last executing test programs: 6.660976815s ago: executing program 4 (id=3084): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_context(r0, &(0x7f0000000200)='system_u:object_r:var_spool_t:s0\x00', 0x21) 6.097849964s ago: executing program 4 (id=3090): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") socket(0x8000000010, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x24b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) 5.665554171s ago: executing program 3 (id=3096): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) socket$nl_generic(0x10, 0x3, 0x10) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) 4.363462782s ago: executing program 3 (id=3098): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r1, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 4.019319957s ago: executing program 1 (id=3103): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r1, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xe) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x1300, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 4.018767507s ago: executing program 1 (id=3104): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket(0x28, 0x5, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x2, 0x8000, r3, 0x0, 0x0, 0x0, 0x0, 0x1}]) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) 2.733493437s ago: executing program 3 (id=3105): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2.635554129s ago: executing program 1 (id=3106): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x405d, 0x18, 0x0, 0x80000000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001800)=ANY=[@ANYBLOB="5000000002010300000800000000000002000000300001802c0001"], 0x50}, 0x1, 0x0, 0x0, 0x10040000}, 0x800) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10) timer_gettime(0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x78bd25, 0x8004, {0x0, 0x0, 0x0, r6, {0xf, 0x7}, {}, {0x2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xffffffffffffffd1, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x55}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r8) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000000)=[{{0x3, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1}}, {{0x2, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1}}, {{}, {0x3, 0x1, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x1}, {0x3, 0x1, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x2, 0x1}, {0x4, 0x1, 0x0, 0x1}}], 0x50) ioctl$TIOCVHANGUP(r2, 0x5437, 0x8000000) 2.627854799s ago: executing program 4 (id=3107): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x101880a, &(0x7f0000000400)=ANY=[], 0x1, 0x5520, &(0x7f0000000540)="$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") socket$inet6(0xa, 0x80002, 0x88) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) rt_tgsigqueueinfo(r0, r0, 0x36, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {}, {}, 0x0, 0x10}, 0x0, 0x228, 0x258, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast2, [0xffffffff, 0xffffffff, 0xff000000, 0xff000000], @ipv4=@rand_addr=0x64010101, [0x0, 0xffffff, 0xffffff, 0xff], 0x4d5, 0x3504, 0x29, 0x0, 0x0, 0x1}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0x0, 0xffff00, 0xff], @ipv6=@loopback, [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x4d6, 0x3504, 0x2c, 0x0, 0x1e, 0xd}, {@ipv4=@local, [0x0, 0xffffffff], @ipv4=@multicast1, [0xff, 0xff, 0xffffff00, 0xffffffff], 0x4d3, 0x3502, 0x2, 0x1, 0x1, 0x1}, {@ipv6=@rand_addr=' \x01\x00', [0xffffffff, 0xff, 0x0, 0xffffffff], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0x80800000, 0x0, 0xffffffff, 0xffffffff], 0x4d2, 0x3500, 0x6, 0x1, 0x4, 0x4}], 0x3, 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x401, 0xfffffffffffffff8}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1a37c1, 0x1e6) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) write$cgroup_subtree(r5, &(0x7f0000000400)=ANY=[], 0xda00) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x741, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 2.55215965s ago: executing program 3 (id=3109): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\t'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001c40)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002201000000"], 0x0}, 0x0) 2.52718003s ago: executing program 0 (id=3111): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 2.460305851s ago: executing program 0 (id=3112): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000001c0), 0x8) listen(r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$packet(0x11, 0x2, 0x300) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.798565042s ago: executing program 2 (id=3114): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f00000001c0)={[{}, {@noauto_da_alloc}]}, 0x11, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) 1.790799172s ago: executing program 2 (id=3115): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x1ffffffffffffdf4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000003b000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 1.772537213s ago: executing program 2 (id=3116): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000640), 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, r2, &(0x7f0000000080)={0x2, 0x7, 0x6, 0x1, 0x6, 0xb, 0x6, 0x8, 0x7}) 1.750428963s ago: executing program 2 (id=3117): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") socket(0x8000000010, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x24b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) 1.700251834s ago: executing program 1 (id=3118): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) 1.645950745s ago: executing program 4 (id=3119): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 1.600289535s ago: executing program 0 (id=3120): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f000000a440)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="66929348cc416e0750bf509e8c2da63b6b0a21ccb07912482d4aec13e8b97913ef61f1c1cc5e8675d53820f16a897ee8d7db1487c6cc7a386cfb2363010fdea769fce40b8167f103b427123bbfe0e7c1b5c88f09d7cc4e87ee7aca4f70fdb48dd516c00fa62b6a225c3a68042f5eb61e124ca2c0fcffda0aafbe3e6d75a6a99ca6cc3dbc6f92d293c6507f6ef37a17b7e4381ca99c7bc65692651669d6dfc41eb37e", 0xa2}, {&(0x7f0000000dc0)="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", 0xf00}], 0x2}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="4dad36f4d34d15114dbc60e90745a77e81052309828ee7de6426e277b74c81b10124d9c1e11188904073d247e0febfcad01e8635d77efb32d16a7a445adf098770cacdc4c1b1ce221de358acc3d866a0b9c9349865badf97ab66731187345f4d35ecc1233a9558ba2bc0a7ee84c6df45501f07c1d51253b46b46fb23b2aaa2e3f951cfd66411ee24f5e09d1d4de79c151f795bcc3b7f97716c8412da67fff1d38b602e2638", 0xa5}], 0x1}}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000c40)="92472e5b5eeb469837b5b9e630646ec3502a636b1649", 0x16}, {&(0x7f0000000c80)="6a9c4e7f0be75c89713a95674f06ccd6b91535fd69512f69ddb85e48fc54e0be5eec1be768a460128106ee03a36fcd2ff943454201f19633d0f718352f09a52d0bd35b5831a78e2a870fa4185e8edaf5", 0x50}, {&(0x7f0000000d00)="ddea70e27da3bde8dcf5a1f203d69cca464353625f181eaa97badcf06e38f91105f64d472e965228c966edbdbbe8dae471374b4d781cfee87fc8e647bb4bcf00756cddd46c062bb6d199ecde1ef2e3d2a50539b7c35f127bac0200a2e7b630b9605688f1fd94c8cb56033f255b00984231559ca42314caeb991d8842f8cca3a7", 0x80}, {&(0x7f0000002080)="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", 0xd0c}], 0x4}}], 0x4, 0x8008801) 1.599334735s ago: executing program 0 (id=3121): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)={0x2, 'batadv_slave_0\x00', {0x8}, 0x6}) 1.572908855s ago: executing program 0 (id=3122): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000008000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x1000000000000004}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000500000002000000070000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.387679318s ago: executing program 4 (id=3123): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.066290524s ago: executing program 4 (id=3124): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d37, 0x100, 0x10, 0x3fffffe}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB='R\x00\x00\x00'], 0x8) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x48) write$cgroup_int(r5, &(0x7f0000000000)=0xfe8e, 0x12) socketpair(0x23, 0x2, 0x1, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 740.316359ms ago: executing program 1 (id=3125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000280)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 678.10349ms ago: executing program 0 (id=3126): unshare(0x22020400) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0x204, 0xffffffffffffffff, 0x0, 0x206a2e2c, 0x0) 377.160684ms ago: executing program 3 (id=3127): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r1, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xe) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x1300, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 368.924864ms ago: executing program 1 (id=3128): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x405d, 0x18, 0x0, 0x80000000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001800)=ANY=[@ANYBLOB="5000000002010300000800000000000002000000300001802c0001"], 0x50}, 0x1, 0x0, 0x0, 0x10040000}, 0x800) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10) timer_gettime(0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x78bd25, 0x8004, {0x0, 0x0, 0x0, r6, {0xf, 0x7}, {}, {0x2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xffffffffffffffd1, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x55}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r8) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000000)=[{{0x3, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1}}, {{0x2, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1}}, {{}, {0x3, 0x1, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x1}, {0x3, 0x1, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x2, 0x1}, {0x4, 0x1, 0x0, 0x1}}], 0x50) ioctl$TIOCVHANGUP(r2, 0x5437, 0x8000000) 151.436118ms ago: executing program 2 (id=3129): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0100000000000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="a7"], 0x20) 84.292319ms ago: executing program 2 (id=3130): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000001c0), 0x8) listen(r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$packet(0x11, 0x2, 0x300) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 3 (id=3131): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) dup3(r0, r4, 0x0) kernel console output (not intermixed with test programs): r=45096, nr_sectors = 8 limit=40427 [ 323.934851][ T7996] SELinux: failed to load policy [ 323.962096][ T8000] loop0: detected capacity change from 0 to 1024 [ 323.968702][ T8000] EXT4-fs: Ignoring removed orlov option [ 323.974509][ T8000] EXT4-fs: Ignoring removed nomblk_io_submit option [ 323.990843][ T8000] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 324.018448][ T8004] overlayfs: missing 'workdir' [ 324.199245][ T8012] tipc: Enabling of bearer rejected, failed to enable media [ 324.212350][ T8012] loop4: detected capacity change from 0 to 16 [ 324.220930][ T8012] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 324.251890][ T1685] usb 4-1: USB disconnect, device number 41 [ 324.964272][ T8020] loop3: detected capacity change from 0 to 2048 [ 325.070147][ T8020] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 325.137071][ T8028] tipc: Enabling of bearer rejected, already enabled [ 325.172597][ T284] EXT4-fs (loop3): unmounting filesystem. [ 326.245259][ T285] EXT4-fs (loop0): unmounting filesystem. [ 326.334816][ T8030] loop4: detected capacity change from 0 to 40427 [ 326.350289][ T8030] F2FS-fs (loop4): invalid crc value [ 326.361497][ T8039] loop3: detected capacity change from 0 to 40427 [ 326.369879][ T8039] F2FS-fs (loop3): invalid crc value [ 326.376643][ T8039] F2FS-fs (loop3): Found nat_bits in checkpoint [ 326.389822][ T8030] F2FS-fs (loop4): Found nat_bits in checkpoint [ 326.410199][ T28] audit: type=1400 audit(1751315397.774:1190): avc: denied { write } for pid=8048 comm="syz.2.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 326.443558][ T28] audit: type=1400 audit(1751315397.794:1191): avc: denied { read } for pid=8048 comm="syz.2.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 326.463588][ T28] audit: type=1326 audit(1751315397.804:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.2.2556" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ccb78e929 code=0x0 [ 326.464899][ T8039] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 326.488812][ T8030] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 326.552477][ T8060] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2556'. [ 326.620421][ T8062] syz.4.2550: attempt to access beyond end of device [ 326.620421][ T8062] loop4: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 326.729082][ T4926] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 326.751728][ T283] syz-executor: attempt to access beyond end of device [ 326.751728][ T283] loop4: rw=2049, sector=45208, nr_sectors = 8 limit=40427 [ 326.890212][ T284] syz-executor: attempt to access beyond end of device [ 326.890212][ T284] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 326.940450][ T4926] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.953850][ T4926] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 326.963655][ T4926] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 326.972758][ T4926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 326.980863][ T4926] usb 2-1: SerialNumber: syz [ 326.990248][ T4926] usb 2-1: 0:2 : does not exist [ 327.213982][ T8071] tipc: Enabling of bearer rejected, already enabled [ 327.231062][ T8071] loop3: detected capacity change from 0 to 16 [ 327.285761][ T8071] erofs: (device loop3): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 327.418562][ T28] audit: type=1326 audit(1751315398.774:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8072 comm="syz.0.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6538e929 code=0x7ffc0000 [ 327.589584][ T28] audit: type=1326 audit(1751315398.814:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8072 comm="syz.0.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e6538e929 code=0x7ffc0000 [ 327.874282][ T28] audit: type=1326 audit(1751315398.814:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8072 comm="syz.0.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6538e929 code=0x7ffc0000 [ 328.054770][ T28] audit: type=1326 audit(1751315398.814:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8072 comm="syz.0.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e6538e929 code=0x7ffc0000 [ 328.060043][ T8083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2566'. [ 328.078892][ T4926] usb 2-1: USB disconnect, device number 45 [ 328.113251][ T28] audit: type=1326 audit(1751315398.814:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8072 comm="syz.0.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6538e929 code=0x7ffc0000 [ 328.149084][ T28] audit: type=1326 audit(1751315398.814:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8072 comm="syz.0.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e6538e929 code=0x7ffc0000 [ 328.155076][ T8083] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2566'. [ 328.192803][ T8083] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2566'. [ 328.198687][ T8089] binfmt_misc: register: failed to install interpreter file ./file0 [ 328.290458][ T8091] tipc: Enabling of bearer rejected, already enabled [ 329.069531][ T8077] loop0: detected capacity change from 0 to 40427 [ 329.091017][ T8077] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 329.129120][ T8077] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 329.148269][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 329.148280][ T28] audit: type=1400 audit(1751315400.504:1204): avc: denied { bind } for pid=8095 comm="syz.1.2570" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 329.159231][ T8077] F2FS-fs (loop0): invalid crc value [ 329.200446][ T8098] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 329.219257][ T28] audit: type=1400 audit(1751315400.504:1205): avc: denied { name_bind } for pid=8095 comm="syz.1.2570" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 329.240421][ T8098] tipc: Enabled bearer , priority 10 [ 329.248182][ T8077] F2FS-fs (loop0): Found nat_bits in checkpoint [ 329.284771][ T28] audit: type=1400 audit(1751315400.504:1206): avc: denied { node_bind } for pid=8095 comm="syz.1.2570" saddr=ff01::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 329.304119][ T8094] loop4: detected capacity change from 0 to 40427 [ 329.328442][ T8094] F2FS-fs (loop4): invalid crc value [ 329.339375][ T28] audit: type=1326 audit(1751315400.644:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8104 comm="syz.1.2573" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa87a38e929 code=0x0 [ 329.363324][ T28] audit: type=1326 audit(1751315400.704:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.3.