last executing test programs: 43.115097765s ago: executing program 3 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/cpu_dma_latency\x00', 0x101042, 0x8) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x10c6b) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 42.826805682s ago: executing program 3 (id=30): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="150000001000000008"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x77) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r2], 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000040), 0x0}, 0x20) 42.660272937s ago: executing program 3 (id=33): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="ebeb63", 0xfdef}], 0x1}, 0x14000800) 42.611498638s ago: executing program 3 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x38a3098, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) umount2(&(0x7f0000000240)='./file0/file0/../file0\x00', 0x0) 42.52192309s ago: executing program 3 (id=38): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xd) 42.331240875s ago: executing program 3 (id=42): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x3, 0x2, 0x10000, 0x2000, &(0x7f0000fee000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="3e0fae89f4c9660f38802f66b9800000c00f3266350100000066b81f0000000f23c00f21f8663503000c4f42004200f8badbc7a0a037a9000fc76afdee0f20e06635000002000f22e0670f009afbd9f501c4e3f1ce25064f5b323235008000000f30ed", 0x63}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 42.331138335s ago: executing program 32 (id=42): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x3, 0x2, 0x10000, 0x2000, &(0x7f0000fee000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="3e0fae89f4c9660f38802f66b9800000c00f3266350100000066b81f0000000f23c00f21f8663503000c4f42004200f8badbc7a0a037a9000fc76afdee0f20e06635000002000f22e0670f009afbd9f501c4e3f1ce25064f5b323235008000000f30ed", 0x63}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19.903715549s ago: executing program 4 (id=409): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/modules\x00', 0x0, 0x0) write(r0, &(0x7f0000000000)='8', 0x1) syz_mount_image$fuse(&(0x7f0000000240), 0x0, 0x10008, &(0x7f0000000300)=ANY=[], 0x1, 0x0, 0x0) 19.48485139s ago: executing program 4 (id=417): socket$unix(0x1, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0001}]}) close_range(r0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0x2de9, r1}, 0x38) 19.420185921s ago: executing program 4 (id=418): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0xfffc, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="0182c20000d737c9fd1b17edf13601aa"], 0x0) 19.419991841s ago: executing program 4 (id=419): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0), 0x3, 0x45c, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) 19.331713433s ago: executing program 4 (id=421): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x77) sendfile(r0, r1, &(0x7f00000001c0), 0x8) fcntl$addseals(r1, 0x409, 0xc) fallocate(r1, 0x3, 0x90fc, 0x3) 17.766883492s ago: executing program 4 (id=431): mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x2, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x400, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) utime(&(0x7f0000000040)='./file0\x00', 0x0) chown(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 17.740398523s ago: executing program 33 (id=431): mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x2, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x400, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) utime(&(0x7f0000000040)='./file0\x00', 0x0) chown(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 10.995176309s ago: executing program 2 (id=530): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendfile(r0, r1, 0x0, 0x1) 10.925472741s ago: executing program 2 (id=533): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)={0x2b, 0x2b, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x8, {0x3, 0x0, 0x79, 0x7}}, @calipso={0x7, 0x48, {0x0, 0x10, 0xc0, 0x1, [0x73, 0x934, 0xfff, 0x5, 0x4, 0x3, 0x1, 0x4]}}, @generic={0xa1, 0x5b, "59cb7288795557ea9b476f3cdb080e63b0687cfaadbe599ac45d6d9071575e05df28a3621a9e375e5d18423e41aafd04bd5c9a63b238058141a021516617cb0bdd08f1e49a8a23412561a9421553c62b7720908b23437f9ca7c336"}, @pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0x51, 0xf, [0xfe]}}, @generic={0x6, 0x87, "9a01485ecac729407a0390fc142e75498f5b3f81a83039a4a1bfaef9e1731bc1400d7af38b66731fc290724a29b93a088fca4ca0fa6e7ca5d52789b8fc1b4288ecac3bdc903f17cc4fc2c7908070b70034f6f8ddfaf7a78eb482c76d46b874faef2ecc3119da102289d7777570b235deb851b9201c076c91eb874b616201d00f0681dfb294ec0e"}]}, 0x160) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x2, {{0xa, 0x4e21, 0x80, @mcast1, 0x7}}, {{0xa, 0x4e22, 0x3, @remote, 0xe}}}, 0x108) 9.857121547s ago: executing program 2 (id=536): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xa, 0x1a}}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000840)={0x18, r3, 0x719, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x880) 9.72988059s ago: executing program 2 (id=542): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) pidfd_send_signal(0xffffffffffffffff, 0x3, 0x0, 0x0) 9.676028452s ago: executing program 2 (id=544): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 8.750901495s ago: executing program 2 (id=547): chdir(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) 8.750667085s ago: executing program 34 (id=547): chdir(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) 3.547584153s ago: executing program 5 (id=569): sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000002"], 0x2c}], 0x1}, 0x0) 3.431148356s ago: executing program 5 (id=571): r0 = socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000900)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 3.003219677s ago: executing program 5 (id=580): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) pselect6(0x40, &(0x7f0000000040)={0x8, 0x0, 0x0, 0xffffffffffffe198, 0x7, 0xfffffff9, 0x1}, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 2.896898299s ago: executing program 6 (id=441): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x34) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x6, 0x0) 2.85525624s ago: executing program 7 (id=549): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000006a0000850000000500000095"], 0x0, 0x7, 0x0, 0x0, 0x100, 0x1c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.346676938s ago: executing program 1 (id=585): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000080)={0x474082, 0x5c, 0x8}, 0x18) 1.188057491s ago: executing program 5 (id=586): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)=@newtaction={0x14, 0x76, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x8, @loopback, 0x3}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.187056931s ago: executing program 1 (id=588): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000180)=0xb, 0x4) sendmmsg$inet6(r1, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 1.186967202s ago: executing program 6 (id=441): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x34) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x6, 0x0) 989.517316ms ago: executing program 7 (id=549): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000006a0000850000000500000095"], 0x0, 0x7, 0x0, 0x0, 0x100, 0x1c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 848.63595ms ago: executing program 5 (id=590): unshare(0x40000400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005e000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x1000, &(0x7f0000001000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 848.47051ms ago: executing program 0 (id=591): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000180)={0x0, &(0x7f00000004c0)=[@rdmsr={0x66, 0x18, {0x40000000}}, @enable_nested={0x12c, 0x18}, @nested_amd_stgi={0x17e, 0x10}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x31237648}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 847.85385ms ago: executing program 1 (id=592): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x1000000, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRES64=r0], 0x1, 0x3a2, &(0x7f0000000340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 847.73328ms ago: executing program 6 (id=441): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x34) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x6, 0x0) 727.732323ms ago: executing program 0 (id=593): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 726.860863ms ago: executing program 1 (id=594): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 726.752753ms ago: executing program 7 (id=549): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000006a0000850000000500000095"], 0x0, 0x7, 0x0, 0x0, 0x100, 0x1c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 632.173036ms ago: executing program 5 (id=595): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000580)="9344485a4f6c11", 0x7}], 0x1}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 632.047995ms ago: executing program 0 (id=596): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x28, 0x0, 0x5, 0xfffff038}, {0x6, 0x1, 0x2, 0xffffffff}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000380)={0xa, 0x4e1d, 0x4, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 631.607175ms ago: executing program 6 (id=441): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x34) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x6, 0x0) 468.47584ms ago: executing program 1 (id=597): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r3 = syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$eJzs3AuYjlW7OPB1r7UexjTpbZLDsO51P7xpaJkkySGnHJIkCUlOCUmTJAmJcZY0JCHHSXIYkuQwjUnjfD7knDT5pEmSkJBk/S/V3r5v9327vf/f9//b1577d13rsm7Pc9/vWnPPNe963uua+bbXmHot69duRkTinwK//ZMihIgRQowQQlwnhAiEEBXjK8Zfvl5AQco/9yLsX6t5+tVeAbuauP95G/c/b+P+523c/7yN+5+3cf/zNu5/3sb9Zywv2zGv2PU88u7gz//zMn7//18kt9zULzeVu7H3fyOF+5+3cf/zNu5/3sb9z9u4/3kb9/9/v1r/yTXuf97G/WcsL7vanz/zuLrjan//McYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLG877K7QQ4t/m/zDh5z+7gTHGGGOMMcYYY//T+PxXewWMMcYYY4wxxhj7fw+EFEpoEYh8Ir+IEQVErLhGxIlrRUFxnYiI60W8uEEUEjeKwqKIKCqKiQRRXJQQRqCwgkQoSopSIipuEqXFzSJRlBFlxS3CiXIiSdwqyovbRAVxu6go7hCVxJ2isqgiqopq4i5RXdQQNUUtUVvcLeqIuqKeqC/uEQ3EvaKhuE80EveLxuIB0UQ8KJqKh0Qz0Vy0EA+LluIR0Uo8KlqLNqKtaCfa/1/lvyj6iZdEfzFApIiBYpAYLIaIoWKYGC5GiJfFSPGKGCVeFalitBgjXhNjxetinHhDjBcTxETxppgkJospYqqYJqaLNPGWmCHeFjPFO2KWmC3miLkiXcwT88W7YoF4TywU74tF4gOxWCwRS8UykSE+FJliucgSH4kV4mORLVaKVWK1WCPWinVivdggNopNYrPYIraKbWK72CE+ETvFLrFb7BF7xT6xX3wqDojPxEHxucgRX/w388/9h/zeIECABAkaNOSDfBADMRALsRAHcVAQCkIEIhAP8VAICkFhKAxFoSgkQAKUgBKAgEBAUBJKQhSiUBpKQyIkQlkoCw4cJEESlIfboAJUgIpQESpBJagMVaAKVINqUB2qQ02oCbWhNtSBOlAP6sE9cA/cCw2hITSCRtAYGkMTaAJNoSk0g2bQAlpAS2gJraAVtIbW0BbaQntoDx2gA3SEjtAZOkMX6AJdoSskQzJ0g27QHbpDD+gBPaEn9IJe0Bv6QB94EV6El+AlGAB15EAYBINgCAyBYTAchsPLMBJegVfgVUiF0TAGXoPX4HUYB2dhPEyAiTARqsvJMAWmAsnpkAZpMANmwEyYCbNgNsyGuZAO82A+zIcF8B68B+/DIvgAPoAlsASWQQZkQCYshyzIghVwDrJhJayC1bAG1sIaWA8bYD1sgs2wCbbCVtgO2+ET+AR2wS7YA3tgH+yDT+FT+Aw+g1TIgRw4BIfgMByGI3AEciEXjsJROAbH4DgchxNwAk7CKTgNp+AMnIGzcA7Ow3m4ABfgIjyf8HWLfWU2pgp5mZZa5pP5ZIyMkbEyVsbJOFlQFpQRGZHxMl4WkoVkYVlYFpVFZYJMkCVkCYkSJclQlpQlZVRGZWlZWibKRFlWlpVOOpkkk2R5WV5WkBVkRXmHrCTvlJVlFdnJVZPVZHXZ2dWUtWRtWVvWkXVlPVlf1pcNZAPZUDaUjWQj2Vg2lk3kg7KpHAjDoLm83JmWcjS0kmOgtWwj28p28nV4THaQ46Cj7CQ7yyfkBBgPXWUHlyyflt3kFOgun5VT4TnZU06HXvIF2Vv2kX3li7Kf7Oj6ywFyFgyUg+RcGCKHymFyuFwAdeXljtWTr8pUOVqOka/JZfC6HCffkOPlBDlRviknyclyipwqp8npMk2+JWfIt+VM+Y6cJWfLOXKuTJfz5Hz5rlwg35ML5ftykfxALpZL5FK5TGbID2WmXC6z5EdyhfxYZsuVcpVcLdfItXKdXC83yI1yk9wst8itcpvcLnfIT+ROuUvulnvkXrlP7pefygPyM3lQfi5z5BfykPyLPCy/lEfkVzJXfi2Pym/kMfmtPC6/kyfk9/KkPCVPyx/kGfmjPCvPyfPyJ3lB/iwvyl/kJemlUKCkUkqrQOVT+VWMKqBi1TUqTl2rCqrrVERdr+LVDaqQulEVVkVUUVVMJajiqoQyCpVVpEJVUpVSUXWTKq1uVomqjCqrblFOlVNJ6lZVXt2mKqjbVUV1h6qk7lSVVRVVVVVTd6nqqoaqqWqp2upuVUfVVfVUfXWPaqDuVQ3VfaqRul81Vg+oJupB1VQ9pJqp5qqFeli1VI+oVupR1Vq1UW1VO9VePaY6qMdVR9VJdVZPqC7qSdVVPaWS1dOqm3pGdVfPqh7qOdVTPa96qRdUb9VH9VW/qEvKq/5qgEpRA9UgNVgNUUPVMDVcjVAvq5HqFTVKvapS1Wg1Rr2mxqrX1Tj1hhqvJqiJ6k01SU1WU9RUNU1NV2nqLTVDva1mqnfULDVbzVFzVbqap4b9XmnhfyH/7b+TP+rXV9+udqhP1E61S+1We9RetU/tV/vVAXVAHVQHVY7KUYfUIXVYHVZH1BGVq3LVUXVUHVPH1HF1XJ1QJ9RJdUr9pH5QZ9SP6qw6p86pn9QFdUFd/P1rIDRoqZXWOtD5dH4dowvoWH2NjtPX6oL6Oh3R1+t4fYMupG/UhXURXVQX0wm6uC6hjUZtNelQl9SldFTfpEvrm3WiLqPL6lu00+V0kr71n87/s/W11+11B91Bd9QddWfdWXfRXXRX3VUn62TdTXfT3XV33UP30D11T91L99K9dW/dV/fV/XQ/3V/31yk6RQ/Sg/