last executing test programs: 6.974774184s ago: executing program 3 (id=323): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x783, &(0x7f0000001000)="$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") r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x0) 6.740928488s ago: executing program 3 (id=330): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 6.663039643s ago: executing program 3 (id=333): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0xf, 0x28, 0xffffffffffffffff, 0xffffffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000005000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1, r0}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 6.621281585s ago: executing program 3 (id=335): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$eJzs3M1uG0UcAPD/br5I+mEjcUCFgyUQBAFxHQhQhEThyscFeAArSUuF21SNkWjJoSBOnDggbhz6Ahx4gKpCSEi8Ai+AKlUozQFuQWvvOm4cp7Fix2r6+0mjndkdZ/bv3axm1rsTwGOrEhHnI2IiIhYjopSvT/MUN9spq3d/c2N5a3NjOYnt7U/+SSLJ1xV/K8mXJ/LCfBqRfhfxzM3edtev3/ii3misXsvL1eblq9X16zdevXS5fnH14uqV2pvnarWlxbdqrw8t1p+ef+ncxPvnz/z8V+nO0vT0bLa/J/Nt3XEMSyUqne9kt6VhNzZm0+PeAQAADiTN+/6Trf5/KSZaubZSVDfGunMAAADAUGy/my8BAACAYywx9gcAAIBjrngO4P7mxnKRxvg4wpG7915ElHfebd7qxD8ZT+R1pkb4fmslIq6+kJSyFCN6DxkAoNudrP9zdq/+XxpPd9WbiWj1h2aH3H5lV7m3/5PeHXKTD8j6f+9ExFZP/y8tqpQn8tKpVldxKrlwqbF6NiJOR8R8TM1k5do+bXzw7y8f99uWxf97cup0kbL2s+VOjfTu5MyDn1mpN+uHibnbvW8izkzuFX/S6f8mETF3iDYmvr71dr9tD49/tLZvRby45/Hfmbkn2X9+omrrfKgWZ0Wv/7799aN+7Y87/uz4z+0ffznpnq9pffA2bn/+57P9tnWPfwY5/6eTT1v5Ylz2Vb3ZvFaLmE4+7F2/uPPZolzUz+Kff27v///i+pfkc1qdzK8Bg/r+h99eOUj8WcraL8aCRyGLf2Wg4z945o3bf3zWr/2Hx58d//YcYPP5moNc/w66g4f57gAAAOBRkbbuayTpQiefpgsL7fsdT8Vc2lhbb758Ye3LKyvt+x/lmEqLO12lrvuhtfbP6J3y4q7yaxHxZET8WJptlReW1xor4w4eAAAAHhMn+oz/M38f2VMIAAAAwMiVx70DAAAAwMgZ/wMAAMCxdph5/WRkZI5rZtxXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfb/wEAAP//Wt22ag==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r0, 0x0) syz_clone(0x100000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 6.500613482s ago: executing program 3 (id=339): unshare(0x400) r0 = inotify_init1(0x80800) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) r2 = dup(r0) inotify_rm_watch(r2, r1) 6.3651612s ago: executing program 3 (id=341): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x41, 0x1}}}, 0x10) sendfile(r1, r0, 0x0, 0x8010002b) 6.219903308s ago: executing program 32 (id=341): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x41, 0x1}}}, 0x10) sendfile(r1, r0, 0x0, 0x8010002b) 5.996166491s ago: executing program 1 (id=351): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x1, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r2, &(0x7f00000000c0)=ANY=[], 0xff42) splice(r1, 0x0, r0, 0x0, 0x4100, 0x4) 5.937152335s ago: executing program 1 (id=352): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x6, 0x87, 0xffffffff, 0x40}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200998f00000000000000001d00000000004e2300000000ffffffffff0700000000000000000000000000000000000009000000", @ANYRES32=0x0, @ANYBLOB="0120200003000000eeff0080000000000800030011"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) 5.936809445s ago: executing program 1 (id=353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 5.610814414s ago: executing program 1 (id=359): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r0, 0x0) syz_clone(0x100000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 5.459109743s ago: executing program 1 (id=364): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfd, {0x60, 0x0, 0x0, r2, {0x0, 0x6}, {0xffe0, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x1a, 0x9, 0x7, 0x1, 0x2, 0x3ff}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0xc810) 5.109493773s ago: executing program 1 (id=368): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xe400000e) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) 5.079920805s ago: executing program 33 (id=368): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xe400000e) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) 2.473379006s ago: executing program 0 (id=403): mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r0, &(0x7f0000012300)={0x2020}, 0x2020) 2.455171217s ago: executing program 0 (id=404): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) 2.439448988s ago: executing program 0 (id=405): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 2.380813722s ago: executing program 0 (id=406): ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, &(0x7f0000000440)=""/190, 0xbe) read(r0, 0x0, 0x0) 2.221637321s ago: executing program 0 (id=412): r0 = io_uring_setup(0x76a3, &(0x7f0000000340)={0x0, 0xfbd0, 0x0, 0x1, 0x200000}) close(r0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1}, 0x8000}], 0x1, 0x2102, 0x0) 1.358378451s ago: executing program 0 (id=429): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x80000044, 0x2, 0xe, 0x28c5, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.175878792s ago: executing program 2 (id=433): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000ac0), 0x4) 1.161136073s ago: executing program 2 (id=434): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.139665404s ago: executing program 2 (id=435): r0 = syz_clone(0x40400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x420e, r0, 0x0, 0x0) 685.516261ms ago: executing program 5 (id=451): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) setuid(0xee00) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}}) 582.765017ms ago: executing program 5 (id=453): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@bh}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@auto_da_alloc}]}, 0x2, 0xbdb, &(0x7f0000000280)="$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") r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x100) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 566.481687ms ago: executing program 6 (id=454): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="0f", 0x1}], 0x1}}], 0x1, 0x6089851) 537.340649ms ago: executing program 6 (id=455): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x169, &(0x7f0000000ac0)="$eJzs3L+KE1EUB+Az7uwatXBrsRiwsQrqEyjLCuKAoqTQSmG12UjANKNVHsUXFCRVuivJaP6RgAHjuJnva3LIjxvObe7hhmTe3f10eTEYfhy8HEcnyyJ/HEVMsjiNa3EUtVEAAIdkklL8SCmlPCK+RUqp6Y4AgH2bz//ro7hh/gNAK5j/ANA+5j8AtM/rN2+fPynL81dF0Yn4Pqp6VW/2elbnT5+V5w+KmdPFqnFV9Y7m+cM6L1bz47j5K380S5d/RTjNT+L+vTqfpmcvyrX1t+Ji77sHAACAdugWcxvv993utryulr4fmN7fby/yPO7k/3QrAMAfGn75evm+3//w+YoXv59VsOvyTkQ03rxilyL7P9o4sOI4IlbeafhgAvZucQw03QkAAAAAAAAAAAAAALDNX/0X0cnmD2x6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDuZwAAAP//DbtJFA==") syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 470.229403ms ago: executing program 6 (id=456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xeeee0000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x45, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x9, 0x0, 0x3, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x3c}, {0xffff1000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20}, {0x0, 0x6000, 0x4, 0x0, 0x0, 0x74, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]}) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000200)) 431.878935ms ago: executing program 5 (id=457): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32], 0x1, 0x1a2, &(0x7f0000000580)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) chmod(&(0x7f0000002240)='./file2\x00', 0x152) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0x13d) 382.114189ms ago: executing program 5 (id=458): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x100}}, 0x30) syz_emit_ethernet(0xd81, &(0x7f0000000b40)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0xd4b, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x18, 0x12, "da4b47f894dc1bda497223200186f59b4ae81bbe45229ca11e5e8a2a436b6d04ee939a16d0d491610d2f6eb0205622f3549d23c24dc1591eee071031f913b089bf9aab1052b68e8477b524ebe53679872db34d3876c80c986d56db13ed01bf536aa39d18388ebfe3b27ead355d8e05a7bcf8a2f42b878453f2d321adf05876c718f77b8280d88296339b1428b2dd75926c"}, {0x5, 0x19, "e094f8ab873fd97085067587ac3d85ae1bfa4cf20f3d8fbe43c3c9445f62e92b1ee5a63a8c9328d1509630d46cafb7bfcb05844f38926882001585405eda0c277d791bfba46bdf4a66608f7c795522a6c31caf207cd4d62f8f357be34790e5ebd024e2660d02142c713ccae0b62bb3055517ac0738f359ad78e9ce1ba26d2aaa254f90cced8eab15f0caab43bbf8bd24dc387a7f6187fb47d19783d84420e1595534e70446d2091c380e28a5cdd4a43567f2a93937bc0693a68ee576f2ad7134e8c46b2473c136e9"}, {0x22, 0x17a, "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"}, {}, {0xe}]}}}}}}, 0x0) 381.726408ms ago: executing program 5 (id=459): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000240)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c000000006b3d7374726963742c646f74732c0080fcdc5c3d8a855b06000000000000003ed878442a18112f260a6de8f9de23ca03128aff6e01", @ANYBLOB="4e979cb01415efd7a88cde1d0f82ca5a35dfaa2457a3089137e6e4cb43746b9d693cff21abe18b8904c9c936809b729ece97fb507c0cf7757e6cf9888f960f43832abff5c5416d4e43d01d5e149c096d8f3282ac50a9ae9520320f57d3ae7292983f5d4f93594339b26299e962c7f3cde0ebba43f1b178a4b57590bc13bd165d0ed9e0fe17d433333464149aecc0021684b74e7dd1a1ec8b4a27bb4849b3d280a3b9d674bf9c9d0c7918d26864eea31c02a80836925d9f0c3d569b65c75510484ee210bd3340dc8ba30e6711e2450f2b1a8a4ed06e6de5de70ef0bbbdeb1389019ce4cd1a7c0aac2b8d6da476753c63459ba2d69414c6ac319", @ANYRESOCT], 0x1, 0x11f0, &(0x7f0000001b00)="$eJzs209rY1UYB+C3mdR2MrZT/43ObDzoRjcXZxauZlOkBZmAMjMRZgThDk01JCYhN4tkcDHgzpWfQ1y6E8Qv0G/hrgiim3FjpE1a2xq1BZtYfJ7NfcnvnNxz4CZwQt7d219+2twusu28H6WFhSh3FyM9TZGiFJdi7Em8+fnmL1/ce/Dwznq1unE3pc31+zffTimtvvrdh599/dr3/SsffLP67VLsrH20+9OtH3au7Vzf/e3+J40iNYrU7vRTnh51Ov38UauethpFM0vp/VY9L+qp0S7qvWP5dqvT7Q5T3t5aqXR79aJIeXuYmvVh6ndSvzdM+cd5o52yLEsrleCk0Wg0Ou3Y2ldP90b/Wjmcevl2Ja7Es7ESq3E11uK5eD5eiBfjpbgWL8crcf1M7w8AAAAAAAAAAAAAAAAAAACcxn7/f4xGi/HMfmf/5dD/DwAAAAAAAAAAAAAAAAAAALOm/x8AAAAAAAAAAAAAAAAAAADmT/8/AAAAAAAAAAAAAAAAAAAAzN+9Bw/vrFerG3dTWo748cmgNqiNr+N8893qxltp39ofs34eDGqXDvOb4zwdz5eiMslvTc2X443Xx/le9s571aN5KWo3Yuv8tw8AAAD/C1k6NPV8n2V/lY+rI78PnDjfl+NGedodlyfX0dXz2A9nUwwfN/NWq94rhosHxeN/uSjHaQcvTFZ1LstQXPBiafJ07L1yUP8nFnakKMc/jCn93fQpn8q5FbP/LmL2/vzsAQAAAAAAAAAAcBHM4u+EJ+9Zms9WAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5nB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwE4BAAD//z4uiDQ=") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@ptr, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @func_proto]}, {0x0, [0x0, 0x30, 0x5f, 0x2e, 0x2e, 0x2e]}}, 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141442, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 322.283261ms ago: executing program 6 (id=460): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4) r3 = dup(r1) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000540)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000580)="9db1f75d3b4ad2a1c37ed689f6cb05321e9a5477a401abc6306e912611459834285e40148b13d9192c42118d37d5b9d0ddece4fbc2b0079f44d9798b719c975931c9fbca0413ad961e85031a5474028c364fa418624559b70aeb3efdc4cfc3", 0x5f}], 0x1}}], 0x1, 0x28040000) 321.659002ms ago: executing program 5 (id=461): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000)=0x1, 0x0) 314.127942ms ago: executing program 6 (id=462): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000e1ff00850000007d00000095"], 