last executing test programs: 4m37.830092933s ago: executing program 32 (id=455): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3m12.094716854s ago: executing program 33 (id=3237): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_4={0x3, 0x0, 0x9, "84e5821a"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x1, "08d91ea3"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}]}}, 0x0}, 0x0) 3m6.964469208s ago: executing program 34 (id=3410): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000), 0x4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, &(0x7f00000002c0)) 3m4.296067829s ago: executing program 35 (id=3490): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '\t\t'}]}, 0xe) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m57.39990559s ago: executing program 36 (id=3612): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2m42.461807017s ago: executing program 37 (id=3611): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00') 2m26.975857766s ago: executing program 38 (id=4403): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000001c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) getgroups(0x0, 0x0) 1m33.081959206s ago: executing program 39 (id=5918): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) 1m29.7504141s ago: executing program 40 (id=6033): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) 1m11.018923804s ago: executing program 41 (id=6728): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@discard}, {@bsdgroups}, {@resuid}, {@noauto_da_alloc}, {@minixdf}, {@errors_remount}, {@errors_continue}, {@noinit_itable}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) 1m8.606619085s ago: executing program 42 (id=6811): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 59.969611183s ago: executing program 43 (id=7109): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0x100b5, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 58.45762097s ago: executing program 6 (id=7157): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other'], 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f000000c1c0)={0x2020}, 0x2020) 57.590032094s ago: executing program 6 (id=7179): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba381d071ad7cb80a52bec572e29b0b9b55c235806b97e166609f8083ce776075c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='d']) 57.500205494s ago: executing program 6 (id=7182): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090018000000"], 0x4c}}, 0x0) 57.460924664s ago: executing program 6 (id=7183): openat$tun(0xffffffffffffff9c, 0x0, 0x208d02, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@grpquota}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 57.326361954s ago: executing program 6 (id=7189): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 56.780900167s ago: executing program 6 (id=7191): readv(0xffffffffffffffff, &(0x7f00000005c0)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/15, 0xf}], 0x3) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x200, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 56.757258267s ago: executing program 44 (id=7191): readv(0xffffffffffffffff, &(0x7f00000005c0)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/15, 0xf}], 0x3) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x200, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 55.807304952s ago: executing program 9 (id=7225): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@RTM_DELMDB={0x18, 0x55, 0x93d, 0x2, 0x25dfdbfc, {0x7, r2}}, 0x18}}, 0x0) 55.783487642s ago: executing program 9 (id=7226): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='sys_enter\x00', r0}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) listen(0xffffffffffffffff, 0x3) 55.753753672s ago: executing program 9 (id=7227): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@random="e56d617da63c", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @address_request={0x11, 0x0, 0x0, 0x81}}}}}, 0x0) close(r0) 55.529333743s ago: executing program 9 (id=7228): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f00000000c0)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000084c0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 55.501462353s ago: executing program 9 (id=7229): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 55.381399684s ago: executing program 9 (id=7230): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a00000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 43.455667916s ago: executing program 8 (id=7587): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x0, 0x7a9, 0x80, 0x7, 0xff, "282e3e2901981dba3192222091fc0d00329041", 0x5, 0x5}) write$UHID_INPUT(r1, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) 43.433643937s ago: executing program 8 (id=7588): r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) 43.398328797s ago: executing program 8 (id=7589): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0), 0x3, 0x4c1, &(0x7f0000000680)="$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") r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r0, 0x7ffb, 0x1) getdents(r0, 0x0, 0x22) 43.323985777s ago: executing program 8 (id=7591): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1008080, &(0x7f0000000100)=ANY=[], 0x3, 0x1263, &(0x7f0000000580)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r1 = syz_io_uring_setup(0x1037, &(0x7f0000000300)={0x0, 0x435a, 0x100, 0x2, 0x237}, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000480)=[r0], 0x1) 43.251131228s ago: executing program 8 (id=7592): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x10001) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 42.939210799s ago: executing program 8 (id=7597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) utimes(0x0, 0x0) 42.916695999s ago: executing program 45 (id=7597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) utimes(0x0, 0x0) 40.36042898s ago: executing program 46 (id=7230): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a00000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 38.650122618s ago: executing program 5 (id=7692): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 38.618662218s ago: executing program 5 (id=7694): socket$nl_sock_diag(0x10, 0x3, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') 38.598349628s ago: executing program 5 (id=7696): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syslog(0x4, &(0x7f0000000080), 0x0) 38.397535559s ago: executing program 5 (id=7703): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x1) 38.384017039s ago: executing program 5 (id=7705): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)='d', 0x1}], 0x1}}], 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r1, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 38.27938796s ago: executing program 5 (id=7710): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) 38.25566553s ago: executing program 47 (id=7710): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) 15.939323499s ago: executing program 3 (id=8571): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) r1 = timerfd_create(0x9, 0x0) timerfd_gettime(r1, &(0x7f0000000000)) 15.927407159s ago: executing program 3 (id=8572): creat(&(0x7f00000014c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) 15.916323869s ago: executing program 3 (id=8573): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000000002"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x2500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.898661819s ago: executing program 3 (id=8574): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0xfd, 0x1eb, &(0x7f00000008c0)="$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") sched_setscheduler(0x0, 0x1, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) 15.85278722s ago: executing program 3 (id=8575): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 11.722570768s ago: executing program 3 (id=8693): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 11.595446519s ago: executing program 48 (id=8693): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.263016152s ago: executing program 7 (id=8865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000001480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.262770512s ago: executing program 0 (id=8867): preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x2a, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) writev(r0, &(0x7f00000000c0), 0x1000000000000195) ioctl$TCFLSH(r0, 0x540b, 0x2) 6.247137482s ago: executing program 4 (id=8868): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in=@broadcast}}]}, 0x154}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7e, 0x3d, 0xc4, 0x10, 0x6cd, 0x121, 0xdd3d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x85, 0x0, 0x1, 0x89, 0xfe, 0x1f, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x8b}}]}}]}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0xb4, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902a2000301ab00000904000000010100000a24010000000201020c2407"], 0x0) 3.496903414s ago: executing program 0 (id=8872): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./bus/file0\x00', 0x0) 3.440067705s ago: executing program 7 (id=8873): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) getgroups(0x449a065a, 0xfffffffffffffffe) 3.409320665s ago: executing program 0 (id=8875): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, 0x0, 0x9, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @rand_addr=0x64010101}}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x1c, &(0x7f0000000480)={&(0x7f0000000000)={0x34, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14}]}]}, 0x34}}, 0x4040) 3.398150035s ago: executing program 7 (id=8877): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$inet6(0xa, 0x3, 0xff) 3.325947956s ago: executing program 0 (id=8878): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000780)={'#! ', './file0', [{0x20, 'FR\xa1\xd0\xd4\xe5\x02\x1c@>\xd4\xc2w\x178\xd6\xfbFQ\xd0\xcc\xb0)\xe8\x15\xc7\xe0B\xbb\xaa\xcex\x7f\xd3 \xe7\x16\xcf\xb9I\x14\x7f\xd2\xe8\xb9h\xf4k\xfcQ\xdb\xfe(\x1c\xb1K\xfd\x88|\xec\x8a\x9a\xf0\xfc\xa4\xceT\xb9=\xc8\xaaK\x15\xd6\x18\xc1\x9c\xdd\xd5\xfd\x80\v\xeb\x9d{0\xd3\xe8G*9\xf47`\xdf\xe5\xb8:\xac\xf5\xde^w\xaf\xe0\x85\xe8\r\xf7\x1b8\x00d\x19\xb5\xd5U\xa4\xfd\xb5\x88B\x98\xf4\x97\b\xcb[\'\x1c\xe6\x85\x1a\xea\x99\xc7\x1f\x90E\xcaC\xa0\xcc\x1f\xcf{0\x02\x8b\xcc\xd2\xd0\xbf\vRr\xe7\xf1\a\xa8\xcc\xa5~\x14g\x05\b$\xaaU\x1d\xe1\x00\xf5\xed\xe8s\xf3,\x83]\xc6Ra\x1b\x1d\xa0\xe3\x7f\xae\xa2,\x15D \xbd\xcaGe\xf7\x1e\x11\xc4l\x01\x1dDUE8\xd1\xd4\xc3\xc7pW`\xe97C2)W\xf3Ub\x00K\x00h\x1e\xd8\x1b\xf1\x16\xf1\x17tI'}, {0x20, '\x02\x00\x00,+2\xcc\xfc\xff\xfb\xfb\x82\xc3\xbb\xf8`\x02\x03\xfby\xafyB\x1a'}]}, 0x114) r1 = socket$inet(0x2, 0x2, 0x1) sendfile(r1, r0, &(0x7f0000000240)=0x100, 0x2a) 1.506399424s ago: executing program 0 (id=8880): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x4f, 0x1dc0, 0x4000, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) 1.506022904s ago: executing program 4 (id=8882): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x44}}, 0x0) 1.458402384s ago: executing program 0 (id=8883): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x8, 0x0) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb}, 0x11000) 459.984538ms ago: executing program 7 (id=8885): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1, 0x0, 0x0, @void, @value, @void, @value=0x11}, 0x48) 459.879738ms ago: executing program 2 (id=8886): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./bus/file0\x00', 0x0) 438.087228ms ago: executing program 4 (id=8888): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x104}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x0, 0x0) 420.204449ms ago: executing program 4 (id=8889): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) 407.345948ms ago: executing program 7 (id=8890): r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfd}, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfd, 0xfddbdf25}, 0xc) 370.121969ms ago: executing program 4 (id=8892): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}}, 0x0) 355.199889ms ago: executing program 4 (id=8893): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 353.117479ms ago: executing program 7 (id=8894): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 334.405809ms ago: executing program 1 (id=8895): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, 0x0) 306.194719ms ago: executing program 2 (id=8896): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001780)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000015000000b7090000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cd7e027e5191e36a97550000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba991c3116776458d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc33a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a016852ccd0000000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbda0f31f00a8ce6e973a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda907f976dee2651fb6da4435497a29682881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff9402b0960a7097b9cf8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139cad54b65b90009950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e260321760666d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca78a0000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a420c08dd810bc97204b7600000000000000000000000000cb1c30c01b22ae3c1c473e111022c5cede47cb335cb842bb1269ca8098f4d248c989727cdc413d3de1f06eff2ebb36826e5f0db6962891605fcb95af5087d3778e06f45516f8268ccdb1a0db1847a592960032045dd3fd3f3833199b6cc86fe4d76ecda53270a3a6fbce4cd87e3b82a47204be63375b1672039dba57afdeaa342ab3e85816475c7c1a5078fb4daa82b6e0f70e7459619015b364ec58c71ed3b015a64cb9f6d941d67a0622900dc0c8402c54b03a8b01ddd772c24a444c9730556b144d2931d67615e22a401a6cfc654c116c9abb5d1835843d2cbe2eaa594bc649443defca1cb93829"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f2f, 0xf, 0x3ce, &(0x7f00000007c0)="9f449487219195806840106a05dd", 0x0, 0xfd33, 0x0, 0xb1, 0xffffffffffffff19, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e0798e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="675901b49f4914256e6e8d2aa26c9567dbec07a38cc0bec64eeba31aad6c0da339f977f6873cf1c73e0218cc94c8c0b4b438ca1e7f4987540d92492448791407e6f37a521ba9b42d969a3ce903efb9a39fa05bdbe7424e36a542c3b00485fcef3be43c5d45a5b3d63291adda6d81d771cacea20e5f33ca681f54a044d1862f38b4dfc849614974842fef9114b4e01d957e5e8c523a62190362cfb27c82bb1d6f9efaada5bccb1ca44f56b191ebcd2580b61194842af36549aa2359742c48ed9d3c2a61c51c1ca0d724cf0bf1c0d6ed1705", 0x0, 0x0, 0x2}, 0x23) 269.195379ms ago: executing program 1 (id=8897): r0 = socket$netlink(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0x7ff}}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xdf8c}]}, 0x3c}}, 0x0) 190.292249ms ago: executing program 2 (id=8898): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) 186.452859ms ago: executing program 1 (id=8899): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 158.61699ms ago: executing program 1 (id=8900): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x0) 149.8138ms ago: executing program 2 (id=8901): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) iopl(0x3) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000240)=0x4) 105.37892ms ago: executing program 1 (id=8902): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f00000024c0), 0x28}, 0x4) 73.16359ms ago: executing program 2 (id=8903): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0xb00) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 58.18966ms ago: executing program 1 (id=8904): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) epoll_create(0x5) 0s ago: executing program 2 (id=8905): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mm_page_alloc\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1403, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): :unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:" [ 280.450881][T17640] FAT-fs (loop0): Directory bread(block 66) failed [ 280.484145][T17640] FAT-fs (loop0): Directory bread(block 67) failed [ 280.501136][T17640] FAT-fs (loop0): Directory bread(block 68) failed [ 280.518473][T17640] FAT-fs (loop0): Directory bread(block 69) failed [ 280.530645][T17647] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 280.534826][T17640] FAT-fs (loop0): Directory bread(block 70) failed [ 280.536532][T17647] syzkaller0: linktype set to 780 [ 280.547583][T17640] FAT-fs (loop0): Directory bread(block 71) failed [ 280.550965][T17649] pim6reg: tun_chr_ioctl cmd 1074025677 [ 280.558256][T17640] FAT-fs (loop0): Directory bread(block 72) failed [ 280.562644][T17649] pim6reg: linktype set to 769 [ 280.573255][T17640] FAT-fs (loop0): Directory bread(block 73) failed [ 280.814533][T17665] loop2: detected capacity change from 