UQPVQP08P1CP2yHqlH6lF6lE7VqXqMHqPH6rF6nB6nx+vxeqKeqCfpSXqKnqKn6Wk6TafpGXqGnqln6ll6lp6j5+h0na7n6/l6gV6gF+qFepFepBfrxXqpXqozdIbO1Jk6S2fpFXqFztYr9Uq9Wq/Wa/VavV6v1xv1Rr1Zb9Zb9VadrXfoHXqn3ql36916r96r9+v9+oA+oA/qgzpH5+hD+pA+rA/rI/qIztW5+qg+qo/pY/q4Pq5P6BP6pD6pT+vT+ow+o8/qs/q8Pq8v6Av6or6oL+lLl499gQxkoAMd5AvyBTFBTBAbxAZxQVxQMCgYRIJIEB/EB4WCG4PCQZGgaFAsSAiKByUCE2BgAwrCoGRQKogGNwWlg5uDxKBMUDa4JXBBuSApuDUoH9wWVAhuDyoGdwSVgjuDykGVoGpQLbgrqB7UCGoGtYLawd1BnaBuUC+oH9wTNAjuDRoG9wWNgvuDxsEDQZPgwaBp8FDQLGgetAgeDloGjwStgkeD1kGboG3QLmj/L63v/dkij7v+ZoBJMQPNIDPYDDFDzTAz3IwwL5uR5hUzyrxqUs1oM8a8Zsaa180484YZbyaYieZNM8lMNlPMVDPNTDdp5i0zw7xtZpp3zCwz28wxc026mVfj90O3WWjeN4vMB2axWWKWmmUmw3xoMs1yk2U+MivMxybbrDSrzGqzxqw168x6s8FsNJvMZrPFbDXbzHazw3xidppdZrfZY/aafWa/+dQcMJ+Zg+Zzk2O+MIfMX8xh86U5Yr4yueZrc9R8Y46Zb81x8505Yb43J80pc9r8YM6YH81Zc86cNz+ZC+Znc9H8Yi4Zf/lwf/ntHTVqzIf5MAZjMBZjMQ7jsCAWxAhGMB7jsRAWwsJYGItiUUzABCyBJfAyQsKSWBKjGMXSWBoTMRHLYll06DAJk7A8lscKWAErYkWshJWwMlbGqlgV78K7sAbWwFpYC+/Gu7Eu1sX6WB8bYANsiA2xETbCxtgYm2ATbIpNsRk2wxbYAltiS2yFrbA1tsa22BbbY3vsgB2wI3bEztgZu2AX7IpdMRmTsRt2w+7YHXtgD+yJPbEX9sLe2Bv7Yl/sh/2wP/bHFEzBQTgIh+AQHIbDcASOwJE4EkfhKEzFVByDY3AsjsVxOA7H4wSciG/iJJyMU3AqTsPpmIZpOANn4EycibNwFs7BOZiO6Tgf5+MCXIALcSEuwkW4GBfjUlyKGZiBmZiJWZiFK3AFZmM2rsJVuAbX4DpchxtwA27CTbgFt+A23IY7cAfuxJ24G3fjXtyL+3E/HsADeBAPYg7m4CE8hIfxMB7BI5iLuXgUj+IxPIbH8TiewBN4Ek/iaTyNZ/AMnsWzeB7P4wX8GS/iL3gJPcZYKWLtNTbOXmsL2utsjC1g/zouaovZBFvclrDGFrZF/iZGa22iLWPL2luss+Vskr31D3FlW8VWtdXsXba6rWFr/iFuYO+1De19tpG939a39/xN3Ng+YJvYR2xT+6htZtvYFradbWkfsa3so7a1bWPb2na2i33SdrVP2WT7tO1mn/lDnGmX2w12o91kN9sD9jN73v5kj9lv7QX7s+1vB9gR9mU70r5iR9lXbaod/Yd4on3TTrKT7RQ71U6z0/8Qz7FzbbqdZ+fbd+0C+94f4gz7oV1ks+xiu8Qutct+jS+vKct+ZFfYj222XWlX2dV2jV1r19n1/77W1Xar3Wa32/32U7vT7rK77R671+77Nb68j4P2c5tjv7BH7Tf2sP3SHrHHba79+tf48v6O2+/sCfu9PWlP2dP2B3vG/mjP2nO/7v/y3n+wv9hL1ltBQJIUaQooH+WnGCpAsXQNxdG1VJCuowhdT/F0AxWiG6kwFaGiVIwSqDiVIENIlohCKkmlKEo3UWm6mRKpDJWlW8hROUqiW6k83UYV6HaqSHdQJbqTKlMVqkrV6C6qTjWoJtWi2nQ31aG6VI/q0z3UgO6lhnQfNaL7qTE9QE3oQWpKD1Ezak4t6GFqSY9QK3qUWlMbakvtqD09Rh3ocepInagzPUFd6EnqSk9RMj1N3egZ6k7PUg96jnrS89SLXqDe1If60ovUj16i/jSAUmggDaLBNISG0jAaTiPoZRpJr9AoepVSaTSNoddoLL1O4+gNGk8TaCK9SZNoMk2hqTSNplMavUUz6G2aSe/QLJpNc2gupdM8mk/v0gJ6jxbS+7SIPqDFtISW0jLKoA8pk5ZTFn1EK+hjyqaVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoE9oJ+2i3bSH9tI+2k+f0gH6jA7S55RDX9Ah+gsdpi/pCH1FufQ1HaVv6Bh9S8fpOzpB39NJOkWn6Qc6Qz/SWTpH5+knukA/00X6hS6RJxFCKEMV6jAI84X5w5iwQBgbXhPGhdeGBcPrwkh4fRgf3hAWCm8MC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Ulg5vDhPDMmHZ8JbQheXCpPDWsHx4W1ghvD2sGN4RVgrvDCuHVcJH7q8W3hVWD2uENcNaYe3w7rBOWDesF9YP7wkbhPeGDcP7wkbh/WGF8IGwSfhg2DR8KGwWNg9bhA+HLcNHwlbho2HrsE3YNmwXtg8fCzuEj4cdw05h5/CJsEv4ZNg1fCpMDp8Ou4XP/On1lHBgOCgcHA4Ovb9PLY0ui2ZEP4xmRpdHs6IfRVdEP45mR1dGV0VXR9dE10bXRddHN0Q3RjdFN0e3RLdGt0W3R72vn184cNIpp13g8rn8LsYVcLHuGhfnrnUF3XUu4q538e4GV8jd6Aq7Iq6oK+YSXHFXwhmHzjpyoSvpSrmou8mVdje7RDe4+W8HiHIuybVz7V1718E97jq6Tq6ze8I94Z50T7qn3FPuadfNPeO6u2ddD/ec6+med8+7F1xv18f1dS+6fu4l198NcCkuxQ1yg9wQN8QNc8PcCDfCjXQj3Sg3yqW6VDfGjXFj3Vg3zo1z4914N9FNdJPcJDfFTXHT3DSX5tLcDDfDzXQz3Sw3y81xc1y6S3fz3Xy3wC1wC91CtyhxkVvsFrulbqnLcBku02W6LJflVrgVLttlu1VulVvj1rh1bp3b4Da4TW6T2+K2uG1um9vhdridbqfb7Xa7vW6v2+/2uwPugDvoDrocl+MOuUPusDvsjrivXK772h1137hj7lt33H3nTrjv3Ul3yp12P7gz7kd31p1z591P7oL72V10v7hLzru0yFuRGZG3IzMj70RmRWZH5kTmRtIj8yLzI+9GFkTeiyyMvB9ZFPkgsjiyJLI0siySEfkwkhlZHsmKfBRZEfk4kh1ZGVkVWR1ZE1kb8b74ztCX9KV81N/kS/ubfaIv48v6W7zz5XySv9WX97f5Cv52X9Hf4Sv5O31lX8VX9Y/61r6Nb+vb+fb+Md/BP+47+k6+s3/Cd/FP+q7+KZ/sn/bd/DO+u3/W9/DP+Z7+ed/Lv+B7+z6+r3/R9/Mv+f5+gE/xA/0gP9gP8UP9MD/cj/Av+5H+FT/Kv+pT/Wg/xr/mx/rX/Tj/hh/vJ/iJ/k0/yU/2U/xUP81P92n+LT/Dv+1n+nf8LD/bz/Fzfbqf5+f7d/0C/55f6N/3i/wHfrFf4pf6ZT7Df+gz/XKf5T/yK/zHPtuv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/Df+J3+l1+t9/j9/p9fr//1B/wn/mD/nOf47/wh/xf/GH/pT/iv/K5/mt/1H/jj/lv/XH/nT/hv/cn/Sl/2v/gz/gf/Vl/zp/3P/kL/md/0f/iL/GvpDHGGGOM/ZeoP7k+8O/8n/x9XDZICHHtrmK5/7HmlsK/zYfKhC4RIcTTA3o1/7dRp05KSsrv92YrEZRaIoSIXMnPJ67EK0Vn8aRIFp1E+b+7vqGyzwX6k/rRO4SI/aucGHElvlL/tn9Q/7EnJmZWCs/H/yf1lwiRWOpKTgFxJb5Sv8I/qF+kw5+sv8CXaUJ0/KucOHElvlI/STwunhHJf3MnY4wxxhhjjDH2m6Gyao8/e36+/HyeoK/k5BdX4j97PmeMMcYYY4wxxtjV91yfvk89lpzcqQdPeMITnvz75Gr/ZGKMMcYYY4z9q1059F/tlTDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY3nX/48/J3a198gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xdbf8nAAD//yx2QLk=") fstat(r3, &(0x7f0000000680)) 467.495649ms ago: executing program 7 (id=549): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000006a0000850000000500000095"], 0x0, 0x7, 0x0, 0x0, 0x100, 0x1c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 330.153052ms ago: executing program 0 (id=598): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 328.921832ms ago: executing program 6 (id=441): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x34) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x6, 0x0) 242.881745ms ago: executing program 7 (id=549): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000006a0000850000000500000095"], 0x0, 0x7, 0x0, 0x0, 0x100, 0x1c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 175.193247ms ago: executing program 0 (id=599): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}]}, 0x28}}, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x50, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 175.105276ms ago: executing program 6 (id=441): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x34) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x6, 0x0) 74.603689ms ago: executing program 1 (id=600): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r1, r2, 0x11, 0x0, r1}, 0x11) 73.415539ms ago: executing program 7 (id=549): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000006a0000850000000500000095"], 0x0, 0x7, 0x0, 0x0, 0x100, 0x1c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 0s ago: executing program 0 (id=601): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. [ 28.286739][ T30] audit: type=1400 audit(1791367943.497:64): avc: denied { mounton } for pid=276 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.288668][ T276] cgroup: Unknown subsys name 'net' [ 28.317730][ T30] audit: type=1400 audit(1791367943.497:65): avc: denied { mount } for pid=276 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.359414][ T30] audit: type=1400 audit(1791367943.537:66): avc: denied { unmount } for pid=276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.359635][ T276] cgroup: Unknown subsys name 'devices' [ 28.515854][ T276] cgroup: Unknown subsys name 'hugetlb' [ 28.523698][ T276] cgroup: Unknown subsys name 'rlimit' [ 28.632236][ T30] audit: type=1400 audit(1791367943.837:67): avc: denied { setattr } for pid=276 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.668257][ T30] audit: type=1400 audit(1791367943.837:68): avc: denied { mounton } for pid=276 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.674201][ T278] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.702923][ T30] audit: type=1400 audit(1791367943.837:69): avc: denied { mount } for pid=276 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.746016][ T30] audit: type=1400 audit(1791367943.927:70): avc: denied { relabelto } for pid=278 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 28.782277][ T30] audit: type=1400 audit(1791367943.927:71): avc: denied { write } for pid=278 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.828380][ T30] audit: type=1400 audit(1791367944.037:72): avc: denied { read } for pid=276 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.866991][ T30] audit: type=1400 audit(1791367944.037:73): avc: denied { open } for pid=276 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.867066][ T276] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.507598][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.519005][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.532106][ T284] device bridge_slave_0 entered promiscuous mode [ 29.541595][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.556076][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.569839][ T284] device bridge_slave_1 entered promiscuous mode [ 29.597118][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.607849][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.617419][ T285] device bridge_slave_0 entered promiscuous mode [ 29.628708][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.641735][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.655878][ T285] device bridge_slave_1 entered promiscuous mode [ 29.699925][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.713417][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.726904][ T288] device bridge_slave_0 entered promiscuous mode [ 29.740889][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.759240][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.776211][ T288] device bridge_slave_1 entered promiscuous mode [ 29.828638][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.838342][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.847936][ T286] device bridge_slave_0 entered promiscuous mode [ 29.859840][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.873308][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.885387][ T286] device bridge_slave_1 entered promiscuous mode [ 29.966480][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.978856][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.989658][ T287] device bridge_slave_0 entered promiscuous mode [ 30.002334][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.011971][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.021739][ T287] device bridge_slave_1 entered promiscuous mode [ 30.113322][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.124044][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.136538][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.145680][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.159289][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.167460][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.180868][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.190993][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.240933][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.253074][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.265039][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.274938][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.331561][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.342482][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.357362][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.369289][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.381555][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.395307][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.406936][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.448310][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.461251][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.469697][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.481067][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.491112][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.504403][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.515803][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.529665][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.541759][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.558994][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.572036][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.584533][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.597685][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.607818][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.619070][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.631934][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.646119][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.657226][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.687539][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.702760][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.714535][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.726462][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.743967][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.755371][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.773766][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.785309][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.800881][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.812428][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.828106][ T284] device veth0_vlan entered promiscuous mode [ 30.840525][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.852301][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.864963][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.877583][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.891992][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.900432][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.916848][ T286] device veth0_vlan entered promiscuous mode [ 30.931382][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.941645][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.956046][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.968214][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.980263][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.990377][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.003064][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.013099][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.028313][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.038129][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.062147][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.073403][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.087176][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.097391][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.109769][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.122405][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.138807][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.152967][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.168855][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.180014][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.191852][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.206302][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.220202][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.229410][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.240750][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.262276][ T284] device veth1_macvtap entered promiscuous mode [ 31.273441][ T286] device veth1_macvtap entered promiscuous mode [ 31.283700][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.293574][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.303630][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.317950][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.330106][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.341193][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.353650][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.363758][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.379055][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.392245][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.405659][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.419744][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.430746][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.440411][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.452717][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.468763][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.483783][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.519268][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.531963][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.546735][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.560916][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.578195][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.598741][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.612298][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.624421][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.650669][ T288] device veth0_vlan entered promiscuous mode [ 31.661798][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.674302][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.683801][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.698472][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.716068][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.731396][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.743306][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.757233][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.772592][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.791093][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.803657][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.819377][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.834406][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.848990][ T285] device veth0_vlan entered promiscuous mode [ 31.864178][ T284] request_module fs-gadgetfs succeeded, but still no fs? [ 31.867794][ T288] device veth1_macvtap entered promiscuous mode [ 31.886778][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.897075][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.905966][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.925176][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.943540][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.961998][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.976638][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.004544][ T287] device veth0_vlan entered promiscuous mode [ 32.013270][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.035466][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.045758][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.060149][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.071941][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.082231][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.093806][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.109785][ T306] tipc: Subscription rejected, illegal request [ 32.119199][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.150127][ T285] device veth1_macvtap entered promiscuous mode [ 32.169595][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.181408][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.193636][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.209187][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.220258][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.232865][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.244213][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.258617][ T287] device veth1_macvtap entered promiscuous mode [ 32.273732][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.288714][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.305430][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.338992][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.366279][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.402653][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.417445][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.438089][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.455384][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.512186][ T318] loop3: detected capacity change from 0 to 128 [ 32.579950][ T321] loop2: detected capacity change from 0 to 4096 [ 32.642770][ T321] EXT4-fs (loop2): Test dummy encryption mode enabled [ 32.669734][ T326] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.698519][ T321] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 32.712751][ T321] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 32.741170][ T321] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 32.751846][ T321] System zones: 0-5 [ 32.772908][ T321] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,jqfmt=vfsv1,block_validity,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 32.860602][ T321] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 33.102211][ T374] loop3: detected capacity change from 0 to 512 [ 33.134169][ T378] Illegal XDP return value 4294967274, expect packet loss! [ 33.156876][ T374] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000007,errors=continue,errors=continue,,errors=continue. Quota mode: none. [ 33.240288][ T384] loop1: detected capacity change from 0 to 1024 [ 33.268993][ T384] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 33.295731][ T384] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52238!=20869) [ 33.307533][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 33.307546][ T30] audit: type=1400 audit(1791367948.507:142): avc: denied { mount } for pid=387 comm="syz.3.25" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 33.349694][ T30] audit: type=1400 audit(1791367948.507:143): avc: denied { read write } for pid=387 comm="syz.3.25" name="cpu_dma_latency" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 33.355710][ T384] EXT4-fs (loop1): invalid journal inode [ 33.385935][ T30] audit: type=1400 audit(1791367948.507:144): avc: denied { open } for pid=387 comm="syz.3.25" path="/7/dev/cpu_dma_latency" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 33.424348][ T384] EXT4-fs (loop1): can't get journal size [ 33.435762][ T384] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000003,norecovery,inlinecrypt,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 33.467884][ T397] loop4: detected capacity change from 0 to 512 [ 33.501861][ T30] audit: type=1400 audit(1791367948.707:145): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 33.545539][ T401] loop0: detected capacity change from 0 to 2048 [ 33.557350][ T397] ======================================================= [ 33.557350][ T397] WARNING: The mand mount option has been deprecated and [ 33.557350][ T397] and is ignored by this kernel. Remove the mand [ 33.557350][ T397] option from the mount to silence this warning. [ 33.557350][ T397] ======================================================= [ 33.619537][ T30] audit: type=1400 audit(1791367948.827:146): avc: denied { bind } for pid=403 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.665817][ T30] audit: type=1400 audit(1791367948.827:147): avc: denied { name_bind } for pid=403 comm="syz.1.31" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 33.720728][ T401] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 33.741642][ T401] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.759539][ T30] audit: type=1400 audit(1791367948.827:148): avc: denied { node_bind } for pid=403 comm="syz.1.31" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 33.784871][ T401] fs-verity: sha512 using implementation "sha512-avx2" [ 33.786506][ T30] audit: type=1400 audit(1791367948.827:149): avc: denied { connect } for pid=403 comm="syz.1.31" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.825794][ T30] audit: type=1400 audit(1791367948.827:150): avc: denied { read } for pid=403 comm="syz.1.31" path="socket:[16019]" dev="sockfs" ino=16019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.861239][ T30] audit: type=1400 audit(1791367948.867:151): avc: denied { create } for pid=405 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.884226][ T401] syz.0.29 (401) used greatest stack depth: 21000 bytes left [ 34.118081][ T435] loop0: detected capacity change from 0 to 512 [ 34.144492][ T435] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.187548][ T439] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 34.195065][ T433] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.211615][ T433] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.222690][ T433] device bridge_slave_0 entered promiscuous mode [ 34.243120][ T433] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.252470][ T433] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.262612][ T433] device bridge_slave_1 entered promiscuous mode [ 34.325165][ T433] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.335668][ T433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.337867][ T447] loop0: detected capacity change from 0 to 2048 [ 34.345228][ T433] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.363569][ T433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.398504][ T447] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.414815][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.423806][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.424794][ T447] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.437745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.493405][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.516497][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.555863][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.580744][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.604162][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.625645][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.667879][ T433] device veth0_vlan entered promiscuous mode [ 34.717310][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.747053][ T433] device veth1_macvtap entered promiscuous mode [ 34.792202][ T447] fs-verity (loop0, inode 13): Error -28 writing Merkle tree block 92128 [ 34.803205][ T447] fs-verity (loop0, inode 13): Error -28 building Merkle tree [ 34.832057][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.857844][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.115771][ T454] loop1: detected capacity change from 0 to 40427 [ 35.132705][ T464] loop0: detected capacity change from 0 to 8192 [ 35.135784][ T454] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 35.154655][ T45] device bridge_slave_1 left promiscuous mode [ 35.169036][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.184963][ T45] device bridge_slave_0 left promiscuous mode [ 35.195493][ T454] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 35.203929][ T310] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 35.213970][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.232123][ T454] F2FS-fs (loop1): invalid crc value [ 35.241968][ T45] device veth1_macvtap left promiscuous mode [ 35.250115][ T45] device veth0_vlan left promiscuous mode [ 35.284851][ T454] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 35.336306][ T469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.54'. [ 35.374205][ T454] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 35.387773][ T454] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 35.573956][ T310] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 35.602274][ T475] EXT4-fs (loop4): Ignoring removed nobh option [ 35.603915][ T310] usb 6-1: config 4 has no interface number 0 [ 35.631379][ T475] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 35.631379][ T475] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 35.631379][ T475] [ 35.643960][ T310] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 35.687918][ T477] input: syz0 as /devices/virtual/input/input4 [ 35.692180][ T475] EXT4-fs (loop4): Ignoring removed bh option [ 35.725785][ T310] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.766126][ T475] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,noblock_validity,i_version,nouser_xattr,noinit_itable,bh,,errors=continue. Quota mode: writeback. [ 35.811685][ T310] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 35.844168][ T310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.915406][ T310] hub 6-1:4.128: USB hub found [ 35.940680][ T475] syz.4.56 (475) used greatest stack depth: 19776 bytes left [ 35.964194][ T284] attempt to access beyond end of device [ 35.964194][ T284] loop1: rw=2049, want=45104, limit=40427 [ 35.984359][ T462] F2FS-fs (loop2): invalid crc value [ 36.035152][ T462] F2FS-fs (loop2): Found nat_bits in checkpoint [ 36.092969][ T462] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 36.123982][ T310] hub 6-1:4.128: 27 ports detected [ 36.142155][ T310] hub 6-1:4.128: Using single TT (err -22) [ 36.151056][ T462] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 36.184245][ T310] hub 6-1:4.128: insufficient power available to use all downstream ports [ 36.196513][ T39] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 36.209210][ T287] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.223912][ T287] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.235322][ T287] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.247791][ T287] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.262863][ T287] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 36.277705][ T287] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.290939][ T287] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.303165][ T287] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.318822][ T287] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.334462][ T287] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.347854][ T287] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.362722][ T287] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.375796][ T287] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.377524][ T310] hub 6-1:4.128: hub_hub_status failed (err = -71) [ 36.387029][ T287] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.387053][ T287] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 36.420650][ T310] hub 6-1:4.128: config failed, can't get hub status (err -71) [ 36.472325][ T310] usb 6-1: USB disconnect, device number 2 [ 36.523939][ T289] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 36.583962][ T39] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 36.602451][ T39] usb 1-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.627693][ T39] usb 1-1: config 0 interface 0 has no altsetting 0 [ 36.639641][ T39] usb 1-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 36.653392][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.666505][ T39] usb 1-1: config 0 descriptor?? [ 36.844015][ T20] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 36.894042][ T289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.912051][ T289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.928414][ T289] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 36.947438][ T289] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 36.962561][ T289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.989578][ T289] usb 2-1: config 0 descriptor?? [ 37.094010][ T20] usb 3-1: Using ep0 maxpacket: 8 [ 37.165643][ T39] wacom 0003:056A:0016.0001: unbalanced collection at end of report description [ 37.179804][ T39] wacom 0003:056A:0016.0001: parse failed [ 37.192090][ T39] wacom: probe of 0003:056A:0016.0001 failed with error -22 [ 37.372520][ T512] usb 1-1: USB disconnect, device number 2 [ 37.381191][ T20] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 37.394308][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.405975][ T20] usb 3-1: Product: syz [ 37.412187][ T20] usb 3-1: Manufacturer: syz [ 37.420854][ T20] usb 3-1: SerialNumber: syz [ 37.474879][ T289] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 37.487252][ T289] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 37.497810][ T289] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 37.508903][ T289] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 37.521336][ T289] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 37.530371][ T289] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 37.542067][ T289] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 37.552981][ T289] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 37.563583][ T289] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 37.574718][ T289] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 37.585804][ T289] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 37.598376][ T289] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 37.609299][ T289] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 37.621754][ T289] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 37.637506][ T289] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 37.754852][ T289] usb 2-1: USB disconnect, device number 2 [ 37.813988][ T20] usb 3-1: MIDIStreaming interface descriptor not found [ 37.828266][ T20] usb 3-1: USB disconnect, device number 2 [ 37.908288][ T538] set_capacity_and_notify: 2 callbacks suppressed [ 37.908300][ T538] loop5: detected capacity change from 0 to 256 [ 37.949234][ T540] loop0: detected capacity change from 0 to 512 [ 38.042571][ T538] device bridge_slave_0 left promiscuous mode [ 38.053533][ T538] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.066382][ T538] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 38.090222][ T514] udevd[514]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.253949][ T289] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 38.280608][ T560] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none. [ 38.315200][ T565] xt_hashlimit: size too large, truncated to 1048576 [ 38.459787][ T570] loop2: detected capacity change from 0 to 512 [ 38.508100][ T570] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 38.521053][ T570] EXT4-fs error (device loop2): ext4_iget_extra_inode:4604: inode #15: comm syz.2.93: corrupted in-inode xattr [ 38.537102][ T570] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.93: couldn't read orphan inode 15 (err -117) [ 38.537800][ T563] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 38.559426][ T570] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,max_dir_size_kb=0x0000000000000005,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 38.611176][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 38.611189][ T30] audit: type=1400 audit(1791367953.817:233): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 38.653924][ T289] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.667884][ T20] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 38.679086][ T289] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 38.694708][ T576] loop2: detected capacity change from 0 to 256 [ 38.740150][ T582] loop4: detected capacity change from 0 to 256 [ 38.757082][ T576] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 38.774002][ T289] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 38.774317][ T582] FAT-fs (loop4): Unrecognized mount option "shorkname=winnt" or missing value [ 38.796590][ T289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 38.802325][ T30] audit: type=1400 audit(1791367954.007:234): avc: denied { write } for pid=575 comm="syz.2.95" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.816610][ T289] usb 1-1: SerialNumber: syz [ 38.843778][ T30] audit: type=1400 audit(1791367954.057:235): avc: denied { add_name } for pid=575 comm="syz.2.95" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.869036][ T576] attempt to access beyond end of device [ 38.869036][ T576] loop2: rw=524288, want=34359738496, limit=256 [ 38.895073][ T576] attempt to access beyond end of device [ 38.895073][ T576] loop2: rw=0, want=34359738496, limit=256 [ 38.897689][ T30] audit: type=1400 audit(1791367954.057:236): avc: denied { associate } for pid=575 comm="syz.2.95" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 38.909464][ T576] attempt to access beyond end of device [ 38.909464][ T576] loop2: rw=0, want=34359738496, limit=256 [ 38.973904][ T30] audit: type=1400 audit(1791367954.057:237): avc: denied { read } for pid=575 comm="syz.2.95" name="file1" dev="loop2" ino=1048657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.048985][ T30] audit: type=1400 audit(1791367954.077:238): avc: denied { map } for pid=575 comm="syz.2.95" path="/14/file1/file1" dev="loop2" ino=1048657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.083965][ T20] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 39.112349][ T20] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 39.133928][ T20] usb 6-1: config 1 interface 0 has no altsetting 0 [ 39.144552][ T289] usb 1-1: 0:2 : does not exist [ 39.159265][ T289] usb 1-1: USB disconnect, device number 3 [ 39.194133][ T8] attempt to access beyond end of device [ 39.194133][ T8] loop2: rw=1, want=8320, limit=256 [ 39.250854][ T594] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 39.279640][ T594] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 39.327849][ T599] xt_hashlimit: size too large, truncated to 1048576 [ 39.364007][ T20] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 39.383896][ T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 39.393911][ T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.412180][ T20] usb 6-1: Product: syz [ 39.418329][ T20] usb 6-1: Manufacturer: syz [ 39.425797][ T20] usb 6-1: SerialNumber: syz [ 39.453953][ T568] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 39.470629][ T568] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 39.496869][ T604] netlink: 180 bytes leftover after parsing attributes in process `syz.2.105'. [ 39.564002][ T608] loop2: detected capacity change from 0 to 1024 [ 39.582514][ T608] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 39.598357][ T608] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 