0x0, 0x10000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r0}, 0xc) 287.942493ms ago: executing program 2 (id=463): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) r1 = gettid() clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 283.016584ms ago: executing program 6 (id=465): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000140)={0x0, 0xc, 0x6, "052970c636f5"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000240)={0x40, 0x7, 0x2, "877f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xfa}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x1c0, 0x80, [0x780f]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 209.980178ms ago: executing program 2 (id=467): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x80}}, 0xb9a394409fdb2cb3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) 152.384442ms ago: executing program 2 (id=470): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x10000003, 0x0, 0x81, 0x1ff, 0x1, 0xb}, 0x1c) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2100, 0x0) recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 135.712853ms ago: executing program 4 (id=472): socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64=r0], 0x18}}, 0x2080) 124.459613ms ago: executing program 4 (id=473): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, &(0x7f00000000c0)=0x3, 0x4) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 109.427834ms ago: executing program 4 (id=474): r0 = socket(0x10, 0x803, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) 98.332275ms ago: executing program 4 (id=475): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="17", 0x1}], 0x1, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x80}, 0x40000) 32.116228ms ago: executing program 4 (id=476): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x2, 0x0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000140)={0x0}) 0s ago: executing program 4 (id=477): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000180)='memory.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1) kernel console output (not intermixed with test programs): T28] audit: type=1400 audit(1770913174.071:62): avc: denied { rlimitinh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.680262][ T28] audit: type=1400 audit(1770913174.071:63): avc: denied { siginh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts. [ 21.743260][ T28] audit: type=1400 audit(1770913181.141:64): avc: denied { mounton } for pid=274 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.744317][ T274] cgroup: Unknown subsys name 'net' [ 21.766539][ T28] audit: type=1400 audit(1770913181.141:65): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.794566][ T28] audit: type=1400 audit(1770913181.171:66): avc: denied { unmount } for pid=274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.794737][ T274] cgroup: Unknown subsys name 'devices' [ 21.937092][ T274] cgroup: Unknown subsys name 'hugetlb' [ 21.943030][ T274] cgroup: Unknown subsys name 'rlimit' [ 22.075832][ T28] audit: type=1400 audit(1770913181.481:67): avc: denied { setattr } for pid=274 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.099757][ T28] audit: type=1400 audit(1770913181.481:68): avc: denied { mounton } for pid=274 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.103907][ T276] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.124919][ T28] audit: type=1400 audit(1770913181.481:69): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.155125][ T274] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.157262][ T28] audit: type=1400 audit(1770913181.541:70): avc: denied { relabelto } for pid=276 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.192955][ T28] audit: type=1400 audit(1770913181.541:71): avc: denied { write } for pid=276 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.219414][ T28] audit: type=1400 audit(1770913181.551:72): avc: denied { read } for pid=274 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.245827][ T28] audit: type=1400 audit(1770913181.551:73): avc: denied { open } for pid=274 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.994514][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.001668][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.009659][ T282] device bridge_slave_0 entered promiscuous mode [ 23.018694][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.026192][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.033905][ T282] device bridge_slave_1 entered promiscuous mode [ 23.062974][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.070209][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.077800][ T283] device bridge_slave_0 entered promiscuous mode [ 23.097223][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.104453][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.112346][ T285] device bridge_slave_0 entered promiscuous mode [ 23.119399][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.126798][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.134351][ T283] device bridge_slave_1 entered promiscuous mode [ 23.156073][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.163142][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.171169][ T285] device bridge_slave_1 entered promiscuous mode [ 23.188668][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.195907][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.203833][ T286] device bridge_slave_0 entered promiscuous mode [ 23.234758][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.242155][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.250106][ T286] device bridge_slave_1 entered promiscuous mode [ 23.272176][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.279540][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.287592][ T284] device bridge_slave_0 entered promiscuous mode [ 23.295355][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.302671][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.310308][ T284] device bridge_slave_1 entered promiscuous mode [ 23.492154][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.499446][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.507127][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.514184][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.526777][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.533832][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.541498][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.548674][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.573935][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.581488][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.589189][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.596620][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.617593][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.624904][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.632571][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.639877][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.673789][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.681349][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.689531][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.696587][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.721442][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.729782][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.738486][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.746426][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.754079][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.761917][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.770296][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.778409][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.786272][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.793834][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.802645][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.812090][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.819907][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.840280][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.849003][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.856613][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.864438][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.873578][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.881034][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.915639][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.924565][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.933708][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.942545][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.951161][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.958579][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.966042][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.974418][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.981759][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.998875][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.007515][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.016530][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.023598][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.031742][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.040624][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.049231][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.057235][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.065490][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.073229][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.080899][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.089564][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.111508][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.120234][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.129374][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.136444][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.144371][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.152469][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.160491][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.169579][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.178308][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.186194][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.194318][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.203067][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.211560][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.218881][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.227039][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.237255][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.246142][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.253466][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.261171][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.269544][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.287602][ T282] device veth0_vlan entered promiscuous mode [ 