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8018e929 code=0x7ffc0000 [ 329.364887][ T8077] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 329.387176][ T8117] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2573'. [ 329.394132][ T8077] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 329.407013][ T28] audit: type=1326 audit(1751315400.704:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.3.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c8018d290 code=0x7ffc0000 [ 329.411142][ T8094] F2FS-fs (loop4): Found nat_bits in checkpoint [ 329.467513][ T8094] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 329.484410][ T28] audit: type=1326 audit(1751315400.704:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.3.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8018e929 code=0x7ffc0000 [ 329.508086][ T28] audit: type=1326 audit(1751315400.704:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.3.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f7c8018e929 code=0x7ffc0000 [ 329.531620][ T28] audit: type=1326 audit(1751315400.704:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.3.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8018e929 code=0x7ffc0000 [ 329.630470][ T8121] tipc: Enabling of bearer rejected, already enabled [ 329.688773][ T8121] loop3: detected capacity change from 0 to 16 [ 332.087666][ T8121] erofs: (device loop3): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 332.139413][ T790] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 332.485643][ T8128] SELinux: failed to load policy [ 332.578594][ T8137] tipc: Enabling of bearer rejected, already enabled [ 332.692776][ T8140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2584'. [ 332.825357][ T8140] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2584'. [ 332.839115][ T790] usb 3-1: device not accepting address 40, error -71 [ 332.855994][ T8142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2585'. [ 333.040473][ T8140] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2584'. [ 333.133409][ T8142] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2585'. [ 333.146661][ T8142] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2585'. [ 333.484271][ T28] audit: type=1326 audit(1751315404.844:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8156 comm="syz.1.2589" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa87a38e929 code=0x0 [ 333.554068][ T8155] loop4: detected capacity change from 0 to 40427 [ 333.561095][ T8155] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 333.568829][ T8155] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 333.577951][ T8155] F2FS-fs (loop4): invalid crc value [ 333.584503][ T8155] F2FS-fs (loop4): Found nat_bits in checkpoint [ 333.619444][ T8155] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 333.626523][ T8155] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 333.809279][ T39] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 334.011201][ T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.059468][ T39] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 334.094532][ T39] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 334.228689][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 334.305563][ T39] usb 4-1: SerialNumber: syz [ 334.334247][ T39] usb 4-1: 0:2 : does not exist [ 334.484718][ T8178] tipc: Enabling of bearer rejected, already enabled [ 334.493720][ T8178] loop0: detected capacity change from 0 to 16 [ 334.501053][ T8178] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 334.742113][ T39] usb 4-1: USB disconnect, device number 42 [ 335.158631][ T8182] loop4: detected capacity change from 0 to 1024 [ 335.165465][ T8182] EXT4-fs: Ignoring removed orlov option [ 335.171424][ T8182] EXT4-fs: Ignoring removed nomblk_io_submit option [ 335.310988][ T8187] loop3: detected capacity change from 0 to 2048 [ 335.319400][ T8182] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 335.367681][ T8187] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 335.528169][ T8198] tipc: Enabling of bearer rejected, already enabled [ 335.540234][ T8198] loop0: detected capacity change from 0 to 16 [ 335.549189][ T8198] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 335.638706][ T8200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2601'. [ 335.665100][ T8200] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2601'. [ 335.690759][ T8200] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2601'. [ 335.963750][ T8204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2602'. [ 336.202103][ T284] EXT4-fs (loop3): unmounting filesystem. [ 336.405111][ T283] EXT4-fs (loop4): unmounting filesystem. [ 336.470775][ T28] audit: type=1326 audit(1751315407.834:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8206 comm="syz.0.2605" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e6538e929 code=0x0 [ 336.510283][ T28] audit: type=1400 audit(1751315407.854:1215): avc: denied { block_suspend } for pid=8211 comm="syz.3.2606" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 336.585663][ T8219] loop0: detected capacity change from 0 to 128 [ 336.700117][ T8221] loop4: detected capacity change from 0 to 2048 [ 336.762707][ T8221] loop4: p1 < > p3 [ 336.769423][ T8221] loop4: p3 size 134217728 extends beyond EOD, truncated [ 337.006299][ T8222] syz.0.2605: attempt to access beyond end of device [ 337.006299][ T8222] loop0: rw=0, sector=97, nr_sectors = 120 limit=128 [ 337.174843][ T7324] kworker/u4:6: attempt to access beyond end of device [ 337.174843][ T7324] loop0: rw=1048577, sector=217, nr_sectors = 824 limit=128 [ 337.309138][ T39] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 337.580381][ T8228] tipc: Enabling of bearer rejected, already enabled [ 337.590523][ T8228] loop0: detected capacity change from 0 to 16 [ 337.598648][ T8228] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 337.621455][ T39] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.507871][ T39] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 339.519349][ T39] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 339.528505][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 339.536673][ T39] usb 2-1: SerialNumber: syz [ 339.645854][ T39] usb 2-1: 0:2 : does not exist [ 339.741428][ T8237] loop4: detected capacity change from 0 to 2048 [ 339.751597][ T8237] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 339.854206][ T8242] loop3: detected capacity change from 0 to 1024 [ 339.860925][ T8242] EXT4-fs: Ignoring removed orlov option [ 339.866709][ T8242] EXT4-fs: Ignoring removed nomblk_io_submit option [ 339.880861][ T8242] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 340.078216][ T8251] tipc: Enabling of bearer rejected, already enabled [ 340.090544][ T8251] loop0: detected capacity change from 0 to 16 [ 340.123401][ T8251] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 340.181514][ T39] usb 2-1: USB disconnect, device number 46 [ 340.660339][ T283] EXT4-fs (loop4): unmounting filesystem. [ 340.847734][ T8256] __nla_validate_parse: 2 callbacks suppressed [ 340.847755][ T8256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2618'. [ 340.863831][ T8256] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2618'. [ 340.889102][ T8256] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2618'. [ 340.944674][ T28] audit: type=1326 audit(1751315412.304:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8261 comm="syz.1.2621" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa87a38e929 code=0x0 [ 341.150144][ T284] EXT4-fs (loop3): unmounting filesystem. [ 341.258673][ T8270] loop0: detected capacity change from 0 to 40427 [ 341.265765][ T8270] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 341.273534][ T8270] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 341.282529][ T8270] F2FS-fs (loop0): invalid crc value [ 341.289177][ T8270] F2FS-fs (loop0): Found nat_bits in checkpoint [ 341.330213][ T8270] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 341.343740][ T8270] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 341.350798][ T8272] loop3: detected capacity change from 0 to 40427 [ 341.419300][ T8272] F2FS-fs (loop3): invalid crc value [ 341.426131][ T8272] F2FS-fs (loop3): Found nat_bits in checkpoint [ 341.460426][ T8272] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 342.444594][ T8286] syz.3.2625: attempt to access beyond end of device [ 342.444594][ T8286] loop3: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 342.842593][ T8288] loop4: detected capacity change from 0 to 1024 [ 342.849325][ T8288] EXT4-fs: Ignoring removed orlov option [ 342.854978][ T8288] EXT4-fs: Ignoring removed nomblk_io_submit option [ 342.907481][ T284] syz-executor: attempt to access beyond end of device [ 342.907481][ T284] loop3: rw=2049, sector=45208, nr_sectors = 8 limit=40427 [ 342.916732][ T8288] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 343.050579][ T8298] tipc: Enabling of bearer rejected, already enabled [ 344.330010][ T283] EXT4-fs (loop4): unmounting filesystem. [ 344.390534][ T28] audit: type=1400 audit(1751315415.754:1217): avc: denied { ioctl } for pid=8307 comm="syz.4.2633" path="socket:[55662]" dev="sockfs" ino=55662 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 344.718604][ T8319] loop3: detected capacity change from 0 to 2048 [ 344.893524][ T1685] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 345.509406][ T8322] tipc: Enabling of bearer rejected, failed to enable media [ 345.518530][ T8322] loop4: detected capacity change from 0 to 16 [ 345.528757][ T8322] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 345.589231][ T790] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 345.640857][ T1685] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.789302][ T1685] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 345.818801][ T1685] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 345.848121][ T1685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 345.858198][ T1685] usb 1-1: SerialNumber: syz [ 345.869054][ T790] usb 2-1: Using ep0 maxpacket: 32 [ 345.875215][ T790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.906981][ T790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.917516][ T1685] usb 1-1: 0:2 : does not exist [ 345.947083][ T790] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 345.976300][ T790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.999782][ T790] usb 2-1: config 0 descriptor?? [ 346.025820][ T790] hub 2-1:0.0: USB hub found [ 346.118962][ T8324] loop3: detected capacity change from 0 to 40427 [ 346.136631][ T8324] F2FS-fs (loop3): invalid crc value [ 346.209847][ T8324] F2FS-fs (loop3): Found nat_bits in checkpoint [ 346.226471][ T790] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 346.243351][ T8324] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 346.270409][ T8326] loop4: detected capacity change from 0 to 40427 [ 346.278331][ T8326] F2FS-fs (loop4): invalid crc value [ 346.286382][ T8326] F2FS-fs (loop4): Found nat_bits in checkpoint [ 346.320498][ T1685] usb 1-1: USB disconnect, device number 28 [ 346.324007][ T8326] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 346.574076][ T8335] syz.3.2638: attempt to access beyond end of device [ 346.574076][ T8335] loop3: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 346.592604][ T8339] syz.4.2639: attempt to access beyond end of device [ 346.592604][ T8339] loop4: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 346.828037][ T790] usbhid 2-1:0.0: can't add hid device: -71 [ 346.834155][ T790] usbhid: probe of 2-1:0.0 failed with error -71 [ 346.841699][ T284] syz-executor: attempt to access beyond end of device [ 346.841699][ T284] loop3: rw=2049, sector=45208, nr_sectors = 8 limit=40427 [ 346.879423][ T790] usb 2-1: USB disconnect, device number 47 [ 346.985109][ T283] syz-executor: attempt to access beyond end of device [ 346.985109][ T283] loop4: rw=2049, sector=45208, nr_sectors = 8 limit=40427 [ 347.033103][ T8344] loop0: detected capacity change from 0 to 1024 [ 347.069263][ T8344] EXT4-fs: Ignoring removed orlov option [ 347.082623][ T8344] EXT4-fs: Ignoring removed nomblk_io_submit option [ 347.158265][ T8344] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 347.299143][ T8347] loop3: detected capacity change from 0 to 40427 [ 347.314557][ T8347] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 347.351780][ T8347] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 347.556377][ T8347] F2FS-fs (loop3): invalid crc value [ 347.642424][ T8347] F2FS-fs (loop3): Found nat_bits in checkpoint [ 347.729599][ T8347] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 347.738735][ T8347] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 347.893529][ T285] EXT4-fs (loop0): unmounting filesystem. [ 347.922811][ T8371] SELinux: failed to load policy [ 350.565846][ T8385] loop4: detected capacity change from 0 to 2048 [ 352.588354][ T8401] tipc: Enabling of bearer rejected, already enabled [ 352.733317][ T8389] loop0: detected capacity change from 0 to 40427 [ 352.779322][ T39] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 352.818227][ T8389] F2FS-fs (loop0): invalid crc value [ 352.979118][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 352.986353][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.034044][ T8389] F2FS-fs (loop0): Found nat_bits in checkpoint [ 353.129098][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.200156][ T8389] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 353.232328][ T39] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 353.380403][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.419796][ T39] usb 5-1: config 0 descriptor?? [ 353.430033][ T39] hub 5-1:0.0: USB hub found [ 353.453830][ T8408] syz.0.2650: attempt to access beyond end of device [ 353.453830][ T8408] loop0: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 353.459680][ T8397] loop3: detected capacity change from 0 to 40427 [ 353.551920][ T8397] F2FS-fs (loop3): invalid crc value [ 353.558681][ T8397] F2FS-fs (loop3): Found nat_bits in checkpoint [ 353.595000][ T8397] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 353.746727][ T39] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 353.883332][ T285] syz-executor: attempt to access beyond end of device [ 353.883332][ T285] loop0: rw=2049, sector=45208, nr_sectors = 8 limit=40427 [ 353.927156][ T8417] SELinux: failed to load policy [ 354.021323][ T8419] syz.3.2652: attempt to access beyond end of device [ 354.021323][ T8419] loop3: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 354.125436][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2659'. [ 354.143664][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2659'. [ 354.187237][ T284] syz-executor: attempt to access beyond end of device [ 354.187237][ T284] loop3: rw=2049, sector=45208, nr_sectors = 8 limit=40427 [ 354.190585][ T8424] loop0: detected capacity change from 0 to 1024 [ 354.201621][ T39] usbhid 5-1:0.0: can't add hid device: -71 [ 354.213479][ T39] usbhid: probe of 5-1:0.0 failed with error -71 [ 354.218307][ T8424] EXT4-fs: Ignoring removed orlov option [ 354.227097][ T8424] EXT4-fs: Ignoring removed nomblk_io_submit option [ 354.259987][ T39] usb 5-1: USB disconnect, device number 50 [ 354.262160][ T8424] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 355.406284][ T8447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2666'. [ 355.466165][ T8447] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2666'. [ 355.479119][ T8447] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2666'. [ 355.632085][ T285] EXT4-fs (loop0): unmounting filesystem. [ 355.859143][ T1685] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 356.079107][ T1685] usb 4-1: Using ep0 maxpacket: 8 [ 356.085255][ T1685] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 356.104045][ T1685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.125228][ T1685] usb 4-1: config 0 descriptor?? [ 356.405158][ T8460] loop0: detected capacity change from 0 to 40427 [ 356.419643][ T8464] SELinux: failed to load policy [ 356.424925][ T8460] F2FS-fs (loop0): invalid crc value [ 356.450241][ T8460] F2FS-fs (loop0): Found nat_bits in checkpoint [ 356.528219][ T8460] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 356.613407][ T8467] loop4: detected capacity change from 0 to 40427 [ 356.625555][ T8467] F2FS-fs (loop4): invalid crc value [ 356.642375][ T8467] F2FS-fs (loop4): Found nat_bits in checkpoint [ 356.734488][ T8480] syz.0.2669: attempt to access beyond end of device [ 356.734488][ T8480] loop0: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 356.761121][ T1685] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 356.844864][ T1685] asix: probe of 4-1:0.0 failed with error -32 [ 356.866986][ T8467] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 356.902039][ T285] syz-executor: attempt to access beyond end of device [ 356.902039][ T285] loop0: rw=2049, sector=45208, nr_sectors = 8 limit=40427 [ 357.094613][ T8487] syz.4.2671: attempt to access beyond end of device [ 357.094613][ T8487] loop4: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 357.301450][ T283] syz-executor: attempt to access beyond end of device [ 357.301450][ T283] loop4: rw=2049, sector=45208, nr_sectors = 8 limit=40427 [ 357.391339][ T6] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 357.949072][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 357.955962][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.966965][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.977029][ T6] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 357.986141][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.994800][ T6] usb 3-1: config 0 descriptor?? [ 358.006154][ T6] hub 3-1:0.0: USB hub found [ 358.201392][ T6] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 358.576322][ T4926] usb 4-1: USB disconnect, device number 43 [ 358.602417][ T6] usbhid 3-1:0.0: can't add hid device: -71 [ 358.610761][ T6] usbhid: probe of 3-1:0.0 failed with error -71 [ 358.659442][ T6] usb 3-1: USB disconnect, device number 42 [ 358.788019][ T8512] loop3: detected capacity change from 0 to 40427 [ 358.810874][ T8512] F2FS-fs (loop3): invalid crc value [ 358.870909][ T8512] F2FS-fs (loop3): Found nat_bits in checkpoint [ 358.913017][ T8512] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 359.331662][ T8523] syz.3.2683: attempt to access beyond end of device [ 359.331662][ T8523] loop3: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 359.689453][ T28] audit: type=1326 audit(1751315431.054:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.1.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87a38e929 code=0x7ffc0000 [ 359.737509][ T284] syz-executor: attempt to access beyond end of device [ 359.737509][ T284] loop3: rw=2049, sector=45208, nr_sectors = 8 limit=40427 [ 359.769062][ T28] audit: type=1326 audit(1751315431.084:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.1.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87a38e929 code=0x7ffc0000 [ 359.993697][ T28] audit: type=1326 audit(1751315431.084:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.1.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa87a38e929 code=0x7ffc0000 [ 360.166830][ T28] audit: type=1326 audit(1751315431.084:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.1.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87a38e929 code=0x7ffc0000 [ 360.322702][ T28] audit: type=1326 audit(1751315431.084:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.1.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87a38e929 code=0x7ffc0000 [ 360.346213][ T28] audit: type=1326 audit(1751315431.084:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.1.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa87a38e929 code=0x7ffc0000 [ 360.369826][ T28] audit: type=1326 audit(1751315431.084:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.1.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87a38e929 code=0x7ffc0000 [ 360.399362][ T28] audit: type=1326 audit(1751315431.084:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.1.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87a38e929 code=0x7ffc0000 [ 360.422844][ T28] audit: type=1326 audit(1751315431.084:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.1.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa87a38e929 code=0x7ffc0000 [ 360.446376][ T28] audit: type=1326 audit(1751315431.084:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.1.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87a38e929 code=0x7ffc0000 [ 360.893546][ T8549] tipc: Enabling of bearer rejected, already enabled [ 360.901983][ T8549] loop0: detected capacity change from 0 to 16 [ 360.940190][ T8549] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 362.544896][ T8565] tipc: Enabling of bearer rejected, failed to enable media [ 362.554025][ T8565] loop4: detected capacity change from 0 to 16 [ 362.609820][ T8565] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 362.709312][ T1685] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 362.870800][ T8572] loop0: detected capacity change from 0 to 128 [ 362.907297][ T8572] syz.0.2701: attempt to access beyond end of device [ 362.907297][ T8572] loop0: rw=0, sector=97, nr_sectors = 120 limit=128 [ 362.927433][ T7324] kworker/u4:6: attempt to access beyond end of device [ 362.927433][ T7324] loop0: rw=1, sector=217, nr_sectors = 824 limit=128 [ 362.941482][ T1685] usb 3-1: Using ep0 maxpacket: 16 [ 362.951740][ T1685] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.979075][ T1685] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 362.992510][ T8578] loop0: detected capacity change from 0 to 1024 [ 363.001172][ T8578] EXT4-fs: Ignoring removed nobh option [ 363.006841][ T8578] EXT4-fs: Ignoring removed bh option [ 363.013573][ T1685] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 363.022885][ T8578] EXT4-fs: journaled quota format not specified [ 363.029588][ T1685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.038038][ T1685] usb 3-1: Product: syz [ 363.042288][ T1685] usb 3-1: Manufacturer: syz [ 363.046871][ T1685] usb 3-1: SerialNumber: syz [ 363.403586][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2706'. [ 363.419995][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2706'. [ 363.445452][ T8588] SELinux: failed to load policy [ 363.460269][ T8590] SELinux: security_context_str_to_sid () failed with errno=-22 [ 363.937892][ T1685] usb 3-1: 0:2 : does not exist [ 363.953697][ T8600] netlink: 'syz.3.2712': attribute type 4 has an invalid length. [ 363.964702][ T8600] netlink: 'syz.3.2712': attribute type 4 has an invalid length. [ 364.001389][ T1685] usb 3-1: unit 15 not found! [ 364.005267][ T8602] loop3: detected capacity change from 0 to 1024 [ 364.015706][ T8602] EXT4-fs: Ignoring removed orlov option [ 364.023946][ T1685] usb 3-1: USB disconnect, device number 43 [ 364.030853][ T8602] EXT4-fs: Ignoring removed nomblk_io_submit option [ 364.039300][ T8604] tipc: Enabling of bearer rejected, failed to enable media [ 364.048266][ T8604] loop4: detected capacity change from 0 to 16 [ 364.276840][ T8606] loop0: detected capacity change from 0 to 2048 [ 365.647975][ T8604] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 365.959706][ T8602] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 366.221860][ T8620] tipc: Enabling of bearer rejected, already enabled [ 366.232324][ T284] EXT4-fs (loop3): unmounting filesystem. [ 366.246202][ T8622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2718'. [ 366.270752][ T8622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2718'. [ 366.325501][ T8615] loop0: detected capacity change from 0 to 40427 [ 366.336371][ T8615] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 366.341112][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 366.341125][ T28] audit: type=1400 audit(1751315437.704:1235): avc: denied { sys_module } for pid=8627 comm="syz.3.2720" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 366.344485][ T8615] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 366.381350][ T8630] syz.3.2721[8630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.381421][ T8630] syz.3.2721[8630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.395020][ T8615] F2FS-fs (loop0): invalid crc value [ 366.423679][ T8615] F2FS-fs (loop0): Found nat_bits in checkpoint [ 366.459384][ T8615] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 366.466539][ T8615] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 367.259326][ T8654] loop3: detected capacity change from 0 to 1024 [ 367.278911][ T8654] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 367.287506][ T8654] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.349884][ T8661] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2731'. [ 367.379998][ T8661] 0·: renamed from veth1_macvtap [ 367.392188][ T8661] device c0· left promiscuous mode [ 367.397747][ T8661] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 367.438575][ T28] audit: type=1400 audit(1751315438.794:1236): avc: denied { watch } for pid=8653 comm="syz.3.2728" path="/544/file1" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 367.485203][ T8673] loop4: detected capacity change from 0 to 2048 [ 367.503939][ T284] EXT4-fs (loop3): unmounting filesystem. [ 367.509597][ T8673] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 367.538665][ T283] EXT4-fs (loop4): unmounting filesystem. [ 367.544874][ T8682] hub 9-0:1.0: USB hub found [ 367.550096][ T8682] hub 9-0:1.0: 1 port detected [ 367.600985][ T8694] loop4: detected capacity change from 0 to 128 [ 367.608920][ T8694] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 367.617827][ T8694] ext4 filesystem being mounted at /558/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 367.677145][ T283] EXT4-fs (loop4): unmounting filesystem. [ 367.869663][ T4926] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 370.117123][ T28] audit: type=1400 audit(1751315441.474:1237): avc: denied { mount } for pid=8723 comm="syz.4.2756" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 370.176345][ T28] audit: type=1400 audit(1751315441.534:1238): avc: denied { create } for pid=8727 comm="syz.4.2758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 370.201500][ T4926] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 370.211057][ T4926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.240299][ T4926] usb 2-1: config 0 descriptor?? [ 370.279386][ T8743] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 370.313833][ T8746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2767'. [ 370.322912][ T8746] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2767'. [ 370.332046][ T8746] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2767'. [ 370.366115][ T28] audit: type=1400 audit(1751315441.724:1239): avc: denied { write } for pid=8739 comm="syz.4.2764" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 370.431843][ T28] audit: type=1400 audit(1751315441.794:1240): avc: denied { setopt } for pid=8753 comm="syz.0.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 370.481951][ T28] audit: type=1400 audit(1751315441.844:1241): avc: denied { associate } for pid=8757 comm="syz.0.2770" name="0" dev="devpts" ino=3 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 370.657154][ T4926] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 370.667264][ T4926] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 370.672087][ T8764] loop4: detected capacity change from 0 to 40427 [ 370.677641][ T4926] asix: probe of 2-1:0.0 failed with error -32 [ 370.685074][ T8764] F2FS-fs (loop4): invalid crc value [ 370.696365][ T8764] F2FS-fs (loop4): Found nat_bits in checkpoint [ 370.717245][ T8764] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 370.877925][ T8770] syz.4.2773: attempt to access beyond end of device [ 370.877925][ T8770] loop4: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 371.426667][ T8789] loop9: detected capacity change from 0 to 7 [ 371.433090][ T283] syz-executor: attempt to access beyond end of device [ 371.433090][ T283] loop4: rw=2049, sector=45208, nr_sectors = 8 limit=40427 [ 371.472276][ T8793] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2784'. [ 371.524614][ T8795] loop3: detected capacity change from 0 to 1024 [ 371.531595][ T8795] EXT4-fs: Ignoring removed orlov option [ 371.539091][ T8795] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 371.583519][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2786'. [ 371.592531][ T8801] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2786'. [ 371.599255][ T6] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 371.601801][ T8801] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2786'. [ 371.625015][ T284] EXT4-fs (loop3): unmounting filesystem. [ 371.673919][ T4926] usb 2-1: USB disconnect, device number 48 [ 371.789058][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 371.795384][ T6] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 371.804596][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.805751][ T8817] loop3: detected capacity change from 0 to 40427 [ 371.813449][ T6] usb 3-1: config 0 descriptor?? [ 371.820796][ T8817] F2FS-fs (loop3): invalid crc value [ 371.830455][ T8817] F2FS-fs (loop3): Found nat_bits in checkpoint [ 371.857386][ T8817] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 372.027748][ T8825] syz.3.2793: attempt to access beyond end of device [ 372.027748][ T8825] loop3: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 372.468945][ T28] audit: type=1326 audit(1751315443.824:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8826 comm="syz.4.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5d8e929 code=0x7ffc0000 [ 372.492593][ T28] audit: type=1326 audit(1751315443.824:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8826 comm="syz.4.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5d8e929 code=0x7ffc0000 [ 372.516159][ T28] audit: type=1326 audit(1751315443.824:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8826 comm="syz.4.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ea5d8e929 code=0x7ffc0000 [ 372.539751][ T28] audit: type=1326 audit(1751315443.824:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8826 comm="syz.4.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5d8e929 code=0x7ffc0000 [ 372.566937][ T28] audit: type=1326 audit(1751315443.824:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8826 comm="syz.4.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5d8e929 code=0x7ffc0000 [ 372.590582][ T28] audit: type=1326 audit(1751315443.824:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8826 comm="syz.4.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ea5d8e929 code=0x7ffc0000 [ 372.642638][ T284] syz-executor: attempt to access beyond end of device [ 372.642638][ T284] loop3: rw=2049, sector=45208, nr_sectors = 8 limit=40427 [ 372.648722][ T28] audit: type=1326 audit(1751315443.854:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8826 comm="syz.4.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5d8e929 code=0x7ffc0000 [ 372.680239][ T6] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 372.684059][ T28] audit: type=1326 audit(1751315443.854:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8826 comm="syz.4.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5d8e929 code=0x7ffc0000 [ 372.693067][ T6] asix: probe of 3-1:0.0 failed with error -32 [ 372.718149][ T28] audit: type=1326 audit(1751315443.854:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8826 comm="syz.4.