0 to 256 [ 280.823189][T17665] exfat: Deprecated parameter 'namecase' [ 280.828700][T17665] exfat: Deprecated parameter 'utf8' [ 280.842283][ T28] audit: type=1400 audit(2134220641.785:5217): avc: denied { bind } for pid=17668 comm="syz.8.7434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 280.847807][T17665] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 281.023615][T17685] loop0: detected capacity change from 0 to 128 [ 281.039266][T17685] EXT4-fs mount: 91 callbacks suppressed [ 281.039287][T17685] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 281.086908][T17685] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 281.114210][T17685] fscrypt (loop0, inode 12): Direct key flag not allowed with different contents and filenames modes [ 281.161248][T17131] EXT4-fs (loop0): unmounting filesystem. [ 281.298537][T17716] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 281.318101][T17716] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.325138][T17716] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.844656][ T28] audit: type=1400 audit(2134220642.795:5218): avc: denied { mount } for pid=17741 comm="syz.4.7465" name="/" dev="ramfs" ino=84023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 281.898466][T17749] loop2: detected capacity change from 0 to 256 [ 281.914099][T17749] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 282.029798][T17763] loop4: detected capacity change from 0 to 512 [ 282.040974][T17763] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.048203][T17763] EXT4-fs: Ignoring removed orlov option [ 282.055939][T17765] loop2: detected capacity change from 0 to 16 [ 282.062458][T17765] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock [ 282.062781][T17763] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 282.083018][T17763] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 282.094747][T17763] EXT4-fs (loop4): 1 orphan inode deleted [ 282.100361][T17763] EXT4-fs (loop4): 1 truncate cleaned up [ 282.107258][T17763] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 282.119116][T17763] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 282.140763][T17763] EXT4-fs (loop4): Remounting filesystem read-only [ 282.181705][T16925] EXT4-fs (loop4): unmounting filesystem. [ 282.430165][T17790] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7487'. [ 282.474037][ T28] audit: type=1400 audit(2134220643.425:5219): avc: denied { mounton } for pid=17791 comm="syz.4.7488" path="/96/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 282.572746][ T942] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 282.744625][T17802] loop4: detected capacity change from 0 to 256 [ 282.782758][ T942] usb 3-1: Using ep0 maxpacket: 16 [ 282.790383][ T942] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 282.808004][ T942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.826068][ T942] usb 3-1: Product: syz [ 282.830072][ T942] usb 3-1: Manufacturer: syz [ 282.843309][ T942] usb 3-1: SerialNumber: syz [ 282.853571][ T942] r8152-cfgselector 3-1: config 0 descriptor?? [ 282.905506][T17818] loop4: detected capacity change from 0 to 512 [ 282.912266][T17818] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 282.933996][T17818] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 282.968706][T17818] EXT4-fs (loop4): 1 truncate cleaned up [ 282.974278][T17818] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 282.994919][T17818] EXT4-fs (loop4): shut down requested (2) [ 283.020985][T16925] EXT4-fs (loop4): unmounting filesystem. [ 283.069065][ T942] r8152-cfgselector 3-1: Unknown version 0x0000 [ 283.077726][ T942] r8152-cfgselector 3-1: Unknown version 0x0000 [ 283.092785][ T942] r8152-cfgselector 3-1: bad CDC descriptors [ 283.267834][T17832] loop4: detected capacity change from 0 to 1024 [ 283.275708][T17832] EXT4-fs: Ignoring removed nomblk_io_submit option [ 283.286919][T17832] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 283.296778][T17832] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814c01c, mo2=0003] [ 283.307619][ T942] usb 3-1: USB disconnect, device number 48 [ 283.314061][T17832] System zones: 0-1, 3-36 [ 283.319580][T17832] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 283.342237][T16925] EXT4-fs (loop4): unmounting filesystem. [ 283.359647][ T28] audit: type=1400 audit(2134220644.305:5220): avc: denied { mounton } for pid=17836 comm="syz.4.7507" path="/112/file0" dev="tmpfs" ino=596 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 283.547248][T17839] loop4: detected capacity change from 0 to 40427 [ 283.555036][T17839] F2FS-fs (loop4): invalid crc value [ 283.568960][T17845] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 283.590832][T17839] F2FS-fs (loop4): Found nat_bits in checkpoint [ 283.620498][T17853] loop8: detected capacity change from 0 to 128 [ 283.629188][T17853] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 283.637897][T17853] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.659135][T16176] EXT4-fs (loop8): unmounting filesystem. [ 283.691760][T17839] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 283.737848][T17839] syz.4.7508: attempt to access beyond end of device [ 283.737848][T17839] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 283.891878][T17875] loop8: detected capacity change from 0 to 1024 [ 283.918855][T17875] EXT4-fs: Ignoring removed orlov option [ 283.932765][T17875] EXT4-fs: Ignoring removed nomblk_io_submit option [ 283.984051][T17875] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 284.012885][T16176] EXT4-fs (loop8): unmounting filesystem. [ 284.073998][ T28] audit: type=1400 audit(2134220645.025:5221): avc: denied { mount } for pid=17891 comm="syz.2.7530" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 284.126326][ T28] audit: type=1400 audit(2134220645.065:5222): avc: denied { unmount } for pid=17132 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 284.167360][T17902] loop2: detected capacity change from 0 to 256 [ 284.291892][T17890] loop8: detected capacity change from 0 to 40427 [ 284.319494][T17890] F2FS-fs (loop8): Image doesn't support compression [ 284.336360][T17890] F2FS-fs (loop8): invalid crc value [ 284.349954][T17890] F2FS-fs (loop8): Found nat_bits in checkpoint [ 284.435050][T17890] F2FS-fs (loop8): Start checkpoint disabled! [ 284.451276][T17890] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 284.570461][ T43] kworker/u4:2: attempt to access beyond end of device [ 284.570461][ T43] loop8: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 284.597431][ T43] kworker/u4:2: attempt to access beyond end of device [ 284.597431][ T43] loop8: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 284.678444][T17943] loop2: detected capacity change from 0 to 1024 [ 284.713115][T17943] EXT4-fs: Ignoring removed nomblk_io_submit option [ 284.732787][T17943] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 284.780265][T17943] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 284.817299][T17943] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 284.860500][T17132] EXT4-fs (loop2): unmounting filesystem. [ 284.900844][T17958] loop8: detected capacity change from 0 to 512 [ 284.954665][T17958] EXT4-fs (loop8): 1 orphan inode deleted [ 284.970388][T17958] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 284.979223][ T43] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 284.992747][ T43] EXT4-fs error (device loop8): ext4_release_dquot:6811: comm kworker/u4:2: Failed to release dquot type 1 [ 285.002831][T17958] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.030938][T17940] loop4: detected capacity change from 0 to 40427 [ 285.065135][T17940] F2FS-fs (loop4): fault_injection options not supported [ 285.077568][T17940] F2FS-fs (loop4): invalid crc value [ 285.110129][T17940] F2FS-fs (loop4): Found nat_bits in checkpoint [ 285.119487][T16176] EXT4-fs (loop8): unmounting filesystem. [ 285.189295][T17974] loop8: detected capacity change from 0 to 2048 [ 285.204012][T17962] loop2: detected capacity change from 0 to 40427 [ 285.211483][T17962] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 285.222024][T17940] F2FS-fs (loop4): Start checkpoint disabled! [ 285.231707][T17962] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 285.241296][T17962] F2FS-fs (loop2): invalid crc value [ 285.247493][T17974] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 285.255836][T17940] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 285.260248][T17974] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 285.263242][ T28] audit: type=1400 audit(2134220646.215:5223): avc: denied { append } for pid=17973 comm="syz.8.7564" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 285.277941][T17974] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 22 with error 28 [ 285.312216][T17974] EXT4-fs (loop8): This should not happen!! Data will be lost [ 285.312216][T17974] [ 285.341005][T17962] F2FS-fs (loop2): Found nat_bits in checkpoint [ 285.352904][T17974] EXT4-fs (loop8): Total free blocks count 0 [ 285.358737][T17974] EXT4-fs (loop8): Free/Dirty block details [ 285.392803][T17974] EXT4-fs (loop8): free_blocks=2415919104 [ 285.412794][T17974] EXT4-fs (loop8): dirty_blocks=32 [ 285.423151][ T10] kworker/u4:1: attempt to access beyond end of device [ 285.423151][ T10] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 285.437040][T17974] EXT4-fs (loop8): Block reservation details [ 285.452768][T17974] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 285.490196][T17962] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 285.503879][T17962] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 285.523123][T16176] EXT4-fs (loop8): unmounting filesystem. [ 285.563056][T17986] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 285.573882][T17962] syz.2.7559: attempt to access beyond end of device [ 285.573882][T17962] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 285.651842][T17132] syz-executor: attempt to access beyond end of device [ 285.651842][T17132] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 285.765885][T18000] loop8: detected capacity change from 0 to 512 [ 285.804279][T18000] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 2: comm syz.8.7574: invalid block [ 285.823085][T18000] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.7574: invalid indirect mapped block 10 (level 1) [ 285.838991][T18000] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.7574: invalid indirect mapped block 8 (level 1) [ 285.852020][T18005] Bluetooth: hci0: Frame reassembly failed (-84) [ 285.852605][T18000] EXT4-fs (loop8): 1 truncate cleaned up [ 285.863687][T18000] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 285.900025][T16176] EXT4-fs (loop8): unmounting filesystem. [ 285.907044][T18010] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7577'. [ 285.981213][ T28] audit: type=1400 audit(2134220646.925:5224): avc: denied { map } for pid=18020 comm="syz.2.7582" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 286.055223][T18029] loop2: detected capacity change from 0 to 512 [ 286.082779][T18029] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 286.094497][T18029] EXT4-fs (loop2): 1 orphan inode deleted [ 286.100103][T18029] EXT4-fs (loop2): 1 truncate cleaned up [ 286.106036][T18029] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 286.119299][T18029] EXT4-fs (loop2): shut down requested (2) [ 286.129725][T18036] loop8: detected capacity change from 0 to 512 [ 286.137677][T17132] EXT4-fs (loop2): unmounting filesystem. [ 286.160966][T18036] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 286.169923][T18036] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.190451][T16176] EXT4-fs (loop8): unmounting filesystem. [ 286.234832][T18043] loop8: detected capacity change from 0 to 8192 [ 286.242002][T18043] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 286.263637][T16176] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000001) [ 286.271346][T16176] FAT-fs (loop8): Filesystem has been set read-only [ 286.732006][T18056] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.739732][T18056] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.747160][T18056] device bridge_slave_0 entered promiscuous mode [ 286.756815][T18056] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.763882][T18056] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.771269][T18056] device bridge_slave_1 entered promiscuous mode [ 286.834980][ T10] device bridge_slave_1 left promiscuous mode [ 286.841249][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.848981][ T10] device bridge_slave_0 left promiscuous mode [ 286.855155][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.863379][ T10] device veth1_macvtap left promiscuous mode [ 286.869318][ T10] device veth0_vlan left promiscuous mode [ 286.973409][T18056] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.980304][T18056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.987400][T18056] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.994280][T18056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.026114][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 287.034370][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.041530][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.058974][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 287.067202][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.074078][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.081615][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 287.090578][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.097468][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.113811][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.121883][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.140044][T18056] device veth0_vlan entered promiscuous mode [ 287.146617][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 287.154955][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 287.162903][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 287.170219][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 287.191657][T18056] device veth1_macvtap entered promiscuous mode [ 287.198664][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 287.213091][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 287.221413][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 287.309710][T18070] loop5: detected capacity change from 0 to 512 [ 287.317855][T18070] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.7603: Invalid inode bitmap blk 4 in block_group 0 [ 287.331716][T18070] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 287.350669][T18056] EXT4-fs (loop5): unmounting filesystem. [ 287.383597][T18075] loop5: detected capacity change from 0 to 512 [ 287.389966][T18075] EXT4-fs: Ignoring removed nomblk_io_submit option [ 287.396999][T18075] EXT4-fs (loop5): Test dummy encryption mode enabled [ 287.405545][T18075] EXT4-fs (loop5): 1 truncate cleaned up [ 287.411340][T18075] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 287.430666][T18056] EXT4-fs (loop5): unmounting filesystem. [ 287.458202][T18080] loop2: detected capacity change from 0 to 256 [ 287.473729][T18080] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 287.490987][ T28] audit: type=1400 audit(2134220648.445:5225): avc: denied { write } for pid=305 comm="kworker/1:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=84800 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 287.527877][T18080] syz.2.7607: attempt to access beyond end of device [ 287.527877][T18080] loop2: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 287.563474][T18087] loop2: detected capacity change from 0 to 128 [ 287.685127][T18096] loop5: detected capacity change from 0 to 512 [ 287.691921][T18096] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 287.703870][T18096] EXT4-fs (loop5): 1 orphan inode deleted [ 287.709426][T18096] EXT4-fs (loop5): 1 truncate cleaned up [ 287.715061][T18096] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 287.727598][T18096] EXT4-fs (loop5): shut down requested (2) [ 287.741105][T18056] EXT4-fs (loop5): unmounting filesystem. [ 287.795490][T18104] loop5: detected capacity change from 0 to 128 [ 287.882742][ T6438] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 287.883114][ T8155] Bluetooth: hci0: command 0x1003 tx timeout [ 287.938344][T18111] netlink: 88 bytes leftover after parsing attributes in process `syz.5.7619'. [ 288.113381][T18126] netlink: 'syz.2.7626': attribute type 11 has an invalid length. [ 288.128307][T18126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7626'. [ 288.181131][T18136] loop2: detected capacity change from 0 to 512 [ 288.188242][T18136] EXT4-fs: Ignoring removed mblk_io_submit option [ 288.212807][T18136] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 