24.301133][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.309857][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.319448][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.328988][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.337478][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.346134][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.354238][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.362535][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.371239][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.380009][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.388074][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.397365][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.407349][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.416087][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.433849][ T286] device veth0_vlan entered promiscuous mode [ 24.445279][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.454049][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.462997][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.471629][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.480073][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.488669][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.501284][ T286] device veth1_macvtap entered promiscuous mode [ 24.513204][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.521391][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.529381][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.537950][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.546443][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.562666][ T283] device veth0_vlan entered promiscuous mode [ 24.570314][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.578989][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.587743][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.596637][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.604782][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.612802][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.623991][ T282] device veth1_macvtap entered promiscuous mode [ 24.638367][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.646739][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.656035][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.663648][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.672349][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.681668][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.691063][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.712106][ T283] device veth1_macvtap entered promiscuous mode [ 24.719882][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 24.720585][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.737520][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.747406][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.762135][ T285] device veth0_vlan entered promiscuous mode [ 24.778424][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.792653][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.801762][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.809897][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.818465][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.828053][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.837068][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.845585][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.854145][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.863017][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.871735][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.880125][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.904048][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.913239][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.922694][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.931163][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.939257][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.950611][ T285] device veth1_macvtap entered promiscuous mode [ 24.964802][ T284] device veth0_vlan entered promiscuous mode [ 24.981939][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.012247][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.038106][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.052915][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.061816][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.078828][ T284] device veth1_macvtap entered promiscuous mode [ 25.124670][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.134699][ T352] loop3: detected capacity change from 0 to 1024 [ 25.142520][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.160271][ T352] ======================================================= [ 25.160271][ T352] WARNING: The mand mount option has been deprecated and [ 25.160271][ T352] and is ignored by this kernel. Remove the mand [ 25.160271][ T352] option from the mount to silence this warning. [ 25.160271][ T352] ======================================================= [ 25.209338][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.220791][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.244013][ T359] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11'. [ 25.293369][ T352] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 25.353236][ T352] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3852: comm syz.3.4: Allocating blocks 497-513 which overlap fs metadata [ 25.375746][ T352] EXT4-fs (loop3): Remounting filesystem read-only [ 25.389126][ T352] EXT4-fs (loop3): pa ffff8881178ad9d8: logic 256, phys. 385, len 8 [ 25.397528][ T352] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 25.421822][ T376] netlink: 'syz.1.15': attribute type 5 has an invalid length. [ 25.438305][ T376] netlink: 45 bytes leftover after parsing attributes in process `syz.1.15'. [ 25.450789][ T352] EXT4-fs (loop3): Remounting filesystem read-only [ 25.494759][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 25.518185][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 25.536465][ T282] EXT4-fs (loop3): unmounting filesystem. [ 25.543580][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 25.556584][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 25.572637][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 25.587262][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 25.597899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 25.607730][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 25.623269][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 25.968406][ T411] loop1: detected capacity change from 0 to 256 [ 25.987929][ T411] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 26.094790][ T420] Zero length message leads to an empty skb [ 26.128572][ T424] mmap: syz.3.35 (424) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 26.298076][ T444] loop1: detected capacity change from 0 to 512 [ 26.311969][ T444] EXT4-fs: Ignoring removed nobh option [ 26.318071][ T444] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 26.333168][ T444] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 26.346086][ T444] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2823: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 26.361040][ T444] EXT4-fs (loop1): 1 truncate cleaned up [ 26.367256][ T444] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 26.407493][ T283] EXT4-fs (loop1): unmounting filesystem. [ 26.503804][ T453] loop1: detected capacity change from 0 to 512 [ 26.524065][ T453] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 26.560369][ T453] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 26.574549][ T453] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 26.579005][ T459] loop2: detected capacity change from 0 to 1024 [ 26.600406][ T459] EXT4-fs: Ignoring removed i_version option [ 26.606122][ T453] EXT4-fs (loop1): shut down requested (0) [ 26.612853][ T459] EXT4-fs (loop2): Test dummy encryption mode enabled [ 26.624037][ T459] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 26.657313][ T283] EXT4-fs (loop1): unmounting filesystem. [ 26.665352][ T459] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 26.705615][ T464] loop1: detected capacity change from 0 to 512 [ 26.708746][ T466] fscrypt: AES-256-XTS using blk-crypto-fallback [ 26.735110][ T464] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.51: inode has both inline data and extents flags [ 26.756676][ T464] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.51: couldn't read orphan inode 15 (err -117) [ 26.779236][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 26.779254][ T28] audit: type=1400 audit(1770913186.181:140): avc: denied { read } for pid=458 comm="syz.2.50" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 26.782008][ T466] overlayfs: conflicting lowerdir path [ 26.785673][ T28] audit: type=1400 audit(1770913186.181:141): avc: denied { add_name } for pid=458 comm="syz.2.50" name="#1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 26.808639][ T464] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 26.836045][ T28] audit: type=1400 audit(1770913186.181:142): avc: denied { remove_name } for pid=458 comm="syz.2.50" name="#1" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 26.865990][ T28] audit: type=1400 audit(1770913186.181:143): avc: denied { rename } for pid=458 comm="syz.2.50" name="#1" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.883821][ T435] loop3: detected capacity change from 0 to 131072 [ 26.905172][ T28] audit: type=1400 audit(1770913186.181:144): avc: denied { unlink } for pid=458 comm="syz.2.50" name="#1" dev="loop2" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 26.916704][ T435] F2FS-fs (loop3): invalid crc value [ 26.929602][ T28] audit: type=1400 audit(1770913186.181:145): avc: denied { unlink } for pid=458 comm="syz.2.50" name="#2" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.933494][ T283] EXT4-fs (loop1): unmounting filesystem. [ 26.962687][ T285] EXT4-fs (loop2): unmounting filesystem. [ 26.975438][ T435] F2FS-fs (loop3): Found nat_bits in checkpoint [ 27.075564][ T485] loop2: detected capacity change from 0 to 512 [ 27.098995][ T485] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 27.114752][ T435] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 27.186614][ T485] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 27.212414][ T485] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 27.318603][ T28] audit: type=1400 audit(1770913438.719:146): avc: denied { append } for pid=484 comm="syz.2.56" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.371991][ T512] loop1: detected capacity change from 0 to 256 [ 27.381678][ T285] EXT4-fs (loop2): unmounting filesystem. [ 27.397290][ T512] exfat: Deprecated parameter 'utf8' [ 27.407235][ T28] audit: type=1400 audit(1770913438.759:147): avc: denied { ioctl } for pid=484 comm="syz.2.56" path="/10/bus/file2" dev="loop2" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.436098][ T512] exfat: Deprecated parameter 'utf8' [ 27.447159][ T512] exfat: Deprecated parameter 'utf8' [ 27.467275][ T512] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 27.486735][ T28] audit: type=1400 audit(1770913438.839:148): avc: denied { create } for