last executing test programs: 40.559924274s ago: executing program 4 (id=5): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x200000, &(0x7f0000000080)=ANY=[], 0x41, 0x14fe, &(0x7f00000000c0)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") mkdir(&(0x7f0000012d00)='./bus\x00', 0x0) mount$incfs(&(0x7f0000012d40)='.\x00', &(0x7f0000012d80)='./bus\x00', &(0x7f0000012dc0), 0x1804002, 0x0) chdir(&(0x7f0000012e00)='./bus\x00') r0 = open(&(0x7f0000001600)='.\x00', 0x2000, 0xa) getdents(r0, &(0x7f0000001640)=""/4096, 0x1000) 40.390430948s ago: executing program 4 (id=6): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map=r0, 0x24, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) 40.29651123s ago: executing program 4 (id=12): inotify_init() r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="1802000080ffffff00000000000000008500000036000000850000000800000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000001840)={@multicast, @random="777de85bf4dd", @val={@val={0x88a8, 0x1, 0x1}, {0x8100, 0x7, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xd43, 0x3a, 0x0, @empty, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, [{0x5, 0x1a3, "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"}]}}}}}}, 0x0) 40.207906282s ago: executing program 32 (id=12): inotify_init() r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="1802000080ffffff00000000000000008500000036000000850000000800000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000001840)={@multicast, @random="777de85bf4dd", @val={@val={0x88a8, 0x1, 0x1}, {0x8100, 0x7, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xd43, 0x3a, 0x0, @empty, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, [{0x5, 0x1a3, "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"}]}}}}}}, 0x0) 28.375742291s ago: executing program 0 (id=283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write(0xffffffffffffffff, &(0x7f0000000780)="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", 0x221) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000740)=@x86={0x1, 0x0, 0x8, 0x0, 0x7, 0x1, 0x1, 0x8, 0xf, 0x2, 0x4, 0x81, 0x0, 0xac, 0x7, 0x2, 0x1, 0x2a, 0x8f, '\x00', 0xad}) 28.193887995s ago: executing program 0 (id=287): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x210000, &(0x7f00000001c0)={[{@nodelalloc}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000001640)=[{&(0x7f0000001680)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x7fffffdf, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x610) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) 28.01220204s ago: executing program 0 (id=297): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000380)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) 27.420699114s ago: executing program 0 (id=303): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) syz_mount_image$exfat(&(0x7f0000000a00), &(0x7f0000000a40)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f0000000b40)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB="00646d61c6d62d303030303030303030303030303135322c696f433161720300000069736f380000000000", @ANYRES16=r3, @ANYRES64=r0, @ANYRES32=r1, @ANYRESHEX=r1], 0x81, 0x14f5, &(0x7f0000000c00)="$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") mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x81899, 0x0) chroot(&(0x7f0000000300)='./file0/file0\x00') lstat(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380)) 27.320243306s ago: executing program 0 (id=305): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/unprivileged_bpf_disabled\x00', 0x1, 0x14) syz_mount_image$msdos(&(0x7f00000009c0), &(0x7f0000000a00)='./bus\x00', 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x3, 0x27e, &(0x7f0000000ac0)="$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") capset(&(0x7f0000000d80)={0x20080522}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) write$cgroup_pid(r0, 0x0, 0x0) 27.279381737s ago: executing program 0 (id=306): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1804) 27.233024218s ago: executing program 33 (id=306): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1804) 20.160792685s ago: executing program 5 (id=430): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000080)={0x0, 0x49, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x70bd2a}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080000}, 0x40000) 20.143454655s ago: executing program 5 (id=431): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r3, r1, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}}}}, 0x0) 20.125654966s ago: executing program 5 (id=434): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000041c0)=0x9, 0x4) connect$inet6(r0, &(0x7f0000004200)={0xa, 0x0, 0x0, @empty, 0x400}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000004240)=0x42, 0x4) write$binfmt_script(r0, &(0x7f0000004280), 0x28) recvmmsg(r0, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0) 20.103112896s ago: executing program 5 (id=436): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000040)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x499, &(0x7f0000001a00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0xc8b573f2c15a223a) getdents64(r0, 0x0, 0x0) 19.981187489s ago: executing program 5 (id=439): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) lgetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'security.', '\xb3\x8dA\x91\xdcM\x06\xc2\xf4j\x9bba/M\xba\xd0\xf1\xc7\x95 vH\x8b*9{&\xb8$m\xbb\x9cbN\xa3\x80`@\xc1\xc8\xb9/\xf953\xda\xaf\x02\xe6Pg\xf8\xaf\xb9\xfc\xcbhJL!_\x1b\x97\xee\xac\xa7ie\x143\xba\x84\xfcx\xbewc!$\x1bW\x87\x11\xbd\x11\xd79\x162f\x87\x7fy\x18U::\xc4R\x13\x9afC\xf5m\x0f*Vd\xa3\xf3\x15\xecz\x1f\x9c\xfcBy\xfc\x16\xde\xe7J\xdd@@cr\x86\xc8S\xc7\x83\xde\xb1y\xf9W0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r1, 0x25, 0x0, @void}, 0xf) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@link_local={0x3}, @random="ea6576681159", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x6, 0x1c, 0x66, 0x0, 0xc8, 0x2, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}}, {0x1e, 0x4f, 0x0, @empty}}}}}, 0x0) 738.011023ms ago: executing program 3 (id=902): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c) 727.086913ms ago: executing program 3 (id=903): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x9) 612.147746ms ago: executing program 3 (id=907): unshare(0x60000600) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 510.869458ms ago: executing program 3 (id=908): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x20, 0x0, 0xe000, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e24, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x24, 0x0, @void}}}}}}}, 0x0) 494.936049ms ago: executing program 3 (id=909): mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x181) mkdir(&(0x7f0000000b40)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 454.12361ms ago: executing program 1 (id=911): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x3c, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3, 0x29ecd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="ac1414aaffffffff000000001400000000000000000f"], 0x38}, 0x200000e0) 429.73612ms ago: executing program 1 (id=913): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x4, 0x0, 0x3ff, 0x9, 0xba, 0x8001, 0x1001002, 0x5, 0x8000006000000, 0x4, 0xa, 0x63, 0xf, 0x8000000000008, 0xba8, 0x73785dfb], 0x25002, 0x216146}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 365.791032ms ago: executing program 7 (id=915): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 364.087692ms ago: executing program 8 (id=916): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0xfffffffffffffffd, 0xb, 0x7a}) 346.947012ms ago: executing program 7 (id=917): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000fc0)='GPL\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001000)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000001040)=0x3, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[], 0x0) 338.229002ms ago: executing program 8 (id=918): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)=@x86={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0xd, 0x0, 0xb, 0x1}) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000140)) 320.297883ms ago: executing program 7 (id=920): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[], 0x18) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x2c}, 0x8) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 293.846623ms ago: executing program 1 (id=923): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0806000108080604"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x20080058) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x707, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 293.598103ms ago: executing program 7 (id=924): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x110) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) flock(r1, 0x1) flock(r1, 0x1) flock(r0, 0x5) 204.253636ms ago: executing program 8 (id=926): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fsync(r1) write(r1, &(0x7f0000000340), 0x11000) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c25c6699fc939d4e48200"]) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 204.175286ms ago: executing program 2 (id=927): unshare(0x6020400) r0 = fsopen(&(0x7f00000004c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r1, 0x0, 0x0, 0xce2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001300)={r2, 0x0}, 0x20) 191.743476ms ago: executing program 2 (id=928): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0x4a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800002c0000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {}, {}, [@call={0x85, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb2, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xba, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) 179.758726ms ago: executing program 2 (id=929): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) 161.681866ms ago: executing program 1 (id=930): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x3}}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x3, 0x0, &(0x7f00000002c0)=0xff12) 84.117728ms ago: executing program 2 (id=931): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0) 83.937478ms ago: executing program 1 (id=932): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="36004c060a000200aa"], 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 83.828408ms ago: executing program 7 (id=933): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300, 0x72660}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xb}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 83.679868ms ago: executing program 2 (id=934): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$tipc(0x1e, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x3, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0x3e}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r1, r2, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 72.761788ms ago: executing program 2 (id=935): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x10, &(0x7f0000000300)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f0000000340)="$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") r0 = open(&(0x7f0000000b40)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000b80)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 68.762259ms ago: executing program 8 (id=936): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000037c0)="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", 0x302, 0x2) 459.49µs ago: executing program 7 (id=937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x5001}) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x1, 0x3, 0x1c, 0x3, 0x14, 0x6}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x33, 0x28, 0x67, 0x0, 0xfd, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "414dc1c90728557ded5995abd8c2dd746ed1b8e7"}}, 0x32) 242.78µs ago: executing program 8 (id=938): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x162) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000180)='./file0\x00') bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 138.31µs ago: executing program 1 (id=939): syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x2800091, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e2eabcdf2226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004ece8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd10000000000000004f8c019f54bcb0fc4d3b629670d76e9512f4a630436da7310", @ANYRES32, @ANYRES16=0x0, @ANYRESOCT, @ANYBLOB="be6bd3c1d0a0638d72ba1af4b541b4a8bd880a9e79d4c2419a6ee44dbba8f5453e67c5186ac4737fc56705f2200e58d2a18538fd86ef0c0bb75c4318141801ab983cd26d0b6eedd0f4d46c8cb8fbe2fc9c287aa0521a13d086c486a6dfa6ed9afedd15f0e18084406de10087dc1679718e852b70feee428ab25fe2a8e1d84ce052984d256e768195e589fec9f86f34363e8d8a013304121cc08de9059dfa4031bdaa13f5a001560e7a215e2eaf51077587aa63125e42a47215700cefe3c052ce1f62a5678c8a3ca0a555bf2eda"], 0x55, 0x1be, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file2\x00', 0x80000, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r0, 0x1000) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000f00)='./cgroup.net/syz1\x00', 0x200002, 0x0) 0s ago: executing program 8 (id=940): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): FS-fs (loop5): Segment count (31) mismatch with total segments from devices (0) [ 27.685733][ T460] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 27.694459][ T460] F2FS-fs (loop5): invalid crc value [ 27.704928][ T462] netlink: 48 bytes leftover after parsing attributes in process `syz.1.54'. [ 27.731424][ T462] Zero length message leads to an empty skb [ 27.766785][ T460] F2FS-fs (loop5): Found nat_bits in checkpoint [ 27.804852][ T460] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 27.811993][ T460] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 27.881472][ T489] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 27.889705][ T460] F2FS-fs (loop5): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix. [ 27.904459][ T460] F2FS-fs (loop5): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4 [ 27.916014][ T489] System zones: 1-3, 19-19, 35-36 [ 27.981626][ T489] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 27.991761][ T489] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.021786][ T489] futex_wake_op: syz.3.64 tries to shift op by 144; fix this program [ 28.021837][ T490] F2FS-fs (loop1): invalid crc value [ 28.030019][ T489] futex_wake_op: syz.3.64 tries to shift op by 144; fix this program [ 28.045609][ T489] EXT4-fs warning (device loop3): ext4_group_extend:1894: will only finish group (8193 blocks, 8129 new) [ 28.057386][ T489] EXT4-fs warning (device loop3): ext4_group_extend:1899: can't read last block, resize aborted [ 28.074707][ T288] EXT4-fs (loop3): unmounting filesystem. [ 28.082069][ T490] F2FS-fs (loop1): Found nat_bits in checkpoint [ 28.164447][ T506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 28.173307][ T490] F2FS-fs (loop1): Start checkpoint disabled! [ 28.181610][ T490] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 28.193576][ T490] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 28.260631][ T490] syz.1.65: attempt to access beyond end of device [ 28.260631][ T490] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 28.349177][ T43] kworker/u4:2: attempt to access beyond end of device [ 28.349177][ T43] loop1: rw=1, sector=77880, nr_sectors = 8 limit=40427 [ 28.386941][ T43] kworker/u4:2: attempt to access beyond end of device [ 28.386941][ T43] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 28.466459][ T530] 9pnet: p9_errstr2errno: server reported unknown error õ€ÿ0xffffffffffffffff [ 28.536916][ T534] ext4: Unknown parameter 'uid>00000000000000000000' [ 28.557783][ T537] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 28.637776][ T550] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 28.645153][ T537] EXT4-fs error (device loop1): ext4_check_all_de:666: inode #12: block 5: comm syz.1.76: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=124 fake=0 [ 28.668597][ T537] EXT4-fs (loop1): Remounting filesystem read-only [ 28.732830][ T559] exfat: Bad value for 'uid' [ 28.743662][ T287] EXT4-fs (loop1): unmounting filesystem. [ 29.141924][ T588] incfs: ino conflict with backing FS 1 [ 29.154919][ T287] FAT-fs (loop1): error, invalid