last executing test programs: 3m28.067704333s ago: executing program 0 (id=1): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000210029573594c300000000000a0000000000000000000000e25aaac5c4cdab9b32ab16306874b902878e0d34f5b332f41cf15e2ab59a80e4110d53cf5b5cdc70151d8c42e47a91d7a00136a19ad25fc13585c39f30236aa16af6cc8b1ffa37f1fd1e969a6fea810224979dae621b7a44391b106afc390e692e9ef83d0f"], 0x1c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xfff3}, {0x6, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x8000000, 0x2, 0x4}, 0xa4ca, 0x0, 0x2000008, 0x6, 0x0, 0x1b, 0xb, 0xe, 0x3, 0x5, {0x10001, 0x7fff, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x7, 0xa9, 0x1, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc840}, 0x800) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000', @ANYRESDEC=0x0, @ANYBLOB=',gr', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f000000e280)={0x2020}, 0x2020) 3m25.587311666s ago: executing program 0 (id=6): r0 = socket$packet(0x11, 0x3, 0x300) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x4, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x8}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wake_unlock', 0x202, 0x100) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = epoll_create1(0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r3, 0x0, 0x28) r4 = epoll_create1(0x0) r5 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000180)={0x80000002}) close(r2) getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r2, &(0x7f0000000140)={0x77540947ad9a168d}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x80000000000000, 0x3, 0x7, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x10, 0x80000, 0x7fffffff}, 0x0, 0x0) 3m23.424490473s ago: executing program 0 (id=10): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000640)='./file1\x00', 0x4800, &(0x7f0000000240)=ANY=[], 0xfd, 0x11ff, &(0x7f0000000f00)="$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") mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x80000003, 0x372, 0x0, 0x19, "40b80000000000000000001c00"}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r3 = syz_open_pts(r1, 0x0) r4 = dup3(r3, r1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="8560a318000000001800000000000000000000189bb3f5cf8012384aa2646c439ca112ec197ce942738dfd1cb574e1421b4468a1d796f846e657f50267517bba85f556989b2b60b3535603608aa57c9e448931db1455b92f518d395417a0e4f1ae1e237d0efda9fab7d75de621e05947036fc4fbd0d62cfdba19a00004fda29865fea854e5a99d5d72e942b6774b10389f5e833ad5bd7d09e99ce5835bcb4b9cf6da61e7e21a55d26df11339e4a430bc78baba36c7369648487f6eb902bd6e41c5e8dcf4346f0ac1fc19587b5b376c59af5a63147c472a6e3adb0f01dfb42a297130e677205434", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') syz_usb_connect$uac1(0x0, 0xa6, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010003000000406b1d010140000102030109029400030109d0050904000000010100000a240105000902010211240605040502000200030006000200030824070602000fd90c240701050006fee6bc1be9090401000001020000090402010101020000090501ef0f0008260507250104000700090402"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 3m20.767256698s ago: executing program 0 (id=18): syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mount(0x0, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3m20.416108743s ago: executing program 0 (id=20): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) 3m19.361616567s ago: executing program 32 (id=20): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) 15.052726464s ago: executing program 4 (id=474): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") open(&(0x7f0000000300)='.\x02\x00', 0x14927e, 0x44) openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x22020600) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') pread64(r5, &(0x7f0000000380)=""/87, 0x57, 0x80000000000) 13.888292129s ago: executing program 4 (id=480): r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4, {0x2}}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001c80)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, &(0x7f0000000680), {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private1, [0xff, 0x0, 0xffffff00], [0x0, 0xff, 0xffffff00, 0xffff00], 'veth1_to_bond\x00', 'gretap0\x00', {}, {}, 0x73, 0xea, 0x2, 0x3a}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x9, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 13.485102164s ago: executing program 2 (id=481): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) r4 = request_key(&(0x7f0000000b80)='keyring\x00', &(0x7f0000000bc0)={'syz', 0x2}, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000140)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`P3%\xfa\xbf\xef\xeb\x8e1w\xfd') keyctl$get_security(0x11, r5, &(0x7f0000000080)=""/40, 0x28) keyctl$invalidate(0x15, r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) sysinfo(&(0x7f0000000180)=""/90) 12.872053052s ago: executing program 3 (id=484): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r3, &(0x7f0000000500), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) 12.29635859s ago: executing program 2 (id=485): socket(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa0c406, &(0x7f0000000f80)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ee303030303032fd33a1ddfe6717c3d234e02f30303030302c6e6f646f74732cb7f973636172642c6e66733d6e6f73", @ANYRES16, @ANYRES64], 0x1, 0x2a2, &(0x7f0000001140)="$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") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c3a02802c00018014000300fe800000000000000000000000000000140004"], 0x164}}, 0x0) 11.857791895s ago: executing program 1 (id=487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xd, 0x9, 0x4, 0x1, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b00)={r4, &(0x7f0000001a40), 0x0}, 0x20) 11.764430557s ago: executing program 3 (id=488): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x88000, 0x90) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x10de) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000100)={0x0, 0x0}) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@dioread_nolock}]}, 0x1, 0x573, &(0x7f0000000ec0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r4, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x86, 0xc9, 0x5, 0xd, 0x0, 0x3, 0x3, 0x3, 0x36a, 0x40, 0x28d, 0xfffffff7, 0x3, 0x38, 0x1, 0xba, 0x2, 0x20}, [{0x0, 0x8, 0x4, 0x5256bab6, 0x8001, 0x100000001, 0x13d5, 0x5}], "", ['\x00', '\x00', '\x00', '\x00']}, 0x478) fallocate(r4, 0x0, 0x0, 0x8000c62) 9.654157464s ago: executing program 1 (id=490): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) readv(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x0, 0x0}) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.000642793s ago: executing program 4 (id=491): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_tables_targets\x00') pread64(r3, &(0x7f0000000200)=""/162, 0xa2, 0xae) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs, 0x6e) 8.986767963s ago: executing program 3 (id=492): openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x448, 0xffffffff, 0x2a8, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 7.927177966s ago: executing program 3 (id=493): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000680)="e5e3a7a7a15c0a8d8fef1df08d07a337f3ac1a4885e872c84aeb11484303e7485b3257324a0046efc11edd7128f3101be6398914717f4ff29bec00000000d27f6c01bad508b0ff7fbba7c2d59af509f1cef20ba5f70f90fb7b05", &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x56b, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000b40)=""/208, 0x1a, 0xd0, 0x0, 0x1, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x20, 0x0, 0x0, 0x0, 0x10, 0xac, &(0x7f0000000500)=""/172, 0x41100, 0x72, '\x00', 0x0, @netfilter=0x2d, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c80)={0x5, 0xe, 0x2, 0xb200}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000d00)=[{0x0, 0x3, 0xf, 0x5}], 0x10, 0x4658f81, @void, @value}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r4, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 7.925150066s ago: executing program 2 (id=503): bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200005245855db7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.576911761s ago: executing program 5 (id=494): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) 7.576504871s ago: executing program 5 (id=495): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000", @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="00000000800008000000000000"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x8000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000380)) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa04402, &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r2], 0x3, 0x2b4, &(0x7f00000007c0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) writev(0xffffffffffffffff, 0x0, 0x0) 7.576056101s ago: executing program 4 (id=496): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000057c9fbee38b6974ebb42f1f2ac49522de308e5995adca6c7293c93e56b4bd2e8c428c2"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000140)=0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) close_range(r6, 0xffffffffffffffff, 0x0) 7.496175872s ago: executing program 1 (id=497): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_usb_connect(0x5, 0x34, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000ac0)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r4, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) 4.307408034s ago: executing program 3 (id=498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x83, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x20180) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r4, 0x89a3, &(0x7f0000000200)='bridge0\x00') 4.123755756s ago: executing program 5 (id=499): r0 = socket$netlink(0x10, 0x3, 0x8000000004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 4.122980746s ago: executing program 4 (id=500): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000002000000020000000000000000000000000000010500000010000000010000000000000e0100001c00000000006100"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='mm_page_pcpu_drain\x00', r1, 0x0, 0x40}, 0x18) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r2) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000700)={[{@grpid}, {@orlov}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0xc0185879, &(0x7f0000000240)={0x0, 0x1000, 0x2000, 0x2000000, 0x4, 0x0, 0x2401}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 4.081099347s ago: executing program 1 (id=501): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.014086588s ago: executing program 5 (id=502): prlimit64(0x0, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) fgetxattr(r6, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x1, 0x50a, &(0x7f0000000200)="$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") syz_open_procfs$userns(r1, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) 3.938214838s ago: executing program 2 (id=504): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x12, &(0x7f0000001ac0)={0x35, 0x5, 0x1}) r2 = gettid() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000040)=ANY=[], 0x78) close(r5) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000080)={r5, r0}) fsmount(r5, 0x0, 0x75) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 2.704246724s ago: executing program 1 (id=505): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) readv(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x0, 0x0}) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.317202449s ago: executing program 2 (id=506): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000006c0)={0x0, 0x3, 0x6, @local}, 0x10) 759.05112ms ago: executing program 2 (id=507): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x890b, &(0x7f0000000000)=@buf={0x0, &(0x7f0000000240)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 758.39496ms ago: executing program 3 (id=508): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) readv(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x0, 0x0}) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 720.947661ms ago: executing program 4 (id=509): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff85000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsync(0xffffffffffffffff) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x211000, &(0x7f00000026c0)=ANY=[@ANYBLOB="23805308c71ebebc4431750f7be86835bb3bb4b158cd58eed26d37b7148a290cd165cc958ccf029a6f9a01e88b4170d7f0f7c62a97f1ae7dc8a8ed0cbfbe679b46da3f4d9228dfcffcec400f2b37c93011bb47f3d5297c80d22ee658dec8a0a4ad7fcf40fe", @ANYRES16, @ANYRES16=r2, @ANYRES16=r2, @ANYBLOB="75b8fdeeab1654b4fb498e37c662c00e75c506cf39096270875d0a02537f71fccf9c1cafa241d2b464c41eafd3a8e7fcd5e6b56f795512c98d115410085aaf9e962f396d7daff254935d6755d3d089f164a6ae605f14be2c090000007e1700000000ce183beb3290da", @ANYRES64, @ANYRES64=r1, @ANYRESDEC, @ANYRESOCT=r1, @ANYRESHEX=r2, @ANYBLOB="450cefe1e809e19f9aadbc89c99e54816863c56624fb0ef2405c59f85e2e0c02c9668d15a26c6cc47b44d8edc12ef5bf53d6a23c2c31b8ce390b611c97983fb71d3e41f4aa00b8ff770ef0398ec5adc27967a3a9c6d4e3615a80ae", @ANYBLOB="7c91a1f5ee5f6b491836cf8dcd550d1c6cbf4868d50472df80829d2c03b12302a05d55143ee732bf63bf5682b09999009c39894d87055315e37b896ca2bbbc6a4ece4af825ab0132f602c11bae881f0acbc7d21ea1ef89db12950cbd075060ed37940a2886e202c102874596838da198f956a10a1262311e78c8b2bc435f3f3ad8e4cf8ffda9bd099bc7c2a2c9e3847f9772df2c983d555ed1f516f238db0a417d57bb4e52cac216dc54f3115cc0fa170a184db813dffd95aca6bd55979b5869", @ANYRES32, @ANYRES16, @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX, @ANYRESDEC], 0x45, 0x154a, &(0x7f0000001140)="$eJzs3AuYzdX6OPD3XWt9x5jEbpLLsNZ6v+zkskiSXBJySZIkSXJLSJIkCYkht6QhCblOkssQkss0Jo37/ZJ70uRIkyQhIcn6P8r5O+fUOZ1z6vyczryf51nPrHe+e737/e537/lenmf2l91H1G5ap0ZjIoLfBH/6EQMAsQAwBADyAEAAAOXjy8df2J5T7vbe/7anYb+n+1IudwXscuL+Z2/c/+yN+5+9cf//B6l//qHc/+yN+5+9cf+zN+4/Y9nZ1lkFr/rDjXP/BTX87Yi5+IJe7jr+xfF73/9P/If3/zHxN79h2e+Ij///Q7JKT/x0felrevwLS7j/2Rv3P3vj/mdv3P/sjfufvXH///dV/wfbuP/ZG/efsezsct9//q0j+C+o4Q8wYv7etsv9/mOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlj2c8ZcoAPjz/HLXxRhjjDHGGGOMsd+Pz3G5K2CMMcYYY4wxxth/HoIACQoCiIEcEAs5IQ6ugFxwJeSGPBCBqyAeroa8cA3kg/xQAApCAhSCwqDBgAWCEIpAUYjCtVAMroPiUAJKQilwUBrKwPVQFm6AcnAjlIeboALcDBWhElSGKnALVIVboRpUhxpwG9SEWlAb6sDtUBfugHpwJ9SHu6AB3A0N4R5oBPdCY7gPmsD90BQegGbwIDSHFtASWkHrf3k9JDaDZ6E3PAd9oC8kQj/oD8/DABgIg2AwDIEXYCi8CMPgJUiC4TACXoaR8AqMgldhNIyBsfAajIPxMAEmwiSYDMnwOkyBN2AqvAnTYDrMgJmQArNgNrwFc2AuzIO3YT68AwtgISyCxZAK70IaLIF0eA+WwvuQActgOayAlbAKVsMaWAvrYD1sgI2wCTbDFtgKH8A22A47YCfsgt2wBz6EvfAR7IOPIRM++RfXn/6b9T0QEFCgQIUKYzAGYzEW4zAOc2EuzI25MYIRjMd4zIt5MR/mwwJYABMwAQtHAA0aJCQsgkUwilEshsWwOBbHklgSHTosg2WwLN6A5bAclsfyWAErYEWshJWwClbBqlgVq2E1rIE1sCbWxNpYG2/H2/EOrIf1sD7WxwbYABtiQ2yEjbAxNsYm2ASbYlNshs2wOTbHltgSW2NrbINtsC22xfbYHjtgB+yIHbETdsLO2Bm7YBfsil2xG3bD7tgde2BP7InP4rP4HD6HfbGm6If9sT8OwAE4CAfjYHwBh+KL+CK+hEk4HEfgy/gyvoKj8BSOxjE4FsdiVTEeJ+BEJDEZkzEZp+AUnIpTcRpOx+k4E1NwFs7G2TgH5+JcfBvn4zv4Di7EhbgYUzEV03AJpmM6LsXTmIHLcDmuwJW4ClfiGlyLa3A9bsD1uAk34Rbcgh/gB7gdt+NO3Im7cTd+iB/iR/gRJmEmZuJ+3I8H8AAexIOYhVl4CA/hYTyMR/AIHsWjeAyP4wk8jicRL37cz+BZPIvn8OmEz5vsLrEuCcQFSigRI2JErIgVcSJO5BK5RG6RWwGAiBfxIq/IK/KJfKKAKCASRIIoLAoLI4wgEYoiooiIiqgoJoqJ4qK4KClKCiecKCPKiLKirCgnyony4iZRQdwsKopKop2rIqqIqqK9qyaqixqihqgpaonaoo6oI+qKuqKeqCfqi/qigWggGop7RCPRDwfhfeJCZ5qK4dhMjMDmooVoKVqJV/Ah0UaMwrainWgvHhFjcDR2FG1cJ/G46CwmYBfxpJiIT4luYjJ2F8+IHqKn6CWeFb1FW9dH9BXTsJ/oL2biADFQDBKDxRysJS50rLZ4SSSJ4WKEeFksxlfEKPGqGC3GiLHiNTFOjBcTxEQxSUwWyeJ1MUW8IaaKN8U0MV3MEDNFipglZou3xBwxV8wTb4v54h2xQCwUi8RikSreFWliiUgX74ml4n2RIZaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Co+ENvEdrFD7BS7xG6xR3wo9oqPxD7xscgUn4j94k/igPhUHBSfiSzxuTgkvhCHxZfiiPhKHBVfi2PiuDghvhEnxbfilDgtzojvxFnxvTgnfhDnhRcgUQoppZKBjJE5ZKzMKePkFTKXvFLmlnlkRF4l4+XVMq+8RuaT+WUBWVAmyEKysNTSSCtJhrKILCqj8lpZTF4nAUCWlKWkk6VlGXm9LCtvkOXkjbK8vElWkDfLirKSrCyryFtkVXmrrCaryxryNllT1pK1ZR15u6wr75D15J2yvrxLNpB3y4byHtlI3isby/tkE3m/bCofkM3kg7K5bCFbylaytXxItpEPy7aynWwvH5Ed5KOyo3xMdpKPy87yCdlFPim7yqdkN/m07C6fkT1kT9lL/iDPSy/7yL4yUfaT/eXzcoAcKAfJwXKIfEEOlS/KYfIlmSSHyxHyZTlSviJHyVflaDlGjpWvyXFyvJwgJ8pJcrJMlq/LKfINOVW+KafJ6XKGnClT5Cw56GKmef/E+jd+Yf2wH599i9wqP5Db5Ha5Q+6Uu+RuuUfukXvlXrlP7pOZMlPul/vlAXlAHpQHZZbMkofkIXlYHpZH5BF5VB6Vx+Rx+Z38Rp6U38pT8rQ8Lb+TZ+VZee7iawAKlVBSKRWoGJVDxaqcKk5doXKpK1VulUdF1FUqXl2t8qprVD6VXxVQBVWCKqQKK62MsopUqIqooiqqrlXF1HWquCqhSqpSyqnSqoy6/jev/8X6tl48dVF5VGvVWrVRbVRb1Va1V+1VB9VBdVQdVSfVSXVWnVUX1UV1VV1VN9VNdVfdVQ/VQ/VSvVRv1Vv1UX1UokpU/dXzaoAaqAapwWqIekENVUPVMDVMJakkNUKNUCPVSDVKjVKj1Wg1Vo1V49Q4NUFNUJPUJJWsktUUNUVNVVPVNDVNzVAzVIpKUbPVbDVHzVHz1Dw1X81XC9QCtUgtUqkqVaWpNJWu0tVStVRlqGVqmVqhVqhVapVao9aodWqd2qA2qE1qk8pQW9VWtU1tUzvUDrVL7VJ71B61V+1V+9Q+laky1X61Xx1QB9RBdVBlqSx1SB1Sh9VhdUQdUUfVUXVMHVMn1Al1Up1Up9QpdUadUWfVWXVOnVPn1fkLp32BCESgAhXEBDFBbBAbxAVxQa4gV5A7yB1EgkgQH8QHeYNrgnxB/qBAUDBICAoFhQMdmMAGFIRBkaBoEA2uDYoF1wXFgxJByaBU4ILSQZng+qBscENQLrgxDgCCCsHNQcWgUlA5qBLcElQNbg2qBdWDGsFtQc2g1oXDU3B7UDe4I6gX3BnUD+4KGgR3Bw2De4JGwb1B4+C+oElwf9A0eCBoFjwYNA9aBC2DVkHrn/IH5YObfi3/TwfAf5jf+1P5H3Z9dF+dqPvp/vp5PUAP1IP0YD1Ev6CH6hf1MP2STtLD9Qj9sh6pX9Gj9Kt6tB6jx+rX9Dg9Xk/QE/UkPVkn69f1FP2Gnqrf1NP0dD1Dz9Qpepaerd/Sc/RcPU+/refrd/QCvVAv0ot1qn5Xp+klOl2/p5fq93WGXqaX6xV6pV6lV+s1eq1ep9frDXqj3qQ36y16q/5Ab9Pb9Q69U+/Su/Ue/aHeqz/S+/THOlN/ovfrP+kD+lN9UH+ms/Tn+pD+Qh/WX+oj+it9VH+tj+nj+oT+Rp/U3+pT+rQ+o7/TZ/X3+pz+QZ/X/sLJ/YXDu1FGmRgTY2JNrIkzcSaXyWVym9wmYiIm3sSbvCavyWfymQKmgEkwCaawKWwuIEOmiClioiZqipliprgpbkqaksYZZ8qYMqasKWvKmXKmvClvKpgKpqKpaCqbyuYWc4u51dxqqpvq5jZzm6llapk6po6pa+qaeqaeqW/qmwamgWloGppGppFpbBqbJqaJaWqammammWlumpuWpqVpbVqbNqaNaWvamvamvelgOpiOpqPpZDqZzqaz6WK6mK6mq+lmupnuprvpYXqYXqaX6W16mz6mj0k0iaa/6W8GmAFmkBlkhpghZqgZaoaZYSbJJJkRZoQZaUaaUWaUGW3GmLHmNTPOjDcTzEQzyUw2ySbZTDFTzFQz1Uwz08wMM8OkmBQz28w2c8wcM8/MM/PNfLPALDCLzCKTalJNmkkz6SbdLDVLTYbJMMvNcrPSrDSrzWqz1qw16816s9FsNJvNZrPVbDXbzDazw+wwu8wus8fsMXvNXrPP7DOZJtPsN/vNAXPAHDQHTZbJMofMIXPYHDZHzBFz1Bw1x8wxc8KcMCfNSXPKnDJnzBlz1nxvzpkfzHnjTawVEGevsLnslTa3zWNjbU77l3EBW9Am2EK2sNU2n83/V7Gx1ha3JWxJW8o6W9qWsdf/LK5oK9nKtoq9xVa1t9pqP4vr2jtsPXunrW/vsnXs7X8VN7B324b2AdvIPmgb2xa2iW1lm9oHbDP7oG1uW9iWtpXtYB+1He1jtpN93Ha2T/wsTrNL7Fq7zq63G+xe+5E9Y7+zh+2X9qz93vaxfe0Q+4Idal+0w+xLNskO/1k81r5mx9nxdoKdaCfZyT+LZ9iZNsXOsrPtW3aOnfuzONW+a+fbdLvALrSL7OIf4ws1pdv37FL7vs2wy+xyu8KutKvsarvm/9e6wm6ym+0Wu8d+aLfZ7XaH3Wl32d0/xhf2Y5/92GbaT+wh+4U9YD+1B+0Rm2U//zG+sH9H7Ff2qP3aHrPH7Qn7jT1pv7Wn7Okf9//Cvn9jf7DnrbdASIIkKQoohnJQLOWkOLqCctGVlJvyUISuoni6mvLSNZSP8lMBKkgJVIgKkyZDlohCKkJFKUrXUjG6jopTCSpJpchRaSpD11NZuoHK0Y1Unm6iCnQzVaRKVJmq0C1UlW6lalSdatBtVJNqUW2qQ7dTXbqD6tGdVJ/uogZ0NzWke6gR3UuN6T5qQvdTU3qAmtGD1JxaUEtqRa3pIWpDD1Nbakft6RHqQI9SR3qMOtHj1JmeoC70JHWlp6gbPU3d6RnqQT2pFz1Lvek56kN9KZH6UX96ngbQQBpEg2kIvUBD6UUaRi9REg2nEfQyjaRXaBS9SqNpDI2l12gcjacJNJEm0WRKptdpCr1BU+lNmkbTaQbNpBSaRbPpLZpDc2kevU3z6R1aQAtpES2mVHqX0mgJpdN7tJTepwxaRstpBa2kVbSa1tBaWkfraQNtpE20mbbQVvqAttF22kE7aRftpj30Ie2lj2gffUyZ9Antpz/RAfqUDtJnlEWf0yH6gg4roCP0FR2lr+kYHacT9A2dpG/pFJ2mM/QdnaXv6Rz9QOdJnoIQQxHKUIVBGBPmCGPDnGFceEWYK7wyzB3mCSPhVWF8eHWYN7wmzBfmDwuEBcOEsFBYONShCW1IYRgWCYuG0fDasFh4XVg8LBGWDEuFLiwdlgmvD8uGN4TlwhvD8uFNYYXw5rBiWCl84K4q4S1h1fDWsFpYPawR3hbWDGuFtcM64e1h3fCOsF54Z1g/vCssF94dNgzvCRuF94aNw/vCJuH9YdPwgbBZ+GDYPGwRtgxbha3Dh8I24cNh27Bd2D58JOwQPhp2DB8LO4WPh53DJ351e2LYL+wfPh8+H3p/p1wUXRxNjb4bTYsuiaZH34sujb4fzYguiy6ProiujK6Kro6uia6Nrouuj26Iboxuim6Obol6XycHOHTCSadc4GJcDhfrcro4d4XL5a50uV0eF3FXuXh3tcvrrnH5XH5XwBV0Ca6QK+y0M846cqEr4oq6qLvWFXPXueKuhCvpSjnnSrsyrpVr7Vq7Nu5h19a1c+3dI+4R96h71D3mHnOPu87uCdfFPem6uqdcN/e0e9o943q4nq6Xe9b1ds+5Pq6vS3SJrr/r7wa4AW6QG+SGuCFuqBvqhrlhLskluRFuhBvpRrpRbpQb7Ua7sW6sG+fGuQlugpvkJrlkl+ymuCluqpvqprlpboab4VJcipvtZrs5bo6b5+a5+cXnuwVugVvkFrlUl+rSXJpLd+luqVvqMlyGW+6Wu5VupVvtVru1bq1b79a7jW6j2+w2u61uqxOwze1wO9wut8vtcXvcXrfX7XP7XKbLdPvdfnfAHXAH3Wcuy33uDrkv3GH3pTvivnJH3dfumDvuTrhv3En3rTvlTrsz7jt31n3vzrkf3HnnXXLk9ciUyBuRqZE3I9Mi0yMzIjMjKZFZkdmRtyJzInMj8yJvR+ZH3oksiCyMLIosjqRG3o2kRZZE0iPvRZZG3o9kRJZFlkdWRFZGIOJ9oW2hL+KL+qi/1hfz1/nivoQv6Ut550v7Mv56X9bf4Mv5G315f5Ov4G/2FX0lX9k/6Jv7Fr6lb+Vb+4d8G/+wb+vb+fb+Ed/BP+o7+sd8J/+47+yf8F38k76rf8p380/77v4Z38P39L38s763f8738X19ou/n+/vn/QA/0A/yg/0Q/4If6l/0w/xLPskP9yP8y36kf8WP8q/60X6MH+tf8+P8eD/BT/ST/GSf7F/3U/wbfqp/00/z0/0MP9On+Fl+tn/Lz/Fz/Tz/tp/v3/EL/EK/yC/2qf5dn+aX+HT/nl/q3/cZfplf7lf4lX6VX+3X+LV+nV/vN/iNfpPf7Lf4rf4Dv81v9zv8Tr/L7/Z7frqKiwP/sc/0n/j9/k/+gP/UH/Sf+Sz/uT/kv/CH/Zf+iP/KH/Vf+2P+uD/hv/En/bf+lD/tz/jv/Fn/vT/nf/BPH+P/WWOMMcYY+2fIX9ne7xd+Jy6OC/oDwJXbC2b9bc6N+X6aDxQJHSIA8Hjf7vf9edSsmZiYePGxGRKCogsBIHJpfQz8RZzYHh6FTtAOyv5ifQNFz7P0K/mjN104ybwkFi7Fy+DP+W/4O/kfemRsWoXwTPw/yL8QoHjRS2tywqX4Uv5yfyd//ja/Un/OT5MB2v7FmlxwKb6Uvww8DE9Ap796JGOMMcYYY4wx9pOBonLXv77+lL94fZ6gLq3JAT/GP35zwKXrz1++PmeMMcYYY4wxxtjl91TPXo891KlTu65/kEnsxbr/W+r5tyde/leUwZO/M8E/6Afkd5tcxj9KjDHGGGOMsf+ISyf9/8biPP+BghhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsWzo/+LrxC73PjLGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOX2/8LAAD//2m9Iy8=") ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, 0x0, &(0x7f0000000100)=0x7d) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x80000001}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90a491, &(0x7f0000000580)={[{@dax_never}, {@errors_remount}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/kvM\x00w\xb1\xe5\xafC\xe9\x84\x01\x97\x98\x95BR\xedh*\xff\xb9k\xd7L\xd7\'K\x18\x7f:X\x1a\xb1\x7f\\\v\xc1\x02\x86~\x87\xf0F\x96o9\xfe\x91\xcf\xaa/\xe5\x96\xbd2\xb4\x17\x05\xec\x03\xe6j]\xb6sV\x9a\x95k\xe5%O\xe0\x13`\xbd\x8b\x91z\x10\x0fZ%\xf8!\x12\x1e\xba\xa5\x14b\xd7\x18\xd0\xa7\xfeq\xcf\xf1W\x81\xea\xda\xc4@\xbd\x84\x81\xf8\x84\x0f\x99^\x8fb\xe0\xd3}\xcf.I\xfdn\x1a\x1f=\x05\xb1\x81\xc7n\xf3\xc3\xc6\xc9$\x18f.\xc4\x8d\x00\xb1\xa5\xae\x87\x16*\xda\xa7\x1b\b\x94\x88\xda\xb3\x9a\x8e@b\xc6\xd7\x0f\n=\x8bO\xb0\xff+s\xcd~4<^:2\x95\x82\xfdLq\xac\vyi\xb0\xc5\x88\xaf\x97[~\xb9cP\xd1X\x99\f(&\x9bQ\xe6\xfc|\f\x14\v\x18@\xf7\xea\xd7\x1f\xb6\xf7\xfe\xe5\x9c'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/kvm\x00'}}]}, 0xe, 0x52e, &(0x7f0000000a40)="$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") ioctl$KVM_RUN(r4, 0xae80, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26) sendfile(r1, r0, 0x0, 0x7ffff000) 480.771804ms ago: executing program 5 (id=510): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x76, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$bsg(0xffffffffffffff9c, 0x0, 0x131c00, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, 0x0, 0x20008000) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/175, 0x0, 0x1000}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000003c0)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@grpid}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7d3, &(0x7f0000000c80)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000280)={0x30000002}) 223.971456ms ago: executing program 1 (id=511): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r1}, 0xc) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, 0x0, 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) 0s ago: executing program 5 (id=512): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fe, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mincore(&(0x7f0000156000/0xc00000)=nil, 0xc00000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(0x0) setitimer(0x2, 0x0, &(0x7f0000000080)) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x2000003, 0x4000}) kernel console output (not intermixed with test programs): ermissive=1 [ 84.750646][ T885] loop4: detected capacity change from 0 to 512 [ 84.971210][ T30] audit: type=1400 audit(1745950192.941:243): avc: denied { read } for pid=880 comm="syz.5.141" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.996897][ T889] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 85.007744][ T30] audit: type=1400 audit(1745950192.941:244): avc: denied { mounton } for pid=880 comm="syz.5.141" path="/19/file0/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.035493][ T887] EXT4-fs (loop1): dax option not supported [ 85.052899][ T889] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 85.064516][ T889] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.132: corrupted in-inode xattr [ 85.066964][ T885] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.087833][ T885] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.095258][ T889] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.132: couldn't read orphan inode 15 (err -117) [ 85.111761][ T889] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 85.255699][ T887] loop1: detected capacity change from 0 to 256 [ 85.262365][ T887] exfat: Deprecated parameter 'namecase' [ 85.272424][ T887] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 86.269715][ T30] audit: type=1400 audit(1745950193.891:245): avc: denied { create } for pid=888 comm="syz.2.132" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 86.382022][ T30] audit: type=1400 audit(1745950193.911:246): avc: denied { link } for pid=888 comm="syz.2.132" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 86.434167][ T30] audit: type=1400 audit(1745950193.941:247): avc: denied { rename } for pid=888 comm="syz.2.132" name="file1" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 86.717000][ T30] audit: type=1400 audit(1745950195.231:248): avc: denied { create } for pid=911 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.747139][ T30] audit: type=1400 audit(1745950195.251:249): avc: denied { write } for pid=911 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.221538][ T30] audit: type=1326 audit(1745950195.731:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=926 comm="syz.5.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00333b4969 code=0x7ffc0000 [ 87.298266][ T931] loop4: detected capacity change from 0 to 512 [ 88.522813][ T944] syz.4.143[944] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.522991][ T944] syz.4.143[944] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.771181][ T946] loop1: detected capacity change from 0 to 128 [ 90.577501][ T951] process 'syz.3.146' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 90.605553][ T954] loop5: detected capacity change from 0 to 1024 [ 91.367792][ T954] EXT4-fs (loop5): Ignoring removed orlov option [ 91.684548][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 91.695050][ T30] audit: type=1400 audit(1745950200.191:284): avc: denied { ioctl } for pid=956 comm="syz.4.158" path="socket:[17382]" dev="sockfs" ino=17382 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.986321][ T954] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 92.607764][ T977] loop2: detected capacity change from 0 to 512 [ 92.993891][ T977] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.005434][ T977] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.777913][ T987] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 94.596392][ T30] audit: type=1400 audit(1745950202.271:285): avc: denied { read write } for pid=981 comm="syz.4.151" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 94.658225][ T30] audit: type=1400 audit(1745950202.271:286): avc: denied { open } for pid=981 comm="syz.4.151" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 94.756723][ T30] audit: type=1400 audit(1745950203.131:287): avc: denied { write } for pid=982 comm="syz.1.152" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 94.967785][ T994] loop3: detected capacity change from 0 to 256 [ 95.042770][ T30] audit: type=1326 audit(1745950203.551:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=991 comm="syz.4.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439d0b0969 code=0x7fc00000 [ 95.191816][ T1002] bridge0: port 3(gretap0) entered blocking state [ 95.198874][ T1002] bridge0: port 3(gretap0) entered disabled state [ 95.206069][ T994] exFAT-fs (loop3): bogus sectors bits per cluster : 143 [ 95.206069][ T994] [ 95.206495][ T1002] device gretap0 entered promiscuous mode [ 95.215834][ T994] exFAT-fs (loop3): failed to read boot sector [ 95.221183][ T1002] bridge0: port 3(gretap0) entered blocking state [ 95.228375][ T994] exFAT-fs (loop3): failed to recognize exfat type [ 95.234280][ T1002] bridge0: port 3(gretap0) entered forwarding state [ 95.293658][ T1006] device gretap0 left promiscuous mode [ 95.299296][ T1006] bridge0: port 3(gretap0) entered disabled state [ 95.797663][ T1016] netlink: 100 bytes leftover after parsing attributes in process `syz.3.161'. [ 97.014356][ T1032] loop4: detected capacity change from 0 to 8192 [ 97.024316][ T1034] loop1: detected capacity change from 0 to 512 [ 97.065341][ T1034] EXT4-fs (loop1): Ignoring removed bh option [ 97.071832][ T1034] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 97.203975][ T1034] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.166: corrupted in-inode xattr [ 97.216926][ T1034] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.166: couldn't read orphan inode 15 (err -117) [ 97.305964][ T1034] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,inode_readahead_blks=0x0000000000000001,bh,noload,nombcache,data_err=ignore,noinit_itable,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 97.385872][ T30] audit: type=1400 audit(1745950205.901:289): avc: denied { read } for pid=1033 comm="syz.1.166" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 97.458046][ T30] audit: type=1400 audit(1745950205.901:290): avc: denied { open } for pid=1033 comm="syz.1.166" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 97.512758][ T1024] loop2: detected capacity change from 0 to 40427 [ 98.393722][ T1024] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 98.431861][ T1024] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 98.515357][ T1046] loop1: detected capacity change from 0 to 512 [ 98.662563][ T1046] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.674110][ T1046] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.440676][ T1024] F2FS-fs (loop2): Found nat_bits in checkpoint [ 99.860970][ T1058] loop5: detected capacity change from 0 to 256 [ 101.061533][ T1059] tipc: Started in network mode [ 101.066659][ T1059] tipc: Node identity ac14140f, cluster identity 4711 [ 101.073916][ T1059] tipc: New replicast peer: 255.255.255.255 [ 101.080349][ T1059] tipc: Enabled bearer , priority 10 [ 101.135051][ T1058] exfat: Deprecated parameter 'utf8' [ 101.140415][ T1058] exfat: Deprecated parameter 'namecase' [ 101.146101][ T1058] exfat: Deprecated parameter 'utf8' [ 101.160258][ T1058] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 101.183973][ T30] audit: type=1400 audit(1745950209.691:291): avc: denied { mounton } for pid=1052 comm="syz.5.171" path="/27/file0/file0" dev="loop5" ino=1048610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.184568][ T1057] fuse: Bad value for 'fd' [ 101.297056][ T1067] bridge0: port 3(gretap0) entered blocking state [ 101.303557][ T1067] bridge0: port 3(gretap0) entered disabled state [ 101.310518][ T1067] device gretap0 entered promiscuous mode [ 101.316372][ T1067] bridge0: port 3(gretap0) entered blocking state [ 101.322828][ T1067] bridge0: port 3(gretap0) entered forwarding state [ 101.330679][ T1067] device gretap0 left promiscuous mode [ 101.336265][ T1067] bridge0: port 3(gretap0) entered disabled state [ 101.698313][ T1075] bridge0: port 3(gretap0) entered blocking state [ 101.704865][ T1075] bridge0: port 3(gretap0) entered disabled state [ 101.714526][ T1075] device gretap0 entered promiscuous mode [ 101.721088][ T1075] bridge0: port 3(gretap0) entered blocking state [ 101.727571][ T1075] bridge0: port 3(gretap0) entered forwarding state [ 101.746370][ T1075] device gretap0 left promiscuous mode [ 101.752476][ T1075] bridge0: port 3(gretap0) entered disabled state [ 102.973500][ T1084] device bond_slave_1 entered promiscuous mode [ 102.982753][ T397] tipc: Node number set to 2886997007 [ 103.241694][ T1078] device bond_slave_1 left promiscuous mode [ 104.912446][ T1096] loop2: detected capacity change from 0 to 512 [ 104.919682][ T30] audit: type=1400 audit(1745950213.421:292): avc: denied { write } for pid=1090 comm="syz.2.179" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 104.963162][ T1096] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.179: iget: bad extra_isize 50264 (inode size 256) [ 104.977125][ T1096] EXT4-fs (loop2): Remounting filesystem read-only [ 104.983765][ T1096] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.179: couldn't read orphan inode 15 (err -117) [ 104.997611][ T1096] EXT4-fs (loop2): Remounting filesystem read-only [ 105.004475][ T1096] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,journal_dev=0x0000000000000010,inode_readahead_blks=0x0000000000000000,noinit_itable,errors=continue,errors=continue,errors=remount-ro,inode_readahead_blks=0x0000000000000004,auto_da_alloc,norecovery,stripe=0x000000000. Quota mode: none. [ 105.100092][ T1104] loop5: detected capacity change from 0 to 128 [ 105.167061][ T1104] EXT4-fs (loop5): Test dummy encryption mode enabled [ 105.206788][ T1104] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 105.378026][ T1104] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.389736][ T1126] bridge0: port 3(gretap0) entered blocking state [ 106.396312][ T1126] bridge0: port 3(gretap0) entered disabled state [ 106.403215][ T1126] device gretap0 entered promiscuous mode [ 106.409218][ T1126] bridge0: port 3(gretap0) entered blocking state [ 106.415673][ T1126] bridge0: port 3(gretap0) entered forwarding state [ 107.214217][ T1134] tipc: Started in network mode [ 107.219593][ T1134] tipc: Node identity ac14140f, cluster identity 4711 [ 107.227787][ T1134] tipc: New replicast peer: 255.255.255.255 [ 107.234942][ T1134] tipc: Enabled bearer , priority 10 [ 108.501321][ T807] tipc: Node number set to 2886997007 [ 108.669059][ T1151] loop4: detected capacity change from 0 to 1024 [ 108.904947][ T30] audit: type=1400 audit(1745950217.331:293): avc: denied { create } for pid=1144 comm="syz.5.