pid=514 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.546849][ T519] pimreg: tun_chr_ioctl cmd 1074025672 [ 27.558199][ T512] exFAT-fs (loop1): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 27.560310][ T519] pimreg: ignored: set checksum disabled [ 27.573485][ T28] audit: type=1400 audit(1770913438.849:149): avc: denied { write } for pid=514 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.590539][ T512] exFAT-fs (loop1): Filesystem has been set read-only [ 27.698183][ T524] loop2: detected capacity change from 0 to 512 [ 27.726363][ T524] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 27.755980][ T524] EXT4-fs (loop2): 1 truncate cleaned up [ 27.771257][ T524] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 27.841712][ T285] EXT4-fs (loop2): unmounting filesystem. [ 28.963511][ T609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.104'. [ 29.080308][ T617] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 29.090374][ T617] EXT4-fs (loop1): 1 truncate cleaned up [ 29.097936][ T617] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 29.166680][ T283] EXT4-fs (loop1): unmounting filesystem. [ 29.424200][ T631] netlink: 'syz.4.111': attribute type 5 has an invalid length. [ 29.432136][ T631] netlink: 45 bytes leftover after parsing attributes in process `syz.4.111'. [ 29.492817][ T638] exfat: Deprecated parameter 'utf8' [ 29.501690][ T638] exfat: Deprecated parameter 'utf8' [ 29.507413][ T638] exfat: Deprecated parameter 'utf8' [ 29.521602][ T638] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 29.561750][ T638] exFAT-fs (loop3): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 29.574050][ T638] exFAT-fs (loop3): Filesystem has been set read-only [ 29.796334][ T659] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 29.829391][ T659] EXT4-fs (loop4): 1 truncate cleaned up [ 29.845805][ T659] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 29.936546][ T286] EXT4-fs (loop4): unmounting filesystem. [ 30.041323][ T654] netlink: 20 bytes leftover after parsing attributes in process `syz.3.118'. [ 30.174258][ T674] set_capacity_and_notify: 4 callbacks suppressed [ 30.174278][ T674] loop3: detected capacity change from 0 to 512 [ 30.189282][ T674] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 30.210654][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 30.226010][ T674] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 30.248675][ T674] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 30.270379][ T674] EXT4-fs (loop3): shut down requested (0) [ 30.308940][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 30.325456][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 30.335614][ T682] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 30.345213][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 30.353506][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 30.362401][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.754941][ C1] sched: RT throttling activated [ 31.791798][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.800264][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.781941][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.801383][ T282] EXT4-fs (loop3): unmounting filesystem. [ 33.815859][ T696] pimreg: tun_chr_ioctl cmd 1074025688 [ 33.839098][ T688] pimreg: tun_chr_ioctl cmd 2147767506 [ 33.872608][ T705] xt_hashlimit: size too large, truncated to 1048576 [ 33.967479][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 33.967496][ T28] audit: type=1400 audit(1770913445.369:181): avc: denied { read } for pid=712 comm="syz.1.140" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.023489][ T28] audit: type=1400 audit(1770913445.419:182): avc: denied { watch watch_reads } for pid=717 comm="syz.1.143" path="/39/file0" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.024096][ T718] loop2: detected capacity change from 0 to 128 [ 34.110917][ T28] audit: type=1400 audit(1770913445.509:183): avc: denied { mount } for pid=716 comm="syz.2.142" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 34.153826][ T721] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 34.163653][ T28] audit: type=1400 audit(1770913445.529:184): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 34.212825][ T28] audit: type=1400 audit(1770913445.549:185): avc: denied { read } for pid=720 comm="syz.2.144" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.268438][ T28] audit: type=1400 audit(1770913445.549:186): avc: denied { open } for pid=720 comm="syz.2.144" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.313335][ T28] audit: type=1400 audit(1770913445.549:187): avc: denied { ioctl } for pid=720 comm="syz.2.144" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.348911][ T726] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 34.359536][ T28] audit: type=1400 audit(1770913445.599:188): avc: denied { write } for pid=720 comm="syz.2.144" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.415333][ T28] audit: type=1400 audit(1770913445.769:189): avc: denied { relabelto } for pid=725 comm="syz.0.145" name="21" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 34.483613][ T28] audit: type=1400 audit(1770913445.769:190): avc: denied { associate } for pid=725 comm="syz.0.145" name="21" dev="tmpfs" ino=129 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:man_t:s0" [ 34.927333][ T751] loop4: detected capacity change from 0 to 512 [ 34.944170][ T751] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.962426][ T751] EXT4-fs (loop4): 1 truncate cleaned up [ 34.968343][ T751] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 35.024889][ T286] EXT4-fs (loop4): unmounting filesystem. [ 35.136657][ T728] loop2: detected capacity change from 0 to 131072 [ 35.146654][ T728] F2FS-fs (loop2): Test dummy encryption mode enabled [ 35.156076][ T728] F2FS-fs (loop2): invalid crc value [ 35.166991][ T728] F2FS-fs (loop2): Found nat_bits in checkpoint [ 35.219317][ T728] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 35.360413][ T777] loop1: detected capacity change from 0 to 128 [ 35.664175][ T791] loop3: detected capacity change from 0 to 1024 [ 35.699615][ T791] EXT4-fs: Ignoring removed orlov option [ 35.742293][ T791] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 35.815609][ T791] EXT4-fs error (device loop3): ext4_lookup:1858: inode #14: comm syz.3.173: unexpected EA_INODE flag [ 35.843497][ T785] loop4: detected capacity change from 0 to 40427 [ 35.851123][ T282] EXT4-fs (loop3): unmounting filesystem. [ 35.883589][ T785] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 35.894647][ T785] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 35.919770][ T809] syz.0.179[809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.919848][ T809] syz.0.179[809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.921493][ T785] F2FS-fs (loop4): invalid crc value [ 35.978571][ T801] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.994612][ T801] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.998220][ T820] loop3: detected capacity change from 0 to 512 [ 36.002658][ T801] device bridge_slave_0 entered promiscuous mode [ 36.016083][ T801] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.023243][ T801] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.031220][ T801] device bridge_slave_1 entered promiscuous mode [ 36.038854][ T785] F2FS-fs (loop4): Found nat_bits in checkpoint [ 36.104739][ T785] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 36.115585][ T785] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 36.187763][ T785] syz.4.170: attempt to access beyond end of device [ 36.187763][ T785] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 36.257360][ T801] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.264465][ T801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.307082][ T43] device bridge_slave_1 left promiscuous mode [ 36.318962][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.327509][ T43] device bridge_slave_0 left promiscuous mode [ 36.333769][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.342574][ T43] device veth1_macvtap left promiscuous mode [ 36.348816][ T43] device veth0_vlan left promiscuous mode [ 36.385144][ T19] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.518114][ T848] netlink: 'syz.3.191': attribute type 4 has an invalid length. [ 36.527132][ T848] netlink: 32 bytes leftover after parsing attributes in process `syz.3.191'. [ 36.585013][ T19] usb 1-1: Using ep0 maxpacket: 8 [ 36.619399][ T685] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.627388][ T19] usb 1-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 36.641462][ T19] usb 1-1: config 0 interface 0 has no altsetting 0 [ 36.655004][ T19] usb 1-1: New USB device found, idVendor=056a, idProduct=0061, bcdDevice= 0.00 [ 36.656011][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.664181][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.680967][ T19] usb 1-1: config 0 descriptor?? [ 36.687681][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.712608][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.722894][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.731637][ T685] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.738752][ T685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.747489][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.756115][ T685] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.763262][ T685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.775447][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.798529][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.823008][ T801] device veth0_vlan entered promiscuous mode [ 36.829586][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.841883][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.852656][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.860572][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.892346][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.908881][ T801] device veth1_macvtap entered promiscuous mode [ 36.927858][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.940402][ T889] loop3: detected capacity change from 0 to 256 [ 36.949751][ T889] exfat: Deprecated parameter 'namecase' [ 36.955907][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.983757][ T889] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 37.017225][ T892] SELinux: failed to load policy [ 37.090350][ T19] wacom 0003:056A:0061.0001: Unknown device_type for 'HID 056a:0061'. Assuming pen. [ 37.107393][ T19] wacom 0003:056A:0061.0001: hidraw0: USB HID v0.09 Device [HID 056a:0061] on usb-dummy_hcd.0-1/input0 [ 37.119479][ T19] input: Wacom PenStation2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0061.0001/input/input4 [ 37.285208][ T910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 37.334241][ T24] usb 1-1: USB disconnect, device number 2 [ 37.395049][ T19] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 37.506332][ T924] loop2: detected capacity change from 0 to 40427 [ 37.513394][ T924] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 37.521360][ T924] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 37.530493][ T924] F2FS-fs (loop2): invalid crc value [ 37.538144][ T924] F2FS-fs (loop2): Found nat_bits in checkpoint [ 37.561977][ T924] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 37.569346][ T924] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 37.593404][ T19] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.611289][ T19] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.621306][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.641281][ T930] loop4: detected capacity change from 0 to 1024 [ 37.645042][ T19] usb 4-1: Product: syz [ 37.653971][ T19] usb 4-1: Manufacturer: syz [ 37.660206][ T19] usb 4-1: SerialNumber: syz [ 37.675934][ T930] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 37.688060][ T930] SELinux: Context system_u:object_r:cgroup_t:s0 is not valid (left unmapped). [ 37.741702][ T286] EXT4-fs (loop4): unmounting filesystem. [ 37.981127][ T950] loop2: detected capacity change from 0 to 256 [ 38.000804][ T950] exfat: Deprecated parameter 'utf8' [ 38.014877][ T950] exfat: Deprecated parameter 'namecase' [ 38.021119][ T950] exfat: Deprecated parameter 'namecase' [ 38.027093][ T950] exfat: Deprecated parameter 'utf8' [ 38.034813][ T950] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 38.389991][ T979] loop2: detected capacity change from 0 to 128 [ 38.443712][ T942] loop0: detected capacity change from 0 to 131072 [ 38.467387][ T942] F2FS-fs (loop0): invalid crc value [ 38.481991][ T984] FAT-fs (loop2): Directory bread(block 64) failed [ 38.494013][ T984] FAT-fs (loop2): Directory bread(block 65) failed [ 38.501751][ T984] FAT-fs (loop2): Directory bread(block 66) failed [ 38.508856][ T984] FAT-fs (loop2): Directory bread(block 67) failed [ 38.514299][ T942] F2FS-fs (loop0): Found nat_bits in checkpoint [ 38.516159][ T984] FAT-fs (loop2): Directory bread(block 68) failed [ 38.516184][ T984] FAT-fs (loop2): Directory bread(block 69) failed [ 38.516217][ T984] FAT-fs (loop2): Directory bread(block 70) failed [ 38.516235][ T984] FAT-fs (loop2): Directory bread(block 71) failed [ 38.516268][ T984] FAT-fs (loop2): Directory bread(block 72) failed [ 38.516286][ T984] FAT-fs (loop2): Directory bread(block 73) failed [ 38.614694][ T287] kernel write not supported for file bpf-prog (pid: 287 comm: kworker/0:2) [ 38.631391][ T942] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 38.681362][ T19] cdc_ncm 4-1:1.0: failed to get mac address [ 38.694027][ T19] cdc_ncm 4-1:1.0: bind() failure [ 38.715642][ T19] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 38.722967][ T19] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 38.753629][ T19] usb 4-1: USB disconnect, device number 2 [ 38.775619][ T1010] EXT4-fs: Ignoring removed bh option [ 38.924518][ T1010] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 38.987399][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 38.987416][ T28] audit: type=1400 audit(1770913450.389:245): avc: denied { watch } for pid=1009 comm="syz.4.256" path="/52/file1" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.022456][ T1010] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 80: comm syz.4.256: path /52/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 39.076103][ T1022] serio: Serial port ptm0 [ 39.110708][ T286] EXT4-fs (loop4): unmounting filesystem. [ 39.140577][ T28] audit: type=1400 audit(1770913450.539:246): avc: denied { ioctl } for pid=1027 comm="syz.4.262" path="socket:[18770]" dev="sockfs" ino=18770 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.255333][ T28] audit: type=1400 audit(1770913450.659:247): avc: denied { execute } for pid=1031 comm="syz.2.265" path="/75/cpuacct.usage_percpu" dev="tmpfs" ino=415 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.388945][ T1043] erofs: (device loop2): mounted with root inode @ nid 36. [ 39.421862][ T1040] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 39.424179][ T1043] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=46 [ 39.434324][ T1040] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.452859][ T1043] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=46 [ 39.462332][ T1043] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=46 [ 39.471597][ T1043] overlayfs: failed to get redirect (-117) [ 39.475455][ T1040] fs-verity: sha512 using implementation "sha512-avx2" [ 39.502806][ T1040] syz.3.267 (1040) used greatest stack depth: 21312 bytes left [ 39.526062][ T282] EXT4-fs (loop3): unmounting filesystem. [ 39.552288][ T28] audit: type=1400 audit(1770913450.949:248): avc: denied { create } for pid=1055 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.581091][ T1054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'. [ 39.590548][ T28] audit: type=1400 audit(1770913450.979:249): avc: denied { bind } for pid=1055 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.629638][ T28] audit: type=1400 audit(1770913450.979:250): avc: denied { listen } for pid=1055 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.657043][ T28] audit: type=1400 audit(1770913450.979:251): avc: denied { connect } for pid=1055 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.687035][ T28] audit: type=1400 audit(1770913451.079:252): avc: denied { setopt } for pid=1069 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.785806][ T28] audit: type=1400 audit(1770913451.179:253): avc: denied { shutdown } for pid=1081 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.850194][ T28] audit: type=1400 audit(1770913451.179:254): avc: denied { read } for pid=1081 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.955712][ T1063] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 39.983767][ T1063] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 40.012041][ T1063] F2FS-fs (loop0): invalid crc value [ 40.034629][ T1063] F2FS-fs (loop0): Found nat_bits in checkpoint [ 40.093874][ T1063] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 40.109457][ T1063] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 40.313770][ T1103] F2FS-fs (loop4): fault_injection options not supported [ 40.338606][ T1103] F2FS-fs (loop4): fault_type options not supported [ 40.367750][ T1103] F2FS-fs (loop4): invalid crc value [ 40.385924][ T1106] set_capacity_and_notify: 7 callbacks suppressed [ 40.385940][ T1106] loop2: detected capacity change from 0 to 40427 [ 40.399798][ T1103] F2FS-fs (loop4): Found nat_bits in checkpoint [ 40.412619][ T1127] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 40.432535][ T1133] process 'syz.0.305' launched './file0' with NULL argv: empty string added [ 40.448126][ T1133] Invalid argument reading file caps for ./file0 [ 40.450839][ T1106] F2FS-fs (loop2): invalid crc value [ 40.471278][ T1135] loop0: detected capacity change from 0 to 128 [ 40.480336][ T1106] F2FS-fs (loop2): Found nat_bits in checkpoint [ 40.493667][ T1103] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 40.519280][ T801] EXT4-fs (loop1): unmounting filesystem. [ 40.520194][ T1106] F2FS-fs (loop2): Start checkpoint disabled! [ 40.535916][ T1106] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 40.579046][ T1106] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 40.606659][ T1103] syz.4.293: attempt to access beyond end of device [ 40.606659][ T1103] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 40.631661][ T1106] capability: warning: `syz.2.295' uses 32-bit capabilities (legacy support in use) [ 40.648362][ T286] syz-executor: attempt to access beyond end of device [ 40.648362][ T286] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 40.891680][ T1159] loop0: detected capacity change from 0 to 8192 [ 40.927609][ T1172] loop3: detected capacity change from 0 to 2048 [ 41.001524][ T1180] loop2: detected capacity change from 0 to 128 [ 41.019257][ T1172] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 41.132683][ T282] EXT4-fs (loop3): unmounting filesystem. [ 41.198420][ T1177] loop1: detected capacity change from 0 to 40427 [ 41.245268][ T1177] F2FS-fs (loop1): invalid crc value [ 41.258400][ T1202] netlink: 'syz.2.334': attribute type 1 has an invalid length. [ 41.278616][ T1204] loop3: detected capacity change from 0 to 512 [ 41.285621][ T1177] F2FS-fs (loop1): Found nat_bits in checkpoint [ 41.321305][ T1204] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 41.360399][ T1177] F2FS-fs (loop1): Start checkpoint disabled! [ 41.373950][ T1177] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 41.401332][ T1177] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 41.468676][ T1213] EXT4-fs (loop3): unmounting filesystem. [ 41.524628][ T1219] loop0: detected capacity change from 0 to 2048 [ 41.589719][ T1219] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 41.693557][ T284] EXT4-fs (loop0): unmounting filesystem. [ 41.792019][ T1235] netlink: 'syz.0.348': attribute type 1 has an invalid length. [ 41.793214][ T1231] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.812661][ T1231] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.820245][ T1231] device bridge_slave_0 entered promiscuous mode [ 41.830446][ T1231] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.838081][ T1231] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.845731][ T1231] device bridge_slave_1 entered promiscuous mode [ 41.854374][ T1243] loop0: detected capacity change from 0 to 512 [ 41.894783][ T1243] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 41.916284][ T1243] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.944147][ T1243] capability: warning: `syz.0.350' uses deprecated v2 capabilities in a way that may be insecure [ 41.967339][ T284] EXT4-fs (loop0): unmounting filesystem. [ 41.979143][ T1231] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.986322][ T1231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.993822][ T1231] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.000901][ T1231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.047714][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.055557][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.064350][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.077978][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.092703][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.105487][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.112684][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.129263][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.137857][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.145473][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.171337][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.187332][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.203161][ T1231] device veth0_vlan entered promiscuous mode [ 42.210788][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.219739][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.228766][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.236897][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.250669][ T334] device bridge_slave_1 left promiscuous mode [ 42.264052][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.284422][ T334] device bridge_slave_0 left promiscuous mode [ 42.285293][ T1269] loop1: detected capacity change from 0 to 512 [ 