last executing test programs: 7.980859523s ago: executing program 2 (id=3225): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009042000010300020009210000000122070009058103"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.56355457s ago: executing program 3 (id=3228): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x24, &(0x7f0000002000)={0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000010c0)=@newtfilter={0x34, 0x26, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) 7.522098081s ago: executing program 0 (id=3229): r0 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000340)) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) request_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0xfffffffffffffffc) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") 6.725644754s ago: executing program 3 (id=3230): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x12, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db"}) 6.518016377s ago: executing program 1 (id=3232): openat$fuse(0xffffffffffffff9c, &(0x7f0000006240), 0x42, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, 0x0, 0x0) close(r0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) execve(0x0, 0x0, 0x0) 6.30589343s ago: executing program 0 (id=3234): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) setresuid(0x0, 0x0, 0xee01) 6.213567572s ago: executing program 0 (id=3237): r0 = socket$netlink(0x10, 0x3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@private0, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000"], 0xb8}}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x4b, 0x3, 0x9, 0x10, 0x1199, 0x9015, 0x992d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x7f, 0x7, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x9, 0x0, 0x45, 0x83, 0xd6, 0x3}}, {{0x9, 0x4, 0x1, 0xe, 0x0, 0xff, 0xff, 0xff, 0x8}}]}}]}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000) 6.097629284s ago: executing program 4 (id=3239): dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 5.979038035s ago: executing program 4 (id=3240): getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a0000000000000000000000080010000000000006001500"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) poll(0x0, 0x0, 0x1d) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 5.790125899s ago: executing program 2 (id=3241): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46b, &(0x7f0000000740)="$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") 5.503339223s ago: executing program 3 (id=3242): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 5.387975845s ago: executing program 3 (id=3243): socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x3, 0x1, 0x5, 0xa, 0x9, 0x1, {0x5, 0x17d, 0x4, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x20000000, 0xee00, 0x0, 0x3ff, 0x8001}}, {0x0, 0x11}}}, 0xa0) 5.319687016s ago: executing program 2 (id=3244): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 5.308575346s ago: executing program 1 (id=3245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x2, 0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000905000/0x1000)=nil, 0x1000, 0xb635773f07ebbeee, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000580)=ANY=[@ANYRESOCT=r3, @ANYRES32=r4, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0xfffff000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) timer_settime(r0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) 5.06405416s ago: executing program 2 (id=3246): r0 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000340)) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) request_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0xfffffffffffffffc) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") 5.04409796s ago: executing program 4 (id=3247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r2, &(0x7f0000012380)={0x2020}, 0x2020) 4.821731043s ago: executing program 4 (id=3248): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x551a, &(0x7f000000df00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.564094645s ago: executing program 1 (id=3249): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r2]) 1.537111286s ago: executing program 3 (id=3250): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @broadcast}, &(0x7f00000003c0)=0x10, 0x80000) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000b40)=@nat={'nat\x00', 0x19, 0x7, 0x90c, [0x200000001f40, 0x0, 0x0, 0x200000002056, 0x200000002402], 0x0, &(0x7f0000000400), &(0x7f0000001f40)=ANY=[@ANYBLOB="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"/1924]}, 0x7fc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000f00)='./file0\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000020000000000000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000af47"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{}, &(0x7f0000000600), 0x0}, 0x20) 1.536737156s ago: executing program 4 (id=3251): dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 1.363389638s ago: executing program 1 (id=3252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa2000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 1.340845298s ago: executing program 2 (id=3253): socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) sigaltstack(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ") 1.26225896s ago: executing program 0 (id=3254): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x626f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='net_dev_xmit\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000}, 0x50) 1.182288301s ago: executing program 0 (id=3255): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$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") mkdir(&(0x7f0000000300)='./control\x00', 0x60) mkdir(&(0x7f0000000700)='./bus\x00', 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x163) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) mknod$loop(&(0x7f0000000000)='./bus/file0\x00', 0x400, 0x1) 1.181592811s ago: executing program 1 (id=3256): pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x15) dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) 936.620355ms ago: executing program 4 (id=3257): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 302.138595ms ago: executing program 3 (id=3258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f0000012380)={0x2020}, 0x2020) 130.258578ms ago: executing program 0 (id=3259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x2, 0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000905000/0x1000)=nil, 0x1000, 0xb635773f07ebbeee, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000580)=ANY=[@ANYRESOCT=r3, @ANYRES32=r4, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0xfffff000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) timer_settime(r0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) 89.010699ms ago: executing program 2 (id=3260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 0s ago: executing program 1 (id=3261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @empty}, 0x2}}, 0x2e) ioctl$PPPIOCSMRU(r5, 0x40047452, 0x0) kernel console output (not intermixed with test programs): onfig 0 descriptor?? [ 493.774587][ T8445] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2691'. [ 493.854048][ T8449] loop2: detected capacity change from 0 to 512 [ 493.922523][ T8449] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 493.945152][ T8449] ext4 filesystem being mounted at /511/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 493.979931][ T8438] loop0: detected capacity change from 0 to 40427 [ 494.001959][ T39] usbhid 5-1:0.0: can't add hid device: -71 [ 494.008212][ T39] usbhid: probe of 5-1:0.0 failed with error -71 [ 494.019677][ T8438] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 494.030987][ T39] usb 5-1: USB disconnect, device number 14 [ 494.061845][ T8453] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 494.069728][ T8453] SELinux: failed to load policy [ 494.372985][ T8438] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 494.418094][ T8438] F2FS-fs (loop0): invalid crc value [ 494.449078][ T8438] F2FS-fs (loop0): Found nat_bits in checkpoint [ 494.529361][ T284] EXT4-fs (loop2): unmounting filesystem. [ 494.549507][ T8438] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 494.561005][ T8438] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 494.686120][ T8463] hub 6-0:1.0: USB hub found [ 494.880095][ T8463] hub 6-0:1.0: 1 port detected [ 494.942773][ T8464] loop2: detected capacity change from 0 to 512 [ 495.005032][ T8464] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 495.015466][ T8464] ext4 filesystem being mounted at /512/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.284819][ T8474] fuse: Bad value for 'fd' [ 496.420731][ T28] kauditd_printk_skb: 795 callbacks suppressed [ 496.420753][ T28] audit: type=1400 audit(1753252485.109:7924): avc: denied { bpf } for pid=8465 comm="syz.1.2698" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 496.457682][ T8438] input: syz1 as /devices/virtual/input/input21 [ 496.504109][ T28] audit: type=1400 audit(1753252485.129:7925): avc: denied { map_create } for pid=8465 comm="syz.1.2698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 496.523661][ T28] audit: type=1400 audit(1753252485.129:7926): avc: denied { bpf } for pid=8465 comm="syz.1.2698" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 496.544988][ T8480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 496.544988][ T8464] audit: audit_backlog=65 > audit_backlog_limit=64 [ 496.545007][ T8480] audit: audit_lost=110 audit_rate_limit=0 audit_backlog_limit=64 [ 496.553309][ T8477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 496.558996][ T28] audit: type=1400 audit(1753252485.139:7927): avc: denied { map_read map_write } for pid=8465 comm="syz.1.2698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 496.577773][ T8115] audit: audit_backlog=65 > audit_backlog_limit=64 [ 496.592840][ T28] audit: type=1400 audit(1753252485.199:7928): avc: denied { prog_load } for pid=8465 comm="syz.1.2698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 496.765025][ T284] EXT4-fs (loop2): unmounting filesystem. [ 496.870120][ T8492] loop3: detected capacity change from 0 to 128 [ 496.911491][ T8492] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 496.911660][ T8497] loop2: detected capacity change from 0 to 2048 [ 496.927541][ T8492] ext4 filesystem being mounted at /519/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.142423][ T8491] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 497.150028][ T8491] SELinux: failed to load policy [ 497.156424][ T8497] loop2: p1 < > p3 [ 497.164172][ T8497] loop2: p3 size 134217728 extends beyond EOD, truncated [ 497.207165][ T8496] loop0: detected capacity change from 0 to 40427 [ 497.219777][ T8496] F2FS-fs (loop0): invalid crc value [ 497.233516][ T772] udevd[772]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 497.233680][ T949] udevd[949]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 497.255337][ T8496] F2FS-fs (loop0): Found nat_bits in checkpoint [ 497.305985][ T8496] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 498.115222][ T8511] syz.0.2702: attempt to access beyond end of device [ 498.115222][ T8511] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 498.693430][ T286] EXT4-fs (loop3): unmounting filesystem. [ 498.767544][ T282] syz-executor: attempt to access beyond end of device [ 498.767544][ T282] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 499.008299][ T8524] fuse: Bad value for 'fd' [ 499.123122][ T8532] loop0: detected capacity change from 0 to 256 [ 499.172453][ T8536] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2720'. [ 499.205180][ T8532] FAT-fs (loop0): Directory bread(block 64) failed [ 499.235049][ T8532] FAT-fs (loop0): Directory bread(block 65) failed [ 499.290735][ T8532] FAT-fs (loop0): Directory bread(block 66) failed [ 499.302997][ T8540] netlink: 'syz.3.2721': attribute type 1 has an invalid length. [ 499.310879][ T8540] netlink: 'syz.3.2721': attribute type 2 has an invalid length. [ 499.312192][ T8532] FAT-fs (loop0): Directory bread(block 67) failed [ 499.319524][ T8540] netlink: 'syz.3.2721': attribute type 1 has an invalid length. [ 499.333724][ T8540] netlink: 'syz.3.2721': attribute type 2 has an invalid length. [ 499.376224][ T8532] FAT-fs (loop0): Directory bread(block 68) failed [ 499.407303][ T8532] FAT-fs (loop0): Directory bread(block 69) failed [ 499.432351][ T8542] ------------[ cut here ]------------ [ 499.437136][ T8532] FAT-fs (loop0): Directory bread(block 70) failed [ 499.437888][ T8542] WARNING: CPU: 0 PID: 8542 at mm/page_alloc.c:5826 __alloc_pages+0x2f6/0x3a0 [ 499.453467][ T8542] Modules linked in: [ 499.457462][ T8542] CPU: 0 PID: 8542 Comm: syz.2.2722 Not tainted 6.1.141-syzkaller-00041-gde932537be34 #0 [ 499.467386][ T8542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 499.477446][ T8532] FAT-fs (loop0): Directory bread(block 71) failed [ 499.477550][ T8542] RIP: 0010:__alloc_pages+0x2f6/0x3a0 [ 499.489447][ T8542] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 93 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 7e 69 bf 05 01 <0f> 0b eb a5 a9 00 00 08 00 48 8b 54 24 10 75 42 44 89 f6 81 e6 7f [ 499.507518][ T8532] FAT-fs (loop0): Directory bread(block 72) failed [ 499.509880][ T8542] RSP: 0018:ffffc9001026f700 EFLAGS: 00010246 [ 499.522510][ T8542] RAX: ffffc9001026f700 RBX: 0000000000000016 RCX: 0000000000000000 [ 499.530620][ T8542] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc9001026f768 [ 499.538665][ T8542] RBP: ffffc9001026f7f8 R08: dffffc0000000000 R09: ffffc9001026f750 [ 499.546835][ T8542] R10: fffff5200204deed R11: 1ffff9200204deea R12: dffffc0000000000 [ 499.555043][ T8542] R13: 0000000000000000 R14: 0000000000040dc0 R15: 1ffff9200204dee4 [ 499.563239][ T8542] FS: 00007f03ab4d46c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 499.572355][ T8542] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 499.579474][ T8542] CR2: 0000200000001000 CR3: 0000000130846000 CR4: 00000000003506b0 [ 499.587569][ T8542] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 499.595654][ T8542] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 499.603759][ T8542] Call Trace: [ 499.607088][ T8542] [ 499.610090][ T8542] ? __cfi___alloc_pages+0x10/0x10 [ 499.615324][ T8542] ? ebitmap_read+0x398/0x920 [ 499.620212][ T8542] ? kasan_save_alloc_info+0x25/0x30 [ 499.625685][ T8542] ? __kasan_slab_alloc+0x72/0x80 [ 499.630848][ T8542] ? slab_post_alloc_hook+0x6d/0x2d0 [ 499.636285][ T8542] __kmalloc_large_node+0xa1/0x1c0 [ 499.641586][ T8542] ? hashtab_init+0xcd/0x160 [ 499.646259][ T8542] __kmalloc+0xe0/0x1e0 [ 499.650577][ T8542] hashtab_init+0xcd/0x160 [ 499.655171][ T8542] symtab_init+0x40/0x60 [ 499.659492][ T8542] policydb_read+0x961/0x25e0 [ 499.664242][ T8542] ? __cfi_policydb_read+0x10/0x10 [ 499.669400][ T8542] ? __kasan_kmalloc+0x95/0xb0 [ 499.674270][ T8542] ? security_load_policy+0x118/0xea0 [ 499.679830][ T8542] ? kmalloc_trace+0x40/0xb0 [ 499.684543][ T8542] security_load_policy+0x153/0xea0 [ 499.689948][ T8542] ? irqentry_exit+0x37/0x40 [ 499.694847][ T8542] ? exc_page_fault+0x5e/0xb0 [ 499.699612][ T8542] ? asm_exc_page_fault+0x27/0x30 [ 499.704873][ T8542] ? __cfi_security_load_policy+0x10/0x10 [ 499.710755][ T8542] ? copy_user_enhanced_fast_string+0xa/0x40 [ 499.716927][ T8542] sel_write_load+0x36f/0x5e0 [ 499.721821][ T8542] ? __cfi_sel_write_load+0x10/0x10 [ 499.727129][ T8542] ? security_file_permission+0x94/0xb0 [ 499.732910][ T8542] ? __cfi_sel_write_load+0x10/0x10 [ 499.738200][ T8542] vfs_write+0x40c/0xca0 [ 499.742684][ T8542] ? __this_cpu_preempt_check+0x13/0x20 [ 499.748337][ T8542] ? __cfi_vfs_write+0x10/0x10 [ 499.753258][ T8542] ? __kasan_check_write+0x14/0x20 [ 499.758478][ T8542] ? mutex_lock+0x8d/0x1a0 [ 499.763060][ T8542] ? __cfi_mutex_lock+0x10/0x10 [ 499.767943][ T8542] ? __fdget_pos+0x19e/0x380 [ 499.772705][ T8542] ? __fdget_pos+0x2cd/0x380 [ 499.777352][ T8542] ? ksys_write+0x71/0x240 [ 499.781982][ T8542] ksys_write+0x140/0x240 [ 499.786432][ T8542] ? __cfi_ksys_write+0x10/0x10 [ 499.791438][ T8542] ? fpregs_restore_userregs+0x128/0x260 [ 499.797176][ T8542] __x64_sys_write+0x7b/0x90 [ 499.801896][ T8542] x64_sys_call+0x27b/0x9a0 [ 499.806480][ T8542] do_syscall_64+0x4c/0xa0 [ 499.811054][ T8542] ? clear_bhb_loop+0x30/0x80 [ 499.815819][ T8542] ? clear_bhb_loop+0x30/0x80 [ 499.820615][ T8542] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 499.826595][ T8542] RIP: 0033:0x7f03aa58e9a9 [ 499.831148][ T8542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.850978][ T8542] RSP: 002b:00007f03ab4d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 499.859497][ T8542] RAX: ffffffffffffffda RBX: 00007f03aa7b5fa0 RCX: 00007f03aa58e9a9 [ 499.867600][ T8542] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000005 [ 499.867702][ T8532] FAT-fs (loop0): Directory bread(block 73) failed [ 499.875682][ T8542] RBP: 00007f03aa610d69 R08: 0000000000000000 R09: 0000000000000000 [ 499.875702][ T8542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.875716][ T8542] R13: 0000000000000000 R14: 00007f03aa7b5fa0 R15: 00007ffc24e1e5f8 [ 499.875737][ T8542] [ 499.875744][ T8542] ---[ end trace 0000000000000000 ]--- [ 499.940452][ T8542] SELinux: failed to load policy [ 500.287126][ T8554] hub 6-0:1.0: USB hub found [ 500.292739][ T8554] hub 6-0:1.0: 1 port detected [ 500.549768][ T8556] loop2: detected capacity change from 0 to 2048 [ 500.603984][ T8562] device syzkaller0 entered promiscuous mode [ 500.673658][ T8556] loop2: p1 < > p3 [ 500.678777][ T8546] loop3: detected capacity change from 0 to 40427 [ 500.681014][ T8556] loop2: p3 size 134217728 extends beyond EOD, truncated [ 500.700468][ T8546] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 500.708277][ T8546] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 500.816877][ T8564] loop4: detected capacity change from 0 to 512 [ 500.884714][ T8546] F2FS-fs (loop3): invalid crc value [ 501.125161][ T8564] EXT4-fs (loop4): 1 orphan inode deleted [ 501.131189][ T8564] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 501.143991][ T8564] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.337095][ T8546] F2FS-fs (loop3): Found nat_bits in checkpoint [ 501.515663][ T28] kauditd_printk_skb: 620 callbacks suppressed [ 501.515680][ T28] audit: type=1400 audit(1753252491.489:8386): avc: denied { map_read map_write } for pid=8567 comm="syz.1.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 501.557636][ T8575] loop0: detected capacity change from 0 to 256 [ 501.641242][ T8575] FAT-fs (loop0): Directory bread(block 64) failed [ 501.647842][ T8575] FAT-fs (loop0): Directory bread(block 65) failed [ 501.683203][ T772] udevd[772]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 501.701031][ T28] audit: type=1400 audit(1753252491.529:8387): avc: denied { bpf } for pid=8567 comm="syz.1.2731" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 501.761772][ T8575] FAT-fs (loop0): Directory bread(block 66) failed [ 501.768355][ T8575] FAT-fs (loop0): Directory bread(block 67) failed [ 501.775074][ T7356] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 501.785497][ T8575] FAT-fs (loop0): Directory bread(block 68) failed [ 501.792098][ T7356] EXT4-fs error (device loop4): ext4_release_dquot:6837: comm kworker/u4:10: Failed to release dquot type 1 [ 501.804909][ T8575] FAT-fs (loop0): Directory bread(block 69) failed [ 501.808823][ T306] udevd[306]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 501.822331][ T8575] FAT-fs (loop0): Directory bread(block 70) failed [ 501.828963][ T8575] FAT-fs (loop0): Directory bread(block 71) failed [ 501.839729][ T8115] EXT4-fs (loop4): unmounting filesystem. [ 501.862396][ T28] audit: type=1400 audit(1753252491.529:8388): avc: denied { prog_load } for pid=8567 comm="syz.1.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 501.881171][ T8575] FAT-fs (loop0): Directory bread(block 72) failed [ 501.883411][ T8546] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 502.025145][ T8546] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 502.040932][ T8575] FAT-fs (loop0): Directory bread(block 73) failed [ 502.143434][ T28] audit: type=1400 audit(1753252491.529:8389): avc: denied { read write } for pid=8571 comm="syz.0.2732" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 502.230187][ T8587] audit: audit_backlog=65 > audit_backlog_limit=64 [ 502.237976][ T8546] audit: audit_backlog=65 > audit_backlog_limit=64 [ 502.240703][ T28] audit: type=1400 audit(1753252491.529:8390): avc: denied { open } for pid=8571 comm="syz.0.2732" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 502.244555][ T8546] audit: audit_lost=166 audit_rate_limit=0 audit_backlog_limit=64 [ 502.275934][ T28] audit: type=1400 audit(1753252491.529:8391): avc: denied { ioctl } for pid=8571 comm="syz.0.2732" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 502.348751][ T8591] loop0: detected capacity change from 0 to 256 [ 502.370202][ T8591] FAT-fs (loop0): Directory bread(block 64) failed [ 502.440898][ T8591] FAT-fs (loop0): Directory bread(block 65) failed [ 502.470307][ T8591] FAT-fs (loop0): Directory bread(block 66) failed [ 502.494645][ T8591] FAT-fs (loop0): Directory bread(block 67) failed [ 502.521383][ T8591] FAT-fs (loop0): Directory bread(block 68) failed [ 502.531464][ T8598] loop4: detected capacity change from 0 to 512 [ 502.557915][ T8591] FAT-fs (loop0): Directory bread(block 69) failed [ 502.608141][ T8591] FAT-fs (loop0): Directory bread(block 70) failed [ 502.611861][ T8603] loop1: detected capacity change from 0 to 1024 [ 502.661033][ T8591] FAT-fs (loop0): Directory bread(block 71) failed [ 502.685146][ T8591] FAT-fs (loop0): Directory bread(block 72) failed [ 502.746597][ T8591] FAT-fs (loop0): Directory bread(block 73) failed [ 502.809752][ T8603] EXT4-fs: Ignoring removed bh option [ 502.935611][ T8603] EXT4-fs: Ignoring removed nomblk_io_submit option [ 502.985148][ T8598] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 503.007627][ T8598] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.035243][ T8603] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 503.218710][ T8115] EXT4-fs (loop4): unmounting filesystem. [ 503.637714][ T8615] loop4: detected capacity change from 0 to 2048 [ 503.645770][ T283] EXT4-fs (loop1): unmounting filesystem. [ 503.691692][ T8615] loop4: p1 < > p3 [ 503.713461][ T8615] loop4: p3 size 134217728 extends beyond EOD, truncated [ 503.922749][ T772] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 504.144627][ T8631] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 504.399043][ T8636] device syzkaller0 entered promiscuous mode [ 504.449014][ T306] udevd[306]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 504.459409][ T8639] netlink: 'syz.4.2752': attribute type 1 has an invalid length. [ 504.468975][ T772] udevd[772]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 504.482869][ T8639] netlink: 'syz.4.2752': attribute type 2 has an invalid length. [ 504.503850][ T8639] netlink: 'syz.4.2752': attribute type 1 has an invalid length. [ 504.513449][ T8639] netlink: 'syz.4.2752': attribute type 2 has an invalid length. [ 504.529621][ T306] udevd[306]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 504.549274][ T772] udevd[772]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 504.690910][ T296] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 504.896177][ T296] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 504.957611][ T296] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.012596][ T296] usb 1-1: config 0 has no interface number 0 [ 505.027040][ T296] usb 1-1: config 0 interface 32 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 505.045316][ T296] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 505.055300][ T296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.073845][ T296] usb 1-1: config 0 descriptor?? [ 505.088666][ T296] usbhid 1-1:0.32: couldn't find an input interrupt endpoint [ 505.158355][ T8642] loop1: detected capacity change from 0 to 40427 [ 505.180300][ T8642] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 505.190452][ T8642] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 505.206274][ T8642] F2FS-fs (loop1): invalid crc value [ 505.231974][ T8642] F2FS-fs (loop1): Found nat_bits in checkpoint [ 505.277649][ T8642] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 505.286507][ T8642] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 505.319809][ T8642] input: syz1 as /devices/virtual/input/input22 [ 505.511311][ T8657] loop3: detected capacity change from 0 to 1024 [ 505.543579][ T8657] EXT4-fs: Ignoring removed orlov option [ 505.558298][ T8661] FAT-fs (loop3): bogus number of reserved sectors [ 505.575316][ T8657] /dev/loop3: Can't open blockdev [ 505.581015][ T8661] FAT-fs (loop3): Can't find a valid FAT filesystem [ 506.078372][ T8667] loop1: detected capacity change from 0 to 40427 [ 506.089712][ T8667] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 506.108690][ T8667] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 506.122818][ T8667] F2FS-fs (loop1): invalid crc value [ 506.169134][ T8667] F2FS-fs (loop1): Found nat_bits in checkpoint [ 506.209783][ T8667] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 506.217088][ T8667] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 506.242124][ T8667] input: syz1 as /devices/virtual/input/input23 [ 506.253935][ T8681] loop2: detected capacity change from 0 to 128 [ 506.272074][ T8681] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 506.282535][ T8681] ext4 filesystem being mounted at /532/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.538702][ T28] kauditd_printk_skb: 734 callbacks suppressed [ 506.538720][ T28] audit: type=1400 audit(1753252496.509:9075): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 506.585541][ T28] audit: type=1400 audit(1753252496.509:9076): avc: denied { read write open } for pid=286 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 506.618651][ T28] audit: type=1400 audit(1753252496.509:9077): avc: denied { ioctl } for pid=286 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 506.650261][ T28] audit: type=1400 audit(1753252496.519:9078): avc: denied { bpf } for pid=8692 comm="syz.3.2769" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 506.673036][ T28] audit: type=1400 audit(1753252496.519:9079): avc: denied { map_create } for pid=8692 comm="syz.3.2769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 506.693825][ T28] audit: type=1400 audit(1753252496.519:9080): avc: denied { map_read map_write } for pid=8692 comm="syz.3.2769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 506.714026][ T28] audit: type=1400 audit(1753252496.539:9081): avc: denied { prog_load } for pid=8692 comm="syz.3.2769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 506.733783][ T28] audit: type=1400 audit(1753252496.539:9082): avc: denied { perfmon } for pid=8692 comm="syz.3.2769" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 506.755698][ T8699] loop4: detected capacity change from 0 to 1024 [ 506.770868][ T8699] EXT4-fs: Ignoring removed orlov option [ 506.901096][ T28] audit: type=1400 audit(1753252496.539:9083): avc: denied { prog_run } for pid=8692 comm="syz.3.2769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 506.935891][ T28] audit: type=1400 audit(1753252496.539:9084): avc: denied { create } for pid=8692 comm="syz.3.2769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 507.031243][ T284] EXT4-fs (loop2): unmounting filesystem. [ 507.050545][ T8699] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 507.085169][ T8705] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 507.095453][ T8705] FAT-fs (loop5): unable to read boot sector [ 507.382457][ T2006] usb 1-1: USB disconnect, device number 21 [ 507.479728][ T8714] incfs: Backing dir is not set, filesystem can't be mounted. [ 507.540644][ T8714] incfs: mount failed -2 [ 507.601495][ T8717] netlink: 'syz.0.2778': attribute type 1 has an invalid length. [ 507.614268][ T8115] EXT4-fs (loop4): unmounting filesystem. [ 507.620878][ T8717] netlink: 'syz.0.2778': attribute type 2 has an invalid length. [ 507.728574][ T8718] loop3: detected capacity change from 0 to 512 [ 507.927941][ T8718] EXT4-fs (loop3): 1 orphan inode deleted [ 507.933835][ T8718] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 507.950907][ T8718] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.590130][ T8727] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 508.616215][ T41] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:2: Failed to release dquot type 1 [ 508.640650][ T286] EXT4-fs (loop3): unmounting filesystem. [ 508.658969][ T8729] loop0: detected capacity change from 0 to 512 [ 508.693935][ T8729] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 508.742464][ T8729] EXT4-fs (loop0): 1 truncate cleaned up [ 508.748163][ T8729] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 508.970217][ T8736] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 509.224732][ T8739] loop3: detected capacity change from 0 to 128 [ 509.235238][ T8736] FAT-fs (loop9): unable to read boot sector [ 509.267336][ T8739] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 509.341270][ T8739] ext4 filesystem being mounted at /531/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.942308][ T286] EXT4-fs (loop3): unmounting filesystem. [ 509.968522][ T8751] loop2: detected capacity change from 0 to 1024 [ 510.019000][ T8751] EXT4-fs: Ignoring removed bh option [ 510.045980][ T8751] EXT4-fs: Ignoring removed nomblk_io_submit option [ 510.068877][ T8751] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 510.089650][ T282] EXT4-fs (loop0): unmounting filesystem. [ 510.280479][ T2006] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 511.181425][ T8766] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 511.212664][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2795'. [ 511.221768][ T2009] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 511.265598][ T2006] usb 5-1: Using ep0 maxpacket: 16 [ 511.272693][ T284] EXT4-fs (loop2): unmounting filesystem. [ 511.279976][ T2006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.291457][ T2006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.301571][ T2006] usb 5-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 511.311045][ T2006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.321256][ T2006] usb 5-1: config 0 descriptor?? [ 511.400493][ T2009] usb 4-1: Using ep0 maxpacket: 16 [ 511.407480][ T2009] usb 4-1: config 127 interface 0 has no altsetting 0 [ 511.560825][ T28] kauditd_printk_skb: 439 callbacks suppressed [ 511.560910][ T28] audit: type=1400 audit(1753252501.449:9523): avc: denied { bpf } for pid=8769 comm="syz.1.2796" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 511.794416][ T8776] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 511.802423][ T8776] SELinux: failed to load policy [ 511.811515][ T2009] usb 4-1: config 127 interface 1 has no altsetting 0 [ 512.311337][ T2009] usb 4-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 512.359334][ T28] audit: type=1400 audit(1753252501.449:9524): avc: denied { map_create } for pid=8769 comm="syz.1.