last executing test programs: 1m27.422483832s ago: executing program 0 (id=427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) close(r2) 1m27.338727243s ago: executing program 0 (id=428): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_emit_ethernet(0x86, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB="696f636861720065743d6d6163677265656b2c066d61736b3d30303030303030303030303030303030303030303030352c6e616d65636173653d312c7569643d", @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1528, &(0x7f00000014c0)="$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") socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) 1m24.440613629s ago: executing program 0 (id=430): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="1b0000002000c9"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) 1m20.824289134s ago: executing program 0 (id=436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) mprotect(&(0x7f00001c0000/0x1000)=nil, 0x1000, 0x1000008) syz_emit_ethernet(0x54, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000380)=[{0x6, 0xff, 0x5, 0x7fff000a}, {0x40, 0xb, 0x56, 0x400}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x81, 0x90) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000110600"]) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000240)={0x4, &(0x7f0000000340)=[{0x4, 0xa, 0x3, 0x3ff}, {0xc, 0x7, 0xbd, 0x106}, {0x8, 0x9, 0x7, 0x5}, {0x9, 0xfd, 0x0, 0x6}]}) 1m19.999593595s ago: executing program 0 (id=444): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB, @ANYRES32=0x0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x3d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x1}, {}, {0x16}, {0x0, 0x4}, {0x0, 0x0, 0x7}, {0xffff}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x101}, {0x0, 0x0, 0x4}, {}, {0x7}, {0x2}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0xffff, 0x3}, {}, {}, {}, {}, {0x4000}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xff6d) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000200001002cbd7000000000000a801000000000070500000000000000200100000000000000000000a70f0b9d"], 0x30}}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getneigh={0xf, 0x1e, 0x300, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x4e}, 0x1, 0x0, 0x0, 0x2404c081}, 0x0) 1m18.504652164s ago: executing program 0 (id=449): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}], [], 0x6b}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_read_part_table(0x630, &(0x7f0000000000)="$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") dup(r5) (async) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xaaaac45, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000130400000000000000000000000000000d00000000000000000000000200000000000000000000000b02000000000000006100"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m3.461796203s ago: executing program 32 (id=449): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}], [], 0x6b}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_read_part_table(0x630, &(0x7f0000000000)="$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") dup(r5) (async) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xaaaac45, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000130400000000000000000000000000000d00000000000000000000000200000000000000000000000b02000000000000006100"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6.922212983s ago: executing program 3 (id=761): openat$ptmx(0xffffffffffffff9c, 0x0, 0x40100, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xd0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) futex(&(0x7f0000000740)=0x2, 0x6, 0x2, &(0x7f0000000780)={0x77359400}, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, 0x0) truncate(0x0, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00fb9700051ede170b88f7172aa1f2834b4425376712002c0d2e9fbd1f0500000000000000f6c0dd3fcbd411cee8679935cc102e2afcea62dc1e000004a734c16c176d54ddd6072d59386040d3f723d1063caf0c796d35c991144de9c80eacba09cf83b1f15a17d6489bec631a15315bf8661e07418759873b080000004f9446d06e6891097cceadba67b9d26dddc678acdd5d5e3ccb00c97ee1a9d800a4a4"], 0x97, 0x3) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x759, &(0x7f0000000880)={[{@noload}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@jqfmt_vfsv0, 0x0}, {@usrjquota}, {@noload}, {@jqfmt_vfsv1}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@noacl}, {@resgid}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f8, &(0x7f0000000200)="$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") r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 6.257077392s ago: executing program 4 (id=766): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_emit_ethernet(0x86, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB="696f636861720065743d6d6163677265656b2c066d61736b3d30303030303030303030303030303030303030303030352c6e616d65636173653d312c7569643d", @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1528, &(0x7f00000014c0)="$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") socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) 5.782792157s ago: executing program 2 (id=768): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) ioprio_set$pid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ioprio_get$pid(0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback={0x3000000000000000}}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) (async) fcntl$setstatus(r0, 0x4, 0x42000) r3 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) r4 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 5.682435409s ago: executing program 2 (id=769): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="15e6a3751d8cf3d8455e90a6692a021aa1fd4dccd462856a3b0df1ff64150003427d9e65a1cac67de994fe268f7b39626f31e6e1915a00bd2b18ff9db7a86872a3ab9ea13e311d901a3e8c3fd26d776b7044c8834d1bfab2a91ebc832677b522d4e50604e80470bf8396ff97bcd4f43ebbd1276603fb87f325fbca5d4326c5c79dac3fbc091ba392b463a17ca2eb9f8373949a"], 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x141840, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) close(r5) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r8, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x20}}, 0x50) bind$bt_sco(r8, &(0x7f0000000280)={0x1f, @none}, 0x8) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r8) 4.652967802s ago: executing program 1 (id=773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) mprotect(&(0x7f00001c0000/0x1000)=nil, 0x1000, 0x1000008) syz_emit_ethernet(0x54, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000110600"]) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000240)={0x4, &(0x7f0000000340)=[{0x4, 0xa, 0x3, 0x3ff}, {0xc, 0x7, 0xbd, 0x106}, {0x8, 0x9, 0x7, 0x5}, {0x9, 0xfd, 0x0, 0x6}]}) 3.278602799s ago: executing program 5 (id=774): r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8954, &(0x7f0000000000)={{}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x4, {0x2, 0x0, @multicast2}, 'lo\x00'}) 3.19937729s ago: executing program 2 (id=775): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000c40)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="d308fa8a3d91eaf305a419acc4bedc93724f2a2efd151d654add936cbf8537ded20124a07652052a748eeae000da5e22c1d55b9a8cfd392162a9583693c3a48edc"], 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000001c0)={0x9, {{0x2, 0xfffe, @multicast2}}, 0x1, 0x2, [{{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @empty}}]}, 0x190) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000070000000000000000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7f6ff0000000000b703000000000000850000007000000095"], &(0x7f0000000bc0)='syzkaller\x00', 0xff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000006c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000300)) r8 = dup(r4) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000540)="66b90a0400000f32660f1ac1f26d66b9800000c00f326635001000000f30653ef68b090000260fc758caf20f06642ef20f013cbaf80c66b80eafb18566efbafc0cec360f4767eb", 0x47}], 0x1, 0x0, 0x0, 0x0) r10 = syz_usb_connect$uac1(0x2, 0xe9, &(0x7f0000000700)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7, 0x3, 0x1, 0x9, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x4}, [@extension_unit={0xa, 0x24, 0x8, 0x3, 0x73da, 0x4, "4e27d8"}, @extension_unit={0xd, 0x24, 0x8, 0x2, 0x4, 0x6, "c7b9ecad97c7"}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x2, 0x9, "1f968f5223cc"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xf7, 0x3, 0xff, 0x81, "23a82883d7d0a91a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0xbd, 0x4, {0x7, 0x25, 0x1, 0x2, 0x9, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x3, 0x4}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x6, 0x4, 0x7, 0x8, "6b83201345bac95e"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xb, 0x6, 0x10, '~'}, @as_header={0x7, 0x24, 0x1, 0x6, 0x4, 0x1001}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xf3, 0x4, 0x0, 0x5, "08c5a8", "ab"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xb, 0x2, 0xf9, 0xfc, "57df489e6591f5bd"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3f7, 0x42, 0xc5, 0x7, {0x7, 0x25, 0x1, 0x81, 0xfd, 0x5}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x201, 0x9, 0x8, 0x5, 0x20, 0x2}, 0x2a, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f0000030b100108040002020000ea10100a0590e312291450967a000000110500300000000a10030001000c203d10"], 0x2, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x56, &(0x7f00000005c0)=@string={0x56, 0x3, "f1312286131e8bf917ecd0495f1df727e1822dabe2319d74c0c406dcd7ed28a880d8dee77e313dd4167f7ee9c47d37bbdd568d310ba6f7edd3387e1ebf1969983402fa71f5a945f75407267d9713b91ee64f34a5"}}]}) syz_usb_control_io$uac1(r10, &(0x7f0000000840)={0x14, &(0x7f0000000680)={0x40, 0x2, 0x20, {0x20, 0x22, "eb04fb9893a27262fb11abc8ff53884b6c522067b3c3904f32c0f119e10a"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}}, &(0x7f0000000a80)={0x44, &(0x7f0000000880)={0x20, 0x1, 0x29, "01a6fda401c8cf289b4c5984f9de9cd0087b16a896d6766af57786561f877ab5de135386fad10ab82f"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000940)={0x20, 0x81, 0x2, "f307"}, &(0x7f0000000980)={0x20, 0x82, 0x3, '\b;:'}, &(0x7f00000009c0)={0x20, 0x83, 0x1, ','}, &(0x7f0000000a00)={0x20, 0x84, 0x4, "7abaf20f"}, &(0x7f0000000a40)={0x20, 0x85, 0x3, "93e14b"}}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x10) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000025"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r14, r13}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) 3.19899692s ago: executing program 3 (id=776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}}, 0x0) 3.17449583s ago: executing program 5 (id=777): prlimit64(0x0, 0xe, 0x0, 0x0) unshare(0x2040600) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) ioprio_get$pid(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) 3.126751731s ago: executing program 1 (id=778): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000bbb6000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r6, &(0x7f0000001140), 0x700, 0x2, 0x0) 3.052680062s ago: executing program 3 (id=779): socket$inet(0x2, 0xa, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x20200, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x6, @local}, 0x4, {0x2, 0x0, @broadcast}, 'lo\x00'}) syz_usb_connect(0x2, 0x3d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000033aab94028e8a8ce03500102030109022b00010000f800090478000201039cfd09050202001945830607a5010103000009050c", @ANYRES64], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 2.858084954s ago: executing program 5 (id=780): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mkdirat(r2, &(0x7f0000000140)='./file0\x00', 0x61) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f050440000009058303"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e24, 0x8001, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x88, r4, r7}, {0x282c, 0x7fff, 0x6, 0x2, 0x9, 0x6, 0xf55, 0x8dc4}, {0x9, 0x1, 0x1, 0x8000000000000001}, 0x0, 0x6e6bbf, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d6, 0x33}, 0xa, @in=@multicast1, 0x3505, 0x3, 0x1, 0x0, 0x5, 0x0, 0x2}}, 0xe8) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000600)=""/159, &(0x7f0000000180)=0x9f) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x30, 0x25, 0x4ee4e6a52ff56541, 0x20, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 2.630950917s ago: executing program 4 (id=781): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0}, 0x20) prlimit64(0x0, 0x4, &(0x7f0000000300)={0xfffffffffffffffd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000030000000800000000000000", @ANYRES32, @ANYBLOB="0000000000009348a5a376e47488c902b0d60000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) socket$igmp(0x2, 0x3, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x2, 0x801) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000240)={0x0, r4}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000040)={0x0, r4, 0x1}) 2.578387378s ago: executing program 4 (id=782): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='fib_table_lookup\x00', r1, 0x0, 0x4000000000}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf7, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e141308004be0ffff00124000632f77fbac141416ac141416441805034d2f87e5940c05ab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff40000", 0x0, 0xfe, 0x60000000}, 0x50) 2.530237048s ago: executing program 4 (id=783): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1ef8ff0001fa8f8e225f587e0700029001000000", @ANYRES32=0x1, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000000000000000d00000000000000", @ANYRES32, @ANYRES16=0x0, @ANYRES32, @ANYRES8], 0x50) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000580)='./file1\x00', 0x2e2490, &(0x7f0000000180), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_clone(0x2340080, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_acct\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r3, &(0x7f0000000100)='ns/pid_for_children\x00') sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) readlink(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000300)=""/77, 0x4d) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000002000), &(0x7f0000005840)='./bus\x00', 0x1000806, &(0x7f00000016c0)=ANY=[], 0x9, 0x1508, &(0x7f0000002040)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="186b00000e000000000000000600000000000000040000000000f8f808004000636018110000", @ANYRES32=r5, @ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x60982, 0x19, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r7) 2.132881553s ago: executing program 1 (id=784): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x4e21, @empty}, 0xab852ebbeefbd5f2}) 1.678151959s ago: executing program 2 (id=785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000080) r0 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'rose0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000001380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8841}, 0x40080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000940000/0x2000)=nil, 0x2000, &(0x7f00000013c0)='\x00') sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.666821889s ago: executing program 3 (id=786): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000006c0), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x10000}}, 0x120) (fail_nth: 2) 1.260180614s ago: executing program 3 (id=787): openat$ptmx(0xffffffffffffff9c, 0x0, 0x40100, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xd0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) futex(&(0x7f0000000740)=0x2, 0x6, 0x2, &(0x7f0000000780)={0x77359400}, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00fb9700051ede170b88f7172aa1f2834b4425376712002c0d2e9fbd1f0500000000000000f6c0dd3fcbd411cee8679935cc102e2afcea62dc1e000004a734c16c176d54ddd6072d59386040d3f723d1063caf0c796d35c991144de9c80eacba09cf83b1f15a17d6489bec631a15315bf8661e07418759873b080000004f9446d06e6891097cceadba67b9d26dddc678acdd5d5e3ccb00c97ee1a9d800a4a4"], 0x97, 0x3) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x759, &(0x7f0000000880)={[{@noload}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@jqfmt_vfsv0, 0x0}, {@usrjquota}, {@noload}, {@jqfmt_vfsv1}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@noacl}, {@resgid}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f8, &(0x7f0000000200)="$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") r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.259816104s ago: executing program 1 (id=788): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xc8e}, {0x16}]}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r2, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) 1.168637695s ago: executing program 1 (id=789): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) mprotect(&(0x7f00001c0000/0x1000)=nil, 0x1000, 0x1000008) syz_emit_ethernet(0x54, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000110600"]) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000240)={0x4, &(0x7f0000000340)=[{0x4, 0xa, 0x3, 0x3ff}, {0xc, 0x7, 0xbd, 0x106}, {0x8, 0x9, 0x7, 