access to FAT (entry 0xffff0000) [ 29.162966][ T287] FAT-fs (loop1): Filesystem has been set read-only [ 29.169714][ T287] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 29.178435][ T287] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 29.252212][ T287] syz-executor (287) used greatest stack depth: 21696 bytes left [ 29.484225][ T609] xt_hashlimit: size too large, truncated to 1048576 [ 29.496493][ T612] bridge_slave_1: default FDB implementation only supports local addresses [ 29.578931][ T610] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.586423][ T610] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.594161][ T610] device bridge_slave_0 entered promiscuous mode [ 29.601583][ T610] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.610108][ T610] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.626531][ T610] device bridge_slave_1 entered promiscuous mode [ 29.693693][ T610] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.700770][ T610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.708072][ T610] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.715159][ T610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.743038][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.755968][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.765458][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.775552][ T390] device bridge_slave_1 left promiscuous mode [ 29.781789][ T390] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.799511][ T390] device bridge_slave_0 left promiscuous mode [ 29.809497][ T390] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.828076][ T390] device veth1_macvtap left promiscuous mode [ 29.831296][ T19] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 29.834198][ T390] device veth0_vlan left promiscuous mode [ 29.905231][ T625] set_capacity_and_notify: 9 callbacks suppressed [ 29.905250][ T625] loop3: detected capacity change from 0 to 40427 [ 29.920468][ T625] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 29.927945][ T625] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 29.939485][ T625] F2FS-fs (loop3): Image doesn't support compression [ 29.946420][ T625] F2FS-fs (loop3): Image doesn't support compression [ 29.954262][ T625] F2FS-fs (loop3): invalid crc value [ 29.961017][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.961278][ T625] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 29.969450][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.987281][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.995155][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.999271][ T625] F2FS-fs (loop3): Start checkpoint disabled! [ 30.007054][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.009712][ T625] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 30.016291][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.023837][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.024056][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.041193][ T19] usb 6-1: Using ep0 maxpacket: 32 [ 30.047740][ T625] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 30.057076][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.068303][ T610] device veth0_vlan entered promiscuous mode [ 30.071183][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.075963][ T625] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 30.085790][ T19] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 30.100868][ T610] device veth1_macvtap entered promiscuous mode [ 30.108517][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.116893][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.125561][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.127650][ T625] F2FS-fs (loop3): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 30.135054][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.152655][ T625] syz.3.119: attempt to access beyond end of device [ 30.152655][ T625] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 30.154163][ T19] usb 6-1: config 0 descriptor?? [ 30.173477][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.173743][ T43] kworker/u4:2: attempt to access beyond end of device [ 30.173743][ T43] loop3: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 30.185135][ T19] hub 6-1:0.0: USB hub found [ 30.200380][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.228014][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.251737][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.294656][ T637] loop1: detected capacity change from 0 to 512 [ 30.302029][ T637] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.320676][ T637] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 30.334315][ T637] EXT4-fs (loop1): 1 truncate cleaned up [ 30.340106][ T637] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 30.377707][ T610] EXT4-fs (loop1): unmounting filesystem. [ 30.385555][ T19] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 30.454461][ T651] loop2: detected capacity change from 0 to 256 [ 30.768258][ T672] input: syz1 as /devices/virtual/input/input5 [ 30.774758][ T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.787521][ T19] hid-generic 0003:046D:C31C.0001: unknown main item tag 0x0 [ 30.797429][ T674] loop0: detected capacity change from 0 to 1024 [ 30.807258][ T19] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 30.822231][ T674] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 30.830798][ T674] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.843865][ T674] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.139: lblock 0 mapped to illegal pblock 0 (length 1) [ 30.857259][ T674] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 30.869858][ T674] EXT4-fs (loop0): This should not happen!! Data will be lost [ 30.869858][ T674] [ 30.880746][ T674] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.139: lblock 0 mapped to illegal pblock 0 (length 1) [ 30.894199][ T674] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.139: lblock 0 mapped to illegal pblock 0 (length 1) [ 30.907828][ T674] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.139: lblock 0 mapped to illegal pblock 0 (length 1) [ 30.921383][ T674] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.139: lblock 0 mapped to illegal pblock 0 (length 1) [ 30.935022][ T674] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.139: lblock 0 mapped to illegal pblock 0 (length 1) [ 30.948721][ T678] EXT4-fs error (device loop0): ext4_free_blocks:6220: comm syz.0.139: Freeing blocks not in datazone - block = 0, count = 1 [ 30.966159][ T43] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm kworker/u4:2: lblock 0 mapped to illegal pblock 0 (length 1) [ 30.979941][ T43] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 30.992540][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 31.000199][ T43] EXT4-fs (loop0): This should not happen!! Data will be lost [ 31.000199][ T43] [ 31.010822][ T289] EXT4-fs (loop0): unmounting filesystem. [ 31.011639][ T6] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 31.025110][ T6] usb 3-1: config 0 has no interface number 0 [ 31.031235][ T6] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 31.041258][ T6] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 31.053470][ T6] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 31.062651][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.070637][ T6] usb 3-1: Product: syz [ 31.074836][ T6] usb 3-1: Manufacturer: syz [ 31.079425][ T6] usb 3-1: SerialNumber: syz [ 31.084565][ T6] usb 3-1: config 0 descriptor?? [ 31.089762][ T655] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 31.097075][ T655] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 31.201336][ T60] usb 6-1: USB disconnect, device number 2 [ 31.306523][ T655] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 31.313762][ T655] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 31.521972][ T6] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 32.102584][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 32.102598][ T28] audit: type=1400 audit(1792477400.395:233): avc: denied { create } for pid=681 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.137501][ T28] audit: type=1400 audit(1792477400.415:234): avc: denied { bind } for pid=686 comm="syz.5.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.158955][ T28] audit: type=1400 audit(1792477400.415:235): avc: denied { bind } for pid=681 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.167569][ T691] device-mapper: ioctl: Unable to rename non-existent device, to uuid DUfwˆ™ª»ÌÝîÿ0 [ 32.180762][ T28] audit: type=1400 audit(1792477400.415:236): avc: denied { map } for pid=686 comm="syz.5.143" path="socket:[18020]" dev="sockfs" ino=18020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.217351][ T28] audit: type=1400 audit(1792477400.455:237): avc: denied { read } for pid=690 comm="syz.1.145" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 32.244860][ T28] audit: type=1400 audit(1792477400.455:238): avc: denied { open } for pid=690 comm="syz.1.145" path="/4/dev/mapper/control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 32.269195][ T28] audit: type=1400 audit(1792477400.455:239): avc: denied { ioctl } for pid=690 comm="syz.1.145" path="/4/dev/mapper/control" dev="devtmpfs" ino=266 ioctlcmd=0xfd05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 32.312720][ T28] audit: type=1400 audit(1792477400.605:240): avc: denied { connect } for pid=706 comm="syz.0.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.322982][ T711] input: syz0 as /devices/virtual/input/input6 [ 32.341330][ T6] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 32.371229][ T6] asix: probe of 3-1:0.34 failed with error -71 [ 32.377602][ T28] audit: type=1400 audit(1792477400.605:241): avc: denied { write } for pid=706 comm="syz.0.152" path="socket:[18082]" dev="sockfs" ino=18082 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.406898][ T6] usb 3-1: USB disconnect, device number 2 [ 32.420598][ T28] audit: type=1400 audit(1792477400.635:242): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=630 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.526351][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.659391][ T735] loop3: detected capacity change from 0 to 8192 [ 32.859369][ T743] loop3: detected capacity change from 0 to 40427 [ 32.877063][ T743] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 32.891248][ T743] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 32.904543][ T747] netlink: 160 bytes leftover after parsing attributes in process `syz.5.169'. [ 32.921632][ T743] F2FS-fs (loop3): invalid crc value [ 32.955089][ T743] F2FS-fs (loop3): Found nat_bits in checkpoint [ 33.036109][ T743] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 33.050445][ T743] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 33.175273][ T771] loop5: detected capacity change from 0 to 512 [ 33.196450][ T771] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #17: comm syz.5.177: iget: bogus i_mode (0) [ 33.207969][ T771] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.177: couldn't read orphan inode 17 (err -117) [ 33.220224][ T771] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 33.235301][ T771] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2802: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 33.259797][ T349] EXT4-fs (loop5): unmounting filesystem. [ 33.319672][ T788] loop0: detected capacity change from 0 to 128 [ 33.339135][ T788] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 33.355084][ T788] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 33.363974][ T788] FAT-fs (loop0): Filesystem has been set read-only [ 33.370702][ T788] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 33.379545][ T788] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 33.388850][ T788] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 33.401174][ T19] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 33.413846][ T289] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 33.434241][ T288] syz-executor: attempt to access beyond end of device [ 33.434241][ T288] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 33.467198][ T784] loop5: detected capacity change from 0 to 40427 [ 33.480555][ T784] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 33.489359][ T784] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 33.498280][ T784] F2FS-fs (loop5): Image doesn't support compression [ 33.517506][ T784] F2FS-fs (loop5): Image doesn't support compression [ 33.532600][ T784] F2FS-fs (loop5): invalid crc value [ 33.538672][ T784] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 33.569905][ T784] F2FS-fs (loop5): Start checkpoint disabled! [ 33.576731][ T784] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 33.596004][ T784] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 33.604296][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.617449][ T784] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 33.625105][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.642984][ T19] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 1.00 [ 33.653336][ T800] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 33.661236][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.670103][ T784] F2FS-fs (loop5): f2fs_enable_checkpoint() starts, meta: 0, node: 0, data: 0 [ 33.679923][ T19] usb 3-1: config 0 descriptor?? [ 33.711185][ T784] F2FS-fs (loop5): sync_inode_sb done, dirty_data: 0, 0, skipped write: 0, 0, retry: 3 [ 33.721423][ T784] F2FS-fs (loop5): f2fs_enable_checkpoint() finishes, writeback:37, sync:0 [ 33.827712][ T823] loop3: detected capacity change from 0 to 16 [ 33.834841][ T823] erofs: (device loop3): mounted with root inode @ nid 36. [ 33.906312][ T838] SELinux: failed to load policy [ 33.937883][ T844] process 'syz.3.207' launched './file0' with NULL argv: empty string added [ 33.947321][ T836] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 34.040841][ T857] erofs: (device loop3): mounted with root inode @ nid 36. [ 34.049935][ T857] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 34.059711][ T857] erofs: (device loop3): z_erofs_readahead: readahead error at page 17 @ nid 89 [ 34.069037][ T857] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 34.078793][ T857] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 89 [ 34.088505][ T857] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 34.090059][ T19] wacom 0003:056A:0331.0002: unknown main item tag 0x0 [ 34.097845][ T857] erofs: (device loop3): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 34.105558][ T19] wacom 0003:056A:0331.0002: unknown main item tag 0x0 [ 34.114151][ T857] syz.3.212: attempt to access beyond end of device [ 34.114151][ T857] loop3: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 34.123336][ T19] wacom 0003:056A:0331.0002: unknown main item tag 0x0 [ 34.134843][ T857] syz.3.212: attempt to access beyond end of device [ 34.134843][ T857] loop3: rw=524288, sector=96, nr_sectors = 40 limit=16 [ 34.141650][ T19] wacom 0003:056A:0331.0002: unknown main item tag 0x0 [ 34.155257][ T857] syz.3.212: attempt to access beyond end of device [ 34.155257][ T857] loop3: rw=524288, sector=8, nr_sectors = 80 limit=16 [ 34.162465][ T19] wacom 0003:056A:0331.0002: unknown main item tag 0x0 [ 34.175692][ T858] syz.3.212: attempt to access beyond end of device [ 34.175692][ T858] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 34.182933][ T19] wacom 0003:056A:0331.0002: unknown main item tag 0x0 [ 34.195710][ T858] syz.3.212: attempt to access beyond end of device [ 34.195710][ T858] loop3: rw=0, sector=16, nr_sectors = 8 limit=16 [ 34.202077][ T19] wacom 0003:056A:0331.0002: unknown main item tag 0x0 [ 34.221830][ T19] wacom 0003:056A:0331.0002: unknown main item tag 0x0 [ 34.228715][ T19] wacom 0003:056A:0331.0002: unknown main item tag 0x0 [ 34.236025][ T19] wacom 0003:056A:0331.0002: unknown main item tag 0x0 [ 34.242986][ T19] wacom 0003:056A:0331.0002: unknown main item tag 0x0 [ 34.251876][ T19] wacom 0003:056A:0331.0002: unknown main item tag 0x0 [ 34.258776][ T19] wacom 0003:056A:0331.0002: unknown main item tag 0x0 [ 34.265696][ T19] wacom 0003:056A:0331.0002: unknown main item tag 0x0 [ 34.272885][ T19] wacom 0003:056A:0331.0002: unknown main item tag 0x0 [ 34.280044][ T19] wacom 0003:056A:0331.0002: unknown main item tag 0x0 [ 