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.926311][ T1151] EXT4-fs (loop4): Ignoring removed oldalloc option [ 109.015101][ T30] audit: type=1400 audit(1745950217.371:294): avc: denied { connect } for pid=1144 comm="syz.5.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.035643][ T1151] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,min_batch_time=0x0000000000000001,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 109.131592][ T30] audit: type=1400 audit(1745950217.641:295): avc: denied { ioctl } for pid=1145 comm="syz.4.195" path="/44/file1/file1" dev="loop4" ino=15 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.304783][ T807] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 109.445611][ T1167] bridge0: port 3(gretap0) entered blocking state [ 109.452088][ T1167] bridge0: port 3(gretap0) entered disabled state [ 109.459045][ T1167] device gretap0 entered promiscuous mode [ 109.464924][ T1167] bridge0: port 3(gretap0) entered blocking state [ 109.471386][ T1167] bridge0: port 3(gretap0) entered forwarding state [ 109.479188][ T1167] device gretap0 left promiscuous mode [ 109.484789][ T1167] bridge0: port 3(gretap0) entered disabled state [ 110.128091][ T1173] loop1: detected capacity change from 0 to 128 [ 110.165804][ T1173] EXT4-fs (loop1): Test dummy encryption mode enabled [ 110.185619][ T1175] loop4: detected capacity change from 0 to 512 [ 110.199345][ T1173] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 110.212169][ T1173] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.223235][ T807] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.285572][ T807] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.326649][ T807] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 110.335938][ T807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.344592][ T1175] EXT4-fs (loop4): Unrecognized mount option "smackfsfloor=seclabel" or missing value [ 110.352052][ T807] usb 6-1: config 0 descriptor?? [ 110.616645][ T397] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.805142][ T30] audit: type=1400 audit(1745950220.261:296): avc: denied { read } for pid=1183 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.835231][ T397] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.028420][ T807] usbhid 6-1:0.0: can't add hid device: -71 [ 112.034443][ T807] usbhid: probe of 6-1:0.0 failed with error -71 [ 112.103915][ T397] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 112.173509][ T807] usb 6-1: USB disconnect, device number 2 [ 112.179556][ T397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.195454][ T397] usb 3-1: config 0 descriptor?? [ 112.738335][ T1171] 9pnet: Insufficient options for proto=fd [ 112.842939][ T1194] loop4: detected capacity change from 0 to 40427 [ 113.424428][ T1194] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 113.438994][ T1194] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 113.448806][ T1194] F2FS-fs (loop4): invalid crc value [ 113.485946][ T1194] F2FS-fs (loop4): Found nat_bits in checkpoint [ 113.675383][ T30] audit: type=1400 audit(1745950222.131:297): avc: denied { append } for pid=1202 comm="syz.3.207" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 113.774482][ T1194] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 113.781884][ T1194] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 114.863276][ T1063] usb 3-1: USB disconnect, device number 2 [ 114.881434][ T1222] Invalid ELF header magic: != ELF [ 114.964785][ T30] audit: type=1400 audit(1745950223.471:298): avc: denied { read } for pid=1224 comm="syz.1.212" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 115.088968][ T30] audit: type=1400 audit(1745950223.471:299): avc: denied { ioctl } for pid=1224 comm="syz.1.212" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 115.420393][ T1232] loop5: detected capacity change from 0 to 512 [ 115.451140][ T1229] loop3: detected capacity change from 0 to 8192 [ 115.475461][ T1232] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 115.492667][ T1232] EXT4-fs (loop5): 1 truncate cleaned up [ 115.495162][ T1229] loop3: p1 p2[DM] p4 [ 115.498956][ T1232] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 115.523126][ T1229] loop3: p1 size 196608 extends beyond EOD, truncated [ 115.548196][ T1229] loop3: p2 start 4292936063 is beyond EOD, truncated [ 115.555393][ T1229] loop3: p4 size 50331648 extends beyond EOD, truncated [ 116.158424][ T1246] loop2: detected capacity change from 0 to 8192 [ 116.206068][ T1246] loop2: p1 p2[DM] p4 [ 116.210307][ T1246] loop2: p1 size 196608 extends beyond EOD, truncated [ 116.217985][ T1246] loop2: p2 start 4292936063 is beyond EOD, truncated [ 116.224868][ T1246] loop2: p4 size 50331648 extends beyond EOD, truncated [ 118.245924][ T340] udevd[340]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 118.277113][ T338] udevd[338]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 118.618788][ T30] audit: type=1400 audit(1745950227.131:300): avc: denied { read } for pid=1259 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.685995][ T30] audit: type=1326 audit(1745950227.201:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1276 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 118.744751][ T30] audit: type=1326 audit(1745950227.221:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1276 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 118.824775][ T30] audit: type=1326 audit(1745950227.221:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1276 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 118.840045][ T1272] loop3: detected capacity change from 0 to 40427 [ 118.904747][ T30] audit: type=1326 audit(1745950227.221:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1276 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 118.955473][ T1272] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 118.970060][ T30] audit: type=1326 audit(1745950227.221:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1276 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 118.975039][ T1272] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 119.054744][ T30] audit: type=1326 audit(1745950227.221:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1276 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 119.075216][ T1272] F2FS-fs (loop3): invalid crc value [ 119.115052][ T1272] F2FS-fs (loop3): Found nat_bits in checkpoint [ 119.144745][ T30] audit: type=1326 audit(1745950227.221:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1276 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 119.227683][ T1288] loop2: detected capacity change from 0 to 512 [ 119.346208][ T1288] EXT4-fs (loop2): Unrecognized mount option "obj_role=noquotaIÅ1:×ùž" or missing value [ 119.512800][ T1272] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 119.612116][ T30] audit: type=1326 audit(1745950227.221:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1276 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 119.652659][ T1272] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 120.251882][ T30] audit: type=1326 audit(1745950227.361:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1276 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 120.518735][ T1294] loop1: detected capacity change from 0 to 512 [ 120.786491][ T1294] EXT4-fs (loop1): orphan cleanup on readonly fs [ 120.793786][ T1294] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.226: bg 0: block 248: padding at end of block bitmap is not set [ 120.826590][ T1294] EXT4-fs error (device loop1): ext4_acquire_dquot:6195: comm syz.1.226: Failed to acquire dquot type 1 [ 120.840163][ T1294] EXT4-fs (loop1): 1 truncate cleaned up [ 120.855198][ T1294] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 121.899218][ T1301] loop2: detected capacity change from 0 to 8192 [ 121.974680][ T1301] loop2: p1 p2[DM] p4 [ 121.992013][ T1301] loop2: p1 size 196608 extends beyond EOD, truncated [ 122.039163][ T1301] loop2: p2 start 4292936063 is beyond EOD, truncated [ 122.056237][ T1301] loop2: p4 size 50331648 extends beyond EOD, truncated [ 122.594545][ T101] loop2: p1 p2[DM] p4 [ 122.598906][ T101] loop2: p1 size 196608 extends beyond EOD, truncated [ 122.614897][ T101] loop2: p2 start 4292936063 is beyond EOD, truncated [ 122.621715][ T101] loop2: p4 size 50331648 extends beyond EOD, truncated [ 122.721315][ T1315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 123.546982][ T1329] loop3: detected capacity change from 0 to 512 [ 123.684279][ T1329] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 123.873253][ T1329] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 123.895916][ T1332] loop4: detected capacity change from 0 to 256 [ 123.915622][ T1329] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.238: corrupted in-inode xattr [ 123.959520][ T1329] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.238: couldn't read orphan inode 15 (err -117) [ 123.985529][ T1332] exFAT-fs (loop4): bogus sector size bits : 0 [ 123.985529][ T1332] [ 124.014319][ T1332] exFAT-fs (loop4): failed to read boot sector [ 124.021078][ T1329] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 124.045661][ T1332] exFAT-fs (loop4): failed to recognize exfat type [ 124.239536][ T1343] loop5: detected capacity change from 0 to 512 [ 125.579860][ T1343] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 125.891038][ T1343] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 125.929346][ T1343] System zones: 1-12 [ 125.936284][ T1343] EXT4-fs (loop5): 1 truncate cleaned up [ 125.942148][ T1343] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 126.880168][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 126.880190][ T30] audit: type=1400 audit(1745950235.351:318): avc: denied { map } for pid=1353 comm="syz.3.244" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.159068][ T1358] loop2: detected capacity change from 0 to 40427 [ 127.597689][ T1358] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 127.611084][ T1358] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 127.626254][ T1358] F2FS-fs (loop2): invalid crc value [ 127.644005][ T1358] F2FS-fs (loop2): Found nat_bits in checkpoint [ 127.706006][ T1358] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 127.713394][ T1358] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 127.813254][ T1381] loop3: detected capacity change from 0 to 512 [ 128.186230][ T1381] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.250: inode #1: comm syz.3.250: iget: illegal inode # [ 128.201727][ T1381] EXT4-fs (loop3): Remounting filesystem read-only [ 128.208302][ T1381] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.250: error while reading EA inode 1 err=-117 [ 128.374517][ T1381] EXT4-fs (loop3): Remounting filesystem read-only [ 128.381278][ T1381] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.250: inode #1: comm syz.3.250: iget: illegal inode # [ 128.396424][ T1381] EXT4-fs (loop3): Remounting filesystem read-only [ 128.403004][ T1381] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.250: error while reading EA inode 1 err=-117 [ 128.415961][ T1381] EXT4-fs (loop3): Remounting filesystem read-only [ 128.422631][ T1381] EXT4-fs (loop3): 1 orphan inode deleted [ 128.428426][ T1381] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,. Quota mode: writeback. [ 128.957889][ T30] audit: type=1400 audit(1745950237.471:319): avc: denied { unlink } for pid=1385 comm="syz.5.251" name="#1" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 129.075639][ T1392] loop2: detected capacity change from 0 to 256 [ 129.166913][ T1392] FAT-fs (loop2): bogus number of FAT sectors [ 129.188161][ T1392] FAT-fs (loop2): Can't find a valid FAT filesystem [ 129.205307][ T1395] loop5: detected capacity change from 0 to 256 [ 129.225318][ T1395] exFAT-fs (loop5): bogus sector size bits : 0 [ 129.225318][ T1395] [ 129.239720][ T1395] exFAT-fs (loop5): failed to read boot sector [ 129.246332][ T1395] exFAT-fs (loop5): failed to recognize exfat type [ 129.340247][ T1392] loop2: detected capacity change from 0 to 512 [ 129.432357][ T1392] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #15: comm syz.2.262: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 129.450875][ T1392] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.262: couldn't read orphan inode 15 (err -117) [ 129.468342][ T1392] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.845143][ T1392] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.884903][ T1392] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.262: Directory hole found for htree leaf block 0 [ 129.923792][ T1392] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.262: Directory hole found for htree leaf block 0 [ 132.015898][ T1444] loop4: detected capacity change from 0 to 512 [ 132.116205][ T1444] EXT4-fs (loop4): Test dummy encryption mode enabled [ 132.123125][ T1444] EXT4-fs (loop4): Unrecognized mount option "=" or missing value [ 132.665069][ T1457] netlink: 'syz.2.268': attribute type 27 has an invalid length. [ 133.107106][ T30] audit: type=1400 audit(1745950241.271:320): avc: denied { bind } for pid=1443 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.160180][ T1462] loop1: detected capacity change from 0 to 256 [ 133.310008][ T1457] bridge0: port 3(gretap0) entered disabled state [ 133.405800][ T30] audit: type=1400 audit(1745950241.911:321): avc: denied { setopt } for pid=1460 comm="syz.4.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.438026][ T1462] FAT-fs (loop1): bogus number of FAT sectors [ 133.444293][ T1462] FAT-fs (loop1): Can't find a valid FAT filesystem [ 133.636601][ T30] audit: type=1400 audit(1745950241.911:322): avc: denied { bind } for pid=1460 comm="syz.4.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.665157][ T30] audit: type=1400 audit(1745950241.921:323): avc: denied { listen } for pid=1460 comm="syz.4.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.689971][ T1457] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.697362][ T1457] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.727498][ T1470] loop5: detected capacity change from 0 to 8192 [ 133.733991][ T30] audit: type=1400 audit(1745950241.921:324): avc: denied { connect } for pid=1460 comm="syz.4.