42.301205][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.324070][ T1269] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 42.332702][ T334] device veth1_macvtap left promiscuous mode [ 42.339866][ T334] device veth0_vlan left promiscuous mode [ 42.611229][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.621187][ T1231] device veth1_macvtap entered promiscuous mode [ 42.632406][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.652210][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.697891][ T1274] EXT4-fs (loop1): unmounting filesystem. [ 42.824970][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 42.874981][ T19] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 42.992862][ T1297] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.000555][ T1297] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.016170][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.016399][ T1278] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 43.030207][ T1297] device bridge_slave_0 entered promiscuous mode [ 43.035741][ T1278] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 43.047086][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 43.059444][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.067550][ T24] usb 5-1: Product: syz [ 43.071476][ T1278] F2FS-fs (loop0): Found nat_bits in checkpoint [ 43.075961][ T24] usb 5-1: Manufacturer: syz [ 43.082666][ T24] usb 5-1: SerialNumber: syz [ 43.089289][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.100174][ T1297] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.107344][ T1297] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.116390][ T1297] device bridge_slave_1 entered promiscuous mode [ 43.123398][ T19] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 43.134868][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.144338][ T19] usb 3-1: config 0 descriptor?? [ 43.152374][ T1278] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 43.160126][ T1278] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 43.234501][ T1297] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.241614][ T1297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.248961][ T1297] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.255008][ T291] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 43.256040][ T1297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.297225][ T883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.305955][ T883] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.313455][ T883] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.336049][ T883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.344546][ T883] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.351799][ T883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.369321][ T883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.378045][ T883] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.385122][ T883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.409988][ T883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.418301][ T883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.437026][ T883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.445950][ T883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.454226][ T883] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.462841][ T883] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.470922][ T291] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 43.483105][ T1297] device veth0_vlan entered promiscuous mode [ 43.494825][ T291] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.506038][ T291] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.511555][ T883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.530306][ T291] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 43.545877][ T334] device bridge_slave_1 left promiscuous mode [ 43.553017][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.555272][ T19] waltop 0003:172F:0501.0002: unbalanced collection at end of report description [ 43.560634][ T291] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 43.578709][ T291] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 43.579979][ T19] waltop: probe of 0003:172F:0501.0002 failed with error -22 [ 43.594415][ T291] usb 6-1: Manufacturer: syz [ 43.599847][ T334] device bridge_slave_0 left promiscuous mode [ 43.606321][ T291] usb 6-1: config 0 descriptor?? [ 43.611715][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.623314][ T334] device veth1_macvtap left promiscuous mode [ 43.629621][ T334] device veth0_vlan left promiscuous mode [ 43.713181][ T1315] F2FS-fs (loop0): invalid crc value [ 43.721599][ T1315] F2FS-fs (loop0): Found nat_bits in checkpoint [ 43.741363][ T1297] device veth1_macvtap entered promiscuous mode [ 43.758477][ T883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.774086][ T1315] F2FS-fs (loop0): Start checkpoint disabled! [ 43.780742][ T1303] usb 3-1: USB disconnect, device number 2 [ 43.780979][ T1315] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 43.801448][ T883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.802681][ T1315] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 44.023900][ T291] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 44.031341][ T291] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 44.041307][ T291] appleir 0003:05AC:8243.0003: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 44.108773][ T24] cdc_ncm 5-1:1.0: failed to get mac address [ 44.115671][ T24] cdc_ncm 5-1:1.0: bind() failure [ 44.121757][ T24] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 44.128522][ T24] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 44.136489][ T24] usb 5-1: USB disconnect, device number 2 [ 44.306024][ T879] usb 6-1: USB disconnect, device number 2 [ 44.404445][ T1327] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 44.410993][ T1327] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 44.422518][ T1327] F2FS-fs (loop0): invalid crc value [ 44.429522][ T1327] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 44.470913][ T1327] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 44.478201][ T1327] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 44.514016][ T284] syz-executor: attempt to access beyond end of device [ 44.514016][ T284] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 44.607173][ T1345] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 44.642332][ T284] EXT4-fs (loop0): unmounting filesystem. [ 44.719690][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 44.719701][ T28] audit: type=1400 audit(1770913456.119:273): avc: denied { ioctl } for pid=1357 comm="syz.6.386" path="socket:[20155]" dev="sockfs" ino=20155 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.725928][ T19] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 44.790897][ T28] audit: type=1400 audit(1770913456.189:274): avc: denied { ioctl } for pid=1359 comm="syz.6.388" path="socket:[20747]" dev="sockfs" ino=20747 ioctlcmd=0x48de scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.805128][ T334] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.845772][ T28] audit: type=1400 audit(1770913456.239:275): avc: denied { map } for pid=1364 comm="syz.5.389" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 44.887333][ T28] audit: type=1400 audit(1770913456.239:276): avc: denied { read write } for pid=1364 comm="syz.5.389" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 44.946077][ T19] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 44.954320][ T19] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 44.955150][ T1362] syz.0.387 (1362) used greatest stack depth: 20720 bytes left [ 44.964721][ T19] usb 3-1: config 0 has no interface number 0 [ 44.992791][ T19] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 45.002043][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.010271][ T19] usb 3-1: Product: syz [ 45.011956][ T1372] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 45.014573][ T19] usb 3-1: Manufacturer: syz [ 45.026748][ T19] usb 3-1: SerialNumber: syz [ 45.028106][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 45.032179][ T19] usb 3-1: config 0 descriptor?? [ 45.045513][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.054484][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 45.063407][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.072124][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.081085][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.089540][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.098123][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.167570][ T28] audit: type=1400 audit(1770913456.569:277): avc: denied { connect } for pid=1379 comm="syz.0.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.194039][ T28] audit: type=1400 audit(1770913456.599:278): avc: denied { write } for pid=1379 comm="syz.0.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.238075][ T28] audit: type=1400 audit(1770913456.639:279): avc: denied { bind } for pid=1383 comm="syz.0.398" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.272607][ T28] audit: type=1400 audit(1770913456.669:280): avc: denied { name_bind } for pid=1383 comm="syz.0.398" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 45.296075][ T28] audit: type=1400 audit(1770913456.669:281): avc: denied { node_bind } for pid=1383 comm="syz.0.398" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 45.355206][ T28] audit: type=1400 audit(1770913456.749:282): avc: denied { map } for pid=1391 comm="syz.0.401" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.460342][ T19] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 45.475629][ T19] usb 3-1: No valid video chain found. [ 45.509352][ T1408] set_capacity_and_notify: 5 callbacks suppressed [ 45.509371][ T1408] loop5: detected capacity change from 0 to 256 [ 45.538253][ T1408] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.549353][ T1408] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 45.560161][ T1408] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 45.742537][ T19] usb 3-1: USB disconnect, device number 3 [ 45.893826][ T1429] loop5: detected capacity change from 0 to 512 [ 45.906747][ T1429] EXT4-fs: Ignoring removed nobh option [ 45.929780][ T1429] EXT4-fs error (device loop5): ext4_do_update_inode:5269: inode #3: comm syz.5.417: corrupted inode contents [ 45.942005][ T1429] EXT4-fs (loop5): Remounting filesystem read-only [ 45.950059][ T1429] EXT4-fs error (device loop5): ext4_dirty_inode:6134: inode #3: comm syz.5.417: mark_inode_dirty error [ 45.962041][ T1429] EXT4-fs (loop5): Remounting filesystem read-only [ 45.969096][ T1429] EXT4-fs error (device loop5): ext4_do_update_inode:5269: inode #3: comm syz.5.417: corrupted inode contents [ 45.981230][ T1429] EXT4-fs (loop5): Remounting filesystem read-only [ 45.988124][ T1429] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.417: mark_inode_dirty error [ 45.999658][ T1429] EXT4-fs (loop5): Remounting filesystem read-only [ 46.006608][ T1429] EXT4-fs error (device loop5): ext4_acquire_dquot:6798: comm syz.5.417: Failed to acquire dquot type 0 [ 46.018559][ T1429] EXT4-fs (loop5): Remounting