last executing test programs: 1m50.485110457s ago: executing program 32 (id=65): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f0000000000)={[{@dioread_nolock}]}, 0x2, 0x246, &(0x7f0000000ac0)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x59b, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7) sendfile(r1, r1, 0x0, 0xfffe80) 20.509117388s ago: executing program 33 (id=3404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) 17.8692511s ago: executing program 0 (id=3532): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) 17.869102879s ago: executing program 34 (id=3532): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) 12.368336346s ago: executing program 7 (id=3732): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x1018ed8, &(0x7f00000005c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nodiscard}, {@nodelalloc}, {@usrquota}, {@nolazytime}, {@noblock_validity}, {@block_validity}, {@barrier}]}, 0x6, 0x647, &(0x7f0000002740)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 12.209184888s ago: executing program 7 (id=3737): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) 12.13818066s ago: executing program 7 (id=3739): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x8000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x6132}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 12.077939471s ago: executing program 7 (id=3744): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 11.776919215s ago: executing program 7 (id=3749): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x1}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x4, r2, r1, 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0) 11.42986046s ago: executing program 7 (id=3757): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x46}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 11.404047801s ago: executing program 35 (id=3757): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x46}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 10.83848784s ago: executing program 4 (id=3786): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000140)=0x200, 0x4) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000080)=0x2, 0x4) sendmsg$can_raw(r2, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r1}, 0x10, &(0x7f0000000880)={&(0x7f0000000180)=@can={{0x2, 0x1}, 0x6, 0x3, 0x0, 0x0, "aacda1cfd0185b43"}, 0x10}}, 0x14) 10.789164921s ago: executing program 4 (id=3797): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000004e00)=ANY=[@ANYBLOB="bbbbbbbbbbbb1921aaaaaaaa86dd60f4adf700082cfffe800000000000000000000000000027ff02000000000000000000000000000181099078"], 0x0) 10.743419661s ago: executing program 4 (id=3790): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x578410e9) close_range(r0, 0xffffffffffffffff, 0x0) 10.587836734s ago: executing program 4 (id=3794): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 10.325679208s ago: executing program 4 (id=3802): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket(0x400000000010, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r2 = dup(r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x10007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.032772502s ago: executing program 4 (id=3806): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 10.032100732s ago: executing program 36 (id=3806): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 9.093960037s ago: executing program 9 (id=3843): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 9.009317259s ago: executing program 9 (id=3845): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x641, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRESDEC]) 9.009071319s ago: executing program 9 (id=3846): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='rss_stat\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000403, 0x2000000000032, 0xffffffffffffffff, 0x0) 8.97938383s ago: executing program 9 (id=3848): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x519, &(0x7f0000000340)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x32) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x4, 0x19, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d0000000000000ff4eb4b78c66ee677df701905b9aafab4fffffbff00", "cba3d6250000e1a311ef97e4368d1e14ef0106007e813590edfdff00000000020000000000000000000000000400000000000000000000000000009c9c9e2700", "d300e6d6ae9ef30bea2a0040000000000000000000f27c0000e8ff00", [0x0, 0x8]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 8.768244913s ago: executing program 9 (id=3852): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = dup(r0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0x2f6d}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0x2}], 0x1}, 0x0) 8.26685489s ago: executing program 9 (id=3863): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) statfs(0x0, 0x0) 8.26642023s ago: executing program 37 (id=3863): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) statfs(0x0, 0x0) 4.023728067s ago: executing program 2 (id=4040): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r0}, 0x0, &(0x7f00000013c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000002740)='logon\x00', &(0x7f0000002780)={'syz', 0x0}, &(0x7f0000005b40)='2\xaa\xeaI\xe9\x04\xee\\\x13\xc6\xf4t\xe0\xad#\xe0\xbb\xf2o\xdc\xc6miYcH\x0e\x9btR\xd3\xcaGl\x95\xc8M\xaa\xec\x82\xc7 \a\x89\x84\xff\xbec\xe7\xa2\x1aK\xc8\xaf\xbc\xd0\xeb\xd9\xeb\x9d_\xd4jy\xf0%\x94\x14\xef4\x98pav\xc5\x93y\x1e4z)\'\xe5\"\x17!POZ\xfc\xc1\x92Ki1C\xb9\xdcgO\x9e\xaa\x1e\x88\xcf\x9d$I\xd1\xcd\x05\x16`\xc5T)\xf6J$4T\x13\xf0\xcf\x1e\x88$\'M\xea\x88', 0xfffffffffffffffb) 3.750436981s ago: executing program 2 (id=4043): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b04feffe0ff020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 3.728345742s ago: executing program 2 (id=4045): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0xec, 0x0, &(0x7f0000000800)="6ebca58c08000008beca252388f7", 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.509940885s ago: executing program 2 (id=4052): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@test_dummy_encryption}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x460, &(0x7f00000008c0)="$eJzs3MtvVNUfAPDvve2UX38FWxFf4KOKRuKjpYDKwoUaTVxgYqILXU7aQpAChtZESBOLC1wZY+LeuPRfcKUbY1yZuNW9ISGGjeBqzJ25t/NgZvpgpoPM55MMfM99zDnfuffMnHvPTAMYWtPZP0nE7oj4PSIma8XmDaZr/924vjp/8/rqfBKVyrt/JdXt/r6+Ol9sWuw30ViIJA60qXf54qUz5aWlxQt5eXbl7EezyxcvvXD6bPnU4qnFc0eOHz92dO7ll4682JM8JyLNo7c++OrtE1805d+SR49Md1v5dKXS4+oGa09DnIwOsCFsyUhEZIerVO3/kzES9YM3GW9+tl74dEANBPqmUqlUJjqvXqsAd7Ekmsu6PAyL4oO+uP5tdx38at9GH4N37bXaBVCW9438UVszun7HoNRyfdtL0xHx/to/32SP6M99CACAJj9k45/ns9HO6nw29qiPP9J4oGG7e/K5oamIuDci9kbEfXEu9kXE/RHVbR+MiIe2WH/rJMmt45/06rYS26Rs/PdKPrfVPP4rRn8xNZKX9lTzLyUnTy8tHs5fk0NR2pWV57rU8eMbv33ZaV3j+C97ZPUXY8G8HVdHdzXvs1BeKd9Ozo2uXY7YP9ou/2R9JiCJiIcjYn+7J0g3ruP0s9890mndxvl30YN5psq3Ec/Ujv9atORfSLrPT87+L5YWD88WZ8Wtfvn1yjud6r+t/HsgO/7/b3v+r+c/lTTO1y5vvY4rf3ze8ZpmO+f/WnmlPJa8V43H8mWflFdWLsxFjCUnao1uXH6kvm9RLrbP8j90sH3/3xv1V+JARGQn8aMR8VhEPJ63/YmIeDIiDnbJ/+fXn/qwddn4pvPvryz/hS0d/3owFq1L2gcjZ376vqnSqXqY53+z+/E/Vo0O5Us28/63mXZt72wGAACA/540InZHks6sx2k6M1P7Dv++iHTp/PLKcyfPf3xuofYbgakopcWdrsmG+6Fz+WV9rXw5ImpfLSjWH420et/465Hxanlm/vzSwqCThyE30aH/Z/4cGXTrgL7zey0YXvo/DK+u/b+0c+0Adt4t/b9rn9/V17YAO6vN5//4INoB7Lx2439/7weGQ0v/N+0HQ8T9fxhe+j8ML/0fhtLyeGz8I/muQfFM29z9rg2idEc0o29BpHdEMwR9Cgb7vgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAr/wYAAP//HtbacA==") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x48942, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 3.21636896s ago: executing program 2 (id=4056): r0 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 3.031329983s ago: executing program 2 (id=4058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) 3.030950613s ago: executing program 38 (id=4058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) 2.637473559s ago: executing program 8 (id=4066): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.802777802s ago: executing program 3 (id=4076): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x248a}) 1.666436054s ago: executing program 3 (id=4077): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.602774185s ago: executing program 3 (id=4078): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x9, 0x3, 0x0, 0x6, 0xfffffffa, 0x22}, [@TCA_NETEM_RATE={0x14, 0x6, {0x6, 0x79d, 0x0, 0x3}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe61c6a5c983a3b82}]}}}]}, 0x6c}}, 0x0) 1.588810115s ago: executing program 8 (id=4080): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.569304675s ago: executing program 3 (id=4082): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@test_dummy_encryption}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x460, &(0x7f00000008c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x48942, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1.368668029s ago: executing program 3 (id=4085): mkdir(&(0x7f0000000400)='./file0\x00', 0x101) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.141135312s ago: executing program 3 (id=4091): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getpgrp(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) timer_gettime(r0, &(0x7f0000000100)) 1.140959792s ago: executing program 39 (id=4091): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getpgrp(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) timer_gettime(r0, &(0x7f0000000100)) 1.097816223s ago: executing program 5 (id=4094): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0x0, 0x7c9}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @mptcp=@synack={0x1e, 0x10, 0x9, 0x2, 0x6, 0x9, 0x2}]}}}}}}}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)=0x6) 711.247389ms ago: executing program 1 (id=4102): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x4048050) 668.899459ms ago: executing program 1 (id=4103): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x140400c0}, 0x2000081) 668.527209ms ago: executing program 1 (id=4104): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x20, 0x12, 0x1}, 0x20}}, 0x0) 603.187461ms ago: executing program 8 (id=4105): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 602.757821ms ago: executing program 1 (id=4106): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 546.471932ms ago: executing program 1 (id=4107): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 527.254362ms ago: executing program 8 (id=4108): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000140)="5c000000010006", 0x7) 510.385592ms ago: executing program 1 (id=4109): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x3a) recvmmsg(r1, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 492.393743ms ago: executing program 8 (id=4110): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) 480.419732ms ago: executing program 0 (id=4092): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x196, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x55, 0x45833af92e4b39ff, 0x0) 460.230063ms ago: executing program 8 (id=4111): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4) sendto$inet(r0, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/115, 0x73}, 0x8}], 0x1, 0x13021, 0x0) 396.895104ms ago: executing program 6 (id=4112): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_GET_PROG_INFO(0x4, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0xfffffffffffffbff, 0x1) 378.171744ms ago: executing program 0 (id=4113): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0) 343.522755ms ago: executing program 0 (id=4114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r3, 0x1, 0x70bd2a, 0x0, {0x1b}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}}, 0x0) 325.480465ms ago: executing program 6 (id=4115): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x26, &(0x7f0000000440)={0x14, 0x8000, 0x7}) r2 = gettid() tkill(r2, 0x7) rt_sigsuspend(&(0x7f0000000240)={[0x10]}, 0x8) 300.275965ms ago: executing program 6 (id=4116): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statfs(&(0x7f0000000040)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000004200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x60, 0x0, 0x0, {{0x0, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 299.746905ms ago: executing program 0 (id=4117): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x30800c1, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES32, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYBLOB], 0x8, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 200.461587ms ago: executing program 6 (id=4118): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r1, 0x0, 0x400000000000000, 0x2) 177.731747ms ago: executing program 5 (id=4119): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x6, 0xa77, 0xfffffff8, {0x5, 0x1, 0x6, 0xfe, 0x1, 0x5a478a5e}, {0x8, 0x2, 0x7, 0x6, 0x0, 0x4}, 0x2, 0x3, 0x2}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) 155.210818ms ago: executing program 6 (id=4120): r0 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) 69.248019ms ago: executing program 5 (id=4123): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) 27.91335ms ago: executing program 5 (id=4124): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r3, r2}, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000000280)=ANY=[], 0x0) 11.97725ms ago: executing program 5 (id=4125): r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r0, 0x200002) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r2, r1, 0x0, 0x80001d00c0d0) 0s ago: executing program 0 (id=4126): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): version = 48b305e6 [ 85.038805][ T6129] loop4: detected capacity change from 0 to 128 [ 85.073766][ T6138] loop3: detected capacity change from 0 to 512 [ 85.131175][ T6129] FAT-fs (loop4): bogus number of FAT sectors [ 85.137119][ T6129] FAT-fs (loop4): Can't find a valid FAT filesystem [ 85.146298][ T6138] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 85.162872][ T6138] ext4 filesystem being mounted at /452/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.013973][ T6161] loop1: detected capacity change from 0 to 512 [ 86.095974][ T6161] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.194674][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2692'. [ 86.242446][ T6163] loop0: detected capacity change from 0 to 40427 [ 86.319410][ T6163] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 86.340119][ T6163] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 86.357928][ T6163] F2FS-fs (loop0): invalid crc value [ 86.378932][ T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.388008][ T6163] F2FS-fs (loop0): Found nat_bits in checkpoint [ 86.433706][ T6163] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 86.440724][ T6163] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 86.543010][ T313] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 86.557224][ T313] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 86.634698][ T6180] loop4: detected capacity change from 0 to 40427 [ 86.649573][ T6180] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 86.657605][ T6180] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 86.672436][ T6180] F2FS-fs (loop4): fault_injection options not supported [ 86.679702][ T6180] F2FS-fs (loop4): fault_type options not supported [ 86.705668][ T6180] F2FS-fs (loop4): invalid crc value [ 86.732276][ T6180] F2FS-fs (loop4): Found nat_bits in checkpoint [ 86.778646][ T26] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.802692][ T26] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 86.813297][ T26] usb 2-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 86.823480][ T6180] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 86.830495][ T6180] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 86.831457][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.852305][ T26] usb 2-1: config 0 descriptor?? [ 86.857897][ T6214] incfs: Options parsing error. -22 [ 86.863318][ T6214] incfs: mount failed -22 [ 86.915353][ T6221] loop0: detected capacity change from 0 to 1024 [ 87.010930][ T6221] EXT4-fs (loop0): Test dummy encryption mode enabled [ 87.022775][ T6221] EXT4-fs (loop0): Test dummy encryption mode enabled [ 87.047964][ T6221] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,stripe=0x0000000000000009,data=ordered,test_dummy_encryption,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 87.097579][ T6223] loop3: detected capacity change from 0 to 40427 [ 87.107932][ T30] kauditd_printk_skb: 521 callbacks suppressed [ 87.107946][ T30] audit: type=1400 audit(1744661197.686:10158): avc: denied { create } for pid=6230 comm="syz.1.2684" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 87.114970][ T6223] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 87.180483][ T6230] syz.1.2684 (6230) used greatest stack depth: 19440 bytes left [ 87.198171][ T30] audit: type=1400 audit(1744661197.736:10159): avc: denied { read write open } for pid=6230 comm="syz.1.2684" path="/513/file0/core" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 87.198625][ T6223] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 87.259725][ T6223] F2FS-fs (loop3): invalid crc value [ 87.291811][ T6223] F2FS-fs (loop3): Found nat_bits in checkpoint [ 87.333251][ T30] audit: type=1400 audit(1744661197.906:10160): avc: denied { wake_alarm } for pid=6238 comm="syz.5.2724" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.375795][ T30] audit: type=1326 audit(1744661197.926:10161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.4.