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.768099][ T1470] loop5: p1 p2[DM] p4 [ 133.772393][ T1470] loop5: p1 size 196608 extends beyond EOD, truncated [ 133.780776][ T1470] loop5: p2 start 4292936063 is beyond EOD, truncated [ 133.787728][ T1470] loop5: p4 size 50331648 extends beyond EOD, truncated [ 134.152758][ T1463] bridge0: port 3(gretap0) entered blocking state [ 134.159311][ T1463] bridge0: port 3(gretap0) entered forwarding state [ 134.175805][ T1462] loop1: detected capacity change from 0 to 512 [ 134.176000][ T1463] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.189309][ T1463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.197563][ T1463] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.204667][ T1463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.221067][ T1463] device veth0_vlan left promiscuous mode [ 134.227483][ T1463] device veth0_vlan entered promiscuous mode [ 134.227638][ T1462] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #15: comm syz.1.269: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 134.235831][ T1463] device veth1_macvtap left promiscuous mode [ 134.251799][ T1462] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.269: couldn't read orphan inode 15 (err -117) [ 134.269592][ T1462] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.270562][ T1463] device veth1_macvtap entered promiscuous mode [ 134.280622][ T1462] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.292349][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.308550][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.320595][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.329281][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.337935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.346642][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.355670][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.375514][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.384238][ T1462] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.269: Directory hole found for htree leaf block 0 [ 134.406643][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.415100][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.424830][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 134.432473][ T1462] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.269: Directory hole found for htree leaf block 0 [ 134.433039][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.453927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 134.462415][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.470713][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.478924][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.487209][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.495902][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.522824][ T1487] loop3: detected capacity change from 0 to 256 [ 134.580642][ T1487] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 134.802497][ T1499] bridge0: port 3(gretap0) entered blocking state [ 134.809042][ T1499] bridge0: port 3(gretap0) entered disabled state [ 134.816004][ T1499] device gretap0 entered promiscuous mode [ 134.821862][ T1499] bridge0: port 3(gretap0) entered blocking state [ 134.828322][ T1499] bridge0: port 3(gretap0) entered forwarding state [ 134.836248][ T1499] device gretap0 left promiscuous mode [ 134.841852][ T1499] bridge0: port 3(gretap0) entered disabled state [ 134.999016][ T1498] loop5: detected capacity change from 0 to 40427 [ 135.098254][ T1498] F2FS-fs (loop5): Found nat_bits in checkpoint [ 135.142110][ T1498] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 135.339203][ T1506] attempt to access beyond end of device [ 135.339203][ T1506] loop5: rw=2049, want=81920, limit=40427 [ 135.456538][ T1506] attempt to access beyond end of device [ 135.456538][ T1506] loop5: rw=2049, want=53248, limit=40427 [ 136.000065][ T1518] loop2: detected capacity change from 0 to 256 [ 136.036149][ T1518] exfat: Unknown parameter '' [ 136.995001][ T30] audit: type=1326 audit(1745950245.501:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04a10f969 code=0x7ffc0000 [ 137.216053][ T1506] attempt to access beyond end of device [ 137.216053][ T1506] loop5: rw=2049, want=64560, limit=40427 [ 137.228167][ T30] audit: type=1326 audit(1745950245.501:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04a10f969 code=0x7ffc0000 [ 137.344021][ T1528] netlink: 32 bytes leftover after parsing attributes in process `syz.3.292'. [ 138.204398][ T30] audit: type=1326 audit(1745950245.541:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc04a10f969 code=0x7ffc0000 [ 138.231895][ T387] attempt to access beyond end of device [ 138.231895][ T387] loop5: rw=2049, want=45104, limit=40427 [ 138.354480][ T30] audit: type=1326 audit(1745950245.541:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04a10f969 code=0x7ffc0000 [ 138.469466][ T30] audit: type=1326 audit(1745950245.541:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04a10f969 code=0x7ffc0000 [ 138.499295][ T1531] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 138.519645][ T1534] loop1: detected capacity change from 0 to 8192 [ 138.588810][ T30] audit: type=1326 audit(1745950245.541:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fc04a10f969 code=0x7ffc0000 [ 138.646833][ T30] audit: type=1326 audit(1745950245.541:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04a10f969 code=0x7ffc0000 [ 138.670621][ T30] audit: type=1326 audit(1745950245.541:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04a10f969 code=0x7ffc0000 [ 138.694323][ T30] audit: type=1326 audit(1745950245.541:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fc04a10f969 code=0x7ffc0000 [ 138.723853][ T1526] loop4: detected capacity change from 0 to 256 [ 138.749421][ T30] audit: type=1326 audit(1745950245.541:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04a10f969 code=0x7ffc0000 [ 138.772875][ T30] audit: type=1326 audit(1745950245.541:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04a10f969 code=0x7ffc0000 [ 138.797945][ T30] audit: type=1326 audit(1745950245.541:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fc04a10f969 code=0x7ffc0000 [ 138.810824][ T1526] exFAT-fs (loop4): bogus sectors bits per cluster : 143 [ 138.810824][ T1526] [ 138.833156][ T1526] exFAT-fs (loop4): failed to read boot sector [ 138.864739][ T1526] exFAT-fs (loop4): failed to recognize exfat type [ 138.933214][ T1540] loop5: detected capacity change from 0 to 256 [ 139.004803][ T306] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 139.036665][ T1540] FAT-fs (loop5): bogus number of FAT sectors [ 139.042971][ T1540] FAT-fs (loop5): Can't find a valid FAT filesystem [ 139.244867][ T306] usb 4-1: Using ep0 maxpacket: 32 [ 139.522187][ T1540] loop5: detected capacity change from 0 to 512 [ 139.627445][ T1540] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #15: comm syz.5.286: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 139.671758][ T1550] loop2: detected capacity change from 0 to 512 [ 139.867085][ T1550] loop2: detected capacity change from 0 to 1024 [ 139.965479][ T1540] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.286: couldn't read orphan inode 15 (err -117) [ 140.030413][ T1550] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.227557][ T1540] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.326511][ T1540] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.886115][ T1540] EXT4-fs error (device loop5): ext4_add_entry:2486: inode #2: comm syz.5.286: Directory hole found for htree leaf block 0 [ 140.903004][ T1540] EXT4-fs error (device loop5): ext4_add_entry:2486: inode #2: comm syz.5.286: Directory hole found for htree leaf block 0 [ 140.937399][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 140.948560][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 140.958273][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 219, changing to 11 [ 140.969693][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 24855, setting to 1024 [ 141.249894][ T1560] bridge0: port 3(gretap0) entered blocking state [ 141.256401][ T1560] bridge0: port 3(gretap0) entered disabled state [ 141.263993][ T1560] device gretap0 entered promiscuous mode [ 141.270058][ T1560] bridge0: port 3(gretap0) entered blocking state [ 141.276539][ T1560] bridge0: port 3(gretap0) entered forwarding state [ 141.285168][ T1560] device gretap0 left promiscuous mode [ 141.290863][ T1560] bridge0: port 3(gretap0) entered disabled state [ 141.454858][ T306] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 141.481299][ T1565] loop2: detected capacity change from 0 to 512 [ 141.489045][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.527684][ T306] usb 4-1: Product: syz [ 141.556749][ T306] usb 4-1: config 0 descriptor?? [ 141.594829][ T306] usb 4-1: can't set config #0, error -71 [ 141.596126][ T1565] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 141.626240][ T306] usb 4-1: USB disconnect, device number 2 [ 141.663422][ T1565] EXT4-fs (loop2): 1 truncate cleaned up [ 141.685497][ T1565] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,errors=remount-ro,quota,. Quota mode: writeback. [ 142.056581][ T1576] loop4: detected capacity change from 0 to 512 [ 142.200545][ T1577] loop1: detected capacity change from 0 to 512 [ 142.239976][ T1577] EXT4-fs (loop1): Ignoring removed orlov option [ 142.355645][ T1577] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 142.369602][ T1577] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.515302][ T1576] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 142.533155][ T1576] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 142.546552][ T1576] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.297: corrupted in-inode xattr [ 142.637333][ T1587] loop2: detected capacity change from 0 to 256 [ 142.660777][ T1576] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.297: couldn't read orphan inode 15 (err -117) [ 142.691143][ T1587] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 143.387668][ T1589] loop1: detected capacity change from 0 to 256 [ 143.425135][ T1589] exfat: Deprecated parameter 'utf8' [ 143.430548][ T1589] exfat: Deprecated parameter 'namecase' [ 143.436236][ T1589] exfat: Deprecated parameter 'utf8' [ 143.447986][ T1589] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 143.468537][ T1589] fuse: Bad value for 'fd' [ 143.495920][ T1576] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 144.166184][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 144.166199][ T30] audit: type=1400 audit(1745950252.681:355): avc: denied { write } for pid=1592 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 144.385777][ T1606] loop4: detected capacity change from 0 to 128 [ 144.398507][ T1607] loop3: detected capacity change from 0 to 128 [ 144.545037][ T1607] EXT4-fs (loop3): Test dummy encryption mode enabled [ 144.549395][ T300] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 144.562734][ T1606] EXT4-fs (loop4): Test dummy encryption mode enabled [ 144.566241][ T1607] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 144.593895][ T1606] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 144.736069][ T1607] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.736137][ T1606] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.734196][ T300] usb 2-1: Using ep0 maxpacket: 16 [ 146.764179][ T1620] loop5: detected capacity change from 0 to 1024 [ 146.794958][ T300] usb 2-1: device descriptor read/all, error -71 [ 146.829792][ T1625] loop4: detected capacity change from 0 to 256 [ 146.925774][ T1625] FAT-fs (loop4): bogus number of FAT sectors [ 146.933422][ T1628] bridge0: port 3(gretap0) entered blocking state [ 146.939912][ T1628] bridge0: port 3(gretap0) entered disabled state [ 146.946901][ T1628] device gretap0 entered promiscuous mode [ 146.952748][ T1628] bridge0: port 3(gretap0) entered blocking state [ 146.959187][ T1628] bridge0: port 3(gretap0) entered forwarding state [ 146.967106][ T1628] device gretap0 left promiscuous mode [ 146.972672][ T1628] bridge0: port 3(gretap0) entered disabled state [ 146.982366][ T1625] FAT-fs (loop4): Can't find a valid FAT filesystem [ 146.995485][ T1620] EXT4-fs (loop5): Ignoring removed bh option [ 147.010722][ T1627] loop2: detected capacity change from 0 to 512 [ 147.027364][ T1620] EXT4-fs (loop5): Mount option "nodioread_nolock" incompatible with ext3 [ 147.108263][ T1627] EXT4-fs (loop2): 1 orphan inode deleted [ 147.114092][ T1627] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 147.135404][ T1627] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.162252][ T1620] loop5: detected capacity change from 0 to 512 [ 147.162276][ T1625] loop4: detected capacity change from 0 to 512 [ 147.218983][ T1625] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #15: comm syz.4.303: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 147.237543][ T1625] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.303: couldn't read orphan inode 15 (err -117) [ 147.252286][ T1625] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.263271][ T1625] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.296069][ T1625] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.303: Directory hole found for htree leaf block 0 [ 147.317619][ T1625] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.303: Directory hole found for htree leaf block 0 [ 147.595766][ T1638] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 147.608502][ T1638] tipc: Enabled bearer , priority 10 [ 147.698621][ T1645] loop2: detected capacity change from 0 to 512 [ 147.707638][ T1645] EXT4-fs (loop2): Test dummy encryption mode enabled [ 147.714742][ T1645] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 147.727404][ T1645] EXT4-fs (loop2): 1 truncate cleaned up [ 147.733344][ T1645] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 147.747877][ T1643] loop1: detected capacity change from 0 to 8192 [ 147.825374][ T1643] loop1: p1 p2[DM] p4 [ 147.830334][ T1643] loop1: p1 size 196608 extends beyond EOD, truncated [ 147.857842][ T1643] loop1: p2 start 4292936063 is beyond EOD, truncated [ 147.865092][ T1643] loop1: p4 size 50331648 extends beyond EOD, truncated [ 148.529486][ T30] audit: type=1326 audit(1745950257.041:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1650 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cabd4969 code=0x7ffc0000 [ 148.644870][ T30] audit: type=1326 audit(1745950257.061:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1650 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cabd4969 code=0x7ffc0000 [ 149.867470][ T1665] loop1: detected capacity change from 0 to 8192 [ 149.873955][ T30] audit: type=1326 audit(1745950257.061:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1650 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47cabd4969 code=0x7ffc0000 [ 149.916089][ T30] audit: type=1326 audit(1745950257.071:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1650 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cabd4969 code=0x7ffc0000 [ 149.925116][ T1665] loop1: p1 p2[DM] p4 [ 149.945314][ T1665] loop1: p1 size 196608 extends beyond EOD, truncated [ 149.951408][ T30] audit: type=1326 audit(1745950257.071:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1650 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cabd4969 code=0x7ffc0000 [ 149.978022][ T1665] loop1: p2 start 4292936063 is beyond EOD, truncated [ 149.994135][ T1665] loop1: p4 size 50331648 extends beyond EOD, truncated [ 150.090303][ T1670] loop5: detected capacity change from 0 to 128 [ 150.500341][ T1670] attempt to access beyond end of device [ 150.500341][ T1670] loop5: rw=0, want=1041, limit=128 [ 151.311420][ T30] audit: type=1326 audit(1745950257.071:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1650 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47cabd4969 code=0x7ffc0000 [ 151.403203][ T30] audit: type=1326 audit(1745950257.081:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1650 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cabd4969 code=0x7ffc0000 [ 151.544735][ T30] audit: type=1326 audit(1745950257.081:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1650 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cabd4969 code=0x7ffc0000 [ 151.629540][ T30] audit: type=1326 audit(1745950257.081:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1650 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47cabd4969 code=0x7ffc0000 [ 151.637032][ T1680] loop5: detected capacity change from 0 to 1024 [ 151.661382][ T30] audit: type=1326 audit(1745950257.081:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1650 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cabd4969 code=0x7ffc0000 [ 151.685795][ T1684] loop2: detected capacity change from 