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f4ea5d8e929 code=0x7ffc0000 [ 372.764871][ T28] audit: type=1326 audit(1751315443.854:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8826 comm="syz.4.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5d8e929 code=0x7ffc0000 [ 372.893936][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2806'. [ 372.903037][ T8851] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2806'. [ 372.912057][ T8851] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2806'. [ 373.668392][ T6] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 374.284069][ T8862] loop0: detected capacity change from 0 to 512 [ 374.290844][ T8862] EXT4-fs: Ignoring removed nobh option [ 374.298254][ T8862] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 374.324457][ T8862] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 374.339535][ T459] usb 3-1: USB disconnect, device number 44 [ 374.369095][ T8862] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2809: Corrupt directory, running e2fsck is recommended [ 374.387927][ T8870] loop4: detected capacity change from 0 to 1024 [ 374.399625][ T8870] EXT4-fs: Invalid want_extra_isize 0 [ 374.462953][ T8862] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 374.471303][ T8862] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.2809: corrupted in-inode xattr [ 374.483496][ T8862] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.2809: couldn't read orphan inode 15 (err -117) [ 374.496779][ T8862] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 374.571184][ T8874] tipc: Enabling of bearer rejected, already enabled [ 374.683758][ T8862] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 374.803342][ T8862] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 374.916597][ T8862] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2809: Corrupt directory, running e2fsck is recommended [ 375.096799][ T8879] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 375.218452][ T8879] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 375.312076][ T8879] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2809: Corrupt directory, running e2fsck is recommended [ 375.345488][ T8891] IPv4: Oversized IP packet from 127.202.26.0 [ 375.359625][ T8882] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 375.385680][ T8882] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 375.416165][ T8882] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2809: Corrupt directory, running e2fsck is recommended [ 375.436556][ T8896] __nla_validate_parse: 1 callbacks suppressed [ 375.436575][ T8896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2821'. [ 375.450118][ T6] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 375.453396][ T8884] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 375.469115][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.472375][ T8896] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2821'. [ 375.489636][ T6] usb 2-1: config 0 descriptor?? [ 375.495805][ T285] EXT4-fs (loop0): unmounting filesystem. [ 375.509300][ T8896] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2821'. [ 375.535166][ T8887] loop4: detected capacity change from 0 to 40427 [ 375.543696][ T8902] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2824'. [ 375.543859][ T8887] F2FS-fs (loop4): invalid crc value [ 375.559273][ T8887] F2FS-fs (loop4): Found nat_bits in checkpoint [ 375.578760][ T8907] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 375.619304][ T8887] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 375.749066][ T790] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 375.749993][ T8913] syz.4.2817: attempt to access beyond end of device [ 375.749993][ T8913] loop4: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 375.896212][ T6] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 375.906645][ T6] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 375.916999][ T6] asix: probe of 2-1:0.0 failed with error -32 [ 375.934879][ T8921] loop0: detected capacity change from 0 to 1024 [ 375.941562][ T8921] EXT4-fs: Ignoring removed orlov option [ 375.947188][ T8921] EXT4-fs: Ignoring removed nomblk_io_submit option [ 375.949070][ T790] usb 4-1: Using ep0 maxpacket: 8 [ 375.960282][ T790] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 375.961002][ T8921] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 375.969334][ T790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.970528][ T790] usb 4-1: config 0 descriptor?? [ 376.065536][ T283] syz-executor: attempt to access beyond end of device [ 376.065536][ T283] loop4: rw=2049, sector=45208, nr_sectors = 8 limit=40427 [ 376.460743][ T8933] loop4: detected capacity change from 0 to 2048 [ 376.638495][ T790] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 376.648685][ T790] asix: probe of 4-1:0.0 failed with error -32 [ 376.850758][ T8940] tipc: Enabling of bearer rejected, failed to enable media [ 376.948411][ T8940] loop4: detected capacity change from 0 to 16 [ 376.973948][ T8940] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 377.162792][ T790] usb 2-1: USB disconnect, device number 49 [ 377.579082][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 377.579098][ T28] audit: type=1400 audit(1751315448.914:1291): avc: denied { create } for pid=8945 comm="syz.2.2837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 377.631840][ T285] EXT4-fs (loop0): unmounting filesystem. [ 377.645135][ T28] audit: type=1400 audit(1751315448.924:1292): avc: denied { bind } for pid=8945 comm="syz.2.2837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 377.684708][ T28] audit: type=1400 audit(1751315448.924:1293): avc: denied { write } for pid=8945 comm="syz.2.2837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 377.706845][ T28] audit: type=1400 audit(1751315448.924:1294): avc: denied { read } for pid=8945 comm="syz.2.2837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 377.726391][ T28] audit: type=1400 audit(1751315448.994:1295): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 377.797103][ T28] audit: type=1400 audit(1751315449.094:1296): avc: denied { read write } for pid=285 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 377.820791][ T28] audit: type=1400 audit(1751315449.094:1297): avc: denied { open } for pid=285 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 377.843999][ T28] audit: type=1400 audit(1751315449.094:1298): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1310 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 377.929476][ T8954] tipc: Enabling of bearer rejected, already enabled [ 377.942134][ T8954] loop0: detected capacity change from 0 to 16 [ 378.019886][ T8954] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 378.519469][ T2743] usb 4-1: USB disconnect, device number 44 [ 378.656132][ T28] audit: type=1400 audit(1751315450.014:1299): avc: denied { write } for pid=8957 comm="syz.3.2842" name="001" dev="devtmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 378.681074][ T8958] usb usb9: usbfs: process 8958 (syz.3.2842) did not claim interface 3 before use [ 378.753960][ T28] audit: type=1400 audit(1751315450.044:1300): avc: denied { create } for pid=8947 comm="syz.2.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 379.066342][ T8968] loop4: detected capacity change from 0 to 512 [ 379.079002][ T8968] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 379.091174][ T8968] EXT4-fs (loop4): 1 truncate cleaned up [ 379.096858][ T8968] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 379.140454][ T283] EXT4-fs (loop4): unmounting filesystem. [ 379.152656][ T8976] loop4: detected capacity change from 0 to 1024 [ 379.159696][ T8976] EXT4-fs: Ignoring removed orlov option [ 379.165383][ T8976] EXT4-fs: Ignoring removed nomblk_io_submit option [ 379.180956][ T8976] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 379.961735][ T8983] loop0: detected capacity change from 0 to 2048 [ 379.968826][ T2743] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 380.080873][ T8983] loop0: p1 < > p3 [ 380.089039][ T8983] loop0: p3 size 134217728 extends beyond EOD, truncated [ 380.139076][ T2743] usb 2-1: device descriptor read/64, error -71 [ 380.172153][ T8989] SELinux: failed to load policy [ 380.426815][ T8997] loop3: detected capacity change from 0 to 1024 [ 380.436416][ T8997] EXT4-fs: Ignoring removed orlov option [ 380.442110][ T2743] usb 2-1: device descriptor read/64, error -71 [ 380.470682][ T8997] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 380.579984][ T284] EXT4-fs (loop3): unmounting filesystem. [ 380.719058][ T2743] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 381.339439][ T2743] usb 2-1: device descriptor read/64, error -71 [ 381.566459][ T9004] SELinux: failed to load policy [ 381.583842][ T9009] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 381.594286][ T9011] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2859'. [ 381.680281][ T283] EXT4-fs (loop4): unmounting filesystem. [ 381.699164][ T2743] usb 2-1: device descriptor read/64, error -71 [ 381.715872][ T9024] loop3: detected capacity change from 0 to 512 [ 381.730010][ T9024] EXT4-fs (loop3): too many log groups per flexible block group [ 381.737868][ T9024] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 381.744735][ T9024] EXT4-fs (loop3): mount failed [ 381.824743][ T9030] netlink: 'syz.2.2868': attribute type 29 has an invalid length. [ 381.860565][ T2743] usb usb2-port1: attempt power cycle [ 381.939871][ T9038] SELinux: failed to load policy [ 381.951600][ T9042] loop3: detected capacity change from 0 to 1024 [ 381.966057][ T9042] EXT4-fs: Ignoring removed orlov option [ 381.972756][ T9042] EXT4-fs: Ignoring removed nomblk_io_submit option [ 381.983660][ T9044] loop4: detected capacity change from 0 to 1024 [ 381.991332][ T9044] EXT4-fs: Ignoring removed nobh option [ 381.997413][ T9044] EXT4-fs: Ignoring removed bh option [ 382.004367][ T9042] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 382.013167][ T9044] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 382.066428][ T9044] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 382.122428][ T283] EXT4-fs (loop4): unmounting filesystem. [ 382.140695][ T9054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2878'. [ 382.146431][ T9056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2879'. [ 382.149797][ T9054] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2878'. [ 382.168389][ T9054] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2878'. [ 382.177529][ T9056] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2879'. [ 382.229151][ T9056] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2879'. [ 382.782139][ T9072] loop0: detected capacity change from 0 to 40427 [ 382.790171][ T9072] F2FS-fs (loop0): invalid crc value [ 382.828307][ T9072] F2FS-fs (loop0): Found nat_bits in checkpoint [ 382.848493][ T28] kauditd_printk_skb: 95 callbacks suppressed [ 382.848508][ T28] audit: type=1400 audit(1751315454.204:1396): avc: denied { map } for pid=9073 comm="syz.2.2884" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=57646 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 382.879278][ T28] audit: type=1400 audit(1751315454.234:1397): avc: denied { read write } for pid=9073 comm="syz.2.2884" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=57646 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 382.880432][ T284] EXT4-fs (loop3): unmounting filesystem. [ 382.909916][ T9072] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 382.953541][ T28] audit: type=1400 audit(1751315454.314:1398): avc: denied { read } for pid=9082 comm="syz.2.2887" dev="nsfs" ino=4026532631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 382.991960][ T28] audit: type=1400 audit(1751315454.344:1399): avc: denied { open } for pid=9082 comm="syz.2.2887" path="net:[4026532631]" dev="nsfs" ino=4026532631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 383.017397][ T28] audit: type=1400 audit(1751315454.344:1400): avc: denied { create } for pid=9082 comm="syz.2.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 383.043130][ T28] audit: type=1400 audit(1751315454.344:1401): avc: denied { setopt } for pid=9082 comm="syz.2.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 383.063518][ T28] audit: type=1400 audit(1751315454.344:1402): avc: denied { bind } for pid=9082 comm="syz.2.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 383.099530][ T9092] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2890'. [ 383.141615][ T28] audit: type=1400 audit(1751315454.504:1403): avc: denied { append } for pid=9071 comm="syz.0.2883" path="/571/file0/file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 383.195675][ T28] audit: type=1400 audit(1751315454.554:1404): avc: denied { write } for pid=9071 comm="syz.0.2883" name="file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 383.226351][ T9101] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.2895' sets config #1 [ 383.349410][ T9108] tipc: Enabling of bearer rejected, already enabled [ 383.399142][ T2743] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 383.589122][ T2743] usb 3-1: Using ep0 maxpacket: 8 [ 383.596497][ T2743] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 383.687505][ T9111] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2898'. [ 383.704074][ T2743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.788388][ T2743] usb 3-1: config 0 descriptor?? [ 384.268568][ T285] syz-executor: attempt to access beyond end of device [ 384.268568][ T285] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 384.483868][ T2743] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 384.546576][ T2743] asix: probe of 3-1:0.0 failed with error -61 [ 384.561547][ T28] audit: type=1400 audit(1751315455.924:1405): avc: denied { execute } for pid=9119 comm="syz.3.2903" name="file0" dev="tmpfs" ino=3285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 384.623000][ T9123] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2904'. [ 384.711758][ T9121] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.733174][ T9121] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.751872][ T9121] device bridge_slave_0 entered promiscuous mode [ 384.771290][ T9121] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.792791][ T9121] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.816003][ T9121] device bridge_slave_1 entered promiscuous mode [ 384.891672][ T8722] tipc: Left network mode [ 384.958253][ T9121] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.965326][ T9121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.972626][ T9121] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.979672][ T9121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.989853][ T9135] loop0: detected capacity change from 0 to 40427 [ 384.997559][ T9135] F2FS-fs (loop0): invalid crc value [ 385.019830][ T9135] F2FS-fs (loop0): Found nat_bits in checkpoint [ 385.063261][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 385.082338][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.094293][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.119397][ T9135] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 385.126958][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 385.135390][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 385.143908][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.150956][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.224992][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 385.237982][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 385.255865][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.262933][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.277054][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 385.285996][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 385.294341][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 385.302540][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 385.318695][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 385.485119][ T9151] syz.0.2907: attempt to