last executing test programs: 1m6.773454417s ago: executing program 0 (id=17): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2800c1e, &(0x7f0000000000)={[{@test_dummy_encryption}, {@usrjquota}]}, 0xff, 0x249, &(0x7f0000000500)="$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") r1 = open(&(0x7f0000000180)='./file1\x00', 0x109042, 0x88) fallocate(r1, 0x0, 0x8, 0x7000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1m6.622923069s ago: executing program 0 (id=19): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000c00)=ANY=[], 0x2f3}) ioctl$KVM_GET_XSAVE2(r0, 0x9000aecf, &(0x7f0000ffc000/0x1000)=nil) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2800c1e, &(0x7f0000000000)={[{@test_dummy_encryption}, {@usrjquota}]}, 0xff, 0x249, &(0x7f0000000500)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) rename(0x0, 0x0) r5 = open(&(0x7f0000000180)='./file1\x00', 0x109042, 0x88) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000025d1000072d29253f9639aa300", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0x0, &(0x7f00000001c0), &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) fallocate(r5, 0x0, 0x8, 0x7000000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1m6.471267852s ago: executing program 0 (id=20): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df25010018"], 0x18}}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) read$FUSE(0xffffffffffffffff, &(0x7f0000001cc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$getregs(0xe, r6, 0xffff, &(0x7f0000000300)=""/9) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000000)={0x7a, 0x3000, 0x8, 0xffffffffffffffff, 0x1}) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000c52000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000c5d000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x20, &(0x7f00000000c0)=[@cr4={0x1, 0x250400}], 0x1) 1m5.592224405s ago: executing program 0 (id=24): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$eJzs3c9vFGUfAPDvs7stlAItb97kfZGDTUiERG1pwWiMiRDx5sEfJJ5IrG0hhAUaWhNBjJDgf6B/gIk3E2M8EmOIevHqzcSriSESA714WzO7s2WB3f7cMsh8PsnQ55mnk+8zu3z7zDw7MxtAaY1l/1Qi9kbEfIoY6WirRd441vq9u3euzCzduTKTotF4568UKV/X/v2U/xzON94eEb/8kOI/1YfjLly6fHa6Xp+7mNcnFs/NTyxcuvz8mXPTp+dOz52fmnxx8oUjh6eOHOrLfu6KiJ/Gj9eun3pt3zczX+755LuvbqQ4Gjvz9s796JexGFt+TTplr+tL/Q5WkGq+P51vcaoV2CHWpf3+DUTE/2IkqnHvzRuJT98qtHPAlmqkiAZQUkn+Q0m1jwOy89/2UuwRCfCo3D7WmgC4m1pze0vL+V9rzQ3G9ubcwI6lFJ3TOiki+jEzl8WYfyaNZEts0Twc0N3VaxHx/27jf2rm5mhzFj/L/8p9+V+JiDfzn9n6tzcYf+yBuvyHR2cz+f9eR/6/v8H48h8AAAAAAAD65+axiHiu2+d/leXrf6LL9T/DEXG0D/FX//yvcqsPYYAubh+LeCUi2tf+LXXkf260mtd2Na8HGEinztTnDkXE7og4GAPbsvrkCjHG9v080LOt4/q/bMnit68FzPtxq7bt/m1mpxenN7PPQMvtaxFP1brlf1oe/1OX8T8b++fXGKNx/NUfe7Wtnv/AVml8EXGg6/h/78kVaeXnc0w0jwcm2kcFD/vo5I1ve8WX/1CcbPzfsXL+j6bO5/UsrD/Gx3/+ton87378P5hONB85M5iv+3B6cfHiZMRgeuPh9VPr7zM8idr50M6XLP8P7u9+/r/S8f9QRFxdY8wT379+vVeb8R+KM3QtYnZd4//6C/vf/fzvXvHXNv4faY7pB/M15v9gZWtN0KL7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/RpWI2BmpMr5crlTGxyOGI+K/saNSv7Cw+OypCx+cn83amt//X2l/0+9Iq57a3/8/2lGfeqB+OCL2RMRn1aFmfXzmQn226J0HAAAAAAAAAAAAAAAAAACAx8Rwj/v/M39Ui+4dsOVqRXcAKIz8h/KS/1Be8h/KS/5Decl/KC/5D+Ul/6G85D+UV7Xx9cmi+wAAAAAAAPTNnqdv/poi4urLQ80lM5i3DRTaM2CrHS26A0BhPOIHysulf1Beq53jmwOAJ19apX37hrcEAAAAAAAAAAAAAPrlwF73/0NZVYruAFCY3vf/ezIAPOnc/w/l5RwfcP8/AAAAAAAAAAAAADz+Fi5dPjtdr89d3Ghh2+Y2V1BYa+H33a3/s49Lf9ZfiNSHjHtEhaL/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG3/BAAA//9r5fVk") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) mount$9p_unix(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x4000, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$rtc(0x0, 0x800, 0x440c43) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x18) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='gid', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r5, 0x9c3fa077fa966179, 0x70bd25, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xc, 0x6b}}}}}, 0x28}}, 0x0) 1m4.019845338s ago: executing program 0 (id=28): timer_create(0x0, 0x0, &(0x7f0000000300)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000400), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r2}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r3) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0xb0882, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f00000100"], 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) dup2(r4, r5) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0x43451) write$binfmt_script(r8, &(0x7f0000000240)={'#! ', './cgroup', [{0x20, '/proc/self\x00'}, {0x20, '-'}, {0x20, '/proc/self\x00'}, {0x20, '%(+\'\'\''}, {0x20, 'ns/net\x00'}, {0x20, '/proc/self\x00'}, {}], 0xa, "1c9befa2399a6af79b2c64dd2b037607aed3b7238d18bd011bc41a30bf0e77e3826f9f46414a9027b1b7e4c8d7825ba10c7ad4610a0179ac0604612259ab001e308464a4410cb0d709f6a25101e5ea6821870f67b66537b0d23ca210f6a96af127836aa2c19b1623c0035a67e5b8666e3072d6ed76d91d46a7d48a81c4e67356d900f8709736d0a2ee38bd1471ea76c1644321859cb60cf3b0b2410a2acf295f9c893ed031"}, 0xe7) 1m3.316469939s ago: executing program 0 (id=31): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8902, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000002140)="660f01665a0f01c966ba2100ec8fc978d1ee642e0f9870220f01c3c4c1155f890000000066bad004ec362e0fc71b9a30263e8ed000", 0x35}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmmsg$sock(r4, &(0x7f0000000180)=[{{&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x400, @loopback, 0x1, 0x3}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000580)="7f087d186c6b5521958d05a751db2be6d594d305ad55714ea5ce3f3ef5d0cefed52a6fa51bfae8de635c019a1f33f17797fd8026cdd7c6963ae0220cd8fe02fe6efacbc95245d9624772b960d5be146c86d5480527d3ee057e86d36a02568609a32bc3909fa98e6b6a823bc74d9e238ce5504dc283a87d8dd9ab2ec886c150e9930eb1f098b2a2caf3e16d18ca8c1525a0fd8ba39792b9dd8257c027336c3c359b6b329d9ac407656e52e6179767a8231b085389383808303f1df90e3572c1b9e209e64a4d739edc02a0303cc3287df82368879a", 0xd4}, {&(0x7f00000006c0)="c053ad97bc02cbbd1a856c2f06c6102fa08d744408987ac721d2558c45871f34319eab247a532ec8e7981a0024c9a5d39100bd6c299dbb6bf97786553ce34f04876be838ad43a92c72c34bb0a86e0d216d5d6e1ca9790c88a07c2dc3ef958209246b1a818d9ae7a2492bda6119813927cb57f6e491f941b83e915e12dd81e64d93fc9abe4bb78fcfe50589c1987cae8d0177bd2b6b23fb8fe64a89fc13cbaf365df45ba1fbd817be9bc638", 0xab}, {&(0x7f0000000780)="081ccb90b0e91599a4157a55222422fd0fda8ab22bbb18751453d5245ebdb24649d16ed8dfce4fca5e24f28f5d3a56adb5a92495b798a1faa240cc297a63c36d0989f55fcdb92dc606c0b2677fe7a52dbab99ddbc2cd018507fd35a3e650f28b69e2e3834efd56858aa0ddb5d7380013816aae18bf2244b612847d1a842863a443253bb7", 0x84}, {&(0x7f0000000840)="563b6c4cb2e922b1c949470ec4a915e008a79dd1cb7b4b89b019c890b0f94c005afc5376c3ae33aeb53f085f51a2331d5a8f4ddd3536abf90dbd35ad7f2e861a80b07d904147dde2bb23b62cc1acffba91c61637460f", 0x56}, {&(0x7f00000008c0)="d707e22102420f26e375a479d88f6feeedfd33d0b6fc203cf2fa6510b92e170eb48e99b9f6f6c12fca8e5698465e04354a9f57acb3bcc2139ca2837420eb7667d77122fd6b8b91d6", 0x48}, {&(0x7f0000000980)="ab6c63e486344f4ff5ab49d1a55168c81d53eed9ff3b2114a6d17ee5401e2f261c773ce66ceb9663a08e9640ee17f054c0196f8058cf84ad7f48db978e9a2d9e332f8ae8854546653b447530c3c1c03b48e774d3c51ae6d801fed6baab5f36a0866e0d609cac736459b1ef4ec818f44f5598347025682649aff5e6d908859fc13a53160a105cda1c3e47b54fcc1716d9e3f2b4fabfe5df95d496abcb9821b01f33c27b331942efd359a4a8da49489715aa416ca7878fb5b6ea2ed69d75fcc08dbe9c4c5acf4c5e73cb59af85b9535638ef2a81fe7c105a5aa1", 0xd9}, {&(0x7f0000000a80)="2dc4927693d4a8c49a18d9f9b43b8390a8d114ba30f95fe03e5d16f64d9045b604ccdb34e287fd6c5db56a6ebdbbb64320a66f85636d05df931336c60c20176dcd3537b2511a66b9893698166f48cc57fdfeb9f65e54d5c0ef89b727138aa330e403914576e43b6d8f335a36d83b6150ace17051fd", 0x75}, {&(0x7f0000000b00)="3156b41e450993408ee7b45099833e21886e3f7c9099a0d15cec2b5f1aea327b6926a2d23213deb55589cb5cce3c3e612adf06010c7df66be006ba43a88a45a174f33f5d6a3b9e3bda6cf5ccb01cf2c87b2993f755f7da62de1c9fcba35b2520763e7da7b473faff15b5944affcdf335f0ce9d7960ff0ede4513ce8b090a26fc7498dc0e6c175a09820cca19e722d9373d846fabfdd40bba047aa2c7ad3eceb681cfc659283a550440266155020ddb1b04f48ad8a34d4ad67c1a0421445906464364978b70ffcbdd27954ae95ef2dcf4", 0xd0}, {&(0x7f0000000c00)="067d0841545fc79a486c7f32756e18cf520c6609fc228c54513cbd580b0b8ee063dbd04cb7cc86870666625ba344015557a164cc38da2cbb1cbd60d5680580a5a9ca8eda3992f6", 0x47}, {&(0x7f0000000c80)="875c3e5c9583e54d0f7ee0ef8c1247d657d09e6700894261c953cdcd45de8b753ebc9731ae8c8649e81584060da5ed723272cbe6ba587aa2e06b61fd9aa83eb324efb7e2620294f62bb185c114bd2639b1bbc1cdeaa3d758a3c1c3180a05eae3333d189e16184d6e46d91764e5d408de1f1536584eb41b562266262198e6ad0c9c1d981c1d1941a8a0a3dcb59ad58a2871e7f871a31ffdd1159f4dd83b0c966eb46300", 0xa3}], 0xa, &(0x7f0000000e00)=[@mark={{0x14, 0x1, 0x24, 0xfffffffb}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xc}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff9}}], 0x90}}], 0x1, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYRES64=r7], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r8}, 0x10) 1m3.288363859s ago: executing program 32 (id=31): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8902, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000002140)="660f01665a0f01c966ba2100ec8fc978d1ee642e0f9870220f01c3c4c1155f890000000066bad004ec362e0fc71b9a30263e8ed000", 0x35}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmmsg$sock(r4, &(0x7f0000000180)=[{{&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x400, @loopback, 0x1, 0x3}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000580)="7f087d186c6b5521958d05a751db2be6d594d305ad55714ea5ce3f3ef5d0cefed52a6fa51bfae8de635c019a1f33f17797fd8026cdd7c6963ae0220cd8fe02fe6efacbc95245d9624772b960d5be146c86d5480527d3ee057e86d36a02568609a32bc3909fa98e6b6a823bc74d9e238ce5504dc283a87d8dd9ab2ec886c150e9930eb1f098b2a2caf3e16d18ca8c1525a0fd8ba39792b9dd8257c027336c3c359b6b329d9ac407656e52e6179767a8231b085389383808303f1df90e3572c1b9e209e64a4d739edc02a0303cc3287df82368879a", 0xd4}, {&(0x7f00000006c0)="c053ad97bc02cbbd1a856c2f06c6102fa08d744408987ac721d2558c45871f34319eab247a532ec8e7981a0024c9a5d39100bd6c299dbb6bf97786553ce34f04876be838ad43a92c72c34bb0a86e0d216d5d6e1ca9790c88a07c2dc3ef958209246b1a818d9ae7a2492bda6119813927cb57f6e491f941b83e915e12dd81e64d93fc9abe4bb78fcfe50589c1987cae8d0177bd2b6b23fb8fe64a89fc13cbaf365df45ba1fbd817be9bc638", 0xab}, {&(0x7f0000000780)="081ccb90b0e91599a4157a55222422fd0fda8ab22bbb18751453d5245ebdb24649d16ed8dfce4fca5e24f28f5d3a56adb5a92495b798a1faa240cc297a63c36d0989f55fcdb92dc606c0b2677fe7a52dbab99ddbc2cd018507fd35a3e650f28b69e2e3834efd56858aa0ddb5d7380013816aae18bf2244b612847d1a842863a443253bb7", 0x84}, {&(0x7f0000000840)="563b6c4cb2e922b1c949470ec4a915e008a79dd1cb7b4b89b019c890b0f94c005afc5376c3ae33aeb53f085f51a2331d5a8f4ddd3536abf90dbd35ad7f2e861a80b07d904147dde2bb23b62cc1acffba91c61637460f", 0x56}, {&(0x7f00000008c0)="d707e22102420f26e375a479d88f6feeedfd33d0b6fc203cf2fa6510b92e170eb48e99b9f6f6c12fca8e5698465e04354a9f57acb3bcc2139ca2837420eb7667d77122fd6b8b91d6", 0x48}, {&(0x7f0000000980)="ab6c63e486344f4ff5ab49d1a55168c81d53eed9ff3b2114a6d17ee5401e2f261c773ce66ceb9663a08e9640ee17f054c0196f8058cf84ad7f48db978e9a2d9e332f8ae8854546653b447530c3c1c03b48e774d3c51ae6d801fed6baab5f36a0866e0d609cac736459b1ef4ec818f44f5598347025682649aff5e6d908859fc13a53160a105cda1c3e47b54fcc1716d9e3f2b4fabfe5df95d496abcb9821b01f33c27b331942efd359a4a8da49489715aa416ca7878fb5b6ea2ed69d75fcc08dbe9c4c5acf4c5e73cb59af85b9535638ef2a81fe7c105a5aa1", 0xd9}, {&(0x7f0000000a80)="2dc4927693d4a8c49a18d9f9b43b8390a8d114ba30f95fe03e5d16f64d9045b604ccdb34e287fd6c5db56a6ebdbbb64320a66f85636d05df931336c60c20176dcd3537b2511a66b9893698166f48cc57fdfeb9f65e54d5c0ef89b727138aa330e403914576e43b6d8f335a36d83b6150ace17051fd", 0x75}, {&(0x7f0000000b00)="3156b41e450993408ee7b45099833e21886e3f7c9099a0d15cec2b5f1aea327b6926a2d23213deb55589cb5cce3c3e612adf06010c7df66be006ba43a88a45a174f33f5d6a3b9e3bda6cf5ccb01cf2c87b2993f755f7da62de1c9fcba35b2520763e7da7b473faff15b5944affcdf335f0ce9d7960ff0ede4513ce8b090a26fc7498dc0e6c175a09820cca19e722d9373d846fabfdd40bba047aa2c7ad3eceb681cfc659283a550440266155020ddb1b04f48ad8a34d4ad67c1a0421445906464364978b70ffcbdd27954ae95ef2dcf4", 0xd0}, {&(0x7f0000000c00)="067d0841545fc79a486c7f32756e18cf520c6609fc228c54513cbd580b0b8ee063dbd04cb7cc86870666625ba344015557a164cc38da2cbb1cbd60d5680580a5a9ca8eda3992f6", 0x47}, {&(0x7f0000000c80)="875c3e5c9583e54d0f7ee0ef8c1247d657d09e6700894261c953cdcd45de8b753ebc9731ae8c8649e81584060da5ed723272cbe6ba587aa2e06b61fd9aa83eb324efb7e2620294f62bb185c114bd2639b1bbc1cdeaa3d758a3c1c3180a05eae3333d189e16184d6e46d91764e5d408de1f1536584eb41b562266262198e6ad0c9c1d981c1d1941a8a0a3dcb59ad58a2871e7f871a31ffdd1159f4dd83b0c966eb46300", 0xa3}], 0xa, &(0x7f0000000e00)=[@mark={{0x14, 0x1, 0x24, 0xfffffffb}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xc}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff9}}], 0x90}}], 0x1, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYRES64=r7], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r8}, 0x10) 52.172112446s ago: executing program 4 (id=86): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") unshare(0x24020400) r0 = socket$inet_udp(0x2, 0x2, 0x0) fgetxattr(r0, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000000340)=""/207, 0xcf) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) rmdir(&(0x7f0000000000)='./file0\x00') chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000100)='./file1\x00', 0x102) 50.248561975s ago: executing program 4 (id=93): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000280), 0x206, 0x8401) r1 = dup(r0) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000380)={0xfffffffd, "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"}) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0xb) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x84ac0, 0x10, 0x8}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 50.147864947s ago: executing program 4 (id=96): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) timer_getoverrun(0x0) 50.106518597s ago: executing program 4 (id=97): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x3004000, &(0x7f0000000000), 0x1, 0x794, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getdents64(r0, &(0x7f0000000540)=""/124, 0x7c) syz_clone(0x20000, &(0x7f0000000080)="42d92421d7748b3aa5bcb2d706494d19236b90f41f1f69527d645a29ebf308681c3a8e358161b9755960bca54b7d8f26e96ad53fde60ebfa486fa0e639dcd0eba14c7a26f1789d91b83ffd60faed53c5e4a876928fc1392612527d00bcdbcecc0f84604b5711940d662bf1ccc7fd8880785055f26bc057dc8afb0c81c6089ef519e374b39b6676ce7b0a0107464fbe4d67c9ff238070fc9fcf4122224557d43832b46a72e3adf9a8d6476346f1bf8fa592dc0f", 0xb3, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="89c5f920cebae724c2933f1408d80456d405bfc6873adb963220f19873d3c18e07d2e4bac02ec59b5f81792caadbdd80cc176f51edea08218a8525497e5968ed853276850172b67503a269176f705ffe1d0bf905258a9ab1fe6c6d0d720799e8a70934c38113c177ff62a9eb137036c7abb65c02c9cbcd7acedac7061216f8013e117a8f377fe74688e3b638ebbb3baf1e0a379624e4d66a41b0b3d0d888632708db7e6bb904e3c18552887a292fce9369b992049784c1c82ec356fb38e98500c0f80e9ee33400de4fb010fe77dc629ffc55e669461ebad10d0838a5d4f0291266194afbdb1d168ab23ba252a0eb758ecb7b9efd6b0c72") 49.762014082s ago: executing program 4 (id=99): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[], 0x2, 0x5515, &(0x7f00000079c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x208) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000002240)=0x2, 0x4) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) unlink(&(0x7f0000000080)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(0x0, 0x2200, 0x40) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket(0x11, 0x3, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) 48.768706517s ago: executing program 4 (id=111): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r4, 0x20000, 0x380}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xf}]}}}]}, 0x4c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000180)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f00000001c0)='GPL\x00', 0x3305, 0x4d, &(0x7f0000000340)=""/77, 0x41100, 0x74, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000200)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x4, 0x2, 0x801}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[r0, r0, r0, 0x1, r0, r0], &(0x7f0000000400)=[{0x5, 0x2, 0xa, 0x7}, {0x1, 0x1, 0x8, 0x2}, {0x4, 0x4, 0x0, 0xb}, {0x3, 0x5, 0xc, 0xa}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x7, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000100000000000000000000160001000000000095000000000000007500feff0000000095000000000000005ffeed257a94bab1a10b100bc6aadf807d9e03d4c58b0bc55c43e54c331a224c9a27d66f4eaac34fc8e7a2755dd15613c311ed975ac16c"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x80) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1afb640cf24e459220900000001090212ad8c000000000904210000080650"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r8}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 