0 to 256 [ 151.686154][ T30] audit: type=1326 audit(1745950257.081:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1650 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cabd4969 code=0x7ffc0000 [ 151.730158][ T30] audit: type=1326 audit(1745950257.081:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1650 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47cabd4969 code=0x7ffc0000 [ 151.768767][ T1684] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 151.781828][ T1680] EXT4-fs (loop5): Ignoring removed oldalloc option [ 151.825203][ T1680] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,min_batch_time=0x0000000000000001,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 151.927194][ T1694] loop1: detected capacity change from 0 to 256 [ 151.994985][ T1694] exfat: Deprecated parameter 'utf8' [ 152.000421][ T1694] exfat: Unknown parameter 'keep_last_dots' [ 152.027204][ T1698] exFAT-fs (loop2): hint_cluster is invalid (17) [ 152.066409][ T1698] exFAT-fs (loop2): error, broken FAT chain. [ 152.072458][ T1698] exFAT-fs (loop2): Filesystem has been set read-only [ 152.079283][ T1698] exFAT-fs (loop2): error, failed to bmap (inode : ffff8881293a5ab0 iblock : 8, err : -5) [ 152.182077][ T1699] loop4: detected capacity change from 0 to 256 [ 152.215933][ T1699] exfat: Deprecated parameter 'utf8' [ 152.221515][ T1699] exfat: Deprecated parameter 'namecase' [ 152.227322][ T1699] exfat: Deprecated parameter 'utf8' [ 152.264158][ T1699] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 152.355961][ T1699] fuse: Bad value for 'fd' [ 153.552766][ T1703] loop5: detected capacity change from 0 to 512 [ 153.719971][ T1703] EXT4-fs (loop5): Test dummy encryption mode enabled [ 153.797049][ T1703] EXT4-fs (loop5): Unrecognized mount option "=" or missing value [ 154.051682][ T1713] loop3: detected capacity change from 0 to 512 [ 154.935374][ T1713] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.327: invalid block [ 154.947689][ T1713] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.327: invalid indirect mapped block 10 (level 1) [ 154.962471][ T1713] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.327: invalid indirect mapped block 8 (level 1) [ 154.977064][ T1713] EXT4-fs (loop3): 1 truncate cleaned up [ 154.982768][ T1713] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,user_xattr,,errors=continue. Quota mode: none. [ 156.467530][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 156.468544][ T30] audit: type=1400 audit(1745950263.891:391): avc: denied { bind } for pid=1718 comm="syz.5.329" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 156.669647][ T30] audit: type=1400 audit(1745950263.891:392): avc: denied { node_bind } for pid=1718 comm="syz.5.329" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 157.490332][ T1738] loop2: detected capacity change from 0 to 128 [ 157.532281][ T1741] netlink: 'syz.5.343': attribute type 27 has an invalid length. [ 157.545163][ T30] audit: type=1400 audit(1745950266.051:393): avc: denied { create } for pid=1740 comm="syz.4.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.580454][ T1741] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.587739][ T1741] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.637636][ T1738] EXT4-fs (loop2): Test dummy encryption mode enabled [ 157.695325][ T1738] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 157.719638][ T1738] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 157.773396][ T1751] syz.1.344[1751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.773806][ T1751] syz.1.344[1751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.810134][ T1751] loop1: detected capacity change from 0 to 128 [ 157.946382][ T1751] netlink: 276 bytes leftover after parsing attributes in process `syz.1.344'. [ 159.487773][ T1741] device veth0_vlan left promiscuous mode [ 159.503135][ T1741] device veth0_vlan entered promiscuous mode [ 159.510508][ T1741] device veth1_macvtap left promiscuous mode [ 159.518252][ T1741] device veth1_macvtap entered promiscuous mode [ 159.531412][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.585811][ T1761] SELinux: security_context_str_to_sid(Eá…) failed for (dev ?, type ?) errno=-22 [ 159.602827][ T1761] SELinux: security_context_str_to_sid(Eá…) failed for (dev sysfs, type sysfs) errno=-22 [ 159.760802][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.825133][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.833439][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.840542][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.848371][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.859910][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.870962][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.878057][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.886172][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.912044][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 159.929544][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.941257][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 159.949760][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.958331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.967011][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.977722][ T1763] loop1: detected capacity change from 0 to 512 [ 159.992819][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.001084][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.009643][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.023764][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.032440][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.040960][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.049468][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.057713][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.066147][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.111176][ T1763] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 160.144520][ T1770] loop2: detected capacity change from 0 to 256 [ 160.866079][ T1770] exfat: Deprecated parameter 'utf8' [ 160.871534][ T1770] exfat: Deprecated parameter 'namecase' [ 160.877313][ T1770] exfat: Deprecated parameter 'utf8' [ 160.899894][ T1770] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 160.980479][ T1770] fuse: Bad value for 'fd' [ 161.005215][ T1741] syz.5.343 (1741) used greatest stack depth: 20544 bytes left [ 161.785526][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.796491][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.805767][ T30] audit: type=1400 audit(1745950270.321:394): avc: denied { write } for pid=1774 comm="syz.4.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.896889][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.905846][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.914114][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.922129][ T30] audit: type=1400 audit(1745950270.341:395): avc: denied { getopt } for pid=1774 comm="syz.4.339" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.947972][ T1763] EXT4-fs (loop1): 1 truncate cleaned up [ 161.949768][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.959162][ T1763] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 161.961385][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.988984][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.398717][ T1782] loop4: detected capacity change from 0 to 256 [ 163.363039][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.387334][ T1782] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 163.406730][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.414514][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.576160][ T1787] device gretap0 left promiscuous mode [ 163.581769][ T1787] bridge0: port 3(gretap0) entered disabled state [ 163.692865][ T1789] device wg2 entered promiscuous mode [ 163.733137][ T1792] loop3: detected capacity change from 0 to 4096 [ 163.769825][ T1792] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 163.782483][ T1792] EXT4-fs (loop3): Test dummy encryption mode enabled [ 163.846165][ T285] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 163.872397][ T1799] loop2: detected capacity change from 0 to 512 [ 165.250731][ T1799] EXT4-fs (loop2): orphan cleanup on readonly fs [ 165.260194][ T1799] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.348: bg 0: block 248: padding at end of block bitmap is not set [ 165.277548][ T1799] Quota error (device loop2): write_blk: dquota write failed [ 165.285262][ T1799] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 165.295274][ T1799] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.348: Failed to acquire dquot type 1 [ 165.313669][ T1799] EXT4-fs (loop2): 1 truncate cleaned up [ 165.320723][ T1799] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000800,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,stripe=0x0000000000000008,nodiscard,,errors=continue. Quota mode: writeback. [ 165.636791][ T1792] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,nodelalloc,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 166.529143][ T1818] loop1: detected capacity change from 0 to 512 [ 166.725834][ T1816] loop2: detected capacity change from 0 to 256 [ 166.727492][ T1818] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.837247][ T1829] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 167.020374][ T1830] loop4: detected capacity change from 0 to 512 [ 167.113471][ T1818] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.130930][ T1816] exFAT-fs (loop2): bogus sectors bits per cluster : 143 [ 167.130930][ T1816] [ 167.230284][ T1830] EXT4-fs (loop4): 1 orphan inode deleted [ 167.236166][ T1830] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 167.247672][ T1830] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.379944][ T1816] exFAT-fs (loop2): failed to read boot sector [ 167.568093][ T1816] exFAT-fs (loop2): failed to recognize exfat type [ 168.136022][ T1836] netlink: 'syz.4.357': attribute type 27 has an invalid length. [ 168.157197][ T1840] loop2: detected capacity change from 0 to 512 [ 168.175700][ T1840] EXT4-fs (loop2): Test dummy encryption mode enabled [ 168.182519][ T1840] EXT4-fs (loop2): Unrecognized mount option "=" or missing value [ 168.295793][ T1841] device veth0_vlan left promiscuous mode [ 168.302830][ T1841] device veth0_vlan entered promiscuous mode [ 168.310566][ T1841] device veth1_macvtap left promiscuous mode [ 168.317730][ T1841] device veth1_macvtap entered promiscuous mode [ 168.365689][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.374283][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.384188][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.395217][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.905349][ T1849] loop3: detected capacity change from 0 to 512 [ 169.743818][ T1849] loop3: detected capacity change from 0 to 1024 [ 169.876694][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.006618][ T1849] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.140251][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.713201][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 170.767145][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.839337][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 170.933273][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.963211][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.971964][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.980259][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.988738][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.997022][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.005377][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.013763][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.022383][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.031013][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.039247][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.055027][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.084930][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.105282][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.113732][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.132861][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.146536][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.154940][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.162454][ T30] audit: type=1326 audit(1745950279.671:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1863 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 171.186454][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.194061][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.202823][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.211023][ T30] audit: type=1326 audit(1745950279.681:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1863 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 171.235011][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 171.243452][ T30] audit: type=1326 audit(1745950279.681:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1863 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 171.288548][ T30] audit: type=1326 audit(1745950279.681:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1863 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 171.314242][ T30] audit: type=1326 audit(1745950279.681:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1863 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 171.337775][ T1860] bridge0: port 3(gretap0) entered blocking state [ 171.344219][ T1860] bridge0: port 3(gretap0) entered disabled state [ 171.353393][ T30] audit: type=1326 audit(1745950279.681:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1863 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 171.365818][ T1867] loop5: detected capacity change from 0 to 512 [ 171.377562][ T1860] device gretap0 entered promiscuous mode [ 171.389156][ T30] audit: type=1326 audit(1745950279.681:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1863 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 171.397439][ T1860] bridge0: port 3(gretap0) entered blocking state [ 171.412602][ T30] audit: type=1326 audit(1745950279.681:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1863 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 171.418846][ T1860] bridge0: port 3(gretap0) entered forwarding state [ 171.453244][ T30] audit: type=1326 audit(1745950279.691:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1863 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 171.478828][ T30] audit: type=1326 audit(1745950279.691:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1863 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 171.508751][ T1867] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 171.531746][ T1867] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 171.745225][ T1877] loop1: detected capacity change from 0 to 512 [ 171.834292][ T1877] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.365: inode #1: comm syz.1.365: iget: illegal inode # [ 171.848021][ T1877] EXT4-fs (loop1): Remounting filesystem read-only [ 171.854653][ T1877] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.365: error while reading EA inode 1 err=-117 [ 171.869227][ T1877] EXT4-fs (loop1): Remounting filesystem read-only [ 171.876183][ T1877] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.365: inode #1: comm syz.1.365: iget: illegal inode # [ 171.915287][ T1877] EXT4-fs (loop1): Remounting filesystem read-only [ 171.935640][ T1877] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.365: error while reading EA inode 1 err=-117 [ 171.972508][ T1877] EXT4-fs (loop1): Remounting filesystem read-only [ 171.984358][ T1880] loop3: detected capacity change from 0 to 40427 [ 171.990895][ T285] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 172.009453][ T1877] EXT4-fs (loop1): 1 orphan inode deleted [ 172.015516][ T1877] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,. Quota mode: writeback. [ 172.054276][ T1880] F2FS-fs (loop3): Found nat_bits in checkpoint [ 172.221912][ T1880] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 172.254748][ T285] usb 5-1: Using ep0 maxpacket: 32 [ 172.712406][ T1898] attempt to access beyond end of device [ 172.712406][ T1898] loop3: rw=2049, want=79952, limit=40427 [ 172.723901][ T285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 172.751516][ T285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 172.768203][ T1898] attempt to access beyond end of device [ 172.768203][ T1898] loop3: rw=2049, want=81920, limit=40427 [ 172.795008][ T285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 219, changing to 11 [ 172.802447][ T1898] attempt to access beyond end of device [ 172.802447][ T1898] loop3: rw=2049, want=51200, limit=40427 [ 172.826382][ T285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 24855, setting to 1024 [ 172.861623][ T1898] attempt to access beyond end of device [ 172.861623][ T1898] loop3: rw=2049, want=53248, limit=40427 [ 172.862532][ T1894] loop5: detected capacity change from 0 to 256 [ 172.890324][ T1898] attempt to access beyond end of device [ 172.890324][ T1898] loop3: rw=2049, want=58632, limit=40427 [ 173.720173][ T1894] exFAT-fs (loop5): bogus sectors bits per cluster : 143 [ 173.720173][ T1894] [ 173.729709][ T285] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 173.739238][ T285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.747510][ T1894] exFAT-fs (loop5): failed to read boot sector [ 173.753689][ T1894] exFAT-fs (loop5): failed to recognize exfat type [ 173.762465][ T285] usb 5-1: Product: syz [ 173.766729][ T285] usb 5-1: Manufacturer: syz [ 173.771388][ T285] usb 5-1: SerialNumber: syz [ 173.777179][ T285] usb 5-1: config 0 descriptor?? [ 174.210255][ T285] usb 5-1: USB disconnect, device number 3 [ 174.651168][ T278] attempt to access beyond end of device [ 174.651168][ T278] loop3: rw=2049, want=45104, limit=40427 [ 175.019852][ T1921] netlink: 'syz.1.375': attribute type 27 has an invalid length. [ 175.042549][ T1921] bridge0: port 3(gretap0) entered disabled state [ 175.074996][ T321] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 175.085546][ T1921] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.092742][ T1921] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.190733][ T1923] bridge0: port 3(gretap0) entered blocking state [ 175.197241][ T1923] bridge0: port 3(gretap0) entered forwarding state [ 175.499446][ T1929] loop4: detected capacity change from 0 to 512 [ 175.535333][ T1930] loop3: detected capacity change from 0 to 512 [ 175.708467][ T1929] loop4: detected capacity change from 0 to 1024 [ 175.782548][ T1930] EXT4-fs (loop3): orphan cleanup on readonly fs [ 175.793682][ T1930] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.373: bg 0: block 248: padding at end of block bitmap is not set [ 175.810369][ T1930] EXT4-fs error (device loop3): ext4_acquire_dquot:6195: comm syz.3.373: Failed to acquire dquot type 1 [ 175.826602][ T1930] EXT4-fs (loop3): 1 truncate cleaned up [ 175.835070][ T1930] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000800,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,stripe=0x0000000000000008,nodiscard,,errors=continue. Quota mode: writeback. [ 176.081029][ T1929] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.725004][ T321] usb 6-1: Using ep0 maxpacket: 16 [ 176.766102][ T1923] device veth0_vlan left promiscuous mode [ 176.772139][ T1923] device veth0_vlan entered promiscuous mode [ 176.825914][ T1923] device veth1_macvtap left promiscuous mode [ 176.842917][ T1923] device veth1_macvtap entered promiscuous mode [ 176.849463][ T321] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.869823][ T321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 176.902854][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.911011][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.918429][ T321] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 176.941867][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.972188][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.992639][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 176.992654][ T30] audit: type=1400 audit(1745950285.501:425): avc: denied { relabelfrom } for pid=1938 comm="syz.2.378" name="TCPv6" dev="sockfs" ino=21175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 177.022117][ T1939] SELinux: Context system_u:object_r:public_content_rw_t:s0 is not valid (left unmapped). [ 177.035110][ T425] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.042331][ T425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.057955][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.073949][ T30] audit: type=1400 audit(1745950285.571:426): avc: denied { relabelto } for pid=1938 comm="syz.2.378" name="TCPv6" dev="sockfs" ino=21175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:public_content_rw_t:s0" [ 177.102670][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.110996][ T425] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.118076][ T425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.126113][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.136399][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 177.144596][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.152724][ T321] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 177.162320][ T321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.171615][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 177.181425][ T321] usb 6-1: Product: syz [ 177.186789][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.195523][ T321] usb 6-1: Manufacturer: syz [ 177.200160][ T321] usb 6-1: SerialNumber: syz [ 177.208189][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.217355][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.226531][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.245175][ T321] usb 6-1: config 0 descriptor?? [ 177.277194][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.295110][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.313336][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.324562][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.334342][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.342938][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.351656][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.360561][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.368723][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.377640][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.386099][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.394765][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.404092][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.412720][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.421838][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.429787][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.438751][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.447623][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.543454][ T1915] loop5: detected capacity change from 0 to 2048 [ 177.582759][ T1915] EXT4-fs (loop5): inodes count not valid: 1 vs 32 [ 177.652066][ T1947] loop3: detected capacity change from 0 to 128 [ 177.685290][ T1947] FAT-fs (loop3): Unrecognized mount option "ÿ" or missing value [ 177.698851][ T598] usb 6-1: USB disconnect, device number 3 [ 177.789376][ T1951] loop1: detected capacity change from 0 to 256 [ 179.661216][ T1960] loop2: detected capacity change from 0 to 128 [ 180.032410][ T1966] device gretap0 left promiscuous mode [ 180.040989][ T1967] loop5: detected capacity change from 0 to 512 [ 180.054832][ T1966] bridge0: port 3(gretap0) entered disabled state [ 180.125486][ T1967] EXT4-fs (loop5): Unrecognized mount option "smackfsfloor=seclabel" or missing value [ 180.550790][ T1975] syz.3.386[1975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.551180][ T1975] syz.3.386[1975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.593968][ T1975] loop3: detected capacity change from 0 to 128 [ 180.706071][ T1975] netlink: 276 bytes leftover after parsing attributes in process `syz.3.386'. [ 184.019479][ T30] audit: type=1400 audit(1745950291.601:427): avc: denied { write } for pid=1987 comm="syz.3.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.110717][ T1992] loop5: detected capacity change from 0 to 256 [ 185.468205][ T1992] exfat: Deprecated parameter 'namecase' [ 185.548334][ T1992] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 186.430754][ T30] audit: type=1400 audit(1745950294.941:428): avc: denied { remove_name } for pid=387 comm="syz-executor" name="file0" dev="loop5" ino=1048628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.599960][ T30] audit: type=1400 audit(1745950295.111:429): avc: denied { unlink } for pid=387 comm="syz-executor" name="file0" dev="loop5" ino=1048628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 186.692919][ T30] audit: type=1400 audit(1745950295.201:430): avc: denied { rmdir } for pid=387 comm="syz-executor" name="file0" dev="loop5" ino=1048626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.859905][ T2018] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 186.918258][ T2017] loop5: detected capacity change from 0 to 8192 [ 187.951611][ T2025] loop3: detected capacity change from 0 to 256 [ 187.994435][ T2028] loop4: detected capacity change from 0 to 1024 [ 188.018961][ T2025] FAT-fs (loop3): bogus number of FAT sectors [ 188.032448][ T2025] FAT-fs (loop3): Can't find a valid FAT filesystem [ 188.043897][ T2028] EXT4-fs (loop4): Mount option "dioread_lock" incompatible with ext3 [ 189.258357][ T2036] loop1: detected capacity change from 0 to 512 [ 189.303164][ T2025] loop3: detected capacity change from 0 to 512 [ 189.320490][ T30] audit: type=1400 audit(1745950297.831:431): avc: denied { listen } for pid=2027 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 189.322951][ T2040] loop2: detected capacity change from 0 to 1024 [ 189.341446][ T2036] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 189.357548][ T2028] loop4: detected capacity change from 0 to 256 [ 189.364117][ T30] audit: type=1326 audit(1745950297.871:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2035 comm="syz.5.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00333b4969 code=0x7ffc0000 [ 189.365124][ T2036] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 189.409986][ T30] audit: type=1326 audit(1745950297.901:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2035 comm="syz.5.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f00333b4969 code=0x7ffc0000 [ 189.434353][ T2036] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.404: corrupted in-inode xattr [ 189.434800][ T2040] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nombcache,dioread_lock,norecovery,barrier=0x000000000000004c,lazytime,init_itable=0x0000000000000005,usrquota,errors=continue,,errors=continue. Quota mode: writeback. [ 189.446446][ T2025] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #15: comm syz.3.400: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 189.484014][ T30] audit: type=1326 audit(1745950297.911:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2035 comm="syz.5.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00333b4969 code=0x7ffc0000 [ 189.488164][ T2036] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.404: couldn't read orphan inode 15 (err -117) [ 189.549225][ T2036] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 189.574609][ T30] audit: type=1326 audit(1745950297.911:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2035 comm="syz.5.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00333b4969 code=0x7ffc0000 [ 189.598047][ T30] audit: type=1326 audit(1745950297.911:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2035 comm="syz.5.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f00333b4969 code=0x7ffc0000 [ 189.621329][ T30] audit: type=1326 audit(1745950297.911:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2035 comm="syz.5.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00333b4969 code=0x7ffc0000 [ 189.621550][ T2025] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.400: couldn't read orphan inode 15 (err -117) [ 189.657103][ T30] audit: type=1326 audit(1745950297.911:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2035 comm="syz.5.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00333b4969 code=0x7ffc0000 [ 189.667667][ T2025] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.692591][ T2025] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.708186][ T30] audit: type=1326 audit(1745950297.911:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2035 comm="syz.5.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00333b4969 code=0x7ffc0000 [ 189.715857][ T2028] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 189.932426][ T2028] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 191.211211][ T30] audit: type=1326 audit(1745950297.911:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2035 comm="syz.5.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00333b4969 code=0x7ffc0000 [ 191.420250][ T2059] syz.3.407 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 191.423204][ T2060] loop5: detected capacity change from 0 to 512 [ 191.448018][ T2062] loop2: detected capacity change from 0 to 256 [ 191.544981][ T2062] exfat: Unknown parameter '00000000000000000000000' [ 191.603824][ T2060] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.406: inode #1: comm syz.5.406: iget: illegal inode # [ 192.271629][ T2068] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 192.620939][ T2060] EXT4-fs (loop5): Remounting filesystem read-only [ 192.635020][ T2062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 192.654022][ T2060] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.406: error while reading EA inode 1 err=-117 [ 192.677920][ T2062] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 192.678840][ T2060] EXT4-fs (loop5): Remounting filesystem read-only [ 192.699507][ T2072] loop3: detected capacity change from 0 to 512 [ 192.705035][ T2060] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.406: inode #1: comm syz.5.406: iget: illegal inode # [ 192.718388][ T2062] xt_NFQUEUE: number of total queues is 0 [ 192.721722][ T2060] EXT4-fs (loop5): Remounting filesystem read-only [ 192.774168][ T2060] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.406: error while reading EA inode 1 err=-117 [ 192.787748][ T2060] EXT4-fs (loop5): Remounting filesystem read-only [ 192.794404][ T2060] EXT4-fs (loop5): 1 orphan inode deleted [ 192.848884][ T2060] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,. Quota mode: writeback. [ 192.913354][ T2072] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 192.926217][ T2072] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.452852][ T2084] loop2: detected capacity change from 0 to 128 [ 193.497154][ T2084] EXT4-fs (loop2): Test dummy encryption mode enabled [ 193.596719][ T2084] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 193.635266][ T2084] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.686542][ T2093] loop4: detected capacity change from 0 to 512 [ 193.799487][ T2093] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 193.812815][ T2093] EXT4-fs (loop4): Test dummy encryption mode enabled [ 193.820944][ T2093] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 193.829658][ T2093] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 194.124493][ T2093] EXT4-fs (loop4): 1 truncate cleaned up [ 194.198907][ T2093] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 194.393113][ T2103] loop3: detected capacity change from 0 to 1024 [ 194.423856][ T2103] EXT4-fs (loop3): Ignoring removed bh option [ 194.433165][ T2103] EXT4-fs (loop3): Mount option "nodioread_nolock" incompatible with ext3 [ 194.443257][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 194.443272][ T30] audit: type=1326 audit(1745950302.951:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2104 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 194.474859][ T2109] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 194.514927][ T30] audit: type=1326 audit(1745950302.951:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2104 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 