34.286445][ T862] EXT4-fs warning (device sda1): ext4_group_extend:1870: can't shrink FS - resize aborted [ 34.287424][ T19] wacom 0003:056A:0331.0002: unknown main item tag 0x0 [ 34.304366][ T19] wacom 0003:056A:0331.0002: hidraw0: USB HID v1.10 Device [HID 056a:0331] on usb-dummy_hcd.2-1/input0 [ 34.384950][ T19] usb 3-1: USB disconnect, device number 3 [ 34.443146][ T6] hid-generic 0005:046D:C082.0003: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 34.478876][ T880] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x0612b11d, utbl_chksum : 0xe619d30d) [ 34.488416][ T878] fido_id[878]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 34.542361][ T881] fido_id[881]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 34.860994][ T913] synth uevent: /bus/acpi: unknown uevent action string [ 34.905469][ T918] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 34.947211][ T923] set_capacity_and_notify: 2 callbacks suppressed [ 34.947227][ T923] loop1: detected capacity change from 0 to 256 [ 35.228114][ T948] loop1: detected capacity change from 0 to 8192 [ 35.787375][ T967] loop5: detected capacity change from 0 to 8192 [ 35.867834][ T976] loop0: detected capacity change from 0 to 512 [ 35.885773][ T965] loop1: detected capacity change from 0 to 131072 [ 35.895366][ T978] loop2: detected capacity change from 0 to 512 [ 35.899723][ T965] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945) [ 35.911099][ T965] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 35.920272][ T965] F2FS-fs (loop1): invalid crc value [ 35.926727][ T978] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.939546][ T978] EXT4-fs (loop2): 1 truncate cleaned up [ 35.945404][ T978] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 35.947575][ T965] F2FS-fs (loop1): Found nat_bits in checkpoint [ 35.965500][ T976] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 35.986902][ T291] EXT4-fs (loop2): unmounting filesystem. [ 35.992950][ T976] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.028051][ T965] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 36.037286][ T965] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 36.050283][ T289] EXT4-fs (loop0): unmounting filesystem. [ 36.070427][ T994] netlink: 'syz.2.270': attribute type 1 has an invalid length. [ 36.089471][ T994] netlink: 92 bytes leftover after parsing attributes in process `syz.2.270'. [ 36.141713][ T1001] tipc: Started in network mode [ 36.161092][ T1001] tipc: Node identity 4, cluster identity 4711 [ 36.164674][ T1003] loop2: detected capacity change from 0 to 512 [ 36.171351][ T1001] tipc: Node number set to 4 [ 36.180123][ T1001] tipc: Enabled bearer , priority 0 [ 36.226688][ T1003] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.290026][ T1003] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.372780][ T1008] loop0: detected capacity change from 0 to 40427 [ 36.382195][ T1008] F2FS-fs (loop0): Invalid log blocks per segment (1) [ 36.388985][ T1008] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 36.398710][ T1008] F2FS-fs (loop0): fault_type options not supported [ 36.399741][ T291] EXT4-fs (loop2): unmounting filesystem. [ 36.405658][ T1008] F2FS-fs (loop0): fault_injection options not supported [ 36.441453][ T1008] F2FS-fs (loop0): Image doesn't support compression [ 36.467401][ T1008] F2FS-fs (loop0): invalid crc value [ 36.495913][ T1008] F2FS-fs (loop0): Found nat_bits in checkpoint [ 36.557351][ T1008] F2FS-fs (loop0): Start checkpoint disabled! [ 36.570558][ T1008] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 36.594936][ T1008] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 36.611192][ T1008] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 36.629549][ T1026] input: syz0 as /devices/virtual/input/input10 [ 36.680513][ T1008] syz.0.275: attempt to access beyond end of device [ 36.680513][ T1008] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 36.694698][ T1028] tap0: tun_chr_ioctl cmd 1074025675 [ 36.700004][ T1028] tap0: persist disabled [ 36.725895][ T1028] tap0: tun_chr_ioctl cmd 2147767507 [ 36.742515][ T1028] tap0: tun_chr_ioctl cmd 2148553947 [ 36.758187][ T8] kworker/u4:0: attempt to access beyond end of device [ 36.758187][ T8] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 36.773173][ T1030] ip_tables: iptables: counters copy to user failed while replacing table [ 36.925505][ T1043] loop0: detected capacity change from 0 to 1024 [ 36.930621][ T1045] loop5: detected capacity change from 0 to 512 [ 36.933744][ T1043] EXT4-fs: Ignoring removed bh option [ 36.944348][ T1045] EXT4-fs: Ignoring removed bh option [ 36.949805][ T1045] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.958231][ T1045] EXT4-fs error (device loop5): ext4_iget_extra_inode:4765: inode #15: comm syz.5.288: corrupted in-inode xattr [ 36.973533][ T1045] EXT4-fs (loop5): Remounting filesystem read-only [ 36.980342][ T1045] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.288: couldn't read orphan inode 15 (err -117) [ 36.992777][ T1045] EXT4-fs (loop5): Remounting filesystem read-only [ 37.000796][ T1045] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 37.016487][ T1043] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 37.057089][ T349] EXT4-fs (loop5): unmounting filesystem. [ 37.097769][ T1060] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.108814][ T1065] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 37.120997][ T289] EXT4-fs (loop0): unmounting filesystem. [ 37.146045][ T1060] FAULT_INJECTION: forcing a failure. [ 37.146045][ T1060] name failslab, interval 1, probability 0, space 0, times 0 [ 37.183010][ T308] kworker/u4:3: attempt to access beyond end of device [ 37.183010][ T308] loop5: rw=1, sector=156, nr_sectors = 1 limit=128 [ 37.196110][ T1060] CPU: 1 PID: 1060 Comm: syz.1.295 Not tainted syzkaller #0 [ 37.203606][ T1060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 37.212246][ T308] Buffer I/O error on dev loop5, logical block 156, lost async page write [ 37.213677][ T1060] Call Trace: [ 37.225510][ T1060] [ 37.228452][ T1060] __dump_stack+0x21/0x24 [ 37.232795][ T1060] dump_stack_lvl+0x110/0x170 [ 37.237486][ T1060] ? __cfi_dump_stack_lvl+0x8/0x8 [ 37.242516][ T1060] ? __kasan_slab_free+0x11/0x20 [ 37.243705][ T308] kworker/u4:3: attempt to access beyond end of device [ 37.243705][ T308] loop5: rw=1, sector=157, nr_sectors = 1 limit=128 [ 37.247472][ T1060] dump_stack+0x15/0x24 [ 37.247491][ T1060] should_fail_ex+0x3bf/0x510 [ 37.269552][ T1060] __should_failslab+0xac/0xf0 [ 37.274336][ T1060] should_failslab+0x9/0x20 [ 37.278841][ T1060] slab_pre_alloc_hook+0x30/0x1d0 [ 37.283871][ T1060] kmem_cache_alloc_lru+0x49/0x280 [ 37.288986][ T1060] ? fat_alloc_inode+0x2c/0xc0 [ 37.293749][ T1060] fat_alloc_inode+0x2c/0xc0 [ 37.296714][ T308] Buffer I/O error on dev loop5, logical block 157, lost async page write [ 37.298334][ T1060] ? __cfi_fat_alloc_inode+0x10/0x10 [ 37.298355][ T1060] new_inode_pseudo+0x70/0x1f0 [ 37.316826][ T1060] new_inode+0x28/0x1e0 [ 37.320991][ T1060] fat_build_inode+0x201/0x3d0 [ 37.325765][ T1060] vfat_lookup+0x335/0x590 [ 37.328396][ T308] Buffer I/O error on dev loop5, logical block 158, lost async page write [ 37.330177][ T1060] ? __cfi_vfat_lookup+0x10/0x10 [ 37.343581][ T1060] ? _raw_spin_lock+0x94/0xf0 [ 37.348262][ T1060] ? __cfi__raw_spin_lock+0x10/0x10 [ 37.353461][ T1060] ? __d_alloc+0x4d5/0x6d0 [ 37.357889][ T1060] ? d_alloc+0x1f4/0x260 [ 37.359128][ T308] Buffer I/O error on dev loop5, logical block 159, lost async page write [ 37.362130][ T1060] lookup_one_qstr_excl+0x125/0x270 [ 37.362153][ T1060] filename_create+0x23d/0x440 [ 37.380547][ T1060] ? kern_path_create+0x1b0/0x1b0 [ 37.385590][ T1060] ? __check_object_size+0x45a/0x600 [ 37.390871][ T1060] do_mknodat+0xdb/0x790 [ 37.395110][ T1060] ? getname_flags+0x205/0x510 [ 37.395262][ T308] Buffer I/O error on dev loop5, logical block 160, lost async page write [ 37.399867][ T1060] __x64_sys_mknodat+0xa9/0xc0 [ 37.409302][ T308] Buffer I/O error on dev loop5, logical block 161, lost async page write [ 37.413092][ T1060] x64_sys_call+0x220/0x9a0 [ 37.413116][ T1060] do_syscall_64+0x4c/0xa0 [ 37.421744][ T308] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 37.426064][ T1060] ? clear_bhb_loop+0x30/0x80 [ 37.444114][ T1060] ? clear_bhb_loop+0x30/0x80 [ 37.448793][ T1060] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 37.454675][ T1060] RIP: 0033:0x7f72f039e559 [ 37.459074][ T1060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.478661][ T1060] RSP: 002b:00007f72eedf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 37.487058][ T1060] RAX: ffffffffffffffda RBX: 00007f72f0625fa0 RCX: 00007f72f039e559 [ 37.495011][ T1060] RDX: 0000000000006000 RSI: 0000200000003bc0 RDI: ffffffffffffff9c [ 37.502963][ T1060] RBP: 00007f72f0435ad8 R08: 0000000000000000 R09: 0000000000000000 [ 37.510919][ T1060] R10: 0000000000000702 R11: 0000000000000246 R12: 0000000000000000 [ 37.518871][ T1060] R13: 00007f72f0626038 R14: 00007f72f0625fa0 R15: 00007ffe30c11768 [ 37.526852][ T1060] [ 37.586739][ T610] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 37.604579][ T610] FAT-fs (loop1): Filesystem has been set read-only [ 37.652204][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 37.652217][ T28] audit: type=1400 audit(1792477405.945:290): avc: denied { bind } for pid=1080 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.680044][ T1081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 37.710269][ T1083] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 37.753146][ T289] tipc: Resetting bearer [ 37.770442][ T289] tipc: Disabling bearer [ 37.813284][ T308] tipc: Left network mode [ 37.831691][ T39] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 37.992356][ T28] audit: type=1326 audit(1792477406.285:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1095 comm="syz.1.309" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f039e559 code=0x7ffc0000 [ 38.017227][ T28] audit: type=1326 audit(1792477406.285:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1095 comm="syz.1.309" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f039e559 code=0x7ffc0000 [ 38.042054][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 38.047917][ T28] audit: type=1326 audit(1792477406.285:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1095 comm="syz.1.309" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f039e559 code=0x7ffc0000 [ 38.059162][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.079886][ T28] audit: type=1326 audit(1792477406.285:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1095 comm="syz.1.309" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f039e559 code=0x7ffc0000 [ 38.080920][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.106174][ T39] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 38.112423][ T1091] device bridge_slave_0 entered promiscuous mode [ 38.127337][ T39] usb 6-1: config 0 has no interface number 0 [ 38.133802][ T39] usb 6-1: config 0 interface 184 has no altsetting 0 [ 38.140699][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.140958][ T28] audit: type=1326 audit(1792477406.285:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1095 comm="syz.1.309" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f72f039e559 code=0x7ffc0000 [ 38.173564][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.177179][ T39] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 38.190821][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.192946][ T1091] device bridge_slave_1 entered promiscuous mode [ 38.205185][ T39] usb 6-1: Product: syz [ 38.205202][ T39] usb 6-1: Manufacturer: syz [ 38.205215][ T39] usb 6-1: SerialNumber: syz [ 38.206181][ T28] audit: type=1326 audit(1792477406.285:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1095 comm="syz.1.309" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f039e559 code=0x7ffc0000 [ 38.243752][ T39] usb 6-1: config 0 descriptor?? [ 38.249232][ T28] audit: type=1326 audit(1792477406.285:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1095 comm="syz.1.309" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f039e559 code=0x7ffc0000 [ 38.274074][ T28] audit: type=1326 audit(1792477406.285:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1095 comm="syz.1.309" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f039e559 code=0x7ffc0000 [ 38.299252][ T39] smsc75xx v1.0.0 [ 38.303559][ T28] audit: type=1326 audit(1792477406.285:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1095 comm="syz.1.309" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f039e559 code=0x7ffc0000 [ 38.342506][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.349586][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.356889][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.363929][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.387379][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.395020][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.402532][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.411997][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.420219][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.427270][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.440951][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.449242][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.456305][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.465236][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.474772][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.490469][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.503328][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.511462][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.518930][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.528139][ T1091] device veth0_vlan entered promiscuous mode [ 38.540111][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.548375][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.557882][ T1091] device veth1_macvtap entered promiscuous mode [ 38.567445][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.575191][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.583580][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.592544][ T308] device bridge_slave_1 left promiscuous mode [ 38.598703][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.606406][ T308] device bridge_slave_0 left promiscuous mode [ 38.612717][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.620536][ T308] device veth1_macvtap left promiscuous mode [ 38.626631][ T308] device veth0_vlan left promiscuous mode [ 38.715010][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.723312][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.102785][ T39] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 39.113691][ T39] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 39.123102][ T39] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 39.133907][ T39] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 39.141373][ T19] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 39.143616][ T39] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 39.161332][ T39] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 39.170788][ T39] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 39.183292][ T39] usb 6-1: USB disconnect, device number 3 [ 39.322359][ T19] usb 7-1: config 192 contains an unexpected descriptor of type 0x2, skipping [ 39.331323][ T19] usb 7-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 39.341626][ T19] usb 7-1: config 192 has 0 interfaces, different from the descriptor's value: 1 [ 39.352379][ T19] usb 7-1: New USB device found, idVendor=1d0e, idProduct=9584, bcdDevice=56.ef [ 39.361456][ T19] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.369442][ T19] usb 7-1: Product: syz [ 39.373616][ T19] usb 7-1: Manufacturer: syz [ 39.378205][ T19] usb 7-1: SerialNumber: syz [ 39.586125][ T19] usb 7-1: USB disconnect, device number 2 [ 40.289082][ T1154] set_capacity_and_notify: 4 callbacks suppressed [ 40.289098][ T1154] loop2: detected capacity change from 0 to 128 [ 40.292012][ T1116] Bluetooth: hci0: command 0x1003 tx timeout [ 40.307884][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 40.322152][ T1154] EXT4-fs (loop2): Test dummy encryption mode enabled [ 40.357229][ T1154] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 