48.768387837s ago: executing program 33 (id=111): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r4, 0x20000, 0x380}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xf}]}}}]}, 0x4c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000180)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f00000001c0)='GPL\x00', 0x3305, 0x4d, &(0x7f0000000340)=""/77, 0x41100, 0x74, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000200)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x4, 0x2, 0x801}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[r0, r0, r0, 0x1, r0, r0], &(0x7f0000000400)=[{0x5, 0x2, 0xa, 0x7}, {0x1, 0x1, 0x8, 0x2}, {0x4, 0x4, 0x0, 0xb}, {0x3, 0x5, 0xc, 0xa}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x7, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000100000000000000000000160001000000000095000000000000007500feff0000000095000000000000005ffeed257a94bab1a10b100bc6aadf807d9e03d4c58b0bc55c43e54c331a224c9a27d66f4eaac34fc8e7a2755dd15613c311ed975ac16c"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x80) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1afb640cf24e459220900000001090212ad8c000000000904210000080650"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r8}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 1.072626194s ago: executing program 2 (id=679): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r1, &(0x7f00000004c0)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 771.757138ms ago: executing program 1 (id=685): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x97, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 682.9245ms ago: executing program 1 (id=687): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 630.33394ms ago: executing program 1 (id=690): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000006440000001e0a05010000000000000000070000000900020073797a31000000000900010073797a30000000001800038014000080100001800a000100fefe"], 0xc8}}, 0x0) 564.388692ms ago: executing program 1 (id=692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x84}}, 0x0) 564.278972ms ago: executing program 3 (id=693): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 503.723373ms ago: executing program 3 (id=694): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setregid(0xffffffffffffffff, 0x0) 492.989443ms ago: executing program 5 (id=695): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x6, r3}, 0x10) 448.659453ms ago: executing program 1 (id=696): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550d, &(0x7f00000000c0)) 441.629043ms ago: executing program 1 (id=697): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 428.626723ms ago: executing program 3 (id=698): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000040)={@local, @remote, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@llc_tr={0x11, {@snap={0x1, 0xaa, "a7", "bab435", 0x16}}}}}, 0x0) 368.669094ms ago: executing program 5 (id=699): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) getresuid(&(0x7f0000007e00), &(0x7f0000007e40), &(0x7f0000007e80)) 368.558194ms ago: executing program 5 (id=700): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x9, 0x4, 0x4002, 0x5, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x8000000}, 0x50) 368.426834ms ago: executing program 3 (id=701): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) 309.626305ms ago: executing program 2 (id=702): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setrlimit(0x9, &(0x7f0000000380)) io_setup(0x2004, &(0x7f0000000680)) 291.432136ms ago: executing program 6 (id=703): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x81ff, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x4817, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x826d, 0x68020}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 267.366776ms ago: executing program 5 (id=704): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000000206030000000000000000000000000005000100070000000900020073797a3000000000050005000000001e384827937c018d70c5"], 0x30}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mount$9p_tcp(0x0, 0x0, &(0x7f00000006c0), 0x8010, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'hsr0\x00'}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='comm\x00') socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 212.536727ms ago: executing program 2 (id=705): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 212.352247ms ago: executing program 6 (id=706): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xffffeff6, 0x0, 0x0) 212.115837ms ago: executing program 3 (id=707): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c3e42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 211.936677ms ago: executing program 6 (id=708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x34, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) 194.944557ms ago: executing program 2 (id=709): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x1c) 172.696057ms ago: executing program 6 (id=710): r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0209fd0902"], 0x10}}, 0x44884) 68.568019ms ago: executing program 6 (id=711): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2046) 68.394849ms ago: executing program 2 (id=712): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000002}, 0x18) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) 62.960439ms ago: executing program 3 (id=713): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000400)=r2}, 0x20) 59.927979ms ago: executing program 5 (id=714): r0 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x25}, 0x3}, 0x1c, 0x0}, 0x4b00) 678.96µs ago: executing program 2 (id=715): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0xfd, r0}, 0x38) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 423.27µs ago: executing program 6 (id=716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xffffffffffffffff, 0xa, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 5 (id=717): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r1}, &(0x7f0000000600), &(0x7f0000000800)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) kernel console output (not intermixed with test programs): system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.540361][ T329] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz.0.7: Siphash requires key [ 32.551548][ T329] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz.0.7: Siphash requires key [ 32.562655][ T329] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz.0.7: Siphash requires key [ 32.574430][ T329] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz.0.7: Siphash requires key [ 32.604115][ T329] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz.0.7: Siphash requires key [ 32.615432][ T329] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz.0.7: Siphash requires key [ 32.636757][ T329] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz.0.7: Siphash requires key [ 32.639075][ T344] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 32.658121][ T329] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz.0.7: Siphash requires key [ 32.688934][ T344] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 32.699206][ T344] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 32.700755][ T345] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 32.769899][ T277] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz-executor: Siphash requires key [ 32.782586][ T344] exFAT-fs (loop4): hint_cluster is invalid (17) [ 32.803541][ T277] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz-executor: Siphash requires key [ 32.845678][ T277] EXT4-fs error (device loop0): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 33.023588][ T5] uclogic 0003:28BD:0071.0002: failed retrieving string descriptor #100: -71 [ 33.045203][ T5] uclogic 0003:28BD:0071.0002: failed retrieving pen parameters: -71 [ 33.053312][ T5] uclogic 0003:28BD:0071.0002: pen probing failed: -71 [ 33.071850][ T5] uclogic 0003:28BD:0071.0002: failed probing parameters: -71 [ 33.091276][ T5] uclogic: probe of 0003:28BD:0071.0002 failed with error -71 [ 33.099091][ T358] EXT4-fs (loop1): Test dummy encryption mode enabled [ 33.113827][ T5] usb 3-1: USB disconnect, device number 2 [ 33.126407][ T358] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.12: inode #1: comm syz.1.12: iget: illegal inode # [ 33.145123][ T358] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.12: error while reading EA inode 1 err=-117 [ 33.164811][ T356] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,delalloc,errors=remount-ro, [ 33.193893][ T358] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.239063][ T358] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.12: inode #1: comm syz.1.12: iget: illegal inode # [ 33.252957][ T352] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue [ 33.296935][ T358] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.12: error while reading EA inode 1 err=-117 [ 33.310459][ T358] EXT4-fs (loop1): 1 orphan inode deleted [ 33.317001][ T358] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,discard,norecovery,noinit_itable,test_dummy_encryption,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,jqfmt=vfsold,dioread_lock,noblock_validity,nouid32,,errors=continue [ 34.302667][ T352] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.11: bg 0: block 234: padding at end of block bitmap is not set [ 34.321451][ T352] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 578 with error 28 [ 34.349132][ T352] EXT4-fs (loop4): This should not happen!! Data will be lost [ 34.349132][ T352] [ 34.362522][ T352] EXT4-fs (loop4): Total free blocks count 0 [ 34.374250][ T352] EXT4-fs (loop4): Free/Dirty block details [ 34.380215][ T352] EXT4-fs (loop4): free_blocks=0 [ 34.393585][ T352] EXT4-fs (loop4): dirty_blocks=592 [ 34.506186][ T352] EXT4-fs (loop4): Block reservation details [ 34.512213][ T352] EXT4-fs (loop4): i_reserved_data_blocks=37 [ 34.817789][ T377] EXT4-fs (loop2): Ignoring removed orlov option [ 34.899753][ T377] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue [ 34.913302][ T387] EXT4-fs (loop0): Test dummy encryption mode enabled [ 34.940105][ T387] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,usrjquota=,,errors=continue [ 34.952519][ T387] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.093231][ T395] EXT4-fs (loop0): Test dummy encryption mode enabled [ 35.102397][ T395] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,usrjquota=,,errors=continue [ 35.114767][ T395] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.313746][ T5] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 35.329282][ T403] netem: change failed [ 35.943535][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 36.063689][ T5] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 36.071906][ T5] usb 5-1: config 0 has no interface number 0 [ 36.091055][ T5] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.108976][ T5] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.125316][ T417] __quota_error: 57 callbacks suppressed [ 36.125336][ T417] Quota error (device loop0): find_tree_dqentry: Getting block too big (64 >= 6) [ 36.150433][ T5] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 36.163203][ T417] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 36.172661][ T417] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.24: Failed to acquire dquot type 0 [ 36.204887][ T417] EXT4-fs error (device loop0): mb_free_blocks:1524: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 36.213590][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.228402][ T5] usb 5-1: config 0 descriptor?? [ 36.237598][ T417] EXT4-fs error (device loop0) in ext4_do_update_inode:5335: error 27 [ 36.240848][ T399] F2FS-fs (loop3): invalid crc value [ 36.266383][ T24] audit: type=1400 audit(1752106888.320:180): avc: denied { name_bind } for pid=422 comm="syz.1.25" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 36.274373][ T417] EXT4-fs error (device loop0): ext4_dirty_inode:6142: inode #13: comm syz.0.24: mark_inode_dirty error [ 36.300664][ T24] audit: type=1400 audit(1752106888.360:181): avc: denied { node_bind } for pid=422 comm="syz.1.25" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 36.321419][ T399] F2FS-fs (loop3): Found nat_bits in checkpoint [ 36.329226][ T417] EXT4-fs error (device loop0) in ext4_do_update_inode:5335: error 27 [ 36.345164][ T24] audit: type=1400 audit(1752106888.400:182): avc: denied { create } for pid=422 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.373698][ T417] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #13: comm syz.0.24: mark_inode_dirty error [ 36.398840][ T399] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 36.404325][ T417] EXT4-fs error (device loop0) in ext4_do_update_inode:5335: error 27 [ 36.443756][ T417] EXT4-fs error (device loop0) in ext4_orphan_del:3292: error 27 [ 36.460295][ T24] audit: type=1400 audit(1752106888.510:183): avc: denied { ioctl } for pid=398 comm="syz.3.21" path="/4/file0/file0" dev="loop3" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.485877][ T417] EXT4-fs error (device loop0) in ext4_do_update_inode:5335: error 27 [ 36.495315][ T413] F2FS-fs (loop2): invalid crc value [ 36.501285][ T24] audit: type=1400 audit(1752106888.510:184): avc: denied { ioctl } for pid=398 comm="syz.3.21" path="socket:[15650]" dev="sockfs" ino=15650 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.526156][ T24] audit: type=1400 audit(1752106888.510:185): avc: denied { setopt } for pid=398 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.533824][ T417] EXT4-fs error (device loop0): ext4_truncate:4390: inode #13: comm syz.0.24: mark_inode_dirty error [ 36.545839][ T24] audit: type=1400 audit(1752106888.510:186): avc: denied { write } for pid=398 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.575767][ T24] audit: type=1400 audit(1752106888.630:187): avc: denied { watch watch_reads } for pid=398 comm="syz.3.21" path="/4/file0" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.599250][ T413] F2FS-fs (loop2): Found nat_bits in checkpoint [ 36.626639][ T417] EXT4-fs error (device loop0) in ext4_orphan_cleanup:3108: error 27 [ 36.634867][ T15] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 36.703996][ T417] EXT4-fs (loop0): 1 truncate cleaned up [ 36.719911][ T417] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 36.728990][ T413] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 36.791872][ T276] attempt to access beyond end of device [ 36.791872][ T276] loop3: rw=2049, want=45112, limit=40427 [ 36.872648][ T417] EXT4-fs (loop0): re-mounted. Opts: (null) [ 36.893383][ T417] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 36.893605][ T15] usb 2-1: Using ep0 maxpacket: 16 [ 36.920678][ T417] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.24: Failed to acquire dquot type 0 [ 36.956079][ T5] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0003/input/input6 [ 36.985245][ T5] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0003/input/input7 [ 37.015131][ T5] uclogic 0003:28BD:0071.0003: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 37.051499][ T417] EXT4-fs (loop0): re-mounted. Opts: [ 37.128715][ T433] attempt to access beyond end of device [ 37.128715][ T433] loop2: rw=2049, want=45104, limit=40427 [ 37.196842][ T5] usb 5-1: USB disconnect, device number 2 [ 37.506562][ T15] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 37.526914][ T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.540364][ T15] usb 2-1: Product: syz [ 37.550017][ T435] F2FS-fs (loop3): invalid crc value [ 37.563528][ T15] usb 2-1: Manufacturer: syz [ 37.569932][ T15] usb 2-1: SerialNumber: syz [ 37.578936][ T15] usb 2-1: config 0 descriptor?? [ 37.610368][ T435] F2FS-fs (loop3): Found nat_bits in checkpoint [ 37.621477][ T277] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 74: comm syz-executor: path /7/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 37.644272][ T277] EXT4-fs error (device loop0): ext4_empty_dir:3115: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 37.664750][ T435] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 37.665119][ T277] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 74: comm syz-executor: path /7/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 37.720732][ T277] EXT4-fs error (device loop0): ext4_empty_dir:3115: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 37.741436][ T277] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 74: comm syz-executor: path /7/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 37.785209][ T277] EXT4-fs error (device loop0): ext4_empty_dir:3115: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 37.805679][ T277] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 74: comm syz-executor: path /7/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 37.827940][ T277] EXT4-fs error (device