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 512.365113][ T2009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.378867][ T28] audit: type=1400 audit(1753252501.459:9525): avc: denied { map_read map_write } for pid=8769 comm="syz.1.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 512.406629][ T28] audit: type=1400 audit(1753252501.469:9526): avc: denied { bpf } for pid=8769 comm="syz.1.2796" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 512.429229][ T28] audit: type=1400 audit(1753252501.469:9527): avc: denied { prog_load } for pid=8769 comm="syz.1.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 512.448541][ T28] audit: type=1400 audit(1753252501.469:9528): avc: denied { perfmon } for pid=8769 comm="syz.1.2796" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 512.464484][ T2009] usb 4-1: Product: syz [ 512.469646][ T28] audit: type=1400 audit(1753252501.479:9529): avc: denied { prog_run } for pid=8769 comm="syz.1.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 512.475445][ T2009] usb 4-1: Manufacturer: syz [ 512.492846][ T28] audit: type=1400 audit(1753252501.489:9530): avc: denied { mount } for pid=8769 comm="syz.1.2796" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 512.497895][ T2009] usb 4-1: SerialNumber: syz [ 512.519779][ T28] audit: type=1326 audit(1753252501.509:9531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8771 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe35d38e9a9 code=0x7ffc0000 [ 512.547853][ T28] audit: type=1326 audit(1753252501.509:9532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8771 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35d38e9a9 code=0x7ffc0000 [ 513.069217][ T2009] usb 4-1: USB disconnect, device number 22 [ 513.898036][ T2006] usbhid 5-1:0.0: can't add hid device: -71 [ 513.910587][ T2006] usbhid: probe of 5-1:0.0 failed with error -71 [ 513.923610][ T8804] loop2: detected capacity change from 0 to 256 [ 513.943853][ T2006] usb 5-1: USB disconnect, device number 15 [ 513.957033][ T8804] FAT-fs (loop2): Directory bread(block 64) failed [ 513.971973][ T8804] FAT-fs (loop2): Directory bread(block 65) failed [ 514.031918][ T8804] FAT-fs (loop2): Directory bread(block 66) failed [ 514.047279][ T8804] FAT-fs (loop2): Directory bread(block 67) failed [ 514.054886][ T8804] FAT-fs (loop2): Directory bread(block 68) failed [ 514.061981][ T8804] FAT-fs (loop2): Directory bread(block 69) failed [ 514.068655][ T8804] FAT-fs (loop2): Directory bread(block 70) failed [ 514.077413][ T8804] FAT-fs (loop2): Directory bread(block 71) failed [ 514.084646][ T8804] FAT-fs (loop2): Directory bread(block 72) failed [ 514.091593][ T8804] FAT-fs (loop2): Directory bread(block 73) failed [ 514.538684][ T8827] overlayfs: missing 'lowerdir' [ 514.874105][ T8840] syz.4.2816[8840] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 514.874188][ T8840] syz.4.2816[8840] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 514.927176][ T8840] netlink: 'syz.4.2816': attribute type 3 has an invalid length. [ 515.107663][ T2009] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 515.311843][ T2009] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 515.352326][ T2009] usb 4-1: config 0 has an invalid descriptor of length 79, skipping remainder of the config [ 515.402488][ T2009] usb 4-1: config 0 has no interface number 1 [ 515.446527][ T2009] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 515.479288][ T8862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=8862 comm=syz.0.2832 [ 515.491920][ T2009] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 515.520970][ T2009] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 515.534974][ T2009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 515.565343][ T2009] usb 4-1: SerialNumber: syz [ 515.584038][ T2009] usb 4-1: config 0 descriptor?? [ 515.595180][ T2009] usb 4-1: Found UVC 0.00 device (0002:0000) [ 515.612626][ T2009] usb 4-1: No valid video chain found. [ 515.904062][ T8878] overlayfs: missing 'lowerdir' [ 516.070553][ T5981] usb 4-1: USB disconnect, device number 23 [ 516.117761][ T8880] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2840'. [ 516.324792][ T8890] loop0: detected capacity change from 0 to 128 [ 516.342233][ T8890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 516.348950][ T8890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 516.357905][ T8890] EXT4-fs (loop0): Test dummy encryption mode enabled [ 516.407019][ T8890] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 516.427544][ T8890] ext4 filesystem being mounted at /547/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 516.576494][ T28] kauditd_printk_skb: 629 callbacks suppressed [ 516.576512][ T28] audit: type=1400 audit(1753252506.549:10162): avc: denied { bpf } for pid=8896 comm="syz.1.2846" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 516.651570][ T28] audit: type=1400 audit(1753252506.589:10163): avc: denied { bpf } for pid=8896 comm="syz.1.2846" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 516.723619][ T28] audit: type=1400 audit(1753252506.589:10164): avc: denied { perfmon } for pid=8896 comm="syz.1.2846" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 516.804466][ T28] audit: type=1400 audit(1753252506.589:10165): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 516.877055][ T28] audit: type=1400 audit(1753252506.589:10166): avc: denied { read write open } for pid=286 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 516.955522][ T28] audit: type=1400 audit(1753252506.589:10167): avc: denied { ioctl } for pid=286 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 517.020583][ T28] audit: type=1400 audit(1753252506.589:10168): avc: denied { bpf } for pid=8896 comm="syz.1.2846" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 517.046528][ T28] audit: type=1400 audit(1753252506.589:10169): avc: denied { prog_run } for pid=8896 comm="syz.1.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 517.065961][ T28] audit: type=1400 audit(1753252506.589:10170): avc: denied { bpf } for pid=8896 comm="syz.1.2846" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 517.092610][ T28] audit: type=1400 audit(1753252506.619:10171): avc: denied { bpf } for pid=8899 comm="syz.3.2847" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 517.100454][ T2006] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 517.350517][ T2006] usb 2-1: Using ep0 maxpacket: 16 [ 517.372209][ T2006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.394661][ T2006] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 517.419194][ T2006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.442965][ T2006] usb 2-1: config 0 descriptor?? [ 517.468874][ T8914] loop4: detected capacity change from 0 to 512 [ 517.505132][ T8914] EXT4-fs: Ignoring removed mblk_io_submit option [ 517.522456][ T8914] EXT4-fs: Ignoring removed mblk_io_submit option [ 517.532536][ T8914] EXT4-fs (loop4): Test dummy encryption mode enabled [ 517.549955][ T8914] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 517.582627][ T8914] EXT4-fs (loop4): 1 truncate cleaned up [ 517.588328][ T8914] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 517.660239][ T2006] usbhid 2-1:0.0: can't add hid device: -71 [ 517.668960][ T2006] usbhid: probe of 2-1:0.0 failed with error -71 [ 517.681197][ T2006] usb 2-1: USB disconnect, device number 19 [ 517.794434][ T8115] EXT4-fs (loop4): unmounting filesystem. [ 517.863764][ T8920] syz.3.2855[8920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.864218][ T8920] syz.3.2855[8920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.912033][ T8920] loop3: detected capacity change from 0 to 128 [ 517.967577][ T8920] EXT4-fs (loop3): Test dummy encryption mode enabled [ 518.096751][ T8920] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 518.108496][ T8920] ext4 filesystem being mounted at /537/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 518.201831][ T8920] netlink: 'syz.3.2855': attribute type 3 has an invalid length. [ 518.747342][ T8926] loop1: detected capacity change from 0 to 1024 [ 518.807184][ T8926] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 518.819965][ T286] EXT4-fs (loop3): unmounting filesystem. [ 518.878914][ T8926] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 518.901052][ T8926] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 518.958713][ T8926] EXT4-fs error (device loop1): __ext4_iget:5078: inode #17: block 1803188595: comm syz.1.2858: invalid block [ 519.128442][ T8926] EXT4-fs (loop1): no journal found [ 519.479307][ T282] EXT4-fs (loop0): unmounting filesystem. [ 520.956479][ T8957] loop0: detected capacity change from 0 to 128 [ 520.964349][ T8957] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 521.022358][ T8957] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 521.649939][ T28] kauditd_printk_skb: 312 callbacks suppressed [ 521.649956][ T28] audit: type=1400 audit(1753252511.619:10484): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 521.696969][ T28] audit: type=1400 audit(1753252511.639:10485): avc: denied { mounton } for pid=8965 comm="syz.2.2871" path="/554/file0" dev="tmpfs" ino=3034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 521.768053][ T28] audit: type=1400 audit(1753252511.639:10486): avc: denied { mount } for pid=8965 comm="syz.2.2871" name="/" dev="incremental-fs" ino=3034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 521.791950][ T28] audit: type=1400 audit(1753252511.639:10487): avc: denied { bpf } for pid=8965 comm="syz.2.2871" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 521.813494][ T28] audit: type=1400 audit(1753252511.639:10488): avc: denied { map_create } for pid=8965 comm="syz.2.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 521.836170][ T8971] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 521.863593][ T8973] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 521.875520][ T8978] tipc: Enabled bearer , priority 0 [ 521.884254][ T8973] SELinux: failed to load policy [ 521.887253][ T8980] audit: audit_backlog=65 > audit_backlog_limit=64 [ 521.897364][ T28] audit: type=1400 audit(1753252511.639:10489): avc: denied { perfmon } for pid=8965 comm="syz.2.2871" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 521.897466][ T8975] tipc: Disabling bearer [ 521.939345][ T8980] audit: audit_lost=184 audit_rate_limit=0 audit_backlog_limit=64 [ 521.944743][ T282] audit: audit_backlog=65 > audit_backlog_limit=64 [ 521.953930][ T28] audit: type=1400 audit(1753252511.639:10490): avc: denied { map_read map_write } for pid=8965 comm="syz.2.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 522.471663][ T9001] loop0: detected capacity change from 0 to 128 [ 522.488887][ T9001] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 522.695045][ T9001] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 523.287075][ T9013] SELinux: failed to load policy [ 523.403944][ T9019] tipc: Started in network mode [ 523.416951][ T9019] tipc: Node identity ce3f13a25136, cluster identity 4711 [ 523.431339][ T9019] tipc: Enabled bearer , priority 0 [ 523.448895][ T9017] tipc: Disabling bearer [ 523.565211][ T9023] loop2: detected capacity change from 0 to 128 [ 523.574694][ T9023] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 523.606799][ T9023] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 524.910905][ T7356] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 525.192777][ T9050] loop1: detected capacity change from 0 to 512 [ 525.213972][ T9050] EXT4-fs (loop1): 1 orphan inode deleted [ 525.219986][ T9050] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 525.260168][ T9050] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.277091][ T7356] EXT4-fs error (device loop1): ext4_release_dquot:6837: comm kworker/u4:10: Failed to release dquot type 1 [ 525.357605][ T9057] tipc: Started in network mode [ 525.365658][ T9057] tipc: Node identity 26d58eaf05f5, cluster identity 4711 [ 525.373758][ T9057] tipc: Enabled bearer , priority 0 [ 525.383442][ T9056] tipc: Disabling bearer [ 526.465929][ T9071] syz.4.2910[9071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 526.466012][ T9071] syz.4.2910[9071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 527.094820][ T283] EXT4-fs (loop1): unmounting filesystem. [ 527.112332][ T28] kauditd_printk_skb: 470 callbacks suppressed [ 527.112348][ T28] audit: type=1400 audit(1753252515.689:10906): avc: denied { map_create } for pid=9062 comm="syz.3.2908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 527.268368][ T9073] loop3: detected capacity change from 0 to 1024 [ 527.304691][ T28] audit: type=1400 audit(1753252515.699:10907): avc: denied { map_read map_write } for pid=9062 comm="syz.3.2908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 527.336613][ T9073] EXT4-fs: Ignoring removed orlov option [ 527.408293][ T9073] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 527.454298][ T9073] audit: audit_backlog=65 > audit_backlog_limit=64 [ 527.472708][ T282] audit: audit_backlog=65 > audit_backlog_limit=64 [ 527.479270][ T282] audit: audit_lost=203 audit_rate_limit=0 audit_backlog_limit=64 [ 527.491780][ T28] audit: type=1400 audit(1753252515.739:10908): avc: denied { bpf } for pid=9062 comm="syz.3.2908" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 527.518806][ T9086] audit: audit_backlog=65 > audit_backlog_limit=64 [ 527.525498][ T9073] audit: audit_lost=204 audit_rate_limit=0 audit_backlog_limit=64 [ 527.544263][ T9073] audit: backlog limit exceeded [ 527.549246][ T9086] audit: audit_lost=205 audit_rate_limit=0 audit_backlog_limit=64 [ 527.562839][ T9086] loop2: detected capacity change from 0 to 1024 [ 527.575003][ T9086] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 527.587183][ T9086] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 527.598627][ T9086] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 527.618890][ T9086] EXT4-fs error (device loop2): __ext4_iget:5078: inode #17: block 1803188595: comm syz.2.2916: invalid block [ 527.633152][ T9086] EXT4-fs (loop2): no journal found [ 527.648821][ T9089] tipc: Enabled bearer , priority 0 [ 527.722686][ T9089] device syzkaller0 entered promiscuous mode [ 527.729029][ T9089] tipc: Resetting bearer [ 527.765900][ T9088] tipc: Resetting bearer [ 527.779446][ T9088] tipc: Disabling bearer [ 528.120061][ T286] EXT4-fs (loop3): unmounting filesystem. [ 528.178378][ T9101] 9pnet_fd: Insufficient options for proto=fd [ 528.187204][ T9099] loop4: detected capacity change from 0 to 1024 [ 528.205810][ T9099] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 528.214862][ T9099] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 528.241476][ T9099] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 528.270339][ T9099] EXT4-fs error (device loop4): __ext4_iget:5078: inode #17: block 1803188595: comm syz.4.2920: invalid block [ 528.291124][ T9099] EXT4-fs (loop4): no journal found [ 529.519763][ T9126] loop3: detected capacity change from 0 to 512 [ 529.604787][ T9130] syz.4.2928[9130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 529.605145][ T9130] syz.4.2928[9130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 530.629594][ T9126] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 530.720695][ T9126] ext4 filesystem being mounted at /556/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.931437][ T9143] loop1: detected capacity change from 0 to 512 [ 530.969602][ T286] EXT4-fs (loop3): unmounting filesystem. [ 530.985307][ T9143] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 530.993177][ T9144] device veth0 entered promiscuous mode [ 531.002635][ T9143] ext4 filesystem being mounted at /581/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.065823][ T9148] loop3: detected capacity change from 0 to 1024 [ 531.085902][ T9148] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 531.094636][ T9148] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 531.105965][ T9148] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 531.121746][ T9148] EXT4-fs error (device loop3): __ext4_iget:5078: inode #17: block 1803188595: comm syz.3.2935: invalid block [ 531.168516][ T9148] EXT4-fs (loop3): no journal found [ 531.177222][ T9122] loop0: detected capacity change from 0 to 40427 [ 531.202006][ T283] EXT4-fs (loop1): unmounting filesystem. [ 531.207911][ T9122] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 531.258538][ T9129] device veth0 left promiscuous mode [ 531.271018][ T9122] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 531.296632][ T9122] F2FS-fs (loop0): invalid crc value [ 531.441538][ T9157] loop4: detected capacity change from 0 to 512 [ 531.580703][ T9122] F2FS-fs (loop0): Found nat_bits in checkpoint [ 532.185549][ T9157] EXT4-fs (loop4): 1 orphan inode deleted [ 532.191542][ T9157] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 532.205711][ T9157] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.363127][ T9157] IPv6: sit1: Disabled Multicast RS [ 532.372712][ T28] kauditd_printk_skb: 499 callbacks suppressed [ 532.372729][ T28] audit: type=1400 audit(1753252522.179:11401): avc: denied { mount } for pid=9149 comm="syz.4.2936" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 532.401312][ T10] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 532.800097][ T10] EXT4-fs error (device loop4): ext4_release_dquot:6837: comm kworker/u4:1: Failed to release dquot type 1 [ 532.838952][ T28] audit: type=1400 audit(1753252522.189:11402): avc: denied { read write } for pid=9149 comm="syz.4.2936" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 532.859010][ T8115] EXT4-fs (loop4): unmounting filesystem. [ 532.928793][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 533.068133][ T28] audit: type=1400 audit(1753252522.189:11403): avc: denied { open } for pid=9149 comm="syz.4.2936" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 533.201536][ T28] audit: type=1400 audit(1753252522.189:11404): avc: denied { ioctl } for pid=9149 comm="syz.4.2936" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 533.246184][ T9159] futex_wake_op: syz.1.2937 tries to shift op by -1; fix this program [ 533.254112][ T9171] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2939'. [ 533.295945][ T28] audit: type=1400 audit(1753252522.299:11405): avc: denied { bpf } for pid=9149 comm="syz.4.2936" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 533.320910][ T9171] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2939'. [ 533.364467][ T28] audit: type=1400 audit(1753252522.299:11406): avc: denied { prog_load } for pid=9149 comm="syz.4.2936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 533.435176][ T28] audit: type=1400 audit(1753252522.299:11407): avc: denied { bpf } for pid=9149 comm="syz.4.2936" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 533.530605][ T28] audit: type=1400 audit(1753252522.299:11408): avc: denied { perfmon } for pid=9149 comm="syz.4.2936" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 533.574300][ T28] audit: type=1400 audit(1753252522.139:11400): avc: denied { bpf } for pid=9152 comm="syz.1.2937" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 534.479404][ T9176] loop0: detected capacity change from 0 to 40427 [ 534.500880][ T9176] F2FS-fs (loop0): invalid crc value [ 534.533295][ T9176] F2FS-fs (loop0): Found nat_bits in checkpoint [ 534.590136][ T9194] loop1: detected capacity change from 0 to 512 [ 534.596682][ T9176] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 534.662285][ T9204] loop2: detected capacity change from 0 to 512 [ 534.671318][ T9204] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 534.698243][ T9204] EXT4-fs (loop2): 1 truncate cleaned up [ 534.704050][ T9204] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 535.069296][ T9212] syz.0.2941: attempt to access beyond end of device [ 535.069296][ T9212] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 535.292183][ T9194] EXT4-fs (loop1): 1 orphan inode deleted [ 535.388707][ T9194] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 535.400821][ T282] syz-executor: attempt to access beyond end of device [ 535.400821][ T282] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 535.472924][ T2977] EXT4-fs error (device loop1): ext4_release_dquot:6837: comm kworker/u4:7: Failed to release dquot type 1 [ 535.486198][ T9194] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.505543][ T284] EXT4-fs (loop2): unmounting filesystem. [ 535.734279][ T9222] loop3: detected capacity change from 0 to 128 [ 535.751962][ T9222] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 535.760958][ T9222] ext4 filesystem being mounted at /562/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.795108][ T9241] loop4: detected capacity change from 0 to 512 [ 536.855769][ T286] EXT4-fs (loop3): unmounting filesystem. [ 537.008851][ T9241] EXT4-fs (loop4): 1 orphan inode deleted [ 537.014775][ T9241] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 537.031928][ T9241] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.383456][ T28] kauditd_printk_skb: 352 callbacks suppressed [ 537.383473][ T28] audit: type=1400 audit(1753252528.363:11760): avc: denied { read write } for pid=9244 comm="syz.2.2961" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 537.441655][ T9247] loop2: detected capacity change from 0 to 512 [ 537.581895][ T28] audit: type=1400 audit(1753252528.403:11761): avc: denied { map_create } for pid=9246 comm="syz.3.2962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 537.601357][ T28] audit: type=1400 audit(1753252528.403:11762): avc: denied { bpf } for pid=9246 comm="syz.3.2962" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 537.630460][ T337] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 537.655656][ T28] audit: type=1400 audit(1753252528.403:11763): avc: denied { prog_load } for pid=9246 comm="syz.3.2962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 537.675918][ T28] audit: type=1400 audit(1753252528.403:11764): avc: denied { read open } for pid=9245 comm="syz.0.2963" path="net:[4026532302]" dev="nsfs" ino=4026532302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 537.702659][ T28] audit: type=1400 audit(1753252528.403:11765): avc: denied { create } for pid=9245 comm="syz.0.2963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 537.720965][ T337] EXT4-fs error (device loop4): ext4_release_dquot:6837: comm kworker/u4:5: Failed to release dquot type 1 [ 537.728836][ T9247] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 537.759391][ T9247] ext4 filesystem being mounted at /573/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.772040][ T8115] EXT4-fs (loop4): unmounting filesystem. [ 537.778234][ T28] audit: type=1400 audit(1753252528.423:11766): avc: denied { read write open } for pid=9244 comm="syz.2.2961" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 537.807256][ T28] audit: type=1400 audit(1753252528.423:11767): avc: denied { ioctl } for pid=9244 comm="syz.2.2961" path="/dev/loop2" dev="devtmpfs" ino=120 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 537.833844][ T28] audit: type=1400 audit(1753252528.443:11768): avc: denied { execmem } for pid=9245 comm="syz.0.2963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 537.982237][ T284] EXT4-fs (loop2): unmounting filesystem. [ 538.027606][ T9248] loop3: detected capacity change from 0 to 40427 [ 538.040344][ T9258] loop4: detected capacity change from 0 to 512 [ 538.048554][ T9258] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 538.076656][ T9258] EXT4-fs (loop4): 1 truncate cleaned up [ 538.082645][ T9258] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 538.094964][ T9248] F2FS-fs (loop3): invalid crc value [ 538.127636][ T9248] F2FS-fs (loop3): Found nat_bits in checkpoint [ 538.270148][ T9248] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 538.417695][ T9277] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 538.485623][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 538.599378][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.606488][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.645034][ T9248] syz.3.2962: attempt to access beyond end of device [ 538.645034][ T9248] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 538.774423][ T8115] EXT4-fs (loop4): unmounting filesystem. [ 538.975349][ T286] syz-executor: attempt to access beyond end of device [ 538.975349][ T286] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 538.999377][ T283] EXT4-fs (loop1): unmounting filesystem. [ 539.454177][ T9288] 9pnet_fd: Insufficient options for proto=fd [ 539.774895][ T9305] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 540.369224][ T9316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2984'. [ 540.387664][ T9307] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 540.395482][ T9307] SELinux: failed to load policy [ 540.982426][ T9319] loop2: detected capacity change from 0 to 128 [ 540.989572][ T9319] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 541.011660][ T9318] loop4: detected capacity change from 0 to 128 [ 541.018408][ T9318] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 541.037662][ T9319] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 541.047440][ T9318] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 541.152774][ T2006] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 541.234373][ T337] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 541.250831][ T10] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 541.350616][ T2006] usb 1-1: Using ep0 maxpacket: 16 [ 541.378632][ T2006] usb 1-1: config 127 interface 0 has no altsetting 0 [ 541.434944][ T2006] usb 1-1: config 127 interface 1 has no altsetting 0 [ 541.494644][ T2006] usb 1-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 541.540735][ T2006] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.572091][ T2006] usb 1-1: Product: syz [ 541.580202][ T2006] usb 1-1: Manufacturer: syz [ 541.587023][ T2006] usb 1-1: SerialNumber: syz [ 541.760449][ T39] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 541.849617][ T2006] usb 1-1: USB disconnect, device number 22 [ 541.950671][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 541.964482][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.030942][ T9337] loop1: detected capacity change from 0 to 1024 [ 542.043153][ T9337] EXT4-fs: Ignoring removed orlov option [ 542.082675][ T39] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 542.096031][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.117947][ T39] usb 5-1: config 0 descriptor?? [ 542.118255][ T9337] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 542.179225][ T283] EXT4-fs (loop1): unmounting filesystem. [ 542.217734][ T9335] loop2: detected capacity change from 0 to 40427 [ 542.257658][ T9335] F2FS-fs (loop2): invalid crc value [ 542.280196][ T9335] F2FS-fs (loop2): Found nat_bits in checkpoint [ 542.352397][ T39] usbhid 5-1:0.0: can't add hid device: -71 [ 542.358865][ T39] usbhid: probe of 5-1:0.0 failed with error -71 [ 542.368506][ T39] usb 5-1: USB disconnect, device number 16 [ 542.463897][ T9353] syz.1.2997[9353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 542.464290][ T9353] syz.1.2997[9353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 542.530820][ T28] kauditd_printk_skb: 596 callbacks suppressed [ 542.530941][ T28] audit: type=1400 audit(1753252534.432:12365): avc: denied { bpf } for pid=9344 comm="syz.1.2997" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 543.361284][ T28] audit: type=1400 audit(1753252534.442:12366): avc: denied { prog_load } for pid=9344 comm="syz.1.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 543.388692][ T9335] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 543.473801][ T9355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2998'. [ 543.496092][ T9355] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 543.503838][ T9355] SELinux: failed to load policy [ 543.518074][ T28] audit: type=1400 audit(1753252534.442:12367): avc: denied { perfmon } for pid=9344 comm="syz.1.2997" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 543.539591][ T28] audit: type=1400 audit(1753252534.452:12368): avc: denied { prog_run } for pid=9344 comm="syz.1.