40.366781][ T1154] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 40.412487][ T291] EXT4-fs (loop2): unmounting filesystem. [ 40.526569][ T1169] loop2: detected capacity change from 0 to 40427 [ 40.553611][ T1169] F2FS-fs (loop2): invalid crc value [ 40.578435][ T1169] F2FS-fs (loop2): Found nat_bits in checkpoint [ 40.628596][ T1169] F2FS-fs (loop2): Start checkpoint disabled! [ 40.636665][ T1169] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 40.659966][ T1169] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 40.702116][ T1169] F2FS-fs (loop2): ino:10, start:0, end:2048, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 40.746444][ T1169] F2FS-fs (loop2): ino:10, start:0, end:8199, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 40.781170][ T390] bio_check_eod: 4 callbacks suppressed [ 40.781183][ T390] kworker/u4:4: attempt to access beyond end of device [ 40.781183][ T390] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 40.907050][ T1180] loop5: detected capacity change from 0 to 40427 [ 40.936152][ T1180] F2FS-fs (loop5): Invalid log blocks per segment (4278190089) [ 40.944168][ T1178] loop3: detected capacity change from 0 to 40427 [ 40.948410][ T1180] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 40.968053][ T1178] F2FS-fs (loop3): invalid crc value [ 40.979278][ T1186] loop2: detected capacity change from 0 to 256 [ 40.986204][ T1180] F2FS-fs (loop5): invalid crc value [ 40.990794][ T1178] F2FS-fs (loop3): Found nat_bits in checkpoint [ 40.998496][ T1186] exfat: Deprecated parameter 'utf8' [ 41.023036][ T1180] F2FS-fs (loop5): Found nat_bits in checkpoint [ 41.038982][ T1186] exfat: Deprecated parameter 'utf8' [ 41.054903][ T1186] exfat: Deprecated parameter 'namecase' [ 41.067171][ T1186] exfat: Deprecated parameter 'namecase' [ 41.086975][ T1186] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf0f4daa6, utbl_chksum : 0xe619d30d) [ 41.113498][ T1178] F2FS-fs (loop3): Start checkpoint disabled! [ 41.124263][ T1180] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 41.130376][ T1178] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 41.139192][ T1180] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 41.146965][ T1178] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 41.187071][ T1201] ip_tables: iptables: counters copy to user failed while replacing table [ 41.202286][ T1202] loop6: detected capacity change from 0 to 1024 [ 41.212463][ T349] syz-executor: attempt to access beyond end of device [ 41.212463][ T349] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 41.229289][ T1202] EXT4-fs: Ignoring removed bh option [ 41.238033][ T1203] ip_tables: iptables: counters copy to user failed while replacing table [ 41.290357][ T1202] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 41.349682][ T1091] EXT4-fs (loop6): unmounting filesystem. [ 41.367978][ T1209] syz.3.339: attempt to access beyond end of device [ 41.367978][ T1209] loop3: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 41.457909][ T1209] syz.3.339: attempt to access beyond end of device [ 41.457909][ T1209] loop3: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 41.525076][ T1209] syz.3.339: attempt to access beyond end of device [ 41.525076][ T1209] loop3: rw=2049, sector=73728, nr_sectors = 184 limit=40427 [ 41.598664][ T1214] syz.1.348 (1214) used greatest stack depth: 21000 bytes left [ 41.751888][ T1218] loop5: detected capacity change from 0 to 40427 [ 41.768138][ T1218] F2FS-fs (loop5): invalid crc value [ 41.791914][ T1218] F2FS-fs (loop5): Found nat_bits in checkpoint [ 41.835547][ T10] kworker/u4:1: attempt to access beyond end of device [ 41.835547][ T10] loop3: rw=1, sector=73912, nr_sectors = 3912 limit=40427 [ 41.854544][ T1218] F2FS-fs (loop5): Start checkpoint disabled! [ 41.869496][ T10] kworker/u4:1: attempt to access beyond end of device [ 41.869496][ T10] loop3: rw=1, sector=81920, nr_sectors = 4096 limit=40427 [ 41.884346][ T1218] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 41.885468][ T10] kworker/u4:1: attempt to access beyond end of device [ 41.885468][ T10] loop3: rw=1, sector=86016, nr_sectors = 8 limit=40427 [ 41.895289][ T1218] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 41.905457][ T10] kworker/u4:1: attempt to access beyond end of device [ 41.905457][ T10] loop3: rw=1, sector=86024, nr_sectors = 8 limit=40427 [ 41.941591][ T10] kworker/u4:1: attempt to access beyond end of device [ 41.941591][ T10] loop3: rw=1, sector=86032, nr_sectors = 8 limit=40427 [ 41.957597][ T1252] loop2: detected capacity change from 0 to 16 [ 41.967096][ T1252] erofs: (device loop2): mounted with root inode @ nid 36. [ 42.008552][ T1218] F2FS-fs (loop5): ino:10, start:0, end:2048, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 42.054742][ T1218] F2FS-fs (loop5): ino:10, start:0, end:8199, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 42.222657][ T1267] input: syz0 as /devices/virtual/input/input11 [ 42.483068][ T1278] loop5: detected capacity change from 0 to 40427 [ 42.510863][ T1278] F2FS-fs (loop5): invalid crc value [ 42.521924][ T1278] F2FS-fs (loop5): Found nat_bits in checkpoint [ 42.531670][ T1289] netlink: 160 bytes leftover after parsing attributes in process `syz.2.376'. [ 42.580052][ T1278] F2FS-fs (loop5): Start checkpoint disabled! [ 42.587292][ T1278] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 42.606651][ T1278] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 42.619572][ T1300] input: syz0 as /devices/virtual/input/input12 [ 42.702432][ T1310] FAULT_INJECTION: forcing a failure. [ 42.702432][ T1310] name failslab, interval 1, probability 0, space 0, times 0 [ 42.731170][ T1310] CPU: 1 PID: 1310 Comm: syz.3.387 Not tainted syzkaller #0 [ 42.738500][ T1310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 42.748567][ T1310] Call Trace: [ 42.751858][ T1310] [ 42.754797][ T1310] __dump_stack+0x21/0x24 [ 42.759141][ T1310] dump_stack_lvl+0x110/0x170 [ 42.763827][ T1310] ? __cfi_dump_stack_lvl+0x8/0x8 [ 42.768867][ T1310] dump_stack+0x15/0x24 [ 42.773032][ T1310] should_fail_ex+0x3bf/0x510 [ 42.777727][ T1310] __should_failslab+0xac/0xf0 [ 42.782508][ T1310] should_failslab+0x9/0x20 [ 42.787021][ T1310] __kmem_cache_alloc_node+0x3d/0x2d0 [ 42.792410][ T1310] ? cgroup_file_open+0x8d/0x2d0 [ 42.797372][ T1310] ? __kasan_check_write+0x14/0x20 [ 42.802495][ T1310] ? cgroup_file_open+0x8d/0x2d0 [ 42.807454][ T1310] kmalloc_trace+0x29/0xb0 [ 42.811883][ T1310] cgroup_file_open+0x8d/0x2d0 [ 42.816679][ T1310] kernfs_fop_open+0x980/0xb80 [ 42.821460][ T1310] do_dentry_open+0x885/0x11f0 [ 42.826243][ T1310] ? __cfi_kernfs_fop_open+0x10/0x10 [ 42.831552][ T1310] vfs_open+0x73/0x80 [ 42.835560][ T1310] path_openat+0x2699/0x2f30 [ 42.840182][ T1310] ? slab_post_alloc_hook+0x4f/0x2d0 [ 42.845485][ T1310] ? kmem_cache_alloc+0x166/0x320 [ 42.850529][ T1310] ? getname_flags+0xba/0x510 [ 42.855228][ T1310] ? do_sys_openat2+0xeb/0x820 [ 42.860024][ T1310] ? do_filp_open+0x420/0x420 [ 42.864727][ T1310] do_filp_open+0x1ee/0x420 [ 42.869255][ T1310] ? __cfi_do_filp_open+0x10/0x10 [ 42.874305][ T1310] ? alloc_fd+0x4c1/0x570 [ 42.878661][ T1310] do_sys_openat2+0x15e/0x820 [ 42.883371][ T1310] ? __se_sys_futex+0x136/0x310 [ 42.888243][ T1310] ? do_sys_open+0xe0/0xe0 [ 42.892683][ T1310] ? __this_cpu_preempt_check+0x13/0x20 [ 42.898252][ T1310] ? xfd_validate_state+0x70/0x150 [ 42.903387][ T1310] __x64_sys_openat+0x136/0x160 [ 42.908263][ T1310] x64_sys_call+0x783/0x9a0 [ 42.912784][ T1310] do_syscall_64+0x4c/0xa0 [ 42.917226][ T1310] ? clear_bhb_loop+0x30/0x80 [ 42.921918][ T1310] ? clear_bhb_loop+0x30/0x80 [ 42.926615][ T1310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 42.932522][ T1310] RIP: 0033:0x7f47c979e559 [ 42.936944][ T1310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.956559][ T1310] RSP: 002b:00007f47ca6f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 42.964995][ T1310] RAX: ffffffffffffffda RBX: 00007f47c9a25fa0 RCX: 00007f47c979e559 [ 42.972981][ T1310] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 42.980964][ T1310] RBP: 00007f47c9835ad8 R08: 0000000000000000 R09: 0000000000000000 [ 42.988953][ T1310] R10: 0000000000000090 R11: 0000000000000246 R12: 0000000000000000 [ 42.996940][ T1310] R13: 00007f47c9a26038 R14: 00007f47c9a25fa0 R15: 00007fff1125a088 [ 43.004929][ T1310] [ 43.148533][ T1328] loop1: detected capacity change from 0 to 8192 [ 43.282313][ T1343] netlink: 'syz.2.402': attribute type 4 has an invalid length. [ 43.304530][ T1343] netlink: 'syz.2.402': attribute type 4 has an invalid length. [ 43.432786][ T1348] EXT4-fs: Ignoring removed nobh option [ 43.456640][ T1348] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.495204][ T1354] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 43.515672][ T1348] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 43.542852][ T1091] EXT4-fs (loop6): unmounting filesystem. [ 43.594103][ T349] EXT4-fs (loop5): unmounting filesystem. [ 43.623534][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 43.623548][ T28] audit: type=1400 audit(1792477411.915:353): avc: denied { mounton } for pid=1367 comm="syz.6.410" path="/21/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 43.628523][ T1372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 43.748516][ T1377] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 43.756476][ T1377] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 43.765407][ T1377] F2FS-fs (loop5): invalid crc value [ 43.772772][ T1377] F2FS-fs (loop5): Found nat_bits in checkpoint [ 43.801478][ T1377] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 43.808619][ T1377] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 43.832273][ T28] audit: type=1400 audit(1792477412.125:354): avc: denied { watch_reads } for pid=1376 comm="syz.5.412" path="/58/file1" dev="loop5" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.458218][ T1391] netlink: 'syz.5.416': attribute type 4 has an invalid length. [ 44.506759][ T1391] netlink: 'syz.5.416': attribute type 4 has an invalid length. [ 44.559937][ T1400] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 44.584317][ T1412] FAULT_INJECTION: forcing a failure. [ 44.584317][ T1412] name failslab, interval 1, probability 0, space 0, times 0 [ 44.597155][ T1412] CPU: 0 PID: 1412 Comm: syz.6.423 Not tainted syzkaller #0 [ 44.597882][ T288] EXT4-fs (loop3): unmounting filesystem. [ 44.604455][ T1412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 44.604474][ T1412] Call Trace: [ 44.604480][ T1412] [ 44.604488][ T1412] __dump_stack+0x21/0x24 [ 44.610713][ T1404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'. [ 44.620256][ T1412] dump_stack_lvl+0x110/0x170 [ 44.620286][ T1412] ? __cfi_dump_stack_lvl+0x8/0x8 [ 44.649217][ T1412] dump_stack+0x15/0x24 [ 44.653386][ T1412] should_fail_ex+0x3bf/0x510 [ 44.658083][ T1412] ? seq_open+0x61/0x130 [ 44.662338][ T1412] __should_failslab+0xac/0xf0 [ 44.667106][ T1412] should_failslab+0x9/0x20 [ 44.671595][ T1412] kmem_cache_alloc+0x3b/0x320 [ 44.676349][ T1412] seq_open+0x61/0x130 [ 44.680407][ T1412] kernfs_fop_open+0x4de/0xb80 [ 44.685159][ T1412] do_dentry_open+0x885/0x11f0 [ 44.689912][ T1412] ? __cfi_kernfs_fop_open+0x10/0x10 [ 44.695188][ T1412] vfs_open+0x73/0x80 [ 44.699192][ T1412] path_openat+0x2699/0x2f30 [ 44.703769][ T1412] ? slab_post_alloc_hook+0x4f/0x2d0 [ 44.709044][ T1412] ? kmem_cache_alloc+0x166/0x320 [ 44.714058][ T1412] ? getname_flags+0xba/0x510 [ 44.718717][ T1412] ? do_sys_openat2+0xeb/0x820 [ 44.723499][ T1412] ? do_filp_open+0x420/0x420 [ 44.728164][ T1412] do_filp_open+0x1ee/0x420 [ 44.732680][ T1412] ? __cfi_do_filp_open+0x10/0x10 [ 44.737696][ T1412] ? alloc_fd+0x4c1/0x570 [ 44.742010][ T1412] do_sys_openat2+0x15e/0x820 [ 44.746687][ T1412] ? __se_sys_futex+0x136/0x310 [ 44.751530][ T1412] ? do_sys_open+0xe0/0xe0 [ 44.755937][ T1412] ? __this_cpu_preempt_check+0x13/0x20 [ 44.761481][ T1412] ? xfd_validate_state+0x70/0x150 [ 44.766583][ T1412] __x64_sys_openat+0x136/0x160 [ 44.771428][ T1412] x64_sys_call+0x783/0x9a0 [ 44.775920][ T1412] do_syscall_64+0x4c/0xa0 [ 44.780318][ T1412] ? clear_bhb_loop+0x30/0x80 [ 44.784983][ T1412] ? clear_bhb_loop+0x30/0x80 [ 44.789644][ T1412] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.795522][ T1412] RIP: 0033:0x7f7ea5d9e559 [ 44.799924][ T1412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.819517][ T1412] RSP: 002b:00007f7ea6c55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 44.827925][ T1412] RAX: ffffffffffffffda RBX: 00007f7ea6025fa0 RCX: 00007f7ea5d9e559 [ 44.835894][ T1412] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 44.843855][ T1412] RBP: 00007f7ea5e35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 44.851815][ T1412] R10: 0000000000000090 R11: 0000000000000246 R12: 0000000000000000 [ 44.859817][ T1412] R13: 00007f7ea6026038 R14: 00007f7ea6025fa0 R15: 00007fffb8c50908 [ 44.867791][ T1412] [ 44.885775][ T1414] EXT4-fs: Ignoring removed nobh option [ 44.897992][ T1414] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.940764][ T1414] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 44.969895][ T288] EXT4-fs (loop3): unmounting filesystem. [ 45.028664][ T1438] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 45.037094][ T1438] EXT4-fs error (device loop5): ext4_iget_extra_inode:4765: inode #15: comm syz.5.436: corrupted in-inode xattr [ 45.049303][ T1438] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.436: couldn't read orphan inode 15 (err -117) [ 45.062837][ T1438] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 45.080866][ T1438] overlayfs: upper fs needs to support d_type. [ 45.087853][ T28] audit: type=1400 audit(1792477413.375:355): avc: denied { unlink } for pid=1437 comm="syz.5.436" name="#d" dev="loop5" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 45.146971][ T349] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 45.179542][ T349] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 45.211387][ T1443] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 45.220048][ T349] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 45.240759][ T1443] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.252011][ T349] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 45.271584][ T1443] fs-verity: sha256 using implementation "sha256-avx2" [ 45.281456][ T349] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 45.308923][ T349] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 45.338310][ T349] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 45.378732][ T349] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 45.408441][ T349] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 45.438820][ T349] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 45.529127][ T1456] overlayfs: failed to clone upperpath [ 45.561290][ T1432] set_capacity_and_notify: 7 callbacks suppressed [ 45.561309][ T1432] loop3: detected capacity change from 0 to 131072 [ 45.585057][ T1432] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 45.596533][ T349] EXT4-fs (loop5): unmounting filesystem. [ 45.620038][ T1432] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 45.651820][ T1432] F2FS-fs (loop3): invalid crc value [ 45.690645][ T1432] F2FS-fs (loop3): Found nat_bits in checkpoint [ 45.777031][ T1432] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 45.788570][ T1432] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 46.029757][ T1481] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.101210][ T1481] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.118878][ T1481] device bridge_slave_0 entered promiscuous mode [ 46.154096][ T1481] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.187084][ T1481] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.194549][ T1443] fs-verity (loop1, inode 13): Error -4 building Merkle tree [ 46.194704][ T1478] loop6: detected capacity change from 0 to 131072 [ 46.211238][ T1478] F2FS-fs (loop6): Segment count (31) mismatch with total segments from devices (0) [ 46.220648][ T1478] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 46.229220][ T1478] F2FS-fs (loop6): invalid crc value [ 46.235158][ T1481] device bridge_slave_1 entered promiscuous mode [ 46.242432][ T308] device bridge_slave_1 left promiscuous mode [ 46.249463][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.257110][ T1478] F2FS-fs (loop6): Found nat_bits in checkpoint [ 46.263616][ T308] device bridge_slave_0 left promiscuous mode [ 46.270800][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.292030][ T1478] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 46.299113][ T1478] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 46.302032][ T308] device veth1_macvtap left promiscuous mode [ 46.345802][ T308] device veth0_vlan left promiscuous mode [ 46.364560][ T610] EXT4-fs (loop1): unmounting filesystem. [ 46.371107][ T1478] F2FS-fs (loop6): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix. [ 46.382186][ T1478] F2FS-fs (loop6): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4 [ 46.421048][ T1503] loop1: detected capacity change from 0 to 256 [ 46.615619][ T1517] loop1: detected capacity change from 0 to 512 [ 46.629291][ T1522] loop6: detected capacity change from 0 to 256 [ 46.638669][ T1522] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.659996][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.672141][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.684378][ T1522] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 46.694094][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.703144][ T1517] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 46.713607][ T1522] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 46.728683][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.740344][ T610] EXT4-fs (loop1): unmounting filesystem. [ 46.747841][ T1522] incfs: ino conflict with backing FS 1 [ 46.753829][ T1195] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.760886][ T1195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.792853][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.801280][ T1091] exFAT-fs (loop6): abnormal access to deleted dentry [ 46.801810][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.818862][ T1195] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.825965][ T1195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.832910][ T1523] loop3: detected capacity change from 0 to 40427 [ 46.834558][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.845042][ T1523] F2FS-fs (loop3): invalid crc value [ 46.866689][ T1523] F2FS-fs (loop3): Found nat_bits in checkpoint [ 46.879936][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.897470][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.922738][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.958536][ T1523] F2FS-fs (loop3): Start checkpoint disabled! [ 46.969098][ T1481] device veth0_vlan entered promiscuous mode [ 46.976014][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.985893][ T1523] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 46.993562][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.004652][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.012215][ T1523] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 47.043460][ T1481] device veth1_macvtap entered promiscuous mode [ 47.062171][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.075853][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.093991][ T1523] bio_check_eod: 4059 callbacks suppressed [ 47.094009][ T1523] syz.3.469: attempt to access beyond end of device [ 47.094009][ T1523] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 47.118289][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.154349][ T1195] kworker/u4:5: attempt to access beyond end of device [ 47.154349][ T1195] loop3: rw=1, sector=77880, nr_sectors = 8 limit=40427 [ 47.168430][ T1195] kworker/u4:5: attempt to access beyond end of device [ 47.168430][ T1195] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 47.224711][ T1539] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.240052][ T1539] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.256813][ T1539] device bridge_slave_0 entered promiscuous mode [ 47.274111][ T1539] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.281467][ T1539] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.289045][ T1539] device bridge_slave_1 entered promiscuous mode [ 47.402476][ T1539] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.409580][ T1539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.416908][ T1539] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.423959][ T1539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.448526][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.456570][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.473225][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.490513][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.499158][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.506228][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.514732][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.523804][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.530861][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.547979][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.556068][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.575438][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.585249][ T308] device bridge_slave_1 left promiscuous mode [ 47.592577][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.601978][ T308] device bridge_slave_0 left promiscuous mode [ 47.608212][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.616811][ T308] device veth1_macvtap left promiscuous mode [ 47.622916][ T308] device veth0_vlan left promiscuous mode [ 47.727223][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.735463][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.743195][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.752766][ T1539] device veth0_vlan entered promiscuous mode [ 47.764445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.774418][ T1539] device veth1_macvtap entered promiscuous mode [ 47.785267][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.795161][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.857075][ T1568] 9pnet: p9_errstr2errno: server reported unknown error õ€ÿ0xffffffffffffffff [ 47.931919][ T1581] bridge_slave_1: default FDB implementation only supports local addresses [ 47.940646][ T1583] loop8: detected capacity change from 0 to 256 [ 47.948665][ T1583] exfat: Bad value for 'uid' [ 48.028073][ T1596] device-mapper: ioctl: Unable to rename non-existent device, to uuid DUfwˆ™ª»ÌÝîÿ0 [ 48.111208][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 48.250060][ T1608] loop7: detected capacity change from 0 to 40427 [ 48.259587][ T1608] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64) [ 48.266928][ T1608] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 48.275235][ T1608] F2FS-fs (loop7): Image doesn't support compression [ 48.282016][ T1608] F2FS-fs (loop7): Image doesn't support compression [ 48.289119][ T1608] F2FS-fs (loop7): invalid crc value [ 48.295530][ T1608] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 48.307181][ T60] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 48.314719][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 48.321009][ T24] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 48.325202][ T1608] F2FS-fs (loop7): Start checkpoint disabled! [ 48.329351][ T24] usb 2-1: config 0 has no interface number 0 [ 48.335664][ T1608] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 48.341512][ T24] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 48.349159][ T1608] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 48.358749][ T24] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 48.365887][ T1608] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 48.378634][ T24] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 48.392399][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.400470][ T24] usb 2-1: Product: syz [ 48.404917][ T24] usb 2-1: Manufacturer: syz [ 48.409591][ T24] usb 2-1: SerialNumber: syz [ 48.411094][ T1608] F2FS-fs (loop7): f2fs_enable_checkpoint() starts, meta: 0, node: 0, data: 0 [ 48.415434][ T24] usb 2-1: config 0 descriptor?? [ 48.428414][ T1556] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 48.435845][ T1556] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 48.461244][ T1608] F2FS-fs (loop7): sync_inode_sb done, dirty_data: 0, 0, skipped write: 0, 0, retry: 3 [ 48.471429][ T1608] F2FS-fs (loop7): f2fs_enable_checkpoint() finishes, writeback:42, sync:0 [ 48.501175][ T60] usb 4-1: Using ep0 maxpacket: 32 [ 48.507480][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.526352][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.550644][ T60] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 48.570825][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.588957][ T60] usb 4-1: config 0 descriptor?? [ 48.601813][ T60] hub 4-1:0.0: USB hub found [ 48.645633][ T1556] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 48.661215][ T1556] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 48.708943][ T1616] overlayfs: failed to clone upperpath [ 48.793757][ T1626] loop7: detected capacity change from 0 to 128 [ 48.803008][ T1626] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 48.812770][ T60] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 48.839179][ T10] kworker/u4:1: attempt to access beyond end of device [ 48.839179][ T10] loop7: rw=1, sector=156, nr_sectors = 1 limit=128 [ 48.854228][ T10] Buffer I/O error on dev loop7, logical block 156, lost async page write [ 48.863036][ T10] kworker/u4:1: attempt to access beyond end of device [ 48.863036][ T10] loop7: rw=1, sector=157, nr_sectors = 1 limit=128 [ 48.876471][ T24] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 48.876628][ T10] Buffer I/O error on dev loop7, logical block 157, lost async page write [ 48.894734][ T10] kworker/u4:1: attempt to access beyond end of device [ 48.894734][ T10] loop7: rw=1, sector=158, nr_sectors = 1 limit=128 [ 48.908584][ T10] Buffer I/O error on dev loop7, logical block 158, lost async page write [ 48.917342][ T10] kworker/u4:1: attempt to access beyond end of device [ 48.917342][ T10] loop7: rw=1, sector=159, nr_sectors = 1 limit=128 [ 48.930781][ T10] Buffer I/O error on dev loop7, logical block 159, lost async page write [ 48.939574][ T10] kworker/u4:1: attempt to access beyond end of device [ 48.939574][ T10] loop7: rw=1, sector=160, nr_sectors = 1 limit=128 [ 48.952942][ T10] Buffer I/O error on dev loop7, logical block 160, lost async page write [ 48.961479][ T10] kworker/u4:1: attempt to access beyond end of device [ 48.961479][ T10] loop7: rw=1, sector=161, nr_sectors = 1 limit=128 [ 48.974855][ T10] Buffer I/O error on dev loop7, logical block 161, lost async page write [ 48.984163][ T10] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 49.007019][ T1629] loop7: detected capacity change from 0 to 2048 [ 49.022938][ T1629] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 49.031550][ T1629] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.215163][ T60] hid-generic 0003:046D:C31C.0004: unknown main item tag 0x0 [ 49.224518][ T60] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 49.262254][ T1634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 49.368047][ T1629] fs-verity (loop7, inode 13): Error -28 writing Merkle tree block 22912 [ 49.376573][ T1629] fs-verity (loop7, inode 13): Error -28 building Merkle tree [ 49.460945][ T1481] EXT4-fs (loop7): unmounting filesystem. [ 49.485703][ T1644] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 49.497686][ T1644] EXT4-fs (loop7): 1 truncate cleaned up [ 49.504244][ T1644] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 49.551878][ T1481] EXT4-fs (loop7): unmounting filesystem. [ 49.621323][ T6] usb 4-1: USB disconnect, device number 2 [ 49.683331][ T24] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 49.711202][ T24] asix: probe of 2-1:0.34 failed with error -71 [ 49.712328][ T1657] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 49.736522][ T24] usb 2-1: USB disconnect, device number 2 [ 49.765070][ T1539] EXT4-fs (loop8): unmounting filesystem. [ 49.801164][ T1653] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 49.808938][ T1653] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 49.835725][ T1660] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 49.851536][ T1653] F2FS-fs (loop7): invalid crc value [ 49.860850][ T28] audit: type=1400 audit(1792477418.145:356): avc: denied { remount } for pid=1648 comm="syz.2.517" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.881439][ T308] kworker/u4:3: attempt to access beyond end of device [ 49.881439][ T308] loop8: rw=1, sector=156, nr_sectors = 1 limit=128 [ 49.895659][ T308] Buffer I/O error on dev loop8, logical block 156, lost async page write [ 49.899335][ T1653] F2FS-fs (loop7): Found nat_bits in checkpoint [ 49.904466][ T308] Buffer I/O error on dev loop8, logical block 157, lost async page write [ 49.929789][ T308] Buffer I/O error on dev loop8, logical block 158, lost async page write [ 49.944297][ T308] Buffer I/O error on dev loop8, logical block 159, lost async page write [ 49.961285][ T308] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 49.982308][ T1653] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 49.989683][ T1653] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 49.994634][ T28] audit: type=1400 audit(1792477418.275:357): avc: denied { create } for pid=1670 comm="syz.2.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.016573][ T28] audit: type=1400 audit(1792477418.305:358): avc: denied { setopt } for pid=1670 comm="syz.2.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.036238][ T28] audit: type=1400 audit(1792477418.305:359): avc: denied { bind } for pid=1670 comm="syz.2.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.184962][ T1698] af_packet: tpacket_rcv: packet too big, clamped from 136 to 4294967286. macoff=82 [ 50.196907][ T28] audit: type=1400 audit(1792477418.485:360): avc: denied { accept } for pid=1700 comm="syz.2.539" path="socket:[23907]" dev="sockfs" ino=23907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.271261][ T1708] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 50.422454][ T28] audit: type=1400 audit(1792477418.715:361): avc: denied { bind } for pid=1730 comm="syz.2.