loop0): ext4_empty_dir:3115: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 37.848246][ T277] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 74: comm syz-executor: path /7/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 37.883596][ T15] r8152 2-1:0.0: Unknown version 0x0000 [ 37.983872][ T447] attempt to access beyond end of device [ 37.983872][ T447] loop3: rw=2049, want=45104, limit=40427 [ 38.127164][ T448] device wireguard0 entered promiscuous mode [ 38.225451][ T20] usb 2-1: USB disconnect, device number 3 [ 38.330288][ T276] attempt to access beyond end of device [ 38.330288][ T276] loop3: rw=2049, want=40976, limit=40427 [ 38.727591][ T458] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.735446][ T458] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.754223][ T458] device bridge_slave_0 entered promiscuous mode [ 38.754433][ T453] EXT4-fs (loop4): Test dummy encryption mode enabled [ 38.761437][ T458] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.774622][ T458] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.782303][ T458] device bridge_slave_1 entered promiscuous mode [ 38.804627][ T453] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.30: inode #1: comm syz.4.30: iget: illegal inode # [ 38.837578][ T453] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.30: error while reading EA inode 1 err=-117 [ 38.851422][ T453] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.30: inode #1: comm syz.4.30: iget: illegal inode # [ 38.853381][ T458] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.864840][ T453] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.30: error while reading EA inode 1 err=-117 [ 38.871304][ T458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.884076][ T453] EXT4-fs (loop4): 1 orphan inode deleted [ 38.890587][ T458] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.896736][ T453] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,discard,norecovery,noinit_itable,test_dummy_encryption,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,jqfmt=vfsold,dioread_lock,noblock_validity,nouid32,,errors=continue [ 38.903245][ T458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.037765][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.047306][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.398497][ T466] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.33: Invalid block bitmap block 0 in block_group 0 [ 39.414526][ T466] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.33: Failed to acquire dquot type 0 [ 39.426899][ T466] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.33: Freeing blocks not in datazone - block = 0, count = 4096 [ 39.441138][ T466] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.33: Invalid inode bitmap blk 0 in block_group 0 [ 39.454231][ T466] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 39.463273][ T466] EXT4-fs (loop3): 1 orphan inode deleted [ 39.469101][ T466] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 39.545254][ T419] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:4: Failed to release dquot type 0 [ 40.417627][ T471] Zero length message leads to an empty skb [ 40.430676][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.449402][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.488575][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.500991][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.509288][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.516374][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.524073][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.532567][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.541042][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.548120][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.562623][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.575778][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.591837][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.607230][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.697142][ T49] device bridge_slave_1 left promiscuous mode [ 40.707790][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.852800][ T49] device bridge_slave_0 left promiscuous mode [ 40.859057][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.867246][ T49] device veth1_macvtap left promiscuous mode [ 40.873308][ T49] device veth0_vlan left promiscuous mode [ 40.987996][ T482] cgroup: syz.3.38 (482) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 41.004298][ T482] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 41.020941][ T458] device veth0_vlan entered promiscuous mode [ 41.030959][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.040620][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.049429][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.058671][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.072649][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.082210][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.375776][ T24] kauditd_printk_skb: 24 callbacks suppressed [ 41.375795][ T24] audit: type=1400 audit(1752106893.220:207): avc: denied { create } for pid=478 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 41.383615][ T473] tipc: Started in network mode [ 41.407251][ T485] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.407260][ T485] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 41.428768][ T485] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 41.433763][ T473] tipc: Own node identity 123313324388, cluster identity 4711 [ 41.461523][ T473] tipc: Enabled bearer , priority 0 [ 41.478385][ T489] EXT4-fs (loop2): Test dummy encryption mode enabled [ 41.483315][ T485] exFAT-fs (loop3): hint_cluster is invalid (17) [ 41.495430][ T489] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,usrjquota=,,errors=continue [ 41.509076][ T489] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.541501][ T483] device syzkaller0 entered promiscuous mode [ 41.551734][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.560335][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.570263][ T458] device veth1_macvtap entered promiscuous mode [ 41.583564][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.591302][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.598156][ T473] erofs: (device loop1): mounted with root inode @ nid 36. [ 41.600520][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.623290][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.626830][ T473] erofs: (device loop1): init_inode_xattrs: xattr_isize 12 of nid 36 is not supported yet [ 41.638738][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.641649][ T473] SELinux: (dev loop1, type erofs) has no security xattr handler [ 41.668412][ T496] netlink: 'syz.3.41': attribute type 27 has an invalid length. [ 41.686621][ T496] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.693857][ T496] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.740941][ T498] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.748077][ T498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.761978][ T498] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.769095][ T498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.807851][ T498] device veth0_vlan left promiscuous mode [ 41.814263][ T498] device veth0_vlan entered promiscuous mode [ 41.834645][ T502] 9pnet: Insufficient options for proto=fd [ 41.835519][ T498] device veth1_macvtap left promiscuous mode [ 41.847564][ T498] device veth1_macvtap entered promiscuous mode [ 41.903617][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.920173][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.931168][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.942708][ T504] 9pnet: Insufficient options for proto=fd [ 42.009668][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.018312][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.026990][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.035864][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.044461][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.058546][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.083386][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.094093][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.106898][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 42.117178][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.127870][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 42.137946][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.147847][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.289419][ T507] FAT-fs (loop4): Directory bread(block 64) failed [ 42.304345][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.360362][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.378576][ T507] FAT-fs (loop4): Directory bread(block 65) failed [ 42.409920][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.436622][ T507] FAT-fs (loop4): Directory bread(block 66) failed [ 42.508339][ T509] FAT-fs (loop5): Directory bread(block 64) failed [ 42.515121][ T509] FAT-fs (loop5): Directory bread(block 65) failed [ 42.522261][ T509] FAT-fs (loop5): Directory bread(block 66) failed [ 42.529047][ T509] FAT-fs (loop5): Directory bread(block 67) failed [ 42.536197][ T509] FAT-fs (loop5): Directory bread(block 68) failed [ 42.542898][ T509] FAT-fs (loop5): Directory bread(block 69) failed [ 42.550162][ T509] FAT-fs (loop5): Directory bread(block 70) failed [ 42.556872][ T509] FAT-fs (loop5): Directory bread(block 71) failed [ 42.563901][ T509] FAT-fs (loop5): Directory bread(block 72) failed [ 42.570615][ T509] FAT-fs (loop5): Directory bread(block 73) failed [ 42.964959][ T15] tipc: 32-bit node address hash set to 3213bb51 [ 43.006672][ T507] FAT-fs (loop4): Directory bread(block 67) failed [ 43.022463][ T469] tipc: Resetting bearer [ 43.040133][ T469] tipc: Disabling bearer [ 43.054231][ T507] FAT-fs (loop4): Directory bread(block 68) failed [ 43.061310][ T24] audit: type=1326 audit(1752106895.110:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=469 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394ba25929 code=0x7fc00000 [ 43.084613][ T507] FAT-fs (loop4): Directory bread(block 69) failed [ 43.092101][ T507] FAT-fs (loop4): Directory bread(block 70) failed [ 43.112571][ T507] FAT-fs (loop4): Directory bread(block 71) failed [ 43.185560][ T507] FAT-fs (loop4): Directory bread(block 72) failed [ 43.192172][ T507] FAT-fs (loop4): Directory bread(block 73) failed [ 43.235842][ T501] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 43.260590][ T501] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 43.270060][ T24] audit: type=1400 audit(1752106895.320:209): avc: denied { mounton } for pid=518 comm="syz.5.45" path="/1/bus" dev="incremental-fs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.298438][ T501] F2FS-fs (loop2): invalid crc value [ 43.334540][ T501] F2FS-fs (loop2): Found nat_bits in checkpoint [ 43.578396][ T527] EXT4-fs (loop3): Test dummy encryption mode enabled [ 43.593537][ T415] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 43.614762][ T501] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 43.622561][ T527] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,usrjquota=,,errors=continue [ 43.634871][ T501] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 43.664132][ T527] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.741869][ T24] audit: type=1400 audit(1752106895.790:210): avc: denied { append } for pid=518 comm="syz.5.45" name="ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.847888][ T24] audit: type=1326 audit(1752106895.900:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=536 comm="syz.3.49" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3215eb4929 code=0x0 [ 43.913525][ T415] usb 2-1: Using ep0 maxpacket: 16 [ 44.002060][ T24] audit: type=1400 audit(1752106896.050:212): avc: denied { rename } for pid=500 comm="syz.2.42" name="file0" dev="loop2" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.025369][ T538] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.037435][ T501] attempt to access beyond end of device [ 44.037435][ T501] loop2: rw=2049, want=40968, limit=40427 [ 44.053578][ T415] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 44.071758][ T415] usb 2-1: config 0 has no interface number 0 [ 44.078008][ T415] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.083076][ T538] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 44.098800][ T415] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.108658][ T415] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 44.117807][ T415] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.126849][ T415] usb 2-1: config 0 descriptor?? [ 44.133720][ T538] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 44.150144][ T419] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 44.169948][ T419] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 44.197845][ T538] exFAT-fs (loop3): hint_cluster is invalid (17) [ 44.285206][ T543] EXT4-fs (loop4): Test dummy encryption mode enabled [ 44.315640][ T543] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,usrjquota=,,errors=continue [ 44.327570][ T543] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.395046][ T24] audit: type=1326 audit(1752106896.450:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=546 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05d6a0929 code=0x7ffc0000 [ 44.418291][ T24] audit: type=1326 audit(1752106896.450:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=546 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05d6a0929 code=0x7ffc0000 [ 44.452186][ T24] audit: type=1326 audit(1752106896.450:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=546 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd05d6a0929 code=0x7ffc0000 [ 44.475825][ T24] audit: type=1326 audit(1752106896.450:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=546 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05d6a0929 code=0x7ffc0000 [ 44.561539][ T554] device wireguard0 entered promiscuous mode [ 44.572095][ T552] device wireguard1 entered promiscuous mode [ 44.595839][ T558] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 44.611528][ T558] bridge: RTM_NEWNEIGH with invalid ether address [ 45.028228][ T566] EXT4-fs (loop5): Test dummy encryption mode enabled [ 45.036579][ T415] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0004/input/input8 [ 45.062063][ T566] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,usrjquota=,,errors=continue [ 45.070840][ T415] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0004/input/input9 [ 45.087909][ T415] uclogic 0003:28BD:0071.0004: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 45.094220][ T566] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.261875][ T296] usb 2-1: USB disconnect, device number 4 [ 45.702700][ T582] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.61: Invalid block bitmap block 0 in block_group 0 [ 45.717022][ T582] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.61: Failed to acquire dquot type 0 [ 45.729340][ T582] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.61: Freeing blocks not in datazone - block = 0, count = 4096 [ 45.743589][ T582] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.61: Invalid inode bitmap blk 0 in block_group 0 [ 45.756557][ T337] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 45.768441][ T582] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 45.779893][ T582] EXT4-fs (loop3): 1 orphan inode deleted [ 45.785726][ T582] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 46.446549][ T596] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 46.458305][ T24] kauditd_printk_skb: 179 callbacks suppressed [ 46.458316][ T24] audit: type=1400 audit(1752106898.500:393): avc: denied { map_create } for pid=586 comm="syz.2.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 46.583630][ T24] audit: type=1400 audit(1752106898.500:394): avc: denied { perfmon } for pid=586 comm="syz.2.64" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.608397][ T597] EXT4-fs (loop4): Test dummy encryption mode enabled [ 46.641133][ T24] audit: type=1400 audit(1752106898.500:395): avc: denied { map_read map_write } for pid=586 comm="syz.2.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 46.661824][ T24] audit: type=1400 audit(1752106898.500:396): avc: denied { prog_load } for pid=586 comm="syz.2.