filesystem read-only [ 46.025657][ T1429] EXT4-fs error (device loop5): ext4_do_update_inode:5269: inode #16: comm syz.5.417: corrupted inode contents [ 46.038260][ T1429] EXT4-fs (loop5): Remounting filesystem read-only [ 46.047691][ T1429] EXT4-fs error (device loop5): ext4_dirty_inode:6134: inode #16: comm syz.5.417: mark_inode_dirty error [ 46.059408][ T1429] EXT4-fs (loop5): Remounting filesystem read-only [ 46.066273][ T1429] EXT4-fs error (device loop5): ext4_do_update_inode:5269: inode #16: comm syz.5.417: corrupted inode contents [ 46.078303][ T1429] EXT4-fs (loop5): Remounting filesystem read-only [ 46.085021][ T1429] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #16: comm syz.5.417: mark_inode_dirty error [ 46.096608][ T1429] EXT4-fs (loop5): Remounting filesystem read-only [ 46.103160][ T1429] EXT4-fs error (device loop5): ext4_do_update_inode:5269: inode #16: comm syz.5.417: corrupted inode contents [ 46.115279][ T1429] EXT4-fs (loop5): Remounting filesystem read-only [ 46.121810][ T1429] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 46.130951][ T1429] EXT4-fs (loop5): Remounting filesystem read-only [ 46.137635][ T1429] EXT4-fs error (device loop5): ext4_do_update_inode:5269: inode #16: comm syz.5.417: corrupted inode contents [ 46.140938][ T1436] loop4: detected capacity change from 0 to 1024 [ 46.149783][ T1429] EXT4-fs (loop5): Remounting filesystem read-only [ 46.158435][ T1436] EXT4-fs: Ignoring removed bh option [ 46.162672][ T1429] EXT4-fs error (device loop5): ext4_truncate:4320: inode #16: comm syz.5.417: mark_inode_dirty error [ 46.179687][ T1429] EXT4-fs (loop5): Remounting filesystem read-only [ 46.186324][ T1429] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 46.195676][ T1429] EXT4-fs (loop5): Remounting filesystem read-only [ 46.202532][ T1429] EXT4-fs (loop5): 1 truncate cleaned up [ 46.207028][ T1436] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 46.208386][ T1429] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 46.226087][ T1429] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.254808][ T1231] EXT4-fs (loop5): unmounting filesystem. [ 46.309645][ T1446] loop5: detected capacity change from 0 to 2048 [ 46.356895][ T1446] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 46.397970][ T1446] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 46.413742][ T1446] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 46.426271][ T1446] EXT4-fs (loop5): This should not happen!! Data will be lost [ 46.426271][ T1446] [ 46.437132][ T1446] EXT4-fs (loop5): Total free blocks count 0 [ 46.443343][ T1446] EXT4-fs (loop5): Free/Dirty block details [ 46.449940][ T1446] EXT4-fs (loop5): free_blocks=66060288 [ 46.455710][ T1446] EXT4-fs (loop5): dirty_blocks=16 [ 46.460973][ T1446] EXT4-fs (loop5): Block reservation details [ 46.467220][ T1446] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 46.485616][ T1231] EXT4-fs (loop5): unmounting filesystem. [ 46.515164][ T19] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 46.531353][ T1460] loop5: detected capacity change from 0 to 1024 [ 46.541726][ T1460] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 46.560770][ T1460] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 46.576024][ T1460] EXT4-fs (loop5): shut down requested (0) [ 46.649134][ T1231] EXT4-fs (loop5): unmounting filesystem. [ 46.705070][ T19] usb 5-1: Using ep0 maxpacket: 8 [ 46.718987][ T19] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 46.727583][ T19] usb 5-1: config 0 has no interface number 0 [ 46.749374][ T19] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 46.758687][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.767177][ T19] usb 5-1: Product: syz [ 46.771383][ T19] usb 5-1: Manufacturer: syz [ 46.772092][ T1484] loop5: detected capacity change from 0 to 1024 [ 46.776246][ T19] usb 5-1: SerialNumber: syz [ 46.788105][ T19] usb 5-1: config 0 descriptor?? [ 46.795042][ T24] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 46.806370][ T1484] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 46.814877][ T1484] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.835174][ T414] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.840635][ T1363] Bluetooth: hci0: command 0x1003 tx timeout [ 46.848765][ T1360] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 46.855333][ T1231] EXT4-fs (loop5): unmounting filesystem. [ 46.883720][ T1492] loop5: detected capacity change from 0 to 256 [ 46.899073][ T1492] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 46.976093][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 46.985157][ T24] usb 1-1: config 1 has no interface number 0 [ 46.991284][ T24] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 47.003660][ T19] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 47.004586][ T24] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 47.013346][ T19] usb 5-1: No valid video chain found. [ 47.022664][ T24] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 47.033587][ T19] usb 5-1: USB disconnect, device number 3 [ 47.036330][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 47.052285][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 47.063553][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.072718][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.080859][ T24] usb 1-1: Product: syz [ 47.085120][ T24] usb 1-1: Manufacturer: syz [ 47.101701][ T1511] loop5: detected capacity change from 0 to 128 [ 47.108100][ T24] usb 1-1: SerialNumber: syz [ 47.113664][ T1458] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 47.142071][ T1511] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 47.151003][ T1511] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.170224][ T1514] loop6: detected capacity change from 0 to 1024 [ 47.188905][ T1231] EXT4-fs (loop5): unmounting filesystem. [ 47.191103][ T1514] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 47.233459][ T1518] loop5: detected capacity change from 0 to 128 [ 47.244480][ T1297] EXT4-fs (loop6): unmounting filesystem. [ 47.247307][ T1518] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 47.263724][ T1518] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.291901][ T1231] EXT4-fs (loop5): unmounting filesystem. [ 47.324318][ T1458] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 47.338604][ T1523] EXT4-fs: Ignoring removed bh option [ 47.378868][ T1523] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 47.402873][ T1523] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 80: comm syz.5.453: path /35/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 47.442400][ T1231] EXT4-fs (loop5): unmounting filesystem. [ 47.462012][ T1533] erofs: (device loop5): mounted with root inode @ nid 36. [ 47.536860][ T1458] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 47.599541][ T286] EXT4-fs (loop4): unmounting filesystem. [ 47.865005][ T6] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 47.885526][ T1317] ================================================================== [ 47.893643][ T1317] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 47.900710][ T1317] Write of size 8 at addr ffff888117580a00 by task kworker/1:5/1317 [ 47.908711][ T1317] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 47.911053][ T1317] CPU: 1 PID: 1317 Comm: kworker/1:5 Not tainted syzkaller #0 [ 47.918528][ T1317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 47.928601][ T1317] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 47.934671][ T1317] Call Trace: [ 47.937937][ T1317] [ 47.940944][ T1317] __dump_stack+0x21/0x24 [ 47.945290][ T1317] dump_stack_lvl+0x110/0x170 [ 47.950071][ T1317] ? __cfi_dump_stack_lvl+0x8/0x8 [ 47.955104][ T1317] ? __cfi__printk+0x8/0x8 [ 47.959515][ T1317] ? enqueue_timer+0xae/0x480 [ 47.964289][ T1317] print_address_description+0x71/0x200 [ 47.969825][ T1317] print_report+0x4a/0x60 [ 47.974327][ T1317] kasan_report+0x122/0x150 [ 47.978832][ T1317] ? enqueue_timer+0xae/0x480 [ 47.983519][ T1317] __asan_report_store8_noabort+0x17/0x20 [ 47.989492][ T1317] enqueue_timer+0xae/0x480 [ 47.994119][ T1317] __mod_timer+0x84c/0xc00 [ 47.998523][ T1317] ? kthread_data+0x50/0xc0 [ 48.003101][ T1317] mod_timer+0x1f/0x30 [ 48.007253][ T1317] ? wg_timers_any_authenticated_packet_traversal+0x81/0x1a0 [ 48.014609][ T1317] wg_timers_any_authenticated_packet_traversal+0x133/0x1a0 [ 48.021967][ T1317] wg_packet_tx_worker+0x15e/0x4e0 [ 48.027159][ T1317] process_one_work+0x71f/0xc40 [ 48.032005][ T1317] worker_thread+0xa29/0x11e0 [ 48.036754][ T1317] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 48.042292][ T1317] kthread+0x281/0x320 [ 48.046355][ T1317] ? __cfi_worker_thread+0x10/0x10 [ 48.051476][ T1317] ? __cfi_kthread+0x10/0x10 [ 48.056062][ T1317] ret_from_fork+0x1f/0x30 [ 48.060481][ T1317] [ 48.063511][ T1317] [ 48.065888][ T1317] Allocated by task 1360: [ 48.070211][ T1317] kasan_set_track+0x4b/0x70 [ 48.074900][ T1317] kasan_save_alloc_info+0x25/0x30 [ 48.080004][ T1317] __kasan_kmalloc+0x95/0xb0 [ 48.084595][ T1317] __kmalloc+0xb1/0x1e0 [ 48.088735][ T1317] hci_alloc_dev_priv+0x27/0x1bd0 [ 48.093862][ T1317] hci_uart_tty_ioctl+0x3d6/0xa20 [ 48.098887][ T1317] tty_ioctl+0x8ef/0xc60 [ 48.103203][ T1317] __se_sys_ioctl+0x12f/0x1b0 [ 48.107866][ T1317] __x64_sys_ioctl+0x7b/0x90 [ 48.112508][ T1317] x64_sys_call+0x58b/0x9a0 [ 48.117111][ T1317] do_syscall_64+0x4c/0xa0 [ 48.121532][ T1317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.127459][ T1317] [ 48.129783][ T1317] Freed by task 1360: [ 48.133753][ T1317] kasan_set_track+0x4b/0x70 [ 48.138342][ T1317] kasan_save_free_info+0x31/0x50 [ 48.143373][ T1317] ____kasan_slab_free+0x132/0x180 [ 48.148471][ T1317] __kasan_slab_free+0x11/0x20 [ 48.153222][ T1317] slab_free_freelist_hook+0xc2/0x190 [ 48.158668][ T1317] __kmem_cache_free+0xb7/0x1b0 [ 48.163512][ T1317] kfree+0x6f/0xf0 [ 48.167214][ T1317] hci_release_dev+0x12a3/0x13b0 [ 48.172157][ T1317] bt_host_release+0x82/0x90 [ 48.176727][ T1317] device_release+0xa4/0x1d0 [ 48.181313][ T1317] kobject_put+0x19d/0x280 [ 48.185723][ T1317] put_device+0x1f/0x30 [ 48.190117][ T1317] hci_dev_cmd+0x279/0x740 [ 48.194541][ T1317] hci_sock_ioctl+0x41e/0x7f0 [ 48.199217][ T1317] sock_do_ioctl+0x114/0x330 [ 48.203802][ T1317] sock_ioctl+0x4ca/0x720 [ 48.208116][ T1317] __se_sys_ioctl+0x12f/0x1b0 [ 48.212828][ T1317] __x64_sys_ioctl+0x7b/0x90 [ 48.217448][ T1317] x64_sys_call+0x58b/0x9a0 [ 48.221952][ T1317] do_syscall_64+0x4c/0xa0 [ 48.226453][ T1317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.232521][ T1317] [ 48.234836][ T1317] Last potentially related work creation: [ 48.240617][ T1317] kasan_save_stack+0x3a/0x60 [ 48.245456][ T1317] __kasan_record_aux_stack+0xb6/0xc0 [ 48.250917][ T1317] kasan_record_aux_stack_noalloc+0xb/0x10 [ 48.256891][ T1317] insert_work+0x51/0x300 [ 48.261290][ T1317] __queue_work+0x9b1/0xd30 [ 48.265836][ T1317] queue_work_on+0xde/0x150 [ 48.270605][ T1317] __hci_cmd_sync_sk+0xa7f/0xd30 [ 48.275647][ T1317] hci_cmd_sync_status+0x53/0x120 [ 48.280951][ T1317] hci_dev_cmd+0x648/0x740 [ 48.285385][ T1317] hci_sock_ioctl+0x41e/0x7f0 [ 48.290259][ T1317] sock_do_ioctl+0x114/0x330 [ 48.294847][ T1317] sock_ioctl+0x4ca/0x720 [ 