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.447640][ T28] audit: type=1400 audit(1792477418.735:362): avc: denied { name_bind } for pid=1730 comm="syz.2.552" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 50.474964][ T28] audit: type=1400 audit(1792477418.735:363): avc: denied { node_bind } for pid=1730 comm="syz.2.552" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 50.491184][ T1706] F2FS-fs (loop8): Corrupted extension count (64 + 1 > 64) [ 50.505115][ T1706] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 50.513783][ T1706] F2FS-fs (loop8): Image doesn't support compression [ 50.520621][ T1706] F2FS-fs (loop8): Image doesn't support compression [ 50.540761][ T1706] F2FS-fs (loop8): invalid crc value [ 50.546997][ T1706] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 50.579808][ T1706] F2FS-fs (loop8): Start checkpoint disabled! [ 50.590061][ T1706] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 50.597906][ T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 50.626239][ T1706] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 50.638336][ T1706] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 50.744475][ T1706] F2FS-fs (loop8): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 50.778491][ T1757] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 50.787390][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 50.793687][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.817929][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.846403][ T6] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 50.865623][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.887835][ T6] usb 2-1: config 0 descriptor?? [ 50.899244][ T6] hub 2-1:0.0: USB hub found [ 50.966648][ T1764] set_capacity_and_notify: 5 callbacks suppressed [ 50.966666][ T1764] loop7: detected capacity change from 0 to 512 [ 51.033742][ T1764] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #17: comm syz.7.568: iget: bogus i_mode (0) [ 51.060399][ T1764] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.568: couldn't read orphan inode 17 (err -117) [ 51.100115][ T6] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 51.111322][ T1764] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 51.165357][ T1481] EXT4-fs (loop7): unmounting filesystem. [ 51.271230][ T1745] loop3: detected capacity change from 0 to 131072 [ 51.287170][ T1745] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 51.300406][ T1745] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 51.319313][ T1745] F2FS-fs (loop3): invalid crc value [ 51.345099][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.365716][ T1745] F2FS-fs (loop3): Found nat_bits in checkpoint [ 51.384758][ T1781] loop7: detected capacity change from 0 to 128 [ 51.414888][ T1745] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 51.431273][ T1745] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 51.497833][ T28] audit: type=1326 audit(1792477425.783:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1789 comm="syz.2.577" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f3b9e559 code=0x7ffc0000 [ 51.502029][ T6] hid-generic 0003:046D:C31C.0005: unknown main item tag 0x0 [ 51.531674][ T28] audit: type=1326 audit(1792477425.823:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1789 comm="syz.2.577" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f3b9e559 code=0x7ffc0000 [ 51.556482][ T6] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 51.615903][ T1745] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix. [ 51.630958][ T1745] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix. [ 51.671339][ T1786] loop7: detected capacity change from 0 to 40427 [ 51.681835][ T1786] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64) [ 51.689499][ T1786] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 51.698757][ T1786] F2FS-fs (loop7): Image doesn't support compression [ 51.731457][ T1786] F2FS-fs (loop7): Image doesn't support compression [ 51.758900][ T1786] F2FS-fs (loop7): invalid crc value [ 51.765413][ T1786] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 51.795976][ T1786] F2FS-fs (loop7): Start checkpoint disabled! [ 51.802531][ T1786] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 51.821521][ T1786] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 51.828584][ T1786] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 51.867178][ T1800] input: syz0 as /devices/virtual/input/input13 [ 51.916147][ T1786] F2FS-fs (loop7): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 51.923218][ T389] usb 2-1: USB disconnect, device number 3 [ 52.029872][ T1816] loop3: detected capacity change from 0 to 128 [ 52.061857][ T1816] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 52.101265][ T308] bio_check_eod: 12 callbacks suppressed [ 52.101281][ T308] kworker/u4:3: attempt to access beyond end of device [ 52.101281][ T308] loop3: rw=1, sector=156, nr_sectors = 1 limit=128 [ 52.123836][ T1820] loop7: detected capacity change from 0 to 512 [ 52.136871][ T308] kworker/u4:3: attempt to access beyond end of device [ 52.136871][ T308] loop3: rw=1, sector=157, nr_sectors = 1 limit=128 [ 52.152432][ T308] kworker/u4:3: attempt to access beyond end of device [ 52.152432][ T308] loop3: rw=1, sector=158, nr_sectors = 1 limit=128 [ 52.166005][ T308] kworker/u4:3: attempt to access beyond end of device [ 52.166005][ T308] loop3: rw=1, sector=159, nr_sectors = 1 limit=128 [ 52.180135][ T308] kworker/u4:3: attempt to access beyond end of device [ 52.180135][ T308] loop3: rw=1, sector=160, nr_sectors = 1 limit=128 [ 52.193698][ T308] kworker/u4:3: attempt to access beyond end of device [ 52.193698][ T308] loop3: rw=1, sector=161, nr_sectors = 1 limit=128 [ 52.207334][ T308] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 52.217872][ T1820] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 52.231362][ T1820] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.268925][ T1827] loop8: detected capacity change from 0 to 512 [ 52.285456][ T1820] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 52.332044][ T1827] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 52.345091][ T1827] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.371033][ T1481] EXT4-fs (loop7): unmounting filesystem. [ 52.377450][ T1827] EXT4-fs (loop8): shut down requested (0) [ 52.406088][ T1827] EXT4-fs warning (device loop8): ext4_dirblock_csum_verify:406: inode #2: comm syz.8.589: No space for directory leaf checksum. Please run e2fsck -D. [ 52.426905][ T1834] tipc: Started in network mode [ 52.433552][ T1834] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 52.440730][ T1834] tipc: Enabled bearer , priority 0 [ 52.474791][ T1539] EXT4-fs (loop8): unmounting filesystem. [ 52.485589][ T1838] overlayfs: failed to clone lowerpath [ 52.492749][ T1834] tipc: Disabling bearer [ 52.500519][ T1841] loop1: detected capacity change from 0 to 512 [ 52.547686][ T1841] EXT4-fs: Ignoring removed bh option [ 52.567352][ T1832] loop7: detected capacity change from 0 to 40427 [ 52.596779][ T1832] F2FS-fs (loop7): fault_injection options not supported [ 52.611460][ T1832] F2FS-fs (loop7): fault_type options not supported [ 52.612578][ T1841] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 52.633235][ T1832] F2FS-fs (loop7): invalid crc value [ 52.642213][ T1855] loop3: detected capacity change from 0 to 128 [ 52.647980][ T1841] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.651726][ T1832] F2FS-fs (loop7): Found nat_bits in checkpoint [ 52.712506][ T1832] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 52.730044][ T1855] syz.3.602: attempt to access beyond end of device [ 52.730044][ T1855] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 52.754108][ T1832] syz.7.591: attempt to access beyond end of device [ 52.754108][ T1832] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 52.820596][ T1860] EXT4-fs (loop1): unmounting filesystem. [ 52.920558][ T1871] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 52.996877][ T1481] syz-executor: attempt to access beyond end of device [ 52.996877][ T1481] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 53.613587][ T1910] F2FS-fs (loop1): Test dummy encryption mode enabled [ 53.621013][ T1910] F2FS-fs (loop1): invalid crc value [ 53.627750][ T1910] F2FS-fs (loop1): Found nat_bits in checkpoint [ 53.659336][ T1910] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 54.046386][ T1944] syz.8.648: attempt to access beyond end of device [ 54.046386][ T1944] loop8: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 54.254111][ T1973] erofs: (device loop7): mounted with root inode @ nid 36. [ 54.265352][ T1973] erofs: (device loop7): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 54.276215][ T1973] erofs: (device loop7): z_erofs_readahead: readahead error at page 17 @ nid 89 [ 54.285325][ T1973] erofs: (device loop7): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 54.295915][ T1973] erofs: (device loop7): z_erofs_readahead: readahead error at page 16 @ nid 89 [ 54.305058][ T1973] erofs: (device loop7): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 54.314454][ T1973] erofs: (device loop7): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 54.382051][ T1984] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 54.395132][ T1984] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.527953][ T1996] tipc: Started in network mode [ 54.533246][ T1996] tipc: Node identity 4, cluster identity 4711 [ 54.539539][ T1996] tipc: Node number set to 4 [ 54.545531][ T1996] tipc: Enabled bearer , priority 0 [ 54.548684][ T1481] EXT4-fs (loop7): unmounting filesystem. [ 54.703224][ T2006] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 54.712245][ T2006] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.732536][ T1481] EXT4-fs (loop7): unmounting filesystem. [ 55.070960][ T2011] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.112946][ T2011] EXT4-fs (loop3): 1 truncate cleaned up [ 55.118621][ T2011] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 55.182371][ T288] EXT4-fs (loop3): unmounting filesystem. [ 55.221220][ T2014] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 55.228673][ T2014] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 55.237395][ T2014] F2FS-fs (loop1): Image doesn't support compression [ 55.244657][ T2014] F2FS-fs (loop1): Image doesn't support compression [ 55.253081][ T2014] F2FS-fs (loop1): invalid crc value [ 55.259325][ T2014] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 55.290251][ T2014] F2FS-fs (loop1): Start checkpoint disabled! [ 55.296806][ T2014] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 55.304587][ T2014] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 55.311982][ T2014] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 55.330201][ T28] kauditd_printk_skb: 125 callbacks suppressed [ 55.330215][ T28] audit: type=1400 audit(1792477429.613:491): avc: denied { create } for pid=2027 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.366255][ T28] audit: type=1400 audit(1792477429.643:492): avc: denied { bind } for pid=2027 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.397140][ T2014] F2FS-fs (loop1): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 55.410293][ T28] audit: type=1400 audit(1792477429.653:493): avc: denied { node_bind } for pid=2027 comm="syz.2.674" src=52768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 55.432646][ T28] audit: type=1400 audit(1792477429.653:494): avc: denied { name_bind } for pid=2027 comm="syz.2.674" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 55.689109][ T28] audit: type=1400 audit(1792477429.973:495): avc: denied { write } for pid=2053 comm="syz.3.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.712017][ T28] audit: type=1400 audit(1792477429.993:496): avc: denied { read } for pid=2053 comm="syz.3.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.758239][ T2057] EXT4-fs (loop3): Test dummy encryption mode enabled [ 55.772879][ T2057] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.688: inode has both inline data and extents flags [ 55.787420][ T2057] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.688: couldn't read orphan inode 15 (err -117) [ 55.799937][ T2057] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 55.812499][ T2057] EXT4-fs (loop3): shut down requested (0) [ 55.827151][ T288] EXT4-fs (loop3): unmounting filesystem. [ 56.050976][ T2039] set_capacity_and_notify: 9 callbacks suppressed [ 56.050995][ T2039] loop7: detected capacity change from 0 to 131072 [ 56.074458][ T2039] F2FS-fs (loop7): Invalid segment/section count (458783, 24 x 150994945) [ 56.092999][ T2039] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 56.102449][ T2039] F2FS-fs (loop7): invalid crc value [ 56.109048][ T2039] F2FS-fs (loop7): Found nat_bits in checkpoint [ 56.144860][ T2039] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 56.152069][ T2039] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 56.232665][ T2039] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix. [ 56.242320][ T2039] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix. [ 56.326909][ T28] audit: type=1400 audit(1792477430.613:497): avc: denied { write } for pid=2079 comm="syz.8.704" path="socket:[24673]" dev="sockfs" ino=24673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.363202][ T2068] loop3: detected capacity change from 0 to 131072 [ 56.377777][ T2068] F2FS-fs (loop3): Test dummy encryption mode enabled [ 56.408865][ T2068] F2FS-fs (loop3): invalid crc value [ 56.438592][ T28] audit: type=1400 audit(1792477430.723:498): avc: denied { ioctl } for pid=2089 comm="syz.8.697" path="socket:[25673]" dev="sockfs" ino=25673 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.480992][ T2068] F2FS-fs (loop3): Found nat_bits in checkpoint [ 56.501517][ T2099] FAULT_INJECTION: forcing a failure. [ 56.501517][ T2099] name failslab, interval 1, probability 0, space 0, times 0 [ 56.514167][ T2099] CPU: 1 PID: 2099 Comm: syz.1.699 Not tainted syzkaller #0 [ 56.521467][ T2099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 56.531524][ T2099] Call Trace: [ 56.534806][ T2099] [ 56.537740][ T2099] __dump_stack+0x21/0x24 [ 56.542074][ T2099] dump_stack_lvl+0x110/0x170 [ 56.543889][ T28] audit: type=1326 audit(2000000000.000:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2094 comm="syz.8.698" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2dd959e559 code=0x0 [ 56.546759][ T2099] ? __cfi_dump_stack_lvl+0x8/0x8 [ 56.546780][ T2099] ? debug_smp_processor_id+0x17/0x20 [ 56.581114][ T2099] ? get_random_u32+0x309/0x520 [ 56.585984][ T2099] dump_stack+0x15/0x24 [ 56.590142][ T2099] should_fail_ex+0x3bf/0x510 [ 56.594825][ T2099] ? inet_bind_bucket_create+0x2f/0x290 [ 56.600375][ T2099] __should_failslab+0xac/0xf0 [ 56.605147][ T2099] should_failslab+0x9/0x20 [ 56.609657][ T2099] kmem_cache_alloc+0x3b/0x320 [ 56.614433][ T2099] inet_bind_bucket_create+0x2f/0x290 [ 56.619813][ T2099] inet_csk_get_port+0xc41/0x16f0 [ 56.624855][ T2099] ? __cfi_inet_csk_get_port+0x10/0x10 [ 56.630328][ T2099] inet_csk_listen_start+0x130/0x330 [ 56.635625][ T2099] inet_listen+0x2e9/0x6e0 [ 56.640058][ T2099] ? __cfi_inet_listen+0x10/0x10 [ 56.645010][ T2099] ? __fget_files+0x2d1/0x330 [ 56.649696][ T2099] ? security_socket_listen+0x8a/0xb0 [ 56.655085][ T2099] __x64_sys_listen+0x210/0x290 [ 56.659965][ T2099] x64_sys_call+0x1fd/0x9a0 [ 56.664488][ T2099] do_syscall_64+0x4c/0xa0 [ 56.668921][ T2099] ? clear_bhb_loop+0x30/0x80 [ 56.673611][ T2099] ? clear_bhb_loop+0x30/0x80 [ 56.678288][ T2099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 56.684168][ T2099] RIP: 0033:0x7f72f039e559 [ 56.688566][ T2099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.708159][ T2099] RSP: 002b:00007f72eedf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 56.716561][ T2099] RAX: ffffffffffffffda RBX: 00007f72f0625fa0 RCX: 00007f72f039e559 [ 56.724517][ T2099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 56.732471][ T2099] RBP: 00007f72f0435ad8 R08: 0000000000000000 R09: 0000000000000000 [ 56.740429][ T2099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.748387][ T2099] R13: 00007f72f0626038 R14: 00007f72f0625fa0 R15: 00007ffe30c11768 [ 56.756349][ T2099] [ 56.787454][ T2068] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 57.012810][ T2108] loop1: detected capacity change from 0 to 256 [ 57.066816][ T2115] loop3: detected capacity change from 0 to 1024 [ 57.100472][ T2115] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 57.111454][ T2115] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 57.119075][ T2115] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 57.142339][ T288] EXT4-fs (loop3): unmounting filesystem. [ 57.166042][ T2129] loop3: detected capacity change from 0 to 256 [ 57.176942][ T2129] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 57.190945][ T28] audit: type=1400 audit(2000000000.710:500): avc: denied { write } for pid=2128 comm="syz.3.711" name="file1" dev="loop3" ino=1048767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.289998][ T2141] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 57.353127][ T2154] loop3: detected capacity change from 0 to 512 [ 57.365257][ T2154] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 57.370080][ T314] udevd[314]: symlink '../../loop3' '/dev/disk/by-diskseq/253.tmp-b7:3' failed: Read-only file system [ 57.378217][ T2154] EXT4-fs (loop3): invalid journal inode [ 57.390565][ T2154] EXT4-fs (loop3): can't get journal size [ 57.395004][ T314] udevd[314]: symlink '../../loop3' '/dev/disk/by-label/\x86\x5b.tmp-b7:3' failed: Read-only file system [ 57.400551][ T2154] EXT4-fs (loop3): 1 truncate cleaned up [ 57.413788][ T2154] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 57.483276][ T288] EXT4-fs (loop3): unmounting filesystem. [ 57.487875][ T2172] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 57.503109][ T679] udevd[679]: symlink '../../loop3' '/dev/disk/by-diskseq/253.tmp-b7:3' failed: Read-only file system [ 57.530724][ T679] udevd[679]: symlink '../../loop3' '/dev/disk/by-diskseq/253.tmp-b7:3' failed: Read-only file system [ 57.537200][ T2176] loop3: detected capacity change from 0 to 2048 [ 57.557220][ T679] udevd[679]: symlink '../../loop3' '/dev/disk/by-diskseq/255.tmp-b7:3' failed: Read-only file system [ 57.569355][ T679] udevd[679]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 57.569566][ T2176] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 57.591457][ T2176] ext4 filesystem being mounted at /151/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.594409][ T679] udevd[679]: symlink '../../loop3' '/dev/disk/by-diskseq/255.tmp-b7:3' failed: Read-only file system [ 57.634545][ T679] udevd[679]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 57.695213][ T288] EXT4-fs (loop3): unmounting filesystem. [ 57.713487][ T679] udevd[679]: symlink '../../loop3' '/dev/disk/by-diskseq/255.tmp-b7:3' failed: Read-only file system [ 57.744427][ T679] udevd[679]: symlink '../../loop3' '/dev/disk/by-diskseq/255.tmp-b7:3' failed: Read-only file system [ 57.958014][ T2215] FAULT_INJECTION: forcing a failure. [ 57.958014][ T2215] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 58.006557][ T2215] CPU: 1 PID: 2215 Comm: syz.7.749 Not tainted syzkaller #0 [ 58.013884][ T2215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 58.023951][ T2215] Call Trace: [ 58.027218][ T2215] [ 58.030133][ T2215] __dump_stack+0x21/0x24 [ 58.034461][ T2215] dump_stack_lvl+0x110/0x170 [ 58.039126][ T2215] ? __cfi_dump_stack_lvl+0x8/0x8 [ 58.044132][ T2215] ? string+0x283/0x2a0 [ 58.048273][ T2215] dump_stack+0x15/0x24 [ 58.052410][ T2215] should_fail_ex+0x3bf/0x510 [ 58.057079][ T2215] should_fail+0xb/0x10 [ 58.061218][ T2215] should_fail_usercopy+0x1a/0x20 [ 58.066257][ T2215] _copy_to_user+0x1e/0x90 [ 58.070675][ T2215] bpf_verifier_vlog+0x179/0x390 [ 58.075605][ T2215] __btf_verifier_log+0xdf/0x130 [ 58.080531][ T2215] ? stack_trace_save+0xa6/0xf0 [ 58.085367][ T2215] ? btf_check_sec_info+0x350/0x350 [ 58.090554][ T2215] ? btf_sec_info_cmp+0x5f/0x110 [ 58.095485][ T2215] __btf_verifier_log_type+0x505/0x820 [ 58.100936][ T2215] ? btf_int_show+0x28c0/0x28c0 [ 58.105777][ T2215] btf_struct_check_meta+0x48a/0xd90 [ 58.111046][ T2215] ? __cfi_btf_sec_info_cmp+0x10/0x10 [ 58.116409][ T2215] btf_check_all_metas+0x38a/0xad0 [ 58.121512][ T2215] ? __btf_verifier_log+0xdf/0x130 [ 58.126620][ T2215] btf_parse_type_sec+0x101/0x1910 [ 58.131724][ T2215] ? btf_verifier_log+0x2b0/0x2b0 [ 58.136737][ T2215] ? btf_parse_hdr+0x1ee/0x800 [ 58.141487][ T2215] ? btf_parse_hdr+0x61b/0x800 [ 58.146239][ T2215] ? btf_parse_str_sec+0x224/0x2c0 [ 58.151338][ T2215] btf_new_fd+0x429/0x7a0 [ 58.155761][ T2215] bpf_btf_load+0x6f/0x90 [ 58.160094][ T2215] __sys_bpf+0x5d5/0x850 [ 58.164328][ T2215] ? bpf_link_show_fdinfo+0x330/0x330 [ 58.169694][ T2215] ? fpregs_restore_userregs+0x128/0x260 [ 58.175325][ T2215] __x64_sys_bpf+0x7c/0x90 [ 58.179727][ T2215] x64_sys_call+0x488/0x9a0 [ 58.184221][ T2215] do_syscall_64+0x4c/0xa0 [ 58.188623][ T2215] ? clear_bhb_loop+0x30/0x80 [ 58.193286][ T2215] ? clear_bhb_loop+0x30/0x80 [ 58.197951][ T2215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 58.203851][ T2215] RIP: 0033:0x7fb1f259e559 [ 58.208250][ T2215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.227846][ T2215] RSP: 002b:00007fb1f34c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 58.236247][ T2215] RAX: ffffffffffffffda RBX: 00007fb1f2825fa0 RCX: 00007fb1f259e559 [ 58.244202][ T2215] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 58.252160][ T2215] RBP: 00007fb1f2635ad8 R08: 0000000000000000 R09: 0000000000000000 [ 58.260116][ T2215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.268070][ T2215] R13: 00007fb1f2826038 R14: 00007fb1f2825fa0 R15: 00007fff08e3c6f8 [ 58.276032][ T2215] [ 58.484285][ T2239] loop1: detected capacity change from 0 to 512 [ 58.510148][ T2239] EXT4-fs (loop1): Test dummy encryption mode enabled [ 58.529636][ T2239] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.759: inode has both inline data and extents flags [ 58.606810][ T2248] xt_hashlimit: size too large, truncated to 1048576 [ 58.613826][ T2239] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.759: couldn't read orphan inode 15 (err -117) [ 58.664309][ T2239] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 58.708396][ T2239] EXT4-fs (loop1): shut down requested (0) [ 58.931585][ T610] EXT4-fs (loop1): unmounting filesystem. [ 58.990058][ T2252] loop1: detected capacity change from 0 to 512 [ 59.060950][ T2252] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 59.083449][ T2252] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.155670][ T610] EXT4-fs (loop1): unmounting filesystem. [ 59.286684][ T2244] loop8: detected capacity change from 0 to 131072 [ 59.295984][ T2244] F2FS-fs (loop8): Invalid segment/section count (458783, 24 x 150994945) [ 59.307872][ T2244] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 59.320595][ T2244] F2FS-fs (loop8): invalid crc value [ 59.334468][ T2244] F2FS-fs (loop8): Found nat_bits in checkpoint [ 59.392304][ T2244] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 59.412054][ T2244] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 59.479651][ T2270] BEET mode doesn't support inner IPv4 fragments [ 59.526276][ T2281] EXT4-fs: Ignoring removed oldalloc option [ 59.579516][ T2281] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 59.602175][ T2281] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 59.701698][ T2281] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 14 with max blocks 484 with error 28 [ 59.744073][ T2281] EXT4-fs (loop1): This should not happen!! Data will be lost [ 59.744073][ T2281] [ 59.754251][ T2281] EXT4-fs (loop1): Total free blocks count 0 [ 59.760898][ T2281] EXT4-fs (loop1): Free/Dirty block details [ 59.767284][ T2281] EXT4-fs (loop1): free_blocks=4096 [ 59.772891][ T2281] EXT4-fs (loop1): dirty_blocks=512 [ 59.787600][ T2281] EXT4-fs (loop1): Block reservation details [ 59.796502][ T2281] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 59.803754][ T2310] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 59.878245][ T2280] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 60.033276][ T2323] EXT4-fs: Ignoring removed oldalloc option [ 60.092624][ T2323] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 60.149480][ T2323] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 14 with max blocks 484 with error 28 [ 60.162747][ T2332] loop3: p1 p2 < > p4 < p5 > [ 60.167543][ T2332] loop3: p1 start 16777216 is beyond EOD, truncated [ 60.182443][ T2332] loop3: p5 start 16777216 is beyond EOD, truncated [ 60.189466][ T2323] EXT4-fs (loop7): This should not happen!! Data will be lost [ 60.189466][ T2323] [ 60.213973][ T2323] EXT4-fs (loop7): Total free blocks count 0 [ 60.221303][ T2323] EXT4-fs (loop7): Free/Dirty block details [ 60.227593][ T2323] EXT4-fs (loop7): free_blocks=4096 [ 60.233274][ T2323] EXT4-fs (loop7): dirty_blocks=512 [ 60.238716][ T2323] EXT4-fs (loop7): Block reservation details [ 60.245000][ T2323] EXT4-fs (loop7): i_reserved_data_blocks=32 [ 60.261829][ T2345] FAULT_INJECTION: forcing a failure. [ 60.261829][ T2345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.296090][ T2345] CPU: 1 PID: 2345 Comm: syz.8.800 Not tainted syzkaller #0 [ 60.303423][ T2345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 60.303860][ T2321] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 60.313484][ T2345] Call Trace: [ 60.313491][ T2345] [ 60.313498][ T2345] __dump_stack+0x21/0x24 [ 60.313519][ T2345] dump_stack_lvl+0x110/0x170 [ 60.325690][ T2321] EXT4-fs (loop7): This should not happen!! Data will be lost [ 60.325690][ T2321] [ 60.328932][ T2345] ? __cfi_dump_stack_lvl+0x8/0x8 [ 60.355443][ T2345] ? vsnprintf+0x14e/0x1990 [ 60.359957][ T2345] ? memcpy+0x56/0x70 [ 60.363947][ T2345] dump_stack+0x15/0x24 [ 60.368100][ T2345] should_fail_ex+0x3bf/0x510 [ 60.372786][ T2345] should_fail+0xb/0x10 [ 60.376953][ T2345] should_fail_usercopy+0x1a/0x20 [ 60.381981][ T2345] _copy_to_user+0x1e/0x90 [ 60.386395][ T2345] bpf_verifier_vlog+0x179/0x390 [ 60.391345][ T2345] __btf_verifier_log+0xdf/0x130 [ 60.396288][ T2345] ? kasan_save_alloc_info+0x1f/0x30 [ 60.401572][ T2345] ? __kasan_kmalloc+0x95/0xb0 [ 60.406341][ T2345] ? btf_check_sec_info+0x350/0x350 [ 60.411547][ T2345] ? btf_parse_hdr+0x1ee/0x800 [ 60.416317][ T2345] ? memcpy+0x56/0x70 [ 60.420394][ T2345] btf_parse_hdr+0x498/0x800 [ 60.425003][ T2345] btf_new_fd+0x398/0x7a0 [ 60.429358][ T2345] bpf_btf_load+0x6f/0x90 [ 60.433697][ T2345] __sys_bpf+0x5d5/0x850 [ 60.437934][ T2345] ? bpf_link_show_fdinfo+0x330/0x330 [ 60.443299][ T2345] ? fpregs_restore_userregs+0x128/0x260 [ 60.448917][ T2345] __x64_sys_bpf+0x7c/0x90 [ 60.453315][ T2345] x64_sys_call+0x488/0x9a0 [ 60.457808][ T2345] do_syscall_64+0x4c/0xa0 [ 60.462206][ T2345] ? clear_bhb_loop+0x30/0x80 [ 60.466911][ T2345] ? clear_bhb_loop+0x30/0x80 [ 60.471575][ T2345] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.477454][ T2345] RIP: 0033:0x7f2dd959e559 [ 60.481853][ T2345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.501443][ T2345] RSP: 002b:00007f2dda49d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.509843][ T2345] RAX: ffffffffffffffda RBX: 00007f2dd9825fa0 RCX: 00007f2dd959e559 [ 60.517799][ T2345] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 60.525752][ T2345] RBP: 00007f2dd9635ad8 R08: 0000000000000000 R09: 0000000000000000 [ 60.533822][ T2345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.541778][ T2345] R13: 00007f2dd9826038 R14: 00007f2dd9825fa0 R15: 00007ffe1f6e6f48 [ 60.549742][ T2345] [ 60.587272][ T2352] xt_hashlimit: size too large, truncated to 1048576 [ 60.711223][ T39] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 60.781985][ T2359] netlink: 44 bytes leftover after parsing attributes in process `syz.3.816'. [ 60.810351][ T2359] netlink: 43 bytes leftover after parsing attributes in process `syz.3.816'. [ 60.826429][ T2359] netlink: 'syz.3.816': attribute type 6 has an invalid length. [ 60.843662][ T2359] netlink: 'syz.3.816': attribute type 5 has an invalid length. [ 60.851648][ T390] Bluetooth: hci0: Frame reassembly failed (-84) [ 60.859905][ T2359] netlink: 43 bytes leftover after parsing attributes in process `syz.3.816'. [ 60.864855][ T2366] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 60.880654][ T2366] EXT4-fs (loop8): invalid journal inode [ 60.887651][ T2366] EXT4-fs (loop8): can't get journal size [ 60.899262][ T2366] EXT4-fs (loop8): 1 truncate cleaned up [ 60.912238][ T39] usb 2-1: config 1 has an invalid interface number: 113 but max is 0 [ 60.923099][ T2372] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.811: iget: bad i_size value: 38620345925642 [ 60.937890][ T39] usb 2-1: config 1 has no interface number 0 [ 60.939427][ T2372] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.811: couldn't read orphan inode 15 (err -117) [ 60.953393][ T39] usb 2-1: config 1 interface 113 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 60.962603][ T2372] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.811: bg 0: block 5: invalid block bitmap [ 60.968177][ T39] usb 2-1: config 1 interface 113 has no altsetting 0 [ 61.001301][ T39] usb 2-1: New USB device found, idVendor=1b3d, idProduct=01b4, bcdDevice=c6.ae [ 61.014122][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.036871][ T39] ftdi_sio 2-1:1.113: FTDI USB Serial Device converter detected [ 61.044631][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 61.044645][ T28] audit: type=1400 audit(2000000004.560:511): avc: denied { relabelfrom } for pid=2382 comm="syz.3.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 61.072054][ T39] ftdi_sio ttyUSB0: unknown device type: 0xc6ae [ 61.080815][ T28] audit: type=1400 audit(2000000004.560:512): avc: denied { relabelto } for pid=2382 comm="syz.3.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 61.134107][ T2379] set_capacity_and_notify: 7 callbacks suppressed [ 61.134120][ T2379] loop8: detected capacity change from 0 to 40427 [ 61.149916][ T2379] F2FS-fs (loop8): invalid crc value [ 61.156410][ T2379] F2FS-fs (loop8): Found nat_bits in checkpoint [ 61.183468][ T2379] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 61.202166][ T1539] bio_check_eod: 8 callbacks suppressed [ 61.202186][ T1539] syz-executor: attempt to access beyond end of device [ 61.202186][ T1539] loop8: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 61.234130][ T60] usb 2-1: USB disconnect, device number 4 [ 61.240969][ T60] ftdi_sio 2-1:1.113: device disconnected [ 61.340134][ T2407] loop3: detected capacity change from 0 to 1024 [ 61.369710][ T2407] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.406055][ T2416] loop3: detected capacity change from 0 to 1024 [ 61.414054][ T2416] EXT4-fs: Ignoring removed bh option [ 61.546870][ T2421] loop8: detected capacity change from 0 to 2048 [ 61.553942][ T2421] EXT4-fs: Ignoring removed oldalloc option [ 61.580788][ T2421] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 61.614712][ T2421] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 14 with max blocks 500 with error 28 [ 61.627403][ T2421] EXT4-fs (loop8): This should not happen!! Data will be lost [ 61.627403][ T2421] [ 61.637326][ T2421] EXT4-fs (loop8): Total free blocks count 0 [ 61.643537][ T2421] EXT4-fs (loop8): Free/Dirty block details [ 61.649489][ T2421] EXT4-fs (loop8): free_blocks=4096 [ 61.654940][ T2421] EXT4-fs (loop8): dirty_blocks=528 [ 61.660194][ T2421] EXT4-fs (loop8): Block reservation details [ 61.666484][ T2421] EXT4-fs (loop8): i_reserved_data_blocks=33 [ 61.692276][ T2420] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 61.704605][ T2420] EXT4-fs (loop8): This should not happen!! Data will be lost [ 61.704605][ T2420] [ 61.756135][ T2429] FAULT_INJECTION: forcing a failure. [ 61.756135][ T2429] name failslab, interval 1, probability 0, space 0, times 0 [ 61.779208][ T2429] CPU: 1 PID: 2429 Comm: syz.1.832 Not tainted syzkaller #0 [ 61.786538][ T2429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 61.796603][ T2429] Call Trace: [ 61.799899][ T2429] [ 61.802849][ T2429] __dump_stack+0x21/0x24 [ 61.807194][ T2429] dump_stack_lvl+0x110/0x170 [ 61.811886][ T2429] ? __cfi_dump_stack_lvl+0x8/0x8 [ 61.816928][ T2429] dump_stack+0x15/0x24 [ 61.821100][ T2429] should_fail_ex+0x3bf/0x510 [ 61.825801][ T2429] ? security_file_alloc+0x33/0x130 [ 61.831012][ T2429] __should_failslab+0xac/0xf0 [ 61.835799][ T2429] should_failslab+0x9/0x20 [ 61.840323][ T2429] kmem_cache_alloc+0x3b/0x320 [ 61.845108][ T2429] ? __alloc_file+0x28/0x2a0 [ 61.849715][ T2429] security_file_alloc+0x33/0x130 [ 61.854751][ T2429] __alloc_file+0xb5/0x2a0 [ 61.859193][ T2429] alloc_empty_file+0x97/0x180 [ 61.863981][ T2429] alloc_file+0x59/0x600 [ 61.868247][ T2429] ? _raw_spin_unlock+0x4c/0x70 [ 61.873111][ T2429] alloc_file_pseudo+0x180/0x200 [ 61.878071][ T2429] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 61.883551][ T2429] anon_inode_getfd+0xd6/0x1d0 [ 61.888336][ T2429] btf_get_fd_by_id+0x208/0x290 [ 61.893211][ T2429] ? __cfi_btf_get_fd_by_id+0x10/0x10 [ 61.898610][ T2429] ? security_capable+0x99/0xc0 [ 61.903495][ T2429] bpf_btf_get_fd_by_id+0x61/0x90 [ 61.908535][ T2429] __sys_bpf+0x64f/0x850 [ 61.912786][ T2429] ? bpf_link_show_fdinfo+0x330/0x330 [ 61.918178][ T2429] ? fpregs_restore_userregs+0x128/0x260 [ 61.923835][ T2429] __x64_sys_bpf+0x7c/0x90 [ 61.928267][ T2429] x64_sys_call+0x488/0x9a0 [ 61.932789][ T2429] do_syscall_64+0x4c/0xa0 [ 61.937265][ T2429] ? clear_bhb_loop+0x30/0x80 [ 61.941960][ T2429] ? clear_bhb_loop+0x30/0x80 [ 61.946662][ T2429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 61.952578][ T2429] RIP: 0033:0x7f72f039e559 [ 61.957009][ T2429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.976628][ T2429] RSP: 002b:00007f72eedf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 61.985069][ T2429] RAX: ffffffffffffffda RBX: 00007f72f0625fa0 RCX: 00007f72f039e559 [ 61.993150][ T2429] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000013 [ 62.001132][ T2429] RBP: 00007f72f0435ad8 R08: 0000000000000000 R09: 0000000000000000 [ 62.009115][ T2429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.017100][ T2429] R13: 00007f72f0626038 R14: 00007f72f0625fa0 R15: 00007ffe30c11768 [ 62.025089][ T2429] [ 62.031273][ T2427] loop8: detected capacity change from 0 to 8192 [ 62.104796][ T2433] xt_hashlimit: size too large, truncated to 1048576 [ 62.173120][ T2438] loop8: detected capacity change from 0 to 512 [ 62.217492][ T2438] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 62.245830][ T2438] System zones: 1-12 [ 62.259327][ T2438] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.835: missing EA_INODE flag [ 62.301454][ T2438] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.835: error while reading EA inode 12 err=-117 [ 62.335055][ T2438] EXT4-fs (loop8): 1 orphan inode deleted [ 