288.245680][T18142] loop5: detected capacity change from 0 to 2048 [ 288.252970][T18136] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c119, mo2=0082] [ 288.260735][T18136] System zones: 1-12 [ 288.277601][T18136] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.7631: corrupted in-inode xattr [ 288.300107][T18136] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.7631: couldn't read orphan inode 15 (err -117) [ 288.312581][T18142] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 288.332977][T18136] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 288.342801][T18142] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 288.344217][T18136] EXT4-fs (loop2): shut down requested (2) [ 288.370324][T18136] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=16 [ 288.379799][T18136] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=16 [ 288.388461][T18136] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=16 [ 288.388823][T18142] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 288.410409][T17132] EXT4-fs (loop2): unmounting filesystem. [ 288.478851][T18142] EXT4-fs (loop5): This should not happen!! Data will be lost [ 288.478851][T18142] [ 288.512717][T18142] EXT4-fs (loop5): Total free blocks count 0 [ 288.532886][T18142] EXT4-fs (loop5): Free/Dirty block details [ 288.538655][T18142] EXT4-fs (loop5): free_blocks=2415919104 [ 288.545497][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7642'. [ 288.558487][T18167] loop0: detected capacity change from 0 to 512 [ 288.566959][T18142] EXT4-fs (loop5): dirty_blocks=48 [ 288.581197][T18167] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 288.591176][T18142] EXT4-fs (loop5): Block reservation details [ 288.597105][T18167] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 288.606617][T18142] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 288.613905][T18167] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 288.623226][T18167] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 288.631131][T18167] System zones: 0-2, 18-18, 34-34 [ 288.636864][T18167] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 288.653624][T18167] EXT4-fs (loop0): 1 truncate cleaned up [ 288.659141][T18167] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 288.687468][T18056] EXT4-fs (loop5): unmounting filesystem. [ 288.701285][T17131] EXT4-fs (loop0): unmounting filesystem. [ 288.835766][T18186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7652'. [ 288.881442][ T28] audit: type=1326 audit(2134220649.825:5226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.5.7654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927497ff19 code=0x7ffc0000 [ 288.932771][ T28] audit: type=1326 audit(2134220649.825:5227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.5.7654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927497ff19 code=0x7ffc0000 [ 288.956555][ T39] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 288.988967][ T28] audit: type=1326 audit(2134220649.865:5228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.5.7654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f927497ff19 code=0x7ffc0000 [ 289.014214][ T28] audit: type=1326 audit(2134220649.865:5229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.5.7654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927497ff19 code=0x7ffc0000 [ 289.038104][ T28] audit: type=1326 audit(2134220649.865:5230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.5.7654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927497ff19 code=0x7ffc0000 [ 289.062033][ T28] audit: type=1326 audit(2134220649.865:5231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.5.7654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f927497ff19 code=0x7ffc0000 [ 289.094010][ T28] audit: type=1326 audit(2134220649.865:5232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.5.7654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927497ff19 code=0x7ffc0000 [ 289.129434][ T28] audit: type=1326 audit(2134220649.865:5233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.5.7654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927497ff19 code=0x7ffc0000 [ 289.142754][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 289.163883][ T28] audit: type=1326 audit(2134220649.865:5234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.5.7654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f927497ff19 code=0x7ffc0000 [ 289.170229][ T39] usb 5-1: unable to get BOS descriptor or descriptor too short [ 289.212737][ T28] audit: type=1326 audit(2134220649.865:5235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.5.7654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 289.232390][ T39] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 289.267742][ T39] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 289.293493][ T39] usb 5-1: config 4 has no interface number 0 [ 289.302007][ T8601] device syz_tun left promiscuous mode [ 289.307375][ T8601] bridge0: port 3(syz_tun) entered disabled state [ 289.326791][ T39] usb 5-1: string descriptor 0 read error: -22 [ 289.333394][ T39] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 289.342338][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.353644][ T39] usb 5-1: Found UVC 0.02 device (04f2:b746) [ 289.360538][ T39] usb 5-1: No valid video chain found. [ 289.425971][T18198] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.436708][T18198] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.448952][T18198] device bridge_slave_0 entered promiscuous mode [ 289.465882][T18198] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.472949][T18198] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.480530][T18198] device bridge_slave_1 entered promiscuous mode [ 289.521233][ T8601] EXT4-fs (loop9): unmounting filesystem. [ 289.553837][T18198] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.560712][T18198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.567856][T18198] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.574726][T18198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.578127][ T39] usb 5-1: USB disconnect, device number 32 [ 289.606630][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.614400][ T9432] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.621668][ T9432] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.632652][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.640867][ T9432] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.647733][ T9432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.663761][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.665641][T18212] loop2: detected capacity change from 0 to 512 [ 289.672002][ T9432] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.678688][T18212] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 289.684541][ T9432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.693148][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.696980][T18212] EXT4-fs (loop2): 1 truncate cleaned up [ 289.714737][T18212] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 289.724606][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 289.733946][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.742932][T17132] EXT4-fs (loop2): unmounting filesystem. [ 289.747042][T18198] device veth0_vlan entered promiscuous mode [ 289.762651][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 289.770868][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 289.779422][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 289.788719][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 289.806892][ T43] device gretap1 left promiscuous mode [ 289.807393][T18218] loop5: detected capacity change from 0 to 512 [ 289.812177][ T43] bridge0: port 1(gretap1) entered disabled state [ 289.825337][T18218] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 289.841666][T18218] EXT4-fs (loop5): 1 orphan inode deleted [ 289.848006][T18198] device veth1_macvtap entered promiscuous mode [ 289.852827][T18218] EXT4-fs (loop5): 1 truncate cleaned up [ 289.859896][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 289.873540][T18218] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 289.893454][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 289.912296][T18218] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz.5.7663: path /24/bus/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 289.998767][T18229] loop0: detected capacity change from 0 to 512 [ 290.016752][T18056] EXT4-fs (loop5): unmounting filesystem. [ 290.024135][ T43] device bridge_slave_1 left promiscuous mode [ 290.032802][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.039715][T18229] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 290.060101][ T43] device veth1_macvtap left promiscuous mode [ 290.063697][T18229] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 290.072761][ T43] device veth0_vlan left promiscuous mode [ 290.082498][T18229] EXT4-fs (loop0): 1 truncate cleaned up [ 290.091627][T18229] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 290.121323][T18229] EXT4-fs (loop0): shut down requested (2) [ 290.191890][T17131] EXT4-fs (loop0): unmounting filesystem. [ 290.278147][T18234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7669'. [ 290.289341][T18236] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7668'. [ 290.387472][T18262] loop3: detected capacity change from 0 to 256 [ 290.407645][T18262] FAT-fs (loop3): Directory bread(block 64) failed [ 290.419660][T18266] loop2: detected capacity change from 0 to 1024 [ 290.426128][T18262] FAT-fs (loop3): Directory bread(block 65) failed [ 290.432598][T18262] FAT-fs (loop3): Directory bread(block 66) failed [ 290.438993][T18262] FAT-fs (loop3): Directory bread(block 67) failed [ 290.446467][T18266] EXT4-fs: Ignoring removed i_version option [ 290.452412][T18262] FAT-fs (loop3): Directory bread(block 68) failed [ 290.466931][T18262] FAT-fs (loop3): Directory bread(block 69) failed [ 290.473864][T18266] EXT4-fs (loop2): Test dummy encryption mode enabled [ 290.480532][T18262] FAT-fs (loop3): Directory bread(block 70) failed [ 290.487010][T18262] FAT-fs (loop3): Directory bread(block 71) failed [ 290.493533][T18262] FAT-fs (loop3): Directory bread(block 72) failed [ 290.512920][T18262] FAT-fs (loop3): Directory bread(block 73) failed [ 290.523302][T18266] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 290.569311][T18273] loop4: detected capacity change from 0 to 256 [ 290.601808][T18273] FAT-fs (loop4): Directory bread(block 64) failed [ 290.606808][T17132] EXT4-fs (loop2): unmounting filesystem. [ 290.614269][T18273] FAT-fs (loop4): Directory bread(block 65) failed [ 290.620637][T18273] FAT-fs (loop4): Directory bread(block 66) failed [ 290.648596][T18277] loop3: detected capacity change from 0 to 512 [ 290.663055][T18273] FAT-fs (loop4): Directory bread(block 67) failed [ 290.670215][T18273] FAT-fs (loop4): Directory bread(block 68) failed [ 290.682132][T18273] FAT-fs (loop4): Directory bread(block 69) failed [ 290.694302][T18273] FAT-fs (loop4): Directory bread(block 70) failed [ 290.702398][T18277] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 290.734783][T18273] FAT-fs (loop4): Directory bread(block 71) failed [ 290.741173][T18273] FAT-fs (loop4): Directory bread(block 72) failed [ 290.747882][T18277] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 290.770551][T18273] FAT-fs (loop4): Directory bread(block 73) failed [ 290.809163][T18198] EXT4-fs (loop3): unmounting filesystem. [ 291.002876][ T985] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 291.195522][ T985] usb 3-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 291.211853][ T985] usb 3-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 291.224755][ T985] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 291.234281][ T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.395210][T18345] syz.0.7720[18345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.395287][T18345] syz.0.7720[18345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.412960][ T6] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 291.455411][ T985] usb 3-1: string descriptor 0 read error: -71 [ 291.463105][ T985] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 291.467914][T18351] tipc: Started in network mode [ 291.476810][T18351] tipc: Node identity ac14140f, cluster identity 4711 [ 291.483526][ T985] usb 3-1: USB disconnect, device number 49 [ 291.484691][T18351] tipc: New replicast peer: 255.255.255.255 [ 291.495293][T18351] tipc: Enabled bearer , priority 10 [ 291.525526][T18337] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.532424][T18337] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.539913][T18337] device bridge_slave_0 entered promiscuous mode [ 291.546639][T18351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7723'. [ 291.561623][T18337] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.571310][T18337] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.580882][T18337] device bridge_slave_1 entered promiscuous mode [ 291.622881][ T6] usb 5-1: Using ep0 maxpacket: 8 [ 291.622981][T18367] loop0: detected capacity change from 0 to 256 [ 291.630511][ T6] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 291.637247][T18367] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 291.643253][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.665624][ T6] usb 5-1: Product: syz [ 291.669634][ T6] usb 5-1: Manufacturer: syz [ 291.681505][ T6] usb 5-1: SerialNumber: syz [ 291.701279][ T6] usb 5-1: config 0 descriptor?? [ 291.730506][T18337] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.737392][T18337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.744490][T18337] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.751254][T18337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.780223][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.787757][ T9432] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.795139][ T9432] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.814080][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.822156][ T9432] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.829026][ T9432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.836227][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.849073][ T9432] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.855953][ T9432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.878956][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 291.887458][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.920170][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 291.926417][ T6] usb 5-1: USB disconnect, device number 33 [ 291.935231][T18337] device veth0_vlan entered promiscuous mode [ 291.957647][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 291.966220][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 291.974049][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 291.990888][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 292.000434][T18337] device veth1_macvtap entered promiscuous mode [ 292.012059][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 292.030444][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 292.038844][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 292.087472][T18398] loop3: detected capacity change from 0 to 512 [ 292.102521][T18398] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 292.111954][ T10] device bridge_slave_1 left promiscuous mode [ 292.122859][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.140242][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.148488][ T10] device veth1_macvtap left promiscuous mode [ 292.154682][ T10] device veth0_vlan left promiscuous mode [ 292.172216][T18394] loop0: detected capacity change from 0 to 40427 [ 292.189927][T18394] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 292.199459][T18405] loop7: detected capacity change from 0 to 128 [ 292.205793][T18394] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 292.223169][T18394] F2FS-fs (loop0): invalid crc value [ 292.236451][T18405] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 292.262154][T18405] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 292.273410][T18394] F2FS-fs (loop0): Found nat_bits in checkpoint [ 292.286364][T18405] EXT4-fs warning (device loop7): ext4_group_extend:1894: will only finish group (8193 blocks, 8129 new) [ 292.300047][T18405] EXT4-fs warning (device loop7): ext4_group_extend:1899: can't read last block, resize aborted [ 292.318714][T18337] EXT4-fs (loop7): unmounting filesystem. [ 292.363211][T18394] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 292.370085][T18394] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 292.425805][T17131] syz-executor: attempt to access beyond end of device [ 292.425805][T17131] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 292.426045][T18422] loop3: detected capacity change from 0 to 8192 [ 292.612753][ T313] tipc: Node number set to 2886997007 [ 292.723791][T18456] netlink: 165 bytes leftover after parsing attributes in process `syz.2.7767'. [ 292.911883][T18472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7773'. [ 292.992738][ T305] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 293.173817][ T305] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 293.182464][ T305] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.192597][ T305] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 293.202094][ T305] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 293.222072][ T305] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 293.231317][ T305] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 293.240252][ T305] usb 5-1: Product: syz [ 293.244592][ T305] usb 5-1: Manufacturer: syz [ 293.252073][ T305] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 293.458405][ T305] usb 5-1: USB disconnect, device number 34 [ 294.031533][T18514] loop7: detected capacity change from 0 to 1024 [ 294.074442][T18514] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 294.134903][T18514] EXT4-fs (loop7): shut down requested (0) [ 294.168491][T18522] loop2: detected capacity change from 0 to 128 [ 294.185888][T18514] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 294.213108][T18522] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 294.222802][T18512] loop4: detected capacity change from 0 to 40427 [ 294.232486][T18514] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 294.261654][T18522] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 294.271631][T18512] F2FS-fs (loop4): Found nat_bits in checkpoint [ 294.294347][T18337] EXT4-fs (loop7): unmounting filesystem. [ 294.414018][T18512] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 294.525695][T16925] syz-executor: attempt to access beyond end of device [ 294.525695][T16925] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 294.626759][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 294.626779][ T28] audit: type=1401 audit(2134220655.575:5243): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 294.949741][T18575] loop4: detected capacity change from 0 to 128 [ 294.971687][T18492] loop3: detected capacity change from 0 to 131072 [ 294.971744][T18575] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 295.010878][T18492] F2FS-fs (loop3): Found nat_bits in checkpoint [ 295.030455][T18575] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 295.125365][T18492] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 295.597574][ T28] audit: type=1400 audit(2134220656.545:5244): avc: denied { bind } for pid=18614 comm="syz.3.7833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 295.710337][ T28] audit: type=1400 audit(2134220656.655:5245): avc: denied { setopt } for pid=18622 comm="syz.2.7838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 295.806310][T18634] loop3: detected capacity change from 0 to 256 [ 295.844448][T18634] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 295.946149][T18648] bridge0: port 3(vlan2) entered blocking state [ 295.952238][T18648] bridge0: port 3(vlan2) entered disabled state [ 295.958501][T18605] loop7: detected capacity change from 0 to 40427 [ 295.965455][T18605] F2FS-fs (loop7): fault_injection options not supported [ 295.978152][T18648] device vlan2 entered promiscuous mode [ 295.987831][T18648] device gretap0 entered promiscuous mode [ 295.993786][T18605] F2FS-fs (loop7): invalid crc value [ 296.003302][T18648] bridge0: port 3(vlan2) entered blocking state [ 296.009391][T18648] bridge0: port 3(vlan2) entered forwarding state [ 296.016797][T18605] F2FS-fs (loop7): Found nat_bits in checkpoint [ 296.033396][T18656] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7852'. [ 296.222970][T18605] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 296.273393][T18669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7859'. [ 296.292817][T18669] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.299942][T18669] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.324416][T18337] syz-executor: attempt to access beyond end of device [ 296.324416][T18337] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 296.439685][ T28] audit: type=1400 audit(2134220657.385:5246): avc: denied { setattr } for pid=18692 comm="syz.4.7871" name="NETLINK" dev="sockfs" ino=88196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 296.654751][T18730] loop2: detected capacity change from 0 to 256 [ 296.719752][T18735] loop7: detected capacity change from 0 to 256 [ 296.728220][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 296.742729][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 296.753327][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 296.762357][T18735] FAT-fs (loop7): Directory bread(block 64) failed [ 296.781009][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 296.788277][T18735] FAT-fs (loop7): Directory bread(block 65) failed [ 296.794690][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 296.801890][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 296.809212][T18735] FAT-fs (loop7): Directory bread(block 66) failed [ 296.815575][T18735] FAT-fs (loop7): Directory bread(block 67) failed [ 296.821963][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 296.829163][T18735] FAT-fs (loop7): Directory bread(block 68) failed [ 296.835737][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 296.843025][T18735] FAT-fs (loop7): Directory bread(block 69) failed [ 296.849344][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 296.856565][T18735] FAT-fs (loop7): Directory bread(block 70) failed [ 296.863173][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 296.870684][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 296.877981][T18735] FAT-fs (loop7): Directory bread(block 71) failed [ 296.884279][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 296.891491][T18735] FAT-fs (loop7): Directory bread(block 72) failed [ 296.897822][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 296.905024][T18735] FAT-fs (loop7): Directory bread(block 73) failed [ 296.915334][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 296.931399][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 296.944950][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 296.952239][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 296.967969][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 296.975822][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 296.983246][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 297.003583][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 297.011243][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 297.018662][T18754] loop0: detected capacity change from 0 to 512 [ 297.028617][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 297.036077][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 297.049266][T18754] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 297.050963][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 297.058892][T18754] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 297.077395][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 297.092355][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 297.093464][T18754] EXT4-fs (loop0): 1 truncate cleaned up [ 297.105130][T18754] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 297.117385][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 297.123264][T18754] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 297.138235][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 297.151275][T17131] EXT4-fs (loop0): unmounting filesystem. [ 297.160204][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 297.181917][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 297.192521][T18761] loop3: detected capacity change from 0 to 512 [ 297.199000][ T313] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 297.216467][ T313] hid-generic 0000:0000:0000.0076: hidraw0: HID v0.00 Device [sy] on syz0 [ 297.220784][T18761] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.7899: inode #1: comm syz.3.7899: iget: illegal inode # [ 297.244430][T18761] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.7899: error while reading EA inode 1 err=-117 [ 297.266724][T18761] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.7899: inode #1: comm syz.3.7899: iget: illegal inode # [ 297.280000][T18761] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.7899: error while reading EA inode 1 err=-117 [ 297.292814][T18761] EXT4-fs (loop3): 1 orphan inode deleted [ 297.297848][T18768] loop0: detected capacity change from 0 to 512 [ 297.298370][T18761] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 297.331694][T18198] EXT4-fs (loop3): unmounting filesystem. [ 297.347085][T18768] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 297.354629][T18772] loop2: detected capacity change from 0 to 1024 [ 297.359244][T18768] EXT4-fs (loop0): orphan cleanup on readonly fs [ 297.368965][T18768] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.7902: bg 0: block 248: padding at end of block bitmap is not set [ 297.384669][T18768] Quota error (device loop0): write_blk: dquota write failed [ 297.393047][T18768] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 297.404271][T18778] loop3: detected capacity change from 0 to 128 [ 297.412891][T18772] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 297.421818][T18768] EXT4-fs error (device loop0): ext4_acquire_dquot:6788: comm syz.0.7902: Failed to acquire dquot type 1 [ 297.443746][T18778] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 297.454104][T17132] EXT4-fs (loop2): unmounting filesystem. [ 297.460176][T18768] EXT4-fs (loop0): 1 truncate cleaned up [ 297.466119][T18768] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 297.483299][T18778] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.505895][T18783] loop2: detected capacity change from 0 to 256 [ 297.525927][T18778] fscrypt (loop3, inode 12): Unsupported encryption flags (0x29) [ 297.538740][T17131] EXT4-fs (loop0): unmounting filesystem. [ 297.575164][T18198] EXT4-fs (loop3): unmounting filesystem. [ 297.585397][T18787] loop0: detected capacity change from 0 to 512 [ 297.603357][T18787] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 297.633531][T18787] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 297.642903][T18787] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.707953][T17131] EXT4-fs (loop0): unmounting filesystem. [ 297.744563][T18807] loop2: detected capacity change from 0 to 512 [ 297.774518][T18807] EXT4-fs: Ignoring removed mblk_io_submit option [ 297.781277][T18807] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 297.790690][T18807] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 297.798835][T18807] System zones: 1-12 [ 297.803670][T18807] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.7920: corrupted in-inode xattr [ 297.825176][T18807] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.7920: couldn't read orphan inode 15 (err -117) [ 297.852835][T18807] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 298.452609][T18846] loop2: detected capacity change from 0 to 40427 [ 298.479407][T18846] F2FS-fs (loop2): Found nat_bits in checkpoint [ 298.517393][T18883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7954'. [ 298.566653][T18846] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 298.644625][T17132] syz-executor: attempt to access beyond end of device [ 298.644625][T17132] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 298.924292][T18910] loop3: detected capacity change from 0 to 40427 [ 298.931748][T18910] F2FS-fs (loop3): invalid crc value [ 298.938615][T18910] F2FS-fs (loop3): Found nat_bits in checkpoint [ 299.006810][T18910] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 299.041045][T18910] syz.3.7967: attempt to access beyond end of device [ 299.041045][T18910] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 299.081902][T18931] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7974'. [ 299.105859][T18920] loop0: detected capacity change from 0 to 40427 [ 299.137820][T18920] F2FS-fs (loop0): Found nat_bits in checkpoint [ 299.147849][T18938] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 299.198929][T18944] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.205835][T18944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.223412][T18920] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 299.308544][T17131] syz-executor: attempt to access beyond end of device [ 299.308544][T17131] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 299.324608][T18965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.395329][T18973] loop3: detected capacity change from 0 to 16 [ 299.408686][T18979] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7996'. [ 299.413784][T18973] erofs: (device loop3): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 299.490990][T18988] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7999'. [ 299.533260][T18990] SELinux: Context system_u:object_r:tpm_device_t:s0 is not valid (left unmapped). [ 299.543545][ T28] audit: type=1400 audit(2134220660.495:5247): avc: denied { relabelto } for pid=18989 comm="syz.7.8000" name="file0" dev="tmpfs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:tpm_device_t:s0" [ 299.574162][T18994] loop0: detected capacity change from 0 to 512 [ 299.590927][ T28] audit: type=1400 audit(2134220660.515:5248): avc: denied { associate } for pid=18989 comm="syz.7.8000" name="file0" dev="tmpfs" ino=282 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tpm_device_t:s0" [ 299.596283][T18994] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.8002: inode #1: comm syz.0.8002: iget: illegal inode # [ 299.620286][ T28] audit: type=1400 audit(2134220660.525:5249): avc: denied { rmdir } for pid=18337 comm="syz-executor" name="file0" dev="tmpfs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:tpm_device_t:s0" [ 299.662731][T18994] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.8002: error while reading EA inode 1 err=-117 [ 299.699303][T18994] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.8002: inode #1: comm syz.0.8002: iget: illegal inode # [ 299.732137][T19005] syz.2.8007[19005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.732218][T19005] syz.2.8007[19005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.745418][T18994] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.8002: error while reading EA inode 1 err=-117 [ 299.784534][T19005] device ip6tnl2 entered promiscuous mode [ 299.793939][T18994] EXT4-fs (loop0): 1 orphan inode deleted [ 299.905492][T19014] loop2: detected capacity change from 0 to 512 [ 299.929919][T19014] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 299.959359][T19014] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 299.979708][T19014] EXT4-fs (loop2): 1 truncate cleaned up [ 300.002738][T19014] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 300.041733][ T28] audit: type=1400 audit(2134220660.985:5250): avc: denied { listen } for pid=19031 comm="syz.4.8019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 300.104085][T19038] netlink: 'syz.4.8022': attribute type 1 has an invalid length. [ 300.122570][T18984] loop3: detected capacity change from 0 to 131072 [ 300.141615][T18984] F2FS-fs (loop3): invalid crc value [ 300.159713][T18984] F2FS-fs (loop3): Found nat_bits in checkpoint [ 300.171453][T19050] loop0: detected capacity change from 0 to 256 [ 300.239250][T18984] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 300.573915][T19083] loop3: detected capacity change from 0 to 256 [ 300.583218][T19083] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 300.600396][T19083] syz.3.8040: attempt to access beyond end of device [ 300.600396][T19083] loop3: rw=2049, sector=256, nr_sectors = 48 limit=256 [ 300.653400][T19079] loop2: detected capacity change from 0 to 40427 [ 300.660314][T19079] F2FS-fs (loop2): fault_injection options not supported [ 300.667978][T19079] F2FS-fs (loop2): invalid crc value [ 300.674373][T19079] F2FS-fs (loop2): Found nat_bits in checkpoint [ 300.709873][T19079] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 300.746934][T17132] syz-executor: attempt to access beyond end of device [ 300.746934][T17132] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 300.751652][T19095] loop3: detected capacity change from 0 to 512 [ 300.774850][T19095] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.829136][T19102] loop3: detected capacity change from 0 to 512 [ 300.843723][T19102] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 300.871856][T19102] EXT4-fs (loop3): 1 orphan inode deleted [ 300.877504][T19102] EXT4-fs (loop3): 1 truncate cleaned up [ 300.916602][T19111] loop2: detected capacity change from 0 to 16 [ 300.922879][ T28] audit: type=1400 audit(2134220661.875:5251): avc: denied { listen } for pid=19108 comm="syz.3.8049" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 300.923687][T19111] erofs: Unknown parameter 'ÿÿÿÿ' [ 301.022544][T19111] incfs: Options parsing error. -22 [ 301.034266][T19111] incfs: mount failed -22 [ 301.044892][T19100] loop7: detected capacity change from 0 to 40427 [ 301.060220][T19122] loop2: detected capacity change from 0 to 2048 [ 301.066530][T19100] F2FS-fs (loop7): heap/no_heap options were deprecated [ 301.074427][T19100] F2FS-fs (loop7): invalid crc value [ 301.081207][T19100] F2FS-fs (loop7): Found nat_bits in checkpoint [ 301.121016][T19122] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.148571][T19100] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 301.186109][T19138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8060'. [ 301.219934][T18337] syz-executor: attempt to access beyond end of device [ 301.219934][T18337] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 301.313652][T19156] netlink: 'syz.2.8072': attribute type 8 has an invalid length. [ 301.327179][T19156] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 301.415779][T19169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8077'. [ 301.444494][T19169] sch_tbf: peakrate 2 is lower than or equals to rate 16777224 ! [ 301.520767][T19146] loop3: detected capacity change from 0 to 40427 [ 301.534882][T19146] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 301.549018][T19146] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 301.565908][T19146] F2FS-fs (loop3): invalid crc value [ 301.583787][T19146] F2FS-fs (loop3): Found nat_bits in checkpoint [ 301.659272][T19146] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 301.679215][T19146] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 301.743353][T18198] syz-executor: attempt to access beyond end of device [ 301.743353][T18198] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 301.758242][T19177] loop7: detected capacity change from 0 to 40427 [ 301.765581][T19177] F2FS-fs (loop7): fault_injection options not supported [ 301.792847][T19177] F2FS-fs (loop7): invalid crc value [ 301.812922][T19177] F2FS-fs (loop7): Found nat_bits in checkpoint [ 301.904348][T19177] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 301.962964][T19195] f2fs_ckpt-7:7: attempt to access beyond end of device [ 301.962964][T19195] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 301.989311][T19208] loop3: detected capacity change from 0 to 256 [ 302.017658][T19208] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3944865a, utbl_chksum : 0xe619d30d) [ 302.148573][T19222] syz.3.8098[19222] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.148651][T19222] syz.3.8098[19222] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.200396][T19228] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 302.296030][T19241] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8107'. [ 302.336709][T19248] loop3: detected capacity change from 0 to 512 [ 302.344712][T19248] EXT4-fs: Ignoring removed mblk_io_submit option [ 302.353064][T19248] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 302.369301][T19250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8110'. [ 302.371006][T19248] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c119, mo2=0082] [ 302.386009][T19248] System zones: 1-12 [ 302.390382][T19248] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.8111: corrupted in-inode xattr [ 302.402408][T19248] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.8111: couldn't read orphan inode 15 (err -117) [ 302.417789][T19248] EXT4-fs (loop3): shut down requested (2) [ 302.564872][T19269] sch_tbf: burst 720 is lower than device lo mtu (65550) ! [ 302.861719][ T28] audit: type=1400 audit(2134220663.805:5252): avc: denied { read } for pid=19296 comm="syz.2.8132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 302.905717][T19301] sch_tbf: burst 53766 is lower than device lo mtu (65550) ! [ 302.954119][T19305] syz.3.8136[19305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.954203][T19305] syz.3.8136[19305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.985139][T19305] device ip6tnl1 entered promiscuous mode [ 303.112760][T19317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8141'. [ 303.162608][ T28] audit: type=1326 audit(2134220664.105:5253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19320 comm="syz.2.8144" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e1b17ff19 code=0x0 [ 303.378841][T19342] loop0: detected capacity change from 0 to 256 [ 303.388231][T19342] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 303.405439][T19342] syz.0.8152: attempt to access beyond end of device [ 303.405439][T19342] loop0: rw=2049, sector=256, nr_sectors = 48 limit=256 [ 303.420278][T19283] loop7: detected capacity change from 0 to 131072 [ 303.432800][T19283] F2FS-fs (loop7): Test dummy encryption mode enabled [ 303.452965][T19283] F2FS-fs (loop7): invalid crc value [ 303.459457][T19283] F2FS-fs (loop7): Found nat_bits in checkpoint [ 303.474692][ T28] audit: type=1400 audit(2134220664.425:5254): avc: denied { getopt } for pid=19339 comm="syz.4.8153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 303.512200][ T28] audit: type=1400 audit(2134220664.425:5255): avc: denied { watch } for pid=19351 comm="syz.0.8156" path="/148/file0" dev="tmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 303.549371][ T28] audit: type=1400 audit(2134220664.455:5256): avc: denied { mount } for pid=19355 comm="syz.4.8158" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 303.575778][T19283] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 303.863191][T19368] loop7: detected capacity change from 0 to 512 [ 303.870051][T19368] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 303.884789][T19368] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.094197][T19407] sch_tbf: peakrate 2 is lower than or equals to rate 6 ! [ 304.226334][T19410] loop7: detected capacity change from 0 to 40427 [ 304.233242][T19410] F2FS-fs (loop7): fault_type options not supported [ 304.240485][T19410] F2FS-fs (loop7): invalid crc value [ 304.245650][T19410] F2FS-fs (loop7): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 304.254572][T19410] F2FS-fs (loop7): Found nat_bits in checkpoint [ 304.298447][T19410] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 304.587388][T19437] loop7: detected capacity change from 0 to 1024 [ 304.594553][T19437] EXT4-fs: Ignoring removed nobh option [ 304.601923][T19437] EXT4-fs error (device loop7): ext4_ext_check_inode:520: inode #11: comm syz.7.8193: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 304.621729][T19437] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.8193: couldn't read orphan inode 11 (err -117) [ 304.683314][T19451] syz.4.8200[19451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.683372][T19451] syz.4.8200[19451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.934688][ T28] audit: type=1400 audit(2134220665.885:5257): avc: denied { shutdown } for pid=19475 comm="syz.4.8211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 305.231900][ T28] audit: type=1400 audit(2134220666.175:5258): avc: denied { getopt } for pid=19510 comm="syz.7.8228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 305.336427][T19527] netlink: 'syz.4.8235': attribute type 15 has an invalid length. [ 305.338599][ T28] audit: type=1400 audit(2134220666.285:5259): avc: denied { mount } for pid=19530 comm="syz.7.8237" name="/" dev="pstore" ino=13578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 305.642903][T19570] netlink: 'syz.7.8255': attribute type 5 has an invalid length. [ 305.646713][T19572] loop2: detected capacity change from 0 to 512 [ 305.658454][T19570] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8255'. [ 305.683486][T19572] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.383204][T19622] loop2: detected capacity change from 0 to 256 [ 306.400864][T19622] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 306.401993][T19620] loop3: detected capacity change from 0 to 256 [ 306.414268][T19622] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 306.531581][T19645] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8288'. [ 306.552782][T19645] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8288'. [ 306.564476][T19651] netem: invalid attributes len -24 [ 306.573610][T19654] syz.4.8292[19654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.573686][T19654] syz.4.8292[19654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.585040][T19651] netem: change failed [ 306.631712][T19660] loop3: detected capacity change from 0 to 512 [ 306.638342][T19662] devpts: called with bogus options [ 306.644221][T19660] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 306.646075][T19666] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 306.673778][T19660] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.730730][T19681] loop3: detected capacity change from 0 to 512 [ 306.737422][ T28] audit: type=1400 audit(2134220667.695:5260): avc: denied { append } for pid=19683 comm="syz.2.8305" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 306.782398][T19681] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 306.841443][T19694] loop3: detected capacity change from 0 to 16 [ 306.857691][T19696] xt_bpf: check failed: parse error [ 306.869775][T19694] erofs: (device loop3): mounted with root inode @ nid 36. [ 306.888876][T19694] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 306.900291][T19700] netlink: 'syz.4.8313': attribute type 6 has an invalid length. [ 306.912753][T19694] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 306.947505][T19694] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 307.012947][T19710] loop0: detected capacity change from 0 to 512 [ 307.062792][T19710] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.068159][T19718] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 307.074718][T19689] loop2: detected capacity change from 0 to 40427 [ 307.087942][T19710] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.8317: corrupted xattr block 85 [ 307.093257][T19689] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 307.102304][T19710] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 307.117652][T19710] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.8317: corrupted xattr block 85 [ 307.119632][T19689] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 307.137523][T19710] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 307.149191][T19689] F2FS-fs (loop2): invalid crc value [ 307.154560][T19710] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2925: inode #15: comm syz.0.8317: corrupted xattr block 85 [ 307.167817][T19710] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 307.178290][T19689] F2FS-fs (loop2): Found nat_bits in checkpoint [ 307.203483][T19722] netlink: 220 bytes leftover after parsing attributes in process `syz.4.8321'. [ 307.224120][T19727] loop0: detected capacity change from 0 to 512 [ 307.251479][T19727] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 307.263325][T19689] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 307.270208][T19689] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 307.316602][T19727] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.357963][ T28] audit: type=1400 audit(2134220668.305:5261): avc: denied { unlink } for pid=19726 comm="syz.0.8322" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 307.443280][ T28] audit: type=1400 audit(2134220668.325:5262): avc: denied { rename } for pid=19726 comm="syz.0.8322" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 307.573873][T19754] device veth1_macvtap left promiscuous mode [ 307.684771][T19762] loop3: detected capacity change from 0 to 8192 [ 307.698047][T19762] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 307.736307][T19772] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8343'. [ 307.862214][T19792] netlink: 'syz.3.8345': attribute type 5 has an invalid length. [ 307.891472][T19794] loop0: detected capacity change from 0 to 2048 [ 307.942744][ T28] audit: type=1400 audit(2134220668.885:5263): avc: denied { write } for pid=19803 comm="syz.2.8355" name="map_files" dev="proc" ino=92209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 307.965737][ T28] audit: type=1400 audit(2134220668.895:5264): avc: denied { add_name } for pid=19803 comm="syz.2.8355" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 307.986025][ T28] audit: type=1400 audit(2134220668.895:5265): avc: denied { create } for pid=19803 comm="syz.2.8355" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 308.004524][T19812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8359'. [ 308.005974][ T28] audit: type=1400 audit(2134220668.895:5266): avc: denied { associate } for pid=19803 comm="syz.2.8355" name="bus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 308.123272][T19830] loop2: detected capacity change from 0 to 2048 [ 308.134474][T19830] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.147945][T19830] fs-verity: sha256 using implementation "sha256-avx2" [ 308.155355][T19830] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.8367: bg 0: block 345: padding at end of block bitmap is not set [ 308.169771][T19830] fs-verity (loop2, inode 13): Error -117 writing Merkle tree block 0 [ 308.177995][T19830] fs-verity (loop2, inode 13): Error -117 building Merkle tree [ 308.201424][ T28] audit: type=1326 audit(2134220669.145:5267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19833 comm="syz.2.8368" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e1b17ff19 code=0x0 [ 308.597039][T19843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8372'. [ 308.677008][T19857] bridge0: port 3(dummy0) entered blocking state [ 308.683321][T19857] bridge0: port 3(dummy0) entered disabled state [ 308.690313][T19857] device dummy0 entered promiscuous mode [ 308.758086][T19874] loop3: detected capacity change from 0 to 256 [ 308.772124][T19877] device syz_tun entered promiscuous mode [ 308.778314][T19877] device syz_tun left promiscuous mode [ 308.833005][T19879] loop0: detected capacity change from 0 to 512 [ 308.841579][T19879] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.8390: inode #1: comm syz.0.8390: iget: illegal inode # [ 308.854986][T19879] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.8390: error while reading EA inode 1 err=-117 [ 308.867293][T19879] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.8390: inode #1: comm syz.0.8390: iget: illegal inode # [ 308.880354][T19879] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.8390: error while reading EA inode 1 err=-117 [ 308.892939][T19879] EXT4-fs (loop0): 1 orphan inode deleted [ 309.031881][T19905] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.043526][T19909] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8403'. [ 309.063119][T19909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8403'. [ 309.070495][T19913] loop3: detected capacity change from 0 to 512 [ 309.079794][T19913] ext4: Unknown parameter 'block_validity.bh' [ 309.088501][T19918] loop7: detected capacity change from 0 to 128 [ 309.197391][T19942] tc_dump_action: action bad kind [ 309.294666][T19966] syzkaller0: tun_chr_ioctl cmd 1074025692 [ 309.356745][T19975] loop7: detected capacity change from 0 to 128 [ 309.368270][T19975] ext4 filesystem being mounted at /133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 309.418877][T19988] loop2: detected capacity change from 0 to 512 [ 309.425535][T19988] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 309.436962][T19988] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 309.451596][T19988] EXT4-fs (loop2): 1 truncate cleaned up [ 309.461424][T19988] EXT4-fs error (device loop2): empty_inline_dir:1877: inode #12: block 7: comm syz.2.8438: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 309.472870][T19997] loop7: detected capacity change from 0 to 128 [ 309.482162][T19988] EXT4-fs warning (device loop2): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 309.527410][T20001] netlink: 'syz.7.8445': attribute type 3 has an invalid length. [ 309.535175][T20001] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8445'. [ 310.240266][T20018] syz.4.8452[20018] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.240346][T20018] syz.4.8452[20018] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.267628][T20022] binder: 20021:20022 ioctl 541b 0 returned -22 [ 310.318597][T20028] device bridge_slave_0 left promiscuous mode [ 