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 46.681002][ T24] audit: type=1400 audit(1752106898.500:397): avc: denied { bpf } for pid=586 comm="syz.2.64" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.701659][ T24] audit: type=1400 audit(1752106898.500:398): avc: denied { relabelfrom } for pid=586 comm="syz.2.64" name="NETLINK" dev="sockfs" ino=16088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 46.732747][ T597] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.67: inode #1: comm syz.4.67: iget: illegal inode # [ 46.746900][ T24] audit: type=1400 audit(1752106898.500:399): avc: denied { mac_admin } for pid=586 comm="syz.2.64" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.775747][ T24] audit: type=1400 audit(1752106898.510:400): avc: denied { relabelto } for pid=586 comm="syz.2.64" name="NETLINK" dev="sockfs" ino=16088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 46.790826][ T597] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.67: error while reading EA inode 1 err=-117 [ 46.823545][ T24] audit: type=1400 audit(1752106898.510:401): avc: denied { create } for pid=586 comm="syz.2.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.846186][ T24] audit: type=1400 audit(1752106898.510:402): avc: denied { write } for pid=586 comm="syz.2.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.846315][ T597] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.67: inode #1: comm syz.4.67: iget: illegal inode # [ 46.925868][ T597] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.67: error while reading EA inode 1 err=-117 [ 46.990479][ T597] EXT4-fs (loop4): 1 orphan inode deleted [ 46.996863][ T597] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,discard,norecovery,noinit_itable,test_dummy_encryption,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,jqfmt=vfsold,dioread_lock,noblock_validity,nouid32,,errors=continue [ 47.195703][ T597] syz.4.67[597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.195785][ T597] syz.4.67[597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.294878][ T615] syz.5.72[615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.374405][ T615] syz.5.72[615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.438199][ T622] syz.5.72[622] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.464416][ T622] syz.5.72[622] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.511431][ T624] EXT4-fs (loop2): Test dummy encryption mode enabled [ 47.650563][ T624] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,usrjquota=,,errors=continue [ 47.670678][ T624] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.289701][ T646] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.80: Invalid block bitmap block 0 in block_group 0 [ 48.304306][ T646] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.80: Failed to acquire dquot type 0 [ 48.316619][ T646] EXT4-fs error (device loop5): ext4_free_blocks:5685: comm syz.5.80: Freeing blocks not in datazone - block = 0, count = 4096 [ 48.330802][ T646] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.80: Invalid inode bitmap blk 0 in block_group 0 [ 48.343816][ T49] EXT4-fs error (device loop5): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 48.355668][ T646] EXT4-fs error (device loop5) in ext4_free_inode:360: Corrupt filesystem [ 48.364797][ T646] EXT4-fs (loop5): 1 orphan inode deleted [ 48.370594][ T646] EXT4-fs (loop5): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 49.231700][ T656] xt_hashlimit: max too large, truncated to 1048576 [ 49.270028][ T656] overlayfs: './file0' not a directory [ 49.585183][ T305] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 49.953622][ T305] usb 2-1: Using ep0 maxpacket: 8 [ 50.103880][ T305] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 50.732356][ T305] usb 2-1: config 1 has no interface number 1 [ 50.739035][ T305] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 50.783507][ C0] sched: RT throttling activated [ 50.792678][ T652] F2FS-fs (loop2): invalid crc value [ 50.817037][ T668] netlink: 44 bytes leftover after parsing attributes in process `syz.5.87'. [ 50.827045][ T652] F2FS-fs (loop2): Found nat_bits in checkpoint [ 50.933742][ T305] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 50.959746][ T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.991014][ T652] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 51.008848][ T305] usb 2-1: Product: syz [ 51.013065][ T305] usb 2-1: Manufacturer: ␔ر줌ꯗꫤ諹ꀌ쐂郐痲～zꀐꞥ標߮飰泺欵鼗翅⓸䈎洶⯏镬ꏀꈪఈᔠ뢊譸뚙ꀩ槸쥶实ꇎ導⡺刞쨝瞽 [ 51.065336][ T305] usb 2-1: SerialNumber: syz [ 51.074722][ T667] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.157287][ T667] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.86: invalid indirect mapped block 4294967295 (level 1) [ 51.219957][ T667] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.86: invalid indirect mapped block 4294967295 (level 1) [ 51.250315][ T667] EXT4-fs (loop4): 2 truncates cleaned up [ 51.265396][ T683] device wireguard0 entered promiscuous mode [ 51.266989][ T667] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue [ 51.295320][ T684] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 127766) [ 51.421409][ T279] attempt to access beyond end of device [ 51.421409][ T279] loop2: rw=2049, want=40976, limit=40427 [ 51.477881][ T24] kauditd_printk_skb: 464 callbacks suppressed [ 51.477892][ T24] audit: type=1400 audit(1752106903.530:864): avc: denied { create } for pid=690 comm="syz.5.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.562043][ T24] audit: type=1400 audit(1752106903.530:865): avc: denied { setopt } for pid=690 comm="syz.5.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.614144][ T696] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.627361][ T24] audit: type=1400 audit(1752106903.530:866): avc: denied { create } for pid=690 comm="syz.5.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.636851][ T696] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 51.659803][ T696] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 51.673008][ T696] audit: audit_backlog=65 > audit_backlog_limit=64 [ 51.673796][ T305] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 51.679610][ T696] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 51.694115][ T696] audit: backlog limit exceeded [ 51.699619][ T696] audit: audit_backlog=65 > audit_backlog_limit=64 [ 51.703990][ T24] audit: type=1400 audit(1752106903.540:867): avc: denied { read write } for pid=278 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 51.706292][ T696] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 51.706298][ T696] audit: backlog limit exceeded [ 51.732975][ T696] exFAT-fs (loop5): hint_cluster is invalid (17) [ 51.758350][ T305] usb 2-1: USB disconnect, device number 5 [ 51.806296][ T697] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 51.885305][ T278] EXT4-fs error (device loop4): ext4_read_inline_dir:1596: inode #12: block 9: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 51.958566][ T278] EXT4-fs error (device loop4): ext4_read_inline_dir:1596: inode #12: block 9: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 51.993954][ T705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.100'. [ 52.021398][ T278] EXT4-fs error (device loop4): empty_inline_dir:1850: inode #12: block 9: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0 [ 52.022631][ T705] 9pnet: Insufficient options for proto=fd [ 52.043329][ T278] EXT4-fs warning (device loop4): empty_inline_dir:1857: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 52.060787][ T278] EXT4-fs error (device loop4): ext4_read_inline_dir:1596: inode #12: block 9: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 52.164292][ T278] EXT4-fs error (device loop4): ext4_read_inline_dir:1596: inode #12: block 9: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 52.215846][ T278] EXT4-fs error (device loop4): empty_inline_dir:1850: inode #12: block 9: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0 [ 52.264532][ T712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'. [ 52.267634][ T278] EXT4-fs warning (device loop4): empty_inline_dir:1857: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 52.287697][ T278] EXT4-fs error (device loop4): ext4_read_inline_dir:1596: inode #12: block 9: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 52.308931][ T278] EXT4-fs error (device loop4): ext4_read_inline_dir:1596: inode #12: block 9: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 52.332711][ T278] EXT4-fs error (device loop4): empty_inline_dir:1850: inode #12: block 9: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0 [ 52.351633][ T278] EXT4-fs warning (device loop4): empty_inline_dir:1857: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 52.366774][ T712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'. [ 52.379483][ T278] EXT4-fs error (device loop4): ext4_read_inline_dir:1596: inode #12: block 9: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 52.403147][ T278] EXT4-fs warning (device loop4): empty_inline_dir:1857: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 52.419312][ T278] EXT4-fs warning (device loop4): empty_inline_dir:1857: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 52.445237][ T278] EXT4-fs warning (device loop4): empty_inline_dir:1857: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 52.460913][ T278] EXT4-fs warning (device loop4): empty_inline_dir:1857: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 52.477744][ T278] EXT4-fs warning (device loop4): empty_inline_dir:1857: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 52.500483][ T278] EXT4-fs warning (device loop4): empty_inline_dir:1857: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 52.524213][ T278] EXT4-fs warning (device loop4): empty_inline_dir:1857: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 52.531851][ T730] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,delalloc,errors=remount-ro, [ 52.960209][ T743] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.967871][ T743] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.975422][ T743] device bridge_slave_0 entered promiscuous mode [ 52.983037][ T743] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.990155][ T743] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.003864][ T743] device bridge_slave_1 entered promiscuous mode [ 53.073106][ T748] device bond_slave_1 entered promiscuous mode [ 53.080189][ T748] device veth0_to_bridge entered promiscuous mode [ 53.087527][ T747] device veth0_to_bridge left promiscuous mode [ 53.093930][ T747] device bond_slave_1 left promiscuous mode [ 53.115012][ T743] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.122099][ T743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.129431][ T743] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.136516][ T743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.176045][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.208399][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.219290][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.231851][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.240263][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.281167][ T754] capability: warning: `syz.2.114' uses deprecated v2 capabilities in a way that may be insecure [ 53.314797][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.332030][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.355951][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.374190][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.401714][ T743] device veth0_vlan entered promiscuous mode [ 53.423186][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.450302][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.496057][ T743] device veth1_macvtap entered promiscuous mode [ 54.936138][ T762] EXT4-fs (loop2): Mount option "nodioread_nolock" incompatible with ext3 [ 54.954612][ T768] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.118: Invalid block bitmap block 0 in block_group 0 [ 54.969172][ T768] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.118: Failed to acquire dquot type 0 [ 54.981685][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.990351][ T768] EXT4-fs error (device loop5): ext4_free_blocks:5685: comm syz.5.118: Freeing blocks not in datazone - block = 0, count = 4096 [ 55.009910][ T768] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.118: Invalid inode bitmap blk 0 in block_group 0 [ 55.023123][ T768] EXT4-fs error (device loop5) in ext4_free_inode:360: Corrupt filesystem [ 55.032800][ T49] EXT4-fs error (device loop5): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 55.049067][ T768] EXT4-fs (loop5): 1 orphan inode deleted [ 55.054922][ T768] EXT4-fs (loop5): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 55.397914][ T7] device bridge_slave_1 left promiscuous mode [ 55.404702][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.428403][ T7] device bridge_slave_0 left promiscuous mode [ 55.449493][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.475271][ T7] device veth1_macvtap left promiscuous mode [ 55.558796][ T7] device veth0_vlan left promiscuous mode [ 55.895053][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.910019][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.126609][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.209412][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.429639][ T796] EXT4-fs (loop6): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,delalloc,errors=remount-ro, [ 56.524105][ T24] kauditd_printk_skb: 589 callbacks suppressed [ 56.524123][ T24] audit: type=1400 audit(1752106908.580:1430): avc: denied { map_create } for pid=795 comm="syz.6.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.605216][ T24] audit: type=1400 audit(1752106908.580:1431): avc: denied { bpf } for pid=795 comm="syz.6.121" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.625708][ T24] audit: type=1400 audit(1752106908.580:1432): avc: denied { map_read map_write } for pid=795 comm="syz.6.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.659727][ T807] FAULT_INJECTION: forcing a failure. [ 56.659727][ T807] name failslab, interval 1, probability 0, space 0, times 1 [ 56.803412][ T24] audit: type=1400 audit(1752106908.580:1433): avc: denied { prog_load } for pid=795 comm="syz.6.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.819398][ T807] CPU: 1 PID: 807 Comm: syz.5.130 Not tainted 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 56.832290][ T807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.842384][ T807] Call Trace: [ 56.845708][ T807] __dump_stack+0x21/0x24 [ 56.850051][ T807] dump_stack_lvl+0x169/0x1d8 [ 56.854735][ T807] ? show_regs_print_info+0x18/0x18 [ 56.859930][ T807] dump_stack+0x15/0x1c [ 56.864083][ T807] should_fail+0x3c1/0x510 [ 56.868497][ T807] ? avc_alloc_node+0x7e/0x320 [ 56.873253][ T807] __should_failslab+0xa4/0xe0 [ 56.878012][ T807] should_failslab+0x9/0x20 [ 56.882513][ T807] kmem_cache_alloc+0x3d/0x2e0 [ 56.887271][ T807] ? stack_trace_save+0xe0/0xe0 [ 56.892121][ T807] avc_alloc_node+0x7e/0x320 [ 56.896719][ T807] ? stack_trace_save+0x98/0xe0 [ 56.901594][ T807] ? avc_xperms_free+0x270/0x270 [ 56.906526][ T807] avc_update_node+0x50/0x720 [ 56.911196][ T807] ? __kasan_slab_free+0x11/0x20 [ 56.916135][ T807] ? kmem_cache_free+0x100/0x2d0 [ 56.921155][ T807] ? putname+0xfe/0x150 [ 56.925303][ T807] ? do_sys_openat2+0x207/0x6d0 [ 56.930237][ T807] ? __x64_sys_openat+0x136/0x160 [ 56.935257][ T807] ? do_syscall_64+0x31/0x40 [ 56.939941][ T807] avc_denied+0x132/0x1b0 [ 56.944263][ T807] avc_has_perm+0x2fb/0x360 [ 56.948789][ T807] ? avc_has_perm_noaudit+0x240/0x240 [ 56.954301][ T807] selinux_socket_setsockopt+0x1ff/0x300 [ 56.959931][ T807] ? selinux_socket_getsockopt+0x2e0/0x2e0 [ 56.965731][ T807] ? __fget_files+0x2c4/0x320 [ 56.970398][ T807] security_socket_setsockopt+0x72/0xa0 [ 56.975938][ T807] __sys_setsockopt+0x18c/0x460 [ 56.980777][ T807] ? __ia32_sys_recv+0xb0/0xb0 [ 56.985529][ T807] ? ksys_write+0x1eb/0x240 [ 56.990023][ T807] ? fpu__clear_all+0x20/0x20 [ 56.994694][ T807] __x64_sys_setsockopt+0xbf/0xd0 [ 56.999720][ T807] do_syscall_64+0x31/0x40 [ 57.004131][ T807] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 57.010041][ T807] RIP: 0033:0x7f573a5ba929 [ 57.014453][ T807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.034059][ T807] RSP: 002b:00007f5738c23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 57.042487][ T807] RAX: ffffffffffffffda RBX: 00007f573a7e1fa0 RCX: 00007f573a5ba929 [ 57.050453][ T807] RDX: 0000000000000085 RSI: 000000000000010f RDI: 0000000000000003 [ 57.058424][ T807] RBP: 00007f5738c23090 R08: 0000000000000000 R09: 0000000000000000 [ 57.066389][ T807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.074351][ T807] R13: 0000000000000000 R14: 00007f573a7e1fa0 R15: 00007ffe17634c98 [ 57.136026][ T24] audit: type=1400 audit(1752106908.580:1434): avc: denied { perfmon } for pid=795 comm="syz.6.121" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.182844][ T815] audit: audit_backlog=65 > audit_backlog_limit=64 [ 57.198266][ T458] audit: audit_backlog=65 > audit_backlog_limit=64 [ 57.214013][ T816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 57.230757][ T24] audit: type=1400 audit(1752106908.610:1435): avc: denied { read write } for pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.243543][ T458] audit: audit_lost=11 audit_rate_limit=0 