48.299164][ T1317] __se_sys_ioctl+0x12f/0x1b0 [ 48.303827][ T1317] __x64_sys_ioctl+0x7b/0x90 [ 48.308426][ T1317] x64_sys_call+0x58b/0x9a0 [ 48.312919][ T1317] do_syscall_64+0x4c/0xa0 [ 48.317521][ T1317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.323502][ T1317] [ 48.325828][ T1317] Second to last potentially related work creation: [ 48.332501][ T1317] kasan_save_stack+0x3a/0x60 [ 48.337171][ T1317] __kasan_record_aux_stack+0xb6/0xc0 [ 48.342624][ T1317] kasan_record_aux_stack_noalloc+0xb/0x10 [ 48.348417][ T1317] insert_work+0x51/0x300 [ 48.352755][ T1317] __queue_work+0x9b1/0xd30 [ 48.357253][ T1317] queue_work_on+0xde/0x150 [ 48.361748][ T1317] hci_cmd_timeout+0x191/0x200 [ 48.366595][ T1317] process_one_work+0x71f/0xc40 [ 48.371431][ T1317] worker_thread+0xa29/0x11e0 [ 48.376100][ T1317] kthread+0x281/0x320 [ 48.380217][ T1317] ret_from_fork+0x1f/0x30 [ 48.384637][ T1317] [ 48.387053][ T1317] The buggy address belongs to the object at ffff888117580000 [ 48.387053][ T1317] which belongs to the cache kmalloc-8k of size 8192 [ 48.401232][ T1317] The buggy address is located 2560 bytes inside of [ 48.401232][ T1317] 8192-byte region [ffff888117580000, ffff888117582000) [ 48.414670][ T1317] [ 48.416984][ T1317] The buggy address belongs to the physical page: [ 48.423378][ T1317] page:ffffea00045d6000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117580 [ 48.433618][ T1317] head:ffffea00045d6000 order:3 compound_mapcount:0 compound_pincount:0 [ 48.441945][ T1317] flags: 0x4000000000010200(slab|head|zone=1) [ 48.448094][ T1317] raw: 4000000000010200 ffffea0004608800 dead000000000003 ffff888100043500 [ 48.456664][ T1317] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 48.465402][ T1317] page dumped because: kasan: bad access detected [ 48.472015][ T1317] page_owner tracks the page as allocated [ 48.477722][ T1317] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 924, tgid 923 (syz.2.223), ts 37513200208, free_ts 37414798773 [ 48.500121][ T1317] post_alloc_hook+0x1f5/0x210 [ 48.504895][ T1317] prep_new_page+0x1c/0x110 [ 48.509400][ T1317] get_page_from_freelist+0x2d12/0x2d80 [ 48.515019][ T1317] __alloc_pages+0x1d9/0x480 [ 48.519803][ T1317] alloc_slab_page+0x6e/0xf0 [ 48.524411][ T1317] new_slab+0x98/0x3d0 [ 48.528496][ T1317] ___slab_alloc+0x6bd/0xb20 [ 48.533095][ T1317] __slab_alloc+0x5e/0xa0 [ 48.537410][ T1317] __kmem_cache_alloc_node+0x203/0x2c0 [ 48.542877][ T1317] kmalloc_trace+0x29/0xb0 [ 48.547279][ T1317] f2fs_fill_super+0xc6/0x6e20 [ 48.552131][ T1317] mount_bdev+0x2bc/0x3f0 [ 48.556486][ T1317] f2fs_mount+0x34/0x40 [ 48.560657][ T1317] legacy_get_tree+0xfe/0x1a0 [ 48.565370][ T1317] vfs_get_tree+0x9a/0x270 [ 48.569816][ T1317] do_new_mount+0x25a/0xa20 [ 48.574436][ T1317] page last free stack trace: [ 48.579107][ T1317] free_unref_page_prepare+0x742/0x750 [ 48.584571][ T1317] free_unref_page+0x95/0x540 [ 48.589241][ T1317] __free_pages+0x67/0x100 [ 48.593975][ T1317] __free_slab+0xca/0x1a0 [ 48.598398][ T1317] __unfreeze_partials+0x160/0x190 [ 48.603549][ T1317] put_cpu_partial+0xa9/0x100 [ 48.608298][ T1317] __slab_free+0x1c4/0x280 [ 48.612738][ T1317] ___cache_free+0xbf/0xd0 [ 48.617243][ T1317] qlist_free_all+0xc6/0x140 [ 48.621843][ T1317] kasan_quarantine_reduce+0x14a/0x170 [ 48.627312][ T1317] __kasan_slab_alloc+0x24/0x80 [ 48.632253][ T1317] slab_post_alloc_hook+0x4f/0x2d0 [ 48.637450][ T1317] kmem_cache_alloc+0x16e/0x330 [ 48.642305][ T1317] taskstats_exit+0x1e6/0xaf0 [ 48.646980][ T1317] do_exit+0x877/0x2660 [ 48.651140][ T1317] do_group_exit+0x210/0x2d0 [ 48.655741][ T1317] [ 48.658067][ T1317] Memory state around the buggy address: [ 48.663692][ T1317] ffff888117580900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.671837][ T1317] ffff888117580980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.679903][ T1317] >ffff888117580a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.688053][ T1317] ^ [ 48.692115][ T1317] ffff888117580a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.700275][ T1317] ffff888117580b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.708580][ T1317] ================================================================== [ 48.716636][ T1317] Disabling lock debugging due to kernel taint [ 48.732004][ T1583] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 48.740169][ T24] cdc_ncm 1-1:1.1: bind() failure [ 48.845257][ T6] usb 7-1: Using ep0 maxpacket: 16 [ 48.914976][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 48.926827][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 48.935338][ C1] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B syzkaller #0 [ 48.944450][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 48.954728][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 48.960053][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 18 47 29 00 4c 89 ff e8 10 31 b8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 cc 74 6e 00 49 8b 7d 00 e8 a3 2c [ 48.979842][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 48.985916][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888122d0d100 [ 48.994179][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 49.002147][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: fffffffffffffffb [ 49.010128][ C1] R10: dffffc0000000000 R11: ffffed1022eb0139 R12: dffffc0000000000 [ 49.018098][ C1] R13: 0000000000000000 R14: ffff8881175809c8 R15: 0000000000000008 [ 49.026070][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 49.035088][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.041673][ C1] CR2: 00007f409c856fe0 CR3: 000000010fef6000 CR4: 00000000003506a0 [ 49.049678][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.057822][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.065800][ C1] Call Trace: [ 49.069074][ C1] [ 49.072006][ C1] delayed_work_timer_fn+0x61/0x80 [ 49.077308][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 49.083226][ C1] call_timer_fn+0x46/0x2a0 [ 49.087914][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 49.093723][ C1] __run_timers+0x689/0x9f0 [ 49.098230][ C1] ? calc_index+0x200/0x200 [ 49.102734][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 49.107942][ C1] run_timer_softirq+0x6a/0xf0 [ 49.112716][ C1] handle_softirqs+0x1d7/0x600 [ 49.117653][ C1] __irq_exit_rcu+0x52/0xf0 [ 49.122244][ C1] irq_exit_rcu+0x9/0x10 [ 49.126572][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 49.132289][ C1] [ 49.135215][ C1] [ 49.138145][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 49.144229][ C1] RIP: 0010:memset_erms+0x0/0x10 [ 49.149371][ C1] Code: 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 <49> 89 f9 40 88 f0 48 89 d1 f3 aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 [ 49.169170][ C1] RSP: 0018:ffffc9000db1f590 EFLAGS: 00000207 [ 49.175254][ C1] RAX: ffffed102604e200 RBX: 0000000000000000 RCX: 00000000000000ff [ 49.183317][ C1] RDX: 0000000000000200 RSI: 00000000000000ff RDI: ffffed102604e200 [ 49.191287][ C1] RBP: ffffc9000db1f598 R08: dffffc0000000000 R09: 1ffff11020881388 [ 49.199439][ C1] R10: dffffc0000000000 R11: ffffed1020881389 R12: ffffea0004c09c40 [ 49.207505][ C1] R13: 1ffffd4000981301 R14: 0000000000000000 R15: 0000000000000000 [ 49.215566][ C1] ? kasan_poison+0x62/0x70 [ 49.220161][ C1] __kasan_poison_pages+0x2d/0x30 [ 49.225198][ C1] free_unref_page_prepare+0x1bf/0x750 [ 49.230748][ C1] free_unref_page+0x95/0x540 [ 49.235610][ C1] ? __cfi_free_unref_page+0x10/0x10 [ 49.241004][ C1] __free_pages+0x67/0x100 [ 49.245510][ C1] __vunmap+0x9c0/0xb80 [ 49.249677][ C1] ? __kasan_check_write+0x14/0x20 [ 49.254886][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 49.260793][ C1] ? vunmap+0x60/0x60 [ 49.265032][ C1] ? __cfi_call_rcu+0x10/0x10 [ 49.269830][ C1] ? security_file_free+0xd8/0xf0 [ 49.274917][ C1] vfree+0x61/0x90 [ 49.278644][ C1] kcov_close+0x2b/0x50 [ 49.282825][ C1] ? __cfi_kcov_close+0x10/0x10 [ 49.287704][ C1] __fput+0x1fc/0x8f0 [ 49.291713][ C1] ____fput+0x15/0x20 [ 49.295703][ C1] task_work_run+0x1e1/0x250 [ 49.300299][ C1] ? __cfi_task_work_run+0x10/0x10 [ 49.305498][ C1] ? free_nsproxy+0x21f/0x270 [ 49.310182][ C1] do_exit+0xa35/0x2660 [ 49.314343][ C1] ? __cfi_do_exit+0x10/0x10 [ 49.318977][ C1] ? __schedule+0xbae/0x1500 [ 49.323613][ C1] ? __kasan_check_write+0x14/0x20 [ 49.328755][ C1] ? _raw_spin_lock_irq+0x95/0xf0 [ 49.333795][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 49.339347][ C1] do_group_exit+0x210/0x2d0 [ 49.344052][ C1] ? __kasan_check_write+0x14/0x20 [ 49.349264][ C1] get_signal+0x13b5/0x1520 [ 49.353946][ C1] ? memset+0x35/0x40 [ 49.357928][ C1] arch_do_signal_or_restart+0xd1/0x1140 [ 49.363562][ C1] ? __cfi_hrtimer_nanosleep+0x10/0x10 [ 49.369112][ C1] ? __cfi_hrtimer_wakeup+0x10/0x10 [ 49.374323][ C1] ? get_timespec64+0x116/0x1b0 [ 49.379188][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 49.385364][ C1] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 49.391028][ C1] exit_to_user_mode_loop+0x7a/0xb0 [ 49.396238][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 49.401703][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 49.407163][ C1] do_syscall_64+0x58/0xa0 [ 49.411581][ C1] ? clear_bhb_loop+0x30/0x80 [ 49.416268][ C1] ? clear_bhb_loop+0x30/0x80 [ 49.420941][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 49.426839][ C1] RIP: 0033:0x7f2231d57197 [ 49.431253][ C1] Code: Unable to access opcode bytes at 0x7f2231d5716d. [ 49.438372][ C1] RSP: 002b:00007ffe5389cf80 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 49.446876][ C1] RAX: 0000000000000000 RBX: 000055556547f500 RCX: 00007f2231d57197 [ 49.454999][ C1] RDX: 00007ffe5389cfc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.462970][ C1] RBP: 00007ffe5389d02c R08: 0000000000000000 R09: 0000000000000000 [ 49.470937][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 49.479339][ C1] R13: 00000000000927c0 R14: 000000000000bb08 R15: 00007ffe5389d080 [ 49.487398][ C1] [ 49.490416][ C1] Modules linked in: [ 49.494344][ C1] ---[ end trace 0000000000000000 ]--- [ 49.499802][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 49.505090][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 18 47 29 00 4c 89 ff e8 10 31 b8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 cc 74 6e 00 49 8b 7d 00 e8 a3 2c [ 49.524963][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 49.531056][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888122d0d100 [ 49.539066][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 49.547135][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: fffffffffffffffb [ 49.555109][ C1] R10: dffffc0000000000 R11: ffffed1022eb0139 R12: dffffc0000000000 [ 49.563203][ C1] R13: 0000000000000000 R14: ffff8881175809c8 R15: 0000000000000008 [ 49.571260][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 49.580195][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.586781][ C1] CR2: 00007f409c856fe0 CR3: 000000010fef6000 CR4: 00000000003506a0 [ 49.595016][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.602999][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.611007][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 49.618612][ C1] Kernel Offset: disabled [ 49.623031][ C1] Rebooting in 86400 seconds..