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 543.630745][ T28] audit: type=1400 audit(1753252535.272:12369): avc: denied { bpf } for pid=9345 comm="syz.3.2998" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 543.651880][ T28] audit: type=1400 audit(1753252535.362:12370): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 543.690888][ T28] audit: type=1400 audit(1753252535.362:12371): avc: denied { open } for pid=282 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 543.825318][ T28] audit: type=1400 audit(1753252535.362:12372): avc: denied { ioctl } for pid=282 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 543.888995][ T28] audit: type=1400 audit(1753252535.442:12373): avc: denied { create } for pid=9345 comm="syz.3.2998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 543.911253][ T28] audit: type=1400 audit(1753252535.452:12374): avc: denied { write } for pid=9345 comm="syz.3.2998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 544.058208][ T9372] syz.2.2993: attempt to access beyond end of device [ 544.058208][ T9372] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 544.158558][ T9373] loop4: detected capacity change from 0 to 128 [ 544.174312][ T9373] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 544.224674][ T9373] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 544.269582][ T284] syz-executor: attempt to access beyond end of device [ 544.269582][ T284] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 544.407063][ T337] Bluetooth: hci0: Frame reassembly failed (-84) [ 544.759654][ T9380] loop2: detected capacity change from 0 to 512 [ 544.919459][ T9380] EXT4-fs (loop2): 1 orphan inode deleted [ 544.925327][ T9380] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 544.936895][ T337] EXT4-fs error (device loop2): ext4_release_dquot:6837: comm kworker/u4:5: Failed to release dquot type 1 [ 544.955509][ T9380] ext4 filesystem being mounted at /585/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.283267][ T337] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 545.727431][ T284] EXT4-fs (loop2): unmounting filesystem. [ 545.733696][ T9389] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 545.751409][ T9389] SELinux: failed to load policy [ 546.144246][ T9394] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.154312][ T9394] FAT-fs (loop9): unable to read boot sector [ 546.361055][ T9399] loop4: detected capacity change from 0 to 128 [ 546.404678][ T2009] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 546.414901][ T9399] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 546.425162][ T9399] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.480632][ T972] Bluetooth: hci0: command 0x1003 tx timeout [ 546.486696][ T8919] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 546.530171][ T9409] loop1: detected capacity change from 0 to 1024 [ 546.541786][ T9409] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 546.556737][ T9409] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 546.578624][ T9409] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 546.590692][ T2009] usb 3-1: Using ep0 maxpacket: 16 [ 546.598325][ T2009] usb 3-1: config 127 interface 0 has no altsetting 0 [ 546.608481][ T2009] usb 3-1: config 127 interface 1 has no altsetting 0 [ 546.616362][ T9409] EXT4-fs error (device loop1): __ext4_iget:5078: inode #17: block 1803188595: comm syz.1.3016: invalid block [ 546.629725][ T2009] usb 3-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 546.644956][ T2009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.653163][ T9409] EXT4-fs (loop1): no journal found [ 546.693086][ T2009] usb 3-1: Product: syz [ 546.711037][ T2009] usb 3-1: Manufacturer: syz [ 546.715728][ T2009] usb 3-1: SerialNumber: syz [ 547.309017][ T9419] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 547.316736][ T9419] SELinux: failed to load policy [ 547.432698][ T8115] EXT4-fs (loop4): unmounting filesystem. [ 547.513457][ T2009] usb 3-1: USB disconnect, device number 22 [ 547.542969][ T28] kauditd_printk_skb: 342 callbacks suppressed [ 547.542985][ T28] audit: type=1400 audit(1753252539.522:12716): avc: denied { bpf } for pid=9420 comm="syz.1.3019" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 547.624762][ T28] audit: type=1400 audit(1753252539.532:12717): avc: denied { prog_load } for pid=9420 comm="syz.1.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 547.645253][ T28] audit: type=1400 audit(1753252539.532:12718): avc: denied { perfmon } for pid=9420 comm="syz.1.3019" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 547.670255][ T28] audit: type=1400 audit(1753252539.532:12719): avc: denied { prog_run } for pid=9420 comm="syz.1.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 547.785524][ T9426] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 547.805799][ T9426] SELinux: failed to load policy [ 547.835040][ T28] audit: type=1400 audit(1753252539.532:12720): avc: denied { bpf } for pid=9422 comm="syz.4.3020" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 547.976552][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3022'. [ 548.108225][ T28] audit: type=1400 audit(1753252539.532:12721): avc: denied { prog_load } for pid=9422 comm="syz.4.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 548.153925][ T9433] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 548.163167][ T28] audit: type=1400 audit(1753252539.532:12722): avc: denied { perfmon } for pid=9422 comm="syz.4.3020" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 548.210492][ T9433] FAT-fs (loop7): unable to read boot sector [ 548.215935][ T9439] audit: audit_backlog=65 > audit_backlog_limit=64 [ 548.232595][ T282] audit: audit_backlog=65 > audit_backlog_limit=64 [ 548.249283][ T9439] audit: audit_lost=208 audit_rate_limit=0 audit_backlog_limit=64 [ 548.445256][ T9445] loop0: detected capacity change from 0 to 512 [ 548.470887][ T9445] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 548.517337][ T9445] EXT4-fs (loop0): 1 truncate cleaned up [ 548.523092][ T9445] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 549.233598][ T9457] loop3: detected capacity change from 0 to 128 [ 549.275279][ T282] EXT4-fs (loop0): unmounting filesystem. [ 549.321566][ T9457] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 549.331686][ T9457] ext4 filesystem being mounted at /575/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.380201][ T9446] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.417954][ T9446] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.425945][ T9446] device bridge_slave_0 entered promiscuous mode [ 549.441771][ T9446] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.449574][ T9467] 9pnet_fd: Insufficient options for proto=fd [ 549.494470][ T9446] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.508938][ T9446] device bridge_slave_1 entered promiscuous mode [ 549.553994][ T9468] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3032'. [ 549.576488][ T9468] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 549.584232][ T9468] SELinux: failed to load policy [ 549.616604][ T286] EXT4-fs (loop3): unmounting filesystem. [ 549.857822][ T9474] loop4: detected capacity change from 0 to 512 [ 549.908062][ T9474] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 549.921776][ T9474] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.001235][ T8115] EXT4-fs (loop4): unmounting filesystem. [ 550.080016][ T9464] loop0: detected capacity change from 0 to 40427 [ 550.100862][ T9464] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 550.119265][ T9464] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 550.128807][ T9484] loop3: detected capacity change from 0 to 512 [ 550.170835][ T9464] F2FS-fs (loop0): invalid crc value [ 550.230349][ T9488] loop4: detected capacity change from 0 to 128 [ 550.237624][ T9488] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 550.256771][ T9488] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 550.424280][ T337] device bridge_slave_1 left promiscuous mode [ 550.470355][ T9484] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 550.505257][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.536519][ T9464] F2FS-fs (loop0): Found nat_bits in checkpoint [ 550.611965][ T9484] ext4 filesystem being mounted at /579/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.710087][ T337] device bridge_slave_0 left promiscuous mode [ 550.867364][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.027227][ T337] device veth1_macvtap left promiscuous mode [ 551.051030][ T337] device veth0_vlan left promiscuous mode [ 551.172718][ T9464] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 551.179811][ T9464] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 551.580273][ T9499] 9pnet_fd: Insufficient options for proto=fd [ 551.649870][ T9501] 9pnet_fd: Insufficient options for proto=fd [ 551.674882][ T286] EXT4-fs (loop3): unmounting filesystem. [ 552.553609][ T28] kauditd_printk_skb: 525 callbacks suppressed [ 552.553636][ T28] audit: type=1400 audit(1753252544.532:13224): avc: denied { bpf } for pid=9505 comm="syz.4.3046" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 552.703288][ T28] audit: type=1400 audit(1753252544.532:13225): avc: denied { prog_run } for pid=9505 comm="syz.4.3046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 552.764029][ T28] audit: type=1400 audit(1753252544.732:13226): avc: denied { read write } for pid=8115 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 552.830277][ T28] audit: type=1400 audit(1753252544.732:13227): avc: denied { open } for pid=8115 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 552.856339][ T28] audit: type=1400 audit(1753252544.732:13228): avc: denied { ioctl } for pid=8115 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 552.959905][ T28] audit: type=1400 audit(1753252544.782:13229): avc: denied { bpf } for pid=9513 comm="syz.4.3047" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 553.000637][ T9516] loop3: detected capacity change from 0 to 512 [ 553.169084][ T9518] syz.4.3047[9518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 553.169176][ T9518] syz.4.3047[9518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 553.297306][ T28] audit: type=1400 audit(1753252544.782:13230): avc: denied { prog_load } for pid=9513 comm="syz.4.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 553.430140][ T9516] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 553.469746][ T9516] ext4 filesystem being mounted at /581/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 553.508121][ T28] audit: type=1400 audit(1753252544.782:13231): avc: denied { read } for pid=9513 comm="syz.4.3047" dev="nsfs" ino=4026532798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 553.633127][ T28] audit: type=1400 audit(1753252544.782:13232): avc: denied { open } for pid=9513 comm="syz.4.3047" path="net:[4026532798]" dev="nsfs" ino=4026532798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 554.146583][ T28] audit: type=1400 audit(1753252544.782:13233): avc: denied { create } for pid=9513 comm="syz.4.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 554.349040][ T286] EXT4-fs (loop3): unmounting filesystem. [ 554.452248][ T9527] futex_wake_op: syz.4.3052 tries to shift op by -1; fix this program [ 554.464744][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 554.474182][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 554.500895][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 554.529685][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 554.549820][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.556938][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.596811][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 554.609984][ T9530] 9pnet_fd: Insufficient options for proto=fd [ 554.626115][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 554.706810][ T9531] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3050'. [ 554.732148][ T9531] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 554.739887][ T9531] SELinux: failed to load policy [ 554.941158][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.948250][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.961695][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 554.969954][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 554.999119][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 555.010310][ T9536] 9pnet_fd: Insufficient options for proto=fd [ 555.017081][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 555.027678][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 555.046715][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 555.090932][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 555.117868][ T7356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 555.131016][ T7356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 555.149107][ T9446] device veth0_vlan entered promiscuous mode [ 555.156653][ T7356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 555.167454][ T7356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 555.187175][ T7356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 555.195649][ T7356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 555.208397][ T9446] device veth1_macvtap entered promiscuous mode [ 555.219878][ T7356] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 555.228780][ T7356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 555.238118][ T7356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 555.256362][ T7356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 555.308587][ T7356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 555.538278][ T9543] loop0: detected capacity change from 0 to 40427 [ 555.569455][ T9543] F2FS-fs (loop0): invalid crc value [ 555.602621][ T9543] F2FS-fs (loop0): Found nat_bits in checkpoint [ 555.671812][ T9543] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 555.965557][ T282] syz-executor: attempt to access beyond end of device [ 555.965557][ T282] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 556.220640][ T9569] futex_wake_op: syz.4.3066 tries to shift op by -1; fix this program [ 556.244486][ T9571] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 556.658495][ T9593] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 556.730028][ T9593] tipc: Enabled bearer , priority 0 [ 556.740454][ T9593] device syzkaller0 entered promiscuous mode [ 557.277276][ T9586] tipc: Resetting bearer [ 557.285195][ T9586] tipc: Disabling bearer [ 557.429821][ T9610] futex_wake_op: syz.4.3079 tries to shift op by -1; fix this program [ 557.450083][ T9608] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 557.563772][ T28] kauditd_printk_skb: 551 callbacks suppressed [ 557.563790][ T28] audit: type=1400 audit(1753252549.542:13785): avc: denied { read write } for pid=9446 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 557.631649][ T28] audit: type=1400 audit(1753252549.542:13786): avc: denied { bpf } for pid=9615 comm="syz.0.3084" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 