audit_backlog_limit=64 [ 57.273886][ T812] device wireguard0 entered promiscuous mode [ 57.602948][ T821] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,delalloc,errors=remount-ro, [ 57.759231][ T825] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 57.778657][ T830] device syzkaller0 entered promiscuous mode [ 58.529917][ T415] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 59.042386][ T415] usb 4-1: Using ep0 maxpacket: 16 [ 59.134008][ T858] netlink: 96 bytes leftover after parsing attributes in process `syz.1.147'. [ 59.173006][ T415] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 59.186933][ T415] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.216197][ T415] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 59.308613][ T848] F2FS-fs (loop2): invalid crc value [ 59.361750][ T848] F2FS-fs (loop2): Found nat_bits in checkpoint [ 59.396973][ T415] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 59.406210][ T415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.416155][ T415] usb 4-1: Product: syz [ 59.420719][ T415] usb 4-1: Manufacturer: syz [ 59.426090][ T415] usb 4-1: SerialNumber: syz [ 59.477130][ T848] F2FS-fs (loop2): Start checkpoint disabled! [ 59.490708][ T848] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 59.588689][ T879] binfmt_misc: register: failed to install interpreter file ./file2 [ 59.603867][ T872] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 59.659072][ T872] EXT4-fs (loop5): 1 truncate cleaned up [ 59.664753][ T872] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue [ 59.862676][ T651] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 61.261054][ T415] usb 4-1: 0:2 : does not exist [ 61.316197][ T891] FAT-fs (loop5): bogus number of FAT sectors [ 61.328515][ T891] FAT-fs (loop5): Can't find a valid FAT filesystem [ 61.346470][ T24] kauditd_printk_skb: 449 callbacks suppressed [ 61.346483][ T24] audit: type=1400 audit(1752106913.592:1880): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 61.385007][ T24] audit: type=1400 audit(1752106913.624:1881): avc: denied { read write } for pid=743 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.396013][ T49] attempt to access beyond end of device [ 61.396013][ T49] loop2: rw=2049, want=40976, limit=40427 [ 61.410222][ T24] audit: type=1400 audit(1752106913.624:1882): avc: denied { open } for pid=743 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.420622][ T651] usb 3-1: device descriptor read/all, error -71 [ 61.452992][ T24] audit: type=1400 audit(1752106913.635:1883): avc: denied { ioctl } for pid=890 comm="syz.5.154" path="/dev/loop5" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.491086][ T891] xt_NFQUEUE: number of total queues is 0 [ 61.549992][ T415] usb 4-1: USB disconnect, device number 2 [ 61.635514][ T24] audit: type=1400 audit(1752106913.635:1884): avc: denied { read write } for pid=276 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.662911][ T897] SELinux: failed to load policy [ 61.675274][ T903] syz.1.162[903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.675340][ T903] syz.1.162[903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.714320][ T24] audit: type=1400 audit(1752106913.635:1885): avc: denied { read write open } for pid=276 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.755300][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 61.780140][ T24] audit: type=1400 audit(1752106913.732:1886): avc: denied { ioctl } for pid=743 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.809036][ T24] audit: type=1400 audit(1752106913.742:1887): avc: denied { ioctl } for pid=276 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.837204][ T906] audit: audit_backlog=65 > audit_backlog_limit=64 [ 61.844268][ T906] audit: audit_lost=14 audit_rate_limit=0 audit_backlog_limit=64 [ 61.915081][ T913] overlayfs: './file1' not a directory [ 61.936593][ T913] incfs_lookup_dentry err:-5 [ 61.941220][ T913] incfs: Can't find or create .index dir in ./file0 [ 61.949276][ T913] incfs: mount failed -5 [ 61.982194][ T909] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,delalloc,errors=remount-ro, [ 62.028124][ T899] F2FS-fs (loop3): invalid crc value [ 62.034393][ T353] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 62.063813][ T899] F2FS-fs (loop3): Found nat_bits in checkpoint [ 62.128616][ T899] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 62.244912][ T899] attempt to access beyond end of device [ 62.244912][ T899] loop3: rw=2049, want=45104, limit=40427 [ 62.258604][ T651] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 62.267057][ T353] usb 2-1: Using ep0 maxpacket: 8 [ 62.313779][ T353] usb 2-1: too many configurations: 209, using maximum allowed: 8 [ 62.435445][ T353] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 62.447757][ T353] usb 2-1: can't read configurations, error -61 [ 62.677585][ T353] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 62.886954][ T930] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.168: Invalid block bitmap block 0 in block_group 0 [ 62.902019][ T930] EXT4-fs error (device loop6): ext4_acquire_dquot:6226: comm syz.6.168: Failed to acquire dquot type 0 [ 62.915617][ T930] EXT4-fs error (device loop6): ext4_free_blocks:5685: comm syz.6.168: Freeing blocks not in datazone - block = 0, count = 4096 [ 62.930540][ T930] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.168: Invalid inode bitmap blk 0 in block_group 0 [ 62.943960][ T930] EXT4-fs error (device loop6) in ext4_free_inode:360: Corrupt filesystem [ 62.953398][ T930] EXT4-fs (loop6): 1 orphan inode deleted [ 62.959303][ T930] EXT4-fs (loop6): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 63.623588][ T353] usb 2-1: Using ep0 maxpacket: 8 [ 63.643857][ T7] EXT4-fs error (device loop6): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 63.678024][ T353] usb 2-1: too many configurations: 209, using maximum allowed: 8 [ 63.702549][ T15] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 63.803023][ T651] usb 3-1: not running at top speed; connect to a high speed hub [ 63.879867][ T651] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.889171][ T353] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 63.890103][ T651] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 63.897709][ T353] usb 2-1: can't read configurations, error -61 [ 63.918864][ T353] usb usb2-port1: attempt power cycle [ 63.959126][ T945] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.970087][ T945] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 63.981602][ T945] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 64.038463][ T15] usb 4-1: device descriptor read/64, error -71 [ 64.210427][ T945] bridge0: port 3(syz_tun) entered blocking state [ 64.217025][ T945] bridge0: port 3(syz_tun) entered disabled state [ 64.223909][ T945] device syz_tun entered promiscuous mode [ 64.229929][ T945] bridge0: port 3(syz_tun) entered blocking state [ 64.236380][ T945] bridge0: port 3(syz_tun) entered forwarding state [ 64.276437][ T945] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 64.299323][ T651] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.318372][ T651] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.326401][ T651] usb 3-1: Product: syz [ 64.340776][ T651] usb 3-1: Manufacturer: syz [ 64.345405][ T651] usb 3-1: SerialNumber: syz [ 64.374422][ T651] usb 3-1: config 0 descriptor?? [ 65.007582][ T15] usb 4-1: device descriptor read/64, error -71 [ 65.642455][ T414] usb 3-1: USB disconnect, device number 4 [ 65.697596][ T15] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 65.762491][ T961] 9pnet: Insufficient options for proto=fd [ 65.863034][ T963] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 66.031787][ T24] kauditd_printk_skb: 368 callbacks suppressed [ 66.031801][ T24] audit: type=1400 audit(2098583256.612:2243): avc: denied { read write } for pid=959 comm="syz.5.176" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.165217][ T24] audit: type=1400 audit(2098583256.644:2244): avc: denied { open } for pid=959 comm="syz.5.176" path="/dev/loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.059846][ T24] audit: type=1400 audit(2098583256.762:2245): avc: denied { prog_load } for pid=962 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 67.081090][ T24] audit: type=1400 audit(2098583256.837:2246): avc: denied { name_bind } for pid=962 comm="syz.3.179" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 67.102710][ T24] audit: type=1400 audit(2098583256.848:2247): avc: denied { node_bind } for pid=962 comm="syz.3.179" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 67.124248][ T24] audit: type=1400 audit(2098583257.170:2248): avc: denied { prog_load } for pid=962 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 67.147141][ T24] audit: type=1400 audit(2098583257.202:2249): avc: denied { remount } for pid=962 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 67.167834][ T24] audit: type=1400 audit(2098583257.212:2250): avc: denied { write } for pid=962 comm="syz.3.179" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.203542][ T24] audit: type=1400 audit(2098583257.212:2251): avc: denied { add_name } for pid=962 comm="syz.3.179" name="cpuacct.usage_all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.226099][ T24] audit: type=1400 audit(2098583257.212:2252): avc: denied { create } for pid=962 comm="syz.3.179" name="cpuacct.usage_all" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.302400][ T966] FAT-fs (loop6): Directory bread(block 64) failed [ 67.315184][ T960] netlink: 124 bytes leftover after parsing attributes in process `syz.5.176'. [ 67.338410][ T966] FAT-fs (loop6): Directory bread(block 65) failed [ 67.345008][ T966] FAT-fs (loop6): Directory bread(block 66) failed [ 67.364284][ T960] netlink: 16 bytes leftover after parsing attributes in process `syz.5.176'. [ 67.379922][ T966] FAT-fs (loop6): Directory bread(block 67) failed [ 67.394794][ T966] FAT-fs (loop6): Directory bread(block 68) failed [ 67.411715][ T960] tipc: Started in network mode [ 67.428117][ T960] tipc: Own node identity a, cluster identity 4711 [ 67.430931][ T986] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.184: Failed to acquire dquot type 0 [ 67.435738][ T966] FAT-fs (loop6): Directory bread(block 69) failed [ 67.452893][ T960] tipc: 32-bit node address hash set to a [ 67.458718][ T960] tipc: Cannot configure node identity twice [ 67.466851][ T966] FAT-fs (loop6): Directory bread(block 70) failed [ 67.475845][ T966] FAT-fs (loop6): Directory bread(block 71) failed [ 67.482960][ T966] FAT-fs (loop6): Directory bread(block 72) failed [ 67.485679][ T986] EXT4-fs error (device loop2): mb_free_blocks:1524: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 67.499602][ T966] FAT-fs (loop6): Directory bread(block 73) failed [ 67.514985][ T986] EXT4-fs error (device loop2) in ext4_do_update_inode:5335: error 27 [ 67.545377][ T986] EXT4-fs error (device loop2): ext4_dirty_inode:6142: inode #13: comm syz.2.184: mark_inode_dirty error [ 67.557035][ T986] EXT4-fs error (device loop2) in ext4_do_update_inode:5335: error 27 [ 67.565464][ T986] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #13: comm syz.2.184: mark_inode_dirty error [ 67.576903][ T986] EXT4-fs error (device loop2) in ext4_do_update_inode:5335: error 27 [ 67.588564][ T986] EXT4-fs error (device loop2) in ext4_orphan_del:3292: error 27 [ 67.596518][ T986] EXT4-fs error (device loop2) in ext4_do_update_inode:5335: error 27 [ 67.596746][ T995] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.605163][ T986] EXT4-fs error (device loop2): ext4_truncate:4390: inode #13: comm syz.2.184: mark_inode_dirty error [ 67.639921][ T986] EXT4-fs error (device loop2) in ext4_orphan_cleanup:3108: error 27 [ 67.648777][ T995] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 67.660691][ T986] EXT4-fs (loop2): 1 truncate cleaned up [ 67.676255][ T986] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 67.692791][ T995] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 67.792013][ T986] EXT4-fs (loop2): re-mounted. Opts: (null) [ 67.813223][ T986] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 67.842913][ T986] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.184: Failed to acquire dquot type 0 [ 67.855897][ T986] EXT4-fs (loop2): re-mounted. Opts: [ 70.321398][ T1015] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 70.334560][ T1015] EXT4-fs (loop5): Ignoring removed bh option [ 70.355942][ T1015] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 70.396792][ T1015] EXT4-fs (loop5): 1 truncate cleaned up [ 70.413928][ T1015] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,quota,nogrpid,,errors=continue [ 70.694192][ T24] kauditd_printk_skb: 277 callbacks suppressed [ 70.694204][ T24] audit: type=1400 audit(2098583261.622:2526): avc: denied { read write } for pid=1032 comm="syz.2.189" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.726527][ T24] audit: type=1400 audit(2098583261.622:2527): avc: denied { write } for pid=1014 comm="syz.5.188" name="memory.stat" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 70.740784][ T1041] Quota error (device loop6): find_tree_dqentry: Getting block too big (64 >= 6) [ 70.749402][ T24] audit: type=1400 audit(2098583261.622:2528): avc: denied { read write open } for pid=1032 comm="syz.2.189" path="/dev/loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.760816][ T1041] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 70.784276][ T24] audit: type=1400 audit(2098583261.622:2529): avc: denied { unmount } for pid=458 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 70.794972][ T1039] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 70.812422][ T1041] EXT4-fs error (device loop6): ext4_acquire_dquot:6226: comm syz.6.196: Failed to acquire dquot type 0 [ 70.838805][ T24] audit: type=1400 audit(2098583261.654:2530): avc: denied { mounton } for pid=1038 comm="syz.3.195" path="/43/file0" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.842909][ T1041] EXT4-fs error (device loop6): mb_free_blocks:1524: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 70.861361][ T24] audit: type=1400 audit(2098583261.654:2531): avc: denied { mounton } for pid=1040 comm="syz.6.196" path="/17/file0" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.898068][ T24] audit: type=1400 audit(2098583261.654:2532): avc: denied { ioctl } for pid=1032 comm="syz.2.189" path="/dev/loop2" dev="devtmpfs" ino=117 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.923446][ T24] audit: type=1400 audit(2098583261.772:2533): avc: denied { mount } for pid=1038 comm="syz.3.195" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 70.923764][ T1041] EXT4-fs error (device loop6) in ext4_do_update_inode:5335: error 27 [ 70.974323][ T1041] EXT4-fs error (device loop6): ext4_dirty_inode:6142: inode #13: comm syz.6.196: mark_inode_dirty error [ 70.986973][ T1041] EXT4-fs error (device loop6) in ext4_do_update_inode:5335: error 27 [ 70.996056][ T1041] EXT4-fs error (device loop6): __ext4_ext_dirty:182: inode #13: comm syz.6.196: mark_inode_dirty error [ 71.007623][ T1041] EXT4-fs error (device loop6) in ext4_do_update_inode:5335: error 27 [ 71.016152][ T1041] EXT4-fs error (device loop6) in ext4_orphan_del:3292: error 27 [ 71.024402][ T1041] EXT4-fs error (device loop6) in ext4_do_update_inode:5335: error 27 [ 71.033016][ T1041] EXT4-fs error (device loop6): ext4_truncate:4390: inode #13: comm syz.6.196: mark_inode_dirty error [ 71.065651][ T1041] EXT4-fs error (device loop6) in ext4_orphan_cleanup:3108: error 27 [ 71.083103][ T1041] EXT4-fs (loop6): 1 truncate cleaned up [ 71.089829][ T1041] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 71.100094][ T1042] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 71.464609][ T1041] EXT4-fs (loop6): re-mounted. Opts: (null) [ 71.488544][ T1051] EXT4-fs (loop5): Ignoring removed nobh option [ 71.500501][ T1041] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 71.510895][ T1041] EXT4-fs error (device loop6): ext4_acquire_dquot:6226: comm syz.6.196: Failed to acquire dquot type 0 [ 71.524854][ T1051] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,grpjquota=,dioread_nolock,,errors=continue [ 71.548823][ T1041] EXT4-fs (loop6): re-mounted. Opts: [ 72.081076][ T1060] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.199: Failed to acquire dquot type 0 [ 72.114818][ T1060] EXT4-fs error (device loop2): mb_free_blocks:1524: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 72.142282][ T1060] EXT4-fs error (device loop2) in ext4_do_update_inode:5335: error 27 [ 72.160173][ T1065] device syzkaller0 entered promiscuous mode [ 72.167538][ T1060] EXT4-fs error (device loop2): ext4_dirty_inode:6142: inode #13: comm syz.2.199: mark_inode_dirty error [ 72.211276][ T1060] EXT4-fs error (device loop2) in ext4_do_update_inode:5335: error 27 [ 72.249253][ T1060] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #13: comm syz.2.199: mark_inode_dirty error [ 72.285438][ T1060] EXT4-fs error (device loop2) in ext4_do_update_inode:5335: error 27 [ 72.295722][ T1060] EXT4-fs error (device loop2) in ext4_orphan_del:3292: error 27 [ 72.311912][ T1060] EXT4-fs error (device loop2) in ext4_do_update_inode:5335: error 27 [ 72.321326][ T1060] EXT4-fs error (device loop2): ext4_truncate:4390: inode #13: comm syz.2.199: mark_inode_dirty error [ 72.333284][ T1060] EXT4-fs error (device loop2) in ext4_orphan_cleanup:3108: error 27 [ 72.341929][ T1060] EXT4-fs (loop2): 1 truncate cleaned up [ 72.341971][ T1074] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.347773][ T1060] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 72.399009][ T1074] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 72.419455][ T1074] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 72.493921][ T1060] EXT4-fs (loop2): re-mounted. Opts: (null) [ 72.515184][ T1060] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 72.541806][ T1060] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.199: Failed to acquire dquot type 0 [ 72.565523][ T1060] EXT4-fs (loop2): re-mounted. Opts: [ 73.416541][ T1087] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.500674][ T1087] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 73.528859][ T1087] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 73.864572][ T1105] xt_CT: No such helper "snmp" [ 73.908596][ T1101] EXT4-fs (loop2): filesystem is read-only [ 73.995732][ T1101] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 65280 [ 74.087679][ T1107] fuse: Bad value for 'fd' [ 74.100611][ T1107] SELinux: Context system_u:object_r:su_exec_t:s0 is not valid (left unmapped). [ 74.160479][ T5] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 75.370899][ T24] kauditd_printk_skb: 374 callbacks suppressed [ 75.370912][ T24] audit: type=1400 audit(2098583266.633:2902): avc: denied { create } for pid=1122 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.415477][ T24] audit: type=1400 audit(2098583266.643:2903): avc: denied { prog_load } for pid=1122 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 75.452158][ T24] audit: type=1400 audit(2098583266.643:2904): avc: denied { bpf } for pid=1122 comm="syz.2.217" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 75.511605][ T24] audit: type=1400 audit(2098583266.643:2905): avc: denied { perfmon } for pid=1122 comm="syz.2.217" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 75.546159][ T24] audit: type=1400 audit(2098583266.676:2906): avc: denied { bpf } for pid=1122 comm="syz.2.217" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 75.567455][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.578630][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.589029][ T5] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 75.598873][ T24] audit: type=1400 audit(2098583266.676:2907): avc: denied { prog_run } for pid=1122 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 75.618644][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.630437][ T5] usb 2-1: config 0 descriptor?? [ 75.636766][ T24] audit: type=1400 audit(2098583266.697:2908): avc: denied { create } for pid=1122 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.661700][ T24] audit: type=1400 audit(2098583266.697:2909): avc: denied { write } for pid=1122 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.683522][ T24] audit: type=1400 audit(2098583266.697:2910): avc: denied { nlmsg_write } for pid=1122 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.704682][ T24] audit: type=1400 audit(2098583266.697:2911): avc: denied { read write } for pid=743 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.811850][ T1130] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 75.842097][ T1130] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.097735][ T5] uclogic 0003:5543:0042.0005: No inputs registered, leaving [ 76.176865][ T5] uclogic 0003:5543:0042.0005: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.1-1/input0 [ 77.727800][ T1151] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.223: Invalid block bitmap block 0 in block_group 0 [ 77.741421][ T1151] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.223: Failed to acquire dquot type 0 [ 77.753746][ T1151] EXT4-fs error (device loop5): ext4_free_blocks:5685: comm syz.5.223: Freeing blocks not in datazone - block = 0, count = 4096 [ 77.767183][ T1151] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.223: Invalid inode bitmap blk 0 in block_group 0 [ 77.780135][ T1151] EXT4-fs error (device loop5) in ext4_free_inode:360: Corrupt filesystem [ 77.788797][ T1151] EXT4-fs (loop5): 1 orphan inode deleted [ 77.794538][ T1151] EXT4-fs (loop5): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 77.845549][ T7] EXT4-fs error (device loop5): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 77.973723][ T5] usb 2-1: USB disconnect, device number 9 [ 78.007527][ T1156] fido_id[1156]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 78.183891][ T1158] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.227: Failed to acquire dquot type 0 [ 78.196978][ T1158] EXT4-fs error (device loop3): mb_free_blocks:1524: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 78.219084][ T1158] EXT4-fs error (device loop3) in ext4_do_update_inode:5335: error 27 [ 78.227960][ T1158] EXT4-fs error (device loop3): ext4_dirty_inode:6142: inode #13: comm syz.3.227: mark_inode_dirty error [ 78.239755][ T1158] EXT4-fs error (device loop3) in ext4_do_update_inode:5335: error 27 [ 78.248152][ T1158] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #13: comm syz.3.227: mark_inode_dirty error [ 78.259563][ T1158] EXT4-fs error (device loop3) in ext4_do_update_inode:5335: error 27 [ 78.267937][ T1158] EXT4-fs error (device loop3) in ext4_orphan_del:3292: error 27 [ 78.277040][ T1158] EXT4-fs error (device loop3) in ext4_do_update_inode:5335: error 27 [ 78.285434][ T1158] EXT4-fs error (device loop3): ext4_truncate:4390: inode #13: comm syz.3.227: mark_inode_dirty error [ 78.296616][ T1158] EXT4-fs error (device loop3) in ext4_orphan_cleanup:3108: error 27 [ 78.317951][ T1158] EXT4-fs (loop3): 1 truncate cleaned up [ 78.323706][ T1158] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 78.659108][ T1158] EXT4-fs (loop3): re-mounted. Opts: (null) [ 78.691129][ T1158] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 78.702648][ T1158] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.227: Failed to acquire dquot type 0 [ 78.710596][ T1165] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.724942][ T1165] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 78.734426][ T1158] EXT4-fs (loop3): re-mounted. Opts: [ 78.736481][ T1165] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 78.830939][ T1180] EXT4-fs error (device loop6): ext4_acquire_dquot:6226: comm syz.6.232: Failed to acquire dquot type 0 [ 78.881862][ T1180] EXT4-fs error (device loop6): mb_free_blocks:1524: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 78.990096][ T1165] exFAT-fs (loop2): hint_cluster is invalid (17) [ 79.052547][ T1180] EXT4-fs error (device loop6) in ext4_do_update_inode:5335: error 27 [ 79.070660][ T1180] EXT4-fs error (device loop6): ext4_dirty_inode:6142: inode #13: comm syz.6.232: mark_inode_dirty error [ 79.091306][ T1180] EXT4-fs error (device loop6) in ext4_do_update_inode:5335: error 27 [ 79.106847][ T1180] EXT4-fs error (device loop6): __ext4_ext_dirty:182: inode #13: comm syz.6.232: mark_inode_dirty error [ 79.138638][ T1180] EXT4-fs error (device loop6) in ext4_do_update_inode:5335: error 27 [ 79.140120][ T1185] device syzkaller0 entered promiscuous mode [ 79.156587][ T1180] EXT4-fs error (device loop6) in ext4_orphan_del:3292: error 27 [ 79.177823][ T1180] EXT4-fs error (device loop6) in ext4_do_update_inode:5335: error 27 [ 79.207976][ T1180] EXT4-fs error (device loop6): ext4_truncate:4390: inode #13: comm syz.6.232: mark_inode_dirty error [ 79.224904][ T1180] EXT4-fs error (device loop6) in ext4_orphan_cleanup:3108: error 27 [ 79.244168][ T1180] EXT4-fs (loop6): 1 truncate cleaned up [ 79.251514][ T1180] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 79.334578][ T1180] EXT4-fs (loop6): re-mounted. Opts: (null) [ 79.353854][ T1180] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 79.364106][ T1180] EXT4-fs error (device loop6): ext4_acquire_dquot:6226: comm syz.6.232: Failed to acquire dquot type 0 [ 79.422616][ T1180] EXT4-fs (loop6): re-mounted. Opts: [ 79.689205][ T1200] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.237: Invalid block bitmap block 0 in block_group 0 [ 79.715305][ T1200] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.237: Failed to acquire dquot type 0 [ 79.727744][ T1019] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 80.035167][ T24] kauditd_printk_skb: 425 callbacks suppressed [ 80.035270][ T24] audit: type=1400 audit(2098583271.364:3324): avc: denied { create } for pid=1178 comm="syz.6.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.064758][ T1200] EXT4-fs error (device loop5): ext4_free_blocks:5685: comm syz.5.237: Freeing blocks not in datazone - block = 0, count = 4096 [ 80.078882][ T1200] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.237: Invalid inode bitmap blk 0 in block_group 0 [ 80.092159][ T1200] EXT4-fs error (device loop5) in ext4_free_inode:360: Corrupt filesystem [ 80.101465][ T1200] EXT4-fs (loop5): 1 orphan inode deleted [ 80.107278][ T1200] EXT4-fs (loop5): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 80.155747][ T7] Quota error (device loop5): remove_tree: Getting block too big (0 >= 9) [ 80.350573][ T7] EXT4-fs error (device loop5): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 80.460080][ T24] audit: type=1400 audit(2098583271.364:3325): avc: denied { write } for pid=1178 comm="syz.6.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.544465][ T24] audit: type=1400 audit(2098583271.364:3326): avc: denied { read } for pid=1178 comm="syz.6.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.584418][ T24] audit: type=1400 audit(2098583271.396:3327): avc: denied { map_create } for pid=1178 comm="syz.6.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.605048][ T24] audit: type=1400 audit(2098583271.396:3328): avc: denied { bpf } for pid=1178 comm="syz.6.232" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.626358][ T24] audit: type=1400 audit(2098583271.396:3329): avc: denied { map_read map_write } for pid=1178 comm="syz.6.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.656414][ T24] audit: type=1400 audit(2098583271.418:3330): avc: denied { prog_load } for pid=1178 comm="syz.6.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.683760][ T24] audit: type=1400 audit(2098583271.418:3331): avc: denied { perfmon } for pid=1178 comm="syz.6.232" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.705533][ T24] audit: type=1400 audit(2098583271.429:3332): avc: denied { prog_run } for pid=1178 comm="syz.6.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.963953][ T1019] usb 3-1: Using ep0 maxpacket: 16 [ 81.113259][ T1019] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 81.121419][ T1019] usb 3-1: config 0 has no interface number 0 [ 81.129667][ T1019] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.140890][ T1223] EXT4-fs (loop6): Test dummy encryption mode enabled [ 81.147840][ T1019] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.157710][ T1019] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 81.166838][ T1019] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.177070][ T1019] usb 3-1: config 0 descriptor?? [ 81.180001][ T1223] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,usrjquota=,,errors=continue [ 81.194130][ T1223] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.505990][ T1233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.246'. [ 81.860711][ T1234] netlink: 208 bytes leftover after parsing attributes in process `syz.6.248'. [ 81.870031][ T1234] netlink: 8 bytes leftover after parsing attributes in process `syz.6.248'. [ 81.957131][ T1234] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 81.981739][ T1234] EXT4-fs (loop6): Ignoring removed bh option [ 81.994148][ T1234] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 82.027702][ T1234] EXT4-fs (loop6): 1 truncate cleaned up [ 82.033571][ T1234] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,quota,nogrpid,,errors=continue [ 82.148824][ T1234] x_tables: unsorted entry at hook 3 [ 82.297254][ T1019] uclogic 0003:28BD:0071.0006: failed retrieving string descriptor #100: -71 [ 82.306332][ T1019] uclogic 0003:28BD:0071.0006: failed retrieving pen parameters: -71 [ 82.347200][ T1019] uclogic 0003:28BD:0071.0006: pen probing failed: -71 [ 82.354330][ T1019] uclogic 0003:28BD:0071.0006: failed probing parameters: -71 [ 82.361968][ T1019] uclogic: probe of 0003:28BD:0071.0006 failed with error -71 [ 82.434564][ T1019] usb 3-1: USB disconnect, device number 5 [ 82.496955][ T1258] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,minixdf, [ 82.512047][ T1258] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.744206][ T1000] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 82.861565][ T1258] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz.3.256: path /57/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 82.893605][ T1258] EXT4-fs (loop3): Remounting filesystem read-only [ 83.040872][ T1269] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 83.101825][ T1273] netlink: 24 bytes leftover after parsing attributes in process `syz.1.259'. [ 83.247972][ T1000] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.263035][ T1000] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.406280][ T1000] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 83.440869][ T1000] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 83.504663][ T1000] usb 6-1: SerialNumber: syz [ 83.513485][ T1283] device syzkaller0 entered promiscuous mode [ 83.734762][ T1288] overlayfs: missing 'lowerdir' [ 83.783297][ T1292] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 83.863317][ T1000] usb 6-1: 0:2 : does not exist [ 83.868777][ T1000] usb 6-1: unit 5 not found! [ 83.897635][ T1000] usb 6-1: USB disconnect, device number 2 [ 83.919681][ T1298] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 84.084497][ T1302] device syzkaller0 entered promiscuous mode [ 84.122006][ T1307] device wireguard0 entered promiscuous mode [ 84.143096][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 84.236990][ T1309] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 84.280997][ T1309] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.414096][ T1316] EXT4-fs (loop5): Ignoring removed nobh option [ 84.445641][ T1318] udc-core: couldn't find an available UDC or it's busy [ 84.460875][ T1316] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,grpjquota=,dioread_nolock,,errors=continue [ 84.481056][ T1318] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 84.674059][ T1000] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 84.711650][ T24] kauditd_printk_skb: 575 callbacks suppressed [ 84.711664][ T24] audit: type=1400 audit(2098583276.664:3908): avc: denied { ioctl } for pid=1317 comm="syz.3.273" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.786000][ T24] audit: type=1400 audit(2098583276.707:3909): avc: denied { map_create } for pid=1327 comm="syz.1.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 84.837276][ T24] audit: type=1400 audit(2098583276.707:3910): avc: denied { prog_load } for pid=1327 comm="syz.1.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 84.890899][ T24] audit: type=1400 audit(2098583276.718:3911): avc: denied { bpf } for pid=1327 comm="syz.1.274" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.929550][ T24] audit: type=1400 audit(2098583276.718:3912): avc: denied { bpf } for pid=1327 comm="syz.1.274" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.969186][ T24] audit: type=1400 audit(2098583276.718:3913): avc: denied { perfmon } for pid=1327 comm="syz.1.274" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.018154][ T24] audit: type=1400 audit(2098583276.718:3914): avc: denied { prog_load } for pid=1327 comm="syz.1.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 85.045345][ T24] audit: type=1400 audit(2098583276.718:3915): avc: denied { create } for pid=1327 comm="syz.1.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.084132][ T24] audit: type=1400 audit(2098583276.729:3916): avc: denied { map_create } for pid=1327 comm="syz.1.