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d68e0169 code=0x7ffc0000 [ 87.412612][ T6239] loop5: detected capacity change from 0 to 8192 [ 87.418964][ T30] audit: type=1326 audit(1744661197.926:10162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.4.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d68e0169 code=0x7ffc0000 [ 87.452726][ T6223] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 87.462490][ T6223] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 87.464394][ T30] audit: type=1326 audit(1744661197.926:10163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.4.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d68e0169 code=0x7ffc0000 [ 87.511768][ T6221] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 87.511786][ T6244] fs-verity: sha256 using implementation "sha256-avx2" [ 87.526412][ T30] audit: type=1326 audit(1744661197.926:10164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.4.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d68e0169 code=0x7ffc0000 [ 87.553082][ T30] audit: type=1326 audit(1744661197.926:10165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.4.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d68e0169 code=0x7ffc0000 [ 87.578068][ T30] audit: type=1326 audit(1744661197.926:10166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.4.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d68e0169 code=0x7ffc0000 [ 87.613048][ T313] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 87.623769][ T313] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 87.653677][ T30] audit: type=1326 audit(1744661197.926:10167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.4.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d68e0169 code=0x7ffc0000 [ 87.824037][ T6250] loop0: detected capacity change from 0 to 40427 [ 87.899068][ T6250] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(15) root(3) [ 87.906802][ T6250] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 87.915871][ T6250] F2FS-fs (loop0): invalid crc value [ 87.922374][ T6250] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241045588246331391) [ 87.947063][ T6250] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 87.953602][ T6250] F2FS-fs (loop0): Start checkpoint disabled! [ 87.960722][ T6250] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 87.967657][ T6250] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 88.280640][ T6269] loop0: detected capacity change from 0 to 40427 [ 88.309181][ T6269] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 88.316006][ T6269] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 88.324091][ T6269] F2FS-fs (loop0): fault_injection options not supported [ 88.331089][ T6269] F2FS-fs (loop0): fault_type options not supported [ 88.338503][ T6269] F2FS-fs (loop0): invalid crc value [ 88.345313][ T6269] F2FS-fs (loop0): Found nat_bits in checkpoint [ 88.377960][ T6269] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 88.384928][ T6269] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 88.882495][ T6278] incfs: Options parsing error. -22 [ 88.887567][ T6278] incfs: mount failed -22 [ 88.969873][ T6289] netlink: 'syz.3.2731': attribute type 280 has an invalid length. [ 88.980419][ T6292] xt_hashlimit: size too large, truncated to 1048576 [ 89.029552][ T300] usb 2-1: USB disconnect, device number 3 [ 89.309114][ T6283] loop5: detected capacity change from 0 to 40427 [ 89.343139][ T6283] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 89.363841][ T6283] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 89.376168][ T6322] netlink: 'syz.1.2747': attribute type 280 has an invalid length. [ 89.389064][ T6325] loop3: detected capacity change from 0 to 512 [ 89.405017][ T6283] F2FS-fs (loop5): invalid crc value [ 89.440381][ T6325] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.451714][ T6283] F2FS-fs (loop5): Found nat_bits in checkpoint [ 89.519118][ T6283] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 89.526077][ T6283] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 89.586856][ T320] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 89.606677][ T6349] loop4: detected capacity change from 0 to 1024 [ 89.614258][ T320] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 89.639669][ T6349] EXT4-fs (loop4): Ignoring removed orlov option [ 89.680179][ T6349] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 89.707111][ T6358] incfs: Options parsing error. -22 [ 89.712571][ T6358] incfs: mount failed -22 [ 89.728629][ T20] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.744400][ T6360] loop0: detected capacity change from 0 to 512 [ 89.790271][ T6362] netlink: 'syz.4.2764': attribute type 280 has an invalid length. [ 89.815669][ T6366] loop4: detected capacity change from 0 to 1024 [ 89.817142][ T6360] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 89.838561][ T6360] ext4 filesystem being mounted at /588/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.852056][ T6368] loop5: detected capacity change from 0 to 4096 [ 89.881264][ T6368] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: writeback. [ 89.902951][ T6366] EXT4-fs (loop4): Test dummy encryption mode enabled [ 89.911308][ T6366] EXT4-fs (loop4): Test dummy encryption mode enabled [ 89.931831][ T6366] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,stripe=0x0000000000000009,data=ordered,test_dummy_encryption,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 90.101432][ T20] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.111591][ T20] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 90.121221][ T20] usb 4-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 90.130382][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.148927][ T20] usb 4-1: config 0 descriptor?? [ 90.353710][ T6382] loop4: detected capacity change from 0 to 40427 [ 90.448931][ T6382] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 90.456550][ T6382] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 90.465921][ T6382] F2FS-fs (loop4): invalid crc value [ 90.472635][ T6382] F2FS-fs (loop4): Found nat_bits in checkpoint [ 90.505111][ T6382] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 90.512090][ T6382] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 90.545787][ T45] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 90.554952][ T45] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 90.681077][ T6396] loop1: detected capacity change from 0 to 2048 [ 90.705111][ T6398] loop4: detected capacity change from 0 to 128 [ 90.813679][ T6396] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 90.880865][ T6402] loop4: detected capacity change from 0 to 8192 [ 90.917164][ T6396] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2775: bg 0: block 234: padding at end of block bitmap is not set [ 90.931750][ T6396] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1450 with error 28 [ 90.944421][ T6396] EXT4-fs (loop1): This should not happen!! Data will be lost [ 90.944421][ T6396] [ 90.972190][ T6396] EXT4-fs (loop1): Total free blocks count 0 [ 90.983398][ T6396] EXT4-fs (loop1): Free/Dirty block details [ 90.989514][ T6396] EXT4-fs (loop1): free_blocks=0 [ 90.994350][ T6396] EXT4-fs (loop1): dirty_blocks=1456 [ 91.014717][ T6396] EXT4-fs (loop1): Block reservation details [ 91.037158][ T6396] EXT4-fs (loop1): i_reserved_data_blocks=91 [ 91.193633][ T6412] loop1: detected capacity change from 0 to 1024 [ 91.232778][ T6412] EXT4-fs (loop1): Test dummy encryption mode enabled [ 91.241819][ T6412] EXT4-fs (loop1): Test dummy encryption mode enabled [ 91.264200][ T6412] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,stripe=0x0000000000000009,data=ordered,test_dummy_encryption,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 91.707427][ T6422] loop0: detected capacity change from 0 to 1024 [ 91.756925][ T6420] loop4: detected capacity change from 0 to 4096 [ 91.773877][ T6422] EXT4-fs (loop0): Ignoring removed orlov option [ 91.795656][ T6420] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: writeback. [ 91.827924][ T6422] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 92.238598][ T6345] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.321937][ T6435] loop0: detected capacity change from 0 to 131072 [ 92.394452][ T300] usb 4-1: USB disconnect, device number 2 [ 92.420247][ T6443] loop5: detected capacity change from 0 to 1024 [ 92.428388][ T6435] F2FS-fs (loop0): Found nat_bits in checkpoint [ 92.439534][ T6443] EXT4-fs (loop5): Test dummy encryption mode enabled [ 92.471176][ T6443] EXT4-fs (loop5): Test dummy encryption mode enabled [ 92.480662][ T6443] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,stripe=0x0000000000000009,data=ordered,test_dummy_encryption,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 92.502582][ T6447] loop3: detected capacity change from 0 to 8192 [ 92.507446][ T6345] usb 2-1: Using ep0 maxpacket: 16 [ 92.528400][ T6435] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 92.648794][ T6345] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.663719][ T6345] usb 2-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 24 [ 92.688231][ T6345] usb 2-1: config 0 interface 0 has no altsetting 0 [ 92.695109][ T6345] usb 2-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 92.704140][ T6345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.714487][ T6345] usb 2-1: config 0 descriptor?? [ 92.829296][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 92.829314][ T30] audit: type=1400 audit(1744661203.406:10229): avc: denied { name_bind } for pid=6458 comm="syz.3.2796" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 92.889392][ T30] audit: type=1400 audit(1744661203.436:10230): avc: denied { node_bind } for pid=6458 comm="syz.3.2796" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 92.939305][ T30] audit: type=1400 audit(1744661203.436:10231): avc: denied { create } for pid=6458 comm="syz.3.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 92.966304][ T6461] loop3: detected capacity change from 0 to 4096 [ 92.972679][ T30] audit: type=1400 audit(1744661203.436:10232): avc: denied { write } for pid=6458 comm="syz.3.2796" path="socket:[35522]" dev="sockfs" ino=35522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 92.997298][ T30] audit: type=1400 audit(1744661203.436:10233): avc: denied { nlmsg_read } for pid=6458 comm="syz.3.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 93.031355][ T30] audit: type=1400 audit(1744661203.596:10234): avc: denied { read } for pid=6462 comm="syz.0.2791" name="file0" dev="incremental-fs" ino=3103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.054695][ T30] audit: type=1400 audit(1744661203.596:10235): avc: denied { open } for pid=6462 comm="syz.0.2791" path="/593/file0/file0" dev="incremental-fs" ino=3103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.079084][ T30] audit: type=1400 audit(1744661203.606:10236): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 93.131552][ T6461] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: writeback. [ 93.165774][ T6469] loop0: detected capacity change from 0 to 512 [ 93.185479][ T30] audit: type=1326 audit(1744661203.756:10237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6472 comm="syz.5.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba63c9d169 code=0x7ffc0000 [ 93.208927][ T30] audit: type=1326 audit(1744661203.756:10238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6472 comm="syz.5.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba63c9d169 code=0x7ffc0000 [ 93.253149][ T6469] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.264970][ T6477] loop3: detected capacity change from 0 to 128 [ 93.299842][ T6480] tipc: Started in network mode [ 93.304824][ T6480] tipc: Node identity ac14140f, cluster identity 4711 [ 93.318800][ T6345] usb 2-1: string descriptor 0 read error: -71 [ 93.328193][ T6480] tipc: New replicast peer: 255.0.0.255 [ 93.334868][ T6345] usb 2-1: USB disconnect, device number 4 [ 93.340818][ T6480] tipc: Enabled bearer , priority 10 [ 93.380968][ T6485] loop4: detected capacity change from 0 to 2048 [ 93.439997][ T6485] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 93.520623][ T6485] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2807: bg 0: block 234: padding at end of block bitmap is not set [ 93.535189][ T6485] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 93.547745][ T557] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.555356][ T6485] EXT4-fs (loop4): This should not happen!! Data will be lost [ 93.555356][ T6485] [ 93.565316][ T6485] EXT4-fs (loop4): Total free blocks count 0 [ 93.571471][ T6485] EXT4-fs (loop4): Free/Dirty block details [ 93.577281][ T6485] EXT4-fs (loop4): free_blocks=0 [ 93.582751][ T6485] EXT4-fs (loop4): dirty_blocks=2592 [ 93.587967][ T6485] EXT4-fs (loop4): Block reservation details [ 93.594001][ T6485] EXT4-fs (loop4): i_reserved_data_blocks=162 [ 93.674159][ T10] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 538 with error 28 [ 93.689639][ T10] EXT4-fs (loop4): This should not happen!! Data will be lost [ 93.689639][ T10] [ 93.777760][ T6482] loop5: detected capacity change from 0 to 131072 [ 93.828598][ T6482] F2FS-fs (loop5): Found nat_bits in checkpoint [ 93.864266][ T6482] F2FS-fs (loop5): Mounted with checkpoint version = 753bd00b [ 93.948667][ T557] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.958739][ T557] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 93.967505][ T557] usb 1-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 93.976521][ T557] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.999332][ T557] usb 1-1: config 0 descriptor?? [ 94.260867][ T6500] syz.0.2801 (6500) used greatest stack depth: 19056 bytes left [ 94.338636][ T557] tipc: Node number set to 2886997007 [ 94.669663][ T6512] loop1: detected capacity change from 0 to 4096 [ 94.750023][ T6512] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: writeback. [ 94.872899][ T6534] netem: incorrect gi model size [ 94.877738][ T6534] netem: change failed [ 96.169089][ T26] usb 1-1: USB disconnect, device number 2 [ 96.211293][ T6568] netem: incorrect gi model size [ 96.216084][ T6568] netem: change failed [ 96.278079][ T6575] loop0: detected capacity change from 0 to 4096 [ 96.330393][ T6590] loop5: detected capacity change from 0 to 512 [ 96.347892][ T6575] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: writeback. [ 96.396741][ T6590] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.448583][ T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.476828][ T6609] loop3: detected capacity change from 0 to 128 [ 96.489662][ T6607] netem: incorrect gi model size [ 96.494509][ T6607] netem: change failed [ 96.533396][ T6609] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.544016][ T6609] ext4 filesystem being mounted at /490/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.556661][ T6609] syz.3.2857 (pid 6609) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 96.610516][ T6620] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.621328][ T6620] F2FS-fs (loop1): Unable to read 1th superblock [ 96.627828][ T6620] blk_update_request: I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.639755][ T6620] F2FS-fs (loop1): Unable to read 2th superblock [ 96.688741][ T26] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 96.698575][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 96.828620][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.838965][ T6] usb 5-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 24 [ 96.852762][ T6] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.859239][ T6] usb 5-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 96.868286][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.880407][ T6647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2874'. [ 96.882557][ T6] usb 5-1: config 0 descriptor?? [ 97.048631][ T26] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.059392][ T26] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 97.068993][ T26] usb 6-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 97.071421][ T6671] loop3: detected capacity change from 0 to 2048 [ 97.078139][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.093456][ T26] usb 6-1: config 0 descriptor?? [ 97.163328][ T6671] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.173814][ T6671] ext4 filesystem being mounted at /506/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.186511][ T6671] fs-verity: sha512 using implementation "sha512-avx2" [ 97.340438][ T6701] loop3: detected capacity change from 0 to 256 [ 97.379558][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2898'. [ 97.388592][ T6] usb 5-1: string descriptor 0 read error: -71 [ 97.391032][ T6701] FAT-fs (loop3): Directory bread(block 64) failed [ 97.395759][ T6] usb 5-1: USB disconnect, device number 2 [ 97.409435][ T6701] FAT-fs (loop3): Directory bread(block 65) failed [ 97.412508][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2898'. [ 97.415890][ T6701] FAT-fs (loop3): Directory bread(block 66) failed [ 97.440132][ T6701] FAT-fs (loop3): Directory bread(block 67) failed [ 97.446569][ T6701] FAT-fs (loop3): Directory bread(block 68) failed [ 97.457268][ T6701] FAT-fs (loop3): Directory bread(block 69) failed [ 97.464070][ T6701] FAT-fs (loop3): Directory bread(block 70) failed [ 97.471737][ T6701] FAT-fs (loop3): Directory bread(block 71) failed [ 97.478128][ T6701] FAT-fs (loop3): Directory bread(block 72) failed [ 97.484512][ T6701] FAT-fs (loop3): Directory bread(block 73) failed [ 97.519297][ T10] attempt to access beyond end of device [ 97.519297][ T10] loop3: rw=1, want=1768, limit=256 [ 97.530578][ T10] attempt to access beyond end of device [ 97.530578][ T10] loop3: rw=1, want=1928, limit=256 [ 97.542177][ T10] attempt to access beyond end of device [ 97.542177][ T10] loop3: rw=1, want=3340, limit=256 [ 97.738652][ T300] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.968060][ T30] kauditd_printk_skb: 119 callbacks suppressed [ 97.968098][ T30] audit: type=1326 audit(1744661208.536:10358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fa84169 code=0x7ffc0000 [ 98.004502][ T30] audit: type=1326 audit(1744661208.536:10359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fa84169 code=0x7ffc0000 [ 98.028947][ T30] audit: type=1326 audit(1744661208.576:10360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc67fa84169 code=0x7ffc0000 [ 98.053644][ T30] audit: type=1326 audit(1744661208.576:10361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fa84169 code=0x7ffc0000 [ 98.092963][ T30] audit: type=1326 audit(1744661208.576:10362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fa84169 code=0x7ffc0000 [ 98.116983][ T30] audit: type=1326 audit(1744661208.576:10363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc67fa84169 code=0x7ffc0000 [ 98.154539][ T30] audit: type=1326 audit(1744661208.576:10364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fa84169 code=0x7ffc0000 [ 98.193758][ T30] audit: type=1326 audit(1744661208.576:10365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fa84169 code=0x7ffc0000 [ 98.219911][ T30] audit: type=1326 audit(1744661208.576:10366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc67fa84169 code=0x7ffc0000 [ 98.228187][ T6736] SELinux: failed to load policy [ 98.245207][ T30] audit: type=1326 audit(1744661208.576:10367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fa84169 code=0x7ffc0000 [ 98.278732][ T300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.290478][ T6742] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.290673][ T300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.302413][ T6742] F2FS-fs (loop9): Unable to read 1th superblock [ 98.311438][ T300] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 98.317094][ T6742] blk_update_request: I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.326161][ T300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.344730][ T6742] F2FS-fs (loop9): Unable to read 2th superblock [ 98.346116][ T300] usb 1-1: config 0 descriptor?? [ 98.528607][ T312] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.788611][ T312] usb 4-1: Using ep0 maxpacket: 16 [ 98.938822][ T312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.948829][ T312] usb 4-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 24 [ 98.961643][ T312] usb 4-1: config 0 interface 0 has no altsetting 0 [ 98.968014][ T312] usb 4-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 98.976906][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.985237][ T312] usb 4-1: config 0 descriptor?? [ 99.058663][ T300] usb 1-1: string descriptor 0 read error: -22 [ 99.269986][ T300] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input4 [ 99.282726][ T300] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input5 [ 99.295222][ T300] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 99.337797][ T300] usb 6-1: USB disconnect, device number 2 [ 99.488676][ T312] usb 4-1: string descriptor 0 read error: -71 [ 99.499304][ T312] usb 4-1: USB disconnect, device number 3 [ 99.517930][ T6757] usb 1-1: USB disconnect, device number 3 [ 99.677587][ T6796] serio: Serial port ptm0 [ 99.738200][ T6805] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 99.978063][ T6833] serio: Serial port ptm0 [ 100.135737][ T6858] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6858 comm=syz.0.2969 [ 100.189122][ T6858] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6858 comm=syz.0.2969 [ 101.379496][ T6899] input: syz1 as /devices/virtual/input/input6 [ 101.496974][ T6913] loop3: detected capacity change from 0 to 1024 [ 101.554280][ T6913] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.610169][ T6932] 9pnet: p9_errstr2errno: server reported unknown error b0x0000000000000004 [ 101.919197][ T6971] incfs: Error accessing: ./file0. [ 101.924196][ T6971] incfs: mount failed -20 [ 101.971856][ T6977] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6977 comm=syz.3.3026 [ 102.019266][ T6977] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6977 comm=syz.3.3026 [ 102.046855][ T6985] loop1: detected capacity change from 0 to 1024 [ 102.105848][ T6945] loop5: detected capacity change from 0 to 40427 [ 102.146421][ T6985] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.182649][ T6945] F2FS-fs (loop5): fault_type options not supported [ 102.201329][ T6945] F2FS-fs (loop5): invalid crc value [ 102.217857][ T6945] F2FS-fs (loop5): Found nat_bits in checkpoint [ 102.269377][ T7009] incfs: Error accessing: ./file0. [ 102.287848][ T7009] incfs: mount failed -20 [ 102.333157][ T7014] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7014 comm=syz.1.3043 [ 102.349977][ T6945] F2FS-fs (loop5): Start checkpoint disabled! [ 102.350863][ T7014] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7014 comm=syz.1.3043 [ 102.356961][ T6945] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 102.477069][ T7030] loop4: detected capacity change from 0 to 1024 [ 102.562179][ T7030] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.686031][ T7048] incfs: Error accessing: ./file0. [ 102.713498][ T7048] incfs: mount failed -20 [ 102.730401][ T7056] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7056 comm=syz.4.3059 [ 102.744924][ T7056] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7056 comm=syz.4.3059 [ 102.882389][ T7078] loop0: detected capacity change from 0 to 1024 [ 102.979459][ T7078] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.048806][ T7072] loop1: detected capacity change from 0 to 40427 [ 103.060999][ T7072] F2FS-fs (loop1): fault_type options not supported [ 103.099409][ T7072] F2FS-fs (loop1): invalid crc value [ 103.108297][ T7072] F2FS-fs (loop1): Found nat_bits in checkpoint [ 103.194322][ T7072] F2FS-fs (loop1): Start checkpoint disabled! [ 103.211925][ T7103] 9pnet: p9_errstr2errno: server reported unknown error b0x0000000000000004 [ 103.232946][ T7072] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 103.280904][ T30] kauditd_printk_skb: 227 callbacks suppressed [ 103.280923][ T30] audit: type=1326 audit(1744661213.856:10595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.0.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9894a169 code=0x7ffc0000 [ 103.350371][ T30] audit: type=1326 audit(1744661213.896:10596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.0.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d9894a169 code=0x7ffc0000 [ 103.392789][ T30] audit: type=1326 audit(1744661213.896:10597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.0.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9894a169 code=0x7ffc0000 [ 103.420257][ T30] audit: type=1326 audit(1744661213.896:10598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.0.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d9894a169 code=0x7ffc0000 [ 103.445542][ T30] audit: type=1326 audit(1744661213.896:10599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.0.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9894a169 code=0x7ffc0000 [ 103.469761][ T30] audit: type=1326 audit(1744661213.896:10600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.0.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d9894a169 code=0x7ffc0000 [ 103.493428][ T30] audit: type=1326 audit(1744661213.896:10601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.0.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9894a169 code=0x7ffc0000 [ 103.517088][ T30] audit: type=1326 audit(1744661213.896:10602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.0.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d9894a169 code=0x7ffc0000 [ 103.541014][ T30] audit: type=1326 audit(1744661213.896:10603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.0.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9894a169 code=0x7ffc0000 [ 103.564620][ T30] audit: type=1326 audit(1744661213.896:10604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.0.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f5d9894a169 code=0x7ffc0000 [ 103.635380][ T7124] loop5: detected capacity change from 0 to 1024 [ 103.715271][ T7124] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.751922][ T7140] 9pnet: p9_errstr2errno: server reported unknown error b0x0000000000000004 [ 103.950927][ T7144] loop4: detected capacity change from 0 to 40427 [ 104.029175][ T7144] F2FS-fs (loop4): fault_type options not supported [ 104.039614][ T7144] F2FS-fs (loop4): invalid crc value [ 104.045983][ T7144] F2FS-fs (loop4): Found nat_bits in checkpoint [ 104.077604][ T7144] F2FS-fs (loop4): Start checkpoint disabled! [ 104.084658][ T7144] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 104.245367][ T7173] loop3: detected capacity change from 0 to 1024 [ 104.352986][ T7173] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.740455][ T7228] loop1: detected capacity change from 0 to 256 [ 104.809648][ T7228] FAT-fs (loop1): Directory bread(block 64) failed [ 104.816040][ T7228] FAT-fs (loop1): Directory bread(block 65) failed [ 104.825623][ T7228] FAT-fs (loop1): Directory bread(block 66) failed [ 104.832139][ T7228] FAT-fs (loop1): Directory bread(block 67) failed [ 104.838653][ T7228] FAT-fs (loop1): Directory bread(block 68) failed [ 104.845072][ T7228] FAT-fs (loop1): Directory bread(block 69) failed [ 104.852339][ T7228] FAT-fs (loop1): Directory bread(block 70) failed [ 104.864288][ T7228] FAT-fs (loop1): Directory bread(block 71) failed [ 104.876981][ T7228] FAT-fs (loop1): Directory bread(block 72) failed [ 104.888870][ T7240] loop4: detected capacity change from 0 to 256 [ 104.899095][ T7228] FAT-fs (loop1): Directory bread(block 73) failed [ 104.899442][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3142'. [ 104.915369][ T7240] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3142'. [ 104.936870][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3142'. [ 104.945967][ T7240] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3142'. [ 105.090488][ T7263] loop1: detected capacity change from 0 to 256 [ 105.122377][ T7266] netlink: 'syz.5.3153': attribute type 4 has an invalid length. [ 105.148457][ T7263] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 105.170132][ T7263] incfs: Can't find or create .index dir in ./file0 [ 105.176834][ T7263] incfs: mount failed -28 [ 105.275545][ T7286] loop1: detected capacity change from 0 to 512 [ 105.301227][ T7293] loop4: detected capacity change from 0 to 512 [ 105.320020][ T7293] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.332265][ T7293] EXT4-fs (loop4): 1 truncate cleaned up [ 105.337942][ T7293] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.350419][ T7297] incfs: Error accessing: ./file0. [ 105.355399][ T7297] incfs: mount failed -20 [ 105.399588][ T7286] EXT4-fs (loop1): 1 orphan inode deleted [ 105.406256][ T7286] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.417472][ T7286] ext4 filesystem being mounted at /607/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.436630][ T7286] netlink: 'syz.1.3169': attribute type 7 has an invalid length. [ 105.444795][ T7286] netlink: 'syz.1.3169': attribute type 5 has an invalid length. [ 105.453986][ T7286] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3169'. [ 106.998510][ C0] sched: RT throttling activated [ 108.219668][ T7365] overlayfs: failed to resolve './file1': -2 [ 108.306940][ T7369] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7369 comm=syz.0.3197 [ 108.338691][ T7369] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7369 comm=syz.0.3197 [ 108.386606][ T30] kauditd_printk_skb: 328 callbacks suppressed [ 108.386622][ T30] audit: type=1400 audit(1744661218.956:10933): avc: denied { read } for pid=7374 comm="syz.3.3200" dev="nsfs" ino=4026532639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.446313][ T30] audit: type=1400 audit(1744661218.986:10934): avc: denied { open } for pid=7374 comm="syz.3.3200" path="net:[4026532639]" dev="nsfs" ino=4026532639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.470041][ T30] audit: type=1400 audit(1744661218.986:10935): avc: denied { create } for pid=7374 comm="syz.3.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.499166][ T30] audit: type=1400 audit(1744661218.986:10936): avc: denied { connect } for pid=7374 comm="syz.3.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.520037][ T7361] loop4: detected capacity change from 0 to 40427 [ 108.526868][ T30] audit: type=1400 audit(1744661218.986:10937): avc: denied { write } for pid=7374 comm="syz.3.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.556840][ T30] audit: type=1326 audit(1744661219.126:10938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7386 comm="syz.3.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b0ed3169 code=0x7ffc0000 [ 108.605265][ T7361] F2FS-fs (loop4): fault_injection options not supported [ 108.613068][ T30] audit: type=1326 audit(1744661219.126:10939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7386 comm="syz.3.