39.607873][ T608] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,quota,,errors=continue. Quota mode: writeback. [ 39.631304][ T608] syz.2.107 (pid 608) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 39.664172][ T30] audit: type=1400 audit(1791367954.877:239): avc: denied { read write } for pid=613 comm="syz.0.110" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 39.697105][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 39.704728][ T30] audit: type=1400 audit(1791367954.917:240): avc: denied { open } for pid=613 comm="syz.0.110" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 39.773804][ T30] audit: type=1400 audit(1791367954.977:241): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 39.844098][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.864036][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.880232][ T26] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 39.891355][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.914237][ T26] usb 5-1: config 0 descriptor?? [ 39.964451][ T26] hub 5-1:0.0: USB hub found [ 40.083977][ T289] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 40.193920][ T26] hub 5-1:0.0: 1 port detected [ 40.323895][ T512] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 40.334031][ T289] usb 3-1: Using ep0 maxpacket: 32 [ 40.453984][ T289] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.473945][ T289] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 32 [ 40.494676][ T289] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 40.511621][ T289] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 40.564002][ T20] (unnamed net_device) (uninitialized): Assigned a random MAC address: 2e:ec:21:8d:fd:33 [ 40.578091][ T512] usb 1-1: Using ep0 maxpacket: 16 [ 40.587481][ T20] rtl8150 6-1:1.0: eth1: rtl8150 is detected [ 40.602227][ T30] audit: type=1400 audit(1791367955.817:242): avc: denied { read } for pid=139 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 40.723997][ T289] usb 3-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 40.738748][ T512] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.758312][ T289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.769863][ T512] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.783907][ T289] usb 3-1: Product: syz [ 40.806063][ T289] usb 3-1: Manufacturer: syz [ 40.813356][ T289] usb 3-1: SerialNumber: syz [ 40.820348][ T313] usb 6-1: USB disconnect, device number 3 [ 40.834057][ T139] net eth1: rx_urb submit failed: -19 [ 40.842135][ T620] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 40.853961][ T26] hub 5-1:0.0: activate --> -90 [ 40.855695][ T620] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 40.963970][ T512] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 40.979674][ T512] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.990542][ T512] usb 1-1: Product: syz [ 40.995602][ T512] usb 1-1: Manufacturer: syz [ 41.001012][ T512] usb 1-1: SerialNumber: syz [ 41.204053][ T666] loop7: detected capacity change from 0 to 7 [ 41.215045][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.230774][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 41.244993][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.261898][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 41.272866][ T666] loop7: unable to read partition table [ 41.274317][ T310] usb 5-1: USB disconnect, device number 2 [ 41.282878][ T666] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 41.288457][ T26] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 41.339340][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 41.344066][ T512] usb 1-1: 0:2 : does not exist [ 41.357757][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.371214][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 41.382493][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.398707][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 41.413692][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.430026][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 41.443412][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.443611][ T512] usb 1-1: USB disconnect, device number 4 [ 41.458257][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 41.485077][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.502849][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 41.504079][ T289] usb 3-1: MIDIStreaming interface descriptor not found [ 41.553633][ T289] usb 3-1: USB disconnect, device number 3 [ 41.613993][ T26] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 41.709792][ T687] netlink: 9 bytes leftover after parsing attributes in process `syz.1.127'. [ 41.722143][ T687] device gretap0 entered promiscuous mode [ 41.740358][ T687] netlink: 5 bytes leftover after parsing attributes in process `syz.1.127'. [ 41.755475][ T687] 0{X: renamed from gretap0 [ 41.764412][ T687] device 30{X left promiscuous mode [ 41.774833][ T687] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 41.854971][ T696] loop4: detected capacity change from 0 to 128 [ 41.895032][ T696] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 41.951190][ T696] attempt to access beyond end of device [ 41.951190][ T696] loop4: rw=2049, want=157, limit=128 [ 41.972900][ T696] Buffer I/O error on dev loop4, logical block 156, lost async page write [ 41.983486][ T696] attempt to access beyond end of device [ 41.983486][ T696] loop4: rw=2049, want=158, limit=128 [ 41.999190][ T696] Buffer I/O error on dev loop4, logical block 157, lost async page write [ 42.018148][ T705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 42.034505][ T26] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.035201][ T696] attempt to access beyond end of device [ 42.035201][ T696] loop4: rw=2049, want=159, limit=128 [ 42.066878][ T26] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 42.069194][ T696] Buffer I/O error on dev loop4, logical block 158, lost async page write [ 42.093204][ T696] attempt to access beyond end of device [ 42.093204][ T696] loop4: rw=2049, want=160, limit=128 [ 42.112873][ T696] attempt to access beyond end of device [ 42.112873][ T696] loop4: rw=2049, want=161, limit=128 [ 42.128901][ T696] attempt to access beyond end of device [ 42.128901][ T696] loop4: rw=2049, want=162, limit=128 [ 42.147530][ T707] attempt to access beyond end of device [ 42.147530][ T707] loop4: rw=2049, want=157, limit=128 [ 42.161029][ T707] attempt to access beyond end of device [ 42.161029][ T707] loop4: rw=2049, want=158, limit=128 [ 42.177638][ T707] attempt to access beyond end of device [ 42.177638][ T707] loop4: rw=2049, want=159, limit=128 [ 42.184050][ T26] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 42.204343][ T707] attempt to access beyond end of device [ 42.204343][ T707] loop4: rw=2049, want=160, limit=128 [ 42.241348][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 42.263305][ T26] usb 6-1: SerialNumber: syz [ 42.351286][ T715] loop2: detected capacity change from 0 to 4096 [ 42.360471][ T8] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 42.462348][ T715] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c019, mo2=0003] [ 42.496440][ T715] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,noblock_validity,grpjquota=,lazytime,delalloc,nombcache,,errors=continue. Quota mode: writeback. [ 42.578701][ T26] usb 6-1: 0:2 : does not exist [ 42.579908][ T721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.139'. [ 42.595203][ T26] usb 6-1: unit 3 not found! [ 42.606778][ T26] usb 6-1: USB disconnect, device number 4 [ 42.623371][ T715] EXT4-fs (loop2): shut down requested (1) [ 42.677044][ T727] ip_tables: iptables: counters copy to user failed while replacing table [ 42.709142][ T729] loop4: detected capacity change from 0 to 512 [ 42.771245][ T729] EXT4-fs (loop4): 1 truncate cleaned up [ 42.785396][ T729] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 42.812427][ T729] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.143: bg 0: block 465: padding at end of block bitmap is not set [ 42.834807][ T729] EXT4-fs (loop4): Remounting filesystem read-only [ 42.858659][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.002460][ T744] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=744 comm=syz.4.145 [ 43.029883][ T737] loop2: detected capacity change from 0 to 40427 [ 43.054409][ T737] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 43.072298][ T737] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 43.107115][ T737] F2FS-fs (loop2): invalid crc value [ 43.129513][ T737] F2FS-fs (loop2): Found nat_bits in checkpoint [ 43.170529][ T737] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 43.180651][ T737] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 43.393904][ T26] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 43.393916][ T289] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 43.733907][ T676] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 43.754055][ T310] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 43.754104][ T289] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 43.778273][ T289] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.778622][ T775] loop2: detected capacity change from 0 to 131072 [ 43.791885][ T289] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 43.814605][ T26] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 43.829799][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.845024][ T26] usb 6-1: config 0 descriptor?? [ 43.864168][ T289] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 43.881107][ T289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 43.892471][ T289] usb 2-1: SerialNumber: syz [ 43.907393][ T775] F2FS-fs (loop2): Test dummy encryption mode enabled [ 43.918109][ T775] F2FS-fs (loop2): invalid crc value [ 43.927511][ T775] F2FS-fs (loop2): Found nat_bits in checkpoint [ 43.960125][ T775] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 43.992424][ T775] fscrypt: key with description 'fscrypt:e355a76a11a1be18' is too short (got 30 bytes, need 32+ bytes) [ 44.007588][ T775] fscrypt: key with description 'fscrypt:e355a76a11a1be18' is too short (got 30 bytes, need 32+ bytes) [ 44.033959][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 44.163810][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 44.164394][ T783] netlink: 56 bytes leftover after parsing attributes in process `syz.2.162'. [ 44.174849][ T30] audit: type=1400 audit(1791367959.367:279): avc: denied { nlmsg_read } for pid=782 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.223974][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.239741][ T676] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 44.255280][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.270340][ T676] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 44.286248][ T310] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 44.300468][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.317484][ T310] usb 1-1: config 0 descriptor?? [ 44.364576][ T310] hub 1-1:0.0: USB hub found [ 44.464002][ T676] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 44.483901][ T676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.496865][ T676] usb 5-1: Product: syz [ 44.502558][ T676] usb 5-1: Manufacturer: syz [ 44.510049][ T676] usb 5-1: SerialNumber: syz [ 44.534954][ T676] usb 5-1: config 0 descriptor?? [ 44.564010][ T773] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 44.576183][ T773] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 44.583988][ T310] hub 1-1:0.0: 1 port detected [ 44.806338][ T773] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 44.816815][ T773] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 45.183967][ T26] usb 6-1: Cannot set autoneg [ 45.189837][ T26] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 45.206032][ T26] usb 6-1: USB disconnect, device number 5 [ 45.243933][ T310] hub 1-1:0.0: activate --> -90 [ 45.275109][ T676] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 45.524143][ T797] loop2: detected capacity change from 0 to 40427 [ 45.576716][ T797] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 45.586555][ T797] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 45.597517][ T797] F2FS-fs (loop2): invalid crc value [ 45.606282][ T797] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 45.633314][ T797] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 45.643258][ T797] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 45.665905][ T313] usb 1-1: USB disconnect, device number 5 [ 45.725373][ T805] loop5: detected capacity change from 0 to 4096 [ 45.746585][ T805] EXT4-fs (loop5): Ignoring removed nobh option [ 45.756443][ T805] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5 [ 45.756443][ T805] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 45.756443][ T805] [ 45.790642][ T805] EXT4-fs (loop5): Ignoring removed bh option [ 45.802907][ T805] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,noblock_validity,i_version,nouser_xattr,noinit_itable,bh,,errors=continue. Quota mode: writeback. [ 45.895589][ T809] loop5: detected capacity change from 0 to 512 [ 45.915236][ T310] usb 1-1-port1: config error [ 45.929194][ T809] EXT4-fs (loop5): Test dummy encryption mode enabled [ 45.965643][ T809] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,min_batch_time=0x0000000000000006,errors=remount-ro,debug_want_extra_isize=0x0000000000000200,. Quota mode: writeback. [ 45.998296][ T30] audit: type=1400 audit(1791367961.207:280): avc: denied { setattr } for pid=808 comm="syz.5.170" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.027444][ T30] audit: type=1400 audit(1791367961.207:281): avc: denied { mmap_zero } for pid=812 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 46.054796][ T676] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 46.070189][ T676] dm9601 5-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, 0a:f3:7e:e3:61:56 [ 46.094364][ T676] usb 5-1: USB disconnect, device number 3 [ 46.104387][ T676] dm9601 5-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 46.142494][ T310] usb 2-1: USB disconnect, device number 3 [ 46.192884][ T819] kvm: apic: phys broadcast and lowest prio [ 46.262454][ T830] loop2: detected capacity change from 0 to 512 [ 46.340853][ T830] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 46.358431][ T830] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.369306][ T30] audit: type=1400 audit(1791367961.577:282): avc: denied { remount } for pid=835 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.401254][ T30] audit: type=1400 audit(1791367961.597:283): avc: denied { mount } for pid=845 comm="syz.0.185" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 46.434183][ T30] audit: type=1400 audit(1791367961.647:284): avc: denied { ioctl } for pid=850 comm="syz.1.188" path="socket:[18017]" dev="sockfs" ino=18017 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.466905][ T854] loop4: detected capacity change from 0 to 256 [ 46.504117][ T854] exfat: Deprecated parameter 'utf8' [ 46.560010][ T854] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 46.774543][ T848] loop5: detected capacity change from 0 to 40427 [ 46.797194][ T848] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 46.817705][ T848] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 46.863712][ T848] F2FS-fs (loop5): invalid crc value [ 46.883998][ T313] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 46.889903][ T30] audit: type=1400 audit(1791367962.097:285): avc: denied { checkpoint_restore } for pid=872 comm="syz.4.197" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.921083][ T848] F2FS-fs (loop5): Found nat_bits in checkpoint [ 46.985259][ T848] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 47.006591][ T848] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 47.041036][ T848] F2FS-fs (loop5): switch extent_cache option is not allowed [ 47.143912][ T313] usb 2-1: Using ep0 maxpacket: 32 [ 47.236688][ T30] audit: type=1400 audit(1791367962.447:286): avc: denied { create } for pid=881 comm="syz.5.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.273906][ T313] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 47.294010][ T313] usb 2-1: config 0 has no interface number 0 [ 47.305740][ T30] audit: type=1400 audit(1791367962.467:287): avc: denied { bind } for pid=881 comm="syz.5.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.353951][ T30] audit: type=1400 audit(1791367962.467:288): avc: denied { name_bind } for pid=881 comm="syz.5.199" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 47.398331][ T861] loop2: detected capacity change from 0 to 131072 [ 47.417347][ T861] F2FS-fs (loop2): invalid crc value [ 47.434429][ T894] binder: 893:894 unknown command 0 [ 47.443431][ T894] binder: 893:894 ioctl c0306201 2000000001c0 returned -22 [ 47.469055][ T861] F2FS-fs (loop2): Found nat_bits in checkpoint [ 47.493998][ T313] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 47.513056][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.547596][ T861] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 47.557142][ T313] usb 2-1: Product: syz [ 47.557161][ T313] usb 2-1: Manufacturer: syz [ 47.557172][ T313] usb 2-1: SerialNumber: syz [ 47.562181][ T313] usb 2-1: config 0 descriptor?? [ 47.582859][ T909] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 47.593939][ T861] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 47.614609][ T313] smsc95xx v2.0.0 [ 47.633150][ T861] xt_hashlimit: size too large, truncated to 1048576 [ 47.661932][ T916] smpboot: CPU 1 is now offline [ 47.727017][ T921] loop5: detected capacity change from 0 to 512 [ 47.804695][ T921] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 47.861735][ T921] EXT4-fs error (device loop5): ext4_readdir:223: inode #2: comm syz.5.213: path /newroot/32/file1: directory fails checksum at offset 0 [ 48.043895][ T289] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 48.314007][ T289] usb 5-1: Using ep0 maxpacket: 16 [ 48.403620][ T946] loop2: detected capacity change from 0 to 256 [ 48.442507][ T946] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 48.464357][ T289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.496479][ T289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.524239][ T289] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 48.549669][ T946] exFAT-fs (loop2): hint_cluster is invalid (17) [ 48.592030][ T289] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 48.627790][ T289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.665461][ T289] usb 5-1: config 0 descriptor?? [ 48.799982][ T970] loop2: detected capacity change from 0 to 512 [ 48.855376][ T970] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 48.855376][ T970] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 48.855376][ T970] [ 48.923916][ T313] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 48.973560][ T313] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 48.997183][ T970] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 49.018157][ T986] loop5: detected capacity change from 0 to 512 [ 49.053939][ T313] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 49.116343][ T313] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 49.144478][ T970] EXT4-fs (loop2): 1 truncate cleaned up [ 49.155596][ T289] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 49.180015][ T313] usb 2-1: USB disconnect, device number 4 [ 49.191626][ T970] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000004,dioread_nolock,nouser_xattr,jqfmt=vfsold,nogrpid,grpjquota=,,errors=continue. Quota mode: none. [ 49.226899][ T289] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 49.263907][ T289] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 49.298591][ T289] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 49.340464][ T970] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 1953005571 (only 1 groups) [ 49.361250][ T289] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 49.387240][ T289] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 49.423907][ T289] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 49.483226][ T289] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 49.521479][ T289] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 49.567195][ T289] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0003/input/input6 [ 49.587757][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 49.587766][ T30] audit: type=1400 audit(1791367964.807:305): avc: denied { create } for pid=1013 comm="syz.0.252" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.637904][ T1016] loop2: detected capacity change from 0 to 1024 [ 49.695918][ T289] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 49.715395][ T1016] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 49.790084][ T289] usb 5-1: USB disconnect, device number 4 [ 49.808579][ T30] audit: type=1400 audit(1791367964.867:306): avc: denied { unlink } for pid=286 comm="syz-executor" name="file0" dev="tmpfs" ino=355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.861161][ T1016] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 50.014197][ T30] audit: type=1400 audit(1791367965.167:307): avc: denied { watch } for pid=1028 comm="syz.0.258" path="/67" dev="tmpfs" ino=372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.263017][ T30] audit: type=1400 audit(1791367971.468:308): avc: denied { mounton } for pid=1046 comm="syz.0.266" path="/72/file0" dev="tmpfs" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 50.420017][ T30] audit: type=1400 audit(1791367971.508:309): avc: denied { read } for pid=1044 comm="syz.2.265" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.588544][ T30] audit: type=1400 audit(1791367971.768:310): avc: denied { watch_reads } for pid=1053 comm="syz.1.269" path="/42/file0" dev="tmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.752102][ T30] audit: type=1400 audit(1791367971.958:311): avc: denied { unmount } for pid=433 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 50.822988][ T1064] FAULT_INJECTION: forcing a failure. [ 50.822988][ T1064] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 50.843619][ T1064] CPU: 0 PID: 1064 Comm: syz.5.274 Not tainted syzkaller #0 [ 50.853752][ T1064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.867013][ T1064] Call Trace: [ 50.870426][ T1064] [ 50.874048][ T1064] __dump_stack+0x21/0x30 [ 50.880263][ T1064] dump_stack_lvl+0x110/0x170 [ 50.887419][ T1064] ? show_regs_print_info+0x20/0x20 [ 50.893902][ T1064] ? free_unref_page_commit+0x187/0x3f0 [ 50.903270][ T1064] dump_stack+0x15/0x20 [ 50.909272][ T1064] should_fail+0x3ab/0x500 [ 50.915295][ T1064] should_fail_alloc_page+0x55/0x80 [ 50.922088][ T1064] prepare_alloc_pages+0x13f/0x590 [ 50.928998][ T1064] ? __alloc_pages_bulk+0xab0/0xab0 [ 50.937133][ T1064] ? release_pages+0x1264/0x12c0 [ 50.942904][ T1064] __alloc_pages+0x11d/0x460 [ 50.947763][ T1064] ? unlock_page_memcg+0x114/0x130 [ 50.956053][ T1064] ? prep_new_page+0x110/0x110 [ 50.961730][ T1064] ? page_remove_rmap+0xc6d/0xf40 [ 50.968487][ T1064] ? page_add_file_rmap+0x700/0x700 [ 50.974265][ T1064] ? __kasan_check_write+0x14/0x20 [ 50.979950][ T1064] ? _raw_spin_lock+0x94/0xf0 [ 50.985345][ T1064] __get_free_pages+0x10/0x30 [ 50.991479][ T1064] __tlb_remove_page_size+0x18a/0x310 [ 50.998186][ T1064] unmap_page_range+0x1059/0x1e00 [ 51.006316][ T1064] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 51.015213][ T1064] unmap_vmas+0x26d/0x380 [ 51.021342][ T1064] ? unmap_page_range+0x1e00/0x1e00 [ 51.033064][ T1064] ? __kasan_check_write+0x14/0x20 [ 51.041753][ T1064] ? tlb_gather_mmu_fullmm+0x144/0x1c0 [ 51.048351][ T1064] exit_mmap+0x412/0x8b0 [ 51.055574][ T1064] ? vm_brk+0x30/0x30 [ 51.064738][ T1064] ? mutex_unlock+0x8f/0x230 [ 51.074750][ T1064] ? uprobe_clear_state+0x2c6/0x320 [ 51.081557][ T1064] __mmput+0x92/0x300 [ 51.089231][ T1064] mmput+0x50/0x150 [ 51.094210][ T1064] do_exit+0xacc/0x29a0 [ 51.100582][ T1064] ? put_task_struct+0x90/0x90 [ 51.107323][ T1064] ? kstrtouint_from_user+0x1c4/0x220 [ 51.114176][ T1064] ? kstrtol_from_user+0x2a0/0x2a0 [ 51.120543][ T1064] ? __kasan_check_write+0x14/0x20 [ 51.126297][ T1064] ? _raw_spin_lock_irq+0x95/0xf0 [ 51.132553][ T1064] do_group_exit+0x149/0x310 [ 51.138778][ T1064] ? __kasan_check_write+0x14/0x20 [ 51.147394][ T1064] ? recalc_sigpending+0x1ac/0x230 [ 51.155998][ T1064] get_signal+0x64f/0x1430 [ 51.163411][ T1064] arch_do_signal_or_restart+0xe2/0x1100 [ 51.172299][ T1064] ? file_end_write+0x1b0/0x1b0 [ 51.178551][ T1064] ? __kasan_check_write+0x14/0x20 [ 51.184313][ T1064] ? mutex_unlock+0x8f/0x230 [ 51.189914][ T1064] ? get_sigframe_size+0x10/0x10 [ 51.196547][ T1064] ? __se_sys_futex+0x135/0x330 [ 51.202536][ T1064] ? __kasan_check_write+0x14/0x20 [ 51.210796][ T1064] ? __ia32_sys_read+0x90/0x90 [ 