557.855765][ T28] audit: type=1400 audit(1753252549.542:13787): avc: denied { prog_load } for pid=9615 comm="syz.0.3084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 558.678416][ T28] audit: type=1400 audit(1753252549.542:13788): avc: denied { perfmon } for pid=9615 comm="syz.0.3084" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 558.753176][ T9636] audit: audit_backlog=65 > audit_backlog_limit=64 [ 558.765200][ T9637] audit: audit_backlog=65 > audit_backlog_limit=64 [ 558.783946][ T9636] audit: audit_lost=217 audit_rate_limit=0 audit_backlog_limit=64 [ 558.784438][ T28] audit: type=1400 audit(1753252549.542:13789): avc: denied { prog_run } for pid=9615 comm="syz.0.3084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 558.803370][ T9639] audit: audit_backlog=65 > audit_backlog_limit=64 [ 558.813011][ T9637] audit: audit_lost=218 audit_rate_limit=0 audit_backlog_limit=64 [ 558.834926][ T9639] loop0: detected capacity change from 0 to 512 [ 558.892108][ T9639] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 558.914797][ T9639] ext4 filesystem being mounted at /583/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.132713][ T9652] futex_wake_op: syz.3.3094 tries to shift op by -1; fix this program [ 559.157195][ T282] EXT4-fs (loop0): unmounting filesystem. [ 559.231626][ T9659] netlink: 'syz.0.3097': attribute type 1 has an invalid length. [ 559.239524][ T9659] netlink: 'syz.0.3097': attribute type 2 has an invalid length. [ 559.248934][ T9659] netlink: 'syz.0.3097': attribute type 1 has an invalid length. [ 559.256799][ T9659] netlink: 'syz.0.3097': attribute type 2 has an invalid length. [ 559.336984][ T9664] loop0: detected capacity change from 0 to 1024 [ 559.363252][ T772] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 560.027835][ T9673] 9pnet_fd: Insufficient options for proto=fd [ 560.527746][ T2008] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 560.574790][ T7356] tipc: Left network mode [ 560.620202][ T9692] netlink: 'syz.1.3109': attribute type 1 has an invalid length. [ 560.628129][ T9692] netlink: 'syz.1.3109': attribute type 2 has an invalid length. [ 560.641244][ T9692] netlink: 'syz.1.3109': attribute type 1 has an invalid length. [ 560.649086][ T9692] netlink: 'syz.1.3109': attribute type 2 has an invalid length. [ 560.666777][ T9685] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.674094][ T9685] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.682215][ T9685] device bridge_slave_0 entered promiscuous mode [ 560.690264][ T9685] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.698017][ T9685] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.706212][ T9685] device bridge_slave_1 entered promiscuous mode [ 560.712982][ T2008] usb 5-1: Using ep0 maxpacket: 16 [ 560.721699][ T2008] usb 5-1: config 127 interface 0 has no altsetting 0 [ 560.728606][ T2008] usb 5-1: config 127 interface 1 has no altsetting 0 [ 560.740046][ T2008] usb 5-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 560.749202][ T2008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.757271][ T2008] usb 5-1: Product: syz [ 560.761486][ T2008] usb 5-1: Manufacturer: syz [ 560.766121][ T2008] usb 5-1: SerialNumber: syz [ 560.777840][ T9697] loop1: detected capacity change from 0 to 512 [ 560.833668][ T9697] EXT4-fs (loop1): 1 orphan inode deleted [ 560.839476][ T9697] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 560.850647][ T2977] EXT4-fs error (device loop1): ext4_release_dquot:6837: comm kworker/u4:7: Failed to release dquot type 1 [ 560.858664][ T9697] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 560.958331][ T9685] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.965470][ T9685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.972800][ T9685] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.979848][ T9685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.006995][ T9700] loop3: detected capacity change from 0 to 40427 [ 561.040845][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 561.040841][ T9700] F2FS-fs (loop3): invalid crc value [ 561.055708][ T2008] usb 5-1: USB disconnect, device number 17 [ 561.056004][ T4543] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.079934][ T9700] F2FS-fs (loop3): Found nat_bits in checkpoint [ 561.099495][ T4543] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.128055][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 561.136936][ T4543] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.142032][ T9700] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 561.144057][ T4543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.161587][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 561.171075][ T4543] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.178141][ T4543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.229179][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 561.243068][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 561.266748][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 561.279975][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 561.288672][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 561.296538][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 561.307365][ T7356] device bridge_slave_1 left promiscuous mode [ 561.355072][ T7356] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.418556][ T9710] syz.3.3111: attempt to access beyond end of device [ 561.418556][ T9710] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 561.829881][ T286] syz-executor: attempt to access beyond end of device [ 561.829881][ T286] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 561.831280][ T7356] device bridge_slave_0 left promiscuous mode [ 561.852354][ T7356] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.862465][ T9446] EXT4-fs (loop1): unmounting filesystem. [ 561.869803][ T7356] device veth1_macvtap left promiscuous mode [ 561.876960][ T7356] device veth0_vlan left promiscuous mode [ 562.170632][ T9718] futex_wake_op: syz.1.3113 tries to shift op by -1; fix this program [ 562.340961][ T9725] loop4: detected capacity change from 0 to 1024 [ 562.361907][ T9725] EXT4-fs: Ignoring removed bh option [ 562.371684][ T9725] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 562.392180][ T9725] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 562.403461][ T9685] device veth0_vlan entered promiscuous mode [ 562.422892][ T9729] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 562.432582][ T9730] netlink: 'syz.0.3119': attribute type 1 has an invalid length. [ 562.433819][ T8115] EXT4-fs (loop4): unmounting filesystem. [ 562.440462][ T9730] netlink: 'syz.0.3119': attribute type 2 has an invalid length. [ 562.509963][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 562.524149][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 562.546591][ T9685] device veth1_macvtap entered promiscuous mode [ 562.558107][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 562.567657][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 562.577120][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 562.595039][ T28] kauditd_printk_skb: 579 callbacks suppressed [ 562.595059][ T28] audit: type=1400 audit(1753252554.562:14346): avc: denied { execmem } for pid=9736 comm="syz.0.3121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 562.636605][ T28] audit: type=1400 audit(1753252554.602:14347): avc: denied { module_request } for pid=9685 comm="syz-executor" kmod="netdev-geneve0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 562.670054][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 562.681202][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 562.683491][ T28] audit: type=1400 audit(1753252554.612:14348): avc: denied { mounton } for pid=9685 comm="syz-executor" path="/root/syzkaller.xCLDrh/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 562.713986][ T28] audit: type=1400 audit(1753252554.612:14349): avc: denied { mount } for pid=9685 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 562.805381][ T9740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3121'. [ 562.826572][ T9740] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 562.834350][ T9740] SELinux: failed to load policy [ 562.847758][ T28] audit: type=1400 audit(1753252554.612:14350): avc: denied { mounton } for pid=9685 comm="syz-executor" path="/root/syzkaller.xCLDrh/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 562.910909][ T28] audit: type=1400 audit(1753252554.642:14351): avc: denied { bpf } for pid=9734 comm="syz.4.3120" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 563.005026][ T28] audit: type=1400 audit(1753252554.642:14352): avc: denied { map_create } for pid=9734 comm="syz.4.3120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 563.065008][ T28] audit: type=1400 audit(1753252554.642:14353): avc: denied { bpf } for pid=9734 comm="syz.4.3120" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 563.078558][ T9742] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 563.101113][ T28] audit: type=1400 audit(1753252554.642:14354): avc: denied { prog_load } for pid=9734 comm="syz.4.3120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 563.120664][ T28] audit: type=1400 audit(1753252554.642:14355): avc: denied { perfmon } for pid=9734 comm="syz.4.3120" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 563.182131][ T9746] incfs_lookup_dentry err:-5 [ 563.188682][ T9746] incfs: Can't find or create .index dir in ./file0 [ 563.196811][ T9746] incfs: mount failed -5 [ 563.251165][ T9750] 9pnet_fd: Insufficient options for proto=fd [ 563.260241][ T9752] tipc: Started in network mode [ 563.266393][ T9752] tipc: Node identity a65490510551, cluster identity 4711 [ 563.273772][ T9752] tipc: Enabled bearer , priority 0 [ 563.320261][ T9752] device syzkaller0 entered promiscuous mode [ 563.361222][ T9752] tipc: Resetting bearer [ 563.403271][ T9751] tipc: Resetting bearer [ 563.476189][ T9751] tipc: Disabling bearer [ 563.559548][ T9763] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 563.559891][ T9748] loop3: detected capacity change from 0 to 40427 [ 563.574847][ T9763] SELinux: failed to load policy [ 563.672490][ T9767] loop1: detected capacity change from 0 to 512 [ 563.697018][ T9767] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 563.766815][ T9748] F2FS-fs (loop3): invalid crc value [ 563.929130][ T9767] EXT4-fs (loop1): 1 truncate cleaned up [ 563.934988][ T9767] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 564.173697][ T9748] F2FS-fs (loop3): Found nat_bits in checkpoint [ 564.405215][ T9769] futex_wake_op: syz.0.3132 tries to shift op by -1; fix this program [ 564.623109][ T9446] EXT4-fs (loop1): unmounting filesystem. [ 564.639702][ T9748] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 564.647743][ T9786] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 564.658026][ T9784] loop2: detected capacity change from 0 to 512 [ 564.706227][ T9787] loop0: detected capacity change from 0 to 1024 [ 564.720961][ T9789] 9pnet_fd: Insufficient options for proto=fd [ 564.733710][ T9784] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 564.754389][ T9787] EXT4-fs: Ignoring removed orlov option [ 564.772462][ T9787] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 564.783324][ T9784] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.914112][ T9794] kvm: pic: single mode not supported [ 564.914179][ T9794] kvm: pic: non byte read [ 564.951335][ T9685] EXT4-fs (loop2): unmounting filesystem. [ 564.960176][ T9794] kvm: pic: non byte read [ 564.973339][ T9794] kvm: pic: non byte read [ 564.978060][ T9794] kvm: pic: non byte read [ 564.989614][ T9794] kvm: pic: non byte read [ 564.998762][ T9794] kvm: pic: non byte read [ 565.003761][ T9794] kvm: pic: non byte read [ 565.011675][ T9794] kvm: pic: non byte read [ 565.016467][ T9794] kvm: pic: non byte read [ 565.118733][ T9803] syz.3.3124: attempt to access beyond end of device [ 565.118733][ T9803] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 565.194867][ T9807] tipc: Started in network mode [ 565.200218][ T9807] tipc: Node identity 02df477b0a9e, cluster identity 4711 [ 565.226113][ T9807] tipc: Enabled bearer , priority 0 [ 565.269212][ T9807] device syzkaller0 entered promiscuous mode [ 565.283191][ T9807] tipc: Resetting bearer [ 565.305347][ T9806] tipc: Resetting bearer [ 565.336072][ T9806] tipc: Disabling bearer [ 565.517147][ T282] EXT4-fs (loop0): unmounting filesystem. [ 565.532566][ T286] syz-executor: attempt to access beyond end of device [ 565.532566][ T286] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 565.559808][ T9812] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 565.610533][ T9812] SELinux: failed to load policy [ 565.779190][ T9822] futex_wake_op: syz.0.3148 tries to shift op by -1; fix this program [ 565.889799][ T9826] loop1: detected capacity change from 0 to 512 [ 565.920707][ T9826] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 565.953281][ T9823] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 566.087602][ T9826] EXT4-fs (loop1): 1 truncate cleaned up [ 566.093530][ T9826] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 566.731949][ T9835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3154'. [ 566.837877][ T9835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3154'. [ 566.876788][ T9446] EXT4-fs (loop1): unmounting filesystem. [ 567.047521][ T9843] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 567.055318][ T9843] SELinux: failed to load policy [ 567.475489][ T337] Bluetooth: hci0: Frame reassembly failed (-84) [ 567.575570][ T9850] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.601723][ T28] kauditd_printk_skb: 590 callbacks suppressed [ 567.601740][ T28] audit: type=1400 audit(1753252559.582:14946): avc: denied { mount } for pid=9856 comm="syz.4.3160" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 567.641330][ T28] audit: type=1400 audit(1753252559.582:14947): avc: denied { bpf } for pid=9858 comm="syz.3.3159" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 567.646304][ T9850] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.662289][ T28] audit: type=1400 audit(1753252559.582:14948): avc: denied { prog_load } for pid=9858 comm="syz.3.3159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 567.697946][ T28] audit: type=1400 audit(1753252559.582:14949): avc: denied { perfmon } for pid=9858 comm="syz.3.3159" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 567.702543][ T9859] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 567.730399][ T9859] SELinux: failed to load policy [ 567.744941][ T9850] device bridge_slave_0 entered promiscuous mode [ 567.767869][ T9850] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.776475][ T28] audit: type=1400 audit(1753252559.622:14950): avc: denied { write } for pid=9856 comm="syz.4.3160" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 567.805115][ T9850] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.820979][ T9850] device bridge_slave_1 entered promiscuous mode [ 567.840820][ T28] audit: type=1400 audit(1753252559.622:14951): avc: denied { add_name } for pid=9856 comm="syz.4.3160" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 567.897979][ T28] audit: type=1400 audit(1753252559.622:14952): avc: denied { create } for pid=9856 comm="syz.4.3160" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 568.257145][ T28] audit: type=1400 audit(1753252559.622:14953): avc: denied { associate } for pid=9856 comm="syz.4.3160" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 568.279962][ T28] audit: type=1400 audit(1753252559.642:14954): avc: denied { bpf } for pid=9858 comm="syz.3.3159" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 568.308608][ T9867] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 568.339424][ T9869] audit: audit_backlog=65 > audit_backlog_limit=64 [ 568.379649][ T9871] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3165'. [ 568.420182][ T9871] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3165'. [ 568.446160][ T7356] device bridge_slave_1 left promiscuous mode [ 568.456996][ T7356] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.492331][ T7356] device bridge_slave_0 left promiscuous mode [ 568.505822][ T7356] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.553827][ T7356] device veth1_macvtap left promiscuous mode [ 568.595748][ T7356] device veth0_vlan left promiscuous mode [ 568.976979][ T9891] loop3: detected capacity change from 0 to 40427 [ 568.983542][ T2006] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 568.999736][ T9891] F2FS-fs (loop3): invalid crc value [ 569.005805][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 569.013810][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 569.022387][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 569.030002][ T9891] F2FS-fs (loop3): Found nat_bits in checkpoint [ 569.031163][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 569.046413][ T337] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.053488][ T337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.062149][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 569.083268][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 569.093716][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 569.096619][ T9891] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 569.102816][ T4543] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.116465][ T4543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.152030][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 569.163775][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 569.180701][ T2006] usb 5-1: Using ep0 maxpacket: 16 [ 569.188230][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 569.196929][ T2006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.208598][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 569.217051][ T2006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.228076][ T2006] usb 5-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 569.236848][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 569.245996][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 569.246020][ T2006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.262263][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 569.262582][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 569.279385][ T9850] device veth0_vlan entered promiscuous mode [ 569.281124][ T2006] usb 5-1: config 0 descriptor?? [ 569.287851][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 569.305051][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 569.323583][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 569.333702][ T9850] device veth1_macvtap entered promiscuous mode [ 569.352321][ T9897] syz.3.3174: attempt to access beyond end of device [ 569.352321][ T9897] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 569.373995][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 569.383643][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 569.400827][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 569.409403][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 569.467377][ T9899] loop0: detected capacity change from 0 to 1024 [ 569.474718][ T9899] EXT4-fs: Ignoring removed orlov option [ 569.489762][ T9899] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 569.520445][ T971] Bluetooth: hci0: command 0x1003 tx timeout [ 569.526611][ T8919] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 570.070653][ T286] syz-executor: attempt to access beyond end of device [ 570.070653][ T286] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 570.196865][ T9911] loop1: detected capacity change from 0 to 512 [ 570.529508][ T9911] EXT4-fs (loop1): 1 orphan inode deleted [ 570.535466][ T9911] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 570.552371][ T9911] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.611431][ T337] EXT4-fs error (device loop1): ext4_release_dquot:6837: comm kworker/u4:5: Failed to release dquot type 1 [ 571.098952][ T9918] loop2: detected capacity change from 0 to 128 [ 571.106592][ T9918] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 571.141587][ T9918] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 571.151601][ T9850] EXT4-fs (loop0): unmounting filesystem. [ 571.192178][ T9446] EXT4-fs (loop1): unmounting filesystem. [ 571.462113][ T9917] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.476829][ T9917] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.484736][ T9917] device bridge_slave_0 entered promiscuous mode [ 571.498492][ T9917] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.506067][ T9917] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.515583][ T9917] device bridge_slave_1 entered promiscuous mode [ 571.606062][ T7356] tipc: Left network mode [ 571.661063][ T9917] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.668172][ T9917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.675534][ T9917] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.682613][ T9917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.792879][ T2006] usbhid 5-1:0.0: can't add hid device: -71 [ 571.799726][ T2006] usbhid: probe of 5-1:0.0 failed with error -71 [ 571.808516][ T2006] usb 5-1: USB disconnect, device number 18 [ 571.859587][ T4543] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.869605][ T4543] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.877695][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 571.899686][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 571.926710][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 571.942319][ T4543] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.949417][ T4543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.989812][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 572.006545][ T4543] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.013686][ T4543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.055208][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 572.065058][ T9943] loop4: detected capacity change from 0 to 1024 [ 572.073665][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 572.083533][ T9943] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 572.105463][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 572.121829][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 572.129829][ T9943] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 572.142427][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 572.149737][ T9943] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 572.159926][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 572.177600][ T9917] device veth0_vlan entered promiscuous mode [ 572.190298][ T9943] EXT4-fs error (device loop4): __ext4_iget:5078: inode #17: block 1803188595: comm syz.4.3186: invalid block [ 572.200722][ T9917] device veth1_macvtap entered promiscuous mode [ 572.214893][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 572.243475][ T9943] EXT4-fs (loop4): no journal found [ 572.252190][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 572.270268][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 572.570237][ T7356] device bridge_slave_1 left promiscuous mode [ 572.617837][ T28] kauditd_printk_skb: 449 callbacks suppressed [ 572.617864][ T28] audit: type=1400 audit(1753252564.592:15398): avc: denied { mounton } for pid=9917 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 572.688429][ T7356] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.702289][ T28] audit: type=1400 audit(1753252564.682:15399): avc: denied { mount } for pid=9917 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 572.736505][ T7356] device bridge_slave_0 left promiscuous mode [ 572.757067][ T9949] loop0: detected capacity change from 0 to 1024 [ 572.773496][ T28] audit: type=1400 audit(1753252564.702:15400): avc: denied { mounton } for pid=9917 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 572.776518][ T7356] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.799857][ T9949] EXT4-fs: Ignoring removed orlov option [ 572.826144][ T9951] loop3: detected capacity change from 0 to 512 [ 572.834000][ T9949] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 572.863934][ T7356] device veth0_vlan left promiscuous mode [ 572.899187][ T28] audit: type=1400 audit(1753252564.702:15401): avc: denied { bpf } for pid=9948 comm="syz.0.3188" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 572.938385][ T9951] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 572.961062][ T9951] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 572.991215][ T9958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 573.010904][ T9951] audit: audit_backlog=65 > audit_backlog_limit=64 [ 573.012007][ T28] audit: type=1400 audit(1753252564.702:15402): avc: denied { prog_load } for pid=9948 comm="syz.0.3188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 573.017462][ T9951] audit: audit_lost=228 audit_rate_limit=0 audit_backlog_limit=64 [ 573.017480][ T9951] audit: backlog limit exceeded [ 573.017930][ T9951] audit: audit_backlog=65 > audit_backlog_limit=64 [ 573.064861][ T9958] 9pnet_fd: Insufficient options for proto=fd [ 573.087939][ T9945] loop1: detected capacity change from 0 to 40427 [ 573.124450][ T9945] F2FS-fs (loop1): invalid crc value [ 573.160702][ T9960] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 573.173510][ T9945] F2FS-fs (loop1): Found nat_bits in checkpoint [ 573.175459][ T9917] EXT4-fs (loop3): unmounting filesystem. [ 573.190562][ T9960] SELinux: failed to load policy [ 573.270854][ T9945] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 573.537369][ T9980] tipc: Enabled bearer , priority 0 [ 573.583623][ T9850] EXT4-fs (loop0): unmounting filesystem. [ 573.616634][ T9975] device syzkaller0 entered promiscuous mode [ 573.627351][ T9982] syz.1.3187: attempt to access beyond end of device [ 573.627351][ T9982] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 573.648574][ T9975] tipc: Resetting bearer [ 573.673958][ T9974] tipc: Resetting bearer [ 573.701259][ T9974] tipc: Disabling bearer [ 573.879717][ T9987] loop0: detected capacity change from 0 to 512 [ 573.976910][ T9987] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 574.132683][ T9987] EXT4-fs (loop0): 1 truncate cleaned up [ 574.138449][ T9987] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 574.982710][ T9850] EXT4-fs (loop0): unmounting filesystem. [ 575.040754][ T9997] 9pnet_fd: Insufficient options for proto=fd [ 575.072706][ T9446] syz-executor: attempt to access beyond end of device [ 575.072706][ T9446] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 575.475350][T10007] loop0: detected capacity change from 0 to 2048 [ 575.620515][T10007] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 576.416709][T10012] futex_wake_op: syz.3.3205 tries to shift op by -1; fix this program [ 576.484802][ T9850] EXT4-fs (loop0): unmounting filesystem. [ 576.581705][T10017] incfs_lookup_dentry err:-5 [ 576.590137][T10017] incfs: Can't find or create .index dir in ./file0 [ 576.666072][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 576.673758][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 576.879189][T10027] loop2: detected capacity change from 0 to 512 [ 579.897213][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 579.929407][ T28] kauditd_printk_skb: 401 callbacks suppressed [ 579.929423][ T28] audit: type=1400 audit(1753252568.632:15761): avc: denied { create } for pid=10022 comm="syz.0.3210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 579.958771][T10017] incfs: mount failed -5 [ 579.973876][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 579.982701][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 579.991188][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 579.999881][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 580.008425][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 580.017209][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 580.026634][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 580.035702][T10027] EXT4-fs (loop2): 1 orphan inode deleted [ 580.041534][T10027] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 580.050913][ T7356] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 580.056274][ T28] audit: type=1400 audit(1753252568.632:15762): avc: denied { wake_alarm } for pid=10022 comm="syz.0.3210" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 580.061072][T10027] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.083059][ T28] audit: type=1400 audit(1753252569.641:15763): avc: denied { bpf } for pid=10022 comm="syz.0.3210" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 580.123447][ T28] audit: type=1400 audit(1753252569.641:15764): avc: denied { map_create } for pid=10022 comm="syz.0.3210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 580.140153][ T7356] EXT4-fs error (device loop2): ext4_release_dquot:6837: comm kworker/u4:10: Failed to release dquot type 1 [ 580.166650][ T28] audit: type=1400 audit(1753252569.641:15765): avc: denied { map_read map_write } for pid=10022 comm="syz.0.3210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 580.186912][ T28] audit: type=1400 audit(1753252569.641:15766): avc: denied { prog_load } for pid=10022 comm="syz.0.3210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 580.206522][ T28] audit: type=1400 audit(1753252569.641:15767): avc: denied { perfmon } for pid=10022 comm="syz.0.3210" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 580.261548][ T28] audit: type=1400 audit(1753252569.841:15768): avc: denied { read write } for pid=10020 comm="syz.2.3209" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 580.296472][ T9685] EXT4-fs (loop2): unmounting filesystem. [ 580.391836][T10042] loop3: detected capacity change from 0 to 512 [ 