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f28b0ed3169 code=0x7ffc0000 [ 108.637098][ T30] audit: type=1326 audit(1744661219.126:10940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7386 comm="syz.3.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b0ed3169 code=0x7ffc0000 [ 108.660631][ T30] audit: type=1400 audit(1744661219.166:10941): avc: denied { read } for pid=7389 comm="syz.3.3206" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 108.690310][ T7361] F2FS-fs (loop4): invalid crc value [ 108.691815][ T30] audit: type=1400 audit(1744661219.166:10942): avc: denied { open } for pid=7389 comm="syz.3.3206" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 108.725407][ T7361] F2FS-fs (loop4): Found nat_bits in checkpoint [ 108.768960][ T7405] sch_fq: defrate 0 ignored. [ 108.830923][ T7361] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 108.910721][ T45] attempt to access beyond end of device [ 108.910721][ T45] loop4: rw=2049, want=45104, limit=40427 [ 109.159884][ T7439] netlink: 'syz.3.3226': attribute type 4 has an invalid length. [ 109.435053][ T7469] loop4: detected capacity change from 0 to 256 [ 109.531373][ T7469] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 109.588431][ T7480] loop5: detected capacity change from 0 to 128 [ 109.594995][ T7469] incfs: Can't find or create .index dir in ./file0 [ 109.605053][ T7469] incfs: mount failed -28 [ 109.669148][ T7485] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7485 comm=syz.1.3246 [ 109.698627][ T7485] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7485 comm=syz.1.3246 [ 109.720874][ T7480] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.736495][ T7480] ext4 filesystem being mounted at /632/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.844128][ T7498] loop1: detected capacity change from 0 to 512 [ 109.857513][ T7413] loop0: detected capacity change from 0 to 131072 [ 109.891183][ T7489] overlayfs: failed to resolve './file1': -2 [ 109.898262][ T7413] F2FS-fs (loop0): invalid crc value [ 109.925625][ T7498] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 109.945985][ T7413] F2FS-fs (loop0): Found nat_bits in checkpoint [ 109.967677][ T7498] EXT4-fs (loop1): 1 truncate cleaned up [ 109.983556][ T7498] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 110.034386][ T7413] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 110.050094][ T7518] loop5: detected capacity change from 0 to 256 [ 110.078925][ T7498] EXT4-fs error (device loop1): mb_free_blocks:1865: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 110.087562][ T7521] loop3: detected capacity change from 0 to 256 [ 110.093682][ T7498] EXT4-fs (loop1): Remounting filesystem read-only [ 110.142517][ T7518] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 110.155356][ T7521] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.177775][ T7518] incfs: Can't find or create .index dir in ./file0 [ 110.184740][ T7521] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 110.193463][ T7518] incfs: mount failed -28 [ 110.206358][ T7521] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 110.394106][ T7544] loop5: detected capacity change from 0 to 128 [ 110.400862][ T7545] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7545 comm=syz.3.3272 [ 110.413971][ T7545] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7545 comm=syz.3.3272 [ 110.438587][ T6] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.473768][ T7544] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 110.482824][ T7552] loop0: detected capacity change from 0 to 512 [ 110.490996][ T7544] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.491103][ T7550] x_tables: duplicate underflow at hook 4 [ 110.502571][ T7544] ext2 filesystem being mounted at /638/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.535627][ T7552] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.3275: inode #1: comm syz.0.3275: iget: illegal inode # [ 110.548838][ T7552] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.3275: error while reading EA inode 1 err=-117 [ 110.562808][ T7552] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.3275: inode #1: comm syz.0.3275: iget: illegal inode # [ 110.577749][ T7552] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.3275: error while reading EA inode 1 err=-117 [ 110.590876][ T7552] EXT4-fs (loop0): 1 orphan inode deleted [ 110.596483][ T7552] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 110.640883][ T7560] loop5: detected capacity change from 0 to 512 [ 110.659048][ T7564] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3279'. [ 110.670484][ T7567] SELinux: security_context_str_to_sid(u) failed for (dev ?, type ?) errno=-22 [ 110.679701][ T7567] SELinux: security_context_str_to_sid(u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 110.699576][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 110.733920][ T7560] EXT4-fs (loop5): 1 orphan inode deleted [ 110.748743][ T7560] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.766643][ T7560] ext4 filesystem being mounted at /639/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.223092][ T7577] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3285'. [ 112.038698][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.998616][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.008213][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 113.020980][ T6] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 113.029841][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.039603][ T6] usb 2-1: config 0 descriptor?? [ 114.019813][ T6] usb 2-1: can't set config #0, error -71 [ 114.025838][ T6] usb 2-1: USB disconnect, device number 5 [ 114.083946][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 114.083962][ T30] audit: type=1400 audit(1744661224.656:11047): avc: denied { setopt } for pid=7586 comm="syz.0.3288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.171811][ T30] audit: type=1400 audit(1744661224.746:11048): avc: denied { setopt } for pid=7589 comm="syz.4.3290" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.202020][ T7596] loop5: detected capacity change from 0 to 512 [ 114.217885][ T30] audit: type=1326 audit(1744661224.776:11049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.5.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba63c9d169 code=0x7ffc0000 [ 114.242066][ T30] audit: type=1326 audit(1744661224.776:11050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.5.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba63c9d169 code=0x7ffc0000 [ 114.281567][ T30] audit: type=1326 audit(1744661224.776:11051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.5.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fba63c9d169 code=0x7ffc0000 [ 114.330589][ T30] audit: type=1326 audit(1744661224.776:11052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.5.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fba63c9d1a3 code=0x7ffc0000 [ 114.354027][ T30] audit: type=1326 audit(1744661224.776:11053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.5.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fba63c9bc1f code=0x7ffc0000 [ 114.354092][ T7596] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.377688][ T30] audit: type=1326 audit(1744661224.776:11054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.5.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fba63c9d1f7 code=0x7ffc0000 [ 114.411928][ T30] audit: type=1326 audit(1744661224.776:11055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.5.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba63c9bad0 code=0x7ffc0000 [ 114.434011][ T7596] ext4 filesystem being mounted at /640/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.435955][ T30] audit: type=1326 audit(1744661224.776:11056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.5.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba63c9cd6b code=0x7ffc0000 [ 114.518330][ T7618] loop0: detected capacity change from 0 to 512 [ 114.531844][ T7620] loop1: detected capacity change from 0 to 512 [ 114.571336][ T7618] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.582494][ T7618] ext4 filesystem being mounted at /680/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.624659][ T7626] loop5: detected capacity change from 0 to 256 [ 114.630892][ T7620] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,mb_optimize_scan=0x0000000000000001,grpjquota=,journal_ioprio=0x0000000000000007,dioread_lock,,errors=continue. Quota mode: writeback. [ 114.650831][ T7620] ext4 filesystem being mounted at /637/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.852784][ T7655] loop5: detected capacity change from 0 to 512 [ 114.865063][ T7655] EXT4-fs (loop5): 1 truncate cleaned up [ 114.870673][ T7655] EXT4-fs (loop5): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,sysvgroups,lazytime,errors=continue,grpjquota=,,errors=continue. Quota mode: writeback. [ 115.136159][ T7690] loop1: detected capacity change from 0 to 512 [ 115.190898][ T7690] EXT4-fs (loop1): 1 truncate cleaned up [ 115.197697][ T7690] EXT4-fs (loop1): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,sysvgroups,lazytime,errors=continue,grpjquota=,,errors=continue. Quota mode: writeback. [ 115.343210][ T7700] loop5: detected capacity change from 0 to 40427 [ 115.393982][ T7721] syz.1.3352[7721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.394060][ T7721] syz.1.3352[7721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.424408][ T7700] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 115.460937][ T7700] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 115.487975][ T7700] F2FS-fs (loop5): invalid crc value [ 115.495494][ T7735] SELinux: security_context_str_to_sid(u) failed for (dev ?, type ?) errno=-22 [ 115.504796][ T7735] SELinux: security_context_str_to_sid(u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 115.523622][ T7700] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 115.608277][ T7700] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 115.617244][ T7746] loop1: detected capacity change from 0 to 2048 [ 115.623547][ T7700] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 115.627182][ T7749] loop3: detected capacity change from 0 to 256 [ 115.667678][ T7700] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3345'. [ 115.709649][ T7746] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 115.725361][ T7749] FAT-fs (loop3): bogus number of FAT sectors [ 115.735776][ T7749] FAT-fs (loop3): Can't find a valid FAT filesystem [ 115.818250][ T7766] incfs: Options parsing error. -22 [ 115.829973][ T7766] incfs: mount failed -22 [ 116.045710][ T7786] loop1: detected capacity change from 0 to 256 [ 116.121851][ T7791] loop3: detected capacity change from 0 to 512 [ 116.138601][ T7786] exFAT-fs (loop1): bogus data start sector [ 116.144338][ T7786] exFAT-fs (loop1): failed to read boot sector [ 116.157534][ T7786] exFAT-fs (loop1): failed to recognize exfat type [ 116.188979][ T7791] EXT4-fs (loop3): 1 truncate cleaned up [ 116.194913][ T7791] EXT4-fs (loop3): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,sysvgroups,lazytime,errors=continue,grpjquota=,,errors=continue. Quota mode: writeback. [ 116.259019][ T7805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3381'. [ 116.394974][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3389'. [ 116.452611][ T7824] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 116.490512][ T7831] loop3: detected capacity change from 0 to 512 [ 116.529973][ T7831] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,minixdf,. Quota mode: writeback. [ 116.549021][ T7831] ext4 filesystem being mounted at /606/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.560128][ T7842] loop1: detected capacity change from 0 to 16 [ 116.574435][ T7842] erofs: (device loop1): mounted with root inode @ nid 36. [ 116.584595][ T7831] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #4: block 16: comm syz.3.3392: lblock 0 mapped to illegal pblock 16 (length 1) [ 116.600346][ T7831] EXT4-fs (loop3): Remounting filesystem read-only [ 116.613429][ T292] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 116.615727][ T7842] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 116.636796][ T292] EXT4-fs (loop3): Remounting filesystem read-only [ 116.650443][ T7842] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 116.662323][ T6455] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 116.673459][ T7842] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 116.682662][ T6455] EXT4-fs (loop3): Remounting filesystem read-only [ 116.689508][ T7842] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 116.704100][ T6455] EXT4-fs error (device loop3): ext4_quota_off:6477: inode #3: comm syz.3.2793: mark_inode_dirty error [ 116.716819][ T6455] EXT4-fs (loop3): Remounting filesystem read-only [ 116.723756][ T6455] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 116.733383][ T6455] EXT4-fs (loop3): Remounting filesystem read-only [ 116.740219][ T6455] EXT4-fs error (device loop3): ext4_quota_off:6477: inode #4: comm syz.3.2793: mark_inode_dirty error [ 116.760578][ T6455] EXT4-fs (loop3): Remounting filesystem read-only [ 116.802856][ T6455] bridge0: port 1(syz_tun) entered disabled state [ 116.814977][ T6455] device syz_tun left promiscuous mode [ 116.820555][ T6455] bridge0: port 1(syz_tun) entered disabled state [ 117.029905][ T7864] loop5: detected capacity change from 0 to 128 [ 117.039718][ T7871] Invalid ELF header len 1 [ 117.092962][ T7879] syz.4.3414[7879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.093071][ T7879] syz.4.3414[7879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.141254][ T7860] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.175084][ T7860] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.185692][ T7860] device bridge_slave_0 entered promiscuous mode [ 117.192751][ T7860] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.200178][ T7860] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.207498][ T7860] device bridge_slave_1 entered promiscuous mode [ 117.336469][ T7860] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.343385][ T7860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.350472][ T7860] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.357232][ T7860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.387004][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.397474][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.420231][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.463793][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.475329][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.482318][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.493118][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.501526][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.508434][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.516969][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.525620][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.569859][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.600828][ T7860] device veth0_vlan entered promiscuous mode [ 117.620613][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.637219][ T7936] cgroup: noprefix used incorrectly [ 117.639024][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.652585][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.665212][ T7938] netlink: 'syz.0.3443': attribute type 6 has an invalid length. [ 117.673475][ T7940] x_tables: duplicate underflow at hook 4 [ 117.691916][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.701974][ T7860] device veth1_macvtap entered promiscuous mode [ 117.739342][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.749570][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.920837][ T457] device veth0_vlan left promiscuous mode [ 118.079808][ T7978] SELinux: security_context_str_to_sid(u) failed for (dev ?, type ?) errno=-22 [ 118.092215][ T7978] SELinux: security_context_str_to_sid(u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 118.234528][ T7995] loop6: detected capacity change from 0 to 1024 [ 118.262119][ T7995] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 118.275915][ T7995] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.334753][ T7995] EXT4-fs (loop6): mounted filesystem without journal. Opts: abort,user_xattr,inlinecrypt,i_version,dioread_nolock,journal_ioprio=0x0000000000000003,min_batch_time=0x0000000000000000,nolazytime,nomblk_io_submit,,errors=continue. Quota mode: none. [ 118.414167][ T7995] SELinux: ebitmap: truncated map [ 118.430389][ T7995] SELinux: failed to load policy [ 118.457708][ T8018] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3476'. [ 118.481708][ T8022] netlink: 'syz.1.3479': attribute type 3 has an invalid length. [ 118.541101][ T8032] netlink: 'syz.1.3485': attribute type 3 has an invalid length. [ 118.556493][ T8034] incfs: Error accessing: ./file0. [ 118.571024][ T8034] incfs: mount failed -20 [ 118.834706][ T8076] 9pnet: Could not find request transport: f [ 118.918674][ T8085] syz.0.3509 uses obsolete (PF_INET,SOCK_PACKET) [ 119.104413][ T8110] loop0: detected capacity change from 0 to 512 [ 119.149869][ T8110] EXT4-fs (loop0): Test dummy encryption mode enabled [ 119.156717][ T8110] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.173555][ T8110] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.3521: bad orphan inode 131083 [ 119.194329][ T8110] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 119.232417][ T8110] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 119.264279][ T8124] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 119.278800][ T30] kauditd_printk_skb: 301 callbacks suppressed [ 119.278814][ T30] audit: type=1400 audit(1744661229.856:11357): avc: denied { mounton } for pid=8109 comm="syz.0.3521" path="/735/bus/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.308717][ T8110] overlayfs: upper fs needs to support d_type. [ 119.316216][ T8110] overlayfs: failed to set xattr on upper [ 119.330647][ T291] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /735/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 119.351356][ T30] audit: type=1400 audit(1744661229.886:11358): avc: denied { remove_name } for pid=8109 comm="syz.0.3521" name="#f" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 119.379767][ T30] audit: type=1400 audit(1744661229.886:11359): avc: denied { unlink } for pid=8109 comm="syz.0.3521" name="#f" dev="loop0" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 119.402065][ T30] audit: type=1400 audit(1744661229.886:11360): avc: denied { unlink } for pid=8109 comm="syz.0.3521" name="#10" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 119.434794][ T4794] bridge0: port 3(syz_tun) entered disabled state [ 119.457844][ T4794] device syz_tun left promiscuous mode [ 119.464749][ T4794] bridge0: port 3(syz_tun) entered disabled state [ 119.561271][ T8128] loop5: detected capacity change from 0 to 40427 [ 119.629465][ T8128] F2FS-fs (loop5): Found nat_bits in checkpoint [ 119.689429][ T8128] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 119.707178][ T30] audit: type=1400 audit(1744661230.276:11361): avc: denied { rename } for pid=8127 comm="syz.5.3529" name="bus" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 119.742698][ T501] attempt to access beyond end of device [ 119.742698][ T501] loop5: rw=2049, want=45112, limit=40427 [ 119.765866][ T8138] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.772972][ T8138] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.780480][ T8138] device bridge_slave_0 entered promiscuous mode [ 119.787759][ T8138] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.794685][ T8138] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.802096][ T8138] device bridge_slave_1 entered promiscuous mode [ 119.865155][ T8138] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.872053][ T8138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.879162][ T8138] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.885918][ T8138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.900653][ T457] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.913478][ T457] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.969588][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.978486][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.002824][ T8161] device bridge0 entered promiscuous mode [ 120.010211][ T313] device bridge_slave_1 left promiscuous mode [ 120.016250][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.024773][ T313] device bridge_slave_0 left promiscuous mode [ 120.030985][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.039443][ T313] device veth1_macvtap left promiscuous mode [ 120.045365][ T313] device veth0_vlan left promiscuous mode [ 120.073776][ T8164] loop5: detected capacity change from 0 to 128 [ 120.142438][ T8164] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.152957][ T8164] ext4 filesystem being mounted at /692/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.237732][ T8167] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8167 comm=syz.5.3545 [ 120.270445][ T30] audit: type=1326 audit(1744661230.846:11362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.4.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d68e0169 code=0x7ffc0000 [ 120.296823][ T30] audit: type=1326 audit(1744661230.846:11363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.4.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc2d68e0169 code=0x7ffc0000 [ 120.321795][ T30] audit: type=1326 audit(1744661230.846:11364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.4.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d68e0169 code=0x7ffc0000 [ 120.348920][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.348919][ T30] audit: type=1326 audit(1744661230.846:11365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.4.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d68e0169 code=0x7ffc0000 [ 120.348948][ T30] audit: type=1326 audit(1744661230.846:11366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.4.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d68e0169 code=0x7ffc0000 [ 120.359408][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.403390][ T8173] loop4: detected capacity change from 0 to 2048 [ 120.411831][ T457] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.424422][ T457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.431699][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.440119][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.448176][ T457] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.455081][ T457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.462277][ T8173] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 120.462506][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3543'. [ 120.478410][ T8161] device syz_tun left promiscuous mode [ 120.483988][ T8161] bridge0: port 3(syz_tun) entered disabled state [ 120.491320][ T8161] device bridge_slave_1 left promiscuous mode [ 120.497306][ T8161] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.500608][ T8173] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 120.529883][ T8161] device bridge_slave_0 left promiscuous mode [ 120.535963][ T8161] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.543176][ T6770] Bluetooth: hci0: command 0x1003 tx timeout [ 120.549131][ T1768] Bluetooth: hci0: sending frame failed (-49) [ 120.557251][ T8161] device bridge0 left promiscuous mode [ 120.599109][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.607480][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.624901][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.634233][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.656912][ T8138] device veth0_vlan entered promiscuous mode [ 120.693781][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.706177][ T8183] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8183 comm=syz.5.3551 [ 120.707672][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.727409][ T8183] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8183 comm=syz.5.3551 [ 120.731243][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.749431][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.775915][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.783689][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.791835][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.802695][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.814198][ T8138] device veth1_macvtap entered promiscuous mode [ 120.827001][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.834869][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.851390][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.877005][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.890532][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.958215][ T8200] loop7: detected capacity change from 0 to 512 [ 121.026067][ T8200] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.3559: casefold flag without casefold feature [ 121.066425][ T8200] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.3559: couldn't read orphan inode 15 (err -117) [ 121.090727][ T8200] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.334889][ T8226] sch_fq: defrate 0 ignored. [ 121.393048][ T8231] Illegal XDP return value 4294967274, expect packet loss! [ 121.488049][ T8244] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3580'. [ 121.873274][ T8312] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3610'. [ 122.000811][ T8325] loop7: detected capacity change from 0 to 512 [ 122.049368][ T8325] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.3615: casefold flag without casefold feature [ 122.069606][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3619'. [ 122.078776][ T8325] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.3615: couldn't read orphan inode 15 (err -117) [ 122.091147][ T8325] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.209510][ T8350] blk_update_request: I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.221103][ T8350] F2FS-fs (loop11): Unable to read 1th superblock [ 122.227545][ T8350] blk_update_request: I/O error, dev loop11, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.238840][ T8350] F2FS-fs (loop11): Unable to read 2th superblock [ 122.325166][ T8363] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 122.519221][ T8385] loop4: detected capacity change from 0 to 1024 [ 122.589663][ T8385] EXT4-fs (loop4): Ignoring removed orlov option [ 122.595859][ T8385] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 122.619122][ T6770] Bluetooth: hci0: command 0x1001 tx timeout [ 122.625027][ T1768] Bluetooth: hci0: sending frame failed (-49) [ 122.652434][ T8385] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,orlov,nolazytime,quota,nomblk_io_submit,. Quota mode: writeback. [ 122.690342][ T8399] overlayfs: failed to clone lowerpath [ 123.020750][ T8428] SELinux: security_context_str_to_sid(u) failed for (dev ?, type ?) errno=-22 [ 123.041978][ T8428] SELinux: security_context_str_to_sid(u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 123.414940][ T8479] cgroup: Name too long [ 123.448552][ T20] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.506586][ T8496] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 123.715185][ T8525] kvm: pic: non byte write [ 123.818788][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.837412][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.847914][ T20] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 123.859324][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.904825][ T20] usb 5-1: config 0 descriptor?? [ 124.196424][ T8574] fuse: Bad value for 'fd' [ 124.331623][ T30] kauditd_printk_skb: 160 callbacks suppressed [ 124.331640][ T30] audit: type=1400 audit(1744661234.906:11527): avc: denied { mounton } for pid=8577 comm="syz.1.3727" path="/756/file0" dev="tmpfs" ino=3974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.382601][ T30] audit: type=1326 audit(1744661234.956:11528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8577 comm="syz.1.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fa84169 code=0x7fc00000 [ 124.409698][ T20] dragonrise 0003:0079:0006.0002: unknown main item tag 0x0 [ 124.416849][ T20] dragonrise 0003:0079:0006.0002: item fetching failed at offset 6/7 [ 124.425068][ T20] dragonrise 0003:0079:0006.0002: parse failed [ 124.431105][ T20] dragonrise: probe of 0003:0079:0006.0002 failed with error -22 [ 124.432349][ T30] audit: type=1400 audit(1744661235.006:11529): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 124.460475][ T30] audit: type=1400 audit(1744661235.006:11530): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.483019][ T30] audit: type=1400 audit(1744661235.006:11531): avc: denied { append } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 124.505265][ T30] audit: type=1400 audit(1744661235.006:11532): avc: denied { open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 124.527553][ T30] audit: type=1400 audit(1744661235.006:11533): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 124.611841][ T6] usb 5-1: USB disconnect, device number 3 [ 124.698684][ T312] Bluetooth: hci0: command 0x1009 tx timeout [ 124.831269][ T8582] netlink: 'syz.5.3728': attribute type 16 has an invalid length. [ 124.839180][ T8582] netlink: 'syz.5.3728': attribute type 17 has an invalid length. [ 124.862619][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 124.871055][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.880017][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 124.888166][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.896866][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.904989][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.913147][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.921328][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.948547][ T30] audit: type=1400 audit(1744661235.516:11534): avc: denied { create } for pid=8583 comm="syz.5.3729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.975158][ T30] audit: type=1400 audit(1744661235.546:11535): avc: denied { unmount } for pid=8138 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 125.003179][ T8588] loop5: detected capacity change from 0 to 256 [ 125.023514][ T8590] loop7: detected capacity change from 0 to 1024 [ 125.033230][ T8588] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 125.051028][ T30] audit: type=1400 audit(1744661235.626:11536): avc: denied { mounton } for pid=8587 comm="syz.5.3731" path="/749/file0/file0" dev="loop5" ino=1048617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.095875][ T8590] EXT4-fs error (device loop7): ext4_ext_check_inode:501: inode #11: comm syz.7.3732: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 125.115746][ T8590] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.3732: couldn't read orphan inode 11 (err -117) [ 125.130043][ T8594] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3733'. [ 125.132939][ T8590] EXT4-fs (loop7): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nodiscard,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 125.191716][ T8590] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm syz.7.3732: Invalid block bitmap block 0 in block_group 0 [ 125.205853][ T8590] EXT4-fs error (device loop7): ext4_acquire_dquot:6188: comm syz.7.3732: Failed to acquire dquot type 0 [ 125.377439][ T8619] loop7: detected capacity change from 0 to 512 [ 125.480339][ T8619] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,minixdf,. Quota mode: writeback. [ 125.498373][ T8619] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.572435][ T8619] EXT4-fs error (device loop7): ext4_map_blocks:629: inode #4: block 16: comm syz.7.3744: lblock 0 mapped to illegal pblock 16 (length 1) [ 125.609622][ T8619] EXT4-fs (loop7): Remounting filesystem read-only [ 125.674290][ T8138] EXT4-fs error (device loop7): ext4_map_blocks:629: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 125.698563][ T8138] EXT4-fs (loop7): Remounting filesystem read-only [ 125.722545][ T8138] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 125.744000][ T8636] syz.1.3752[8636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.744116][ T8636] syz.1.3752[8636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.756562][ T8138] EXT4-fs (loop7): Remounting