51.217409][ T1064] exit_to_user_mode_loop+0xa7/0xe0 [ 51.226222][ T1064] exit_to_user_mode_prepare+0x87/0xd0 [ 51.237994][ T1064] syscall_exit_to_user_mode+0x1a/0x30 [ 51.245012][ T1064] do_syscall_64+0x58/0xa0 [ 51.252695][ T1064] ? clear_bhb_loop+0x50/0xa0 [ 51.259222][ T1064] ? clear_bhb_loop+0x50/0xa0 [ 51.266172][ T1064] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.275927][ T1064] RIP: 0033:0x7fab856a5199 [ 51.281089][ T1064] Code: Unable to access opcode bytes at RIP 0x7fab856a516f. [ 51.296771][ T1064] RSP: 002b:00007fab840fe0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 51.307643][ T1064] RAX: fffffffffffffe00 RBX: 00007fab8592cfa8 RCX: 00007fab856a5199 [ 51.317787][ T1064] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fab8592cfa8 [ 51.328421][ T1064] RBP: 00007fab8592cfa0 R08: 0000000000000000 R09: 0000000000000000 [ 51.339150][ T1064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.350016][ T1064] R13: 00007fab8592d038 R14: 00007ffc19517bb0 R15: 00007ffc19517c98 [ 51.361704][ T1064] [ 51.489701][ T1081] fuse: Bad value for 'fd' [ 51.537782][ T1087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 51.641435][ T1093] overlayfs: failed to clone lowerpath [ 51.653873][ T289] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 51.747867][ T30] audit: type=1326 audit(1791367972.958:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1100 comm="syz.0.290" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee37468199 code=0x0 [ 51.923945][ T289] usb 5-1: Using ep0 maxpacket: 16 [ 51.961579][ T1052] loop2: detected capacity change from 0 to 131072 [ 51.979716][ T1052] F2FS-fs (loop2): invalid crc value [ 52.000722][ T1052] F2FS-fs (loop2): Found nat_bits in checkpoint [ 52.027078][ T1052] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 52.036329][ T1052] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 52.057980][ T30] audit: type=1400 audit(1791367973.268:313): avc: denied { map } for pid=1051 comm="syz.2.268" path="/59/file1/file1" dev="loop2" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.094364][ T289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.128123][ T289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.170647][ T289] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 52.190987][ T30] audit: type=1400 audit(1791367973.328:314): avc: denied { execute } for pid=1051 comm="syz.2.268" path="/59/file1/file1" dev="loop2" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.247927][ T289] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 52.286730][ T289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.313784][ T289] usb 5-1: config 0 descriptor?? [ 52.388667][ T1129] kvm [1128]: vcpu0, guest rIP: 0x9143 ignored wrmsr: 0x11e data 0xbe702111 [ 52.481520][ T514] udevd[514]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 52.764205][ T1147] loop5: detected capacity change from 0 to 40427 [ 52.778458][ T514] udevd[514]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 52.795006][ T289] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 52.808421][ T1147] F2FS-fs (loop5): invalid crc value [ 52.817741][ T289] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 52.828395][ T1147] F2FS-fs (loop5): Found nat_bits in checkpoint [ 52.840073][ T289] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 52.859649][ T289] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 52.877757][ T1147] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 52.888782][ T289] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 52.913938][ T289] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 52.927166][ T421] handle_bad_sector: 10 callbacks suppressed [ 52.927179][ T421] attempt to access beyond end of device [ 52.927179][ T421] loop5: rw=2049, want=40976, limit=40427 [ 52.951056][ T289] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 52.961146][ T289] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 52.970260][ T1147] VFS:Filesystem freeze failed [ 52.977265][ T289] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 52.986684][ T289] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 53.002681][ T289] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 53.026929][ T289] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 53.044741][ T514] udevd[514]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 53.058724][ T289] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 53.073925][ T289] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 53.086133][ T514] udevd[514]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 53.107930][ T289] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 53.132312][ T289] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0004/input/input7 [ 53.214984][ T289] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 53.243425][ T1174] udevd[1174]: open /dev/null failed: Not a directory [ 53.255498][ T289] usb 5-1: USB disconnect, device number 5 [ 53.282264][ T1176] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 53.282264][ T1176] Q&|x6 [ 53.445741][ T1198] overlayfs: failed to clone upperpath [ 53.463581][ T1200] overlayfs: failed to clone upperpath [ 53.489158][ T421] tipc: Subscription rejected, illegal request [ 53.588195][ T1218] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 53.676896][ T1230] Zero length message leads to an empty skb [ 53.698823][ T1233] loop5: detected capacity change from 0 to 256 [ 53.713111][ T319] udevd[319]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 53.726350][ T1233] exfat: Deprecated parameter 'utf8' [ 53.734642][ T1233] exfat: Deprecated parameter 'utf8' [ 53.741211][ T1233] exfat: Deprecated parameter 'utf8' [ 53.751124][ T1233] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 53.795203][ T319] udevd[319]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 53.817602][ T319] udevd[319]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 53.842422][ T1242] loop5: detected capacity change from 0 to 512 [ 53.853508][ T319] udevd[319]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 53.869076][ T1242] EXT4-fs (loop5): Test dummy encryption mode enabled [ 53.882033][ T1242] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 53.900597][ T1242] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 53.916677][ T1242] EXT4-fs (loop5): SIPHASH is not a valid default hash value [ 53.964818][ T319] udevd[319]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 53.986696][ T1242] loop5: detected capacity change from 0 to 4096 [ 54.014459][ T1242] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 54.024625][ T1242] EXT4-fs (loop5): Test dummy encryption mode enabled [ 54.034588][ T1242] EXT4-fs (loop5): Ignoring removed orlov option [ 54.046346][ T1242] EXT4-fs (loop5): mounted filesystem without journal. Opts: mblk_io_submit,nouid32,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,nobarrier,,errors=continue. Quota mode: writeback. [ 54.086365][ T1242] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 54.418973][ T1268] process 'syz.0.357' launched './file0' with NULL argv: empty string added [ 54.443990][ T6] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 54.603540][ T1298] loop2: detected capacity change from 0 to 512 [ 54.648525][ T1287] loop4: detected capacity change from 0 to 40427 [ 54.665683][ T1298] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 54.694984][ T1298] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.714245][ T1287] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 54.738528][ T1287] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 54.751613][ T1287] F2FS-fs (loop4): Found nat_bits in checkpoint [ 54.792443][ T1287] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 54.804455][ T1287] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 54.827054][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 54.827065][ T30] audit: type=1400 audit(1791367976.038:336): avc: denied { read append } for pid=1286 comm="syz.4.365" path="/49/file1/blkio.bfq.empty_time" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.867343][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.887541][ T1286] attempt to access beyond end of device [ 54.887541][ T1286] loop4: rw=10241, want=45104, limit=40427 [ 54.902833][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.920758][ T6] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 54.955271][ T8] attempt to access beyond end of device [ 54.955271][ T8] loop4: rw=1, want=45104, limit=40427 [ 54.969257][ T30] audit: type=1400 audit(1791367976.108:337): avc: denied { map } for pid=1286 comm="syz.4.365" path="/49/file1/blkio.bfq.empty_time" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.006750][ T6] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 55.032554][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.047312][ T30] audit: type=1326 audit(1791367976.218:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1309 comm="syz.2.374" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2435480199 code=0x7ffc0000 [ 55.095070][ T6] usb 6-1: config 0 descriptor?? [ 55.171366][ T30] audit: type=1326 audit(1791367976.218:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1309 comm="syz.2.374" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f2435480199 code=0x7ffc0000 [ 55.236572][ T30] audit: type=1326 audit(1791367976.218:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1309 comm="syz.2.374" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2435480199 code=0x7ffc0000 [ 55.289419][ T1336] loop4: detected capacity change from 0 to 512 [ 55.300476][ T30] audit: type=1326 audit(1791367976.218:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1309 comm="syz.2.374" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2435480199 code=0x7ffc0000 [ 55.338878][ T30] audit: type=1326 audit(1791367976.218:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1309 comm="syz.2.374" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f2435480199 code=0x7ffc0000 [ 55.384715][ T30] audit: type=1326 audit(1791367976.218:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1309 comm="syz.2.374" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2435480199 code=0x7ffc0000 [ 55.435422][ T1336] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 55.458140][ T30] audit: type=1326 audit(1791367976.218:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1309 comm="syz.2.374" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2435480199 code=0x7ffc0000 [ 55.499320][ T1336] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.519418][ T30] audit: type=1326 audit(1791367976.218:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1309 comm="syz.2.374" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f2435480199 code=0x7ffc0000 [ 55.591531][ T1344] tipc: Started in network mode [ 55.597478][ T1344] tipc: Node identity 4, cluster identity 4711 [ 55.606733][ T1344] tipc: Node number set to 4 [ 55.617475][ T1344] tipc: Enabled bearer , priority 0 [ 55.634536][ T6] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 55.657801][ T6] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 55.677481][ T6] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 55.723916][ T289] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 55.881627][ T1359] xt_hashlimit: size too large, truncated to 1048576 [ 55.905280][ T6] usb 6-1: USB disconnect, device number 6 [ 56.033748][ T1364] netlink: 'syz.4.396': attribute type 4 has an invalid length. [ 56.090729][ T1373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.400'. [ 56.104882][ T289] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.124049][ T289] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.206756][ T1375] loop4: detected capacity change from 0 to 40427 [ 56.224183][ T289] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 56.241884][ T289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 56.256366][ T1375] F2FS-fs (loop4): Unrecognized mount option "" or missing value [ 56.269132][ T289] usb 2-1: SerialNumber: syz [ 56.299708][ T1377] 9pnet: Insufficient options for proto=fd [ 56.362887][ T1385] 9pnet: p9_errstr2errno: server reported unknown error @c [ 56.459972][ T1391] loop5: detected capacity change from 0 to 512 [ 56.474903][ T1393] FAULT_INJECTION: forcing a failure. [ 56.474903][ T1393] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 56.534237][ T1393] CPU: 0 PID: 1393 Comm: syz.4.409 Not tainted syzkaller #0 [ 56.544533][ T1393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.564573][ T1393] Call Trace: [ 56.569049][ T1393] [ 56.574179][ T1393] __dump_stack+0x21/0x30 [ 56.580484][ T1393] dump_stack_lvl+0x110/0x170 [ 56.586286][ T1393] ? show_regs_print_info+0x20/0x20 [ 56.593331][ T1393] dump_stack+0x15/0x20 [ 56.598230][ T1393] should_fail+0x3ab/0x500 [ 56.603262][ T1393] should_fail_usercopy+0x1a/0x20 [ 56.609905][ T1393] _copy_from_user+0x20/0xd0 [ 56.615215][ T1393] __se_sys_mount+0x176/0x390 [ 56.621767][ T1393] ? getname_flags+0x272/0x510 [ 56.627949][ T1393] ? __x64_sys_mount+0xd0/0xd0 [ 56.635012][ T1393] __x64_sys_mount+0xbf/0xd0 [ 56.641232][ T1393] x64_sys_call+0x6bf/0x9a0 [ 56.647036][ T1393] do_syscall_64+0x4c/0xa0 [ 56.652930][ T1393] ? clear_bhb_loop+0x50/0xa0 [ 56.660679][ T1393] ? clear_bhb_loop+0x50/0xa0 [ 56.667239][ T1393] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 56.679381][ T1393] RIP: 0033:0x7fd43e01840a [ 56.684713][ T1393] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.711678][ T1393] RSP: 002b:00007fd43ca6fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 56.721460][ T1393] RAX: ffffffffffffffda RBX: 00007fd43ca6fee0 RCX: 00007fd43e01840a [ 56.735754][ T1393] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.748605][ T1393] RBP: 0000200000000240 R08: 00007fd43ca6fee0 R09: 0000000000010008 [ 56.760887][ T1393] R10: 0000000000010008 R11: 0000000000000246 R12: 0000000000000000 [ 56.773818][ T1393] R13: 00007fd43ca6fea0 R14: 0000000000000000 R15: 0000200000000300 [ 56.784470][ T1393] [ 56.791048][ T289] usb 2-1: 0:2 : does not exist [ 56.797231][ T20] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 56.811567][ T1391] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.833807][ T289] usb 2-1: USB disconnect, device number 5 [ 56.896922][ T1413] loop4: detected capacity change from 0 to 512 [ 56.915011][ T1413] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.933145][ T1413] EXT4-fs (loop4): 1 truncate cleaned up [ 56.943984][ T1413] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.987960][ T288] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 57.083865][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 58.323857][ C0] sched: RT throttling activated [ 58.347142][ T884] tipc: Resetting bearer [ 58.382743][ T884] tipc: Disabling bearer [ 58.429861][ T421] tipc: Left network mode [ 58.459053][ T1433] loop5: detected capacity change from 0 to 256 [ 58.485694][ T1427] mmap: syz.0.426 (1427) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 58.511060][ T319] udevd[319]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 58.544102][ T20] usb 3-1: config 1 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 173, changing to 11 [ 58.563337][ T319] udevd[319]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 58.612935][ T319] udevd[319]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 58.631881][ T20] usb 3-1: config 1 interface 0 altsetting 15 bulk endpoint 0x82 has invalid maxpacket 32 [ 58.655404][ T514] udevd[514]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 58.724147][ T1444] device ip6gre1 entered promiscuous mode [ 58.734896][ T319] udevd[319]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 58.749598][ T20] usb 3-1: config 1 interface 0 altsetting 15 bulk endpoint 0x3 has invalid maxpacket 32 [ 58.793779][ T20] usb 3-1: config 1 interface 0 has no altsetting 0 [ 58.864702][ T421] device bridge_slave_1 left promiscuous mode [ 58.883660][ T421] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.935640][ T421] device bridge_slave_0 left promiscuous mode [ 58.969826][ T421] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.980355][ T289] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 58.990066][ T20] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 59.019509][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.031596][ T20] usb 3-1: Product: syz [ 59.038132][ T20] usb 3-1: Manufacturer: syz [ 59.044606][ T20] usb 3-1: SerialNumber: syz [ 59.062067][ T421] device veth1_macvtap left promiscuous mode [ 59.073920][ T1371] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 59.091446][ T421] device veth0_vlan left promiscuous mode [ 59.133963][ T20] usb 3-1: can't set config #1, error -71 [ 59.164003][ T20] usb 3-1: USB disconnect, device number 4 [ 59.231900][ T1484] input: syz1 as /devices/virtual/input/input9 [ 59.373996][ T289] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 59.434325][ T289] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 59.643934][ T289] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 59.686796][ T289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.711681][ T1505] loop5: detected capacity change from 0 to 40427 [ 59.734551][ T289] usb 2-1: Product: syz [ 59.746384][ T319] udevd[319]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 59.766375][ T1505] F2FS-fs (loop5): invalid crc value [ 59.781248][ T289] usb 2-1: Manufacturer: syz [ 59.806304][ T289] usb 2-1: SerialNumber: syz [ 59.825180][ T1505] F2FS-fs (loop5): Found nat_bits in checkpoint [ 59.884555][ T289] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 59.903341][ T1505] F2FS-fs (loop5): Start checkpoint disabled! [ 59.915133][ T289] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 59.915133][ T289] Please send a copy of this message to and [ 59.956422][ T1505] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 59.994636][ T514] udevd[514]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 60.014839][ T514] udevd[514]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 60.310425][ T1528] netlink: 'syz.2.466': attribute type 1 has an invalid length. [ 60.351354][ T1528] netlink: 48 bytes leftover after parsing attributes in process `syz.2.466'. [ 60.410157][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 60.410168][ T30] audit: type=1400 audit(1791367981.618:367): avc: denied { setopt } for pid=1536 comm="syz.2.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.575328][ T289] ums-sddr09: probe of 2-1:1.0 failed with error -5 [ 60.747000][ T289] usb 2-1: USB disconnect, device number 6 [ 61.081740][ T1552] loop2: detected capacity change from 0 to 16 [ 61.110638][ T319] udevd[319]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 61.134767][ T1552] erofs: (device loop2): mounted with root inode @ nid 36. [ 61.206386][ T319] udevd[319]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 62.709495][ T1590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'. [ 62.747995][ T1594] loop5: detected capacity change from 0 to 256 [ 62.814890][ T1594] exfat: Deprecated parameter 'utf8' [ 62.847001][ T1594] exfat: Deprecated parameter 'utf8' [ 62.891763][ T1594] exfat: Deprecated parameter 'namecase' [ 62.932182][ T1594] exfat: Deprecated parameter 'namecase' [ 62.979370][ T1594] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf0f4daa6, utbl_chksum : 0xe619d30d) [ 63.126088][ T1609] xt_CT: You must specify a L4 protocol and not use inversions on it [ 63.852000][ T30] audit: type=1400 audit(1791367985.058:368): avc: denied { connect } for pid=1619 comm="syz.5.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.905475][ T1628] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 64.013520][ T30] audit: type=1400 audit(1791367985.098:369): avc: denied { write } for pid=1619 comm="syz.5.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.204121][ T30] audit: type=1400 audit(1791367985.138:370): avc: denied { ioctl } for pid=1626 comm="syz.1.508" path="socket:[21508]" dev="sockfs" ino=21508 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.320265][ T30] audit: type=1400 audit(1791367985.148:371): avc: denied { mounton } for pid=1630 comm="syz.5.509" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 65.278012][ T30] audit: type=1400 audit(1791367986.488:372): avc: denied { mount } for pid=1674 comm="syz.2.526" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 65.493890][ T30] audit: type=1400 audit(1791367986.528:373): avc: denied { mounton } for pid=1674 comm="syz.2.526" path="/107/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 65.573911][ T30] audit: type=1400 audit(1791367986.568:374): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 66.513945][ T1701] input: syz1 as /devices/virtual/input/input10 [ 66.522869][ T1703] device vlan2 entered promiscuous mode [ 66.553984][ T1703] device bridge0 entered promiscuous mode [ 66.681216][ T1721] loop2: detected capacity change from 0 to 2048 [ 66.744828][ T319] udevd[319]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 66.801667][ T1721] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 66.868386][ T30] audit: type=1400 audit(1791367988.078:375): avc: denied { create } for pid=1720 comm="syz.2.544" name="#11" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 66.974283][ T30] audit: type=1400 audit(1791367988.118:376): avc: denied { link } for pid=1720 comm="syz.2.544" name="#11" dev="loop2" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.084966][ T30] audit: type=1400 audit(1791367988.118:377): avc: denied { rename } for pid=1720 comm="syz.2.544" name="file1" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 67.167155][ T30] audit: type=1400 audit(1791367988.118:378): avc: denied { reparent } for pid=1720 comm="syz.2.544" name="file1" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 67.246075][ T30] audit: type=1400 audit(1791367988.118:379): avc: denied { rename } for pid=1720 comm="syz.2.544" name="#12" dev="loop2" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.326050][ T30] audit: type=1400 audit(1791367988.148:380): avc: denied { getopt } for pid=1718 comm="syz.1.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.555460][ T319] udevd[319]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 67.585100][ T319] udevd[319]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 67.732027][ T1746] netlink: 'syz.1.554': attribute type 12 has an invalid length. [ 67.752010][ T1744] xt_hashlimit: size too large, truncated to 1048576 [ 72.424005][ T30] audit: type=1400 audit(1791367993.638:381): avc: denied { ioctl } for pid=1761 comm="syz.1.559" path="socket:[22132]" dev="sockfs" ino=22132 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.598499][ T30] audit: type=1400 audit(1791367993.668:382): avc: denied { read } for pid=1761 comm="syz.1.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.827761][ T1791] netlink: 16 bytes leftover after parsing attributes in process `syz.5.569'. [ 73.155793][ T8] device bridge_slave_1 left promiscuous mode [ 73.189397][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.254427][ T8] device bridge_slave_0 left promiscuous mode [ 73.284238][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.315728][ T8] device veth1_macvtap left promiscuous mode [ 73.323442][ T8] device veth0_vlan left promiscuous mode [ 75.008454][ T30] audit: type=1400 audit(1791367996.218:383): avc: denied { create } for pid=1834 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.094007][ T30] audit: type=1400 audit(1791367996.258:384): avc: denied { connect } for pid=1834 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.173554][ T1840] xt_hashlimit: size too large, truncated to 1048576 [ 75.182918][ T1842] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 75.194944][ T30] audit: type=1400 audit(1791367996.258:385): avc: denied { setopt } for pid=1834 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.727794][ T1870] xt_hashlimit: size too large, truncated to 1048576 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=6 req=441 state=3 status=67 (errno 32: Broken pipe) [ 76.356184][ T30] audit: type=1400 audit(1791367997.558:386): avc: denied { write } for pid=276 comm="syz-executor" path="pipe:[13124]" dev="pipefs" ino=13124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 77.074591][ T8] device bridge_slave_1 left promiscuous mode [ 77.084413][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.098845][ T8] device bridge_slave_1 left promiscuous mode [ 77.108864][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.123213][ T8] device bridge_slave_0 left promiscuous mode [ 77.134807][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.156452][ T8] device veth1_macvtap left promiscuous mode [ 77.164823][ T8] device veth0_vlan left promiscuous mode [ 77.177829][ T8] device veth1_macvtap left promiscuous mode [ 77.185276][ T8] device veth0_vlan left promiscuous mode