310.324704][T20028] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.332204][T20028] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 311.364817][T20068] 9pnet_fd: Insufficient options for proto=fd [ 311.532354][T20092] loop3: detected capacity change from 0 to 512 [ 311.540850][T20092] EXT4-fs (loop3): 1 truncate cleaned up [ 311.546399][T20092] EXT4-fs mount: 37 callbacks suppressed [ 311.546419][T20092] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 311.569866][T18198] EXT4-fs (loop3): unmounting filesystem. [ 311.575801][ T39] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 311.595997][T20099] loop3: detected capacity change from 0 to 256 [ 311.602336][T20099] exfat: Deprecated parameter 'utf8' [ 311.607505][T20099] exfat: Deprecated parameter 'utf8' [ 311.612685][T20099] exfat: Deprecated parameter 'utf8' [ 311.620118][T20099] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 311.764049][ T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.779828][ T39] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.801675][ T39] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 311.813675][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.821581][ T39] usb 3-1: Product: syz [ 311.825640][ T39] usb 3-1: Manufacturer: syz [ 311.830054][ T39] usb 3-1: SerialNumber: syz [ 311.837275][T20124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8501'. [ 311.847578][T20124] device sit1 entered promiscuous mode [ 312.048242][ T39] usb 3-1: 0:2 : does not exist [ 312.059710][ T39] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 312.076339][ T39] usb 3-1: USB disconnect, device number 50 [ 312.757019][T20190] incfs: iterate_incfs_dir / -22 [ 312.779900][T20194] loop7: detected capacity change from 0 to 256 [ 312.789451][T20194] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 312.807794][T20194] exFAT-fs (loop7): error, tried to truncate zeroed cluster. [ 312.819814][T20194] exFAT-fs (loop7): Filesystem has been set read-only [ 312.827193][T20194] syz.7.8532: attempt to access beyond end of device [ 312.827193][T20194] loop7: rw=0, sector=34359738488, nr_sectors = 16 limit=256 [ 313.173605][T20226] loop3: detected capacity change from 0 to 256 [ 313.179980][T20226] exfat: Bad value for 'uid' [ 313.221767][T20230] loop3: detected capacity change from 0 to 256 [ 313.230351][T20230] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 313.277717][T20238] tap0: tun_chr_ioctl cmd 1074025677 [ 313.282955][T20238] tap0: linktype set to 65534 [ 313.452721][ T6] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 313.617118][T20281] loop3: detected capacity change from 0 to 16 [ 313.623584][T20281] erofs: (device loop3): mounted with root inode @ nid 36. [ 313.631793][T20281] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=46 [ 313.640745][T20281] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=46 [ 313.652709][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 313.656535][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 313.659336][ T6] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 313.665793][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 313.673642][ T6] usb 3-1: config 0 has no interface number 0 [ 313.681560][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 313.687379][ T6] usb 3-1: config 0 interface 133 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 313.695315][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 313.713055][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 313.721082][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 313.724326][ T6] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 313.735150][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 313.737876][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.753490][ T6] usb 3-1: Product: syz [ 313.756614][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 313.757509][ T6] usb 3-1: Manufacturer: syz [ 313.769811][ T6] usb 3-1: SerialNumber: syz [ 313.773037][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 313.774931][ T6] usb 3-1: config 0 descriptor?? [ 313.787081][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 313.792760][T20225] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 313.795377][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 313.809957][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 313.818045][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 313.826160][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 313.834229][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 313.842295][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 313.846719][T20283] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 313.850386][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 313.859660][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 313.859676][ T28] audit: type=1400 audit(2134220674.815:5270): avc: denied { relabelto } for pid=20282 comm="syz.7.8576" name="bus" dev="tmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 313.867360][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 313.899125][ T28] audit: type=1400 audit(2134220674.825:5271): avc: denied { associate } for pid=20282 comm="syz.7.8576" name="bus" dev="tmpfs" ino=803 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcp_state_t:s0" [ 313.908760][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 313.948898][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 313.954357][ T28] audit: type=1400 audit(2134220674.895:5272): avc: denied { unlink } for pid=18337 comm="syz-executor" name="bus" dev="tmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 313.972881][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 313.993593][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.001817][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.016879][ T28] audit: type=1326 audit(2134220674.965:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20292 comm="syz.0.8581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bbb7ff19 code=0x7ffc0000 [ 314.040572][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.048821][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.057007][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.065027][ T28] audit: type=1326 audit(2134220674.965:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20292 comm="syz.0.8581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fe7bbb7ff19 code=0x7ffc0000 [ 314.089155][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.098862][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.107237][T20225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.107569][ T28] audit: type=1326 audit(2134220674.965:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20292 comm="syz.0.8581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bbb7ff19 code=0x7ffc0000 [ 314.121292][T20225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.139651][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.154487][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.162690][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.170734][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.179078][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.180988][ T305] usb 3-1: USB disconnect, device number 51 [ 314.187616][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.201583][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.210389][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.218536][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.226764][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.235139][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.236399][T20304] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8586'. [ 314.243327][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.272322][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.291924][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.300091][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.321848][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.330215][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.339123][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.347939][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.356463][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.365204][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.373422][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.382905][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.390905][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.399173][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.407766][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.422598][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.433065][T20327] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 314.440716][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.449374][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.457977][ T28] audit: type=1326 audit(2134220675.405:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.7.8599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc35ef7ff19 code=0x7ffc0000 [ 314.488230][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.501994][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.514738][ T28] audit: type=1326 audit(2134220675.405:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.7.8599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc35ef7ff19 code=0x7ffc0000 [ 314.522094][T20337] loop7: detected capacity change from 0 to 512 [ 314.540172][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.558897][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.566809][ T28] audit: type=1326 audit(2134220675.425:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.7.8599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc35ef7ff19 code=0x7ffc0000 [ 314.590881][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.599603][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.608116][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.612056][ T28] audit: type=1326 audit(2134220675.425:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.7.8599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc35ef7ff19 code=0x7ffc0000 [ 314.617382][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.648659][T20348] syz.0.8606[20348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.648742][T20348] syz.0.8606[20348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.649543][T20337] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 314.689985][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.699953][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.704684][T20351] loop0: detected capacity change from 0 to 1024 [ 314.708104][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.722096][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.730368][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.740026][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.748121][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.753028][T20351] EXT4-fs: Ignoring removed nomblk_io_submit option [ 314.756206][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.770516][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.778509][T20337] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.778607][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.796847][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.804925][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.809088][T20351] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 314.812980][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.831901][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.839949][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.848266][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.856353][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.864436][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.868471][T20353] loop2: detected capacity change from 0 to 8192 [ 314.872447][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.886527][T20351] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 314.895768][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.896338][T20337] EXT4-fs error (device loop7): ext4_do_update_inode:5226: inode #18: comm syz.7.8603: corrupted inode contents [ 314.903939][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.923653][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.933462][T20351] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 314.941391][T20351] System zones: 0-1, 3-36 [ 314.942823][T20337] EXT4-fs (loop7): Remounting filesystem read-only [ 314.951933][T20337] EXT4-fs error (device loop7): ext4_dirty_inode:6091: inode #18: comm syz.7.8603: mark_inode_dirty error [ 314.952846][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.963349][T20337] EXT4-fs (loop7): Remounting filesystem read-only [ 314.977264][T20337] EXT4-fs error (device loop7): ext4_do_update_inode:5226: inode #18: comm syz.7.8603: corrupted inode contents [ 314.982056][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 314.996986][T20353] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 315.002905][T20337] EXT4-fs (loop7): Remounting filesystem read-only [ 315.006763][T20351] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 315.011934][T20337] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2954: inode #18: comm syz.7.8603: mark_inode_dirty error [ 315.026091][T20353] FAT-fs (loop2): Filesystem has been set read-only [ 315.032844][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.046619][T20337] EXT4-fs (loop7): Remounting filesystem read-only [ 315.052919][T20337] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2957: inode #18: comm syz.7.8603: mark inode dirty (error -117) [ 315.053005][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.073240][T20353] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 315.073489][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.089721][T20337] EXT4-fs (loop7): Remounting filesystem read-only [ 315.090135][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.098795][T20337] EXT4-fs warning (device loop7): ext4_evict_inode:299: xattr delete (err -117) [ 315.104024][T20353] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 315.123749][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.144246][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.152328][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.163743][T17131] EXT4-fs (loop0): unmounting filesystem. [ 315.190362][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.198853][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.210880][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.220092][T18337] EXT4-fs (loop7): unmounting filesystem. [ 315.226318][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.241454][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.255450][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.263679][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.272175][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.281020][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.303310][T20373] loop7: detected capacity change from 0 to 512 [ 315.309632][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.318191][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.326280][T20373] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 315.335033][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.343620][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.351802][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.360354][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.368444][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.382801][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.391847][T20373] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 315.400816][T20373] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.416378][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.419492][T20379] SELinux: Context :yz1 is not valid (left unmapped). [ 315.424503][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.439091][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.447355][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.455583][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.463662][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.472079][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.480744][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.481040][T18337] EXT4-fs (loop7): unmounting filesystem. [ 