filesystem read-only [ 125.794514][ T8138] EXT4-fs error (device loop7): ext4_quota_off:6477: inode #3: comm syz-executor: mark_inode_dirty error [ 125.806324][ T8138] EXT4-fs (loop7): Remounting filesystem read-only [ 125.813200][ T8138] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 125.823951][ T8138] EXT4-fs (loop7): Remounting filesystem read-only [ 125.837542][ T8138] EXT4-fs error (device loop7): ext4_quota_off:6477: inode #4: comm syz-executor: mark_inode_dirty error [ 125.854270][ T8639] af_packet: tpacket_rcv: packet too big, clamped from 92 to 4294967272. macoff=96 [ 125.857467][ T8138] EXT4-fs (loop7): Remounting filesystem read-only [ 126.056615][ T8653] cgroup: noprefix used incorrectly [ 126.249976][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3767'. [ 126.260089][ T8673] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 126.312264][ T8661] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.319355][ T8661] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.330122][ T8661] device bridge_slave_0 entered promiscuous mode [ 126.339608][ T8661] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.346532][ T8661] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.354582][ T8661] device bridge_slave_1 entered promiscuous mode [ 126.521934][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3783'. [ 126.530834][ T8705] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3783'. [ 126.551153][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3783'. [ 126.560478][ T8705] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3783'. [ 126.597344][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.608391][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.619520][ T8709] x_tables: duplicate underflow at hook 4 [ 126.632056][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.650172][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.664261][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.671143][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.701163][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.732884][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.741467][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.748341][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.761853][ T8723] loop5: detected capacity change from 0 to 256 [ 126.769358][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.786251][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.797848][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.819116][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.832995][ T8661] device veth0_vlan entered promiscuous mode [ 126.839924][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.848372][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.860597][ T8723] FAT-fs (loop5): bogus number of FAT sectors [ 126.866885][ T8723] FAT-fs (loop5): Can't find a valid FAT filesystem [ 126.875013][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.879248][ T8734] loop4: detected capacity change from 0 to 512 [ 126.896187][ T8661] device veth1_macvtap entered promiscuous mode [ 126.904506][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.920525][ T8734] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,minixdf,. Quota mode: writeback. [ 126.933967][ T8734] ext4 filesystem being mounted at /825/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.938761][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.995493][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.007025][ T8734] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #4: block 16: comm syz.4.3794: lblock 0 mapped to illegal pblock 16 (length 1) [ 127.029989][ T8250] device bridge_slave_1 left promiscuous mode [ 127.035960][ T8250] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.071120][ T8250] device bridge_slave_0 left promiscuous mode [ 127.081477][ T8250] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.089474][ T8734] EXT4-fs (loop4): Remounting filesystem read-only [ 127.109546][ T8250] device veth1_macvtap left promiscuous mode [ 127.116437][ T290] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 127.120333][ T8250] device veth0_vlan left promiscuous mode [ 127.136296][ T290] EXT4-fs (loop4): Remounting filesystem read-only [ 127.172445][ T4761] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 127.186331][ T4761] EXT4-fs (loop4): Remounting filesystem read-only [ 127.207931][ T4761] EXT4-fs error (device loop4): ext4_quota_off:6477: inode #3: comm syz.4.2057: mark_inode_dirty error [ 127.219457][ T4761] EXT4-fs (loop4): Remounting filesystem read-only [ 127.226109][ T4761] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 127.235904][ T4761] EXT4-fs (loop4): Remounting filesystem read-only [ 127.242527][ T4761] EXT4-fs error (device loop4): ext4_quota_off:6477: inode #4: comm syz.4.2057: mark_inode_dirty error [ 127.254012][ T4761] EXT4-fs (loop4): Remounting filesystem read-only [ 127.449786][ T8761] loop5: detected capacity change from 0 to 512 [ 127.496906][ T8762] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.503919][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.515635][ T8762] device bridge_slave_0 entered promiscuous mode [ 127.522933][ T8762] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.529848][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.532425][ T8761] EXT4-fs (loop5): 1 orphan inode deleted [ 127.537310][ T8762] device bridge_slave_1 entered promiscuous mode [ 127.548396][ T8761] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.559566][ T8761] ext4 filesystem being mounted at /774/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.587826][ T8761] netlink: 'syz.5.3810': attribute type 7 has an invalid length. [ 127.596283][ T8761] netlink: 'syz.5.3810': attribute type 5 has an invalid length. [ 127.604145][ T8761] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3810'. [ 127.669679][ T8762] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.676583][ T8762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.683692][ T8762] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.690559][ T8762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.710532][ T8250] tipc: Disabling bearer [ 127.720589][ T8250] tipc: Left network mode [ 127.740825][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.748324][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.756056][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.769727][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.777785][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.784664][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.796957][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.805531][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.812404][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.830678][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.851316][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.882845][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.896408][ T8762] device veth0_vlan entered promiscuous mode [ 127.902969][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.911522][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.920385][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.933059][ T8788] x_tables: duplicate underflow at hook 4 [ 127.944362][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.960545][ T8762] device veth1_macvtap entered promiscuous mode [ 127.973329][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.995798][ T8794] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8794 comm=syz.1.3823 [ 128.014909][ T8794] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8794 comm=syz.1.3823 [ 128.015154][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.213747][ T8821] netlink: 165 bytes leftover after parsing attributes in process `syz.9.3835'. [ 128.223405][ T8821] netlink: 277 bytes leftover after parsing attributes in process `syz.9.3835'. [ 128.280058][ T8250] device bridge_slave_1 left promiscuous mode [ 128.287374][ T8250] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.305788][ T8250] device bridge_slave_0 left promiscuous mode [ 128.308628][ T8829] loop8: detected capacity change from 0 to 2048 [ 128.318459][ T8836] incfs: ino conflict with backing FS 2 [ 128.324144][ T8250] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.340064][ T8250] device veth1_macvtap left promiscuous mode [ 128.383721][ T8829] EXT4-fs (loop8): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,discard,noblock_validity,,errors=continue. Quota mode: none. [ 128.494257][ T8854] loop9: detected capacity change from 0 to 512 [ 128.533475][ T8854] EXT4-fs (loop9): 1 orphan inode deleted [ 128.539400][ T8854] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.550855][ T8854] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.583178][ T8860] loop8: detected capacity change from 0 to 2048 [ 128.609159][ T8854] loop_set_status: loop9 () has still dirty pages (nrpages=3) [ 128.627939][ T8762] EXT4-fs error (device loop9): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /8/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 128.649345][ T8860] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 128.650441][ T8762] EXT4-fs error (device loop9): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 128.676217][ T8762] EXT4-fs warning (device loop9): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 128.685477][ T8860] EXT4-fs (loop8): Ignoring removed nobh option [ 128.688445][ T8762] EXT4-fs error (device loop9): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /8/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 128.715278][ T8762] EXT4-fs error (device loop9): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 128.736256][ T8762] EXT4-fs warning (device loop9): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 128.748084][ T8762] EXT4-fs error (device loop9): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /8/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 128.770715][ T8762] EXT4-fs error (device loop9): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 128.790677][ T8762] EXT4-fs warning (device loop9): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 128.791235][ T8860] EXT4-fs (loop8): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,barrier=0x0000000000000008,mblk_io_submit,minixdf,resuid=0x0000000000000000,nobh,bsddf,. Quota mode: none. [ 128.802653][ T8762] EXT4-fs error (device loop9): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /8/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 128.853714][ T8762] EXT4-fs error (device loop9): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 128.873510][ T8762] EXT4-fs warning (device loop9): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 128.885280][ T8762] EXT4-fs error (device loop9): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /8/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 128.909495][ T8762] EXT4-fs error (device loop9): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 128.931216][ T8762] EXT4-fs warning (device loop9): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 128.949103][ T8762] EXT4-fs warning (device loop9): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 128.961061][ T8762] EXT4-fs warning (device loop9): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 128.974765][ T8762] EXT4-fs warning (device loop9): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 128.986849][ T8762] EXT4-fs warning (device loop9): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 128.999198][ T8762] EXT4-fs warning (device loop9): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 129.123165][ T8886] loop6: detected capacity change from 0 to 1024 [ 129.193370][ T8886] EXT4-fs (loop6): Ignoring removed nobh option [ 129.223127][ T8886] EXT4-fs (loop6): Ignoring removed bh option [ 129.248206][ T8886] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.324182][ T8886] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 129.351048][ T30] kauditd_printk_skb: 171 callbacks suppressed [ 129.351063][ T30] audit: type=1400 audit(1744661239.926:11704): avc: denied { bind } for pid=8905 comm="syz.8.3872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.383921][ T10] EXT4-fs error (device loop6): mb_free_blocks:1865: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 129.406317][ T30] audit: type=1400 audit(1744661239.936:11705): avc: denied { map } for pid=8884 comm="syz.6.3861" path="/10/file1/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 129.429531][ T30] audit: type=1400 audit(1744661239.936:11706): avc: denied { execute } for pid=8884 comm="syz.6.3861" path="/10/file1/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 129.470986][ T8896] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.478194][ T8896] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.485599][ T8896] device bridge_slave_0 entered promiscuous mode [ 129.499317][ T8896] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.506474][ T8896] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.514267][ T8896] device bridge_slave_1 entered promiscuous mode [ 129.554543][ T8920] sch_fq: defrate 0 ignored. [ 129.581085][ T8926] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3881'. [ 129.684747][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3886'. [ 129.707436][ T30] audit: type=1400 audit(1744661240.276:11707): avc: denied { mount } for pid=8942 comm="syz.5.3888" name="/" dev="configfs" ino=13270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 129.762313][ T30] audit: type=1400 audit(1744661240.306:11708): avc: denied { search } for pid=8942 comm="syz.5.3888" name="/" dev="configfs" ino=13270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.785025][ T30] audit: type=1400 audit(1744661240.306:11709): avc: denied { read } for pid=8942 comm="syz.5.3888" name="/" dev="configfs" ino=13270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.807665][ T30] audit: type=1400 audit(1744661240.306:11710): avc: denied { open } for pid=8942 comm="syz.5.3888" path="/" dev="configfs" ino=13270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.854978][ T8955] netlink: 'syz.1.3892': attribute type 1 has an invalid length. [ 129.864079][ T8955] netlink: 'syz.1.3892': attribute type 2 has an invalid length. [ 129.874467][ T8949] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3890'. [ 129.890358][ T8955] netlink: 'syz.1.3892': attribute type 1 has an invalid length. [ 129.899148][ T8955] netlink: 'syz.1.3892': attribute type 2 has an invalid length. [ 129.916738][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.943857][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.954675][ T30] audit: type=1400 audit(1744661240.526:11711): avc: denied { read } for pid=8956 comm="syz.5.3893" name="ashmem" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.990652][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.998629][ T30] audit: type=1400 audit(1744661240.526:11712): avc: denied { open } for pid=8956 comm="syz.5.3893" path="/dev/ashmem" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.999141][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.029315][ T30] audit: type=1400 audit(1744661240.526:11713): avc: denied { map } for pid=8956 comm="syz.5.3893" path="/dev/ashmem" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.061760][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.068679][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.087744][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.096191][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.105578][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.112488][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.122948][ T8973] overlayfs: failed to clone upperpath [ 130.129823][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.137756][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.153097][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.171550][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.196542][ T8896] device veth0_vlan entered promiscuous mode [ 