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 85.093177][ T1000] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.149413][ T1000] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.163214][ T24] audit: type=1400 audit(2098583276.729:3917): avc: denied { bpf } for pid=1327 comm="syz.1.274" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.167925][ T1000] usb 4-1: config 0 interface 0 has no altsetting 0 [ 85.219786][ T1000] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 85.249206][ T1000] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.262782][ T1000] usb 4-1: config 0 descriptor?? [ 85.316451][ T1338] device syzkaller0 entered promiscuous mode [ 85.959691][ T1000] usbhid 4-1:0.0: can't add hid device: -71 [ 85.971174][ T1000] usbhid: probe of 4-1:0.0 failed with error -71 [ 86.045185][ T1000] usb 4-1: USB disconnect, device number 5 [ 86.216361][ T1353] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 86.296973][ T1353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.281'. [ 86.930261][ T1371] EXT4-fs (loop5): Ignoring removed nobh option [ 86.952688][ T1371] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,grpjquota=,dioread_nolock,,errors=continue [ 87.035471][ T1380] syz.1.290[1380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.035529][ T1380] syz.1.290[1380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.251558][ T1394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 87.733813][ T1431] EXT4-fs (loop2): Ignoring removed bh option [ 87.739950][ T1431] EXT4-fs (loop2): Unrecognized mount option "mb_optimize_scan=0x0000000000000001" or missing value [ 87.918074][ T1446] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 88.129978][ T1457] serio: Serial port ptm0 [ 88.262991][ T1458] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 88.291023][ T1458] syz.3.324[1458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.291089][ T1458] syz.3.324[1458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.504886][ T1508] loop9: [ 88.650421][ T1505] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 88.686569][ T1505] FAT-fs (loop5): Filesystem has been set read-only [ 88.704312][ T1505] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 88.713844][ T1505] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 88.723131][ T1505] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 88.857441][ T1541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.357'. [ 88.953371][ T1547] tipc: Enabled bearer , priority 0 [ 89.008254][ T1547] tipc: Disabling bearer [ 89.146759][ T1552] device syzkaller0 entered promiscuous mode [ 89.198827][ T1554] EXT4-fs warning (device loop5): ext4_fill_super:4099: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 89.212280][ T1554] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 89.259184][ T1563] device syzkaller0 entered promiscuous mode [ 89.281611][ T327] udevd[327]: incorrect ext4 checksum on /dev/loop5 [ 89.298371][ T1562] xt_hashlimit: max too large, truncated to 1048576 [ 89.375255][ T1567] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 89.383274][ T24] kauditd_printk_skb: 923 callbacks suppressed [ 89.383287][ T24] audit: type=1400 audit(2098583281.664:4841): avc: denied { map_create } for pid=1573 comm="syz.3.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 89.386461][ T1578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 89.389556][ T24] audit: type=1400 audit(2098583281.664:4842): avc: denied { bpf } for pid=1573 comm="syz.3.375" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.440590][ T1580] netlink: 'syz.2.378': attribute type 3 has an invalid length. [ 89.463419][ T1567] EXT4-fs (loop5): orphan cleanup on readonly fs [ 89.471645][ T1567] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.372: bg 0: block 10: padding at end of block bitmap is not set [ 89.487209][ T1567] Quota error (device loop5): write_blk: dquota write failed [ 89.497775][ T1567] Quota error (device loop5): find_free_dqentry: Can't write quota data block 3 [ 89.508286][ T1567] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 89.523238][ T1567] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.372: Failed to acquire dquot type 0 [ 89.536060][ T1567] Quota error (device loop5): write_blk: dquota write failed [ 89.547097][ T1567] Quota error (device loop5): find_free_dqentry: Can't write quota data block 3 [ 89.556922][ T1567] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 89.567830][ T1567] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.372: Failed to acquire dquot type 0 [ 89.584010][ T1567] EXT4-fs error (device loop5): ext4_free_blocks:5685: comm syz.5.372: Freeing blocks not in datazone - block = 0, count = 4096 [ 89.598165][ T1567] Quota error (device loop5): write_blk: dquota write failed [ 89.606135][ T1567] Quota error (device loop5): find_free_dqentry: Can't write quota data block 3 [ 89.615968][ T1567] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.372: Failed to acquire dquot type 0 [ 89.628350][ T1567] EXT4-fs (loop5): 1 orphan inode deleted [ 89.641304][ T1567] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 89.736723][ T1596] netlink: 44 bytes leftover after parsing attributes in process `syz.3.386'. [ 89.774969][ T1596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.386'. [ 89.880736][ T1610] netlink: 96 bytes leftover after parsing attributes in process `syz.2.392'. [ 90.003953][ T1623] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 90.033563][ T1623] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 90.044888][ T1623] JBD2: no valid journal superblock found [ 90.050648][ T1623] EXT4-fs (loop2): error loading journal [ 90.075095][ T1636] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue [ 90.088354][ T1636] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.176709][ T1623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'. [ 90.204245][ T1636] EXT4-fs error (device loop5): ext4_get_first_dir_block:3708: inode #12: comm syz.5.402: Attempting to read directory block (0) that is past i_size (3) [ 90.286687][ T1647] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 90.294278][ T1647] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 90.307397][ T1647] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 90.315024][ T1647] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.333207][ T1647] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3342: comm syz.3.407: Allocating blocks 41-42 which overlap fs metadata [ 90.347277][ T1647] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3342: comm syz.3.407: Allocating blocks 41-42 which overlap fs metadata [ 90.390943][ T1647] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.407: Failed to acquire dquot type 1 [ 90.431992][ T1647] EXT4-fs error (device loop3): mb_free_blocks:1524: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 90.453727][ T1647] EXT4-fs error (device loop3) in ext4_do_update_inode:5335: error 27 [ 90.465043][ T1647] EXT4-fs error (device loop3): ext4_dirty_inode:6142: inode #12: comm syz.3.407: mark_inode_dirty error [ 90.480069][ T1647] EXT4-fs error (device loop3) in ext4_do_update_inode:5335: error 27 [ 90.489846][ T1647] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #12: comm syz.3.407: mark_inode_dirty error [ 90.508620][ T998] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 90.513016][ T1647] EXT4-fs error (device loop3) in ext4_do_update_inode:5335: error 27 [ 90.547581][ T1647] EXT4-fs error (device loop3) in ext4_orphan_del:3292: error 27 [ 90.558265][ T1647] EXT4-fs error (device loop3) in ext4_do_update_inode:5335: error 27 [ 90.567507][ T1647] EXT4-fs error (device loop3): ext4_truncate:4390: inode #12: comm syz.3.407: mark_inode_dirty error [ 90.585371][ T1647] EXT4-fs error (device loop3) in ext4_orphan_cleanup:3108: error 27 [ 90.597121][ T1647] EXT4-fs (loop3): 1 truncate cleaned up [ 90.602887][ T1647] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,mblk_io_submit,jqfmt=vfsold,nodelalloc,nomblk_io_submit,usrjquota=,minixdf,resgid=0x00000000000000002,errors=continue [ 90.672479][ T1647] EXT4-fs (loop3): re-mounted. Opts: [ 90.710048][ T1684] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 90.806051][ T998] usb 3-1: device descriptor read/64, error -71 [ 90.823142][ T1695] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 90.842983][ T1695] EXT4-fs (loop6): 1 truncate cleaned up [ 90.849279][ T1695] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro, [ 90.871125][ T1695] EXT4-fs error (device loop6): ext4_generic_delete_entry:2683: inode #2: block 13: comm syz.6.428: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 90.893182][ T1695] EXT4-fs (loop6): Remounting filesystem read-only [ 90.900957][ T1695] EXT4-fs error (device loop6) in ext4_delete_entry:2741: Corrupt filesystem [ 90.910788][ T1695] EXT4-fs warning (device loop6): ext4_rename_delete:3901: inode #2: comm syz.6.428: Deleting old file: nlink 4, error=-117 [ 91.028306][ T1708] 9pnet: Could not find request transport: 0xffffffffffffffff [ 91.108085][ T1725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 91.134398][ T1727] xt_hashlimit: max too large, truncated to 1048576 [ 91.135045][ T1725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 91.191759][ T1729] device bridge_slave_0 left promiscuous mode [ 91.198010][ T998] usb 3-1: device descriptor read/64, error -71 [ 91.198644][ T1729] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.212246][ T1729] device bridge_slave_1 left promiscuous mode [ 91.218508][ T1729] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.229866][ T1730] device vlan0 entered promiscuous mode [ 91.241791][ T1729] tipc: Enabling of bearer rejected, failed to enable media [ 91.449168][ T998] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 91.542203][ T1752] IPv6: NLM_F_CREATE should be specified when creating new route [ 91.606131][ T1760] netlink: 12 bytes leftover after parsing attributes in process `syz.5.457'. [ 91.660641][ T1766] netlink: 'syz.5.459': attribute type 4 has an invalid length. [ 91.685603][ T1766] netlink: 'syz.5.459': attribute type 4 has an invalid length. [ 91.719516][ T998] usb 3-1: device descriptor read/64, error -71 [ 91.813643][ T1775] 9pnet_virtio: no channels available for device 127.0.0.1 [ 91.828449][ T1765] netlink: 96 bytes leftover after parsing attributes in process `syz.3.458'. [ 92.039467][ T1796] binfmt_misc: register: failed to install interpreter file ./bus [ 92.101959][ T998] usb 3-1: device descriptor read/64, error -71 [ 92.148683][ T1810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.480'. [ 92.213729][ T998] usb usb3-port1: attempt power cycle [ 92.327145][ T1824] loop6: p1 < > p4 [ 92.333872][ T1824] loop6: p4 size 8388608 extends beyond EOD, truncated [ 92.471227][ T327] udevd[327]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 92.472573][ T299] udevd[299]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 92.520754][ T1849] tipc: Enabled bearer , priority 0 [ 92.529904][ T1847] tipc: Resetting bearer [ 92.541477][ T340] udevd[340]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 92.541484][ T327] udevd[327]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 92.569211][ T1846] attempt to access beyond end of device [ 92.569211][ T1846] loop3: rw=0, want=129, limit=128 [ 92.588682][ T1847] tipc: Disabling bearer [ 92.595697][ T998] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 92.757573][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.768508][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.777232][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.782451][ T998] usb 3-1: device descriptor read/8, error -71 [ 92.788104][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.792207][ T1866] loop9: unable to read partition table [ 92.807974][ T1866] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 92.807974][ T1866] ) failed (rc=-5) [ 92.812503][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.832061][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.841229][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.852121][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.866226][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.877129][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.885864][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.896743][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.922897][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.933828][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.986686][ T1872] FAT-fs (loop5): Directory bread(block 64) failed [ 92.996396][ T1872] FAT-fs (loop5): Directory bread(block 65) failed [ 93.008389][ T1872] FAT-fs (loop5): Directory bread(block 66) failed [ 93.015278][ T1872] FAT-fs (loop5): Directory bread(block 67) failed [ 93.021917][ T1872] FAT-fs (loop5): Directory bread(block 68) failed [ 93.028536][ T1872] FAT-fs (loop5): Directory bread(block 69) failed [ 93.035796][ T1872] FAT-fs (loop5): Directory bread(block 70) failed [ 93.042386][ T1872] FAT-fs (loop5): Directory bread(block 71) failed [ 93.044073][ T998] usb 3-1: device descriptor read/8, error -71 [ 93.055337][ T1872] FAT-fs (loop5): Directory bread(block 72) failed [ 93.062091][ T1872] FAT-fs (loop5): Directory bread(block 73) failed [ 93.105094][ T1879] SELinux: Context is not valid (left unmapped). [ 93.202916][ T1894] syz.1.516 uses obsolete (PF_INET,SOCK_PACKET) [ 93.377105][ T1906] netlink: 52 bytes leftover after parsing attributes in process `syz.6.521'. [ 93.794913][ T1936] SELinux: failed to load policy [ 93.826065][ T1030] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 93.920047][ T1944] netlink: 96 bytes leftover after parsing attributes in process `syz.2.539'. [ 94.050473][ T24] kauditd_printk_skb: 1476 callbacks suppressed [ 94.050489][ T24] audit: type=1400 audit(2098583286.685:6314): avc: denied { read write } for pid=743 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 94.110046][ T24] audit: type=1400 audit(2098583286.685:6315): avc: denied { open } for pid=743 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 94.134482][ T24] audit: type=1400 audit(2098583286.685:6316): avc: denied { ioctl } for pid=743 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 94.160530][ T24] audit: type=1400 audit(2098583286.685:6317): avc: denied { create } for pid=1957 comm="syz.6.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.204632][ T24] audit: type=1400 audit(2098583286.685:6318): avc: denied { prog_load } for pid=1957 comm="syz.6.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 94.238028][ T1964] netlink: 44 bytes leftover after parsing attributes in process `syz.5.547'. [ 94.261425][ T1965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.548'. [ 94.311272][ T1964] netlink: 8 bytes leftover after parsing attributes in process `syz.5.547'. [ 94.353187][ T24] audit: type=1400 audit(2098583286.685:6319): avc: denied { bpf } for pid=1957 comm="syz.6.546" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.357803][ T1030] usb 4-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config [ 94.397276][ T1030] usb 4-1: too many endpoints for config 1 interface 0 altsetting 165: 159, using maximum allowed: 30 [ 94.409217][ T1030] usb 4-1: config 1 interface 0 altsetting 165 has 0 endpoint descriptors, different from the interface descriptor's value: 159 [ 94.423336][ T1030] usb 4-1: config 1 interface 0 has no altsetting 0 [ 94.437047][ T1958] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 94.606219][ T1958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 94.631194][ T24] audit: type=1400 audit(2098583286.685:6320): avc: denied { perfmon } for pid=1957 comm="syz.6.546" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.666306][ T1958] audit: audit_lost=18 audit_rate_limit=0 audit_backlog_limit=64 [ 94.730625][ T1958] audit: backlog limit exceeded [ 94.887330][ T1964] EXT4-fs (loop5): Ignoring removed orlov option [ 95.083632][ T1958] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3342: comm syz.6.546: Allocating blocks 385-513 which overlap fs metadata [ 95.127547][ T1964] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,quota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,discard,noauto_da_alloc,stripe=0x0000000000000005,orlov,,errors=continue [ 95.206430][ T1975] EXT4-fs (loop6): pa ffff8881103f5498: logic 16, phys. 129, len 24 [ 95.214478][ T1975] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 8 [ 95.811494][ T1030] usb 4-1: string descriptor 0 read error: -22 [ 95.818235][ T1030] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 95.851994][ T1030] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.384669][ T2023] tipc: Started in network mode [ 96.396959][ T2023] tipc: Own node identity ac14142f, cluster identity 4711 [ 96.419169][ T2023] tipc: New replicast peer: 0.0.0.0 [ 96.433417][ T2023] tipc: Enabled bearer , priority 10 [ 96.454047][ T2026] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 96.499454][ T2029] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 96.654818][ T2043] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 96.831476][ T2052] netlink: 228 bytes leftover after parsing attributes in process `syz.2.584'. [ 96.849146][ T998] usb 4-1: USB disconnect, device number 6 [ 96.904317][ T2053] EXT4-fs (loop6): Ignoring removed orlov option [ 96.910718][ T2053] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 96.971949][ T2053] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,noquota,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 97.056422][ T2063] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 97.117595][ T2047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.581'. [ 97.470267][ T1030] tipc: 32-bit node address hash set to 2f1414ac [ 97.781579][ T2097] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 98.034698][ T2111] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,noquota,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue [ 98.105973][ T2135] xt_hashlimit: max too large, truncated to 1048576 [ 98.180807][ T2140] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 98.189675][ T2140] EXT4-fs (loop3): Ignoring removed orlov option [ 98.223594][ T2140] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,stripe=0x00000000000000c4,usrjquota=,mblk_io_submit,nogrpid,orlov,,errors=continue [ 98.261958][ T2147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.618'. [ 98.272534][ T2140] loop_set_status: loop3 () has still dirty pages (nrpages=2) [ 98.329497][ T2153] netlink: 20 bytes leftover after parsing attributes in process `syz.5.623'. [ 98.343743][ T2153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.623'. [ 98.361866][ T2156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 98.418726][ T2157] EXT4-fs error (device loop6): ext4_orphan_get:1395: inode #15: comm syz.6.622: casefold flag without casefold feature [ 98.467564][ T2157] EXT4-fs error (device loop6): ext4_orphan_get:1400: comm syz.6.622: couldn't read orphan inode 15 (err -117) [ 98.470133][ T2170] netlink: 104 bytes leftover after parsing attributes in process `syz.5.629'. [ 98.484853][ T2157] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 98.498796][ T2172] syz.1.630 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 98.522862][ T2168] EXT4-fs (loop2): Ignoring removed orlov option [ 98.543248][ T2168] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 98.627539][ T2168] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 98.739723][ T24] kauditd_printk_skb: 970 callbacks suppressed [ 98.739736][ T24] audit: type=1400 audit(101.618:7285): avc: denied { prog_load } for pid=2191 comm="syz.5.