0x5}, {0x9, 0xfd, 0x0, 0x6}]}) 757.94496ms ago: executing program 5 (id=790): prlimit64(0x0, 0xe, 0x0, 0x0) unshare(0x2040600) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) ioprio_get$pid(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 550.022373ms ago: executing program 4 (id=791): socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x810) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x4b47, 0x0) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f9104", 0xa2, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 495.542354ms ago: executing program 4 (id=792): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) unshare(0x42000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x0, @multicast2}, {0x2, 0x4e21, @empty}, 0x25}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRES64=r3, @ANYRESDEC=r0, @ANYRESHEX, @ANYRESDEC=r2], 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000484100100000000004e438d2fd00000000004a7b72000000000000000000f90000", 0x39}], 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) socket$inet(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000240)=[{0x9, 0xa3, 0xd7, 0x8}, {0x1, 0x6, 0x5, 0xd44}, {0x4, 0x7, 0x80, 0xfff}, {0x400, 0x0, 0x3, 0xffffffd5}]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000500)='./file1\x00', 0x1008801, &(0x7f0000000140)=ANY=[], 0xfe, 0x21b, &(0x7f0000000640)="$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") writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="4dff000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYRES32], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='mmap_lock_acquire_returned\x00', r6}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r7, 0x4bfa, &(0x7f0000000080)) 394.448575ms ago: executing program 5 (id=793): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='fib_table_lookup\x00', r1, 0x0, 0x4000000000}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf7, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e141308004be0ffff00124000632f77fbac141416ac141416441805034d2f87e5940c05ab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff40000", 0x0, 0xfe, 0x60000000}, 0x50) 346.265506ms ago: executing program 5 (id=794): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\v\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 335.699946ms ago: executing program 2 (id=795): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa08344, &(0x7f0000000200)={[{@nojournal_checksum}, {@nodioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@quota}, {@usrjquota}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) setxattr$security_selinux(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f00000004c0)='system_u:object_r:hostname_exec_t:s0\x00', 0x25, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) 290.805856ms ago: executing program 3 (id=796): socketpair$unix(0x1, 0x1, 0x0, 0xfffffffffffffffd) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000240), 0x3, 0x4d5, &(0x7f0000000680)="$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") socketpair$tipc(0x1e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10400, 0x1, 0x0, 0x0, 0xffffffff}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) chdir(0x0) setrlimit(0x1, 0x0) open(&(0x7f00000002c0)='./file2\x00', 0x60142, 0x40) open(&(0x7f0000000a00)='./bus\x00', 0x189a40, 0x80) (fail_nth: 1) 64.785459ms ago: executing program 2 (id=797): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) unshare(0x42000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x0, @multicast2}, {0x2, 0x4e21, @empty}, 0x25}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000484100100000000004e438d2fd00000000004a7b72000000000000000000f90000", 0x39}], 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) socket$inet(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000240)=[{0x9, 0xa3, 0xd7, 0x8}, {0x1, 0x6, 0x5, 0xd44}, {0x4, 0x7, 0x80, 0xfff}, {0x400, 0x0, 0x3, 0xffffffd5}]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000500)='./file1\x00', 0x1008801, &(0x7f0000000140)=ANY=[], 0xfe, 0x21b, &(0x7f0000000640)="$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") writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="4dff000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYRES32], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='mmap_lock_acquire_returned\x00', r6}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r7, 0x4bfa, &(0x7f0000000080)) 0s ago: executing program 1 (id=798): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) poll(0x0, 0x0, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="1201000012c35b400304106098c6f40000010902128001000000000904"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002400)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x733f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xcff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b3, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xb, 0x1000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c692401, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x20000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000006, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x4756, 0x4, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xd4, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c6d, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x3, 0x4, 0x80000004, 0x4, {0x5, 0x0, 0x8, 0x1, 0x7, 0x1f7}, {0x5, 0x0, 0x6, 0x800, 0x1ff, 0x4}, 0x2, 0x82e, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) unshare(0x64000600) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x4, 0x4eb, &(0x7f0000000540)="$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") kernel console output (not intermixed with test programs): 202] F2FS-fs (loop2): Mismatch start address, segment0(0) cp_blkaddr(512) [ 144.038527][ T2202] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 144.195899][ T2205] loop0: detected capacity change from 0 to 512 [ 144.271156][ T2193] loop1: detected capacity change from 0 to 512 [ 144.339333][ T2205] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 144.543050][ T2205] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 144.579422][ T2193] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 144.620622][ T2205] System zones: 1-12 [ 144.643947][ T401] Bluetooth: hci0: command 0x1003 tx timeout [ 144.643976][ T1713] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 144.779375][ T2193] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.274404][ T2205] EXT4-fs (loop0): orphan cleanup on readonly fs [ 145.292182][ T2205] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.402: bg 0: block 361: padding at end of block bitmap is not set [ 145.337637][ T2205] EXT4-fs (loop0): Remounting filesystem read-only [ 145.354500][ T2205] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 145.373684][ T2205] EXT4-fs (loop0): Remounting filesystem read-only [ 145.380237][ T2205] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.402: invalid indirect mapped block 12 (level 1) [ 145.411928][ T2210] netlink: 20 bytes leftover after parsing attributes in process `syz.3.403'. [ 145.460286][ T2205] EXT4-fs (loop0): Remounting filesystem read-only [ 145.503568][ T2205] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.402: invalid indirect mapped block 2 (level 2) [ 145.518009][ T2205] EXT4-fs (loop0): Remounting filesystem read-only [ 145.524827][ T2205] EXT4-fs (loop0): 1 truncate cleaned up [ 145.570428][ T2205] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 145.986265][ T2226] loop4: detected capacity change from 0 to 256 [ 145.994269][ T2226] exfat: Unknown parameter 'iochar' [ 146.754005][ T2227] netlink: 25 bytes leftover after parsing attributes in process `syz.3.405'. [ 147.087606][ T2228] loop3: detected capacity change from 0 to 16 [ 147.097525][ T2228] erofs: (device loop3): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 147.109057][ T2228] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26000) [ 147.168491][ T39] usb 2-1: USB disconnect, device number 7 [ 147.186812][ T39] ftdi_sio 2-1:0.0: device disconnected [ 147.466035][ T2227] device 00XD entered promiscuous mode [ 147.474851][ T282] EXT4-fs (loop0): unmounting filesystem. [ 147.501667][ T2225] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.405'. [ 147.510917][ T2225] 1XD: renamed from 00XD [ 147.517315][ T2225] device 01XD left promiscuous mode [ 147.525848][ T307] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 147.536616][ T312] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 147.548271][ T2223] netlink: 9 bytes leftover after parsing attributes in process `syz.4.404'. [ 147.592006][ T285] EXT4-fs (loop1): unmounting filesystem. [ 147.613726][ T19] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 147.818412][ T2242] netlink: 25 bytes leftover after parsing attributes in process `syz.0.408'. [ 147.842471][ T2242] loop0: detected capacity change from 0 to 16 [ 147.864242][ T2242] erofs: (device loop0): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 147.875205][ T2242] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26000) [ 148.114782][ T19] usb 3-1: config index 0 descriptor too short (expected 32786, got 18) [ 148.134485][ T19] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 148.143713][ T19] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 148.151990][ T19] usb 3-1: Manufacturer: syz [ 148.167189][ T19] usb 3-1: config 0 descriptor?? [ 148.178623][ T19] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 148.190869][ T19] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 148.722486][ T2261] loop0: detected capacity change from 0 to 256 [ 148.730251][ T2261] exfat: Unknown parameter 'iochar' [ 148.793371][ T2261] netlink: 9 bytes leftover after parsing attributes in process `syz.0.415'. [ 149.225724][ T744] usb 3-1: USB disconnect, device number 4 [ 149.264867][ T744] ftdi_sio 3-1:0.0: device disconnected [ 149.273831][ T39] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 149.886956][ T39] usb 5-1: config index 0 descriptor too short (expected 32786, got 18) [ 149.929977][ T39] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 150.007019][ T39] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 150.068419][ T39] usb 5-1: Manufacturer: syz [ 150.110596][ T39] usb 5-1: config 0 descriptor?? [ 150.213282][ T39] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 150.232974][ T39] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 150.282873][ T2258] loop1: detected capacity change from 0 to 512 [ 150.290122][ T2258] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 150.300655][ T2258] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 150.308766][ T2258] System zones: 1-12 [ 150.313474][ T2258] EXT4-fs (loop1): orphan cleanup on readonly fs [ 150.320501][ T2258] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.414: bg 0: block 361: padding at end of block bitmap is not set [ 150.337509][ T2258] EXT4-fs (loop1): Remounting filesystem read-only [ 150.344228][ T2258] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 150.353169][ T2258] EXT4-fs (loop1): Remounting filesystem read-only [ 150.359952][ T2258] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.414: invalid indirect mapped block 12 (level 1) [ 150.373492][ T2258] EXT4-fs (loop1): Remounting filesystem read-only [ 150.380242][ T2258] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.414: invalid indirect mapped block 2 (level 2) [ 150.395543][ T2258] EXT4-fs (loop1): Remounting filesystem read-only [ 150.402187][ T2258] EXT4-fs (loop1): 1 truncate cleaned up [ 150.408235][ T2258] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 150.468089][ T2272] loop4: detected capacity change from 0 to 512 [ 150.509550][ T2272] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 150.524184][ T2272] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.561753][ T285] EXT4-fs (loop1): unmounting filesystem. [ 150.903696][ T460] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 151.116416][ T460] usb 4-1: config index 0 descriptor too short (expected 32786, got 18) [ 151.158128][ T460] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 151.172329][ T460] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 151.181473][ T460] usb 4-1: Manufacturer: syz [ 151.257243][ T460] usb 4-1: config 0 descriptor?? [ 151.264098][ T460] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 151.277307][ T460] ftdi_sio ttyUSB1: unknown device type: 0xc698 [ 151.342407][ T2297] loop1: detected capacity change from 0 to 512 [ 151.424547][ T2305] loop0: detected capacity change from 0 to 256 [ 151.432630][ T2305] exfat: Unknown parameter 'iochar' [ 151.448151][ T2297] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 151.542694][ T2305] netlink: 9 bytes leftover after parsing attributes in process `syz.0.428'. [ 151.568429][ T312] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 151.778038][ T39] usb 5-1: USB disconnect, device number 12 [ 151.818031][ T39] ftdi_sio 5-1:0.0: device disconnected [ 151.838735][ T2297] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 151.939604][ T2297] System zones: 1-12 [ 151.967190][ T2297] EXT4-fs (loop1): orphan cleanup on readonly fs [ 152.003331][ T2297] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.426: bg 0: block 361: padding at end of block bitmap is not set [ 153.629546][ T2297] EXT4-fs (loop1): Remounting filesystem read-only [ 153.642376][ T2297] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 153.685526][ T316] usb 4-1: USB disconnect, device number 8 [ 153.716088][ T316] ftdi_sio 4-1:0.0: device disconnected [ 153.731060][ T2297] EXT4-fs (loop1): Remounting filesystem read-only [ 153.777653][ T2297] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.426: invalid indirect mapped block 12 (level 1) [ 153.847300][ T2297] EXT4-fs (loop1): Remounting filesystem read-only [ 153.866709][ T2297] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.426: invalid indirect mapped block 2 (level 2) [ 153.922101][ T2297] EXT4-fs (loop1): Remounting filesystem read-only [ 153.945103][ T2297] EXT4-fs (loop1): 1 truncate cleaned up [ 153.961870][ T2297] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 154.084914][ T284] EXT4-fs (loop4): unmounting filesystem. [ 154.529621][ T2319] netlink: 20 bytes leftover after parsing attributes in process `syz.4.431'. [ 157.625674][ T285] EXT4-fs (loop1): unmounting filesystem. [ 157.763964][ T2331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.434'. [ 158.210679][ T2353] netlink: 25 bytes leftover after parsing attributes in process `syz.3.442'. [ 158.220054][ T2353] device 01XD entered promiscuous mode [ 158.266060][ T2353] loop3: detected capacity change from 0 to 16 [ 158.275871][ T2353] erofs: (device loop3): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 158.286834][ T2353] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26000) [ 158.400367][ T2353] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.442'. [ 158.409894][ T2353] 0XD: renamed from 01XD [ 158.413708][ T307] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 158.425710][ T2353] device 00XD left promiscuous mode [ 158.715114][ T2363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.444'. [ 159.193063][ T1713] Bluetooth: hci0: sending frame failed (-49) [ 159.199955][ T401] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 160.114964][ T2377] loop0: detected capacity change from 0 to 2048 [ 160.155279][ T2377] loop0: p1 < > p3 [ 160.164702][ T2377] loop0: p3 size 134217728 extends beyond EOD, truncated [ 160.204191][ T28] audit: type=1400 audit(1748120435.020:252): avc: denied { write } for pid=2376 comm="syz.0.449" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 160.254524][ T2382] loop1: detected capacity change from 0 to 512 [ 160.275423][ T2382] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 160.300433][ T2382] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 160.311799][ T2382] System zones: 1-12 [ 160.316903][ T2382] EXT4-fs (loop1): orphan cleanup on readonly fs [ 160.330823][ T2382] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.448: bg 0: block 361: padding at end of block bitmap is not set [ 160.353858][ T2382] EXT4-fs (loop1): Remounting filesystem read-only [ 160.360540][ T2382] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 160.373784][ T2382] EXT4-fs (loop1): Remounting filesystem read-only [ 160.397650][ T2382] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.448: invalid indirect mapped block 12 (level 1) [ 160.411317][ T2382] EXT4-fs (loop1): Remounting filesystem read-only [ 160.417950][ T2382] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.448: invalid indirect mapped block 2 (level 2) [ 160.441264][ T2382] EXT4-fs (loop1): Remounting filesystem read-only [ 160.468605][ T2382] EXT4-fs (loop1): 1 truncate cleaned up [ 160.492370][ T2382] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 160.673907][ T2394] netlink: 20 bytes leftover after parsing attributes in process `syz.4.451'. [ 160.731948][ T285] EXT4-fs (loop1): unmounting filesystem. [ 161.269835][ T2398] netlink: 24 bytes leftover after parsing attributes in process `syz.3.455'. [ 162.810331][ T2420] netlink: 20 bytes leftover after parsing attributes in process `syz.1.458'. [ 163.150367][ T2426] netlink: 25 bytes leftover after parsing attributes in process `syz.4.460'. [ 163.195352][ T2426] loop4: detected capacity change from 0 to 16 [ 163.221287][ T2426] erofs: (device loop4): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 163.232257][ T2426] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26000) [ 163.364255][ T2426] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.460'. [ 163.374357][ T2426] 0XD: renamed from gretap0 [ 163.392667][ T2426] device 00XD left promiscuous mode [ 164.388023][ T2436] loop1: detected capacity change from 0 to 1024 [ 164.428063][ T2436] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 164.574414][ T2441] netlink: 24 bytes leftover after parsing attributes in process `syz.3.467'. [ 164.589973][ T2432] loop2: detected capacity change from 0 to 512 [ 164.607737][ T2432] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 164.633166][ T2432] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 164.641691][ T2432] System zones: 1-12 [ 164.646359][ T2432] EXT4-fs (loop2): orphan cleanup on readonly fs [ 164.653096][ T2432] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.464: bg 0: block 361: padding at end of block bitmap is not set [ 164.671462][ T2432] EXT4-fs (loop2): Remounting filesystem read-only [ 164.678395][ T2432] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 164.687529][ T2432] EXT4-fs (loop2): Remounting filesystem read-only [ 164.694262][ T2432] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.464: invalid indirect mapped block 12 (level 1) [ 164.707747][ T2432] EXT4-fs (loop2): Remounting filesystem read-only [ 164.714440][ T2432] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.464: invalid indirect mapped block 2 (level 2) [ 164.727889][ T2432] EXT4-fs (loop2): Remounting filesystem read-only [ 164.734737][ T2432] EXT4-fs (loop2): 1 truncate cleaned up [ 164.740404][ T2432] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 164.805468][ T286] EXT4-fs (loop2): unmounting filesystem. [ 166.554054][ T2469] netlink: 20 bytes leftover after parsing attributes in process `syz.1.475'. [ 167.573762][ T2471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.474'. [ 168.300917][ T19] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 168.312918][ T2478] netlink: 24 bytes leftover after parsing attributes in process `syz.4.479'. [ 168.343405][ T2484] loop4: detected capacity change from 0 to 16 [ 168.366452][ T2484] erofs: (device loop4): mounted with root inode @ nid 36. [ 168.545097][ T2486] loop2: detected capacity change from 0 to 512 [ 168.558778][ T2491] loop1: detected capacity change from 0 to 1024 [ 168.562875][ T2486] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 168.568724][ T2491] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 168.905354][ T2486] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 168.913460][ T2486] System zones: 1-12 [ 168.917959][ T2486] EXT4-fs (loop2): orphan cleanup on readonly fs [ 168.924833][ T2486] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.480: bg 0: block 361: padding at end of block bitmap is not set [ 168.939311][ T2486] EXT4-fs (loop2): Remounting filesystem read-only [ 168.945914][ T2486] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 168.955048][ T2486] EXT4-fs (loop2): Remounting filesystem read-only [ 168.961615][ T2486] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.480: invalid indirect mapped block 12 (level 1) [ 168.975593][ T2486] EXT4-fs (loop2): Remounting filesystem read-only [ 168.982152][ T2486] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.480: invalid indirect mapped block 2 (level 2) [ 168.995478][ T2486] EXT4-fs (loop2): Remounting filesystem read-only [ 169.002173][ T2486] EXT4-fs (loop2): 1 truncate cleaned up [ 169.007905][ T2486] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 169.048721][ T286] EXT4-fs (loop2): unmounting filesystem. [ 169.657146][ T2511] loop3: detected capacity change from 0 to 512 [ 169.722449][ T2512] loop1: detected capacity change from 0 to 256 [ 169.730241][ T2512] exfat: Unknown parameter 'iochar' [ 169.772709][ T2512] netlink: 9 bytes leftover after parsing attributes in process `syz.1.487'. [ 169.783076][ T2512] device 01XD entered promiscuous mode [ 169.858638][ T2511] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 169.879054][ T2511] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.770979][ T283] EXT4-fs (loop3): unmounting filesystem. [ 170.886354][ T2522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.491'. [ 170.968586][ T460] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 171.164708][ T460] usb 5-1: config index 0 descriptor too short (expected 32786, got 18) [ 171.554023][ T460] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 171.563111][ T460] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 171.583682][ T460] usb 5-1: Manufacturer: syz [ 171.593935][ T460] usb 5-1: config 0 descriptor?? [ 171.604397][ T460] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 171.607255][ T2525] loop2: detected capacity change from 0 to 512 [ 171.612223][ T460] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 171.642113][ T2525] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 171.657672][ T2535] loop1: detected capacity change from 0 to 512 [ 171.675450][ T2535] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 171.686316][ T2525] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 171.695129][ T2525] System zones: 1-12 [ 171.699664][ T2525] EXT4-fs (loop2): orphan cleanup on readonly fs [ 171.706161][ T2535] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 171.714468][ T2535] System zones: 1-12 [ 171.718813][ T2525] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.492: bg 0: block 361: padding at end of block bitmap is not set [ 171.734084][ T2535] EXT4-fs (loop1): orphan cleanup on readonly fs [ 171.740741][ T2535] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.494: bg 0: block 361: padding at end of block bitmap is not set [ 171.755297][ T2525] EXT4-fs (loop2): Remounting filesystem read-only [ 171.761863][ T2525] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 171.771098][ T2535] EXT4-fs (loop1): Remounting filesystem read-only [ 171.777681][ T2535] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 171.777777][ T2525] EXT4-fs (loop2): Remounting filesystem read-only [ 171.793963][ T2535] EXT4-fs (loop1): Remounting filesystem read-only [ 171.798459][ T2525] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.492: invalid indirect mapped block 12 (level 1) [ 171.810634][ T2535] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.494: invalid indirect mapped block 12 (level 1) [ 171.827244][ T2525] EXT4-fs (loop2): Remounting filesystem read-only [ 171.837485][ T2535] EXT4-fs (loop1): Remounting filesystem read-only [ 171.839984][ T2525] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.492: invalid indirect mapped block 2 (level 2) [ 171.846870][ T2535] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.494: invalid indirect mapped block 2 (level 2) [ 171.870767][ T2525] EXT4-fs (loop2): Remounting filesystem read-only [ 171.888348][ T2525] EXT4-fs (loop2): 1 truncate cleaned up [ 171.894318][ T2525] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 171.923800][ T2535] EXT4-fs (loop1): Remounting filesystem read-only [ 171.935339][ T2502] loop4: detected capacity change from 0 to 512 [ 171.939450][ T2535] EXT4-fs (loop1): 1 truncate cleaned up [ 171.958998][ T2541] loop3: detected capacity change from 0 to 1024 [ 171.983786][ T2535] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 171.984294][ T2502] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 171.998361][ T2541] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 172.009821][ T2502] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.099145][ T286] EXT4-fs (loop2): unmounting filesystem. [ 172.158388][ T285] EXT4-fs (loop1): unmounting filesystem. [ 172.167526][ T2549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.499'. [ 172.675938][ T460] usb 5-1: USB disconnect, device number 13 [ 172.685399][ T460] ftdi_sio 5-1:0.0: device disconnected [ 172.702795][ T284] EXT4-fs (loop4): unmounting filesystem. [ 172.839650][ T960] Bluetooth: hci0: Frame reassembly failed (-84) [ 173.563730][ T2571] loop2: detected capacity change from 0 to 256 [ 173.571725][ T2571] exfat: Unknown parameter 'iochar' [ 174.259155][ T2575] loop3: detected capacity change from 0 to 512 [ 174.404611][ T2575] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 174.427468][ T2575] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.536736][ T2571] netlink: 9 bytes leftover after parsing attributes in process `syz.2.504'. [ 174.547346][ T307] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 174.883677][ T401] Bluetooth: hci0: command 0x1003 tx timeout [ 174.889746][ T1713] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 174.947810][ T2587] loop4: detected capacity change from 0 to 512 [ 174.995650][ T2587] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 175.004854][ T2587] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.007570][ T2584] loop2: detected capacity change from 0 to 512 [ 175.040023][ T2592] netlink: 24 bytes leftover after parsing attributes in process `syz.1.509'. [ 175.089031][ T283] EXT4-fs (loop3): unmounting filesystem. [ 175.132407][ T2584] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 175.144963][ T2598] loop3: detected capacity change from 0 to 1024 [ 175.151594][ T2598] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 175.184387][ T2584] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 175.192476][ T2584] System zones: 1-12 [ 175.213004][ T2584] EXT4-fs (loop2): orphan cleanup on readonly fs [ 175.243935][ T2584] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.507: bg 0: block 361: padding at end of block bitmap is not set [ 175.250906][ T28] audit: type=1400 audit(1748120450.060:253): avc: denied { mounton } for pid=2602 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 175.284324][ T2584] EXT4-fs (loop2): Remounting filesystem read-only [ 175.291048][ T2584] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 175.313992][ T2584] EXT4-fs (loop2): Remounting filesystem read-only [ 175.320539][ T2584] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.507: invalid indirect mapped block 12 (level 1) [ 175.354761][ T2584] EXT4-fs (loop2): Remounting filesystem read-only [ 175.363489][ T2584] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.507: invalid indirect mapped block 2 (level 2) [ 175.389498][ T2584] EXT4-fs (loop2): Remounting filesystem read-only [ 175.398100][ T2584] EXT4-fs (loop2): 1 truncate cleaned up [ 175.403929][ T2584] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 175.426947][ T2602] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.444419][ T2602] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.451989][ T2602] device bridge_slave_0 entered promiscuous mode [ 175.477099][ T2602] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.483662][ T642] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 175.486496][ T2602] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.507896][ T2602] device bridge_slave_1 entered promiscuous mode [ 175.508527][ T286] EXT4-fs (loop2): unmounting filesystem. [ 175.660778][ T2602] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.667895][ T2602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.675211][ T2602] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.682240][ T2602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.685075][ T642] usb 2-1: config index 0 descriptor too short (expected 32786, got 18) [ 175.707589][ T642] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 175.719676][ T642] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 175.728185][ T642] usb 2-1: Manufacturer: syz [ 175.734372][ T642] usb 2-1: config 0 descriptor?? [ 175.750313][ T642] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 175.770689][ T2610] loop2: detected capacity change from 0 to 512 [ 175.772644][ T642] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 175.794985][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.805261][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.814941][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.822402][ T2610] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 175.843007][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.850407][ T2610] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 175.875093][ T284] EXT4-fs (loop4): unmounting filesystem. [ 175.882296][ T2610] System zones: 1-12 [ 175.887006][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.901900][ T2610] EXT4-fs (loop2): orphan cleanup on readonly fs [ 175.908721][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.915819][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.923518][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.932385][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.934397][ T2610] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.513: bg 0: block 361: padding at end of block bitmap is not set [ 175.939485][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.023219][ T778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.033819][ T2610] EXT4-fs (loop2): Remounting filesystem read-only [ 176.053683][ T2610] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 176.064664][ T778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.073122][ T778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.081238][ T2610] EXT4-fs (loop2): Remounting filesystem read-only [ 176.093702][ T2610] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.513: invalid indirect mapped block 12 (level 1) [ 176.099795][ T2602] device veth0_vlan entered promiscuous mode [ 176.117304][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.126079][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.134108][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.156923][ T2602] device veth1_macvtap entered promiscuous mode [ 176.164202][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.172779][ T2618] loop1: detected capacity change from 0 to 512 [ 176.180628][ T2610] EXT4-fs (loop2): Remounting filesystem read-only [ 176.188411][ T2610] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.513: invalid indirect mapped block 2 (level 2) [ 176.202011][ T2610] EXT4-fs (loop2): Remounting filesystem read-only [ 176.208912][ T2610] EXT4-fs (loop2): 1 truncate cleaned up [ 176.214900][ T2610] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 176.234762][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.253484][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.265917][ T286] EXT4-fs (loop2): unmounting filesystem. [ 176.278600][ T28] audit: type=1400 audit(1748120451.090:254): avc: denied { mounton } for pid=2602 comm="syz-executor" path="/root/syzkaller.KjmT91/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 176.328745][ T2618] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 176.346944][ T28] audit: type=1400 audit(1748120451.120:255): avc: denied { mount } for pid=2602 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 176.350175][ T2618] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.423656][ T460] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 176.451007][ T28] audit: type=1400 audit(1748120451.120:256): avc: denied { mount } for pid=2602 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 176.451043][ T28] audit: type=1400 audit(1748120451.120:257): avc: denied { mounton } for pid=2602 comm="syz-executor" path="/root/syzkaller.KjmT91/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 176.451074][ T28] audit: type=1400 audit(1748120451.120:258): avc: denied { mounton } for pid=2602 comm="syz-executor" path="/root/syzkaller.KjmT91/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=22507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 176.451106][ T28] audit: type=1400 audit(1748120451.120:259): avc: denied { mounton } for pid=2602 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 176.451134][ T28] audit: type=1400 audit(1748120451.120:260): avc: denied { mount } for pid=2602 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 176.451163][ T28] audit: type=1400 audit(1748120451.130:261): avc: denied { mounton } for pid=2602 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 176.451191][ T28] audit: type=1400 audit(1748120451.130:262): avc: denied { mount } for pid=2602 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 176.965143][ T460] usb 4-1: config index 0 descriptor too short (expected 32786, got 18) [ 176.975756][ T460] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 176.985210][ T460] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 176.993533][ T460] usb 4-1: Manufacturer: syz [ 177.009439][ T460] usb 4-1: config 0 descriptor?? [ 177.015565][ T460] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 177.023829][ T460] ftdi_sio ttyUSB1: unknown device type: 0xc698 [ 177.396271][ T2640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.517'. [ 178.500189][ T19] usb 2-1: USB disconnect, device number 8 [ 178.510119][ T19] ftdi_sio 2-1:0.0: device disconnected [ 178.602967][ T285] EXT4-fs (loop1): unmounting filesystem. [ 178.776894][ T2651] loop2: detected capacity change from 0 to 512 [ 178.842621][ T2642] loop5: detected capacity change from 0 to 40427 [ 178.857020][ T2642] F2FS-fs (loop5): Mismatch start address, segment0(0) cp_blkaddr(512) [ 178.865925][ T1038] usb 4-1: USB disconnect, device number 9 [ 178.872051][ T2651] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 178.883907][ T2651] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.887216][ T2642] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 178.900768][ T1038] ftdi_sio 4-1:0.0: device disconnected [ 178.918542][ T2654] loop1: detected capacity change from 0 to 512 [ 178.974331][ T2654] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 179.063908][ T2654] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 179.103726][ T2654] System zones: 1-12 [ 179.108764][ T2654] EXT4-fs (loop1): orphan cleanup on readonly fs [ 179.117363][ T2654] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.522: bg 0: block 361: padding at end of block bitmap is not set [ 179.199385][ T2654] EXT4-fs (loop1): Remounting filesystem read-only [ 179.211944][ T2654] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 179.221114][ T2654] EXT4-fs (loop1): Remounting filesystem read-only [ 179.227837][ T2654] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.522: invalid indirect mapped block 12 (level 1) [ 179.241854][ T2654] EXT4-fs (loop1): Remounting filesystem read-only [ 179.248638][ T2654] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.522: invalid indirect mapped block 2 (level 2) [ 179.262294][ T2654] EXT4-fs (loop1): Remounting filesystem read-only [ 179.269486][ T2654] EXT4-fs (loop1): 1 truncate cleaned up [ 179.276362][ T2654] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 179.364533][ T285] EXT4-fs (loop1): unmounting filesystem. [ 179.533733][ T2670] loop1: detected capacity change from 0 to 512 [ 179.551322][ T2670] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 179.561957][ T2670] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 179.570166][ T2670] System zones: 1-12 [ 179.574894][ T2670] EXT4-fs (loop1): orphan cleanup on readonly fs [ 179.581714][ T2670] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.528: bg 0: block 361: padding at end of block bitmap is not set [ 179.596245][ T2670] EXT4-fs (loop1): Remounting filesystem read-only [ 179.602853][ T2670] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 179.637595][ T286] EXT4-fs (loop2): unmounting filesystem. [ 179.643424][ T2670] EXT4-fs (loop1): Remounting filesystem read-only [ 179.650028][ T2670] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.528: invalid indirect mapped block 12 (level 1) [ 179.664732][ T2670] EXT4-fs (loop1): Remounting filesystem read-only [ 179.671359][ T2670] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.528: invalid indirect mapped block 2 (level 2) [ 179.741260][ T2670] EXT4-fs (loop1): Remounting filesystem read-only [ 179.750207][ T2670] EXT4-fs (loop1): 1 truncate cleaned up [ 179.755949][ T2670] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 181.664972][ T1326] Bluetooth: hci0: Frame reassembly failed (-84) [ 181.695484][ T285] EXT4-fs (loop1): unmounting filesystem. [ 182.246796][ T2702] loop2: detected capacity change from 0 to 512 [ 182.276978][ T2702] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 182.295960][ T2699] loop1: detected capacity change from 0 to 40427 [ 182.298279][ T2702] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 182.310640][ T2699] F2FS-fs (loop1): Mismatch start address, segment0(0) cp_blkaddr(512) [ 182.311513][ T2702] System zones: [ 182.319016][ T2699] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 182.319174][ T2702] 1-12 [ 182.337763][ T2702] EXT4-fs (loop2): orphan cleanup on readonly fs [ 182.348209][ T2702] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.537: bg 0: block 361: padding at end of block bitmap is not set [ 182.353731][ T19] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 182.371859][ T2702] EXT4-fs (loop2): Remounting filesystem read-only [ 182.378592][ T2702] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 182.404189][ T2702] EXT4-fs (loop2): Remounting filesystem read-only [ 182.412858][ T2702] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.537: invalid indirect mapped block 12 (level 1) [ 182.443872][ T2702] EXT4-fs (loop2): Remounting filesystem read-only [ 182.460669][ T2702] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.537: invalid indirect mapped block 2 (level 2) [ 182.477669][ T2702] EXT4-fs (loop2): Remounting filesystem read-only [ 182.485637][ T2702] EXT4-fs (loop2): 1 truncate cleaned up [ 182.491381][ T2702] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 182.539555][ T286] EXT4-fs (loop2): unmounting filesystem. [ 182.638960][ T2710] netlink: 25 bytes leftover after parsing attributes in process `syz.1.539'. [ 182.664759][ T2710] loop1: detected capacity change from 0 to 16 [ 182.693887][ T2710] erofs: (device loop1): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 182.704963][ T2710] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26000) [ 182.847930][ T2710] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.539'. [ 182.857463][ T2710] 0XD: renamed from 01XD [ 182.876785][ T2710] device 00XD left promiscuous mode [ 182.919736][ T19] usb 5-1: config index 0 descriptor too short (expected 32786, got 18) [ 182.933718][ T19] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 182.942848][ T19] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 182.952999][ T19] usb 5-1: Manufacturer: syz [ 182.973789][ T19] usb 5-1: config 0 descriptor?? [ 182.979649][ T19] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 182.987710][ T19] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 183.197985][ T2697] loop4: detected capacity change from 0 to 512 [ 183.235351][ T2697] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 183.244624][ T2697] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.279114][ T2721] loop1: detected capacity change from 0 to 512 [ 183.295281][ T2721] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 183.305252][ T2721] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.683661][ T1713] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 183.683689][ T401] Bluetooth: hci0: command 0x1003 tx timeout [ 185.198413][ T460] usb 5-1: USB disconnect, device number 14 [ 185.209067][ T460] ftdi_sio 5-1:0.0: device disconnected [ 185.245609][ T284] EXT4-fs (loop4): unmounting filesystem. [ 185.328564][ T285] EXT4-fs (loop1): unmounting filesystem. [ 185.419991][ T2751] loop2: detected capacity change from 0 to 16 [ 185.454774][ T2751] erofs: (device loop2): mounted with root inode @ nid 36. [ 185.473695][ T19] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 186.629040][ T2756] netlink: 20 bytes leftover after parsing attributes in process `syz.3.550'. [ 187.202256][ T2760] loop1: detected capacity change from 0 to 512 [ 187.219297][ T2760] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 187.262249][ T2760] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 187.274790][ T2760] System zones: 1-12 [ 187.282520][ T2760] EXT4-fs (loop1): orphan cleanup on readonly fs [ 187.296833][ T2760] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.552: bg 0: block 361: padding at end of block bitmap is not set [ 187.323236][ T2760] EXT4-fs (loop1): Remounting filesystem read-only [ 187.337326][ T2760] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 187.353863][ T2760] EXT4-fs (loop1): Remounting filesystem read-only [ 187.370351][ T2760] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.552: invalid indirect mapped block 12 (level 1) [ 187.389828][ T2760] EXT4-fs (loop1): Remounting filesystem read-only [ 187.396805][ T2760] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.552: invalid indirect mapped block 2 (level 2) [ 187.415623][ T2760] EXT4-fs (loop1): Remounting filesystem read-only [ 187.422361][ T2760] EXT4-fs (loop1): 1 truncate cleaned up [ 187.428262][ T2760] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 187.545177][ T2759] FAULT_INJECTION: forcing a failure. [ 187.545177][ T2759] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 187.570458][ T2759] CPU: 1 PID: 2759 Comm: syz.4.553 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 187.580221][ T2759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.587811][ T28] audit: type=1400 audit(1748120462.400:263): avc: denied { create } for pid=2766 comm="syz.2.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 187.590299][ T2759] Call Trace: [ 187.613943][ T2759] [ 187.616880][ T2759] __dump_stack+0x21/0x24 [ 187.621244][ T2759] dump_stack_lvl+0xee/0x150 [ 187.623683][ T19] usb 6-1: device not accepting address 2, error -71 [ 187.625863][ T2759] ? __cfi_dump_stack_lvl+0x8/0x8 [ 187.637582][ T2759] dump_stack+0x15/0x24 [ 187.641761][ T2759] should_fail_ex+0x3d4/0x520 [ 187.646466][ T2759] should_fail_alloc_page+0x61/0x90 [ 187.650336][ T28] audit: type=1400 audit(1748120462.430:264): avc: denied { write } for pid=2766 comm="syz.2.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 187.651680][ T2759] prepare_alloc_pages+0x148/0x5f0 [ 187.677089][ T2759] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 187.682309][ T2759] __alloc_pages+0x115/0x3a0 [ 187.686915][ T2759] ? __cfi___alloc_pages+0x10/0x10 [ 187.692026][ T2759] ? add_wait_queue+0x17e/0x1b0 [ 187.696879][ T2759] __get_free_pages+0xe/0x30 [ 187.701470][ T2759] __pollwait+0x12e/0x3e0 [ 187.705801][ T2759] ? __cfi___pollwait+0x10/0x10 [ 187.710649][ T2759] pipe_poll+0x1a0/0x4f0 [ 187.714888][ T2759] ? __cfi_pipe_poll+0x10/0x10 [ 187.719655][ T2759] do_sys_poll+0x824/0x1100 [ 187.724157][ T2759] ? 0xffffffffa00022dc [ 187.728308][ T2759] ? poll_select_finish+0x5e0/0x5e0 [ 187.733504][ T2759] ? __cfi___pollwait+0x10/0x10 [ 187.738347][ T2759] ? __cfi_pollwake+0x10/0x10 [ 187.743019][ T2759] ? __cfi_pollwake+0x10/0x10 [ 187.747693][ T2759] ? __cfi_pollwake+0x10/0x10 [ 187.752365][ T2759] ? __cfi_pollwake+0x10/0x10 [ 187.757042][ T2759] ? __cfi_pollwake+0x10/0x10 [ 187.761718][ T2759] ? __cfi_pollwake+0x10/0x10 [ 187.766391][ T2759] ? __cfi_pollwake+0x10/0x10 [ 187.771060][ T2759] ? __cfi_pollwake+0x10/0x10 [ 187.775727][ T2759] ? __cfi_pollwake+0x10/0x10 [ 187.780399][ T2759] ? __kasan_check_write+0x14/0x20 [ 187.785515][ T2759] ? proc_fail_nth_write+0x17a/0x1f0 [ 187.790806][ T2759] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 187.796442][ T2759] ? security_file_permission+0x8a/0xb0 [ 187.801985][ T2759] ? set_user_sigmask+0xc4/0x1b0 [ 187.806933][ T2759] ? __cfi_set_user_sigmask+0x10/0x10 [ 187.812305][ T2759] ? putname+0x111/0x160 [ 187.816637][ T2759] __se_sys_ppoll+0x1fc/0x260 [ 187.821310][ T2759] ? __x64_sys_ppoll+0xd0/0xd0 [ 187.826065][ T2759] ? ksys_write+0x1da/0x240 [ 187.830573][ T2759] ? __cfi_ksys_write+0x10/0x10 [ 187.835622][ T2759] __x64_sys_ppoll+0xbf/0xd0 [ 187.840204][ T2759] x64_sys_call+0x29e/0x9a0 [ 187.844706][ T2759] do_syscall_64+0x4c/0xa0 [ 187.849121][ T2759] ? clear_bhb_loop+0x15/0x70 [ 187.853791][ T2759] ? clear_bhb_loop+0x15/0x70 [ 187.858460][ T2759] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.864354][ T2759] RIP: 0033:0x7f9aa578e969 [ 187.868764][ T2759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.888373][ T2759] RSP: 002b:00007f9aa66dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 187.896781][ T2759] RAX: ffffffffffffffda RBX: 00007f9aa59b5fa0 RCX: 00007f9aa578e969 [ 187.904747][ T2759] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 187.912709][ T2759] RBP: 00007f9aa66dc090 R08: 0000000000000000 R09: 0000000000000000 [ 187.920672][ T2759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.928635][ T2759] R13: 0000000000000000 R14: 00007f9aa59b5fa0 R15: 00007ffec277da78 [ 187.936606][ T2759] [ 188.049330][ T285] EXT4-fs (loop1): unmounting filesystem. [ 188.621129][ T2785] loop4: detected capacity change from 0 to 512 [ 188.670410][ T2785] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 188.682925][ T2785] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.863754][ T2040] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 189.374892][ T2040] usb 2-1: config index 0 descriptor too short (expected 32786, got 18) [ 189.384253][ T2040] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 189.393309][ T2040] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 189.401823][ T2040] usb 2-1: Manufacturer: syz [ 189.415315][ T19] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 189.422988][ T2040] usb 2-1: config 0 descriptor?? [ 189.432648][ T2040] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 189.441133][ T2040] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 189.493855][ T284] EXT4-fs (loop4): unmounting filesystem. [ 189.604774][ T19] usb 6-1: config index 0 descriptor too short (expected 32786, got 18) [ 189.615970][ T19] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 189.631298][ T19] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 189.653968][ T19] usb 6-1: Manufacturer: syz [ 189.709817][ T2806] loop1: detected capacity change from 0 to 512 [ 189.717265][ T19] usb 6-1: config 0 descriptor?? [ 189.725796][ T2808] loop2: detected capacity change from 0 to 16 [ 189.726522][ T19] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 189.749786][ T2803] loop4: detected capacity change from 0 to 40427 [ 189.751147][ T2808] erofs: (device loop2): mounted with root inode @ nid 36. [ 189.758852][ T19] ftdi_sio ttyUSB1: unknown device type: 0xc698 [ 189.788204][ T2803] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 189.790564][ T2806] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 189.796803][ T2803] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 189.824799][ T2803] F2FS-fs (loop4): invalid crc value [ 189.828491][ T2806] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.852318][ T2803] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 189.904000][ T2803] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 189.998071][ T2803] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 190.005540][ T2803] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 190.174380][ T28] audit: type=1400 audit(1748120464.980:265): avc: denied { bind } for pid=2802 comm="syz.4.