130.205916][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.215308][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.227844][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.245703][ T8896] device veth1_macvtap entered promiscuous mode [ 130.255656][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.287896][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.296793][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.521739][ T9022] loop2: detected capacity change from 0 to 512 [ 130.531231][ T8250] device bridge_slave_1 left promiscuous mode [ 130.537221][ T8250] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.554220][ T8250] device bridge_slave_0 left promiscuous mode [ 130.563575][ T8250] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.571963][ T9022] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.3921: corrupted in-inode xattr [ 130.584792][ T8250] device veth1_macvtap left promiscuous mode [ 130.590932][ T8250] device veth0_vlan left promiscuous mode [ 130.596888][ T9022] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.3921: couldn't read orphan inode 15 (err -117) [ 130.609473][ T9022] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,dioread_lock,noquota,,errors=continue. Quota mode: writeback. [ 130.731246][ T9041] syz.2.3924[9041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.731395][ T9041] syz.2.3924[9041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.818324][ T9052] incfs: Error accessing: ./file0. [ 130.844669][ T9049] loop2: detected capacity change from 0 to 128 [ 130.856873][ T9052] incfs: mount failed -20 [ 131.045116][ T9067] loop8: detected capacity change from 0 to 512 [ 131.123771][ T9067] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 131.124538][ T9056] loop6: detected capacity change from 0 to 40427 [ 131.148251][ T9067] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.150259][ T9056] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 131.171979][ T9056] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 131.207613][ T9056] F2FS-fs (loop6): invalid crc value [ 131.228203][ T9056] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 131.251760][ T9095] loop2: detected capacity change from 0 to 512 [ 131.261628][ T9056] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 131.268589][ T9056] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 131.327900][ T9107] binder: 9106:9107 ioctl c018620c 200000000040 returned -22 [ 131.360857][ T9112] loop8: detected capacity change from 0 to 1024 [ 131.371215][ T9095] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,mb_optimize_scan=0x0000000000000001,grpjquota=,journal_ioprio=0x0000000000000007,dioread_lock,,errors=continue. Quota mode: writeback. [ 131.393887][ T9095] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.395951][ T9112] EXT4-fs (loop8): Mount option "nouser_xattr" will be removed by 3.5 [ 131.395951][ T9112] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 131.395951][ T9112] [ 131.457421][ T9112] EXT4-fs (loop8): mounted filesystem without journal. Opts: nolazytime,jqfmt=vfsv1,barrier=0x0000000000080000,max_batch_time=0x0000000000000008,block_validity,resuid=0x0000000000000000,nouser_xattr,noauto_da_alloc,nolazytime,,errors=continue. Quota mode: none. [ 132.107799][ T9229] loop8: detected capacity change from 0 to 256 [ 132.183104][ T9227] loop2: detected capacity change from 0 to 8192 [ 132.191280][ T9229] exFAT-fs (loop8): bogus data start sector [ 132.197009][ T9229] exFAT-fs (loop8): failed to read boot sector [ 132.213653][ T9229] exFAT-fs (loop8): failed to recognize exfat type [ 132.428993][ T9288] tmpfs: Unknown parameter 'mp' [ 132.713148][ T9345] device bridge0 entered promiscuous mode [ 132.719172][ T9345] __nla_validate_parse: 3 callbacks suppressed [ 132.719189][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4022'. [ 132.734417][ T9345] device bridge_slave_1 left promiscuous mode [ 132.740754][ T9345] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.753568][ T9345] device bridge_slave_0 left promiscuous mode [ 132.759822][ T9345] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.770414][ T9345] device bridge0 left promiscuous mode [ 132.836531][ T9341] loop2: detected capacity change from 0 to 40427 [ 132.921158][ T9341] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 132.928916][ T9341] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 132.938356][ T9341] F2FS-fs (loop2): invalid crc value [ 132.945369][ T9341] F2FS-fs (loop2): Found nat_bits in checkpoint [ 132.991915][ T9341] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 132.998882][ T9341] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 133.269653][ T9378] loop2: detected capacity change from 0 to 256 [ 133.288105][ T9380] loop8: detected capacity change from 0 to 256 [ 133.301778][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4033'. [ 133.310695][ T9378] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4033'. [ 133.322546][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4033'. [ 133.331661][ T9378] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4033'. [ 133.359039][ T9380] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.369888][ T9380] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 133.380822][ T9380] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 133.491771][ T9388] device veth1_macvtap left promiscuous mode [ 133.507771][ T9388] device macsec0 entered promiscuous mode [ 133.764035][ T9392] loop8: detected capacity change from 0 to 40427 [ 133.799006][ T9392] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 133.806653][ T9392] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 133.816238][ T9392] F2FS-fs (loop8): invalid crc value [ 133.845722][ T9392] F2FS-fs (loop8): Found nat_bits in checkpoint [ 133.899173][ T9392] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 133.906172][ T9392] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 133.942904][ T9420] loop2: detected capacity change from 0 to 512 [ 133.957957][ T9422] loop6: detected capacity change from 0 to 128 [ 133.965492][ T9392] attempt to access beyond end of device [ 133.965492][ T9392] loop8: rw=2049, want=45104, limit=40427 [ 133.978773][ T9392] attempt to access beyond end of device [ 133.978773][ T9392] loop8: rw=2049, want=40968, limit=40427 [ 133.998668][ T9422] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.009323][ T9422] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 134.042022][ T9420] EXT4-fs (loop2): Test dummy encryption mode enabled [ 134.065888][ T9420] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 134.080163][ T9420] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.4052: bad orphan inode 131083 [ 134.090648][ T9420] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 134.118629][ T26] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 134.154076][ T9429] device bridge0 entered promiscuous mode [ 134.160387][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4054'. [ 134.169437][ T9429] device bridge_slave_1 left promiscuous mode [ 134.175450][ T9429] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.183191][ T9429] device bridge_slave_0 left promiscuous mode [ 134.189333][ T9429] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.200637][ T9420] overlayfs: upper fs needs to support d_type. [ 134.208369][ T9420] overlayfs: failed to set xattr on upper [ 134.214966][ T9429] device bridge0 left promiscuous mode [ 134.226554][ T8896] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /33/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 134.290761][ T9433] netlink: 'syz.6.4057': attribute type 16 has an invalid length. [ 134.298484][ T9433] netlink: 'syz.6.4057': attribute type 17 has an invalid length. [ 134.328579][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 134.343347][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.381520][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 134.394615][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.403811][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.412912][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.421799][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.430568][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.498661][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.526689][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.546549][ T26] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 134.558191][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.572515][ T26] usb 6-1: config 0 descriptor?? [ 134.609474][ T9439] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.616339][ T9439] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.625499][ T9436] loop8: detected capacity change from 0 to 40427 [ 134.639877][ T9439] device bridge_slave_0 entered promiscuous mode [ 134.646102][ T9436] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 134.651821][ T9439] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.660680][ T9439] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.667746][ T9436] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 134.668151][ T9439] device bridge_slave_1 entered promiscuous mode [ 134.684214][ T9436] F2FS-fs (loop8): invalid crc value [ 134.699606][ T9436] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 134.734665][ T9436] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 134.741835][ T9436] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 134.784904][ T9436] netlink: 136 bytes leftover after parsing attributes in process `syz.8.4059'. [ 134.831290][ T9439] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.838180][ T9439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.845333][ T9439] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.852202][ T9439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.892731][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.913263][ T30] kauditd_printk_skb: 410 callbacks suppressed [ 134.913279][ T30] audit: type=1400 audit(1744661245.486:12124): avc: denied { ioctl } for pid=9459 comm="syz.6.4068" path="socket:[46838]" dev="sockfs" ino=46838 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.916827][ T9164] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.976154][ T9462] loop6: detected capacity change from 0 to 1024 [ 134.985742][ T9164] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.010051][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.016192][ T9462] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #11: comm syz.6.4069: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 135.028968][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.037613][ T9462] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.4069: couldn't read orphan inode 11 (err -117) [ 135.055997][ T9287] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.062895][ T9287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.070580][ T9462] EXT4-fs (loop6): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nodiscard,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 135.099479][ T26] dragonrise 0003:0079:0006.0003: unknown main item tag 0x0 [ 135.108344][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.117928][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.119711][ T9462] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.4069: Invalid block bitmap block 0 in block_group 0 [ 135.126139][ T26] dragonrise 0003:0079:0006.0003: item fetching failed at offset 6/7 [ 135.147634][ T9462] Quota error (device loop6): write_blk: dquota write failed [ 135.149176][ T9287] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.154947][ T9462] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 135.161727][ T9287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.162494][ T26] dragonrise 0003:0079:0006.0003: parse failed [ 135.171693][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.178819][ T9462] EXT4-fs error (device loop6): ext4_acquire_dquot:6188: comm syz.6.4069: Failed to acquire dquot type 0 [ 135.184915][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.192924][ T26] dragonrise: probe of 0003:0079:0006.0003 failed with error -22 [ 135.203717][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.234348][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.247551][ T9289] device bridge_slave_1 left promiscuous mode [ 135.253638][ T9289] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.261679][ T9289] device bridge_slave_0 left promiscuous mode [ 135.269066][ T9289] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.287222][ T9289] device veth1_macvtap left promiscuous mode [ 135.296247][ T9289] device veth0_vlan left promiscuous mode [ 135.327405][ T6757] usb 6-1: USB disconnect, device number 3 [ 135.370754][ T9478] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4074'. [ 135.420757][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.429055][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.440976][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.448910][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.456877][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.464566][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.473121][ T9439] device veth0_vlan entered promiscuous mode [ 135.484313][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.492520][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.502147][ T9439] device veth1_macvtap entered promiscuous mode [ 135.512544][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.520113][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.528306][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.537849][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.546382][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.648788][ T30] audit: type=1326 audit(1744661246.226:12125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.3.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8987e5169 code=0x7ffc0000 [ 135.673146][ T312] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 135.680856][ T30] audit: type=1326 audit(1744661246.226:12126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.3.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8987e5169 code=0x7ffc0000 [ 135.704514][ T30] audit: type=1326 audit(1744661246.226:12127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.3.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8987e5169 code=0x7ffc0000 [ 135.728030][ T30] audit: type=1326 audit(1744661246.226:12128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.3.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8987e5169 code=0x7ffc0000 [ 135.752752][ T30] audit: type=1326 audit(1744661246.226:12129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.3.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8987e5169 code=0x7ffc0000 [ 135.776578][ T30] audit: type=1326 audit(1744661246.226:12130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.3.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8987e5169 code=0x7ffc0000 [ 135.800468][ T30] audit: type=1326 audit(1744661246.226:12131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.3.