access beyond end of device [ 385.485119][ T9151] loop0: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 385.540328][ T9148] loop3: detected capacity change from 0 to 40427 [ 385.548154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 385.562170][ T9148] F2FS-fs (loop3): invalid crc value [ 385.605385][ T9150] tipc: Enabling of bearer rejected, already enabled [ 385.655032][ T9121] device veth0_vlan entered promiscuous mode [ 385.662587][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 385.673170][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 385.739963][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 385.783929][ T9148] F2FS-fs (loop3): Found nat_bits in checkpoint [ 385.793657][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 385.897854][ T9121] device veth1_macvtap entered promiscuous mode [ 385.933431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 385.951255][ T9148] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 385.968825][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 386.011949][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 386.096628][ T285] syz-executor: attempt to access beyond end of device [ 386.096628][ T285] loop0: rw=2049, sector=45208, nr_sectors = 8 limit=40427 [ 386.125473][ T790] usb 3-1: USB disconnect, device number 45 [ 386.151203][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 386.189234][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 386.200909][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 386.215308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 386.293501][ T9174] loop0: detected capacity change from 0 to 1024 [ 386.309969][ T9174] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 386.348017][ T9179] mmap: syz.2.2913 (9179) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 386.349443][ T9174] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 386.401093][ T285] EXT4-fs (loop0): unmounting filesystem. [ 386.479128][ T39] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 386.558800][ T284] syz-executor: attempt to access beyond end of device [ 386.558800][ T284] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 386.642992][ T9193] loop0: detected capacity change from 0 to 40427 [ 386.651101][ T9193] F2FS-fs (loop0): invalid crc value [ 386.658811][ T9193] F2FS-fs (loop0): Found nat_bits in checkpoint [ 386.679075][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 386.685489][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.696765][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.706709][ T39] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 386.707206][ T9193] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 386.715906][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.761409][ T39] usb 2-1: config 0 descriptor?? [ 386.768260][ T39] hub 2-1:0.0: USB hub found [ 386.820479][ T9203] syz.0.2922: attempt to access beyond end of device [ 386.820479][ T9203] loop0: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 386.949091][ T3440] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 386.968231][ T39] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 387.129067][ T3440] usb 4-1: Using ep0 maxpacket: 8 [ 387.135441][ T3440] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 387.144767][ T3440] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.158820][ T3440] usb 4-1: config 0 descriptor?? [ 387.423223][ T39] hid-generic 0003:046D:C31C.0007: unknown main item tag 0x0 [ 387.504830][ T39] hid-generic 0003:046D:C31C.0007: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 387.651126][ T39] usb 2-1: USB disconnect, device number 53 [ 387.920686][ T285] syz-executor: attempt to access beyond end of device [ 387.920686][ T285] loop0: rw=2049, sector=45208, nr_sectors = 8 limit=40427 [ 388.023946][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 388.023960][ T28] audit: type=1400 audit(1751315459.384:1425): avc: denied { write } for pid=9215 comm="syz.4.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 388.098026][ T28] audit: type=1400 audit(1751315459.414:1426): avc: denied { accept } for pid=9215 comm="syz.4.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 388.132211][ T28] audit: type=1400 audit(1751315459.414:1427): avc: denied { read } for pid=9215 comm="syz.4.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 388.155865][ T3440] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 388.166375][ T3440] asix: probe of 4-1:0.0 failed with error -61 [ 388.231005][ T28] audit: type=1400 audit(1751315459.594:1428): avc: denied { setopt } for pid=9235 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 388.877912][ T3440] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 389.039077][ T3440] usb 3-1: device descriptor read/64, error -71 [ 389.220504][ T28] audit: type=1326 audit(1751315460.584:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9255 comm="syz.1.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87a38e929 code=0x7ffc0000 [ 389.244570][ T28] audit: type=1326 audit(1751315460.584:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9255 comm="syz.1.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7fa87a38e929 code=0x7ffc0000 [ 389.269575][ T28] audit: type=1326 audit(1751315460.584:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9255 comm="syz.1.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87a38e929 code=0x7ffc0000 [ 389.293697][ T28] audit: type=1326 audit(1751315460.604:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9255 comm="syz.1.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87a38e929 code=0x7ffc0000 [ 389.309056][ T3440] usb 3-1: device descriptor read/64, error -71 [ 389.337553][ T28] audit: type=1400 audit(1751315460.654:1433): avc: denied { create } for pid=9257 comm="syz.4.2942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 389.357094][ T28] audit: type=1400 audit(1751315460.674:1434): avc: denied { setopt } for pid=9257 comm="syz.4.2942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 389.599065][ T3440] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 389.749050][ T3440] usb 3-1: device descriptor read/64, error -71 [ 389.924542][ T459] usb 4-1: USB disconnect, device number 45 [ 390.019090][ T3440] usb 3-1: device descriptor read/64, error -71 [ 390.090249][ T9284] tipc: Enabling of bearer rejected, already enabled [ 390.102752][ T9284] loop3: detected capacity change from 0 to 16 [ 390.112570][ T9284] erofs: (device loop3): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 390.625737][ T9289] loop0: detected capacity change from 0 to 512 [ 390.760960][ T9289] EXT4-fs (loop0): 1 orphan inode deleted [ 390.856180][ T9289] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 390.865281][ T9289] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.887336][ T9294] loop4: detected capacity change from 0 to 512 [ 390.901180][ T9294] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 390.912526][ T9294] EXT4-fs (loop4): 1 truncate cleaned up [ 390.918181][ T9294] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 391.140313][ T8] EXT4-fs error (device loop0): ext4_release_dquot:6837: comm kworker/u4:0: Failed to release dquot type 1 [ 391.140798][ T3440] usb usb3-port1: attempt power cycle [ 391.160412][ T9121] EXT4-fs (loop4): unmounting filesystem. [ 391.173499][ T285] EXT4-fs (loop0): unmounting filesystem. [ 391.493192][ T9297] loop4: detected capacity change from 0 to 512 [ 391.504493][ T9297] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 391.517648][ T9297] EXT4-fs (loop4): invalid journal inode [ 391.577017][ T9311] xt_policy: output policy not valid in PREROUTING and INPUT [ 391.598748][ T9297] EXT4-fs (loop4): can't get journal size [ 391.623792][ T9297] EXT4-fs (loop4): 1 truncate cleaned up [ 391.642667][ T9297] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 391.803178][ T9121] EXT4-fs (loop4): unmounting filesystem. [ 391.832868][ T9324] loop4: detected capacity change from 0 to 1024 [ 391.850509][ T9324] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 391.859170][ T9324] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.874257][ T9324] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 391.894843][ T9121] EXT4-fs (loop4): unmounting filesystem. [ 391.962657][ T9336] loop4: detected capacity change from 0 to 128 [ 391.984613][ T9336] syz.4.2971: attempt to access beyond end of device [ 391.984613][ T9336] loop4: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 392.299051][ T790] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 392.344301][ T9346] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.352847][ T9346] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.361855][ T9346] device bridge_slave_0 entered promiscuous mode [ 392.369769][ T9346] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.376990][ T9346] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.384701][ T9346] device bridge_slave_1 entered promiscuous mode [ 392.459064][ T790] usb 5-1: device descriptor read/64, error -71 [ 392.473904][ T9346] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.480980][ T9346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.488288][ T9346] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.495346][ T9346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.523355][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 392.532475][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.540046][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.561808][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 392.570182][ T7705] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.577230][ T7705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.584736][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 392.593670][ T7705] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.600746][ T7705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.608246][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 392.616883][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 392.639761][ T9346] device veth0_vlan entered promiscuous mode [ 392.654343][ T9346] device veth1_macvtap entered promiscuous mode [ 392.668433][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 392.677304][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 392.686510][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 392.694875][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 392.702883][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 392.776357][ T9362] xt_policy: output policy not valid in PREROUTING and INPUT [ 392.787746][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 392.805662][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 393.317638][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 393.317657][ T28] audit: type=1400 audit(1751315464.254:1452): avc: denied { write } for pid=9358 comm="syz.0.2981" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 393.445331][ T790] usb 5-1: device descriptor read/64, error -71 [ 393.455308][ T28] audit: type=1400 audit(1751315464.814:1453): avc: denied { create } for pid=9364 comm="syz.1.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 393.502744][ T28] audit: type=1400 audit(1751315464.864:1454): avc: denied { create } for pid=9368 comm="syz.2.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 393.528638][ T28] audit: type=1400 audit(1751315464.864:1455): avc: denied { write } for pid=9368 comm="syz.2.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 393.624563][ T9379] __nla_validate_parse: 1 callbacks suppressed [ 393.624583][ T9379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2988'. [ 393.639822][ T9379] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2988'. [ 393.668229][ T9379] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2988'. [ 393.759115][ T28] audit: type=1400 audit(1751315465.114:1456): avc: denied { create } for pid=9387 comm="syz.0.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 393.759779][ T790] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 393.801368][ T28] audit: type=1400 audit(1751315465.114:1457): avc: denied { create } for pid=9387 comm="syz.0.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 393.821636][ T28] audit: type=1400 audit(1751315465.114:1458): avc: denied { connect } for pid=9387 comm="syz.0.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 393.896040][ T9394] xt_policy: output policy not valid in PREROUTING and INPUT [ 393.949054][ T790] usb 5-1: device descriptor read/64, error -71 [ 394.041794][ T28] audit: type=1400 audit(1751315465.404:1459): avc: denied { sqpoll } for pid=9396 comm="syz.0.2994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 394.158506][ T9397] loop0: detected capacity change from 0 to 2048 [ 394.229121][ T790] usb 5-1: device descriptor read/64, error -71 [ 394.275350][ T9397] loop0: p4 < > [ 394.399678][ T790] usb usb5-port1: attempt power cycle [ 394.467381][ T28] audit: type=1400 audit(1751315465.824:1460): avc: denied { read } for pid=9402 comm="syz.0.2995" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 394.520601][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2997'. [ 394.545475][ T28] audit: type=1400 audit(1751315465.854:1461): avc: denied { open } for pid=9402 comm="syz.0.2995" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 394.819115][ T790] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 394.896931][ T790] usb 5-1: device descriptor read/8, error -71 [ 394.922344][ T9421] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.939032][ T9421] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.157098][ T9421] device bridge_slave_0 entered promiscuous mode [ 395.226805][ T790] usb 5-1: device descriptor read/8, error -71 [ 395.262357][ T9437] tipc: Enabling of bearer rejected, already enabled [ 395.284302][ T9421] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.375734][ T9421] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.477578][ T9421] device bridge_slave_1 entered promiscuous mode [ 395.794109][ T9443] loop4: detected capacity change from 0 to 512 [ 395.826361][ T9443] EXT4-fs: Ignoring removed nomblk_io_submit option [ 395.863063][ T9443] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 395.898995][ T9443] EXT4-fs (loop4): failed to open journal device unknown-block(0,3) -6 [ 395.945620][ T9449] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3014'. [ 395.999992][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 396.015204][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 396.066312][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 396.074782][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 396.083452][ T7705] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.090516][ T7705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.098026][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 396.106487][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 396.114974][ T7705] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.122030][ T7705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.174419][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 396.187970][ T9463] xt_policy: output policy not valid in PREROUTING and INPUT [ 396.555851][ T8722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 396.574800][ T8722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 396.586360][ T8722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 396.605850][ T8722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 396.614411][ T8722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 396.628869][ T9421] device veth0_vlan entered promiscuous mode [ 396.638124][ T8722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 396.652930][ T8722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 396.662363][ T8722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 396.670509][ T8722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 396.682679][ T9421] device veth1_macvtap entered promiscuous mode [ 396.689200][ T459] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 396.699500][ T8722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 396.710957][ T8722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 396.725629][ T8722] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 396.735764][ T9490] loop4: detected capacity change from 0 to 2048 [ 396.746665][ T8722] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 396.755556][ T8722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 396.773939][ T8722] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 396.783736][ T9490] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 396.796402][ T8722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 396.820634][ T9121] EXT4-fs (loop4): unmounting filesystem. [ 396.838175][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3034'. [ 396.870160][ T459] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.888102][ T459] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 396.898313][ T459] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 396.908344][ T459] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 396.916609][ T459] usb 4-1: SerialNumber: syz [ 396.932090][ T459] usb 4-1: 0:2 : does not exist [ 396.990426][ T9507] xt_policy: output policy not valid in PREROUTING and INPUT [ 397.609167][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3046'. [ 397.660748][ T9529] loop4: detected capacity change from 0 to 8192 [ 397.690194][ T9529] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 397.705572][ T9529] loop4: partition table partially beyond EOD, truncated [ 397.712778][ T9529] loop4: p1 start 67108864 is beyond EOD, truncated [ 397.721400][ T9529] loop4: p2 size 61546 extends beyond EOD, truncated [ 397.728592][ T9529] loop4: p3 start 100859904 is beyond EOD, truncated [ 397.738442][ T9529] loop4: p5 start 67108864 is beyond EOD, truncated [ 397.745124][ T9529] loop4: p6 size 61546 extends beyond EOD, truncated [ 399.125216][ T24] usb 4-1: USB disconnect, device number 46 [ 399.452773][ T9564] xt_policy: output policy not valid in PREROUTING and INPUT [ 399.682281][ T9572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3063'. [ 399.693095][ T9572] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3063'. [ 399.704772][ T9572] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3063'. [ 399.793900][ T9575] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.801214][ T9575] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.808759][ T9575] device bridge_slave_0 entered promiscuous mode [ 399.813836][ T9583] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 399.829183][ T9583] SELinux: failed to load policy [ 399.838089][ T9575] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.850801][ T9575] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.921731][ T9575] device bridge_slave_1 entered promiscuous mode [ 399.990270][ T9584] tipc: Enabling of bearer rejected, already enabled [ 400.289172][ C1] ------------[ cut here ]------------ [ 400.294698][ C1] refcount_t: addition on 0; use-after-free. [ 400.300817][ C1] WARNING: CPU: 1 PID: 9574 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0 [ 400.310222][ C1] Modules linked in: [ 400.314109][ C1] CPU: 1 PID: 9574 Comm: syz.2.3065 Not tainted 6.1.141-syzkaller-00034-g1bf1aa362e6b #0 [ 400.323923][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 400.334014][ C1] RIP: 0010:refcount_warn_saturate+0x104/0x1a0 [ 400.340188][ C1] Code: 05 01 48 c7 c7 60 a7 a9 85 e8 38 fb dd fe 0f 0b eb df e8 6f b5 0c ff c6 05 cf ab 0b 05 01 48 c7 c7 a0 a6 a9 85 e8 1c fb dd fe <0f> 0b eb c3 e8 53 b5 0c ff c6 05 b4 ab 0b 05 01 48 c7 c7 00 a7 a9 [ 400.359810][ C1] RSP: 0018:ffffc900001b09e0 EFLAGS: 00010246 [ 400.365881][ C1] RAX: 5ae7ab9045bb0700 RBX: 0000000000000002 RCX: ffff8881152b6540 [ 400.373862][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 400.381844][ C1] RBP: ffffc900001b09f0 R08: dffffc0000000000 R09: fffff520000360b9 [ 400.389822][ C1] R10: fffff520000360b9 R11: 1ffff920000360b8 R12: ffffc900001b0ba0 [ 400.397797][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff888116d98600 [ 400.405810][ C1] FS: 00007f5ccc5be6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 400.414767][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.421361][ C1] CR2: 0000001b2c319ff8 CR3: 0000000130341000 CR4: 00000000003506a0 [ 400.429344][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 400.437317][ C1] DR3: 00000000000032e7 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 400.445293][ C1] Call Trace: [ 400.448565][ C1] [ 400.451411][ C1] tipc_crypto_xmit+0x1822/0x2220 [ 400.456446][ C1] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 400.461825][ C1] ? __copy_skb_header+0x49f/0x630 [ 400.466943][ C1] tipc_bearer_xmit_skb+0x226/0x380 [ 400.472153][ C1] ? __skb_clone+0x47a/0x790 [ 400.476746][ C1] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 400.482488][ C1] ? skb_clone+0x228/0x380 [ 400.486898][ C1] tipc_disc_timeout+0x6a2/0x830 [ 400.491934][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 400.497393][ C1] ? __kasan_check_write+0x14/0x20 [ 400.502514][ C1] ? _raw_spin_lock_irq+0x8f/0xe0 [ 400.507541][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 400.513098][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 400.518555][ C1] call_timer_fn+0x46/0x2a0 [ 400.523068][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 400.528524][ C1] __run_timers+0x639/0x9a0 [ 400.533041][ C1] ? calc_index+0x200/0x200 [ 400.537544][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 400.542776][ C1] run_timer_softirq+0x6a/0xf0 [ 400.547560][ C1] handle_softirqs+0x1d7/0x600 [ 400.552331][ C1] ? irqtime_account_irq+0xc4/0x240 [ 400.557535][ C1] __irq_exit_rcu+0x52/0xf0 [ 400.562042][ C1] irq_exit_rcu+0x9/0x10 [ 400.566277][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 400.571916][ C1] [ 400.574837][ C1] [ 400.577755][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 400.583741][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x4/0x80 [ 400.590524][ C1] Code: 74 11 18 48 89 44 11 20 5d c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 b8 80 f8 fd 6f 55 48 89 e5 <48> 8b 45 08 65 48 8b 0d 80 71 92 7e 65 8b 15 81 71 92 7e 81 e2 00 [ 400.610141][ C1] RSP: 0018:ffffc90000a17730 EFLAGS: 00000246 [ 400.616217][ C1] RAX: 1ffff110265d0a8c RBX: ffff888132e85460 RCX: ffffffff84492423 [ 400.624216][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 400.632208][ C1] RBP: ffffc90000a17730 R08: dffffc0000000000 R09: ffffed10265d0a8d [ 400.640198][ C1] R10: ffffed10265d0a8d R11: 1ffff110265d0a8c R12: dffffc0000000000 [ 400.648169][ C1] R13: 1ffff92000142f04 R14: 0000000000000100 R15: ffffc90000a17840 [ 400.656162][ C1] ? unix_dgram_sendmsg+0x9b3/0x16d0 [ 400.661472][ C1] unix_dgram_sendmsg+0x9e2/0x16d0 [ 400.666594][ C1] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 400.672155][ C1] ? security_socket_sendmsg+0x93/0xb0 [ 400.677620][ C1] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 400.683182][ C1] ____sys_sendmsg+0x5a9/0x990 [ 400.687947][ C1] ? _raw_spin_unlock+0x4c/0x70 [ 400.692815][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 400.697853][ C1] ? __schedule+0xb8f/0x14e0 [ 400.702485][ C1] ? import_iovec+0x7c/0xb0 [ 400.707020][ C1] ___sys_sendmsg+0x21c/0x290 [ 400.711719][ C1] ? __sys_sendmsg+0x270/0x270 [ 400.716486][ C1] ? futex_unqueue+0x132/0x160 [ 400.721289][ C1] ? __cfi_futex_wait+0x10/0x10 [ 400.726158][ C1] ? __fdget+0x19c/0x220 [ 400.730427][ C1] __sys_sendmmsg+0x274/0x460 [ 400.735116][ C1] ? __cfi___sys_sendmmsg+0x10/0x10 [ 400.740343][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 400.745980][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 400.750850][ C1] x64_sys_call+0x3f5/0x9a0 [ 400.755355][ C1] do_syscall_64+0x4c/0xa0 [ 400.759777][ C1] ? clear_bhb_loop+0x30/0x80 [ 400.764454][ C1] ? clear_bhb_loop+0x30/0x80 [ 400.769145][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.775044][ C1] RIP: 0033:0x7f5ccb78e929 [ 400.779480][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.799090][ C1] RSP: 002b:00007f5ccc5be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 400.807501][ C1] RAX: ffffffffffffffda RBX: 00007f5ccb9b5fa0 RCX: 00007f5ccb78e929 [ 400.815484][ C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000005 [ 400.823460][ C1] RBP: 00007f5ccb810b39 R08: 0000000000000000 R09: 0000000000000000 [ 400.831528][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.839501][ C1] R13: 0000000000000000 R14: 00007f5ccb9b5fa0 R15: 00007ffd9ec6bf68 [ 400.847471][ C1] [ 400.850492][ C1] ---[ end trace 0000000000000000 ]--- [ 400.855952][ C1] ------------[ cut here ]------------ [ 400.861401][ C1] refcount_t: underflow; use-after-free. [ 400.867123][ C1] WARNING: CPU: 1 PID: 9574 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 400.876503][ C1] Modules linked in: [ 400.880397][ C1] CPU: 1 PID: 9574 Comm: syz.2.3065 Tainted: G W 6.1.141-syzkaller-00034-g1bf1aa362e6b #0 [ 400.891679][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 400.901734][ C1] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 400.907891][ C1] Code: 05 01 48 c7 c7 a0 a6 a9 85 e8 1c fb dd fe 0f 0b eb c3 e8 53 b5 0c ff c6 05 b4 ab 0b 05 01 48 c7 c7 00 a7 a9 85 e8 00 fb dd fe <0f> 0b eb a7 e8 37 b5 0c ff c6 05 95 ab 0b 05 01 48 c7 c7 40 a6 a9 [ 400.927502][ C1] RSP: 0018:ffffc900001b09e0 EFLAGS: 00010246 [ 400.933582][ C1] RAX: 5ae7ab9045bb0700 RBX: 0000000000000003 RCX: ffff8881152b6540 [ 400.941564][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 400.949545][ C1] RBP: ffffc900001b09f0 R08: dffffc0000000000 R09: fffff520000360b9 [ 400.957514][ C1] R10: fffff520000360b9 R11: 1ffff920000360b8 R12: 00000000c0000000 [ 400.965523][ C1] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff888116d98600 [ 400.973515][ C1] FS: 00007f5ccc5be6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 400.982459][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.989056][ C1] CR2: 0000001b2c319ff8 CR3: 0000000130341000 CR4: 00000000003506a0 [ 400.997030][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 401.005012][ C1] DR3: 00000000000032e7 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 401.013007][ C1] Call Trace: [ 401.016276][ C1] [ 401.019123][ C1] tipc_crypto_xmit+0x195e/0x2220 [ 401.024153][ C1] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 401.029545][ C1] ? __copy_skb_header+0x49f/0x630 [ 401.034683][ C1] tipc_bearer_xmit_skb+0x226/0x380 [ 401.039903][ C1] ? __skb_clone+0x47a/0x790 [ 401.044505][ C1] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 401.050245][ C1] ? skb_clone+0x228/0x380 [ 401.054662][ C1] tipc_disc_timeout+0x6a2/0x830 [ 401.059617][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 401.065080][ C1] ? __kasan_check_write+0x14/0x20 [ 401.070206][ C1] ? _raw_spin_lock_irq+0x8f/0xe0 [ 401.075237][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 401.080796][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 401.086255][ C1] call_timer_fn+0x46/0x2a0 [ 401.090779][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 401.096260][ C1] __run_timers+0x639/0x9a0 [ 401.100798][ C1] ? calc_index+0x200/0x200 [ 401.105310][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 401.110529][ C1] run_timer_softirq+0x6a/0xf0 [ 401.115307][ C1] handle_softirqs+0x1d7/0x600 [ 401.120083][ C1] ? irqtime_account_irq+0xc4/0x240 [ 401.125312][ C1] __irq_exit_rcu+0x52/0xf0 [ 401.129824][ C1] irq_exit_rcu+0x9/0x10 [ 401.134067][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 401.139710][ C1] [ 401.142634][ C1] [ 401.145569][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 401.151576][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x4/0x80 [ 401.158349][ C1] Code: 74 11 18 48 89 44 11 20 5d c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 b8 80 f8 fd 6f 55 48 89 e5 <48> 8b 45 08 65 48 8b 0d 80 71 92 7e 65 8b 15 81 71 92 7e 81 e2 00 [ 401.177991][ C1] RSP: 0018:ffffc90000a17730 EFLAGS: 00000246 [ 401.184081][ C1] RAX: 1ffff110265d0a8c RBX: ffff888132e85460 RCX: ffffffff84492423 [ 401.192073][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 401.200059][ C1] RBP: ffffc90000a17730 R08: dffffc0000000000 R09: ffffed10265d0a8d [ 401.208033][ C1] R10: ffffed10265d0a8d R11: 1ffff110265d0a8c R12: dffffc0000000000 [ 401.216013][ C1] R13: 1ffff92000142f04 R14: 0000000000000100 R15: ffffc90000a17840 [ 401.223998][ C1] ? unix_dgram_sendmsg+0x9b3/0x16d0 [ 401.229306][ C1] unix_dgram_sendmsg+0x9e2/0x16d0 [ 401.234435][ C1] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 401.239995][ C1] ? security_socket_sendmsg+0x93/0xb0 [ 401.245462][ C1] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 401.251019][ C1] ____sys_sendmsg+0x5a9/0x990 [ 401.255782][ C1] ? _raw_spin_unlock+0x4c/0x70 [ 401.260651][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 401.265671][ C1] ? __schedule+0xb8f/0x14e0 [ 401.270280][ C1] ? import_iovec+0x7c/0xb0 [ 401.274783][ C1] ___sys_sendmsg+0x21c/0x290 [ 401.279467][ C1] ? __sys_sendmsg+0x270/0x270 [ 401.284230][ C1] ? futex_unqueue+0x132/0x160 [ 401.289015][ C1] ? __cfi_futex_wait+0x10/0x10 [ 401.293863][ C1] ? __fdget+0x19c/0x220 [ 401.298116][ C1] __sys_sendmmsg+0x274/0x460 [ 401.302802][ C1] ? __cfi___sys_sendmmsg+0x10/0x10 [ 401.308006][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 401.313644][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 401.318489][ C1] x64_sys_call+0x3f5/0x9a0 [ 401.323001][ C1] do_syscall_64+0x4c/0xa0 [ 401.327412][ C1] ? clear_bhb_loop+0x30/0x80 [ 401.332098][ C1] ? clear_bhb_loop+0x30/0x80 [ 401.336791][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.342691][ C1] RIP: 0033:0x7f5ccb78e929 [ 401.347099][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.366723][ C1] RSP: 002b:00007f5ccc5be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 401.375165][ C1] RAX: ffffffffffffffda RBX: 00007f5ccb9b5fa0 RCX: 00007f5ccb78e929 [ 401.383150][ C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000005 [ 401.391131][ C1] RBP: 00007f5ccb810b39 R08: 0000000000000000 R09: 0000000000000000 [ 401.399107][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.407079][ C1] R13: 0000000000000000 R14: 00007f5ccb9b5fa0 R15: 00007ffd9ec6bf68 [ 401.415066][ C1] [ 401.418079][ C1] ---[ end trace 0000000000000000 ]--- [ 401.424313][ C1] ------------[ cut here ]------------ [ 401.429780][ C1] refcount_t: saturated; leaking memory. [ 401.435509][ C1] WARNING: CPU: 1 PID: 9574 at lib/refcount.c:22 refcount_warn_saturate+0x158/0x1a0 [ 401.444902][ C1] Modules linked in: [ 401.448785][ C1] CPU: 1 PID: 9574 Comm: syz.2.3065 Tainted: G W 6.1.141-syzkaller-00034-g1bf1aa362e6b #0 [ 401.460065][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 401.470120][ C1] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 401.476276][ C1] Code: 05 01 48 c7 c7 40 a6 a9 85 e8 e4 fa dd fe 0f 0b eb 8b e8 1b b5 0c ff c6 05 7a ab 0b 05 01 48 c7 c7 40 a6 a9 85 e8 c8 fa dd fe <0f> 0b e9 6c ff ff ff e8 fc b4 0c ff c6 05 5f ab 0b 05 01 48 c7 c7 [ 401.495886][ C1] RSP: 0018:ffffc900001b09e0 EFLAGS: 00010246 [ 401.501967][ C1] RAX: 5ae7ab9045bb0700 RBX: 0000000000000001 RCX: ffff8881152b6540 [ 401.509942][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 401.517908][ C1] RBP: ffffc900001b09f0 R08: dffffc0000000000 R09: fffff520000360b9 [ 401.525879][ C1] R10: fffff520000360b9 R11: 1ffff920000360b8 R12: ffffc900001b0ba0 [ 401.533885][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888116d98600 [ 401.541885][ C1] FS: 00007f5ccc5be6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 401.550835][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.557419][ C1] CR2: 0000001b2c319ff8 CR3: 0000000130341000 CR4: 00000000003506a0 [ 401.565400][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 401.573377][ C1] DR3: 00000000000032e7 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 401.581352][ C1] Call Trace: [ 401.584638][ C1] [ 401.587474][ C1] tipc_crypto_xmit+0x1822/0x2220 [ 401.592513][ C1] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 401.597879][ C1] ? __copy_skb_header+0x49f/0x630 [ 401.603016][ C1] tipc_bearer_xmit_skb+0x226/0x380 [ 401.608214][ C1] ? __skb_clone+0x47a/0x790 [ 401.612819][ C1] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 401.618536][ C1] ? skb_clone+0x228/0x380 [ 401.622964][ C1] tipc_disc_timeout+0x6a2/0x830 [ 401.627898][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 401.633366][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 