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.344974][ T28] audit: type=1400 audit(1748120465.010:266): avc: denied { name_bind } for pid=2802 comm="syz.4.565" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 190.401478][ T28] audit: type=1400 audit(1748120465.010:267): avc: denied { node_bind } for pid=2802 comm="syz.4.565" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 190.423693][ T28] audit: type=1400 audit(1748120465.040:268): avc: denied { read write } for pid=2802 comm="syz.4.565" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 190.447305][ T28] audit: type=1400 audit(1748120465.040:269): avc: denied { open } for pid=2802 comm="syz.4.565" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 190.481144][ T28] audit: type=1400 audit(1748120465.290:270): avc: denied { read write } for pid=2802 comm="syz.4.565" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 190.504791][ T28] audit: type=1400 audit(1748120465.290:271): avc: denied { open } for pid=2802 comm="syz.4.565" path="/dev/input/event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 190.614232][ T28] audit: type=1400 audit(1748120465.430:272): avc: denied { ioctl } for pid=2802 comm="syz.4.565" path="/dev/input/event0" dev="devtmpfs" ino=260 ioctlcmd=0x4521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 190.700459][ T2821] loop3: detected capacity change from 0 to 512 [ 190.753726][ T2821] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 190.839940][ T2821] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 190.847971][ T2821] System zones: 1-12 [ 190.852402][ T2821] EXT4-fs (loop3): orphan cleanup on readonly fs [ 190.864931][ T2821] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.568: bg 0: block 361: padding at end of block bitmap is not set [ 190.879655][ T2821] EXT4-fs (loop3): Remounting filesystem read-only [ 190.886375][ T2821] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 190.912399][ T2821] EXT4-fs (loop3): Remounting filesystem read-only [ 190.920022][ T2821] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.568: invalid indirect mapped block 12 (level 1) [ 190.934691][ T2821] EXT4-fs (loop3): Remounting filesystem read-only [ 190.941267][ T2821] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.568: invalid indirect mapped block 2 (level 2) [ 190.956027][ T2821] EXT4-fs (loop3): Remounting filesystem read-only [ 190.962994][ T2821] EXT4-fs (loop3): 1 truncate cleaned up [ 190.977274][ T2830] loop2: detected capacity change from 0 to 16 [ 190.986191][ T2830] erofs: (device loop2): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 190.997069][ T2830] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26000) [ 191.035359][ T2821] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 191.223685][ T307] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 191.229895][ T19] usb 6-1: USB disconnect, device number 3 [ 191.233450][ T2828] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.569'. [ 191.239833][ T19] ftdi_sio 6-1:0.0: device disconnected [ 191.248237][ T2828] 1XD: renamed from 00XD [ 191.260173][ T2828] device 01XD left promiscuous mode [ 191.289848][ T2040] usb 2-1: USB disconnect, device number 9 [ 191.297417][ T2040] ftdi_sio 2-1:0.0: device disconnected [ 191.317375][ T285] EXT4-fs (loop1): unmounting filesystem. [ 191.455455][ T283] EXT4-fs (loop3): unmounting filesystem. [ 191.597521][ T2845] loop1: detected capacity change from 0 to 16 [ 192.222891][ T2845] erofs: (device loop1): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 192.234061][ T2845] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26000) [ 192.264924][ T2849] loop2: detected capacity change from 0 to 512 [ 192.346062][ T2835] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.570'. [ 192.353741][ T312] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 192.446579][ T2849] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 192.457035][ T2849] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.594638][ T401] Bluetooth: hci0: sending frame failed (-49) [ 193.600771][ T1713] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 193.753711][ T19] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 193.882977][ T286] EXT4-fs (loop2): unmounting filesystem. [ 193.936363][ T19] usb 4-1: config index 0 descriptor too short (expected 32786, got 18) [ 193.954691][ T19] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 193.973652][ T19] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 193.992498][ T19] usb 4-1: Manufacturer: syz [ 193.998071][ T19] usb 4-1: config 0 descriptor?? [ 194.014637][ T19] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 194.025302][ T19] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 194.273749][ T305] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 194.471281][ T2875] loop1: detected capacity change from 0 to 512 [ 194.478756][ T305] usb 3-1: config index 0 descriptor too short (expected 32786, got 18) [ 194.490667][ T305] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 194.503694][ T2875] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 194.517268][ T305] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 194.534192][ T305] usb 3-1: Manufacturer: syz [ 194.539034][ T2875] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 194.547646][ T2875] System zones: 1-12 [ 194.552003][ T305] usb 3-1: config 0 descriptor?? [ 194.558074][ T305] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 194.566179][ T2875] EXT4-fs (loop1): orphan cleanup on readonly fs [ 194.584103][ T2875] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.583: bg 0: block 361: padding at end of block bitmap is not set [ 194.598631][ T305] ftdi_sio ttyUSB1: unknown device type: 0xc698 [ 194.610107][ T2875] EXT4-fs (loop1): Remounting filesystem read-only [ 194.623726][ T2875] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 194.648075][ T2875] EXT4-fs (loop1): Remounting filesystem read-only [ 194.663644][ T2875] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.583: invalid indirect mapped block 12 (level 1) [ 194.685110][ T2875] EXT4-fs (loop1): Remounting filesystem read-only [ 194.693795][ T2875] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.583: invalid indirect mapped block 2 (level 2) [ 194.729705][ T2875] EXT4-fs (loop1): Remounting filesystem read-only [ 194.737692][ T2882] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 194.753759][ T2875] EXT4-fs (loop1): 1 truncate cleaned up [ 194.783919][ T2882] SELinux: failed to load policy [ 194.807059][ T2882] loop5: detected capacity change from 0 to 16 [ 194.848164][ T2886] netlink: 20 bytes leftover after parsing attributes in process `syz.4.585'. [ 194.904557][ T2882] erofs: (device loop5): mounted with root inode @ nid 36. [ 195.019060][ T2885] loop2: detected capacity change from 0 to 512 [ 195.356298][ T2885] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 195.482485][ T2885] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.574993][ T2875] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 196.714743][ T362] usb 4-1: USB disconnect, device number 10 [ 196.727328][ T362] ftdi_sio 4-1:0.0: device disconnected [ 196.831215][ T285] EXT4-fs (loop1): unmounting filesystem. [ 196.924511][ T28] audit: type=1400 audit(1748120471.740:273): avc: denied { bind } for pid=2900 comm="syz.1.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 196.985402][ T2908] loop4: detected capacity change from 0 to 512 [ 197.069927][ T2908] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 197.091305][ T2908] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.108822][ T362] usb 3-1: USB disconnect, device number 6 [ 197.122376][ T362] ftdi_sio 3-1:0.0: device disconnected [ 197.132045][ T286] EXT4-fs (loop2): unmounting filesystem. [ 197.143397][ T429] Bluetooth: hci0: Frame reassembly failed (-84) [ 197.276435][ T2916] netlink: 45 bytes leftover after parsing attributes in process `syz.2.594'. [ 197.343062][ T28] audit: type=1400 audit(1748120472.150:274): avc: denied { mounton } for pid=2918 comm="syz.2.595" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.422163][ T28] audit: type=1400 audit(1748120472.230:275): avc: denied { create } for pid=2918 comm="syz.2.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 197.457610][ T28] audit: type=1400 audit(1748120472.260:276): avc: denied { mount } for pid=2918 comm="syz.2.595" name="/" dev="configfs" ino=14064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 197.510791][ T28] audit: type=1400 audit(1748120472.260:277): avc: denied { search } for pid=2918 comm="syz.2.595" name="/" dev="configfs" ino=14064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 197.553359][ T28] audit: type=1400 audit(1748120472.260:278): avc: denied { read } for pid=2918 comm="syz.2.595" name="/" dev="configfs" ino=14064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 197.605540][ T28] audit: type=1400 audit(1748120472.260:279): avc: denied { open } for pid=2918 comm="syz.2.595" path="/" dev="configfs" ino=14064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 197.841146][ T284] EXT4-fs (loop4): unmounting filesystem. [ 197.980114][ T2929] loop4: detected capacity change from 0 to 512 [ 197.997939][ T2929] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 198.015172][ T2929] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 198.023211][ T2929] System zones: 1-12 [ 198.027915][ T2929] EXT4-fs (loop4): orphan cleanup on readonly fs [ 198.035583][ T2929] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.598: bg 0: block 361: padding at end of block bitmap is not set [ 198.050252][ T2929] EXT4-fs (loop4): Remounting filesystem read-only [ 198.056997][ T2929] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 198.066147][ T2929] EXT4-fs (loop4): Remounting filesystem read-only [ 198.072712][ T2929] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.598: invalid indirect mapped block 12 (level 1) [ 198.086554][ T2929] EXT4-fs (loop4): Remounting filesystem read-only [ 198.096845][ T2929] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.598: invalid indirect mapped block 2 (level 2) [ 198.101657][ T2935] loop5: detected capacity change from 0 to 1024 [ 198.110455][ T2929] EXT4-fs (loop4): Remounting filesystem read-only [ 198.119850][ T2935] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 198.124600][ T2929] EXT4-fs (loop4): 1 truncate cleaned up [ 198.156626][ T2929] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 198.220111][ T284] EXT4-fs (loop4): unmounting filesystem. [ 198.340699][ T2941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.600'. [ 199.203670][ T401] Bluetooth: hci0: command 0x1003 tx timeout [ 199.209765][ T1713] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 199.446434][ T2959] loop2: detected capacity change from 0 to 512 [ 199.505239][ T2959] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 199.518880][ T2959] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.647402][ T317] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 199.864731][ T317] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 199.882311][ T317] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 123, setting to 64 [ 199.906137][ T317] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 199.923977][ T317] usb 6-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 199.949646][ T317] usb 6-1: Manufacturer: syz [ 199.959774][ T317] usb 6-1: SerialNumber: syz [ 199.973931][ T317] usb 6-1: config 0 descriptor?? [ 199.983547][ T2954] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 200.000912][ T317] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input4 [ 200.022512][ T28] audit: type=1400 audit(1748120474.830:280): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=1144 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.099731][ T28] audit: type=1400 audit(1748120474.830:281): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1144 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.148037][ T28] audit: type=1400 audit(1748120474.830:282): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1144 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.211838][ T2954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.241342][ T2954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.275546][ T24] usb 6-1: USB disconnect, device number 4 [ 200.306074][ T286] EXT4-fs (loop2): unmounting filesystem. [ 200.554462][ T594] Bluetooth: hci0: Frame reassembly failed (-84) [ 200.555246][ T2976] loop1: detected capacity change from 0 to 512 [ 200.619655][ T2976] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 200.659764][ T2976] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 200.682164][ T2976] System zones: 1-12 [ 200.696448][ T2976] EXT4-fs (loop1): orphan cleanup on readonly fs [ 200.720112][ T2976] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.610: bg 0: block 361: padding at end of block bitmap is not set [ 200.790886][ T2976] EXT4-fs (loop1): Remounting filesystem read-only [ 200.803663][ T2976] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 200.812849][ T2976] EXT4-fs (loop1): Remounting filesystem read-only [ 200.819906][ T2976] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.610: invalid indirect mapped block 12 (level 1) [ 200.833644][ T2976] EXT4-fs (loop1): Remounting filesystem read-only [ 200.840306][ T2976] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.610: invalid indirect mapped block 2 (level 2) [ 200.853941][ T2976] EXT4-fs (loop1): Remounting filesystem read-only [ 200.860670][ T2976] EXT4-fs (loop1): 1 truncate cleaned up [ 200.866788][ T2976] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 201.025074][ T285] EXT4-fs (loop1): unmounting filesystem. [ 201.233375][ T3000] loop1: detected capacity change from 0 to 512 [ 201.247665][ T3000] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 201.313325][ T3009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.619'. [ 202.218816][ T3000] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 202.233709][ T3000] System zones: 1-12 [ 202.238179][ T3000] EXT4-fs (loop1): orphan cleanup on readonly fs [ 202.323685][ T3000] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.618: bg 0: block 361: padding at end of block bitmap is not set [ 202.353835][ T3000] EXT4-fs (loop1): Remounting filesystem read-only [ 202.360392][ T3000] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 202.390028][ T3000] EXT4-fs (loop1): Remounting filesystem read-only [ 202.408390][ T3000] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.618: invalid indirect mapped block 12 (level 1) [ 202.424037][ T3000] EXT4-fs (loop1): Remounting filesystem read-only [ 202.431580][ T3000] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.618: invalid indirect mapped block 2 (level 2) [ 202.455488][ T3021] loop5: detected capacity change from 0 to 512 [ 202.462399][ T3000] EXT4-fs (loop1): Remounting filesystem read-only [ 202.473053][ T3000] EXT4-fs (loop1): 1 truncate cleaned up [ 202.479406][ T3000] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 202.532664][ T3021] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 202.543068][ T3021] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.545784][ T3011] loop3: detected capacity change from 0 to 512 [ 202.563682][ T401] Bluetooth: hci0: command 0x1003 tx timeout [ 202.563734][ T1713] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 202.738829][ T3011] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 202.768884][ T285] EXT4-fs (loop1): unmounting filesystem. [ 202.781112][ T3011] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 203.287219][ T3011] System zones: 1-12 [ 203.291673][ T3011] EXT4-fs (loop3): orphan cleanup on readonly fs [ 203.298962][ T3011] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.620: bg 0: block 361: padding at end of block bitmap is not set [ 203.404802][ T3033] loop1: detected capacity change from 0 to 256 [ 203.412704][ T3033] exfat: Unknown parameter 'iochar' [ 203.471105][ T3033] netlink: 9 bytes leftover after parsing attributes in process `syz.1.623'. [ 203.481682][ T3033] device 00XD entered promiscuous mode [ 203.654407][ T3011] EXT4-fs (loop3): Remounting filesystem read-only [ 204.269089][ T3011] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 204.290632][ T2602] EXT4-fs (loop5): unmounting filesystem. [ 204.300994][ T3011] EXT4-fs (loop3): Remounting filesystem read-only [ 204.321574][ T3011] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.620: invalid indirect mapped block 12 (level 1) [ 204.350503][ T3011] EXT4-fs (loop3): Remounting filesystem read-only [ 204.373687][ T3011] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.620: invalid indirect mapped block 2 (level 2) [ 204.404154][ T3011] EXT4-fs (loop3): Remounting filesystem read-only [ 204.453815][ T3011] EXT4-fs (loop3): 1 truncate cleaned up [ 204.476408][ T3011] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 204.701351][ T283] EXT4-fs (loop3): unmounting filesystem. [ 205.431452][ T362] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 205.661320][ T778] Bluetooth: hci0: Frame reassembly failed (-84) [ 205.668755][ T362] usb 3-1: config index 0 descriptor too short (expected 32786, got 18) [ 205.689879][ T362] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 205.706813][ T362] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 205.728800][ T362] usb 3-1: Manufacturer: syz [ 205.741135][ T362] usb 3-1: config 0 descriptor?? [ 205.751971][ T362] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 205.766491][ T362] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 205.889226][ T3076] loop3: detected capacity change from 0 to 512 [ 205.895623][ T3013] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 205.964387][ T3076] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 205.973359][ T3076] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.114763][ T3013] usb 6-1: config index 0 descriptor too short (expected 32786, got 18) [ 206.144286][ T3013] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 206.164592][ T3013] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 206.173589][ T3013] usb 6-1: Manufacturer: syz [ 206.186986][ T3013] usb 6-1: config 0 descriptor?? [ 206.197427][ T283] EXT4-fs (loop3): unmounting filesystem. [ 206.197815][ T3013] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 206.213582][ T3013] ftdi_sio ttyUSB1: unknown device type: 0xc698 [ 206.447056][ T3069] loop5: detected capacity change from 0 to 512 [ 206.465115][ T3069] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 206.474222][ T3069] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.271626][ T3093] loop3: detected capacity change from 0 to 256 [ 207.287791][ T3093] exfat: Unknown parameter 'HQ?L(j܎}s}{}U8˜|Nˆ>DDTUNC[x9+Un3?Sҍ `x֬qT[b]:/ )7ȼd}'<ۚvBTRvFyƿ᥊Iv0Yz jgϫQ'#Q-!rϩF&^FL}y`0 [ 207.287791][ T3093] kA' [ 207.356631][ T3093] loop3: detected capacity change from 0 to 256 [ 207.363084][ T3093] exfat: Unknown parameter 'HQ?L(j܎}s}{}U8˜|Nˆ>DDTUNC[x9+Un3?Sҍ `x֬qT[b]:/ )7ȼd}'<ۚvBTRvFyƿ᥊Iv0Yz jgϫQ'#Q-!rϩF&^FL}y`0 [ 207.363084][ T3093] kA' [ 207.397152][ T2888] usb 3-1: USB disconnect, device number 7 [ 207.409322][ T3093] loop3: detected capacity change from 0 to 256 [ 207.419579][ T2888] ftdi_sio 3-1:0.0: device disconnected [ 207.433043][ T3093] exfat: Unknown parameter 'HQ?L(j܎}s}{}U8˜|Nˆ>DDTUNC[x9+Un3?Sҍ `x֬qT[b]:/ )7ȼd}'<ۚvBTRvFyƿ᥊Iv0Yz jgϫQ'#Q-!rϩF&^FL}y`0 [ 207.433043][ T3093] kA' [ 207.476565][ T3093] loop3: detected capacity change from 0 to 