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8987e5169 code=0x7ffc0000 [ 135.882495][ T9496] loop3: detected capacity change from 0 to 512 [ 135.915436][ T9496] EXT4-fs (loop3): Test dummy encryption mode enabled [ 135.926525][ T9496] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 135.937500][ T9496] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.4082: bad orphan inode 131083 [ 135.949556][ T9496] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 136.048084][ T9496] overlayfs: upper fs needs to support d_type. [ 136.057698][ T9496] overlayfs: failed to set xattr on upper [ 136.073758][ T9439] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /5/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 136.112917][ T312] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.124647][ T312] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.209045][ T312] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 136.218046][ T312] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 136.235721][ T312] usb 7-1: SerialNumber: syz [ 136.421148][ T9523] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.430469][ T9523] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.438032][ T9523] device bridge_slave_0 entered promiscuous mode [ 136.450894][ T9523] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.460168][ T9523] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.469307][ T9523] device bridge_slave_1 entered promiscuous mode [ 136.530567][ T312] usb 7-1: 0:2 : does not exist [ 136.537113][ T312] usb 7-1: USB disconnect, device number 2 [ 136.567034][ T9523] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.573924][ T9523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.581160][ T9523] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.587973][ T9523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.619473][ T9535] device veth1_macvtap left promiscuous mode [ 136.625430][ T9535] device macsec0 entered promiscuous mode [ 136.643277][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.656014][ T9164] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.667660][ T9164] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.686124][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.694282][ T9164] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.701164][ T9164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.708723][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.717426][ T9164] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.724443][ T9164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.749083][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.765627][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.792329][ T5932] udevd[5932]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 136.794370][ T9523] device veth0_vlan entered promiscuous mode [ 136.825595][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.836806][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.845738][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.853369][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.866779][ T9547] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 136.888125][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.901335][ T9523] device veth1_macvtap entered promiscuous mode [ 136.921892][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.941248][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.054219][ T9289] device bridge_slave_1 left promiscuous mode [ 137.074466][ T9289] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.089213][ T9289] device bridge_slave_0 left promiscuous mode [ 137.102924][ T9289] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.122564][ T9289] device veth1_macvtap left promiscuous mode [ 137.135774][ T9289] device veth0_vlan left promiscuous mode [ 137.159874][ T9573] loop0: detected capacity change from 0 to 256 [ 137.337471][ T9584] loop6: detected capacity change from 0 to 1024 [ 137.431642][ T9584] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.450670][ C1] ================================================================== [ 137.458576][ C1] BUG: KASAN: use-after-free in dev_map_generic_redirect+0xa0/0x6f0 [ 137.460264][ T9584] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 137.466386][ C1] Read of size 8 at addr ffff88810a749c00 by task kworker/1:3/312 [ 137.484183][ C1] [ 137.486350][ C1] CPU: 1 PID: 312 Comm: kworker/1:3 Not tainted 5.15.178-syzkaller-00492-gb4b92d737f96 #0 [ 137.496068][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 137.505970][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 137.512124][ C1] Call Trace: [ 137.515250][ C1] [ 137.517955][ C1] dump_stack_lvl+0x151/0x1c0 [ 137.522450][ C1] ? io_uring_drop_tctx_refs+0x190/0x190 [ 137.527921][ C1] ? panic+0x760/0x760 [ 137.531826][ C1] print_address_description+0x87/0x3b0 [ 137.537207][ C1] kasan_report+0x179/0x1c0 [ 137.541543][ C1] ? dev_map_generic_redirect+0xa0/0x6f0 [ 137.547013][ C1] ? dev_map_generic_redirect+0xa0/0x6f0 [ 137.552479][ C1] __asan_report_load8_noabort+0x14/0x20 [ 137.557951][ C1] dev_map_generic_redirect+0xa0/0x6f0 [ 137.563253][ C1] ? ____kasan_slab_free+0x131/0x160 [ 137.568363][ C1] ? bq_enqueue+0x3e0/0x3e0 [ 137.572704][ C1] ? bpf_prog_run_generic_xdp+0x965/0x1070 [ 137.578345][ C1] xdp_do_generic_redirect+0x42e/0xb40 [ 137.583642][ C1] do_xdp_generic+0x50b/0x7c0 [ 137.588161][ C1] ? slab_free_freelist_hook+0xbd/0x190 [ 137.593535][ C1] ? kmem_cache_free+0x115/0x330 [ 137.598321][ C1] ? file_free_rcu+0x9f/0xb0 [ 137.602768][ C1] ? generic_xdp_tx+0x490/0x490 [ 137.607425][ C1] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 137.612810][ C1] ? migrate_disable+0xd9/0x190 [ 137.617508][ C1] __netif_receive_skb_core+0x1706/0x3640 [ 137.623051][ C1] ? set_rps_cpu+0x5e0/0x5e0 [ 137.627475][ C1] ? bpf_trace_run2+0x210/0x210 [ 137.632171][ C1] ? file_free_rcu+0x9f/0xb0 [ 137.636588][ C1] ? ____kasan_slab_free+0x131/0x160 [ 137.641709][ C1] ? file_free_rcu+0x9f/0xb0 [ 137.646153][ C1] ? __bpf_trace_kmem_cache_free+0x99/0xc0 [ 137.651780][ C1] __netif_receive_skb+0x11c/0x530 [ 137.656726][ C1] ? deliver_ptype_list_skb+0x3b0/0x3b0 [ 137.662106][ C1] ? __kasan_check_write+0x14/0x20 [ 137.667052][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 137.671649][ C1] ? _raw_spin_trylock_bh+0x190/0x190 [ 137.676859][ C1] process_backlog+0x31c/0x650 [ 137.681471][ C1] __napi_poll+0xc4/0x5a0 [ 137.685630][ C1] net_rx_action+0x47d/0xc50 [ 137.690055][ C1] ? net_tx_action+0x550/0x550 [ 137.694649][ C1] ? __sched_clock_gtod_offset+0xd0/0x100 [ 137.700211][ C1] handle_softirqs+0x25e/0x5c0 [ 137.704810][ C1] __do_softirq+0xb/0xd [ 137.708811][ C1] do_softirq+0xf6/0x150 [ 137.712878][ C1] [ 137.715655][ C1] [ 137.718428][ C1] ? __local_bh_enable_ip+0x80/0x80 [ 137.723468][ C1] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 137.729111][ C1] __local_bh_enable_ip+0x75/0x80 [ 137.733966][ C1] _raw_read_unlock_bh+0x29/0x30 [ 137.738740][ C1] wg_socket_send_skb_to_peer+0x178/0x1d0 [ 137.744297][ C1] wg_packet_tx_worker+0x1e6/0x530 [ 137.749244][ C1] process_one_work+0x6bb/0xc10 [ 137.753932][ C1] worker_thread+0xad5/0x12a0 [ 137.758443][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 137.763131][ C1] kthread+0x421/0x510 [ 137.767052][ C1] ? worker_clr_flags+0x180/0x180 [ 137.771896][ C1] ? kthread_blkcg+0xd0/0xd0 [ 137.776410][ C1] ret_from_fork+0x1f/0x30 [ 137.780663][ C1] [ 137.783528][ C1] [ 137.785694][ C1] Allocated by task 9523: [ 137.789861][ C1] ____kasan_kmalloc+0xdb/0x110 [ 137.794548][ C1] __kasan_kmalloc+0x9/0x10 [ 137.798892][ C1] __kmalloc+0x13f/0x2c0 [ 137.802966][ C1] ext4_find_extent+0x375/0xe30 [ 137.807824][ C1] ext4_ext_map_blocks+0x269/0x7450 [ 137.812849][ C1] ext4_map_blocks+0xa60/0x1c70 [ 137.817536][ C1] ext4_getblk+0x19f/0x700 [ 137.821789][ C1] ext4_bread+0x2f/0x180 [ 137.825866][ C1] ext4_append+0x31f/0x5b0 [ 137.830127][ C1] ext4_init_new_dir+0x33a/0xa20 [ 137.834891][ C1] ext4_mkdir+0x4f2/0xce0 [ 137.839055][ C1] vfs_mkdir+0x3f6/0x610 [ 137.843139][ C1] do_mkdirat+0x1eb/0x450 [ 137.847302][ C1] __x64_sys_mkdirat+0x89/0xa0 [ 137.851906][ C1] x64_sys_call+0x6c6/0x9a0 [ 137.856239][ C1] do_syscall_64+0x3b/0xb0 [ 137.860494][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.866221][ C1] [ 137.868392][ C1] Freed by task 9523: [ 137.872211][ C1] kasan_set_track+0x4b/0x70 [ 137.876639][ C1] kasan_set_free_info+0x23/0x40 [ 137.881413][ C1] ____kasan_slab_free+0x126/0x160 [ 137.886588][ C1] __kasan_slab_free+0x11/0x20 [ 137.891184][ C1] slab_free_freelist_hook+0xbd/0x190 [ 137.896400][ C1] kfree+0xcc/0x270 [ 137.900036][ C1] ext4_ext_map_blocks+0x2834/0x7450 [ 137.905160][ C1] ext4_map_blocks+0xa60/0x1c70 [ 137.909848][ C1] ext4_getblk+0x19f/0x700 [ 137.914095][ C1] ext4_bread+0x2f/0x180 [ 137.918176][ C1] ext4_append+0x31f/0x5b0 [ 137.922427][ C1] ext4_init_new_dir+0x33a/0xa20 [ 137.927206][ C1] ext4_mkdir+0x4f2/0xce0 [ 137.931376][ C1] vfs_mkdir+0x3f6/0x610 [ 137.935448][ C1] do_mkdirat+0x1eb/0x450 [ 137.939868][ C1] __x64_sys_mkdirat+0x89/0xa0 [ 137.944465][ C1] x64_sys_call+0x6c6/0x9a0 [ 137.948811][ C1] do_syscall_64+0x3b/0xb0 [ 137.953058][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.958788][ C1] [ 137.960957][ C1] The buggy address belongs to the object at ffff88810a749c00 [ 137.960957][ C1] which belongs to the cache kmalloc-96 of size 96 [ 137.974669][ C1] The buggy address is located 0 bytes inside of [ 137.974669][ C1] 96-byte region [ffff88810a749c00, ffff88810a749c60) [ 137.987511][ C1] The buggy address belongs to the page: [ 137.992984][ C1] page:ffffea000429d240 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10a749 [ 138.003048][ C1] flags: 0x4000000000000200(slab|zone=1) [ 138.008523][ C1] raw: 4000000000000200 ffffea0004476940 0000000d0000000d ffff888100042900 [ 138.016945][ C1] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 138.025353][ C1] page dumped because: kasan: bad access detected [ 138.031614][ C1] page_owner tracks the page as allocated [ 138.037159][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 2168099305, free_ts 0 [ 138.051650][ C1] post_alloc_hook+0x1a3/0x1b0 [ 138.056252][ C1] prep_new_page+0x1b/0x110 [ 138.060590][ C1] get_page_from_freelist+0x3550/0x35d0 [ 138.065980][ C1] __alloc_pages+0x27e/0x8f0 [ 138.070401][ C1] new_slab+0x9a/0x4e0 [ 138.074301][ C1] ___slab_alloc+0x39e/0x830 [ 138.078732][ C1] __slab_alloc+0x4a/0x90 [ 138.082902][ C1] kmem_cache_alloc_trace+0x147/0x270 [ 138.088102][ C1] blk_alloc_flush_queue+0x7f/0x260 [ 138.093311][ C1] blk_mq_realloc_hw_ctxs+0xc0a/0x1790 [ 138.098614][ C1] blk_mq_init_allocated_queue+0x449/0x16f0 [ 138.104335][ C1] blk_mq_init_queue+0x6b/0xd0 [ 138.108938][ C1] scsi_alloc_sdev+0x674/0xa10 [ 138.113549][ C1] scsi_probe_and_add_lun+0x199/0x4320 [ 138.118836][ C1] __scsi_scan_target+0x1ed/0xe30 [ 138.123691][ C1] scsi_scan_host_selected+0x334/0x5f0 [ 138.129001][ C1] page_owner free stack trace missing [ 138.134198][ C1] [ 138.136360][ C1] Memory state around the buggy address: [ 138.141834][ C1] ffff88810a749b00: 00 00 00 00 00 00 00 00 00 06 fc fc fc fc fc fc [ 138.149729][ C1] ffff88810a749b80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 138.157627][ C1] >ffff88810a749c00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 138.165523][ C1] ^ [ 138.169431][ C1] ffff88810a749c80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 138.177331][ C1] ffff88810a749d00: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 138.185227][ C1] ================================================================== [ 138.193125][ C1] Disabling lock debugging due to kernel taint [ 138.199203][ C1] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 138.206755][ C1] #PF: supervisor instruction fetch in kernel mode [ 138.213098][ C1] #PF: error_code(0x0010) - not-present page [ 138.218908][ C1] PGD 126348067 P4D 126348067 PUD 0 [ 138.224026][ C1] Oops: 0010 [#1] PREEMPT SMP KASAN [ 138.229058][ C1] CPU: 1 PID: 312 Comm: kworker/1:3 Tainted: G B 5.15.178-syzkaller-00492-gb4b92d737f96 #0 [ 138.240172][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.250064][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 138.255969][ C1] RIP: 0010:0x0 [ 138.259268][ C1] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 138.266813][ C1] RSP: 0018:ffffc900001d0580 EFLAGS: 00010246 [ 138.272724][ C1] RAX: ffffffff83f51017 RBX: ffffc900001d0780 RCX: ffff88810d0f0000 [ 138.280525][ C1] RDX: 0000000000000100 RSI: ffff88810c846f50 RDI: ffffc900001d0780 [ 138.288333][ C1] RBP: ffffc900001d05a0 R08: ffffffff83e8ffc7 R09: ffffc900001d0780 [ 138.296143][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900001d0788 [ 138.303995][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88810c846f50 [ 138.311768][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 138.320534][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.326957][ C1] CR2: ffffffffffffffd6 CR3: 000000013887f000 CR4: 00000000003506a0 [ 138.334770][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 138.342577][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 138.350388][ C1] Call Trace: [ 138.353517][ C1] [ 138.356207][ C1] ? __die_body+0x62/0xb0 [ 138.360374][ C1] ? __die+0x7e/0x90 [ 138.364108][ C1] ? page_fault_oops+0x7f9/0xa90 [ 138.368882][ C1] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 138.374260][ C1] ? __handle_irq_event_percpu+0x6c5/0x730 [ 138.379901][ C1] ? __kasan_check_write+0x14/0x20 [ 138.384845][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 138.389454][ C1] ? is_errata93+0xc7/0x240 [ 138.393790][ C1] ? exc_page_fault+0x510/0x7f0 [ 138.398479][ C1] ? asm_exc_page_fault+0x27/0x30 [ 138.403336][ C1] ? bpf_prog_run_generic_xdp+0x477/0x1070 [ 138.408976][ C1] ? bpf_dispatcher_xdp_func+0x17/0x30 [ 138.414274][ C1] bpf_dispatcher_xdp_func+0x20/0x30 [ 138.419388][ C1] bpf_prog_run_generic_xdp+0x4f3/0x1070 [ 138.424862][ C1] dev_map_generic_redirect+0x2f7/0x6f0 [ 138.430242][ C1] ? bq_enqueue+0x3e0/0x3e0 [ 138.434583][ C1] xdp_do_generic_redirect+0x42e/0xb40 [ 138.439878][ C1] do_xdp_generic+0x50b/0x7c0 [ 138.444386][ C1] ? slab_free_freelist_hook+0xbd/0x190 [ 138.449765][ C1] ? kmem_cache_free+0x115/0x330 [ 138.454539][ C1] ? file_free_rcu+0x9f/0xb0 [ 138.458967][ C1] ? generic_xdp_tx+0x490/0x490 [ 138.463651][ C1] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 138.468949][ C1] ? migrate_disable+0xd9/0x190 [ 138.473634][ C1] __netif_receive_skb_core+0x1706/0x3640 [ 138.479195][ C1] ? set_rps_cpu+0x5e0/0x5e0 [ 138.483671][ C1] ? bpf_trace_run2+0x210/0x210 [ 138.488314][ C1] ? file_free_rcu+0x9f/0xb0 [ 138.492729][ C1] ? ____kasan_slab_free+0x131/0x160 [ 138.497855][ C1] ? file_free_rcu+0x9f/0xb0 [ 138.502275][ C1] ? __bpf_trace_kmem_cache_free+0x99/0xc0 [ 138.507920][ C1] __netif_receive_skb+0x11c/0x530 [ 138.512868][ C1] ? deliver_ptype_list_skb+0x3b0/0x3b0 [ 138.518245][ C1] ? __kasan_check_write+0x14/0x20 [ 138.523194][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 138.527792][ C1] ? _raw_spin_trylock_bh+0x190/0x190 [ 138.533007][ C1] process_backlog+0x31c/0x650 [ 138.537601][ C1] __napi_poll+0xc4/0x5a0 [ 138.541768][ C1] net_rx_action+0x47d/0xc50 [ 138.546299][ C1] ? net_tx_action+0x550/0x550 [ 138.550897][ C1] ? __sched_clock_gtod_offset+0xd0/0x100 [ 138.556452][ C1] handle_softirqs+0x25e/0x5c0 [ 138.561052][ C1] __do_softirq+0xb/0xd [ 138.565042][ C1] do_softirq+0xf6/0x150 [ 138.569122][ C1] [ 138.571900][ C1] [ 138.574680][ C1] ? __local_bh_enable_ip+0x80/0x80 [ 138.579710][ C1] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 138.585357][ C1] __local_bh_enable_ip+0x75/0x80 [ 138.590214][ C1] _raw_read_unlock_bh+0x29/0x30 [ 138.594987][ C1] wg_socket_send_skb_to_peer+0x178/0x1d0 [ 138.600541][ C1] wg_packet_tx_worker+0x1e6/0x530 [ 138.605492][ C1] process_one_work+0x6bb/0xc10 [ 138.610178][ C1] worker_thread+0xad5/0x12a0 [ 138.614692][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 138.619377][ C1] kthread+0x421/0x510 [ 138.623282][ C1] ? worker_clr_flags+0x180/0x180 [ 138.628141][ C1] ? kthread_blkcg+0xd0/0xd0 [ 138.632565][ C1] ret_from_fork+0x1f/0x30 [ 138.637089][ C1] [ 138.639961][ C1] Modules linked in: [ 138.643702][ C1] CR2: 0000000000000000 [ 138.647691][ C1] ---[ end trace edd06a9676636a0c ]--- [ 138.652981][ C1] RIP: 0010:0x0 [ 138.656276][ C1] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 138.663827][ C1] RSP: 0018:ffffc900001d0580 EFLAGS: 00010246 [ 138.669730][ C1] RAX: ffffffff83f51017 RBX: ffffc900001d0780 RCX: ffff88810d0f0000 [ 138.677539][ C1] RDX: 0000000000000100 RSI: ffff88810c846f50 RDI: ffffc900001d0780 [ 138.685356][ C1] RBP: ffffc900001d05a0 R08: ffffffff83e8ffc7 R09: ffffc900001d0780 [ 138.693162][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900001d0788 [ 138.700976][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88810c846f50 [ 138.708779][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 138.717545][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.723965][ C1] CR2: ffffffffffffffd6 CR3: 000000013887f000 CR4: 00000000003506a0 [ 138.731787][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 138.739593][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 138.747418][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 138.754692][ C1] Kernel Offset: disabled [ 138.758830][ C1] Rebooting in 86400 seconds..