580.412500][T10042] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 580.599616][T10042] EXT4-fs (loop3): 1 truncate cleaned up [ 580.605488][T10042] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 580.818099][ T28] audit: type=1400 audit(1753252569.851:15769): avc: denied { open } for pid=10020 comm="syz.2.3209" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 581.221644][T10047] incfs_lookup_dentry err:-5 [ 581.226301][T10047] incfs: Can't find or create .index dir in ./file0 [ 581.260478][T10047] incfs: mount failed -5 [ 581.310017][ T9917] EXT4-fs (loop3): unmounting filesystem. [ 581.491165][T10056] loop2: detected capacity change from 0 to 128 [ 581.546194][T10040] loop1: detected capacity change from 0 to 40427 [ 581.562456][T10040] F2FS-fs (loop1): invalid crc value [ 581.574389][T10056] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 581.583390][T10056] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.973307][T10040] F2FS-fs (loop1): Found nat_bits in checkpoint [ 582.052134][T10040] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 582.200789][ T9685] EXT4-fs (loop2): unmounting filesystem. [ 582.341565][T10075] syz.1.3214: attempt to access beyond end of device [ 582.341565][T10075] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 582.768068][T10077] 9pnet_fd: Insufficient options for proto=fd [ 582.787960][T10076] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 582.795604][T10076] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 582.832426][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 582.854799][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 582.897524][ T9446] syz-executor: attempt to access beyond end of device [ 582.897524][ T9446] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 582.931595][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 582.939880][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 582.966133][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 582.991058][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 583.004591][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 583.031539][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 583.182510][ T5981] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 583.280744][T10090] sch_fq: defrate 0 ignored. [ 583.452238][ T5981] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 583.460652][ T5981] usb 3-1: config 0 has no interface number 0 [ 583.467015][ T5981] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.485245][ T5981] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.496006][ T5981] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 583.508416][ T5981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.581660][T10097] loop0: detected capacity change from 0 to 512 [ 583.607569][T10097] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 583.646904][T10097] EXT4-fs (loop0): 1 truncate cleaned up [ 583.652871][T10097] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 583.704452][ T5981] usb 3-1: config 0 descriptor?? [ 584.393912][T10102] binder: 10100:10102 ioctl c0306201 0 returned -14 [ 584.441680][T10102] binder: 10100:10102 ioctl c0306201 200000000540 returned -22 [ 584.529939][ T5981] usbhid 3-1:0.32: can't add hid device: -71 [ 584.537219][ T5981] usbhid: probe of 3-1:0.32 failed with error -71 [ 584.548024][ T9850] EXT4-fs (loop0): unmounting filesystem. [ 584.589817][ T5981] usb 3-1: USB disconnect, device number 23 [ 584.651214][T10112] 9pnet_fd: Insufficient options for proto=fd [ 584.786245][T10120] loop4: detected capacity change from 0 to 512 [ 584.827137][T10120] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 584.836580][T10120] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 584.883765][ T8115] EXT4-fs (loop4): unmounting filesystem. [ 584.931163][ T28] kauditd_printk_skb: 462 callbacks suppressed [ 584.931183][ T28] audit: type=1400 audit(1753252578.896:16205): avc: denied { execmem } for pid=10124 comm="syz.4.3240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 584.985623][ T765] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 584.995868][ T28] audit: type=1400 audit(1753252578.976:16206): avc: denied { ioctl } for pid=10114 comm="syz.0.3237" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 585.064676][ T28] audit: type=1400 audit(1753252579.036:16207): avc: denied { read write } for pid=9685 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 585.080717][T10128] loop2: detected capacity change from 0 to 512 [ 585.094813][ T28] audit: type=1400 audit(1753252579.036:16208): avc: denied { read write open } for pid=9685 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 585.140048][ T28] audit: type=1400 audit(1753252579.036:16209): avc: denied { ioctl } for pid=9685 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 585.230449][ T765] usb 1-1: Using ep0 maxpacket: 16 [ 585.299394][ T765] usb 1-1: config 127 interface 0 has no altsetting 0 [ 585.313068][ T28] audit: type=1400 audit(1753252579.036:16210): avc: denied { read write } for pid=10127 comm="syz.2.3241" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 585.339937][T10128] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.3241: missing EA_INODE flag [ 585.360411][ T765] usb 1-1: config 127 interface 1 has no altsetting 0 [ 585.386671][T10128] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3241: error while reading EA inode 2 err=-117 [ 585.391310][ T28] audit: type=1400 audit(1753252579.036:16211): avc: denied { read write open } for pid=10127 comm="syz.2.3241" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 585.425372][ T28] audit: type=1400 audit(1753252579.036:16212): avc: denied { ioctl } for pid=10127 comm="syz.2.3241" path="/dev/loop2" dev="devtmpfs" ino=120 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 585.428866][ T765] usb 1-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 585.451352][ T28] audit: type=1400 audit(1753252579.106:16213): avc: denied { bpf } for pid=10124 comm="syz.4.3240" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 585.482420][T10128] EXT4-fs (loop2): 1 orphan inode deleted [ 585.488250][T10128] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 585.497888][ T28] audit: type=1400 audit(1753252579.106:16214): avc: denied { prog_load } for pid=10124 comm="syz.4.3240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 585.508157][ T765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.537976][ T9685] EXT4-fs (loop2): unmounting filesystem. [ 585.552166][ T765] usb 1-1: Product: syz [ 585.556427][ T765] usb 1-1: Manufacturer: syz [ 585.621559][ T765] usb 1-1: SerialNumber: syz [ 585.650427][T10140] loop3: detected capacity change from 0 to 128 [ 585.658085][T10140] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 585.673318][T10140] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 585.722492][T10141] futex_wake_op: syz.1.3245 tries to shift op by -1; fix this program [ 585.918880][ T765] usb 1-1: USB disconnect, device number 23 [ 586.345432][T10149] loop2: detected capacity change from 0 to 512 [ 589.261310][T10149] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 589.317133][ T7356] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 589.335354][T10149] EXT4-fs (loop2): 1 truncate cleaned up [ 589.341513][T10149] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 589.383182][T10153] 9pnet_fd: Insufficient options for proto=fd [ 589.395363][T10155] loop4: detected capacity change from 0 to 512 [ 589.512704][ T9685] EXT4-fs (loop2): unmounting filesystem. [ 589.528554][T10158] loop3: detected capacity change from 0 to 128 [ 589.542768][T10158] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 589.554613][T10158] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.569525][T10155] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 589.580826][T10155] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.691821][T10171] loop1: detected capacity change from 0 to 512 [ 589.702184][T10172] loop0: detected capacity change from 0 to 256 [ 589.717690][T10172] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 589.816466][T10173] loop2: detected capacity change from 0 to 512 [ 589.865589][T10172] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 589.959462][ T28] kauditd_printk_skb: 245 callbacks suppressed [ 589.959488][ T28] audit: type=1400 audit(1753252583.926:16460): avc: denied { write } for pid=8115 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 590.058412][T10172] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 590.117719][T10171] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 590.137885][T10173] EXT4-fs (loop2): 1 orphan inode deleted [ 590.143762][T10173] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 590.160094][T10173] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.590802][T10171] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.674203][T10171] audit: audit_backlog=65 > audit_backlog_limit=64 [ 590.681888][ T9850] audit: audit_backlog=65 > audit_backlog_limit=64 [ 590.700423][ T28] audit: type=1400 audit(1753252583.966:16461): avc: denied { remove_name } for pid=8115 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 590.726608][ T9850] audit: audit_lost=253 audit_rate_limit=0 audit_backlog_limit=64 [ 590.735778][T10171] audit: audit_lost=254 audit_rate_limit=0 audit_backlog_limit=64 [ 590.744972][ T7356] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 590.756993][ T7356] EXT4-fs error (device loop2): ext4_release_dquot:6837: comm kworker/u4:10: Failed to release dquot type 1 [ 590.761890][ T28] audit: type=1400 audit(1753252583.966:16462): avc: denied { rmdir } for pid=8115 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 590.770324][ T9850] audit: backlog limit exceeded [ 590.791309][ T28] audit: type=1400 audit(1753252583.996:16463): avc: denied { unmount } for pid=8115 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 590.803994][ T9685] EXT4-fs (loop2): unmounting filesystem. [ 590.823688][ T9917] EXT4-fs (loop3): unmounting filesystem. [ 590.830274][ T9850] ------------[ cut here ]------------ [ 590.831430][ T8115] EXT4-fs (loop4): unmounting filesystem. [ 590.835897][ T9850] kernel BUG at fs/namei.c:2954! [ 590.849173][ T9850] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 590.855285][ T9850] CPU: 0 PID: 9850 Comm: syz-executor Tainted: G W 6.1.141-syzkaller-00041-gde932537be34 #0 [ 590.866746][ T9850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 590.876805][ T9850] RIP: 0010:may_delete+0x701/0x710 [ 590.882017][ T9850] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 a0 16 f4 ff e9 77 fe ff ff e8 f6 bc af ff 0f 0b e8 ef bc af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 590.901625][ T9850] RSP: 0018:ffffc9000c67faa0 EFLAGS: 00010293 [ 590.907695][ T9850] RAX: ffffffff81c03a81 RBX: ffff888104c6b330 RCX: ffff88812155d100 [ 590.915672][ T9850] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 590.923641][ T9850] RBP: ffffc9000c67fb08 R08: 0000000000000004 R09: 0000000000000003 [ 590.931610][ T9850] R10: fffff520018cff34 R11: 1ffff920018cff34 R12: dffffc0000000000 [ 590.939581][ T9850] R13: 0000000000000001 R14: ffff888104ccc250 R15: 1ffff1102098d666 [ 590.947691][ T9850] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 590.956622][ T9850] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 590.963207][ T9850] CR2: 000000110c2ea0af CR3: 000000012c698000 CR4: 00000000003506b0 [ 590.971184][ T9850] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 590.979154][ T9850] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 590.987124][ T9850] Call Trace: [ 590.990407][ T9850] [ 590.993342][ T9850] vfs_rmdir+0x32/0x500 [ 590.997507][ T9850] incfs_kill_sb+0x105/0x220 [ 591.002167][ T9850] deactivate_locked_super+0xb5/0x120 [ 591.007546][ T9850] deactivate_super+0xaf/0xe0 [ 591.012224][ T9850] cleanup_mnt+0x45f/0x4e0 [ 591.017571][ T9850] ? __kasan_slab_free+0x11/0x20 [ 591.022526][ T9850] __cleanup_mnt+0x19/0x20 [ 591.026953][ T9850] task_work_run+0x1db/0x240 [ 591.031549][ T9850] ? __cfi_task_work_run+0x10/0x10 [ 591.036665][ T9850] ? free_nsproxy+0x21f/0x270 [ 591.041352][ T9850] do_exit+0xa1d/0x2650 [ 591.045535][ T9850] ? __cfi_do_exit+0x10/0x10 [ 591.050161][ T9850] ? __kasan_check_write+0x14/0x20 [ 591.055290][ T9850] ? _raw_spin_lock_irq+0x8f/0xe0 [ 591.060325][ T9850] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 591.065888][ T9850] ? ksys_write+0x1da/0x240 [ 591.070401][ T9850] ? zap_other_threads+0x2c1/0x2f0 [ 591.075524][ T9850] do_group_exit+0x210/0x2d0 [ 591.080129][ T9850] __x64_sys_exit_group+0x3f/0x40 [ 591.085163][ T9850] x64_sys_call+0x7b4/0x9a0 [ 591.089713][ T9850] do_syscall_64+0x4c/0xa0 [ 591.094134][ T9850] ? clear_bhb_loop+0x30/0x80 [ 591.098818][ T9850] ? clear_bhb_loop+0x30/0x80 [ 591.103503][ T9850] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.109431][ T9850] RIP: 0033:0x7f570638e9a9 [ 591.113849][ T9850] Code: Unable to access opcode bytes at 0x7f570638e97f. [ 591.120860][ T9850] RSP: 002b:00007ffd4fffde18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 591.129274][ T9850] RAX: ffffffffffffffda RBX: 00007f5706410bc7 RCX: 00007f570638e9a9 [ 591.137247][ T9850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 591.145217][ T9850] RBP: 0000000000000010 R08: 00007ffd4fffbbb6 R09: 00007ffd4ffff0d0 [ 591.153189][ T9850] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffd4ffff0d0 [ 591.161159][ T9850] R13: 00007f5706410b55 R14: 000055558144d4a8 R15: 00007ffd500001a0 [ 591.169138][ T9850] [ 591.172155][ T9850] Modules linked in: [ 591.176252][ T9850] ---[ end trace 0000000000000000 ]--- [ 591.182638][ T9850] RIP: 0010:may_delete+0x701/0x710 [ 591.213615][ T9850] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 a0 16 f4 ff e9 77 fe ff ff e8 f6 bc af ff 0f 0b e8 ef bc af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 591.269555][ T9446] EXT4-fs (loop1): unmounting filesystem. [ 591.288801][ T9850] RSP: 0018:ffffc9000c67faa0 EFLAGS: 00010293 [ 591.296542][ T9850] RAX: ffffffff81c03a81 RBX: ffff888104c6b330 RCX: ffff88812155d100 [ 591.335544][ T9850] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 591.346036][ T9850] RBP: ffffc9000c67fb08 R08: 0000000000000004 R09: 0000000000000003 [ 591.358399][ T9850] R10: fffff520018cff34 R11: 1ffff920018cff34 R12: dffffc0000000000 [ 591.377097][ T9850] R13: 0000000000000001 R14: ffff888104ccc250 R15: 1ffff1102098d666 [ 591.386901][ T9850] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 591.401826][ T9850] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 591.423196][ T9850] CR2: 000000110c240c92 CR3: 00000001068ce000 CR4: 00000000003506b0 [ 591.431747][ T9850] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 591.440120][ T9850] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 591.448840][ T9850] Kernel panic - not syncing: Fatal exception [ 591.455209][ T9850] Kernel Offset: disabled [ 591.459543][ T9850] Rebooting in 86400 seconds..