62.425439][ T679] udevd[679]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 62.443275][ T679] udevd[679]: symlink '../../loop8' '/dev/disk/by-diskseq/286.tmp-b7:8' failed: Read-only file system [ 62.460938][ T679] udevd[679]: symlink '../../loop8' '/dev/disk/by-diskseq/286.tmp-b7:8' failed: Read-only file system [ 62.507536][ T679] udevd[679]: symlink '../../loop3' '/dev/disk/by-diskseq/281.tmp-b7:3' failed: Read-only file system [ 62.530887][ T679] udevd[679]: symlink '../../loop3' '/dev/disk/by-diskseq/281.tmp-b7:3' failed: Read-only file system [ 62.543714][ T2464] loop1: detected capacity change from 0 to 2048 [ 62.562618][ T2467] FAULT_INJECTION: forcing a failure. [ 62.562618][ T2467] name failslab, interval 1, probability 0, space 0, times 0 [ 62.585245][ T679] udevd[679]: symlink '../../loop1' '/dev/disk/by-diskseq/289.tmp-b7:1' failed: Read-only file system [ 62.597405][ T2467] CPU: 1 PID: 2467 Comm: syz.8.845 Not tainted syzkaller #0 [ 62.604728][ T2467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 62.607323][ T679] udevd[679]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 62.614790][ T2467] Call Trace: [ 62.614798][ T2467] [ 62.614806][ T2467] __dump_stack+0x21/0x24 [ 62.614828][ T2467] dump_stack_lvl+0x110/0x170 [ 62.614842][ T2467] ? __cfi_dump_stack_lvl+0x8/0x8 [ 62.614858][ T2467] ? __kasan_check_write+0x14/0x20 [ 62.641822][ T2469] overlayfs: failed to clone upperpath [ 62.646298][ T2467] dump_stack+0x15/0x24 [ 62.656890][ T679] udevd[679]: symlink '../../loop1' '/dev/disk/by-diskseq/289.tmp-b7:1' failed: Read-only file system [ 62.660976][ T2467] should_fail_ex+0x3bf/0x510 [ 62.672714][ T679] udevd[679]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 62.676537][ T2467] __should_failslab+0xac/0xf0 [ 62.676567][ T2467] should_failslab+0x9/0x20 [ 62.697051][ T2467] slab_pre_alloc_hook+0x30/0x1d0 [ 62.702075][ T2467] ? expand_files+0xd0/0x6a0 [ 62.706670][ T2467] ? memcpy+0x56/0x70 [ 62.710636][ T2467] kmem_cache_alloc_lru+0x49/0x280 [ 62.715735][ T2467] ? __d_alloc+0x34/0x6d0 [ 62.720051][ T2467] __d_alloc+0x34/0x6d0 [ 62.724224][ T2467] ? _raw_spin_lock+0x94/0xf0 [ 62.728895][ T2467] d_alloc_pseudo+0x1d/0x70 [ 62.733391][ T2467] alloc_file_pseudo+0xe0/0x200 [ 62.738231][ T2467] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 62.743684][ T2467] anon_inode_getfd+0xd6/0x1d0 [ 62.748436][ T2467] btf_get_fd_by_id+0x208/0x290 [ 62.753275][ T2467] ? __cfi_btf_get_fd_by_id+0x10/0x10 [ 62.758635][ T2467] ? security_capable+0x99/0xc0 [ 62.763474][ T2467] bpf_btf_get_fd_by_id+0x61/0x90 [ 62.768488][ T2467] __sys_bpf+0x64f/0x850 [ 62.772716][ T2467] ? bpf_link_show_fdinfo+0x330/0x330 [ 62.778086][ T2467] ? fpregs_restore_userregs+0x128/0x260 [ 62.783717][ T2467] __x64_sys_bpf+0x7c/0x90 [ 62.788123][ T2467] x64_sys_call+0x488/0x9a0 [ 62.792628][ T2467] do_syscall_64+0x4c/0xa0 [ 62.797027][ T2467] ? clear_bhb_loop+0x30/0x80 [ 62.801689][ T2467] ? clear_bhb_loop+0x30/0x80 [ 62.806357][ T2467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.812236][ T2467] RIP: 0033:0x7f2dd959e559 [ 62.816652][ T2467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.836240][ T2467] RSP: 002b:00007f2dda49d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 62.844640][ T2467] RAX: ffffffffffffffda RBX: 00007f2dd9825fa0 RCX: 00007f2dd959e559 [ 62.852596][ T2467] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000013 [ 62.860561][ T2467] RBP: 00007f2dd9635ad8 R08: 0000000000000000 R09: 0000000000000000 [ 62.868514][ T2467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.876466][ T2467] R13: 00007f2dd9826038 R14: 00007f2dd9825fa0 R15: 00007ffe1f6e6f48 [ 62.884425][ T2467] [ 62.891186][ T1156] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 62.891644][ T2464] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.844: bad orphan inode 214 [ 62.982848][ T679] udevd[679]: symlink '../../loop1' '/dev/disk/by-diskseq/289.tmp-b7:1' failed: Read-only file system [ 62.989030][ T2484] loop1: detected capacity change from 0 to 512 [ 63.009723][ T2484] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 63.052883][ T2484] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.146490][ T2509] loop8: detected capacity change from 0 to 2048 [ 63.201159][ T24] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 63.239140][ T2528] loop3: detected capacity change from 0 to 128 [ 63.299943][ T2534] EXT4-fs mount: 20 callbacks suppressed [ 63.299962][ T2534] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 63.364461][ T2542] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2542 comm=syz.3.875 [ 63.392241][ T24] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 63.413409][ T24] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.453796][ T24] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.512216][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 63.539314][ T24] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 63.566661][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.585762][ T24] usb 8-1: config 0 descriptor?? [ 63.662793][ T2564] 9pnet: p9_errstr2errno: server reported unknown error õ€ÿ0xffffffffffffffff00000000000000000000004 [ 64.010130][ T24] input: HID 17ef:6047 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:17EF:6047.0006/input/input14 [ 64.093947][ T24] lenovo 0003:17EF:6047.0006: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.7-1/input0 [ 64.116716][ T28] audit: type=1400 audit(2000000007.640:513): avc: denied { rename } for pid=2533 comm="syz.1.872" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 64.181589][ T610] EXT4-fs (loop1): unmounting filesystem. [ 64.224291][ T24] usb 8-1: USB disconnect, device number 2 [ 64.231400][ T28] audit: type=1400 audit(2000000007.640:514): avc: denied { rename } for pid=2533 comm="syz.1.872" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.328022][ T2600] tipc: Cannot configure node identity twice [ 64.335279][ T2600] tipc: Enabled bearer , priority 0 [ 64.407649][ T2609] user requested TSC rate below hardware speed [ 64.451982][ T2616] FAT-fs (loop1): bogus number of reserved sectors [ 64.458685][ T2616] FAT-fs (loop1): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 64.470751][ T2616] FAT-fs (loop1): Can't find a valid FAT filesystem [ 64.953105][ T28] audit: type=1400 audit(2000000008.480:515): avc: denied { getopt } for pid=2668 comm="syz.1.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.984913][ T2677] netlink: 'syz.7.933': attribute type 1 has an invalid length. [ 64.992253][ T28] audit: type=1400 audit(2000000008.510:516): avc: denied { ioctl } for pid=2670 comm="syz.2.931" path="socket:[25595]" dev="sockfs" ino=25595 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.992801][ T2677] netlink: 'syz.7.933': attribute type 2 has an invalid length. [ 65.026178][ T2677] netlink: 244 bytes leftover after parsing attributes in process `syz.7.933'. [ 65.045702][ T2678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.932'. [ 65.078908][ T28] audit: type=1400 audit(2000000008.600:517): avc: denied { mount } for pid=2690 comm="syz.8.938" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.101283][ T2689] erofs: (device loop1): mounted with root inode @ nid 36. [ 65.107289][ T28] audit: type=1400 audit(2000000008.630:518): avc: denied { unmount } for pid=1539 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.131406][ T2689] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 65.159814][ T2695] ip_tables: iptables: counters copy to user failed while replacing table [ 65.172953][ T2674] ================================================================== [ 65.181049][ T2674] BUG: KASAN: use-after-free in rcu_segcblist_enqueue+0x9c/0xb0 [ 65.188692][ T2674] Write of size 8 at addr ffff88811aa15990 by task syz.2.931/2674 [ 65.196497][ T2674] [ 65.198820][ T2674] CPU: 0 PID: 2674 Comm: syz.2.931 Not tainted syzkaller #0 [ 65.206105][ T2674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 65.216160][ T2674] Call Trace: [ 65.219438][ T2674] [ 65.222368][ T2674] __dump_stack+0x21/0x24 [ 65.226699][ T2674] dump_stack_lvl+0x110/0x170 [ 65.231378][ T2674] ? __cfi_dump_stack_lvl+0x8/0x8 [ 65.231462][ T2689] syz.1.939: attempt to access beyond end of device [ 65.231462][ T2689] loop1: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 65.236400][ T2674] ? rcu_segcblist_enqueue+0x9c/0xb0 [ 65.255802][ T2674] print_address_description+0x71/0x200 [ 65.261376][ T2674] print_report+0x4a/0x60 [ 65.265728][ T2674] kasan_report+0x122/0x150 [ 65.270249][ T2674] ? rcu_segcblist_enqueue+0x9c/0xb0 [ 65.275547][ T2674] __asan_report_store8_noabort+0x17/0x20 [ 65.281273][ T2674] rcu_segcblist_enqueue+0x9c/0xb0 [ 65.286396][ T2674] call_rcu+0x554/0xf50 [ 65.290561][ T2674] ? __cfi_call_rcu+0x10/0x10 [ 65.295247][ T2674] ? __kasan_check_write+0x14/0x20 [ 65.300372][ T2674] ? selinux_inode_free_security+0x21f/0x230 [ 65.306370][ T2674] security_inode_free+0xc5/0xe0 [ 65.311325][ T2674] __destroy_inode+0x175/0x500 [ 65.316102][ T2674] evict+0x777/0x8c0 [ 65.320010][ T2674] ? proc_nr_inodes+0x2f0/0x2f0 [ 65.324865][ T2674] ? _raw_spin_lock+0x94/0xf0 [ 65.329543][ T2674] ? __cfi__raw_spin_lock+0x10/0x10 [ 65.334743][ T2674] ? __kasan_check_write+0x14/0x20 [ 65.339859][ T2674] iput+0x633/0x690 [ 65.343672][ T2674] dentry_unlink_inode+0x346/0x3f0 [ 65.348787][ T2674] __dentry_kill+0x46c/0x680 [ 65.353386][ T2674] dentry_kill+0xc0/0x2a0 [ 65.357725][ T2674] dput+0x42/0x80 [ 65.361368][ T2674] __fput+0x5c0/0x8f0 [ 65.365361][ T2674] ____fput+0x15/0x20 [ 65.369346][ T2674] task_work_run+0x1e1/0x250 [ 65.373944][ T2674] ? __cfi_task_work_run+0x10/0x10 [ 65.379057][ T2674] ? free_nsproxy+0x21f/0x270 [ 65.383742][ T2674] do_exit+0xb0d/0x29f0 [ 65.387911][ T2674] ? __cfi_do_exit+0x10/0x10 [ 65.392514][ T2674] ? xfd_validate_state+0x70/0x150 [ 65.397640][ T2674] ? __kasan_check_write+0x14/0x20 [ 65.402760][ T2674] __x64_sys_exit+0x40/0x40 [ 65.407272][ T2674] x64_sys_call+0x67/0x9a0 [ 65.411690][ T2674] do_syscall_64+0x4c/0xa0 [ 65.416110][ T2674] ? clear_bhb_loop+0x30/0x80 [ 65.420788][ T2674] ? clear_bhb_loop+0x30/0x80 [ 65.425466][ T2674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.431366][ T2674] RIP: 0033:0x7f42f3b9e559 [ 65.435783][ T2674] Code: Unable to access opcode bytes at 0x7f42f3b9e52f. [ 65.442801][ T2674] RSP: 002b:00007f42f4ae6ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 65.451219][ T2674] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f42f3b9e559 [ 65.459195][ T2674] RDX: 00007f42f4ae79c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.459323][ T2624] overlayfs: statfs failed on './file0' [ 65.467166][ T2674] RBP: 00007f42f3c35ad8 R08: 0000000000000000 R09: 0000000000000058 [ 65.467184][ T2674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.467193][ T2674] R13: 00007f42f3e26038 R14: 00007f42f3e25fa0 R15: 00007ffeabc0bf08 [ 65.467207][ T2674] [ 65.467214][ T2674] [ 65.467217][ T2674] Allocated by task 2671: [ 65.467225][ T2674] kasan_set_track+0x4b/0x70 [ 65.510807][ T2674] kasan_save_alloc_info+0x1f/0x30 [ 65.515922][ T2674] __kasan_kmalloc+0x95/0xb0 [ 65.520512][ T2674] __kmalloc+0xb4/0x1e0 [ 65.524668][ T2674] l2tp_session_create+0x38/0xbd0 [ 65.529691][ T2674] pppol2tp_connect+0xbf5/0x1640 [ 65.534624][ T2674] __sys_connect+0x3da/0x460 [ 65.539203][ T2674] __x64_sys_connect+0x7a/0x90 [ 65.543947][ T2674] x64_sys_call+0x88d/0x9a0 [ 65.548432][ T2674] do_syscall_64+0x4c/0xa0 [ 65.552827][ T2674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.558704][ T2674] [ 65.561005][ T2674] Freed by task 1195: [ 65.564958][ T2674] kasan_set_track+0x4b/0x70 [ 65.569530][ T2674] kasan_save_free_info+0x2b/0x40 [ 65.574536][ T2674] ____kasan_slab_free+0x132/0x180 [ 65.579635][ T2674] __kasan_slab_free+0x11/0x20 [ 65.584384][ T2674] slab_free_freelist_hook+0xc2/0x190 [ 65.589734][ T2674] __kmem_cache_free+0xb7/0x1b0 [ 65.594570][ T2674] kfree+0x6f/0xf0 [ 65.598271][ T2674] l2tp_session_put+0xaf/0x1a0 [ 65.603016][ T2674] l2tp_session_delete+0x3df/0x4d0 [ 65.608112][ T2674] l2tp_tunnel_del_work+0x199/0x410 [ 65.613289][ T2674] process_one_work+0x717/0xc30 [ 65.618119][ T2674] worker_thread+0xa4d/0x11d0 [ 65.622775][ T2674] kthread+0x281/0x320 [ 65.626824][ T2674] ret_from_fork+0x1f/0x30 [ 65.631225][ T2674] [ 65.633533][ T2674] Last potentially related work creation: [ 65.639225][ T2674] kasan_save_stack+0x3a/0x60 [ 65.643883][ T2674] __kasan_record_aux_stack+0xb6/0xc0 [ 65.649234][ T2674] kasan_record_aux_stack_noalloc+0xb/0x10 [ 65.655017][ T2674] call_rcu+0xcf/0xf50 [ 65.659071][ T2674] pppol2tp_release+0x1e3/0x2b0 [ 65.663906][ T2674] sock_close+0xc9/0x220 [ 65.668128][ T2674] __fput+0x1fd/0x8f0 [ 65.672091][ T2674] ____fput+0x15/0x20 [ 65.676057][ T2674] task_work_run+0x1e1/0x250 [ 65.680626][ T2674] do_exit+0xb0d/0x29f0 [ 65.684763][ T2674] __cfi___ia32_sys_exit+0x0/0x10 [ 65.689773][ T2674] x64_sys_call+0x67/0x9a0 [ 65.694167][ T2674] do_syscall_64+0x4c/0xa0 [ 65.698562][ T2674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.704436][ T2674] [ 65.706738][ T2674] The buggy address belongs to the object at ffff88811aa15800 [ 65.706738][ T2674] which belongs to the cache kmalloc-512 of size 512 [ 65.720768][ T2674] The buggy address is located 400 bytes inside of [ 65.720768][ T2674] 512-byte region [ffff88811aa15800, ffff88811aa15a00) [ 65.734023][ T2674] [ 65.736334][ T2674] The buggy address belongs to the physical page: [ 65.742719][ T2674] page:ffffea00046a8500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11aa14 [ 65.752934][ T2674] head:ffffea00046a8500 order:2 compound_mapcount:0 compound_pincount:0 [ 65.761241][ T2674] flags: 0x4000000000010200(slab|head|zone=1) [ 65.767307][ T2674] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00 [ 65.775878][ T2674] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 65.784435][ T2674] page dumped because: kasan: bad access detected [ 65.790854][ T2674] page_owner tracks the page as allocated [ 65.796545][ T2674] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2654, tgid 2652 (syz.1.923), ts 64820144055, free_ts 64814762411 [ 65.819010][ T2674] post_alloc_hook+0x1f5/0x210 [ 65.823761][ T2674] prep_new_page+0x1c/0x110 [ 65.828247][ T2674] get_page_from_freelist+0x2ca9/0x2d20 [ 65.833775][ T2674] __alloc_pages+0x1fa/0x610 [ 65.838347][ T2674] alloc_slab_page+0x6e/0xf0 [ 65.842919][ T2674] new_slab+0x98/0x3e0 [ 65.846968][ T2674] ___slab_alloc+0x70f/0xb70 [ 65.851541][ T2674] __slab_alloc+0x5e/0xa0 [ 65.855846][ T2674] __kmem_cache_alloc_node+0x204/0x2d0 [ 65.861285][ T2674] __kmalloc_node+0xa2/0x1e0 [ 65.865862][ T2674] kvmalloc_node+0x28a/0x460 [ 65.870431][ T2674] bpf_test_run_xdp_live+0x1da/0x1b00 [ 65.875782][ T2674] bpf_prog_test_run_xdp+0x757/0xf80 [ 65.881049][ T2674] bpf_prog_test_run+0x3b4/0x5c0 [ 65.885967][ T2674] __sys_bpf+0x5ee/0x850 [ 65.890188][ T2674] __x64_sys_bpf+0x7c/0x90 [ 65.894582][ T2674] page last free stack trace: [ 65.899247][ T2674] free_unref_page_prepare+0x81b/0x820 [ 65.904690][ T2674] free_unref_page+0x93/0x530 [ 65.909349][ T2674] __free_pages+0x67/0x100 [ 65.913747][ T2674] free_large_kmalloc+0xae/0xf0 [ 65.918575][ T2674] kfree+0x8b/0xf0 [ 65.922278][ T2674] kvfree+0x35/0x40 [ 65.926068][ T2674] bpf_check+0xd733/0x10e90 [ 65.930571][ T2674] bpf_prog_load+0x10f4/0x1670 [ 65.935321][ T2674] __sys_bpf+0x57b/0x850 [ 65.939543][ T2674] __x64_sys_bpf+0x7c/0x90 [ 65.943940][ T2674] x64_sys_call+0x488/0x9a0 [ 65.948427][ T2674] do_syscall_64+0x4c/0xa0 [ 65.952821][ T2674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.958697][ T2674] [ 65.961018][ T2674] Memory state around the buggy address: [ 65.966624][ T2674] ffff88811aa15880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.974659][ T2674] ffff88811aa15900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.982694][ T2674] >ffff88811aa15980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.990756][ T2674] ^ [ 65.995324][ T2674] ffff88811aa15a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 66.003366][ T2674] ffff88811aa15a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 66.011417][ T2674] ================================================================== [ 66.019450][ T2674] Disabling lock debugging due to kernel taint [ 66.028287][ T28] audit: type=1400 audit(2000000009.560:519): avc: denied { name_bind } for pid=2694 comm="syz.8.940" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 66.057832][ T6] tipc: Node number set to 43690