256 [ 207.483356][ T3093] exfat: Unknown parameter 'HQ?L(j܎}s}{}U8˜|Nˆ>DDTUNC[x9+Un3?Sҍ `x֬qT[b]:/ )7ȼd}'<ۚvBTRvFyƿ᥊Iv0Yz jgϫQ'#Q-!rϩF&^FL}y`0 [ 207.483356][ T3093] kA' [ 207.536621][ T3093] loop3: detected capacity change from 0 to 256 [ 207.555791][ T3093] exfat: Unknown parameter 'HQ?L(j܎}s}{}U8˜|Nˆ>DDTUNC[x9+Un3?Sҍ `x֬qT[b]:/ )7ȼd}'<ۚvBTRvFyƿ᥊Iv0Yz jgϫQ'#Q-!rϩF&^FL}y`0 [ 207.555791][ T3093] kA' [ 207.602329][ T3093] loop3: detected capacity change from 0 to 256 [ 207.608954][ T3093] exfat: Unknown parameter 'HQ?L(j܎}s}{}U8˜|Nˆ>DDTUNC[x9+Un3?Sҍ `x֬qT[b]:/ )7ȼd}'<ۚvBTRvFyƿ᥊Iv0Yz jgϫQ'#Q-!rϩF&^FL}y`0 [ 207.608954][ T3093] kA' [ 207.684214][ T1713] Bluetooth: hci0: command 0x1003 tx timeout [ 207.709665][ T3097] loop2: detected capacity change from 0 to 256 [ 207.717409][ T3097] exfat: Unknown parameter 'iochar' [ 207.723398][ T401] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 207.750792][ T3093] loop3: detected capacity change from 0 to 256 [ 207.758179][ T3093] exfat: Unknown parameter 'HQ?L(j܎}s}{}U8˜|Nˆ>DDTUNC[x9+Un3?Sҍ `x֬qT[b]:/ )7ȼd}'<ۚvBTRvFyƿ᥊Iv0Yz jgϫQ'#Q-!rϩF&^FL}y`0 [ 207.758179][ T3093] kA' [ 207.812182][ T3097] netlink: 9 bytes leftover after parsing attributes in process `syz.2.644'. [ 207.822433][ T3097] device 01XD entered promiscuous mode [ 207.950049][ T3093] loop3: detected capacity change from 0 to 256 [ 208.061660][ T3093] exfat: Unknown parameter 'HQ?L(j܎}s}{}U8˜|Nˆ>DDTUNC[x9+Un3?Sҍ `x֬qT[b]:/ )7ȼd}'<ۚvBTRvFyƿ᥊Iv0Yz jgϫQ'#Q-!rϩF&^FL}y`0 [ 208.061660][ T3093] kA' [ 208.090888][ T502] usb 6-1: USB disconnect, device number 5 [ 208.136234][ T502] ftdi_sio 6-1:0.0: device disconnected [ 208.470709][ T2602] EXT4-fs (loop5): unmounting filesystem. [ 208.629786][ T3093] loop3: detected capacity change from 0 to 256 [ 208.647342][ T3093] exfat: Unknown parameter 'HQ?L(j܎}s}{}U8˜|Nˆ>DDTUNC[x9+Un3?Sҍ `x֬qT[b]:/ )7ȼd}'<ۚvBTRvFyƿ᥊Iv0Yz jgϫQ'#Q-!rϩF&^FL}y`0 [ 208.647342][ T3093] kA' [ 208.998357][ T3093] loop3: detected capacity change from 0 to 256 [ 209.012560][ T3093] exfat: Unknown parameter 'HQ?L(j܎}s}{}U8˜|Nˆ>DDTUNC[x9+Un3?Sҍ `x֬qT[b]:/ )7ȼd}'<ۚvBTRvFyƿ᥊Iv0Yz jgϫQ'#Q-!rϩF&^FL}y`0 [ 209.012560][ T3093] kA' [ 209.092992][ T3093] loop3: detected capacity change from 0 to 256 [ 209.103767][ T3093] exfat: Unknown parameter 'HQ?L(j܎}s}{}U8˜|Nˆ>DDTUNC[x9+Un3?Sҍ `x֬qT[b]:/ )7ȼd}'<ۚvBTRvFyƿ᥊Iv0Yz jgϫQ'#Q-!rϩF&^FL}y`0 [ 209.103767][ T3093] kA' [ 209.152725][ T3093] loop3: detected capacity change from 0 to 256 [ 209.159270][ T3093] exfat: Unknown parameter 'HQ?L(j܎}s}{}U8˜|Nˆ>DDTUNC[x9+Un3?Sҍ `x֬qT[b]:/ )7ȼd}'<ۚvBTRvFyƿ᥊Iv0Yz jgϫQ'#Q-!rϩF&^FL}y`0 [ 209.159270][ T3093] kA' [ 209.237934][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 209.237951][ T28] audit: type=1400 audit(1748120484.050:284): avc: denied { setopt } for pid=3112 comm="syz.1.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 209.238443][ T3093] loop3: detected capacity change from 0 to 256 [ 209.301936][ T3093] exfat: Unknown parameter 'HQ?L(j܎}s}{}U8˜|Nˆ>DDTUNC[x9+Un3?Sҍ `x֬qT[b]:/ )7ȼd}'<ۚvBTRvFyƿ᥊Iv0Yz jgϫQ'#Q-!rϩF&^FL}y`0 [ 209.301936][ T3093] kA' [ 209.343657][ T3093] loop3: detected capacity change from 0 to 256 [ 209.352581][ T3093] exfat: Unknown parameter 'HQ?L(j܎}s}{}U8˜|Nˆ>DDTUNC[x9+Un3?Sҍ `x֬qT[b]:/ )7ȼd}'<ۚvBTRvFyƿ᥊Iv0Yz jgϫQ'#Q-!rϩF&^FL}y`0 [ 209.352581][ T3093] kA' [ 209.406901][ T3093] loop3: detected capacity change from 0 to 256 [ 209.413400][ T3093] exfat: Unknown parameter 'HQ?L(j܎}s}{}U8˜|Nˆ>DDTUNC[x9+Un3?Sҍ `x֬qT[b]:/ )7ȼd}'<ۚvBTRvFyƿ᥊Iv0Yz jgϫQ'#Q-!rϩF&^FL}y`0 [ 209.413400][ T3093] kA' [ 209.478715][ T3093] loop3: detected capacity change from 0 to 256 [ 209.494971][ T3093] exfat: Unknown parameter 'HQ?L(j܎}s}{}U8˜|Nˆ>DDTUNC[x9+Un3?Sҍ `x֬qT[b]:/ )7ȼd}'<ۚvBTRvFyƿ᥊Iv0Yz jgϫQ'#Q-!rϩF&^FL}y`0 [ 209.494971][ T3093] kA' [ 209.537245][ T3093] loop3: detected capacity change from 0 to 256 [ 209.543965][ T307] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 209.553505][ T307] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 209.563364][ T3093] exfat: Unknown parameter 'HQ?L(j܎}s}{}U8˜|Nˆ>DDTUNC[x9+Un3?Sҍ `x֬qT[b]:/ )7ȼd}'<ۚvBTRvFyƿ᥊Iv0Yz jgϫQ'#Q-!rϩF&^FL}y`0 [ 209.563364][ T3093] kA' [ 209.593850][ T307] Buffer I/O error on dev loop3, logical block 0, async page read [ 209.714728][ T3093] loop3: detected capacity change from 0 to 256 [ 209.733878][ T3093] exfat: Unknown parameter 'HQ?L(j܎}s}{}U8˜|Nˆ>DDTUNC[x9+Un3?Sҍ `x֬qT[b]:/ )7ȼd}'<ۚvBTRvFyƿ᥊Iv0Yz jgϫQ'#Q-!rϩF&^FL}y`0 [ 209.733878][ T3093] kA' [ 209.796312][ T3093] loop3: detected capacity change from 0 to 256 [ 209.831166][ T3120] loop4: detected capacity change from 0 to 256 [ 209.839359][ T3120] exfat: Unknown parameter 'iochar' [ 209.860688][ T3093] exfat: Unknown parameter 'HQ?L(j܎}s}{}U8˜|Nˆ>DDTUNC[x9+Un3?Sҍ `x֬qT[b]:/ )7ȼd}'<ۚvBTRvFyƿ᥊Iv0Yz jgϫQ'#Q-!rϩF&^FL}y`0 [ 209.860688][ T3093] kA' [ 209.924353][ T3120] netlink: 9 bytes leftover after parsing attributes in process `syz.4.650'. [ 209.943710][ T3120] device 00XD entered promiscuous mode [ 211.324689][ T3139] loop5: detected capacity change from 0 to 512 [ 211.365839][ T778] Bluetooth: hci0: Frame reassembly failed (-84) [ 211.375517][ T3139] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 211.384575][ T3139] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.439801][ T3137] loop2: detected capacity change from 0 to 1024 [ 211.446386][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 211.489896][ T28] audit: type=1326 audit(1748120486.300:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3131 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a478e969 code=0x7ffc0000 [ 211.513500][ T28] audit: type=1326 audit(1748120486.300:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3131 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a478e969 code=0x7ffc0000 [ 211.515259][ T2602] EXT4-fs (loop5): unmounting filesystem. [ 211.537719][ T28] audit: type=1326 audit(1748120486.300:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3131 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7a478e969 code=0x7ffc0000 [ 211.565980][ T28] audit: type=1326 audit(1748120486.300:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3131 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a478e969 code=0x7ffc0000 [ 211.580710][ T3145] loop5: detected capacity change from 0 to 1024 [ 211.592418][ T28] audit: type=1326 audit(1748120486.300:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3131 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a478e969 code=0x7ffc0000 [ 211.603505][ T3145] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 211.650595][ T24] usb 5-1: config index 0 descriptor too short (expected 32786, got 18) [ 211.660601][ T24] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 211.670008][ T24] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 211.678404][ T24] usb 5-1: Manufacturer: syz [ 211.687230][ T24] usb 5-1: config 0 descriptor?? [ 211.694691][ T24] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 211.703893][ T24] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 214.377411][ T401] Bluetooth: hci0: command 0x1003 tx timeout [ 214.386972][ T326] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 214.492238][ T3013] usb 5-1: USB disconnect, device number 15 [ 214.499963][ T28] audit: type=1400 audit(1748120489.320:290): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 214.508382][ T3168] loop2: detected capacity change from 0 to 1024 [ 214.528330][ T3168] EXT4-fs: Ignoring removed i_version option [ 214.536287][ T3168] EXT4-fs: Ignoring removed mblk_io_submit option [ 214.539803][ T3013] ftdi_sio 5-1:0.0: device disconnected [ 214.543474][ T3168] EXT4-fs: Ignoring removed nobh option [ 214.571972][ T3168] EXT4-fs: Ignoring removed bh option [ 214.579858][ T3168] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 214.593830][ T3174] loop3: detected capacity change from 0 to 512 [ 214.636450][ T3168] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 214.666115][ T3174] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 214.687796][ T3174] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.706127][ T28] audit: type=1400 audit(1748120489.510:291): avc: denied { setattr } for pid=3167 comm="syz.2.667" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.813670][ T3186] loop4: detected capacity change from 0 to 16 [ 214.861260][ T3168] syz.2.667 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 214.885200][ T3186] erofs: (device loop4): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 214.896206][ T3186] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26000) [ 215.021862][ T286] EXT4-fs (loop2): unmounting filesystem. [ 215.055134][ T3189] loop2: detected capacity change from 0 to 1024 [ 215.070071][ T3189] EXT4-fs: Ignoring removed i_version option [ 215.083581][ T3189] EXT4-fs: Ignoring removed mblk_io_submit option [ 215.098560][ T3189] EXT4-fs: Ignoring removed nobh option [ 215.111532][ T3189] EXT4-fs: Ignoring removed bh option [ 215.119622][ T283] EXT4-fs (loop3): unmounting filesystem. [ 215.125726][ T3189] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 215.163439][ T3189] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 215.185374][ T286] EXT4-fs (loop2): unmounting filesystem. [ 215.940494][ T3198] loop2: detected capacity change from 0 to 16 [ 215.954027][ T3198] erofs: (device loop2): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 215.964886][ T3198] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26000) [ 216.014220][ T307] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 216.027642][ T3198] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.674'. [ 216.037316][ T3198] 0XD: renamed from 01XD [ 216.043650][ T3198] device 00XD left promiscuous mode [ 216.274556][ T3220] loop3: detected capacity change from 0 to 256 [ 216.283040][ T28] audit: type=1400 audit(1748120491.070:292): avc: denied { bind } for pid=3216 comm="syz.3.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 216.316811][ T3220] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 216.336853][ T3220] FAULT_INJECTION: forcing a failure. [ 216.336853][ T3220] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 216.350121][ T3220] CPU: 0 PID: 3220 Comm: syz.3.681 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 216.359853][ T3220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.369921][ T3220] Call Trace: [ 216.373214][ T3220] [ 216.376161][ T3220] __dump_stack+0x21/0x24 [ 216.380521][ T3220] dump_stack_lvl+0xee/0x150 [ 216.385131][ T3220] ? __cfi_dump_stack_lvl+0x8/0x8 [ 216.390178][ T3220] ? sysvec_reschedule_ipi+0x78/0x80 [ 216.395480][ T3220] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 216.401123][ T3220] dump_stack+0x15/0x24 [ 216.405293][ T3220] should_fail_ex+0x3d4/0x520 [ 216.409985][ T3220] should_fail+0xb/0x10 [ 216.414146][ T3220] should_fail_usercopy+0x1a/0x20 [ 216.419184][ T3220] _copy_from_user+0x1e/0xc0 [ 216.423784][ T3220] strndup_user+0xb6/0x150 [ 216.428216][ T3220] __se_sys_mount+0xdf/0x380 [ 216.432816][ T3220] ? __x64_sys_mount+0xd0/0xd0 [ 216.437594][ T3220] ? __kasan_check_write+0x14/0x20 [ 216.442721][ T3220] ? fpregs_restore_userregs+0x128/0x260 [ 216.448451][ T3220] __x64_sys_mount+0xbf/0xd0 [ 216.453066][ T3220] x64_sys_call+0x65d/0x9a0 [ 216.457580][ T3220] do_syscall_64+0x4c/0xa0 [ 216.462007][ T3220] ? clear_bhb_loop+0x15/0x70 [ 216.466691][ T3220] ? clear_bhb_loop+0x15/0x70 [ 216.471374][ T3220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.477295][ T3220] RIP: 0033:0x7fabf238e969 [ 216.481713][ T3220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.501329][ T3220] RSP: 002b:00007fabf3162038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 216.509756][ T3220] RAX: ffffffffffffffda RBX: 00007fabf25b6160 RCX: 00007fabf238e969 [ 216.517734][ T3220] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000200000000080 [ 216.525710][ T3220] RBP: 00007fabf3162090 R08: 0000000000000000 R09: 0000000000000000 [ 216.533686][ T3220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.541660][ T3220] R13: 0000000000000000 R14: 00007fabf25b6160 R15: 00007ffe237f6228 [ 216.549640][ T3220] [ 216.810174][ T326] Bluetooth: hci0: sending frame failed (-49) [ 216.816642][ T1713] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 217.102854][ T3231] loop1: detected capacity change from 0 to 512 [ 217.125528][ T3231] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 217.135073][ T3231] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.332084][ T3236] loop5: detected capacity change from 0 to 40427 [ 217.339622][ T3236] F2FS-fs (loop5): fault_injection options not supported [ 217.347987][ T3236] F2FS-fs (loop5): invalid crc value [ 217.364774][ T3236] F2FS-fs (loop5): Found nat_bits in checkpoint [ 217.411617][ T3236] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 217.423397][ T285] EXT4-fs (loop1): unmounting filesystem. [ 217.495022][ T1038] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 217.684885][ T1038] usb 4-1: config index 0 descriptor too short (expected 32786, got 18) [ 217.702909][ T1038] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 217.745943][ T1038] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 217.754479][ T1038] usb 4-1: Manufacturer: syz [ 217.762946][ T1038] usb 4-1: config 0 descriptor?? [ 217.781291][ T1038] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 217.794606][ T1038] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 217.980171][ T3267] netlink: 280 bytes leftover after parsing attributes in process `syz.1.692'. [ 218.043222][ T3235] loop3: detected capacity change from 0 to 512 [ 218.130179][ T3267] loop1: detected capacity change from 0 to 40427 [ 218.141650][ T3267] F2FS-fs (loop1): fault_injection options not supported [ 218.149535][ T3267] F2FS-fs (loop1): invalid crc value [ 218.162255][ T3235] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 218.181599][ T3235] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.258038][ T3267] F2FS-fs (loop1): Found nat_bits in checkpoint [ 218.298075][ T3267] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 218.643776][ T502] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 218.831816][ T3288] loop4: detected capacity change from 0 to 512 [ 218.845856][ T502] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 218.867953][ T502] usb 2-1: config 0 interface 0 has no altsetting 0 [ 218.875745][ T960] Bluetooth: hci0: Frame reassembly failed (-84) [ 218.884237][ T3288] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 218.893358][ T3288] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.905301][ T502] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 218.959019][ T502] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.968022][ T502] usb 2-1: Product: syz [ 218.983661][ T502] usb 2-1: Manufacturer: syz [ 218.988284][ T502] usb 2-1: SerialNumber: syz [ 219.003930][ T502] usb 2-1: config 0 descriptor?? [ 219.010282][ T502] usb 2-1: selecting invalid altsetting 0 [ 219.034060][ T284] EXT4-fs (loop4): unmounting filesystem. [ 220.162076][ T1038] usb 4-1: USB disconnect, device number 11 [ 220.169207][ T3298] syz.5.698[3298] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.169311][ T3298] syz.5.698[3298] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.169467][ T1038] ftdi_sio 4-1:0.0: device disconnected [ 220.197877][ T283] EXT4-fs (loop3): unmounting filesystem. [ 220.340968][ T3303] syz.3.699[3303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.341065][ T3303] syz.3.699[3303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.353564][ T3303] FAULT_INJECTION: forcing a failure. [ 220.353564][ T3303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.385472][ T3303] CPU: 0 PID: 3303 Comm: syz.3.699 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 220.395237][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 220.405316][ T3303] Call Trace: [ 220.408607][ T3303] [ 220.411544][ T3303] __dump_stack+0x21/0x24 [ 220.415907][ T3303] dump_stack_lvl+0xee/0x150 [ 220.420524][ T3303] ? __cfi_dump_stack_lvl+0x8/0x8 [ 220.425566][ T3303] ? vfs_write+0x9d6/0xca0 [ 220.430008][ T3303] dump_stack+0x15/0x24 [ 220.434185][ T3303] should_fail_ex+0x3d4/0x520 [ 220.438889][ T3303] should_fail+0xb/0x10 [ 220.443065][ T3303] should_fail_usercopy+0x1a/0x20 [ 220.448116][ T3303] strncpy_from_user+0x24/0x2d0 [ 220.453006][ T3303] __se_sys_add_key+0xc9/0x3f0 [ 220.457798][ T3303] ? __x64_sys_add_key+0xd0/0xd0 [ 220.462730][ T3303] ? ksys_write+0x1eb/0x240 [ 220.467238][ T3303] ? __cfi_ksys_write+0x10/0x10 [ 220.472116][ T3303] __x64_sys_add_key+0xbf/0xd0 [ 220.476886][ T3303] x64_sys_call+0x6aa/0x9a0 [ 220.481559][ T3303] do_syscall_64+0x4c/0xa0 [ 220.485974][ T3303] ? clear_bhb_loop+0x15/0x70 [ 220.490648][ T3303] ? clear_bhb_loop+0x15/0x70 [ 220.495324][ T3303] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.501246][ T3303] RIP: 0033:0x7fabf238e969 [ 220.505658][ T3303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.525279][ T3303] RSP: 002b:00007fabf3183038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 220.533713][ T3303] RAX: ffffffffffffffda