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 42.403739][ T1594] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 42.410162][ T334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.421334][ T1594] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 42.432107][ T334] usb 4-1: config 0 descriptor?? [ 42.449069][ T1594] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 42.653395][ T1614] loop0: detected capacity change from 0 to 8192 [ 42.677175][ T1614] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 42.686385][ T1614] FAT-fs (loop0): Filesystem has been set read-only [ 42.693822][ T1614] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 42.703554][ T1614] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 42.713198][ T1614] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 42.865754][ T334] microsoft 0003:045E:07DA.000D: unbalanced collection at end of report description [ 42.875522][ T334] microsoft 0003:045E:07DA.000D: parse failed [ 42.881723][ T334] microsoft: probe of 0003:045E:07DA.000D failed with error -22 [ 43.069972][ T290] usb 4-1: USB disconnect, device number 5 [ 43.226565][ T1633] loop0: detected capacity change from 0 to 512 [ 43.235204][ T1633] EXT4-fs: Ignoring removed orlov option [ 43.255849][ T1633] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.367: corrupted in-inode xattr [ 43.277484][ T1633] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.367: couldn't read orphan inode 15 (err -117) [ 43.290235][ T1633] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 43.306655][ T1633] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #2: block 12: comm syz.0.367: lblock 3 mapped to illegal pblock 12 (length 1) [ 43.332618][ T284] EXT4-fs (loop0): unmounting filesystem. [ 43.357765][ T1636] loop0: detected capacity change from 0 to 512 [ 43.365372][ T1636] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.383307][ T1636] EXT4-fs (loop0): 1 truncate cleaned up [ 43.396275][ T1636] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 43.410790][ T1636] overlayfs: workdir and upperdir must reside under the same mount [ 43.428461][ T284] EXT4-fs (loop0): unmounting filesystem. [ 43.503323][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 43.503337][ T28] audit: type=1400 audit(1760356027.354:290): avc: denied { create } for pid=1648 comm="syz.0.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.531699][ T28] audit: type=1400 audit(1760356027.354:291): avc: denied { ioctl } for pid=1648 comm="syz.0.375" path="socket:[20772]" dev="sockfs" ino=20772 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.560035][ T290] kernel write not supported for file 160/net/vlan/vlan1 (pid: 290 comm: kworker/1:2) [ 43.658378][ T1655] user requested TSC rate below hardware speed [ 43.667002][ T1655] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 43.686980][ T341] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 43.812362][ T1665] loop2: detected capacity change from 0 to 7 [ 43.819961][ T1665] loop2: [ 43.878029][ T341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.904880][ T341] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 43.916785][ T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.928318][ T341] usb 2-1: config 0 descriptor?? [ 44.085739][ T1682] loop0: detected capacity change from 0 to 512 [ 44.092756][ T1682] EXT4-fs: Ignoring removed nobh option [ 44.099441][ T1682] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.114074][ T1682] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.388: iget: bad i_size value: 38620345925642 [ 44.127731][ T1682] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.388: couldn't read orphan inode 15 (err -117) [ 44.140039][ T1682] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.256541][ T1682] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.388: bg 0: block 5: invalid block bitmap [ 44.270124][ T1682] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 44.283393][ T1682] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.283393][ T1682] [ 44.293586][ T1682] EXT4-fs (loop0): Total free blocks count 0 [ 44.300048][ T1682] EXT4-fs (loop0): Free/Dirty block details [ 44.306419][ T1682] EXT4-fs (loop0): free_blocks=0 [ 44.312154][ T1682] EXT4-fs (loop0): dirty_blocks=2708 [ 44.318166][ T1682] EXT4-fs (loop0): Block reservation details [ 44.324692][ T1682] EXT4-fs (loop0): i_reserved_data_blocks=2708 [ 44.344166][ T341] lenovo 0003:17EF:6047.000E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 44.349993][ T403] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 652 with error 28 [ 44.544493][ T1641] loop1: detected capacity change from 0 to 128 [ 44.554085][ T341] lenovo 0003:17EF:6047.000E: Failed to switch F7/9/11 mode: -71 [ 44.562782][ T341] lenovo 0003:17EF:6047.000E: Failed to switch middle button: -71 [ 44.572468][ T341] lenovo 0003:17EF:6047.000E: Fn-lock setting failed: -71 [ 44.587096][ T1610] Bluetooth: hci0: command 0x1003 tx timeout [ 44.587163][ T341] lenovo 0003:17EF:6047.000E: Sensitivity setting failed: -71 [ 44.593257][ T575] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.616643][ T1689] syz.5.390 (1689) used greatest stack depth: 20896 bytes left [ 44.621920][ T341] usb 2-1: USB disconnect, device number 6 [ 44.637065][ T28] audit: type=1400 audit(1760356028.494:292): avc: denied { relabelfrom } for pid=1693 comm="syz.2.392" name="" dev="pipefs" ino=20394 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 44.660137][ T1694] SELinux: Context system_u:object_r:fixed_disk_device_t:s0 is not valid (left unmapped). [ 44.677087][ T334] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 44.689692][ T28] audit: type=1400 audit(1760356028.534:293): avc: denied { relabelto } for pid=1693 comm="syz.2.392" name="" dev="pipefs" ino=20394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:fixed_disk_device_t:s0" [ 44.815200][ T1715] netlink: 'syz.5.402': attribute type 2 has an invalid length. [ 44.836507][ T1718] loop3: detected capacity change from 0 to 512 [ 44.859431][ T1718] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 44.869078][ T1718] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.894283][ T283] EXT4-fs (loop3): unmounting filesystem. [ 44.908389][ T334] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 44.918240][ T334] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.930372][ T334] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.945710][ T334] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.962439][ T334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.971475][ T334] usb 1-1: Product: syz [ 44.975672][ T334] usb 1-1: Manufacturer: syz [ 44.980406][ T334] usb 1-1: SerialNumber: syz [ 45.129204][ T1745] loop1: detected capacity change from 0 to 256 [ 45.136769][ T1745] FAT-fs (loop1): bogus number of FAT sectors [ 45.143926][ T1745] FAT-fs (loop1): Can't find a valid FAT filesystem [ 45.183527][ T1751] loop2: detected capacity change from 0 to 2048 [ 45.200405][ T1751] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.209222][ T1751] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.222351][ T1751] fs-verity: sha512 using implementation "sha512-avx2" [ 45.233819][ T28] audit: type=1400 audit(1760356029.094:294): avc: denied { append } for pid=1746 comm="syz.3.415" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 45.259808][ T28] audit: type=1400 audit(1760356029.094:295): avc: denied { append } for pid=1750 comm="syz.2.417" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.262483][ T285] EXT4-fs (loop2): unmounting filesystem. [ 45.446604][ T1772] device syzkaller0 entered promiscuous mode [ 45.458258][ T1778] loop2: detected capacity change from 0 to 128 [ 45.486248][ T1778] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.505446][ T1778] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.542473][ T28] audit: type=1400 audit(1760356029.394:296): avc: denied { getopt } for pid=1787 comm="syz.5.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.566321][ T285] EXT4-fs (loop2): unmounting filesystem. [ 45.601557][ T28] audit: type=1400 audit(1760356029.454:297): avc: denied { create } for pid=1795 comm="syz.5.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 45.623367][ T1798] loop1: detected capacity change from 0 to 512 [ 45.646707][ T1798] EXT4-fs: Ignoring removed nobh option [ 45.660443][ T28] audit: type=1400 audit(1760356029.454:298): avc: denied { sys_admin } for pid=1795 comm="syz.5.434" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 45.717163][ T1798] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 45.747083][ T28] audit: type=1400 audit(1760356029.454:299): avc: denied { remount } for pid=1795 comm="syz.5.434" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 45.795991][ T1798] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.433: iget: bad i_size value: 38620345925642 [ 45.829164][ T1798] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.433: couldn't read orphan inode 15 (err -117) [ 45.870722][ T1818] loop3: detected capacity change from 0 to 1024 [ 45.872506][ T1798] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 45.916200][ T1818] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 45.978894][ T1818] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3836: comm syz.3.441: Allocating blocks 385-513 which overlap fs metadata [ 45.996775][ T334] cdc_ncm 1-1:1.0: bind() failure [ 46.006167][ T334] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 46.026652][ T334] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 46.037531][ T334] usb 1-1: USB disconnect, device number 6 [ 46.044915][ T1818] EXT4-fs (loop3): pa ffff8881151f72a0: logic 16, phys. 129, len 24 [ 46.053557][ T1818] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 8 [ 46.080683][ T1798] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.433: bg 0: block 5: invalid block bitmap [ 46.104200][ T1798] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 972 with error 28 [ 46.118114][ T1798] EXT4-fs (loop1): This should not happen!! Data will be lost [ 46.118114][ T1798] [ 46.133125][ T283] EXT4-fs (loop3): unmounting filesystem. [ 46.150372][ T1798] EXT4-fs (loop1): Total free blocks count 0 [ 46.158668][ T1828] loop3: detected capacity change from 0 to 128 [ 46.167856][ T1798] EXT4-fs (loop1): Free/Dirty block details [ 46.179013][ T1798] EXT4-fs (loop1): free_blocks=0 [ 46.185422][ T1798] EXT4-fs (loop1): dirty_blocks=976 [ 46.197281][ T1828] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 46.214353][ T1828] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.225677][ T1798] EXT4-fs (loop1): Block reservation details [ 46.242403][ T1798] EXT4-fs (loop1): i_reserved_data_blocks=976 [ 46.269162][ T1826] kvm [1824]: vcpu0, guest rIP: 0x9132 Unhandled WRMSR(0xc1) = 0x200000000 [ 46.287259][ T1826] kvm [1824]: vcpu0, guest rIP: 0x9132 Unhandled WRMSR(0xc2) = 0x200000000 [ 46.294413][ T282] EXT4-fs (loop1): unmounting filesystem. [ 46.299421][ T1826] kvm [1824]: vcpu0, guest rIP: 0x9132 Unhandled WRMSR(0x11e) = 0x2be702111 [ 46.315465][ T1826] kvm [1824]: vcpu0, guest rIP: 0x9132 Unhandled WRMSR(0x186) = 0x200000000 [ 46.325957][ T1826] kvm [1824]: vcpu0, guest rIP: 0x9132 Unhandled WRMSR(0x187) = 0x200000000 [ 46.336273][ T283] EXT4-fs (loop3): unmounting filesystem. [ 46.387907][ T1842] loop1: detected capacity change from 0 to 512 [ 46.421979][ T1842] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c118, mo2=0002] [ 46.456303][ T1842] System zones: 1-12 [ 46.470385][ T1842] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.449: corrupted in-inode xattr [ 46.561668][ T1842] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.449: couldn't read orphan inode 15 (err -117) [ 46.586673][ T1842] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 46.626322][ T1854] netlink: 40 bytes leftover after parsing attributes in process `syz.0.454'. [ 46.648578][ T282] EXT4-fs (loop1): unmounting filesystem. [ 46.691081][ T1866] loop0: detected capacity change from 0 to 128 [ 46.702677][ T1866] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 46.712313][ T1866] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.760291][ T284] EXT4-fs (loop0): unmounting filesystem. [ 46.772070][ T1874] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 46.789827][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 46.805428][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.815865][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 46.825571][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.834646][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.844985][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.855897][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.864761][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.874620][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 46.883167][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 47.013766][ T1904] loop1: detected capacity change from 0 to 128 [ 47.022937][ T1904] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 47.032462][ T1904] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.059904][ T1909] syz.0.478[1909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.059983][ T1909] syz.0.478[1909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.088234][ T282] EXT4-fs (loop1): unmounting filesystem. [ 47.175754][ T1923] loop2: detected capacity change from 0 to 256 [ 47.183148][ T1923] FAT-fs (loop2): bogus number of FAT sectors [ 47.190836][ T1923] FAT-fs (loop2): Can't find a valid FAT filesystem [ 47.307854][ T1937] loop0: detected capacity change from 0 to 2048 [ 47.367068][ T1948] loop3: detected capacity change from 0 to 512 [ 47.374897][ T1948] EXT4-fs: Ignoring removed nobh option [ 47.381636][ T1948] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.396073][ T1948] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.496: iget: bad i_size value: 38620345925642 [ 47.409705][ T1948] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.496: couldn't read orphan inode 15 (err -117) [ 47.422007][ T1948] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 47.523678][ T1948] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.496: bg 0: block 5: invalid block bitmap [ 47.536563][ T1948] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 47.550639][ T1948] EXT4-fs (loop3): This should not happen!! Data will be lost [ 47.550639][ T1948] [ 47.561058][ T1948] EXT4-fs (loop3): Total free blocks count 0 [ 47.567705][ T1948] EXT4-fs (loop3): Free/Dirty block details [ 47.574109][ T1948] EXT4-fs (loop3): free_blocks=0 [ 47.579300][ T1948] EXT4-fs (loop3): dirty_blocks=4468 [ 47.585071][ T1948] EXT4-fs (loop3): Block reservation details [ 47.591343][ T1948] EXT4-fs (loop3): i_reserved_data_blocks=4468 [ 47.612376][ T854] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 48.080804][ T1982] incfs: Options parsing error. -22 [ 48.087128][ T1982] incfs: mount failed -22 [ 48.183525][ T1986] loop2: detected capacity change from 0 to 512 [ 48.192692][ T1986] EXT4-fs: Ignoring removed nobh option [ 48.199316][ T1986] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 48.202372][ T1988] overlayfs: failed to clone upperpath [ 48.242953][ T1986] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.509: iget: bad i_size value: 38620345925642 [ 48.258174][ T1986] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.509: couldn't read orphan inode 15 (err -117) [ 48.287771][ T1986] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 48.309369][ T2000] loop0: detected capacity change from 0 to 512 [ 48.317270][ T2000] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.348512][ T2000] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 48.372919][ T2003] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.509: bg 0: block 5: invalid block bitmap [ 48.397313][ T2003] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1912 with error 28 [ 48.412453][ T2003] EXT4-fs (loop2): This should not happen!! Data will be lost [ 48.412453][ T2003] [ 48.421204][ T2008] loop1: detected capacity change from 0 to 1024 [ 48.429016][ T2003] EXT4-fs (loop2): Total free blocks count 0 [ 48.440077][ T2003] EXT4-fs (loop2): Free/Dirty block details [ 48.457009][ T2003] EXT4-fs (loop2): free_blocks=0 [ 48.458356][ T2008] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 48.462008][ T2003] EXT4-fs (loop2): dirty_blocks=1916 [ 48.462027][ T2003] EXT4-fs (loop2): Block reservation details [ 48.462039][ T2003] EXT4-fs (loop2): i_reserved_data_blocks=1916 [ 48.526725][ T285] EXT4-fs (loop2): unmounting filesystem. [ 48.535352][ T2008] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.520: Allocating blocks 497-513 which overlap fs metadata [ 48.550880][ T2008] EXT4-fs (loop1): pa ffff88813bec2a80: logic 256, phys. 385, len 8 [ 48.559526][ T2008] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 48.600129][ T2008] EXT4-fs (loop1): shut down requested (2) [ 48.627328][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 48.627342][ T28] audit: type=1400 audit(1760356032.484:309): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 48.673625][ T282] EXT4-fs (loop1): unmounting filesystem. [ 48.714302][ T28] audit: type=1400 audit(1760356032.484:310): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.746286][ T28] audit: type=1400 audit(1760356032.484:311): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.767236][ T2040] tipc: Started in network mode [ 48.783936][ T2040] tipc: Node identity 4, cluster identity 4711 [ 48.790540][ T2040] tipc: Node number set to 4 [ 48.842737][ T28] audit: type=1400 audit(1760356032.484:312): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.896482][ T28] audit: type=1400 audit(1760356032.484:313): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.903214][ T2050] loop1: detected capacity change from 0 to 512 [ 48.928151][ T2050] EXT4-fs: Ignoring removed nobh option [ 48.945559][ T2050] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 48.956983][ T28] audit: type=1400 audit(1760356032.484:314): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.006206][ T2050] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.537: iget: bad i_size value: 38620345925642 [ 49.022629][ T2050] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.537: couldn't read orphan inode 15 (err -117) [ 49.027237][ T28] audit: type=1400 audit(1760356032.484:315): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.058154][ T28] audit: type=1400 audit(1760356032.554:316): avc: denied { map } for pid=2032 comm="syz.3.531" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 49.065795][ T2050] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 49.083438][ T28] audit: type=1400 audit(1760356032.554:317): avc: denied { write } for pid=2032 comm="syz.3.531" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 49.118309][ T294] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 49.236775][ T2050] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.537: bg 0: block 5: invalid block bitmap [ 49.249712][ T2050] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 49.262937][ T2050] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.262937][ T2050] [ 49.273798][ T2050] EXT4-fs (loop1): Total free blocks count 0 [ 49.280265][ T2050] EXT4-fs (loop1): Free/Dirty block details [ 49.286721][ T2050] EXT4-fs (loop1): free_blocks=0 [ 49.291915][ T2050] EXT4-fs (loop1): dirty_blocks=3372 [ 49.297340][ T2050] EXT4-fs (loop1): Block reservation details [ 49.303748][ T2050] EXT4-fs (loop1): i_reserved_data_blocks=3372 [ 49.310746][ T294] usb 1-1: Using ep0 maxpacket: 32 [ 49.317495][ T294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.325391][ T403] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1316 with error 28 [ 49.329227][ T294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.351517][ T294] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 49.361214][ T294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.370624][ T294] usb 1-1: config 0 descriptor?? [ 49.377660][ T294] hub 1-1:0.0: USB hub found [ 49.446082][ T2073] loop1: detected capacity change from 0 to 4096 [ 49.453383][ T2073] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.461476][ T2073] EXT4-fs (loop1): Test dummy encryption mode enabled [ 49.470498][ T2073] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 49.508049][ T2073] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 49.533889][ T282] EXT4-fs (loop1): unmounting filesystem. [ 49.557018][ T744] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 49.578416][ T294] hub 1-1:0.0: 1 port detected [ 49.600317][ T2085] loop2: detected capacity change from 0 to 4096 [ 49.609707][ T2085] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 49.622233][ T2085] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.551: corrupted inode contents [ 49.634491][ T2085] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #15: comm syz.2.551: mark_inode_dirty error [ 49.646608][ T2085] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.551: corrupted inode contents [ 49.659402][ T2085] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.551: mark_inode_dirty error [ 49.670976][ T2085] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.551: corrupted inode contents [ 49.683209][ T2085] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.551: mark_inode_dirty error [ 49.695275][ T2085] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.551: corrupted inode contents [ 49.707534][ T2085] EXT4-fs error (device loop2): ext4_truncate:4314: inode #15: comm syz.2.551: mark_inode_dirty error [ 49.718957][ T2085] EXT4-fs error (device loop2) in ext4_setattr:5660: Corrupt filesystem [ 49.728076][ T2087] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.551: corrupted inode contents [ 49.758198][ T744] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.777114][ T744] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 49.795876][ T744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.805307][ T744] usb 4-1: config 0 descriptor?? [ 49.836961][ T334] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 49.849690][ T285] EXT4-fs (loop2): unmounting filesystem. [ 49.991418][ T2110] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 50.006026][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 50.014859][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.024612][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 50.028283][ T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.037713][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.050870][ T334] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 50.053716][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.062426][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.079241][ T334] usb 2-1: config 0 descriptor?? [ 50.086296][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.107432][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.115624][ T28] audit: type=1400 audit(1760356033.964:318): avc: denied { write } for