401.638819][ C1] call_timer_fn+0x46/0x2a0 [ 401.643334][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 401.648792][ C1] __run_timers+0x639/0x9a0 [ 401.653325][ C1] ? calc_index+0x200/0x200 [ 401.657836][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 401.663053][ C1] run_timer_softirq+0x6a/0xf0 [ 401.667817][ C1] handle_softirqs+0x1d7/0x600 [ 401.672593][ C1] ? irqtime_account_irq+0xc4/0x240 [ 401.677794][ C1] __irq_exit_rcu+0x52/0xf0 [ 401.682299][ C1] irq_exit_rcu+0x9/0x10 [ 401.686535][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 401.692179][ C1] [ 401.695098][ C1] [ 401.698017][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 401.704007][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x4/0x80 [ 401.710784][ C1] Code: 74 11 18 48 89 44 11 20 5d c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 b8 80 f8 fd 6f 55 48 89 e5 <48> 8b 45 08 65 48 8b 0d 80 71 92 7e 65 8b 15 81 71 92 7e 81 e2 00 [ 401.730396][ C1] RSP: 0018:ffffc90000a17730 EFLAGS: 00000246 [ 401.736460][ C1] RAX: 1ffff110265d0a8c RBX: ffff888132e85460 RCX: ffffffff84492423 [ 401.744435][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 401.752412][ C1] RBP: ffffc90000a17730 R08: dffffc0000000000 R09: ffffed10265d0a8d [ 401.760392][ C1] R10: ffffed10265d0a8d R11: 1ffff110265d0a8c R12: dffffc0000000000 [ 401.768357][ C1] R13: 1ffff92000142f04 R14: 0000000000000100 R15: ffffc90000a17840 [ 401.776333][ C1] ? unix_dgram_sendmsg+0x9b3/0x16d0 [ 401.781634][ C1] unix_dgram_sendmsg+0x9e2/0x16d0 [ 401.787010][ C1] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 401.792566][ C1] ? security_socket_sendmsg+0x93/0xb0 [ 401.798034][ C1] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 401.803593][ C1] ____sys_sendmsg+0x5a9/0x990 [ 401.808353][ C1] ? _raw_spin_unlock+0x4c/0x70 [ 401.813217][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 401.818234][ C1] ? __schedule+0xb8f/0x14e0 [ 401.822837][ C1] ? import_iovec+0x7c/0xb0 [ 401.827344][ C1] ___sys_sendmsg+0x21c/0x290 [ 401.832027][ C1] ? __sys_sendmsg+0x270/0x270 [ 401.836787][ C1] ? futex_unqueue+0x132/0x160 [ 401.841568][ C1] ? __cfi_futex_wait+0x10/0x10 [ 401.846426][ C1] ? __fdget+0x19c/0x220 [ 401.850681][ C1] __sys_sendmmsg+0x274/0x460 [ 401.855357][ C1] ? __cfi___sys_sendmmsg+0x10/0x10 [ 401.860568][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 401.866206][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 401.871059][ C1] x64_sys_call+0x3f5/0x9a0 [ 401.875557][ C1] do_syscall_64+0x4c/0xa0 [ 401.879979][ C1] ? clear_bhb_loop+0x30/0x80 [ 401.884649][ C1] ? clear_bhb_loop+0x30/0x80 [ 401.889330][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.895219][ C1] RIP: 0033:0x7f5ccb78e929 [ 401.899636][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.919240][ C1] RSP: 002b:00007f5ccc5be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 401.927657][ C1] RAX: ffffffffffffffda RBX: 00007f5ccb9b5fa0 RCX: 00007f5ccb78e929 [ 401.935648][ C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000005 [ 401.943629][ C1] RBP: 00007f5ccb810b39 R08: 0000000000000000 R09: 0000000000000000 [ 401.951614][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.959593][ C1] R13: 0000000000000000 R14: 00007f5ccb9b5fa0 R15: 00007ffd9ec6bf68 [ 401.967655][ C1] [ 401.970693][ C1] ---[ end trace 0000000000000000 ]--- [ 402.058468][ T9590] device bond_slave_1 entered promiscuous mode [ 402.065182][ T9590] device bond_slave_1 left promiscuous mode [ 402.198344][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 402.198359][ T28] audit: type=1326 audit(1751315473.554:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9597 comm="syz.2.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccb78e929 code=0x7ffc0000 [ 402.302767][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 402.309954][ T28] audit: type=1326 audit(1751315473.554:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9597 comm="syz.2.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccb78e929 code=0x7ffc0000 [ 402.311250][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 402.362605][ T28] audit: type=1326 audit(1751315473.554:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9597 comm="syz.2.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ccb78e929 code=0x7ffc0000 [ 402.368890][ T9604] loop4: detected capacity change from 0 to 1024 [ 402.417274][ T28] audit: type=1326 audit(1751315473.554:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9597 comm="syz.2.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccb78e929 code=0x7ffc0000 [ 402.441076][ T9604] EXT4-fs: Ignoring removed orlov option [ 402.446755][ T9604] EXT4-fs: Ignoring removed nomblk_io_submit option [ 402.454027][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 402.468304][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 402.487945][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.488445][ T28] audit: type=1326 audit(1751315473.554:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9597 comm="syz.2.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccb78e929 code=0x7ffc0000 [ 402.494999][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.507382][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 402.518866][ T9604] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 402.544405][ T9610] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 402.559229][ T28] audit: type=1326 audit(1751315473.554:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9597 comm="syz.2.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ccb78e929 code=0x7ffc0000 [ 402.589512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 402.597604][ T9610] SELinux: failed to load policy [ 402.607362][ T28] audit: type=1326 audit(1751315473.554:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9597 comm="syz.2.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccb78e929 code=0x7ffc0000 [ 402.611812][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.631008][ T28] audit: type=1326 audit(1751315473.554:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9597 comm="syz.2.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccb78e929 code=0x7ffc0000 [ 402.637773][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.661211][ T28] audit: type=1326 audit(1751315473.574:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9597 comm="syz.2.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ccb78e929 code=0x7ffc0000 [ 402.691964][ T28] audit: type=1326 audit(1751315473.594:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9597 comm="syz.2.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccb78e929 code=0x7ffc0000 [ 402.701223][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 402.723544][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 402.797340][ T9616] xt_policy: output policy not valid in PREROUTING and INPUT [ 402.953087][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 402.962236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 402.973206][ T9575] device veth0_vlan entered promiscuous mode [ 402.979691][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 402.989456][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 402.997107][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 403.032289][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 403.052046][ T9575] device veth1_macvtap entered promiscuous mode [ 403.578321][ T7705] tipc: Disabling bearer [ 403.585122][ T7705] tipc: Left network mode [ 403.604689][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 403.621288][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 403.663358][ T7705] ------------[ cut here ]------------ [ 403.668855][ T7705] refcount_t: saturated; leaking memory. [ 403.685901][ T7705] WARNING: CPU: 1 PID: 7705 at lib/refcount.c:19 refcount_warn_saturate+0x13c/0x1a0 [ 403.695376][ T7705] Modules linked in: [ 403.699286][ T7705] CPU: 1 PID: 7705 Comm: kworker/u4:7 Tainted: G W 6.1.141-syzkaller-00034-g1bf1aa362e6b #0 [ 403.710770][ T7705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 403.720838][ T7705] Workqueue: netns cleanup_net [ 403.725603][ T7705] RIP: 0010:refcount_warn_saturate+0x13c/0x1a0 [ 403.731807][ T7705] Code: 05 01 48 c7 c7 00 a7 a9 85 e8 00 fb dd fe 0f 0b eb a7 e8 37 b5 0c ff c6 05 95 ab 0b 05 01 48 c7 c7 40 a6 a9 85 e8 e4 fa dd fe <0f> 0b eb 8b e8 1b b5 0c ff c6 05 7a ab 0b 05 01 48 c7 c7 40 a6 a9 [ 403.751422][ T7705] RSP: 0018:ffffc90010a4f7c0 EFLAGS: 00010246 [ 403.757489][ T7705] RAX: 9a0a91f0eeaeef00 RBX: 0000000000000000 RCX: ffff8881153f8000 [ 403.765472][ T7705] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 403.773469][ T7705] RBP: ffffc90010a4f7d0 R08: dffffc0000000000 R09: fffff52002149e75 [ 403.781451][ T7705] R10: fffff52002149e75 R11: 1ffff92002149e74 R12: 1ffff92002149f04 [ 403.789440][ T7705] R13: ffffc90010a4f840 R14: 0000000000000000 R15: ffff88812089468c [ 403.797412][ T7705] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 403.806362][ T7705] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 403.813230][ T7705] CR2: 000000110c2a239c CR3: 0000000130342000 CR4: 00000000003506a0 [ 403.821227][ T7705] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 403.829199][ T7705] DR3: 00000000000032e7 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 403.837162][ T7705] Call Trace: [ 403.840454][ T7705] [ 403.843383][ T7705] nf_nat_masq_schedule+0x46b/0x4e0 [ 403.848603][ T7705] ? __kasan_check_write+0x14/0x20 [ 403.853731][ T7705] ? __cfi_device_cmp+0x10/0x10 [ 403.858597][ T7705] ? masq_device_event+0xd0/0xd0 [ 403.863552][ T7705] ? nfqnl_rcv_dev_event+0x441/0x470 [ 403.868839][ T7705] ? rtnl_is_locked+0x15/0x20 [ 403.873694][ T7705] masq_device_event+0x9b/0xd0 [ 403.878716][ T7705] raw_notifier_call_chain+0xa1/0x110 [ 403.884325][ T7705] dev_close_many+0x32d/0x4d0 [ 403.886806][ T9629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3082'. [ 403.889062][ T7705] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 403.898016][ T9629] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3082'. [ 403.904716][ T7705] ? __cfi_dev_close_many+0x10/0x10 [ 403.904735][ T7705] ? wait_for_common+0x54c/0x620 [ 403.918040][ T9629] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3082'. [ 403.918836][ T7705] ? __kasan_check_read+0x11/0x20 [ 403.937923][ T7705] unregister_netdevice_many+0x439/0x1820 [ 403.943845][ T7705] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 403.950060][ T7705] ? unregister_netdevice_queue+0x1aa/0x360 [ 403.955956][ T7705] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 403.962224][ T7705] ? rcu_barrier+0x7e/0x600 [ 403.966730][ T7705] ip6gre_exit_batch_net+0x5a8/0x5f0 [ 403.972060][ T7705] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 403.977874][ T7705] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 403.983703][ T7705] cleanup_net+0x62d/0xb00 [ 403.988120][ T7705] ? __cfi_cleanup_net+0x10/0x10 [ 403.993145][ T7705] process_one_work+0x71f/0xc40 [ 403.998018][ T7705] worker_thread+0xa29/0x11f0 [ 404.002706][ T7705] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 404.008171][ T7705] ? __kthread_parkme+0x142/0x180 [ 404.013202][ T7705] kthread+0x281/0x320 [ 404.017268][ T7705] ? __cfi_worker_thread+0x10/0x10 [ 404.022412][ T7705] ? __cfi_kthread+0x10/0x10 [ 404.027007][ T7705] ret_from_fork+0x1f/0x30 [ 404.031441][ T7705] [ 404.034462][ T7705] ---[ end trace 0000000000000000 ]--- [ 404.041149][ T7705] ------------[ cut here ]------------ [ 404.046738][ T7705] WARNING: CPU: 1 PID: 7705 at lib/ref_tracker.c:77 ref_tracker_alloc+0x2ae/0x430 [ 404.056149][ T7705] Modules linked in: [ 404.060156][ T7705] CPU: 1 PID: 7705 Comm: kworker/u4:7 Tainted: G W 6.1.141-syzkaller-00034-g1bf1aa362e6b #0 [ 404.071656][ T7705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 404.081776][ T7705] Workqueue: netns cleanup_net [ 404.086548][ T7705] RIP: 0010:ref_tracker_alloc+0x2ae/0x430 [ 404.092302][ T7705] Code: f9 e5 fe 48 bb 00 00 00 00 00 fc ff df 4c 8b 74 24 08 48 8b 7c 24 10 48 8b 74 24 18 e8 1b 47 66 02 31 c0 eb 6d e8 52 f9 e5 fe <0f> 0b 4d 85 e4 0f 85 09 fe ff ff 4c 8b 64 24 10 4d 8d 74 24 0c 4c [ 404.111926][ T7705] RSP: 0018:ffffc90010a4f6a0 EFLAGS: 00010293 [ 404.118000][ T7705] RAX: ffffffff8289fe1e RBX: dffffc0000000000 RCX: ffff8881153f8000 [ 404.126149][ T7705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90010a4f760 [ 404.134171][ T7705] RBP: ffffc90010a4f7d0 R08: dffffc0000000000 R09: ffffc90010a4f6e0 [ 404.142277][ T7705] R10: fffff52002149eec R11: 1ffff92002149edc R12: ffff888132fedcb8 [ 404.150277][ T7705] R13: ffff8881208946a0 R14: 0000000000000cc0 R15: ffff888120894690 [ 404.158264][ T7705] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 404.167302][ T7705] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 404.173896][ T7705] CR2: 0000000000000000 CR3: 000000012b089000 CR4: 00000000003506a0 [ 404.181876][ T7705] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 404.189867][ T7705] DR3: 00000000000032e7 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 404.197835][ T7705] Call Trace: [ 404.201122][ T7705] [ 404.204044][ T7705] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 404.209528][ T7705] ? kasan_save_alloc_info+0x25/0x30 [ 404.214812][ T7705] ? __kasan_kmalloc+0x95/0xb0 [ 404.219741][ T7705] ? nf_nat_masq_schedule+0x238/0x4e0 [ 404.225245][ T7705] ? kmalloc_trace+0x40/0xb0 [ 404.229858][ T7705] nf_nat_masq_schedule+0x338/0x4e0 [ 404.235063][ T7705] ? __kasan_check_write+0x14/0x20 [ 404.240216][ T7705] ? __cfi_device_cmp+0x10/0x10 [ 404.245074][ T7705] ? masq_device_event+0xd0/0xd0 [ 404.250404][ T7705] ? nfqnl_rcv_dev_event+0x441/0x470 [ 404.255872][ T7705] ? rtnl_is_locked+0x15/0x20 [ 404.260605][ T7705] masq_device_event+0x9b/0xd0 [ 404.265376][ T7705] raw_notifier_call_chain+0xa1/0x110 [ 404.270803][ T7705] dev_close_many+0x32d/0x4d0 [ 404.275705][ T7705] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 404.282577][ T7705] ? __cfi_dev_close_many+0x10/0x10 [ 404.287784][ T7705] ? wait_for_common+0x54c/0x620 [ 404.292747][ T7705] ? __kasan_check_read+0x11/0x20 [ 404.297773][ T7705] unregister_netdevice_many+0x439/0x1820 [ 404.303509][ T7705] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 404.309678][ T7705] ? unregister_netdevice_queue+0x1aa/0x360 [ 404.315585][ T7705] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 404.321843][ T7705] ? rcu_barrier+0x7e/0x600 [ 404.326352][ T7705] ip6gre_exit_batch_net+0x5a8/0x5f0 [ 404.331749][ T7705] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 404.337590][ T7705] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 404.343422][ T7705] cleanup_net+0x62d/0xb00 [ 404.347843][ T7705] ? __cfi_cleanup_net+0x10/0x10 [ 404.352798][ T7705] process_one_work+0x71f/0xc40 [ 404.357651][ T7705] worker_thread+0xa29/0x11f0 [ 404.362342][ T7705] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 404.367822][ T7705] ? __kthread_parkme+0x142/0x180 [ 404.372881][ T7705] kthread+0x281/0x320 [ 404.376944][ T7705] ? __cfi_worker_thread+0x10/0x10 [ 404.382063][ T7705] ? __cfi_kthread+0x10/0x10 [ 404.386652][ T7705] ret_from_fork+0x1f/0x30 [ 404.391096][ T7705] [ 404.394108][ T7705] ---[ end trace 0000000000000000 ]--- [ 404.400150][ T2743] ------------[ cut here ]------------ [ 404.405602][ T2743] WARNING: CPU: 1 PID: 2743 at lib/ref_tracker.c:110 ref_tracker_free+0x5de/0x7c0 [ 404.414819][ T2743] Modules linked in: [ 404.415212][ T9121] EXT4-fs (loop4): unmounting filesystem. [ 404.418700][ T2743] CPU: 1 PID: 2743 Comm: kworker/1:9 Tainted: G W 6.1.141-syzkaller-00034-g1bf1aa362e6b #0 [ 404.435765][ T2743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 404.445826][ T2743] Workqueue: events iterate_cleanup_work [ 404.451484][ T2743] RIP: 0010:ref_tracker_free+0x5de/0x7c0 [ 404.457122][ T2743] Code: 85 e8 2e 70 5b 02 43 0f b6 04 2c 84 c0 4c 8b 74 24 08 0f 85 c9 01 00 00 41 8b 3f e8 dc e8 ff ff 4c 89 f6 eb 84 e8 62 f1 e5 fe <0f> 0b 4d 85 ff 0f 85 d3 fa ff ff 4c 8b 24 24 4d 8d 74 24 0c 4c 89 [ 404.476731][ T2743] RSP: 0018:ffffc9001038fb20 EFLAGS: 00010293 [ 404.482813][ T2743] RAX: ffffffff828a060e RBX: 1ffff92002071f68 RCX: ffff8881161c2880 [ 404.490794][ T2743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9001038fbe0 [ 404.498760][ T2743] RBP: ffffc9001038fc50 