RBX: 00007fabf25b6080 RCX: 00007fabf238e969 [ 220.541686][ T3303] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000200000000400 [ 220.549656][ T3303] RBP: 00007fabf3183090 R08: fffffffffffffffe R09: 0000000000000000 [ 220.557620][ T3303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.565583][ T3303] R13: 0000000000000000 R14: 00007fabf25b6080 R15: 00007ffe237f6228 [ 220.573558][ T3303] [ 220.703711][ T3310] loop5: detected capacity change from 0 to 512 [ 220.710801][ T3310] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 220.721843][ T3310] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 220.729965][ T3310] System zones: 1-12 [ 220.734396][ T3310] EXT4-fs (loop5): orphan cleanup on readonly fs [ 220.741047][ T3310] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.702: bg 0: block 361: padding at end of block bitmap is not set [ 220.755608][ T3310] EXT4-fs (loop5): Remounting filesystem read-only [ 220.762175][ T3310] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 220.771667][ T3310] EXT4-fs (loop5): Remounting filesystem read-only [ 220.778349][ T3310] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.702: invalid indirect mapped block 12 (level 1) [ 220.792055][ T3310] EXT4-fs (loop5): Remounting filesystem read-only [ 220.798867][ T3310] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.702: invalid indirect mapped block 2 (level 2) [ 220.812366][ T3310] EXT4-fs (loop5): Remounting filesystem read-only [ 220.819313][ T3310] EXT4-fs (loop5): 1 truncate cleaned up [ 220.825090][ T3310] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 220.849810][ T2602] EXT4-fs (loop5): unmounting filesystem. [ 220.893744][ T1713] Bluetooth: hci0: command 0x1003 tx timeout [ 220.900203][ T326] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 220.950506][ T3319] netlink: 20 bytes leftover after parsing attributes in process `syz.4.703'. [ 221.259742][ T3321] FAULT_INJECTION: forcing a failure. [ 221.259742][ T3321] name failslab, interval 1, probability 0, space 0, times 0 [ 221.408460][ T3321] CPU: 0 PID: 3321 Comm: syz.3.705 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 221.418228][ T3321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.428298][ T3321] Call Trace: [ 221.431590][ T3321] [ 221.434539][ T3321] __dump_stack+0x21/0x24 [ 221.438888][ T3321] dump_stack_lvl+0xee/0x150 [ 221.443496][ T3321] ? __cfi_dump_stack_lvl+0x8/0x8 [ 221.448536][ T3321] ? mas_wr_node_walk+0xc7/0x790 [ 221.453491][ T3321] ? __sanitizer_cov_trace_switch+0x61/0xe0 [ 221.459410][ T3321] dump_stack+0x15/0x24 [ 221.463587][ T3321] should_fail_ex+0x3d4/0x520 [ 221.468274][ T3321] ? mas_alloc_nodes+0x2d8/0x850 [ 221.473228][ T3321] __should_failslab+0xac/0xf0 [ 221.478006][ T3321] should_failslab+0x9/0x20 [ 221.482530][ T3321] kmem_cache_alloc+0x3b/0x330 [ 221.487308][ T3321] mas_alloc_nodes+0x2d8/0x850 [ 221.492090][ T3321] mas_preallocate+0xdcf/0x1390 [ 221.496961][ T3321] ? __cfi_mas_preallocate+0x10/0x10 [ 221.502264][ T3321] ? __vma_adjust+0xaf/0x1e50 [ 221.506955][ T3321] __vma_adjust+0x5dc/0x1e50 [ 221.511559][ T3321] ? kasan_save_alloc_info+0x25/0x30 [ 221.516860][ T3321] ? __cfi___vma_adjust+0x10/0x10 [ 221.521905][ T3321] ? rwsem_write_trylock+0x130/0x300 [ 221.527213][ T3321] __split_vma+0x5c5/0x840 [ 221.531652][ T3321] split_vma+0x7c/0xd0 [ 221.535736][ T3321] mlock_fixup+0x593/0x930 [ 221.540171][ T3321] apply_vma_lock_flags+0x204/0x340 [ 221.545380][ T3321] ? do_mlock+0x600/0x600 [ 221.549723][ T3321] ? __switch_to_asm+0x3a/0x60 [ 221.554506][ T3321] do_mlock+0x468/0x600 [ 221.558679][ T3321] ? lru_gen_add_folio+0x860/0x860 [ 221.563800][ T3321] ? xfd_validate_state+0x70/0x150 [ 221.568927][ T3321] ? __kasan_check_write+0x14/0x20 [ 221.574062][ T3321] ? fpregs_restore_userregs+0x128/0x260 [ 221.579712][ T3321] __x64_sys_mlock+0x60/0x70 [ 221.584316][ T3321] x64_sys_call+0x506/0x9a0 [ 221.588834][ T3321] do_syscall_64+0x4c/0xa0 [ 221.593268][ T3321] ? clear_bhb_loop+0x15/0x70 [ 221.597957][ T3321] ? clear_bhb_loop+0x15/0x70 [ 221.602643][ T3321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.608557][ T3321] RIP: 0033:0x7fabf238e969 [ 221.612979][ T3321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.632597][ T3321] RSP: 002b:00007fabf31a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 221.641033][ T3321] RAX: ffffffffffffffda RBX: 00007fabf25b5fa0 RCX: 00007fabf238e969 [ 221.649117][ T3321] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000c00000 [ 221.657099][ T3321] RBP: 00007fabf31a4090 R08: 0000000000000000 R09: 0000000000000000 [ 221.665097][ T3321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.673079][ T3321] R13: 0000000000000001 R14: 00007fabf25b5fa0 R15: 00007ffe237f6228 [ 221.681165][ T3321] [ 222.005057][ T1651] usb 2-1: USB disconnect, device number 10 [ 222.046128][ T3324] loop4: detected capacity change from 0 to 512 [ 222.098926][ T3324] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 222.116383][ T3324] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.265724][ T3341] netlink: 20 bytes leftover after parsing attributes in process `syz.3.709'. [ 222.704005][ T1651] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 222.915664][ T1651] usb 2-1: config index 0 descriptor too short (expected 32786, got 18) [ 222.925722][ T1651] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 223.305450][ T1651] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 223.313707][ T1651] usb 2-1: Manufacturer: syz [ 223.322456][ T1651] usb 2-1: config 0 descriptor?? [ 223.329817][ T1651] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 223.340151][ T1651] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 223.473650][ T19] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 223.559161][ T3344] loop1: detected capacity change from 0 to 512 [ 223.591923][ T3344] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 223.601600][ T3344] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.665284][ T19] usb 6-1: config index 0 descriptor too short (expected 32786, got 18) [ 223.674495][ T284] EXT4-fs (loop4): unmounting filesystem. [ 223.675645][ T19] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 223.689589][ T19] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 223.697867][ T19] usb 6-1: Manufacturer: syz [ 223.706063][ T19] usb 6-1: config 0 descriptor?? [ 223.718687][ T19] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 223.723700][ T362] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 223.772744][ T19] ftdi_sio ttyUSB1: unknown device type: 0xc698 [ 223.780561][ T28] audit: type=1400 audit(1748120498.590:293): avc: denied { setopt } for pid=3357 comm="syz.4.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 223.853234][ T28] audit: type=1400 audit(1748120498.660:294): avc: denied { create } for pid=3357 comm="syz.4.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 223.874101][ T28] audit: type=1400 audit(1748120498.660:295): avc: denied { ioctl } for pid=3357 comm="syz.4.714" path="socket:[26913]" dev="sockfs" ino=26913 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 223.962222][ T28] audit: type=1400 audit(1748120498.770:296): avc: denied { unlink } for pid=3360 comm="syz.3.715" name="#1" dev="tmpfs" ino=817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 223.986435][ T362] usb 3-1: config index 0 descriptor too short (expected 32786, got 18) [ 224.029983][ T3348] loop5: detected capacity change from 0 to 512 [ 224.047729][ T362] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 224.055476][ T3348] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 224.063660][ T362] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 224.066199][ T3348] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.083651][ T362] usb 3-1: Manufacturer: syz [ 224.104331][ T362] usb 3-1: config 0 descriptor?? [ 224.114195][ T362] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 224.121982][ T362] ftdi_sio ttyUSB2: unknown device type: 0xc698 [ 224.246368][ T3370] syz.4.717[3370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.246429][ T3370] syz.4.717[3370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.258895][ T3370] syz.4.717[3370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.270432][ T3370] syz.4.717[3370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.834832][ T502] usb 3-1: USB disconnect, device number 8 [ 224.871109][ T502] ftdi_sio 3-1:0.0: device disconnected [ 224.872477][ T3390] loop2: detected capacity change from 0 to 512 [ 224.923322][ T3390] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 224.934489][ T317] usb 2-1: USB disconnect, device number 11 [ 224.940779][ T317] ftdi_sio 2-1:0.0: device disconnected [ 224.948070][ T3390] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.012436][ T285] EXT4-fs (loop1): unmounting filesystem. [ 225.100234][ T3394] loop4: detected capacity change from 0 to 256 [ 225.106993][ T3394] exfat: Unknown parameter 'iochar' [ 225.213113][ T3398] netlink: 20 bytes leftover after parsing attributes in process `syz.1.725'. [ 225.229404][ T3394] netlink: 9 bytes leftover after parsing attributes in process `syz.4.723'. [ 225.239797][ T307] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 225.352447][ T317] usb 6-1: USB disconnect, device number 6 [ 225.417189][ T317] ftdi_sio 6-1:0.0: device disconnected [ 225.607740][ T2602] EXT4-fs (loop5): unmounting filesystem. [ 226.476970][ T286] EXT4-fs (loop2): unmounting filesystem. [ 227.370720][ T3426] loop1: detected capacity change from 0 to 16 [ 227.384294][ T3426] erofs: (device loop1): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 227.439831][ T3426] cgroup: Unknown subsys name 'hugetlb' [ 227.465126][ T28] audit: type=1400 audit(1748120502.280:297): avc: denied { append } for pid=3425 comm="syz.1.734" name="usbmon5" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 227.507124][ T28] audit: type=1400 audit(1748120502.310:298): avc: denied { open } for pid=3425 comm="syz.1.734" path="/dev/usbmon5" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 227.534257][ T305] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 228.041203][ T3441] netlink: 25 bytes leftover after parsing attributes in process `syz.1.737'. [ 228.071001][ T3441] loop1: detected capacity change from 0 to 16 [ 228.080630][ T3441] erofs: (device loop1): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 228.091614][ T3441] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26000) [ 228.143975][ T3013] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 228.162476][ T3441] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.737'. [ 228.172116][ T3441] 1XD: renamed from 00XD [ 228.181497][ T3441] device 01XD left promiscuous mode [ 228.208483][ T307] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 228.222496][ T305] usb 4-1: config index 0 descriptor too short (expected 32786, got 18) [ 228.249636][ T305] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 228.285505][ T305] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 228.315889][ T305] usb 4-1: Manufacturer: syz [ 228.400658][ T305] usb 4-1: config 0 descriptor?? [ 228.414940][ T305] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 228.424782][ T3013] usb 6-1: config index 0 descriptor too short (expected 32786, got 18) [ 228.433616][ T305] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 228.447088][ T3013] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 228.463324][ T3013] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 228.467830][ T3446] loop1: detected capacity change from 0 to 512 [ 228.472119][ T3013] usb 6-1: Manufacturer: syz [ 228.487775][ T3013] usb 6-1: config 0 descriptor?? [ 228.502185][ T3013] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 228.510680][ T3013] ftdi_sio ttyUSB1: unknown device type: 0xc698 [ 228.514470][ T3446] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 228.526402][ T3446] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.603020][ T3456] FAULT_INJECTION: forcing a failure. [ 228.603020][ T3456] name failslab, interval 1, probability 0, space 0, times 0 [ 228.617975][ T3456] CPU: 0 PID: 3456 Comm: syz.2.742 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 228.627738][ T3456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.637899][ T3456] Call Trace: [ 228.641193][ T3456] [ 228.644142][ T3456] __dump_stack+0x21/0x24 [ 228.648501][ T3456] dump_stack_lvl+0xee/0x150 [ 228.653110][ T3456] ? __cfi_dump_stack_lvl+0x8/0x8 [ 228.658141][ T3456] ? kasan_set_track+0x60/0x70 [ 228.662901][ T3456] ? kasan_set_track+0x4b/0x70 [ 228.667670][ T3456] dump_stack+0x15/0x24 [ 228.671826][ T3456] should_fail_ex+0x3d4/0x520 [ 228.676506][ T3456] __should_failslab+0xac/0xf0 [ 228.681272][ T3456] should_failslab+0x9/0x20 [ 228.685771][ T3456] slab_pre_alloc_hook+0x30/0x1e0 [ 228.690812][ T3456] kmem_cache_alloc_lru+0x49/0x280 [ 228.695924][ T3456] ? new_inode_pseudo+0x8f/0x1f0 [ 228.700878][ T3456] new_inode_pseudo+0x8f/0x1f0 [ 228.705642][ T3456] alloc_anon_inode+0x21/0x300 [ 228.710432][ T3456] aio_setup_ring+0xfa/0xb80 [ 228.715015][ T3456] ? free_ioctx_reqs+0x160/0x160 [ 228.719947][ T3456] ioctx_alloc+0x329/0x730 [ 228.724355][ T3456] __se_sys_io_setup+0x6f/0x230 [ 228.729207][ T3456] __x64_sys_io_setup+0x5b/0x70 [ 228.734055][ T3456] x64_sys_call+0x840/0x9a0 [ 228.738579][ T3456] do_syscall_64+0x4c/0xa0 [ 228.742997][ T3456] ? clear_bhb_loop+0x15/0x70 [ 228.747503][ T3459] loop3: detected capacity change from 0 to 512 [ 228.747684][ T3456] ? clear_bhb_loop+0x15/0x70 [ 228.758775][ T3456] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.764703][ T3456] RIP: 0033:0x7fe7a478e969 [ 228.769129][ T3456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.788742][ T3456] RSP: 002b:00007fe7a554f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 228.797172][ T3456] RAX: ffffffffffffffda RBX: 00007fe7a49b5fa0 RCX: 00007fe7a478e969 [ 228.805152][ T3456] RDX: 0000000000000000 RSI: 0000200000004200 RDI: 0000000000000008 [ 228.813134][ T3456] RBP: 00007fe7a554f090 R08: 0000000000000000 R09: 0000000000000000 [ 228.821099][ T3456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.829065][ T3456] R13: 0000000000000000 R14: 00007fe7a49b5fa0 R15: 00007ffebebb6428 [ 228.837040][ T3456] [ 228.897609][ T3459] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 228.908437][ T3459] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.932994][ T285] EXT4-fs (loop1): unmounting filesystem. [ 229.082754][ T3478] loop1: detected capacity change from 0 to 512 [ 229.196040][ T3478] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 229.205440][ T3478] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 229.224196][ T3478] netlink: 'syz.1.744': attribute type 13 has an invalid length. [ 229.238201][ T3478] 1XD: refused to change device tx_queue_len [ 229.245469][ T3478] A link change request failed with some changes committed already. Interface 01XD may have been left with an inconsistent configuration, please check. [ 229.273356][ T3478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51138 sclass=netlink_route_socket pid=3478 comm=syz.1.744 [ 229.799883][ T317] usb 4-1: USB disconnect, device number 12 [ 229.905294][ T317] ftdi_sio 4-1:0.0: device disconnected [ 229.947143][ T283] EXT4-fs (loop3): unmounting filesystem. [ 230.036022][ T362] usb 6-1: USB disconnect, device number 7 [ 230.042297][ T362] ftdi_sio 6-1:0.0: device disconnected [ 230.494784][ T285] EXT4-fs (loop1): unmounting filesystem. [ 230.622529][ T3501] loop4: detected capacity change from 0 to 512 [ 230.872440][ T3504] loop2: detected capacity change from 0 to 256 [ 230.885084][ T3504] exfat: Unknown parameter 'iochar' [ 230.971345][ T28] audit: type=1400 audit(1748120505.540:299): avc: denied { connect } for pid=3490 comm="syz.3.749" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 231.009712][ T3499] netlink: 9 bytes leftover after parsing attributes in process `syz.2.750'. [ 231.021384][ T3499] device 00XD entered promiscuous mode [ 231.152344][ T28] audit: type=1400 audit(1748120505.770:300): avc: denied { bind } for pid=3494 comm="syz.5.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 231.179188][ T28] audit: type=1400 audit(1748120505.780:301): avc: denied { listen } for pid=3494 comm="syz.5.