pid=2114 comm="syz.2.563" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.125225][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.153730][ T2119] loop2: detected capacity change from 0 to 1024 [ 50.169144][ T2119] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 50.177979][ T2119] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.212581][ T2119] EXT4-fs (loop2): unmounting filesystem. [ 50.214645][ T744] lenovo 0003:17EF:6047.000F: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 50.234353][ T294] hub 1-1:0.0: activate --> -90 [ 50.299353][ T2131] loop2: detected capacity change from 0 to 512 [ 50.309243][ T2131] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 50.318802][ T2131] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.414197][ T2069] loop3: detected capacity change from 0 to 128 [ 50.424835][ T285] EXT4-fs (loop2): unmounting filesystem. [ 50.432399][ T744] lenovo 0003:17EF:6047.000F: Failed to switch F7/9/11 mode: -71 [ 50.442314][ T744] lenovo 0003:17EF:6047.000F: Failed to switch middle button: -71 [ 50.458529][ T744] lenovo 0003:17EF:6047.000F: Fn-lock setting failed: -71 [ 50.468417][ T744] lenovo 0003:17EF:6047.000F: Sensitivity setting failed: -71 [ 50.481929][ T744] usb 4-1: USB disconnect, device number 6 [ 50.489225][ T334] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 50.503745][ T334] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0010/input/input21 [ 50.518867][ T2135] Disabled LAPIC found during irq injection [ 50.579791][ T334] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 50.641547][ T334] usb 1-1: USB disconnect, device number 7 [ 50.669284][ T2140] loop2: detected capacity change from 0 to 8192 [ 50.690620][ T2140] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 50.699809][ T2140] FAT-fs (loop2): Filesystem has been set read-only [ 50.706707][ T2140] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 50.716177][ T2140] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 50.726297][ T2140] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 50.768338][ T2142] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 51.017069][ T294] usb 1-1-port1: config error [ 51.058869][ T2161] loop2: detected capacity change from 0 to 512 [ 51.092891][ T2161] EXT4-fs: Ignoring removed nobh option [ 51.102741][ T2161] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.124764][ T2161] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.580: iget: bad i_size value: 38620345925642 [ 51.138361][ T2161] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.580: couldn't read orphan inode 15 (err -117) [ 51.150614][ T2161] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 51.243095][ T2181] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.580: bg 0: block 5: invalid block bitmap [ 51.274180][ T2181] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 51.320187][ T2181] EXT4-fs (loop2): This should not happen!! Data will be lost [ 51.320187][ T2181] [ 51.338102][ T2187] loop3: detected capacity change from 0 to 1024 [ 51.340727][ T2181] EXT4-fs (loop2): Total free blocks count 0 [ 51.361149][ T2181] EXT4-fs (loop2): Free/Dirty block details [ 51.375283][ T2181] EXT4-fs (loop2): free_blocks=0 [ 51.386099][ T294] usb 2-1: USB disconnect, device number 7 [ 51.398103][ T2187] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 51.408072][ T2181] EXT4-fs (loop2): dirty_blocks=3440 [ 51.416474][ T2181] EXT4-fs (loop2): Block reservation details [ 51.422909][ T2181] EXT4-fs (loop2): i_reserved_data_blocks=3440 [ 51.447742][ T530] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1384 with error 28 [ 51.481305][ T283] EXT4-fs (loop3): unmounting filesystem. [ 51.543392][ T2193] input: syz0 as /devices/virtual/input/input22 [ 51.725286][ T2219] loop0: detected capacity change from 0 to 512 [ 51.733259][ T2219] EXT4-fs: Ignoring removed nobh option [ 51.739891][ T2219] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.756516][ T2223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.606'. [ 51.767362][ T2223] netem: change failed [ 51.778686][ T2219] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.605: iget: bad i_size value: 38620345925642 [ 51.794102][ T2219] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.605: couldn't read orphan inode 15 (err -117) [ 51.806277][ T2219] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 51.859494][ T2233] loop3: detected capacity change from 0 to 128 [ 51.867265][ T2233] EXT4-fs: Ignoring removed nobh option [ 51.875311][ T2233] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 51.885002][ T2233] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.934944][ T2219] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.605: bg 0: block 5: invalid block bitmap [ 51.937271][ T2233] loop3: detected capacity change from 128 to 0 [ 51.967605][ C0] I/O error, dev loop3, sector 36 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 51.986712][ C0] I/O error, dev loop3, sector 72 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 51.996699][ C0] I/O error, dev loop3, sector 70 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 52.006811][ T2239] EXT4-fs error (device loop3): ext4_get_inode_loc:4647: inode #12: block 36: comm syz.3.611: unable to read itable block [ 52.020217][ T2219] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 52.033692][ T530] loop: Write error at byte offset 9223372036854776831, length 1024. [ 52.042428][ C0] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 52.052077][ C0] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 52.061841][ C0] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 52.071068][ T2239] EXT4-fs (loop3): I/O error while writing superblock [ 52.071187][ T2219] EXT4-fs (loop0): This should not happen!! Data will be lost [ 52.071187][ T2219] [ 52.091672][ T2219] EXT4-fs (loop0): Total free blocks count 0 [ 52.091992][ T2239] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5917: IO failure [ 52.100623][ T2219] EXT4-fs (loop0): Free/Dirty block details [ 52.114779][ T854] loop: Write error at byte offset 9223372036854776831, length 1024. [ 52.117875][ T2219] EXT4-fs (loop0): free_blocks=0 [ 52.128663][ T2219] EXT4-fs (loop0): dirty_blocks=3640 [ 52.133694][ C1] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 52.134537][ T2219] EXT4-fs (loop0): Block reservation details [ 52.144768][ C1] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 52.144800][ C1] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 52.155078][ T2219] EXT4-fs (loop0): i_reserved_data_blocks=3640 [ 52.161893][ T2239] EXT4-fs (loop3): I/O error while writing superblock [ 52.191586][ T2239] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #12: comm syz.3.611: mark_inode_dirty error [ 52.204675][ T854] loop: Write error at byte offset 9223372036854776831, length 1024. [ 52.214679][ C1] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 52.224558][ C1] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 52.234547][ C1] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 52.243679][ T2239] EXT4-fs (loop3): I/O error while writing superblock [ 52.246259][ T530] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1584 with error 28 [ 52.254640][ T2239] EXT4-fs error (device loop3): ext4_check_bdev_write_error:218: comm syz.3.611: Error while async write back metadata [ 52.279298][ T854] loop: Write error at byte offset 9223372036854776831, length 1024. [ 52.294557][ C1] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 52.304604][ C1] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 52.313288][ T2239] EXT4-fs (loop3): I/O error while writing superblock [ 52.323674][ T2239] EXT4-fs error (device loop3): ext4_check_bdev_write_error:218: comm syz.3.611: Error while async write back metadata [ 52.336724][ T854] loop: Write error at byte offset 9223372036854776831, length 1024. [ 52.346109][ C1] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 52.355978][ T2239] EXT4-fs (loop3): I/O error while writing superblock [ 52.363163][ T2239] EXT4-fs error (device loop3): ext4_get_inode_loc:4647: inode #12: block 36: comm syz.3.611: unable to read itable block [ 52.377114][ T854] loop: Write error at byte offset 9223372036854776831, length 1024. [ 52.385702][ C1] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 52.395180][ T2239] EXT4-fs (loop3): I/O error while writing superblock [ 52.406378][ T2239] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5917: IO failure [ 52.416770][ T2251] device wg2 entered promiscuous mode [ 52.425763][ T403] loop: Write error at byte offset 9223372036854776831, length 1024. [ 52.453503][ C1] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 52.462595][ T2239] EXT4-fs (loop3): I/O error while writing superblock [ 52.486998][ T2239] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.611: mark_inode_dirty error [ 52.527608][ T532] loop: Write error at byte offset 9223372036854776831, length 1024. [ 52.542041][ C1] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 52.551506][ T2239] EXT4-fs (loop3): I/O error while writing superblock [ 52.574383][ T2239] EXT4-fs error (device loop3): ext4_check_bdev_write_error:218: comm syz.3.611: Error while async write back metadata [ 52.619997][ T527] loop: Write error at byte offset 9223372036854776831, length 1024. [ 52.663158][ C1] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 52.671653][ T2239] EXT4-fs (loop3): I/O error while writing superblock [ 52.681113][ T2239] EXT4-fs error (device loop3): ext4_check_bdev_write_error:218: comm syz.3.611: Error while async write back metadata [ 52.700086][ T865] loop: Write error at byte offset 9223372036854776831, length 1024. [ 52.712879][ C1] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 52.732832][ T283] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 52.751197][ T2269] serio: Serial port ptm0 [ 52.827886][ T785] tipc: Left network mode [ 52.907219][ T2225] general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] PREEMPT SMP KASAN [ 52.919170][ T2225] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 52.927700][ T2225] CPU: 0 PID: 2225 Comm: ext4lazyinit Not tainted syzkaller #0 [ 52.935451][ T2225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 52.945869][ T2225] RIP: 0010:__ext4_journal_get_write_access+0xb0/0x6c0 [ 52.953230][ T2225] Code: 8e ff 49 8d 5f 30 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 fe 8b d2 ff 48 8b 1b 48 83 c3 38 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 e1 8b d2 ff 4c 8b 23 4d 85 e4 4c [ 52.974101][ T2225] RSP: 0018:ffffc90011e6fbc0 EFLAGS: 00010202 [ 52.980809][ T2225] RAX: 0000000000000007 RBX: 0000000000000038 RCX: ffff888118f83cc0 [ 52.988851][ T2225] RDX: 0000000000000000 RSI: 000000000000063f RDI: ffffffff863ded88 [ 52.997240][ T2225] RBP: ffffc90011e6fc90 R08: ffff8881419433f0 R09: 0000000000000001 [ 53.005947][ T2225] R10: ffffed102236348d R11: 1ffff1102236348c R12: 1ffff11026efea79 [ 53.015065][ T2225] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8881419433f0 [ 53.024202][ T2225] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 53.033269][ T2225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.039975][ T2225] CR2: 000000110c2de5ab CR3: 0000000134038000 CR4: 00000000003506b0 [ 53.048066][ T2225] DR0: 0000000000000081 DR1: 0000000080000000 DR2: 0000000000000032 [ 53.056084][ T2225] DR3: 7fffffffffffffff DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.064231][ T2225] Call Trace: [ 53.067538][ T2225] [ 53.070502][ T2225] ? __cfi___blk_flush_plug+0x10/0x10 [ 53.076038][ T2225] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 53.082988][ T2225] ? __kasan_check_read+0x11/0x20 [ 53.088056][ T2225] ? __ext4_journal_start_sb+0x2ed/0x4a0 [ 53.094518][ T2225] ext4_init_inode_table+0x3fa/0x7b0 [ 53.100137][ T2225] ? __cfi_ext4_init_inode_table+0x10/0x10 [ 53.106277][ T2225] ? ktime_get_with_offset+0x1c1/0x210 [ 53.111786][ T2225] ext4_lazyinit_thread+0x663/0x1500 [ 53.117296][ T2225] ? __cfi_ext4_lazyinit_thread+0x10/0x10 [ 53.123337][ T2225] ? __kasan_check_read+0x11/0x20 [ 53.128682][ T2225] ? __kthread_parkme+0x142/0x180 [ 53.134007][ T2225] kthread+0x281/0x320 [ 53.138293][ T2225] ? __cfi_ext4_lazyinit_thread+0x10/0x10 [ 53.144145][ T2225] ? __cfi_kthread+0x10/0x10 [ 53.148796][ T2225] ret_from_fork+0x1f/0x30 [ 53.153534][ T2225] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 53.156619][ T2225] Modules linked in: [ 53.220659][ T2225] ---[ end trace 0000000000000000 ]--- [ 53.226246][ T2225] RIP: 0010:__ext4_journal_get_write_access+0xb0/0x6c0 [ 53.233569][ T2225] Code: 8e ff 49 8d 5f 30 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 fe 8b d2 ff 48 8b 1b 48 83 c3 38 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 e1 8b d2 ff 4c 8b 23 4d 85 e4 4c [ 53.326957][ T2225] RSP: 0018:ffffc90011e6fbc0 EFLAGS: 00010202 [ 53.333285][ T2225] RAX: 0000000000000007 RBX: 0000000000000038 RCX: ffff888118f83cc0 [ 53.356946][ T2225] RDX: 0000000000000000 RSI: 000000000000063f RDI: ffffffff863ded88 [ 53.365422][ T2225] RBP: ffffc90011e6fc90 R08: ffff8881419433f0 R09: 0000000000000001 [ 53.387498][ T2225] R10: ffffed102236348d R11: 1ffff1102236348c R12: 1ffff11026efea79 [ 53.405494][ T2225] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8881419433f0 [ 53.427060][ T2225] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 53.436151][ T2225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.443198][ T2225] CR2: 00005635847b7b98 CR3: 000000010f39d000 CR4: 00000000003506b0 [ 53.451517][ T2225] DR0: 0000000000000081 DR1: 0000000080000000 DR2: 0000000000000032 [ 53.466960][ T2225] DR3: 7fffffffffffffff DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.475105][ T2225] Kernel panic - not syncing: Fatal exception [ 53.481886][ T2225] Kernel Offset: disabled [ 53.486315][ T2225] Rebooting in 86400 seconds..