R08: dffffc0000000000 R09: ffffc9001038fb60 [ 404.506835][ T2743] R10: fffff52002071f7c R11: 1ffff92002071f6c R12: ffff8881208946a0 [ 404.514939][ T2743] R13: dffffc0000000000 R14: ffffc9001038fb60 R15: ffff888132fedcb8 [ 404.522971][ T2743] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 404.532235][ T2743] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 404.539210][ T2743] CR2: 0000000000000000 CR3: 0000000006e0f000 CR4: 00000000003506a0 [ 404.547637][ T2743] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 404.555651][ T2743] DR3: 00000000000032e7 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 404.563750][ T2743] Call Trace: [ 404.567039][ T2743] [ 404.569991][ T2743] ? __cfi_ref_tracker_free+0x10/0x10 [ 404.575374][ T2743] ? __cfi_device_cmp+0x10/0x10 [ 404.580232][ T2743] ? __kasan_check_read+0x11/0x20 [ 404.585257][ T2743] ? nf_ct_iterate_cleanup_net+0xe8/0x130 [ 404.590991][ T2743] iterate_cleanup_work+0x105/0x1f0 [ 404.596186][ T2743] ? __cfi_iterate_cleanup_work+0x10/0x10 [ 404.601922][ T2743] ? __schedule+0xb8f/0x14e0 [ 404.606610][ T2743] process_one_work+0x71f/0xc40 [ 404.611526][ T2743] worker_thread+0xa29/0x11f0 [ 404.616182][ T2743] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 404.621642][ T2743] kthread+0x281/0x320 [ 404.625690][ T2743] ? __cfi_worker_thread+0x10/0x10 [ 404.630792][ T2743] ? __cfi_kthread+0x10/0x10 [ 404.635360][ T2743] ret_from_fork+0x1f/0x30 [ 404.639767][ T2743] [ 404.642763][ T2743] ---[ end trace 0000000000000000 ]--- [ 404.699064][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 404.707699][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 404.721809][ T9655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3060'. [ 404.812473][ T9661] xt_policy: output policy not valid in PREROUTING and INPUT [ 404.885520][ T9662] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 404.982164][ T9662] SELinux: failed to load policy [ 406.453838][ T9654] loop4: detected capacity change from 0 to 40427 [ 406.479370][ T9654] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 406.488516][ T9654] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 406.506404][ T9685] syz.1.3101[9685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 406.506473][ T9685] syz.1.3101[9685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 406.517601][ T9654] F2FS-fs (loop4): invalid crc value [ 406.558914][ T9654] F2FS-fs (loop4): Found nat_bits in checkpoint [ 406.572293][ T9685] device wg2 entered promiscuous mode [ 406.619583][ T9691] syz.1.3102[9691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 406.619651][ T9691] syz.1.3102[9691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 406.639853][ T9654] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 406.658320][ T9654] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 406.751461][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3103'. [ 406.787646][ T9690] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.118876][ T9690] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.933378][ T9703] xt_policy: output policy not valid in PREROUTING and INPUT [ 408.014800][ T9690] device bridge_slave_0 entered promiscuous mode [ 408.075077][ T9700] SELinux: failed to load policy [ 408.151444][ T9690] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.158728][ T9690] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.166484][ T9690] device bridge_slave_1 entered promiscuous mode [ 408.169914][ T9708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3106'. [ 408.183106][ T9706] hub 9-0:1.0: USB hub found [ 408.187776][ T9706] hub 9-0:1.0: 1 port detected [ 408.192853][ T9708] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3106'. [ 408.211291][ T7705] device bridge_slave_1 left promiscuous mode [ 408.217529][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.218259][ T9708] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3106'. [ 408.234477][ T7705] device bridge_slave_0 left promiscuous mode [ 408.245958][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.259464][ T7705] device veth1_macvtap left promiscuous mode [ 408.268868][ T7705] device veth0_vlan left promiscuous mode [ 408.400478][ T9719] loop4: detected capacity change from 0 to 40427 [ 408.408360][ T9719] F2FS-fs (loop4): invalid crc value [ 408.414878][ T9719] F2FS-fs (loop4): Found nat_bits in checkpoint [ 408.436151][ T9719] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 408.509077][ T790] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 408.525972][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 408.533478][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 408.541906][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 408.550584][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 408.612577][ T9729] xt_policy: output policy not valid in PREROUTING and INPUT [ 408.690066][ T9730] syz.4.3107: attempt to access beyond end of device [ 408.690066][ T9730] loop4: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 408.712964][ T790] usb 4-1: Using ep0 maxpacket: 32 [ 408.719838][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.726890][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.734338][ T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.739778][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 408.752613][ T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.762850][ T790] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 408.772106][ T790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.780802][ T790] usb 4-1: config 0 descriptor?? [ 408.786561][ T790] hub 4-1:0.0: USB hub found [ 408.786719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 408.799646][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 408.807848][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.814858][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.822375][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 408.830453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 408.843778][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 408.855041][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 408.863591][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 408.871143][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 408.879231][ T9690] device veth0_vlan entered promiscuous mode [ 408.889955][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 408.899838][ T9690] device veth1_macvtap entered promiscuous mode [ 408.910394][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 408.920456][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 408.960231][ T7705] tipc: Disabling bearer [ 408.965578][ T7705] tipc: Left network mode [ 408.987284][ T790] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 408.996086][ T9738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9738 comm=syz.2.3115 [ 409.144966][ T9121] syz-executor: attempt to access beyond end of device [ 409.144966][ T9121] loop4: rw=2049, sector=45208, nr_sectors = 8 limit=40427 [ 409.578522][ T790] hid-generic 0003:046D:C31C.0008: unknown main item tag 0x0 [ 409.618870][ T790] hid-generic 0003:046D:C31C.0008: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 409.726033][ T7705] device bridge_slave_1 left promiscuous mode [ 409.736742][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.779732][ T7705] device bridge_slave_0 left promiscuous mode [ 409.825139][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.945001][ T39] usb 4-1: USB disconnect, device number 47 [ 409.971448][ T7705] device veth1_macvtap left promiscuous mode [ 410.002018][ T7705] device veth0_vlan left promiscuous mode [ 410.559617][ T9772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3128'. [ 410.576223][ T9772] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3128'. [ 410.585268][ T9772] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3128'. [ 410.635356][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3127'. [ 410.881833][ T7705] ================================================================== [ 410.889917][ T7705] BUG: KASAN: use-after-free in tcp_metrics_flush_all+0xd3/0x210 [ 410.897636][ T7705] Read of size 4 at addr ffff88812089468c by task kworker/u4:7/7705 [ 410.905605][ T7705] [ 410.907933][ T7705] CPU: 1 PID: 7705 Comm: kworker/u4:7 Tainted: G W 6.1.141-syzkaller-00034-g1bf1aa362e6b #0 [ 410.919380][ T7705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 410.929416][ T7705] Workqueue: netns cleanup_net [ 410.934163][ T7705] Call Trace: [ 410.937418][ T7705] [ 410.940325][ T7705] __dump_stack+0x21/0x24 [ 410.944635][ T7705] dump_stack_lvl+0xee/0x150 [ 410.949205][ T7705] ? __cfi_dump_stack_lvl+0x8/0x8 [ 410.954221][ T7705] ? __cfi__printk+0x8/0x8 [ 410.958615][ T7705] ? tcp_metrics_flush_all+0xd3/0x210 [ 410.963975][ T7705] print_address_description+0x71/0x210 [ 410.969527][ T7705] print_report+0x4a/0x60 [ 410.973860][ T7705] kasan_report+0x122/0x150 [ 410.978362][ T7705] ? tcp_metrics_flush_all+0xd3/0x210 [ 410.983731][ T7705] kasan_check_range+0x280/0x290 [ 410.988667][ T7705] __kasan_check_read+0x11/0x20 [ 410.993520][ T7705] tcp_metrics_flush_all+0xd3/0x210 [ 410.998718][ T7705] ? __cfi_tcp_net_metrics_exit_batch+0x10/0x10 [ 411.004953][ T7705] tcp_net_metrics_exit_batch+0x10/0x20 [ 411.010499][ T7705] cleanup_net+0x62d/0xb00 [ 411.014919][ T7705] ? __cfi_cleanup_net+0x10/0x10 [ 411.019864][ T7705] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 411.025238][ T7705] process_one_work+0x71f/0xc40 [ 411.030089][ T7705] worker_thread+0xa29/0x11f0 [ 411.034755][ T7705] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 411.040207][ T7705] ? __kthread_parkme+0x142/0x180 [ 411.045220][ T7705] kthread+0x281/0x320 [ 411.049271][ T7705] ? __cfi_worker_thread+0x10/0x10 [ 411.054360][ T7705] ? __cfi_kthread+0x10/0x10 [ 411.058931][ T7705] ret_from_fork+0x1f/0x30 [ 411.063334][ T7705] [ 411.066334][ T7705] [ 411.068658][ T7705] Allocated by task 284: [ 411.072875][ T7705] kasan_set_track+0x4b/0x70 [ 411.077449][ T7705] kasan_save_alloc_info+0x25/0x30 [ 411.082546][ T7705] __kasan_slab_alloc+0x72/0x80 [ 411.087381][ T7705] slab_post_alloc_hook+0x4f/0x2d0 [ 411.092474][ T7705] kmem_cache_alloc+0x16e/0x330 [ 411.097305][ T7705] copy_net_ns+0x145/0x5c0 [ 411.101704][ T7705] create_new_namespaces+0x3a2/0x660 [ 411.106977][ T7705] unshare_nsproxy_namespaces+0x120/0x170 [ 411.112682][ T7705] ksys_unshare+0x4ac/0x7b0 [ 411.117167][ T7705] __x64_sys_unshare+0x38/0x40 [ 411.121915][ T7705] x64_sys_call+0x767/0x9a0 [ 411.126411][ T7705] do_syscall_64+0x4c/0xa0 [ 411.130807][ T7705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 411.136685][ T7705] [ 411.138997][ T7705] Freed by task 7705: [ 411.142960][ T7705] kasan_set_track+0x4b/0x70 [ 411.147538][ T7705] kasan_save_free_info+0x31/0x50 [ 411.152544][ T7705] ____kasan_slab_free+0x132/0x180 [ 411.157638][ T7705] __kasan_slab_free+0x11/0x20 [ 411.162387][ T7705] slab_free_freelist_hook+0xc2/0x190 [ 411.167750][ T7705] kmem_cache_free+0x12d/0x300 [ 411.172499][ T7705] cleanup_net+0xa58/0xb00 [ 411.176900][ T7705] process_one_work+0x71f/0xc40 [ 411.181728][ T7705] worker_thread+0xa29/0x11f0 [ 411.186383][ T7705] kthread+0x281/0x320 [ 411.190429][ T7705] ret_from_fork+0x1f/0x30 [ 411.194828][ T7705] [ 411.197130][ T7705] Last potentially related work creation: [ 411.202819][ T7705] kasan_save_stack+0x3a/0x60 [ 411.207473][ T7705] __kasan_record_aux_stack+0xb6/0xc0 [ 411.212824][ T7705] kasan_record_aux_stack_noalloc+0xb/0x10 [ 411.218612][ T7705] insert_work+0x51/0x300 [ 411.222924][ T7705] __queue_work+0x9b1/0xd30 [ 411.227409][ T7705] delayed_work_timer_fn+0x61/0x80 [ 411.232498][ T7705] call_timer_fn+0x46/0x2a0 [ 411.236981][ T7705] __run_timers+0x667/0x9a0 [ 411.241469][ T7705] run_timer_softirq+0xb8/0xf0 [ 411.246211][ T7705] handle_softirqs+0x1d7/0x600 [ 411.250956][ T7705] __irq_exit_rcu+0x52/0xf0 [ 411.255435][ T7705] irq_exit_rcu+0x9/0x10 [ 411.259654][ T7705] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 411.265271][ T7705] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 411.271230][ T7705] [ 411.273533][ T7705] Second to last potentially related work creation: [ 411.280089][ T7705] kasan_save_stack+0x3a/0x60 [ 411.284745][ T7705] __kasan_record_aux_stack+0xb6/0xc0 [ 411.290102][ T7705] kasan_record_aux_stack_noalloc+0xb/0x10 [ 411.295974][ T7705] insert_work+0x51/0x300 [ 411.300289][ T7705] __queue_work+0x9b1/0xd30 [ 411.304769][ T7705] delayed_work_timer_fn+0x61/0x80 [ 411.309858][ T7705] call_timer_fn+0x46/0x2a0 [ 411.314343][ T7705] __run_timers+0x667/0x9a0 [ 411.318824][ T7705] run_timer_softirq+0xb8/0xf0 [ 411.323564][ T7705] handle_softirqs+0x1d7/0x600 [ 411.328305][ T7705] __irq_exit_rcu+0x52/0xf0 [ 411.332786][ T7705] irq_exit_rcu+0x9/0x10 [ 411.337007][ T7705] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 411.342619][ T7705] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 411.348579][ T7705] [ 411.350881][ T7705] The buggy address belongs to the object at ffff888120894600 [ 411.350881][ T7705] which belongs to the cache net_namespace of size 4224 [ 411.365171][ T7705] The buggy address is located 140 bytes inside of [ 411.365171][ T7705] 4224-byte region [ffff888120894600, ffff888120895680) [ 411.378508][ T7705] [ 411.380812][ T7705] The buggy address belongs to the physical page: [ 411.387196][ T7705] page:ffffea0004822400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888120896900 pfn:0x120890 [ 411.398718][ T7705] head:ffffea0004822400 order:3 compound_mapcount:0 compound_pincount:0 [ 411.407019][ T7705] flags: 0x4000000000010200(slab|head|zone=1) [ 411.413094][ T7705] raw: 4000000000010200 0000000000000000 dead000000000122 ffff8881002ac780 [ 411.421653][ T7705] raw: ffff888120896900 0000000080070006 00000001ffffffff 0000000000000000 [ 411.430207][ T7705] page dumped because: kasan: bad access detected [ 411.436608][ T7705] page_owner tracks the page as allocated [ 411.442297][ T7705] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 286, tgid 286 (syz-executor), ts 20747771453, free_ts 20564797141 [ 411.463469][ T7705] post_alloc_hook+0x1f5/0x210 [ 411.468218][ T7705] prep_new_page+0x1c/0x110 [ 411.472705][ T7705] get_page_from_freelist+0x2c7b/0x2cf0 [ 411.478233][ T7705] __alloc_pages+0x19e/0x3a0 [ 411.482810][ T7705] alloc_slab_page+0x6e/0xf0 [ 411.487381][ T7705] new_slab+0x98/0x3d0 [ 411.491432][ T7705] ___slab_alloc+0x6f6/0xb50 [ 411.495999][ T7705] __slab_alloc+0x5e/0xa0 [ 411.500307][ T7705] kmem_cache_alloc+0x1b0/0x330 [ 411.505138][ T7705] copy_net_ns+0x145/0x5c0 [ 411.509533][ T7705] create_new_namespaces+0x3a2/0x660 [ 411.514799][ T7705] unshare_nsproxy_namespaces+0x120/0x170 [ 411.520497][ T7705] ksys_unshare+0x4ac/0x7b0 [ 411.524983][ T7705] __x64_sys_unshare+0x38/0x40 [ 411.529726][ T7705] x64_sys_call+0x767/0x9a0 [ 411.534210][ T7705] do_syscall_64+0x4c/0xa0 [ 411.538602][ T7705] page last free stack trace: [ 411.543246][ T7705] free_unref_page_prepare+0x742/0x750 [ 411.548684][ T7705] free_unref_page+0x8f/0x530 [ 411.553339][ T7705] free_compound_page+0x99/0xd0 [ 411.558173][ T7705] destroy_large_folio+0x68/0xa0 [ 411.563087][ T7705] __folio_put+0xd1/0xe0 [ 411.567309][ T7705] skb_release_data+0x47f/0x890 [ 411.572143][ T7705] napi_consume_skb+0x13d/0x2c0 [ 411.576982][ T7705] net_rx_action+0x393/0xaa0 [ 411.581554][ T7705] handle_softirqs+0x1d7/0x600 [ 411.586298][ T7705] __irq_exit_rcu+0x52/0xf0 [ 411.590780][ T7705] irq_exit_rcu+0x9/0x10 [ 411.595002][ T7705] common_interrupt+0xbe/0xe0 [ 411.599656][ T7705] asm_common_interrupt+0x27/0x40 [ 411.604660][ T7705] [ 411.606963][ T7705] Memory state around the buggy address: [ 411.612569][ T7705] ffff888120894580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 411.620606][ T7705] ffff888120894600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 411.628645][ T7705] >ffff888120894680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 411.636680][ T7705] ^ [ 411.640988][ T7705] ffff888120894700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 411.649029][ T7705] ffff888120894780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 411.657070][ T7705] ================================================================== [ 411.665158][ T7705] Disabling lock debugging due to kernel taint