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 231.201247][ T3501] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 231.210461][ T3501] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.279475][ T3496] loop1: detected capacity change from 0 to 40427 [ 231.317861][ T3496] F2FS-fs (loop1): Found nat_bits in checkpoint [ 231.375400][ T28] audit: type=1400 audit(1748120506.190:302): avc: denied { read write } for pid=3513 comm="syz.2.755" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 231.405812][ T28] audit: type=1400 audit(1748120506.190:303): avc: denied { open } for pid=3513 comm="syz.2.755" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 231.441512][ T28] audit: type=1400 audit(1748120506.250:304): avc: denied { mount } for pid=3513 comm="syz.2.755" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 231.468886][ T3496] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 231.597970][ T284] EXT4-fs (loop4): unmounting filesystem. [ 231.654067][ T3530] device wireguard0 entered promiscuous mode [ 231.835997][ T3528] loop3: detected capacity change from 0 to 512 [ 231.863665][ T3528] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 232.198896][ T1651] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 232.206604][ T1651] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 232.222279][ T3528] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 232.225588][ T1651] hid-generic 0000:0000:0000.0001: hidraw0: HID vffffff.ff Device [syz1] on syz0 [ 232.310279][ T3528] System zones: 1-12 [ 232.321119][ T3528] EXT4-fs (loop3): orphan cleanup on readonly fs [ 232.337028][ T3528] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.761: bg 0: block 361: padding at end of block bitmap is not set [ 232.339528][ T3550] fido_id[3550]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 232.516511][ T3528] EXT4-fs (loop3): Remounting filesystem read-only [ 232.726628][ T3528] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 232.746201][ T3559] netlink: 'syz.2.768': attribute type 5 has an invalid length. [ 232.753669][ T3528] EXT4-fs (loop3): Remounting filesystem read-only [ 232.760400][ T3528] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.761: invalid indirect mapped block 12 (level 1) [ 232.785864][ T3528] EXT4-fs (loop3): Remounting filesystem read-only [ 232.796885][ T3528] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.761: invalid indirect mapped block 2 (level 2) [ 232.848504][ T3528] EXT4-fs (loop3): Remounting filesystem read-only [ 232.861417][ T3528] EXT4-fs (loop3): 1 truncate cleaned up [ 232.867232][ T3528] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 232.990043][ T3569] loop4: detected capacity change from 0 to 256 [ 232.996702][ T3569] exfat: Unknown parameter 'iochar' [ 233.035165][ T3569] netlink: 9 bytes leftover after parsing attributes in process `syz.4.766'. [ 233.604443][ T3575] syz.1.772 uses obsolete (PF_INET,SOCK_PACKET) [ 233.640840][ T3575] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 233.675488][ T3575] audit: out of memory in audit_log_start [ 235.323270][ T283] EXT4-fs (loop3): unmounting filesystem. [ 235.603659][ T1651] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 235.763650][ T317] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 235.794793][ T1651] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.805073][ T1651] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.814976][ T1651] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 235.824362][ T1651] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 235.832497][ T1651] usb 3-1: SerialNumber: syz [ 235.959410][ T6] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 235.961052][ T3605] loop4: detected capacity change from 0 to 128 [ 235.968213][ T317] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 235.981636][ T317] usb 4-1: config 0 has no interface number 0 [ 235.988284][ T317] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x2 has invalid maxpacket 6400, setting to 64 [ 235.999623][ T317] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 236.012206][ T317] usb 4-1: New USB device found, idVendor=e828, idProduct=cea8, bcdDevice=50.03 [ 236.021507][ T317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.021519][ T312] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 236.039117][ T317] usb 4-1: Product: syz [ 236.047565][ T317] usb 4-1: Manufacturer: syz [ 236.052240][ T317] usb 4-1: SerialNumber: syz [ 236.062801][ T317] usb 4-1: config 0 descriptor?? [ 236.068458][ T3595] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 236.086494][ T3585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.094965][ T3595] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 236.104148][ T3585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.153661][ T6] usb 6-1: Using ep0 maxpacket: 8 [ 236.159974][ T6] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 236.168803][ T6] usb 6-1: config 179 has no interface number 0 [ 236.175458][ T6] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 236.187178][ T6] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 236.198925][ T6] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 236.211197][ T6] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 236.232798][ T6] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 236.267434][ T6] usb 6-1: config 179 interface 65 has no altsetting 0 [ 236.278655][ T1651] usb 3-1: 0:2 : does not exist [ 236.327471][ T1651] usb 3-1: unit 5 not found! [ 236.332397][ T3605] loop4: detected capacity change from 0 to 256 [ 236.332722][ T6] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 236.355496][ T317] usb 4-1: MIDIStreaming interface descriptor not found [ 236.363540][ T1651] usb 3-1: USB disconnect, device number 9 [ 236.402449][ T317] usb 4-1: USB disconnect, device number 13 [ 236.416929][ T3605] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017bf5, chksum : 0x8472ea0e, utbl_chksum : 0xe619d30d) [ 236.451465][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.466948][ T3598] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 236.716094][ T3598] device wireguard0 entered promiscuous mode [ 236.774447][ T28] audit: type=1400 audit(1748120511.580:305): avc: denied { getopt } for pid=3597 comm="syz.5.780" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 236.803522][ T6] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input5 [ 236.870932][ T3618] FAULT_INJECTION: forcing a failure. [ 236.870932][ T3618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.956532][ T3618] CPU: 1 PID: 3618 Comm: syz.3.786 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 236.966387][ T3618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.976461][ T3618] Call Trace: [ 236.979759][ T3618] [ 236.982702][ T3618] __dump_stack+0x21/0x24 [ 236.987056][ T3618] dump_stack_lvl+0xee/0x150 [ 236.991674][ T3618] ? __cfi_dump_stack_lvl+0x8/0x8 [ 236.995953][ T317] usb 6-1: USB disconnect, device number 8 [ 236.996720][ T3618] dump_stack+0x15/0x24 [ 236.996739][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 236.996751][ T3618] should_fail_ex+0x3d4/0x520 [ 236.996777][ T3618] should_fail+0xb/0x10 [ 237.006549][ T317] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 237.006889][ T3618] should_fail_usercopy+0x1a/0x20 [ 237.039192][ T3618] _copy_to_user+0x1e/0x90 [ 237.043627][ T3618] simple_read_from_buffer+0xe9/0x160 [ 237.049042][ T3618] proc_fail_nth_read+0x19a/0x210 [ 237.054086][ T3618] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 237.059651][ T3618] ? security_file_permission+0x94/0xb0 [ 237.065223][ T3618] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 237.070785][ T3618] vfs_read+0x26e/0x8c0 [ 237.074959][ T3618] ? __cfi_vfs_read+0x10/0x10 [ 237.079648][ T3618] ? __kasan_check_write+0x14/0x20 [ 237.084782][ T3618] ? mutex_lock+0x8d/0x1a0 [ 237.089214][ T3618] ? __cfi_mutex_lock+0x10/0x10 [ 237.094084][ T3618] ? __fdget_pos+0x2cd/0x380 [ 237.098712][ T3618] ? ksys_read+0x71/0x240 [ 237.103061][ T3618] ksys_read+0x140/0x240 [ 237.107320][ T3618] ? __cfi_ksys_read+0x10/0x10 [ 237.112102][ T3618] ? __bpf_trace_sys_enter+0x62/0x70 [ 237.117392][ T3618] __x64_sys_read+0x7b/0x90 [ 237.121924][ T3618] x64_sys_call+0x2f/0x9a0 [ 237.126356][ T3618] do_syscall_64+0x4c/0xa0 [ 237.130792][ T3618] ? clear_bhb_loop+0x15/0x70 [ 237.135482][ T3618] ? clear_bhb_loop+0x15/0x70 [ 237.140168][ T3618] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.146079][ T3618] RIP: 0033:0x7fabf238d37c [ 237.150498][ T3618] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 237.170117][ T3618] RSP: 002b:00007fabf31a4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 237.178721][ T3618] RAX: ffffffffffffffda RBX: 00007fabf25b5fa0 RCX: 00007fabf238d37c [ 237.186701][ T3618] RDX: 000000000000000f RSI: 00007fabf31a40a0 RDI: 0000000000000004 [ 237.194681][ T3618] RBP: 00007fabf31a4090 R08: 0000000000000000 R09: 0000000000000000 [ 237.202657][ T3618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.210632][ T3618] R13: 0000000000000000 R14: 00007fabf25b5fa0 R15: 00007ffe237f6228 [ 237.218611][ T3618] [ 237.867012][ T3629] loop3: detected capacity change from 0 to 512 [ 237.890890][ T3629] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 237.922026][ T3629] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 237.930279][ T3629] System zones: 1-12 [ 237.940770][ T3629] EXT4-fs (loop3): orphan cleanup on readonly fs [ 237.957306][ T3629] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.787: bg 0: block 361: padding at end of block bitmap is not set [ 237.967622][ T28] audit: type=1400 audit(1748120512.770:306): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 238.018628][ T3629] EXT4-fs (loop3): Remounting filesystem read-only [ 238.025259][ T3629] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 238.044406][ T3629] EXT4-fs (loop3): Remounting filesystem read-only [ 238.063378][ T3629] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.787: invalid indirect mapped block 12 (level 1) [ 238.088303][ T3629] EXT4-fs (loop3): Remounting filesystem read-only [ 238.096766][ T3629] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.787: invalid indirect mapped block 2 (level 2) [ 238.110944][ T3629] EXT4-fs (loop3): Remounting filesystem read-only [ 238.117845][ T3629] EXT4-fs (loop3): 1 truncate cleaned up [ 238.124076][ T3629] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 238.205062][ T3649] loop2: detected capacity change from 0 to 512 [ 238.220496][ T3649] EXT4-fs: Ignoring removed oldalloc option [ 238.230380][ T283] EXT4-fs (loop3): unmounting filesystem. [ 238.238743][ T3649] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.795: Parent and EA inode have the same ino 15 [ 238.256844][ T3644] netlink: 25 bytes leftover after parsing attributes in process `syz.4.792'. [ 238.257374][ T3649] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 238.265887][ T3644] device gretap0 entered promiscuous mode [ 238.278885][ T3649] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.795: Parent and EA inode have the same ino 15 [ 238.299369][ T3649] EXT4-fs (loop2): 1 orphan inode deleted [ 238.299807][ T3644] loop4: detected capacity change from 0 to 16 [ 238.305179][ T3649] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 238.320383][ T3644] erofs: (device loop4): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 238.326210][ T28] audit: type=1400 audit(1748120513.140:307): avc: denied { mounton } for pid=3648 comm="syz.2.795" path="/166/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.331272][ T3644] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26000) [ 238.368169][ T3644] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.792'. [ 238.376654][ T3649] SELinux: Context system_u:object_r:hostname_exec_t:s0 is not valid (left unmapped). [ 238.377371][ T3644] 0XD: renamed from gretap0 [ 238.392855][ T3644] device 00XD left promiscuous mode [ 238.398758][ T3644] A link change request failed with some changes committed already. Interface 00XD may have been left with an inconsistent configuration, please check. [ 238.410574][ T286] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 238.443937][ T28] audit: type=1400 audit(1748120513.190:308): avc: denied { write } for pid=3648 comm="syz.2.795" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.458724][ T3653] loop3: detected capacity change from 0 to 512 [ 238.492759][ T28] audit: type=1400 audit(1748120513.190:309): avc: denied { add_name } for pid=3648 comm="syz.2.795" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.524040][ T28] audit: type=1400 audit(1748120513.190:310): avc: denied { create } for pid=3648 comm="syz.2.795" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 238.534637][ T286] ------------[ cut here ]------------ [ 238.544930][ T28] audit: type=1400 audit(1748120513.210:311): avc: denied { relabelto } for pid=3648 comm="syz.2.795" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hostname_exec_t:s0" [ 238.549634][ T286] kernel BUG at fs/namei.c:2954! [ 238.583780][ T28] audit: type=1400 audit(1748120513.330:312): avc: denied { remove_name } for pid=286 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.607431][ T286] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 238.613524][ T286] CPU: 1 PID: 286 Comm: syz-executor Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 238.623421][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 238.633480][ T286] RIP: 0010:may_delete+0x701/0x710 [ 238.638616][ T286] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 30 19 f4 ff e9 77 fe ff ff e8 d6 c7 af ff 0f 0b e8 cf c7 af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 238.658578][ T286] RSP: 0018:ffffc9000daafc20 EFLAGS: 00010293 [ 238.664654][ T286] RAX: ffffffff81c020d1 RBX: ffff888133445440 RCX: ffff88810e045100 [ 238.672623][ T286] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 238.680584][ T286] RBP: ffffc9000daafc88 R08: 0000000000000004 R09: 0000000000000003 [ 238.688554][ T286] R10: fffff52001b55f64 R11: 1ffff92001b55f64 R12: dffffc0000000000 [ 238.696519][ T286] R13: 0000000000000001 R14: ffff888100688140 R15: 1ffff11026688a88 [ 238.704485][ T286] FS: 0000555580a3b500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 238.713409][ T286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.719983][ T286] CR2: 00007f0305db7bac CR3: 000000013106f000 CR4: 00000000003506a0 [ 238.727949][ T286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 238.735919][ T286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 238.743883][ T286] Call Trace: [ 238.747152][ T286] [ 238.750077][ T286] vfs_rmdir+0x32/0x500 [ 238.754236][ T286] incfs_kill_sb+0x105/0x220 [ 238.758825][ T286] deactivate_locked_super+0xb5/0x120 [ 238.764196][ T286] deactivate_super+0xaf/0xe0 [ 238.768866][ T286] cleanup_mnt+0x45f/0x4e0 [ 238.773285][ T286] __cleanup_mnt+0x19/0x20 [ 238.777704][ T286] task_work_run+0x1db/0x240 [ 238.782292][ T286] ? __cfi_task_work_run+0x10/0x10 [ 238.787399][ T286] ? __x64_sys_umount+0x125/0x160 [ 238.792421][ T286] ? __cfi___x64_sys_umount+0x10/0x10 [ 238.797788][ T286] exit_to_user_mode_loop+0x9b/0xb0 [ 238.802983][ T286] exit_to_user_mode_prepare+0x5a/0xa0 [ 238.808444][ T286] syscall_exit_to_user_mode+0x1a/0x30 [ 238.813899][ T286] do_syscall_64+0x58/0xa0 [ 238.818316][ T286] ? clear_bhb_loop+0x15/0x70 [ 238.822985][ T286] ? clear_bhb_loop+0x15/0x70 [ 238.827652][ T286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.833545][ T286] RIP: 0033:0x7fe7a478fc97 [ 238.837954][ T286] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 238.857550][ T286] RSP: 002b:00007ffebebb45c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 238.865963][ T286] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe7a478fc97 [ 238.873926][ T286] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffebebb4680 [ 238.881889][ T286] RBP: 00007ffebebb4680 R08: 0000000000000000 R09: 0000000000000000 [ 238.889848][ T286] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffebebb5770 [ 238.897813][ T286] R13: 00007fe7a481089d R14: 000000000003a32c R15: 00007ffebebb6840 [ 238.905783][ T286] [ 238.908836][ T286] Modules linked in: [ 238.922269][ T286] ---[ end trace 0000000000000000 ]--- [ 238.928331][ T286] RIP: 0010:may_delete+0x701/0x710 [ 238.933469][ T286] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 30 19 f4 ff e9 77 fe ff ff e8 d6 c7 af ff 0f 0b e8 cf c7 af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 238.957163][ T28] audit: type=1400 audit(1748120513.330:313): avc: denied { unlink } for pid=286 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 238.970192][ T286] RSP: 0018:ffffc9000daafc20 EFLAGS: 00010293 [ 238.983110][ T3653] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 238.999173][ T286] RAX: ffffffff81c020d1 RBX: ffff888133445440 RCX: ffff88810e045100 [ 239.007286][ T286] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 239.010950][ T3653] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.015315][ T286] RBP: ffffc9000daafc88 R08: 0000000000000004 R09: 0000000000000003 [ 239.015333][ T286] R10: fffff52001b55f64 R11: 1ffff92001b55f64 R12: dffffc0000000000 [ 239.015349][ T286] R13: 0000000000000001 R14: ffff888100688140 R15: 1ffff11026688a88 [ 239.015364][ T286] FS: 0000555580a3b500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 239.041843][ T28] audit: type=1400 audit(1748120513.330:314): avc: denied { rmdir } for pid=286 comm="syz-executor" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hostname_exec_t:s0" [ 239.049807][ T286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.120514][ T286] CR2: 0000001b2e31cff8 CR3: 000000013106f000 CR4: 00000000003506a0 [ 239.128878][ T286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 239.137079][ T286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 239.145348][ T286] Kernel panic - not syncing: Fatal exception [ 239.151759][ T286] Kernel Offset: disabled [ 239.156070][ T286] Rebooting in 86400 seconds..