194.558587][ T30] audit: type=1326 audit(1745950302.991:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2104 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 194.604736][ T30] audit: type=1326 audit(1745950302.991:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2104 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 194.628478][ T30] audit: type=1326 audit(1745950303.001:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2104 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 194.633092][ T2103] loop3: detected capacity change from 0 to 512 [ 194.651951][ T30] audit: type=1326 audit(1745950303.001:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2104 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 194.681865][ T39] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 194.741456][ T2113] xt_SECMARK: invalid mode: 2 [ 194.832312][ T30] audit: type=1326 audit(1745950303.001:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2104 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 194.965605][ T30] audit: type=1326 audit(1745950303.001:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2104 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 194.988946][ T30] audit: type=1326 audit(1745950303.001:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2104 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 195.045949][ T30] audit: type=1326 audit(1745950303.001:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2104 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 195.100319][ T2109] loop5: detected capacity change from 0 to 40427 [ 195.154258][ T2109] F2FS-fs (loop5): fault_injection options not supported [ 195.168868][ T2109] F2FS-fs (loop5): invalid crc value [ 195.176133][ T2109] F2FS-fs (loop5): Found nat_bits in checkpoint [ 195.189948][ T2116] tipc: Started in network mode [ 195.195147][ T2116] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 195.204202][ T39] usb 5-1: unable to get BOS descriptor or descriptor too short [ 195.212334][ T39] usb 5-1: too many configurations: 224, using maximum allowed: 8 [ 195.243540][ T2116] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 195.252069][ T2116] tipc: Enabled bearer , priority 10 [ 195.253046][ T2109] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 195.288110][ T2109] futex_wake_op: syz.5.420 tries to shift op by -1; fix this program [ 195.628997][ T39] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 195.637488][ T2122] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 195.657503][ T39] usb 5-1: can't read configurations, error -61 [ 195.834725][ T39] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 195.870963][ T2134] loop1: detected capacity change from 0 to 512 [ 196.007632][ T2135] loop5: detected capacity change from 0 to 512 [ 196.236559][ T2134] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.425: inode #1: comm syz.1.425: iget: illegal inode # [ 196.256346][ T334] tipc: Node number set to 1 [ 196.264391][ T2135] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.426: invalid indirect mapped block 10 (level 1) [ 196.279291][ T2135] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.426: invalid indirect mapped block 8 (level 1) [ 196.294574][ T2135] EXT4-fs (loop5): 1 truncate cleaned up [ 196.300278][ T2135] EXT4-fs (loop5): mounted filesystem without journal. Opts: acl,user_xattr,,errors=continue. Quota mode: none. [ 197.400681][ T2134] EXT4-fs (loop1): Remounting filesystem read-only [ 197.407351][ T2134] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.425: error while reading EA inode 1 err=-117 [ 197.445858][ T2134] EXT4-fs (loop1): Remounting filesystem read-only [ 197.452458][ T2134] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.425: inode #1: comm syz.1.425: iget: illegal inode # [ 197.469405][ T2134] EXT4-fs (loop1): Remounting filesystem read-only [ 197.475976][ T2134] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.425: error while reading EA inode 1 err=-117 [ 197.490789][ T2134] EXT4-fs (loop1): Remounting filesystem read-only [ 197.498070][ T2134] EXT4-fs (loop1): 1 orphan inode deleted [ 197.503828][ T2134] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,. Quota mode: writeback. [ 199.049125][ T2161] loop1: detected capacity change from 0 to 512 [ 199.126869][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.258647][ T2161] loop1: detected capacity change from 0 to 1024 [ 199.360346][ T2161] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.335044][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 200.682715][ T30] audit: type=1326 audit(1745950308.831:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2153 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439d0b0969 code=0x7ffc0000 [ 200.787299][ T30] audit: type=1326 audit(1745950308.831:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2153 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439d0b0969 code=0x7ffc0000 [ 200.892160][ T30] audit: type=1326 audit(1745950309.291:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2153 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f439d0b0969 code=0x7ffc0000 [ 200.926198][ T30] audit: type=1326 audit(1745950309.291:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2153 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439d0b0969 code=0x7ffc0000 [ 201.009383][ T30] audit: type=1326 audit(1745950309.291:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2153 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439d0b0969 code=0x7ffc0000 [ 201.009416][ T30] audit: type=1326 audit(1745950309.291:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2153 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f439d0b0969 code=0x7ffc0000 [ 201.009443][ T30] audit: type=1400 audit(1745950309.471:567): avc: denied { setopt } for pid=2173 comm="syz.5.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 201.172993][ T2181] loop1: detected capacity change from 0 to 256 [ 201.182246][ T30] audit: type=1326 audit(1745950309.691:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2182 comm="syz.4.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439d0b0969 code=0x7ffc0000 [ 201.208056][ T2184] tipc: Enabled bearer , priority 0 [ 201.219229][ T30] audit: type=1326 audit(1745950309.691:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2182 comm="syz.4.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f439d0b0969 code=0x7ffc0000 [ 201.219937][ T2184] tipc: Disabling bearer [ 201.225081][ T2181] exfat: Unknown parameter '00000000000000000000000' [ 201.255979][ T30] audit: type=1326 audit(1745950309.691:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2182 comm="syz.4.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439d0b0969 code=0x7ffc0000 [ 201.291623][ T2186] loop4: detected capacity change from 0 to 512 [ 201.345981][ T2181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 201.356342][ T2181] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 201.364905][ T39] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 201.385316][ T2181] xt_NFQUEUE: number of total queues is 0 [ 201.423045][ T2186] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 201.438828][ T2186] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.454396][ T2194] loop1: detected capacity change from 0 to 512 [ 201.512670][ T2194] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 201.521235][ T2194] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 201.695076][ T2195] bridge0: port 3(gretap0) entered blocking state [ 201.700562][ T2196] loop3: detected capacity change from 0 to 512 [ 201.701536][ T2195] bridge0: port 3(gretap0) entered disabled state [ 201.715007][ T2195] device gretap0 entered promiscuous mode [ 201.721118][ T2195] bridge0: port 3(gretap0) entered blocking state [ 201.727621][ T2195] bridge0: port 3(gretap0) entered forwarding state [ 201.736836][ T2195] device gretap0 left promiscuous mode [ 201.742738][ T2195] bridge0: port 3(gretap0) entered disabled state [ 201.756736][ T2196] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.442: inode #1: comm syz.3.442: iget: illegal inode # [ 201.774208][ T2196] EXT4-fs (loop3): Remounting filesystem read-only [ 201.780810][ T2196] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.442: error while reading EA inode 1 err=-117 [ 201.793256][ T2196] EXT4-fs (loop3): Remounting filesystem read-only [ 201.799889][ T2196] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.442: inode #1: comm syz.3.442: iget: illegal inode # [ 201.813213][ T2196] EXT4-fs (loop3): Remounting filesystem read-only [ 201.819761][ T2196] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.442: error while reading EA inode 1 err=-117 [ 201.832193][ T2196] EXT4-fs (loop3): Remounting filesystem read-only [ 201.838860][ T2196] EXT4-fs (loop3): 1 orphan inode deleted [ 201.844607][ T2196] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,. Quota mode: writeback. [ 201.948057][ T39] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.958287][ T39] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.044762][ T39] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 202.053973][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 202.062091][ T39] usb 6-1: SerialNumber: syz [ 202.503192][ T2176] UDC core: couldn't find an available UDC or it's busy: -16 [ 202.521565][ T2176] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 202.650643][ T39] usb 6-1: 0:2 : does not exist [ 202.655718][ T39] usb 6-1: unit 5: unexpected type 0x09 [ 202.674779][ T39] usb 6-1: USB disconnect, device number 4 [ 202.679227][ T2213] loop3: detected capacity change from 0 to 128 [ 202.770768][ T2216] bridge0: port 3(gretap0) entered blocking state [ 202.777329][ T2216] bridge0: port 3(gretap0) entered disabled state [ 202.846423][ T2216] device gretap0 entered promiscuous mode [ 202.852487][ T2216] bridge0: port 3(gretap0) entered blocking state [ 202.858966][ T2216] bridge0: port 3(gretap0) entered forwarding state [ 202.957969][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 203.523951][ T2225] syz.4.447[2225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.524037][ T2225] syz.4.447[2225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.538223][ T2225] loop4: detected capacity change from 0 to 128 [ 203.619229][ T318] attempt to access beyond end of device [ 203.619229][ T318] loop3: rw=1, want=157, limit=128 [ 203.682500][ T2225] netlink: 276 bytes leftover after parsing attributes in process `syz.4.447'. [ 204.678770][ T2237] loop3: detected capacity change from 0 to 512 [ 205.605672][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 205.605699][ T30] audit: type=1326 audit(1745950314.121:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2227 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 205.952180][ T2237] EXT4-fs (loop3): orphan cleanup on readonly fs [ 206.000445][ T2237] Quota error (device loop3): find_tree_dqentry: Getting block too big (196613 >= 6) [ 206.010386][ T2237] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 206.021577][ T2237] EXT4-fs error (device loop3): ext4_acquire_dquot:6195: comm syz.3.460: Failed to acquire dquot type 1 [ 206.049117][ T2237] EXT4-fs (loop3): 1 truncate cleaned up [ 206.056601][ T2237] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 207.174750][ T30] audit: type=1326 audit(1745950314.151:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2227 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 207.213222][ T30] audit: type=1326 audit(1745950314.251:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2227 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 207.249665][ T30] audit: type=1326 audit(1745950314.261:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2227 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 207.340896][ T2246] loop5: detected capacity change from 0 to 512 [ 207.620768][ T2248] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 208.862141][ T30] audit: type=1326 audit(1745950314.261:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2227 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 208.924330][ T2246] EXT4-fs (loop5): orphan cleanup on readonly fs [ 208.933578][ T2246] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.451: bg 0: block 248: padding at end of block bitmap is not set [ 208.950003][ T2246] Quota error (device loop5): write_blk: dquota write failed [ 208.957591][ T2246] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 208.967643][ T2246] EXT4-fs error (device loop5): ext4_acquire_dquot:6195: comm syz.5.451: Failed to acquire dquot type 1 [ 208.982316][ T2246] EXT4-fs (loop5): 1 truncate cleaned up [ 208.988697][ T2246] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000800,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,stripe=0x0000000000000008,nodiscard,,errors=continue. Quota mode: writeback. [ 210.359270][ T2261] loop2: detected capacity change from 0 to 512 [ 210.394728][ T30] audit: type=1326 audit(1745950314.261:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2227 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 210.591745][ T2261] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 210.603015][ T2261] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.784371][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 210.797473][ T30] audit: type=1400 audit(1745950319.291:594): avc: denied { connect } for pid=2263 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 210.822933][ T2270] loop3: detected capacity change from 0 to 512 [ 211.232358][ T2276] loop5: detected capacity change from 0 to 256 [ 211.315719][ T2276] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 211.745896][ T2270] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.457: inode #1: comm syz.3.457: iget: illegal inode # [ 211.759132][ T2270] EXT4-fs (loop3): Remounting filesystem read-only [ 211.765988][ T2270] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.457: error while reading EA inode 1 err=-117 [ 211.778771][ T2270] EXT4-fs (loop3): Remounting filesystem read-only [ 211.785399][ T2270] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.457: inode #1: comm syz.3.457: iget: illegal inode # [ 211.798572][ T2270] EXT4-fs (loop3): Remounting filesystem read-only [ 211.805109][ T2270] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.457: error while reading EA inode 1 err=-117 [ 211.817458][ T2270] EXT4-fs (loop3): Remounting filesystem read-only [ 211.824082][ T2270] EXT4-fs (loop3): 1 orphan inode deleted [ 211.829922][ T2270] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,. Quota mode: writeback. [ 212.430051][ T2290] syz.5.463[2290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.430454][ T2290] syz.5.463[2290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.470113][ T2290] loop5: detected capacity change from 0 to 128 [ 212.560269][ T2290] netlink: 276 bytes leftover after parsing attributes in process `syz.5.463'. [ 213.426485][ T2294] loop3: detected capacity change from 0 to 512 [ 213.439113][ T2294] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 213.446847][ T2294] EXT4-fs (loop3): Test dummy encryption mode enabled [ 213.453649][ T2294] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 213.461265][ T2294] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 213.588088][ T2294] EXT4-fs (loop3): 1 truncate cleaned up [ 213.593890][ T2294] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 213.676112][ T2297] bridge0: port 3(gretap0) entered blocking state [ 213.682574][ T2297] bridge0: port 3(gretap0) entered disabled state [ 213.696467][ T2297] device gretap0 entered promiscuous mode [ 213.702357][ T2297] bridge0: port 3(gretap0) entered blocking state [ 213.708838][ T2297] bridge0: port 3(gretap0) entered forwarding state [ 213.716630][ T2297] device gretap0 left promiscuous mode [ 213.722194][ T2297] bridge0: port 3(gretap0) entered disabled state [ 214.044703][ T397] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 214.444789][ T397] usb 4-1: unable to get BOS descriptor or descriptor too short [ 214.452476][ T397] usb 4-1: too many configurations: 89, using maximum allowed: 8 [ 214.574871][ T397] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 214.582510][ T397] usb 4-1: can't read configurations, error -61 [ 214.734772][ T397] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 215.134805][ T397] usb 4-1: unable to get BOS descriptor or descriptor too short [ 215.142576][ T397] usb 4-1: too many configurations: 89, using maximum allowed: 8 [ 215.264824][ T397] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 215.272411][ T397] usb 4-1: can't read configurations, error -61 [ 215.278751][ T397] usb usb4-port1: attempt power cycle [ 215.684758][ T397] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 215.934819][ T397] usb 4-1: unable to get BOS descriptor or descriptor too short [ 215.942516][ T397] usb 4-1: too many configurations: 89, using maximum allowed: 8 [ 216.064807][ T397] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 216.072427][ T397] usb 4-1: can't read configurations, error -61 [ 216.224791][ T397] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 216.687490][ T2309] device veth0_vlan left promiscuous mode [ 216.703057][ T2309] device veth0_vlan entered promiscuous mode [ 216.864544][ T2310] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 217.567064][ T397] usb 4-1: unable to get BOS descriptor or descriptor too short [ 217.574793][ T397] usb 4-1: too many configurations: 89, using maximum allowed: 8 [ 217.685136][ T397] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 217.715668][ T397] usb 4-1: can't read configurations, error -71 [ 217.725075][ T397] usb usb4-port1: unable to enumerate USB device [ 218.107116][ T2311] bridge0: port 3(gretap0) entered blocking state [ 218.124966][ T2311] bridge0: port 3(gretap0) entered disabled state [ 218.164469][ T2311] device gretap0 entered promiscuous mode [ 218.193012][ T2311] bridge0: port 3(gretap0) entered blocking state [ 218.199583][ T2311] bridge0: port 3(gretap0) entered forwarding state [ 218.291341][ T2315] loop3: detected capacity change from 0 to 256 [ 218.352646][ T2329] loop1: detected capacity change from 0 to 4096 [ 218.465036][ T2315] exfat: Deprecated parameter 'utf8' [ 218.472631][ T2315] exfat: Deprecated parameter 'namecase' [ 218.504643][ T2333] loop4: detected capacity change from 0 to 512 [ 218.528820][ T2315] exfat: Deprecated parameter 'utf8' [ 218.556366][ T2329] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 218.567214][ T2315] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 218.580215][ T2329] EXT4-fs (loop1): Test dummy encryption mode enabled [ 218.659345][ T2315] fuse: Bad value for 'fd' [ 218.676479][ T2329] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,nodelalloc,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 218.703128][ T2333] EXT4-fs (loop4): 1 orphan inode deleted [ 218.715699][ T2333] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 218.760206][ T2333] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.066158][ T30] audit: type=1400 audit(1745950327.581:595): avc: denied { bind } for pid=2343 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 219.229327][ T2352] loop5: detected capacity change from 0 to 512 [ 219.593433][ T2352] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.475: inode #1: comm syz.5.475: iget: illegal inode # [ 219.630523][ T2352] EXT4-fs (loop5): Remounting filesystem read-only [ 219.643361][ T2352] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.475: error while reading EA inode 1 err=-117 [ 219.684833][ T2352] EXT4-fs (loop5): Remounting filesystem read-only [ 219.695625][ T2352] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.475: inode #1: comm syz.5.475: iget: illegal inode # [ 219.724531][ T2352] EXT4-fs (loop5): Remounting filesystem read-only [ 219.731209][ T2352] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.475: error while reading EA inode 1 err=-117 [ 219.781525][ T2352] EXT4-fs (loop5): Remounting filesystem read-only [ 219.818972][ T2352] EXT4-fs (loop5): 1 orphan inode deleted [ 219.859033][ T2352] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,. Quota mode: writeback. [ 220.108223][ T2361] loop4: detected capacity change from 0 to 1024 [ 220.431498][ T2361] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 220.570172][ T2371] loop1: detected capacity change from 0 to 256 [ 220.579396][ T2371] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 220.808612][ T2377] exFAT-fs (loop1): hint_cluster is invalid (17) [ 221.429477][ T2377] exFAT-fs (loop1): error, broken FAT chain. [ 221.435556][ T2377] exFAT-fs (loop1): Filesystem has been set read-only [ 221.442330][ T2377] exFAT-fs (loop1): error, failed to bmap (inode : ffff8881293a4970 iblock : 8, err : -5) [ 223.686195][ T2396] syz.2.485[2396] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.686923][ T2396] syz.2.485[2396] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.734961][ T2396] loop2: detected capacity change from 0 to 128 [ 223.833074][ T2396] netlink: 276 bytes leftover after parsing attributes in process `syz.2.485'. [ 224.763628][ T2407] xt_SECMARK: invalid mode: 2 [ 224.778527][ T30] audit: type=1326 audit(1745950333.261:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cabd4969 code=0x7ffc0000 [ 224.988715][ T30] audit: type=1326 audit(1745950333.261:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cabd4969 code=0x7ffc0000 [ 225.012147][ T30] audit: type=1326 audit(1745950333.261:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47cabd4969 code=0x7ffc0000 [ 225.044696][ T30] audit: type=1326 audit(1745950333.261:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cabd4969 code=0x7ffc0000 [ 225.094725][ T30] audit: type=1326 audit(1745950333.261:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cabd4969 code=0x7ffc0000 [ 225.130513][ T30] audit: type=1326 audit(1745950333.271:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f47cabd4969 code=0x7ffc0000 [ 225.154714][ T30] audit: type=1326 audit(1745950333.271:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cabd4969 code=0x7ffc0000 [ 225.249648][ T30] audit: type=1326 audit(1745950333.271:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cabd4969 code=0x7ffc0000 [ 225.298239][ T2414] loop4: detected capacity change from 0 to 512 [ 225.518157][ T30] audit: type=1326 audit(1745950333.271:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f47cabd4969 code=0x7ffc0000 [ 225.544859][ T30] audit: type=1326 audit(1745950333.271:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cabd4969 code=0x7ffc0000 [ 225.600850][ T2414] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.491: inode #1: comm syz.4.491: iget: illegal inode # [ 225.614271][ T2414] EXT4-fs (loop4): Remounting filesystem read-only [ 225.620847][ T2414] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.491: error while reading EA inode 1 err=-117 [ 225.633853][ T2414] EXT4-fs (loop4): Remounting filesystem read-only [ 225.640574][ T2414] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.491: inode #1: comm syz.4.491: iget: illegal inode # [ 225.654847][ T2414] EXT4-fs (loop4): Remounting filesystem read-only [ 225.661389][ T2414] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.491: error while reading EA inode 1 err=-117 [ 225.673767][ T2414] EXT4-fs (loop4): Remounting filesystem read-only [ 225.680441][ T2414] EXT4-fs (loop4): 1 orphan inode deleted [ 225.686406][ T2414] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,. Quota mode: writeback. [ 226.287722][ T2435] syz.5.495[2435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.287906][ T2435] syz.5.495[2435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.306388][ T2435] loop5: detected capacity change from 0 to 128 [ 227.185598][ T2435] FAT-fs (loop5): Unrecognized mount option "00000000000000000000" or missing value [ 229.434373][ T2443] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2443 comm=syz.5.499 [ 229.455360][ T2444] loop4: detected capacity change from 0 to 512 [ 229.586772][ T2444] EXT4-fs (loop4): Ignoring removed orlov option [ 229.595035][ T2444] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.500: casefold flag without casefold feature [ 229.607871][ T2444] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.500: couldn't read orphan inode 15 (err -117) [ 230.782485][ T2459] loop5: detected capacity change from 0 to 512 [ 230.854126][ T2444] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,orlov,,errors=continue. Quota mode: writeback. [ 230.889047][ T2459] EXT4-fs (loop5): orphan cleanup on readonly fs [ 230.898911][ T2459] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.502: bg 0: block 248: padding at end of block bitmap is not set [ 230.915452][ T2459] __quota_error: 8 callbacks suppressed [ 230.915477][ T2459] Quota error (device loop5): write_blk: dquota write failed [ 230.928750][ T2459] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 230.938783][ T2459] EXT4-fs error (device loop5): ext4_acquire_dquot:6195: comm syz.5.502: Failed to acquire dquot type 1 [ 230.952901][ T2459] EXT4-fs (loop5): 1 truncate cleaned up [ 230.964785][ T2459] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 232.802681][ T30] audit: type=1326 audit(1745950341.311:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2475 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 232.872096][ T2479] loop4: detected capacity change from 0 to 1024 [ 232.955360][ T30] audit: type=1326 audit(1745950341.351:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2475 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 232.986488][ T2479] EXT4-fs (loop4): Ignoring removed orlov option [ 233.014286][ T2479] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 233.085487][ T30] audit: type=1326 audit(1745950341.351:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2475 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 233.088125][ T2483] loop5: detected capacity change from 0 to 2048 [ 233.114764][ T30] audit: type=1326 audit(1745950341.351:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2475 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 233.145912][ T30] audit: type=1326 audit(1745950341.351:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2475 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 233.169987][ T30] audit: type=1326 audit(1745950341.351:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2475 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 233.193869][ T30] audit: type=1326 audit(1745950341.351:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2475 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 233.218815][ T30] audit: type=1326 audit(1745950341.351:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2475 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854d6ce969 code=0x7ffc0000 [ 233.303928][ T2483] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 233.444447][ T2485] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm vhost-2483: bg 0: block 234: padding at end of block bitmap is not set [ 233.513380][ T318] ------------[ cut here ]------------ [ 233.521404][ T318] kernel BUG at fs/ext4/inode.c:2746! [ 233.549058][ T318] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 233.555177][ T318] CPU: 0 PID: 318 Comm: kworker/u4:4 Not tainted 5.15.180-syzkaller-00024-g88c4075c39ed #0 [ 233.565172][ T318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 233.575243][ T318] Workqueue: writeback wb_workfn (flush-7:5) [ 233.581268][ T318] RIP: 0010:ext4_writepages+0x2f75/0x2f90 [ 233.587008][ T318] Code: 00 00 00 e8 ad a1 8f ff 84 db 75 2c e8 14 9f 8f ff 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 e9 d6 f7 ff ff e8 fb 9e 8f ff <0f> 0b e8 f4 9e 8f ff e8 2b 77 27 ff eb a2 e8 e8 9e 8f ff e8 1f 77 [ 233.606736][ T318] RSP: 0018:ffffc900077e7100 EFLAGS: 00010293 [ 233.612927][ T318] RAX: ffffffff81d8ff85 RBX: 0000008410000000 RCX: ffff88810c76a780 [ 233.620921][ T318] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 233.628921][ T318] RBP: ffffc900077e7470 R08: dffffc0000000000 R09: ffffed102625c5e3 [ 233.636997][ T318] R10: ffffed102625c5e3 R11: 1ffff1102625c5e2 R12: dffffc0000000000 [ 233.644995][ T318] R13: 0000000000000001 R14: 0000008000000000 R15: ffff8881312e31a8 [ 233.652986][ T318] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 233.661937][ T318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.668542][ T318] CR2: 00007f47cadfdbac CR3: 000000012ecda000 CR4: 00000000003506b0 [ 233.676536][ T318] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 233.684522][ T318] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 233.692512][ T318] Call Trace: [ 233.695801][ T318] [ 233.698741][ T318] ? xas_start+0x317/0x3e0 [ 233.703241][ T318] ? __kasan_check_read+0x11/0x20 [ 233.708299][ T318] ? mark_page_accessed+0x3b6/0x8d0 [ 233.713519][ T318] ? __activate_page+0xf40/0xf40 [ 233.718474][ T318] ? ext4_readpage+0x220/0x220 [ 233.723268][ T318] ? memcpy+0x56/0x70 [ 233.727292][ T318] ? copy_page_from_iter_atomic+0x784/0x1350 [ 233.733305][ T318] ? __kasan_check_write+0x14/0x20 [ 233.738519][ T318] ? ext4_readpage+0x220/0x220 [ 233.743313][ T318] do_writepages+0x48a/0x6c0 [ 233.747926][ T318] ? update_curr+0x2f3/0x5b0 [ 233.752534][ T318] ? __writepage+0x130/0x130 [ 233.757143][ T318] ? enqueue_task_fair+0xaa7/0x2120 [ 233.762380][ T318] ? __kasan_check_write+0x14/0x20 [ 233.767524][ T318] ? _raw_spin_lock+0x8e/0xe0 [ 233.772223][ T318] __writeback_single_inode+0xd5/0x9c0 [ 233.777709][ T318] ? wbc_attach_and_unlock_inode+0x194/0x5f0 [ 233.783708][ T318] writeback_sb_inodes+0x9c0/0x1590 [ 233.788984][ T318] ? psi_task_change+0x212/0x370 [ 233.793945][ T318] ? tracing_record_taskinfo+0x7c/0x220 [ 233.799510][ T318] ? queue_io+0x4c0/0x4c0 [ 233.803862][ T318] ? __kasan_check_read+0x11/0x20 [ 233.808909][ T318] ? queue_io+0x382/0x4c0 [ 233.813265][ T318] wb_writeback+0x3f1/0x980 [ 233.817811][ T318] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 233.823811][ T318] ? set_worker_desc+0x155/0x1c0 [ 233.828773][ T318] ? __kasan_check_write+0x14/0x20 [ 233.833923][ T318] wb_workfn+0x38f/0xe20 [ 233.838203][ T318] ? psi_task_change+0x212/0x370 [ 233.843160][ T318] ? inode_wait_for_writeback+0x200/0x200 [ 233.848897][ T318] ? tracing_record_taskinfo+0x7c/0x220 [ 233.854549][ T318] ? probe_sched_wakeup+0x64/0x80 [ 233.859602][ T318] ? ttwu_do_wakeup+0x447/0x470 [ 233.864470][ T318] ? ttwu_do_activate+0x174/0x280 [ 233.869516][ T318] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 233.875347][ T318] ? try_to_wake_up+0x611/0x1160 [ 233.880301][ T318] ? __kasan_check_read+0x11/0x20 [ 233.885342][ T318] process_one_work+0x6be/0xba0 [ 233.890224][ T318] worker_thread+0xa59/0x1200 [ 233.894929][ T318] kthread+0x411/0x500 [ 233.899023][ T318] ? worker_clr_flags+0x190/0x190 [ 233.904069][ T318] ? kthread_blkcg+0xd0/0xd0 [ 233.908680][ T318] ret_from_fork+0x1f/0x30 [ 233.913117][ T318] [ 233.916176][ T318] Modules linked in: [ 234.267577][ T318] ---[ end trace 9a4926f5f77cf75e ]--- [ 234.273374][ T318] RIP: 0010:ext4_writepages+0x2f75/0x2f90 [ 234.279444][ T318] Code: 00 00 00 e8 ad a1 8f ff 84 db 75 2c e8 14 9f 8f ff 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 e9 d6 f7 ff ff e8 fb 9e 8f ff <0f> 0b e8 f4 9e 8f ff e8 2b 77 27 ff eb a2 e8 e8 9e 8f ff e8 1f 77 [ 234.299789][ T318] RSP: 0018:ffffc900077e7100 EFLAGS: 00010293 [ 234.306853][ T318] RAX: ffffffff81d8ff85 RBX: 0000008410000000 RCX: ffff88810c76a780 [ 234.315640][ T318] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 234.323683][ T318] RBP: ffffc900077e7470 R08: dffffc0000000000 R09: ffffed102625c5e3 [ 234.332867][ T318] R10: ffffed102625c5e3 R11: 1ffff1102625c5e2 R12: dffffc0000000000 [ 234.352602][ T318] R13: 0000000000000001 R14: 0000008000000000 R15: ffff8881312e31a8 [ 234.372775][ T318] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 234.393457][ T318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.409245][ T318] CR2: 000055557f8154a8 CR3: 00000001270e4000 CR4: 00000000003506b0 [ 234.417376][ T318] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 234.425517][ T318] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 234.433581][ T318] Kernel panic - not syncing: Fatal exception [ 234.439930][ T318] Kernel Offset: disabled [ 234.444253][ T318] Rebooting in 86400 seconds..