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 98.767520][ T24] audit: type=1400 audit(101.618:7286): avc: denied { bpf } for pid=2191 comm="syz.5.638" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 98.787750][ T24] audit: type=1400 audit(101.618:7287): avc: denied { perfmon } for pid=2191 comm="syz.5.638" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 98.808205][ T24] audit: type=1400 audit(101.639:7288): avc: denied { prog_run } for pid=2191 comm="syz.5.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 98.826769][ T24] audit: type=1326 audit(101.693:7289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2191 comm="syz.5.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573a5ba929 code=0x7ffc0000 [ 98.852569][ T2177] EXT4-fs (loop3): Unrecognized mount option "mb_optimize_scan=0x0000000000000001" or missing value [ 98.864032][ T2193] syz.1.639[2193] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.864105][ T2193] syz.1.639[2193] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.887420][ T2193] mmap: syz.1.639 (2193) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 98.914094][ T24] audit: type=1326 audit(101.693:7290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2191 comm="syz.5.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f573a5ba929 code=0x7ffc0000 [ 98.938586][ T24] audit: type=1326 audit(101.693:7291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2191 comm="syz.5.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573a5ba929 code=0x7ffc0000 [ 98.961496][ T24] audit: type=1400 audit(101.714:7292): avc: denied { write } for pid=2167 comm="syz.2.627" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.983568][ T24] audit: type=1400 audit(101.714:7293): avc: denied { add_name } for pid=2167 comm="syz.2.627" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.025129][ T24] audit: type=1400 audit(101.714:7294): avc: denied { create } for pid=2167 comm="syz.2.627" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 99.129810][ T2195] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 99.220016][ T2195] EXT4-fs (loop6): mounted filesystem without journal. Opts: mblk_io_submit,bsddf,,errors=continue [ 99.246839][ T2210] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2210 comm=syz.2.645 [ 99.259757][ T2210] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2210 comm=syz.2.645 [ 99.568792][ T2218] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 99.583232][ T2218] EXT4-fs error (device loop2) in ext4_do_update_inode:5335: error 27 [ 99.592818][ T2218] EXT4-fs error (device loop2): ext4_dirty_inode:6142: inode #2: comm syz.2.648: mark_inode_dirty error [ 99.606246][ T2218] EXT4-fs error (device loop2) in ext4_do_update_inode:5335: error 27 [ 99.870640][ T2232] 9pnet: Insufficient options for proto=fd [ 100.053200][ T2243] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 100.151671][ T2260] 9pnet: Insufficient options for proto=fd [ 100.573426][ T2298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.678'. [ 100.610825][ T2301] netlink: 12 bytes leftover after parsing attributes in process `syz.5.681'. [ 100.621942][ T2298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.678'. [ 100.694870][ T2303] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #3: block 2: comm syz.5.682: lblock 2 mapped to illegal pblock 2 (length 1) [ 100.714520][ T2303] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #3: block 48: comm syz.5.682: lblock 0 mapped to illegal pblock 48 (length 1) [ 100.728771][ T2303] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.682: Failed to acquire dquot type 0 [ 100.740564][ T2303] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5932: Corrupt filesystem [ 100.757814][ T2303] EXT4-fs error (device loop5): ext4_evict_inode:283: inode #11: comm syz.5.682: mark_inode_dirty error [ 100.770606][ T2303] EXT4-fs warning (device loop5): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 100.781332][ T2303] EXT4-fs (loop5): 1 orphan inode deleted [ 100.790024][ T2303] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,i_version,,errors=continue [ 100.809196][ T419] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 100.823753][ T419] EXT4-fs error (device loop5): ext4_release_dquot:6262: comm kworker/u4:4: Failed to release dquot type 0 [ 100.840432][ T2303] EXT4-fs error (device loop5): __ext4_get_inode_loc:4438: comm syz.5.682: Invalid inode table block 1 in block_group 0 [ 100.853351][ T2303] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5932: Corrupt filesystem [ 100.863504][ T2303] EXT4-fs error (device loop5): ext4_quota_off:6545: inode #3: comm syz.5.682: mark_inode_dirty error [ 100.948009][ T2317] xt_hashlimit: max too large, truncated to 1048576 [ 101.050568][ T2321] FAT-fs (loop3): bogus number of FAT sectors [ 101.057309][ T2321] FAT-fs (loop3): Can't find a valid FAT filesystem [ 101.453074][ T2363] device syz_tun left promiscuous mode [ 101.469113][ T2363] bridge0: port 3(syz_tun) entered disabled state [ 101.477644][ T2363] device bridge_slave_0 left promiscuous mode [ 101.483961][ T2363] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.501150][ T2363] device bridge_slave_1 left promiscuous mode [ 101.516366][ T2363] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.533404][ T2360] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 101.615556][ T2372] SELinux: failed to load policy [ 101.695522][ T2383] ================================================================== [ 101.703644][ T2383] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 101.711805][ T2383] Read of size 8 at addr ffff888113c0e3c0 by task syz.6.716/2383 [ 101.719514][ T2383] [ 101.721846][ T2383] CPU: 1 PID: 2383 Comm: syz.6.716 Not tainted 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 101.731639][ T2383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.741694][ T2383] Call Trace: [ 101.745044][ T2383] __dump_stack+0x21/0x24 [ 101.749375][ T2383] dump_stack_lvl+0x169/0x1d8 [ 101.754052][ T2383] ? show_regs_print_info+0x18/0x18 [ 101.759245][ T2383] ? thaw_kernel_threads+0x220/0x220 [ 101.764523][ T2383] print_address_description+0x7f/0x2c0 [ 101.770059][ T2383] ? tc_setup_flow_action+0x842/0x3280 [ 101.775517][ T2383] kasan_report+0xe2/0x130 [ 101.779928][ T2383] ? flow_action_cookie_create+0x28/0x90 [ 101.785556][ T2383] ? tc_setup_flow_action+0x842/0x3280 [ 101.791012][ T2383] __asan_report_load8_noabort+0x14/0x20 [ 101.796646][ T2383] tc_setup_flow_action+0x842/0x3280 [ 101.801926][ T2383] ? __kmalloc+0x1a7/0x330 [ 101.806345][ T2383] ? flow_rule_alloc+0x32/0x2c0 [ 101.811191][ T2383] mall_replace_hw_filter+0x293/0x810 [ 101.816557][ T2383] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 101.822621][ T2383] ? mall_set_parms+0x410/0x410 [ 101.827469][ T2383] ? tcf_exts_destroy+0xb0/0xb0 [ 101.832515][ T2383] ? pcpu_alloc+0xf8a/0x16b0 [ 101.837105][ T2383] ? mall_set_parms+0x19d/0x410 [ 101.841950][ T2383] mall_change+0x528/0x750 [ 101.846366][ T2383] ? __kasan_check_write+0x14/0x20 [ 101.851474][ T2383] ? mall_get+0xa0/0xa0 [ 101.855627][ T2383] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 101.861513][ T2383] ? nla_strcmp+0xf4/0x140 [ 101.866006][ T2383] tc_new_tfilter+0x13f6/0x1a10 [ 101.870854][ T2383] ? mall_get+0xa0/0xa0 [ 101.875032][ T2383] ? tcf_gate_entry_destructor+0x20/0x20 [ 101.880665][ T2383] ? security_capable+0x87/0xb0 [ 101.885510][ T2383] ? ns_capable+0x8c/0xf0 [ 101.889834][ T2383] ? netlink_net_capable+0x125/0x160 [ 101.895124][ T2383] ? tcf_gate_entry_destructor+0x20/0x20 [ 101.900921][ T2383] rtnetlink_rcv_msg+0x800/0xb90 [ 101.905851][ T2383] ? rtnetlink_bind+0x80/0x80 [ 101.910523][ T2383] ? arch_stack_walk+0xee/0x140 [ 101.915437][ T2383] ? stack_trace_save+0x98/0xe0 [ 101.920463][ T2383] ? stack_trace_snprint+0xf0/0xf0 [ 101.925789][ T2383] ? memcpy+0x56/0x70 [ 101.930060][ T2383] ? avc_has_perm+0x234/0x360 [ 101.934814][ T2383] ? __kasan_slab_alloc+0xbd/0xf0 [ 101.939955][ T2383] ? slab_post_alloc_hook+0x5d/0x2f0 [ 101.945331][ T2383] ? ___sys_sendmsg+0x1f0/0x260 [ 101.950189][ T2383] ? avc_has_perm_noaudit+0x240/0x240 [ 101.955561][ T2383] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 101.960930][ T2383] netlink_rcv_skb+0x1e0/0x430 [ 101.965707][ T2383] ? rtnetlink_bind+0x80/0x80 [ 101.970374][ T2383] ? netlink_ack+0xb80/0xb80 [ 101.974957][ T2383] ? __netlink_lookup+0x387/0x3b0 [ 101.979976][ T2383] rtnetlink_rcv+0x1c/0x20 [ 101.984386][ T2383] netlink_unicast+0x87c/0xa40 [ 101.989143][ T2383] netlink_sendmsg+0x88d/0xb30 [ 101.993903][ T2383] ? schedule_preempt_disabled+0x20/0x20 [ 101.999529][ T2383] ? netlink_getsockopt+0x530/0x530 [ 102.004723][ T2383] ? security_socket_sendmsg+0x82/0xa0 [ 102.010175][ T2383] ? netlink_getsockopt+0x530/0x530 [ 102.015367][ T2383] ____sys_sendmsg+0x5a2/0x8c0 [ 102.020124][ T2383] ? __sys_sendmsg_sock+0x40/0x40 [ 102.025145][ T2383] ? import_iovec+0x7c/0xb0 [ 102.029644][ T2383] ___sys_sendmsg+0x1f0/0x260 [ 102.034318][ T2383] ? __sys_sendmsg+0x250/0x250 [ 102.039079][ T2383] ? __fdget+0x1a1/0x230 [ 102.043311][ T2383] __x64_sys_sendmsg+0x1e2/0x2a0 [ 102.048246][ T2383] ? ___sys_sendmsg+0x260/0x260 [ 102.053091][ T2383] ? switch_fpu_return+0x197/0x340 [ 102.058214][ T2383] do_syscall_64+0x31/0x40 [ 102.062640][ T2383] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 102.068520][ T2383] RIP: 0033:0x7f082440f929 [ 102.073104][ T2383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.092702][ T2383] RSP: 002b:00007f0822a78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.101119][ T2383] RAX: ffffffffffffffda RBX: 00007f0824636fa0 RCX: 00007f082440f929 [ 102.109083][ T2383] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 102.117048][ T2383] RBP: 00007f0824491b39 R08: 0000000000000000 R09: 0000000000000000 [ 102.125014][ T2383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.132982][ T2383] R13: 0000000000000000 R14: 00007f0824636fa0 R15: 00007ffdf5acd0f8 [ 102.140948][ T2383] [ 102.143281][ T2383] Allocated by task 2383: [ 102.147605][ T2383] __kasan_kmalloc+0xda/0x110 [ 102.152271][ T2383] __kmalloc+0x1a7/0x330 [ 102.156505][ T2383] tcf_idr_create+0x5f/0x790 [ 102.161085][ T2383] tcf_idr_create_from_flags+0x61/0x70 [ 102.166537][ T2383] tcf_gact_init+0x2b4/0x520 [ 102.171118][ T2383] tcf_action_init_1+0x3e1/0x670 [ 102.176047][ T2383] tcf_action_init+0x1e6/0x700 [ 102.180798][ T2383] tcf_exts_validate+0x215/0x510 [ 102.185725][ T2383] mall_set_parms+0x4b/0x410 [ 102.190318][ T2383] mall_change+0x45c/0x750 [ 102.194747][ T2383] tc_new_tfilter+0x13f6/0x1a10 [ 102.199595][ T2383] rtnetlink_rcv_msg+0x800/0xb90 [ 102.204529][ T2383] netlink_rcv_skb+0x1e0/0x430 [ 102.209300][ T2383] rtnetlink_rcv+0x1c/0x20 [ 102.213715][ T2383] netlink_unicast+0x87c/0xa40 [ 102.218473][ T2383] netlink_sendmsg+0x88d/0xb30 [ 102.223229][ T2383] ____sys_sendmsg+0x5a2/0x8c0 [ 102.227991][ T2383] ___sys_sendmsg+0x1f0/0x260 [ 102.232663][ T2383] __x64_sys_sendmsg+0x1e2/0x2a0 [ 102.237610][ T2383] do_syscall_64+0x31/0x40 [ 102.242023][ T2383] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 102.247920][ T2383] [ 102.250247][ T2383] The buggy address belongs to the object at ffff888113c0e300 [ 102.250247][ T2383] which belongs to the cache kmalloc-192 of size 192 [ 102.264290][ T2383] The buggy address is located 0 bytes to the right of [ 102.264290][ T2383] 192-byte region [ffff888113c0e300, ffff888113c0e3c0) [ 102.277898][ T2383] The buggy address belongs to the page: [ 102.283531][ T2383] page:ffffea00044f0380 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113c0e [ 102.293757][ T2383] flags: 0x4000000000000200(slab) [ 102.298790][ T2383] raw: 4000000000000200 ffffea00040a7dc0 0000000600000006 ffff888100043380 [ 102.307375][ T2383] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 102.315948][ T2383] page dumped because: kasan: bad access detected [ 102.322355][ T2383] page_owner tracks the page as allocated [ 102.328076][ T2383] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 97, ts 7870330418, free_ts 0 [ 102.343012][ T2383] prep_new_page+0x179/0x180 [ 102.347596][ T2383] get_page_from_freelist+0x2235/0x23d0 [ 102.353136][ T2383] __alloc_pages_nodemask+0x268/0x5f0 [ 102.358509][ T2383] new_slab+0x84/0x3f0 [ 102.362571][ T2383] ___slab_alloc+0x2a6/0x450 [ 102.367155][ T2383] __slab_alloc+0x63/0xa0 [ 102.371476][ T2383] kmem_cache_alloc_trace+0x1b3/0x2e0 [ 102.376838][ T2383] kernfs_fop_open+0x343/0xb30 [ 102.381595][ T2383] do_dentry_open+0x793/0x1090 [ 102.386353][ T2383] vfs_open+0x73/0x80 [ 102.390415][ T2383] path_openat+0x27ad/0x3160 [ 102.394998][ T2383] do_filp_open+0x1b3/0x3e0 [ 102.399500][ T2383] do_sys_openat2+0x14c/0x6d0 [ 102.404166][ T2383] __x64_sys_openat+0x136/0x160 [ 102.409021][ T2383] do_syscall_64+0x31/0x40 [ 102.413430][ T2383] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 102.419307][ T2383] page_owner free stack trace missing [ 102.424668][ T2383] [ 102.426994][ T2383] Memory state around the buggy address: [ 102.432621][ T2383] ffff888113c0e280: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 102.440675][ T2383] ffff888113c0e300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 102.448832][ T2383] >ffff888113c0e380: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 102.456899][ T2383] ^ [ 102.463057][ T2383] ffff888113c0e400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 102.471123][ T2383] ffff888113c0e480: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 102.479177][ T2383] ================================================================== [ 102.487251][ T2383] Disabling lock debugging due to kernel taint [ 102.633847][ T1000] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 102.885310][ T1000] usb 3-1: device descriptor read/64, error -71 [ 103.248813][ T1000] usb 3-1: device descriptor read/64, error -71 [ 103.500532][ T1000] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 103.752308][ T1000] usb 3-1: device descriptor read/64, error -71 [ 104.115695][ T1000] usb 3-1: device descriptor read/64, error -71 [ 104.227761][ T1000] usb usb3-port1: attempt power cycle [ 104.422576][ T24] kauditd_printk_skb: 766 callbacks suppressed [ 104.422590][ T24] audit: type=1400 audit(107.712:8058): avc: denied { read write } for pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.453911][ T24] audit: type=1400 audit(107.712:8059): avc: denied { open } for pid=279 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.477546][ T24] audit: type=1400 audit(107.712:8060): avc: denied { ioctl } for pid=279 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=117 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1