315.488875][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.502349][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.510584][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.518850][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.542237][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.570486][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.586468][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.607735][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.621822][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.633594][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.641832][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.650579][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.658949][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.667107][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.675131][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.702883][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.722917][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.731001][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.743286][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.757796][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.771314][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.785908][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.794535][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.802589][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.815853][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.830796][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.838910][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.848933][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.858015][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.882251][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.890525][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.905642][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.914043][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.923960][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.931978][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.941408][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.944058][T20431] loop2: detected capacity change from 0 to 512 [ 315.949912][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.972968][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.990949][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 315.999910][T20431] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 316.008825][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.016805][T20431] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.027435][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.047740][T20419] loop7: detected capacity change from 0 to 40427 [ 316.050750][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.062870][T20419] F2FS-fs (loop7): fault_type options not supported [ 316.069911][T17132] EXT4-fs (loop2): unmounting filesystem. [ 316.075944][T20419] F2FS-fs (loop7): invalid crc value [ 316.081354][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.090529][T20419] F2FS-fs (loop7): Found nat_bits in checkpoint [ 316.103722][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.122183][ T985] kernel write not supported for file /594/timerslack_ns (pid: 985 comm: kworker/0:6) [ 316.122196][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.162954][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.179467][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.188871][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.196776][T20419] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 316.212970][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.222982][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.231201][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.239340][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.247583][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.255662][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.266473][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.275295][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.283562][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.291681][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.300247][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.308410][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.316571][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.316754][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.316947][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.317142][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.317333][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.317511][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.317681][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.317849][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.318032][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.318250][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.318447][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.318611][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.318793][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.318971][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.319153][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.319348][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.319565][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.453497][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.461529][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.469601][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.477757][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.493027][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.501109][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.522329][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.532005][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.540254][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.548497][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.556629][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.564698][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.572881][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.581468][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.589869][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.597982][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.606096][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.614332][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.622806][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.631012][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.639461][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.647939][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.656691][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.665274][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.673503][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.681658][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.689993][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.698606][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.706831][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.715088][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.723343][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.731560][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.739786][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.747948][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.763672][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.778066][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.787279][T20468] loop7: detected capacity change from 0 to 128 [ 316.793842][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.803281][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.812418][T20468] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 316.813030][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.828807][T20468] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 316.838819][T18198] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 316.863245][T18337] EXT4-fs (loop7): unmounting filesystem. [ 317.505117][ T10] tipc: Disabling bearer [ 317.510322][ T10] tipc: Left network mode [ 317.935669][ T10] device gretap0 left promiscuous mode [ 317.941679][ T10] bridge0: port 3(vlan2) entered disabled state [ 317.974002][ T10] device vlan2 left promiscuous mode [ 317.979262][ T10] bridge0: port 3(vlan2) entered disabled state [ 318.095283][ T10] device bridge_slave_1 left promiscuous mode [ 318.111997][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.132920][ T10] device bridge_slave_0 left promiscuous mode [ 318.156773][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.168945][ T10] device veth1_macvtap left promiscuous mode [ 318.182744][ T10] device veth0_vlan left promiscuous mode [ 318.449207][T20594] loop7: detected capacity change from 0 to 512 [ 318.503394][T20562] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.510269][T20562] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.523829][T20594] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 318.532790][T20594] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.573257][T20562] device bridge_slave_0 entered promiscuous mode [ 318.583166][T20562] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.590035][T20562] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.593719][T20594] EXT4-fs error (device loop7): ext4_get_first_dir_block:3583: inode #12: comm syz.7.8714: Attempting to read directory block (0) that is past i_size (3) [ 318.624391][T20562] device bridge_slave_1 entered promiscuous mode [ 318.685722][T20584] loop0: detected capacity change from 0 to 40427 [ 318.706620][T18337] EXT4-fs (loop7): unmounting filesystem. [ 318.712828][T20584] F2FS-fs (loop0): fault_injection options not supported [ 318.720517][T20584] F2FS-fs (loop0): invalid crc value [ 318.738874][T20603] syz.7.8716[20603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.738957][T20603] syz.7.8716[20603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.742813][T20584] F2FS-fs (loop0): Found nat_bits in checkpoint [ 318.842052][T20584] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 318.856131][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 318.864145][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.884394][T17131] syz-executor: attempt to access beyond end of device [ 318.884394][T17131] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 318.899346][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 318.908470][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.918002][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.924901][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.932385][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 318.940915][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 318.963041][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.969926][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.992862][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.000837][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 319.035224][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 319.053943][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 319.074400][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 319.091066][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 319.100953][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 319.118184][T20562] device veth0_vlan entered promiscuous mode [ 319.140565][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 319.154533][T20562] device veth1_macvtap entered promiscuous mode [ 319.172453][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 319.193342][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 319.338115][T20623] loop1: detected capacity change from 0 to 256 [ 319.365829][T20623] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 319.544682][T20631] loop1: detected capacity change from 0 to 256 [ 319.704795][T20638] loop2: detected capacity change from 0 to 2048 [ 319.785754][T20638] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 319.818242][T20638] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm syz.2.8730: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 319.845759][T20638] EXT4-fs (loop2): Remounting filesystem read-only [ 319.898249][T17132] EXT4-fs (loop2): unmounting filesystem. [ 319.980871][T20671] loop1: detected capacity change from 0 to 1024 [ 320.002500][T20671] EXT4-fs: Ignoring removed orlov option [ 320.023630][T20671] EXT4-fs: Ignoring removed nomblk_io_submit option [ 320.051922][T20671] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 320.143552][T20610] loop0: detected capacity change from 0 to 131072 [ 320.152325][T20610] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0) [ 320.161731][T20610] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 320.170509][T20610] F2FS-fs (loop0): invalid crc value [ 320.310847][T20562] EXT4-fs (loop1): unmounting filesystem. [ 320.378072][T20610] F2FS-fs (loop0): Found nat_bits in checkpoint [ 320.506963][T20610] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 320.523465][T20610] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 320.559151][T20700] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 320.567088][T20682] loop2: detected capacity change from 0 to 131072 [ 320.574090][T20682] F2FS-fs (loop2): Value of option "test_dummy_encryption=)1" is unrecognized [ 320.629725][T20610] F2FS-fs (loop0): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 320.667062][T20610] F2FS-fs (loop0): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 321.072760][ T313] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 321.102207][T20735] loop0: detected capacity change from 0 to 256 [ 321.120827][T20735] exfat: Unknown parameter 'um0×P½a000000000' [ 321.266431][ T313] usb 3-1: Using ep0 maxpacket: 32 [ 321.272558][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 321.283935][T20741] loop7: detected capacity change from 0 to 8192 [ 321.303585][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 321.325526][ T313] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 321.345069][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.372895][ T313] usb 3-1: config 0 descriptor?? [ 321.377952][T20712] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 321.395050][ T313] hub 3-1:0.0: USB hub found [ 321.481861][T20754] loop0: detected capacity change from 0 to 512 [ 321.492761][T20754] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 321.533592][T20754] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.8781: invalid block [ 321.552962][T20754] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.8781: invalid indirect mapped block 4294967295 (level 1) [ 321.572332][T20754] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.8781: invalid indirect mapped block 4294967295 (level 1) [ 321.593008][T20754] EXT4-fs (loop0): 2 truncates cleaned up [ 321.609838][T20754] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 321.683265][T17131] EXT4-fs (loop0): unmounting filesystem. [ 321.690128][T20769] loop7: detected capacity change from 0 to 256 [ 321.726271][T20769] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 321.790583][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 321.790601][ T28] audit: type=1400 audit(2134220682.735:5290): avc: denied { remount } for pid=20782 comm="syz.7.8795" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 321.843253][ T313] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 321.852436][ T313] usbhid 3-1:0.0: can't add hid device: -71 [ 321.858272][ T313] usbhid: probe of 3-1:0.0 failed with error -71 [ 321.878542][T20788] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 321.902404][T20788] SELinux: failed to load policy [ 321.903115][ T313] usb 3-1: USB disconnect, device number 52 [ 321.972809][T20797] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8801'. [ 322.096683][ T28] audit: type=1400 audit(2134220683.045:5291): avc: denied { setopt } for pid=20804 comm="syz.1.8805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 322.544779][T20846] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 322.584128][ T28] audit: type=1400 audit(2134220683.535:5292): avc: denied { name_bind } for pid=20851 comm="syz.1.8826" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 322.645124][T20862] loop1: detected capacity change from 0 to 512 [ 322.652923][T20862] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 322.656013][T20865] loop2: detected capacity change from 0 to 512 [ 322.662562][T20862] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 322.676056][T20862] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 322.685222][T20865] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 322.688193][T20862] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8831'. [ 322.703953][T20862] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8831'. [ 322.713229][T20865] EXT4-fs (loop2): can't mount with commit=9, fs mounted w/o journal [ 322.722246][T20562] EXT4-fs (loop1): unmounting filesystem. [ 322.854766][T20890] loop0: detected capacity change from 0 to 256 [ 322.871770][T20890] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 322.885272][T20890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8844'. [ 322.905986][T20890] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 322.934155][T20898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8848'. [ 322.999755][T20875] loop1: detected capacity change from 0 to 40427 [ 323.022905][T20875] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 323.030509][T20875] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 323.057594][T20875] F2FS-fs (loop1): Found nat_bits in checkpoint [ 323.090507][T20920] loop0: detected capacity change from 0 to 256 [ 323.109081][T20920] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 323.134761][T20926] syz.4.8860[20926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.134841][T20926] syz.4.8860[20926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.186750][T20875] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 323.205428][T20875] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 325.841528][T20950] loop0: detected capacity change from 0 to 512 [ 326.016270][T20950] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 326.025085][T20950] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.039692][T20950] EXT4-fs error (device loop0): ext4_get_first_dir_block:3583: inode #12: comm syz.0.8872: Attempting to read directory block (0) that is past i_size (3) [ 326.106038][T17131] EXT4-fs (loop0): unmounting filesystem. [ 326.129323][ T28] audit: type=1400 audit(2134220687.075:5293): avc: denied { mounton } for pid=20960 comm="syz.2.8876" path="/308/file0" dev="tmpfs" ino=1618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 326.153321][T20961] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.162423][T20961] FAT-fs (loop5): unable to read boot sector [ 329.056568][T20984] loop2: detected capacity change from 0 to 512 [ 329.075716][T20990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8887'. [ 329.093524][T20984] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 329.100884][ T28] audit: type=1400 audit(2134220690.045:5294): avc: denied { audit_read } for pid=20995 comm="syz.7.8890" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 329.112776][T20984] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.159802][T20984] EXT4-fs error (device loop2): ext4_get_first_dir_block:3583: inode #12: comm syz.2.8886: Attempting to read directory block (0) that is past i_size (3) [ 329.179635][ T28] audit: type=1326 audit(2134220690.125:5295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21006 comm="syz.4.8893" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65d6d7ff19 code=0x0 [ 329.205946][T17132] EXT4-fs (loop2): unmounting filesystem. [ 329.245874][ T28] audit: type=1400 audit(2134220690.195:5296): avc: denied { ioctl } for pid=21011 comm="syz.1.8897" path="socket:[96313]" dev="sockfs" ino=96313 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 329.283380][T21012] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 329.373127][ T28] audit: type=1326 audit(2134220690.325:5297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21020 comm="syz.2.8901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1b17ff19 code=0x7ffc0000 [ 329.411488][ T28] audit: type=1326 audit(2134220690.345:5298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21020 comm="syz.2.8901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1b17ff19 code=0x7ffc0000 [ 329.460943][ T28] audit: type=1326 audit(2134220690.345:5299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21020 comm="syz.2.8901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f4e1b17ff19 code=0x7ffc0000 [ 329.484619][ T28] audit: type=1326 audit(2134220690.345:5300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21020 comm="syz.2.8901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1b17ff19 code=0x7ffc0000 [ 329.519811][T21029] ================================================================== [ 329.527727][T21029] BUG: KASAN: use-after-free in cpu_map_enqueue+0xb4/0x370 [ 329.532740][ T28] audit: type=1326 audit(2134220690.345:5301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21020 comm="syz.2.8901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1b17ff19 code=0x7ffc0000 [ 329.534740][T21029] Read of size 8 at addr ffff88811754a908 by task syz.2.8905/21029 [ 329.534760][T21029] [ 329.534768][T21029] CPU: 1 PID: 21029 Comm: syz.2.8905 Not tainted 6.1.115-syzkaller-00002-g182b090f35f3 #0 [ 329.577749][T21029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 329.578340][ T28] audit: type=1326 audit(2134220690.345:5302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21020 comm="syz.2.8901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e1b17ff19 code=0x7ffc0000 [ 329.587638][T21029] Call Trace: [ 329.587660][T21029] [ 329.587671][T21029] dump_stack_lvl+0x151/0x1b7 [ 329.621243][T21029] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 329.626524][T21029] ? _printk+0xd1/0x111 [ 329.630515][T21029] ? __virt_addr_valid+0x242/0x2f0 [ 329.631020][ T28] audit: type=1326 audit(2134220690.345:5303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21020 comm="syz.2.8901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1b17ff19 code=0x7ffc0000 [ 329.635458][T21029] print_report+0x158/0x4e0 [ 329.635491][T21029] ? __virt_addr_valid+0x242/0x2f0 [ 329.635523][T21029] ? kasan_complete_mode_report_info+0x57/0x1b0 [ 329.635545][T21029] ? cpu_map_enqueue+0xb4/0x370 [ 329.635566][T21029] kasan_report+0x13c/0x170 [ 329.635595][T21029] ? cpu_map_enqueue+0xb4/0x370 [ 329.635619][T21029] __asan_report_load8_noabort+0x14/0x20 [ 329.693392][T21029] cpu_map_enqueue+0xb4/0x370 [ 329.697902][T21029] xdp_do_redirect_frame+0x275/0x800 [ 329.703023][T21029] bpf_test_run_xdp_live+0xc30/0x1f70 [ 329.708231][T21029] ? __kasan_check_write+0x14/0x20 [ 329.713175][T21029] ? bpf_test_run_xdp_live+0x7ae/0x1f70 [ 329.718556][T21029] ? xdp_convert_md_to_buff+0x360/0x360 [ 329.723934][T21029] ? bpf_dispatcher_change_prog+0xd86/0xf10 [ 329.729665][T21029] ? 0xffffffffa00038c0 [ 329.733665][T21029] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 329.739734][T21029] ? __kasan_check_write+0x14/0x20 [ 329.744679][T21029] ? _copy_from_user+0x90/0xc0 [ 329.749288][T21029] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 329.754489][T21029] ? dev_put+0x80/0x80 [ 329.758396][T21029] ? __kasan_check_write+0x14/0x20 [ 329.763339][T21029] ? fput+0x15b/0x1b0 [ 329.767159][T21029] ? dev_put+0x80/0x80 [ 329.771063][T21029] bpf_prog_test_run+0x3b0/0x630 [ 329.775838][T21029] ? bpf_prog_query+0x260/0x260 [ 329.780525][T21029] ? selinux_bpf+0xd2/0x100 [ 329.784897][T21029] ? security_bpf+0x82/0xb0 [ 329.789204][T21029] __sys_bpf+0x59f/0x7f0 [ 329.793283][T21029] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 329.798494][T21029] ? bpf_trace_run1+0x240/0x240 [ 329.803182][T21029] __x64_sys_bpf+0x7c/0x90 [ 329.807429][T21029] x64_sys_call+0x87f/0x9a0 [ 329.811770][T21029] do_syscall_64+0x3b/0xb0 [ 329.816024][T21029] ? clear_bhb_loop+0x55/0xb0 [ 329.820537][T21029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.826262][T21029] RIP: 0033:0x7f4e1b17ff19 [ 329.830516][T21029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.849957][T21029] RSP: 002b:00007f4e1bf18058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 329.858200][T21029] RAX: ffffffffffffffda RBX: 00007f4e1b345fa0 RCX: 00007f4e1b17ff19 [ 329.866014][T21029] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 329.873824][T21029] RBP: 00007f4e1b1f3986 R08: 0000000000000000 R09: 0000000000000000 [ 329.881636][T21029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.889447][T21029] R13: 0000000000000000 R14: 00007f4e1b345fa0 R15: 00007ffed16ad7f8 [ 329.897493][T21029] [ 329.900353][T21029] [ 329.902522][T21029] Allocated by task 18752: [ 329.906774][T21029] kasan_set_track+0x4b/0x70 [ 329.911206][T21029] kasan_save_alloc_info+0x1f/0x30 [ 329.916276][T21029] __kasan_kmalloc+0x9c/0xb0 [ 329.920658][T21029] kmalloc_trace+0x44/0xa0 [ 329.924913][T21029] push_stack+0x8e/0x4f0 [ 329.928991][T21029] do_check+0x9369/0xe040 [ 329.933159][T21029] do_check_common+0x6ca/0xca0 [ 329.937756][T21029] bpf_check+0x6d0d/0x17ec0 [ 329.942098][T21029] bpf_prog_load+0x1304/0x1bf0 [ 329.946697][T21029] __sys_bpf+0x52c/0x7f0 [ 329.950774][T21029] __x64_sys_bpf+0x7c/0x90 [ 329.955035][T21029] x64_sys_call+0x87f/0x9a0 [ 329.959367][T21029] do_syscall_64+0x3b/0xb0 [ 329.963622][T21029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.969350][T21029] [ 329.971520][T21029] Last potentially related work creation: [ 329.977075][T21029] kasan_save_stack+0x3b/0x60 [ 329.981586][T21029] __kasan_record_aux_stack+0xb4/0xc0 [ 329.986794][T21029] kasan_record_aux_stack_noalloc+0xb/0x10 [ 329.992435][T21029] insert_work+0x56/0x310 [ 329.996602][T21029] __queue_work+0x9b6/0xd70 [ 330.000943][T21029] queue_work_on+0x105/0x170 [ 330.005369][T21029] cpu_map_free+0x1e7/0x2c0 [ 330.009707][T21029] bpf_map_free_deferred+0xf7/0x1b0 [ 330.014743][T21029] process_one_work+0x73d/0xcb0 [ 330.019474][T21029] worker_thread+0xa60/0x1260 [ 330.023941][T21029] kthread+0x26d/0x300 [ 330.027851][T21029] ret_from_fork+0x1f/0x30 [ 330.032099][T21029] [ 330.034272][T21029] Second to last potentially related work creation: [ 330.040692][T21029] kasan_save_stack+0x3b/0x60 [ 330.045205][T21029] __kasan_record_aux_stack+0xb4/0xc0 [ 330.050416][T21029] kasan_record_aux_stack_noalloc+0xb/0x10 [ 330.056057][T21029] call_rcu+0xdc/0x10f0 [ 330.060050][T21029] cpu_map_free+0x109/0x2c0 [ 330.064386][T21029] bpf_map_free_deferred+0xf7/0x1b0 [ 330.069421][T21029] process_one_work+0x73d/0xcb0 [ 330.074108][T21029] worker_thread+0xa60/0x1260 [ 330.078619][T21029] kthread+0x26d/0x300 [ 330.082527][T21029] ret_from_fork+0x1f/0x30 [ 330.086780][T21029] [ 330.088949][T21029] The buggy address belongs to the object at ffff88811754a900 [ 330.088949][T21029] which belongs to the cache kmalloc-192 of size 192 [ 330.102839][T21029] The buggy address is located 8 bytes inside of [ 330.102839][T21029] 192-byte region [ffff88811754a900, ffff88811754a9c0) [ 330.115781][T21029] [ 330.117938][T21029] The buggy address belongs to the physical page: [ 330.124277][T21029] page:ffffea00045d5280 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88811754a400 pfn:0x11754a [ 330.135746][T21029] flags: 0x4000000000000200(slab|zone=1) [ 330.141225][T21029] raw: 4000000000000200 ffffea0004276508 ffffea0004c60e48 ffff888100042c00 [ 330.149636][T21029] raw: ffff88811754a400 0000000000100002 00000001ffffffff 0000000000000000 [ 330.158059][T21029] page dumped because: kasan: bad access detected [ 330.164302][T21029] page_owner tracks the page as allocated [ 330.169847][T21029] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 114, tgid 114 (udevd), ts 5722187742, free_ts 0 [ 330.186251][T21029] post_alloc_hook+0x213/0x220 [ 330.190852][T21029] prep_new_page+0x1b/0x110 [ 330.195191][T21029] get_page_from_freelist+0x2980/0x2a10 [ 330.200571][T21029] __alloc_pages+0x234/0x610 [ 330.205008][T21029] alloc_slab_page+0x6c/0xf0 [ 330.209425][T21029] new_slab+0x90/0x3e0 [ 330.213332][T21029] ___slab_alloc+0x6f9/0xb80 [ 330.217757][T21029] __slab_alloc+0x5d/0xa0 [ 330.221925][T21029] __kmem_cache_alloc_node+0x207/0x2a0 [ 330.227219][T21029] kmalloc_trace+0x2a/0xa0 [ 330.231478][T21029] kernfs_fop_open+0x350/0xb10 [ 330.236071][T21029] do_dentry_open+0x891/0x1250 [ 330.240673][T21029] vfs_open+0x73/0x80 [ 330.244488][T21029] path_openat+0x2532/0x2d60 [ 330.248918][T21029] do_filp_open+0x230/0x480 [ 330.253260][T21029] do_sys_openat2+0x151/0x870 [ 330.257772][T21029] page_owner free stack trace missing [ 330.262978][T21029] [ 330.265149][T21029] Memory state around the buggy address: [ 330.270623][T21029] ffff88811754a800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 330.278515][T21029] ffff88811754a880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 330.286415][T21029] >ffff88811754a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 330.294307][T21029] ^ [ 330.298475][T21029] ffff88811754a980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 330.306377][T21029] ffff88811754aa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 330.314270][T21029] ================================================================== [ 330.322403][T21029] Disabling lock debugging due to kernel taint [ 330.328375][T21029] general protection fault, probably for non-canonical address 0xe0988d4adede0933: 0000 [#1] PREEMPT SMP KASAN [ 330.339856][T21029] KASAN: maybe wild-memory-access in range [0x04c48a56f6f04998-0x04c48a56f6f0499f] [ 330.348946][T21029] CPU: 1 PID: 21029 Comm: syz.2.8905 Tainted: G B 6.1.115-syzkaller-00002-g182b090f35f3 #0 [ 330.360154][T21029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 330.370039][T21029] RIP: 0010:cpu_map_enqueue+0x113/0x370 [ 330.375413][T21029] Code: e8 03 42 80 3c 30 00 74 08 48 89 df e8 66 e5 24 00 4c 8b 23 4f 8d 74 3c 58 4d 89 f5 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 44 05 00 84 c0 0f 85 a8 01 00 00 4d 01 fc 41 8b 1e bf 08 [ 330.395291][T21029] RSP: 0018:ffffc90001417600 EFLAGS: 00010206 [ 330.401191][T21029] RAX: dffffc0000000000 RBX: ffffffff8674a898 RCX: 0000000000080000 [ 330.409002][T21029] RDX: ffffc9000177a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 330.416837][T21029] RBP: ffffc90001417638 R08: ffffffff8198100e R09: fffffbfff0f6e2fd [ 330.424626][T21029] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f6f00000 [ 330.432438][T21029] R13: 0098914adede0933 R14: 04c48a56f6f04998 R15: 04c501d500004940 [ 330.440246][T21029] FS: 00007f4e1bf186c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 330.449138][T21029] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.455556][T21029] CR2: 0000001b31519ff8 CR3: 000000013e049000 CR4: 00000000003506a0 [ 330.463369][T21029] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 330.471175][T21029] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 330.478992][T21029] Call Trace: [ 330.482112][T21029] [ 330.484983][T21029] ? __die_body+0x62/0xb0 [ 330.489161][T21029] ? die_addr+0x9f/0xd0 [ 330.493152][T21029] ? exc_general_protection+0x317/0x4c0 [ 330.498552][T21029] ? asm_exc_general_protection+0x27/0x30 [ 330.504089][T21029] ? cpu_map_enqueue+0xce/0x370 [ 330.508775][T21029] ? cpu_map_enqueue+0x113/0x370 [ 330.513549][T21029] xdp_do_redirect_frame+0x275/0x800 [ 330.518675][T21029] bpf_test_run_xdp_live+0xc30/0x1f70 [ 330.523877][T21029] ? __kasan_check_write+0x14/0x20 [ 330.528826][T21029] ? bpf_test_run_xdp_live+0x7ae/0x1f70 [ 330.534203][T21029] ? xdp_convert_md_to_buff+0x360/0x360 [ 330.539583][T21029] ? bpf_dispatcher_change_prog+0xd86/0xf10 [ 330.545314][T21029] ? 0xffffffffa00038c0 [ 330.549313][T21029] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 330.555388][T21029] ? __kasan_check_write+0x14/0x20 [ 330.560329][T21029] ? _copy_from_user+0x90/0xc0 [ 330.564933][T21029] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 330.570145][T21029] ? dev_put+0x80/0x80 [ 330.574063][T21029] ? __kasan_check_write+0x14/0x20 [ 330.578986][T21029] ? fput+0x15b/0x1b0 [ 330.582811][T21029] ? dev_put+0x80/0x80 [ 330.586716][T21029] bpf_prog_test_run+0x3b0/0x630 [ 330.591498][T21029] ? bpf_prog_query+0x260/0x260 [ 330.596178][T21029] ? selinux_bpf+0xd2/0x100 [ 330.600510][T21029] ? security_bpf+0x82/0xb0 [ 330.604855][T21029] __sys_bpf+0x59f/0x7f0 [ 330.608937][T21029] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 330.614145][T21029] ? bpf_trace_run1+0x240/0x240 [ 330.618921][T21029] __x64_sys_bpf+0x7c/0x90 [ 330.623171][T21029] x64_sys_call+0x87f/0x9a0 [ 330.627510][T21029] do_syscall_64+0x3b/0xb0 [ 330.631758][T21029] ? clear_bhb_loop+0x55/0xb0 [ 330.636284][T21029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.642000][T21029] RIP: 0033:0x7f4e1b17ff19 [ 330.646258][T21029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.665696][T21029] RSP: 002b:00007f4e1bf18058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 330.673943][T21029] RAX: ffffffffffffffda RBX: 00007f4e1b345fa0 RCX: 00007f4e1b17ff19 [ 330.681751][T21029] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 330.689559][T21029] RBP: 00007f4e1b1f3986 R08: 0000000000000000 R09: 0000000000000000 [ 330.697379][T21029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.705183][T21029] R13: 0000000000000000 R14: 00007f4e1b345fa0 R15: 00007ffed16ad7f8 [ 330.713002][T21029] [ 330.715859][T21029] Modules linked in: [ 330.719626][T21029] ---[ end trace 0000000000000000 ]--- [ 330.724924][T21029] RIP: 0010:cpu_map_enqueue+0x113/0x370 [ 330.730281][T21029] Code: e8 03 42 80 3c 30 00 74 08 48 89 df e8 66 e5 24 00 4c 8b 23 4f 8d 74 3c 58 4d 89 f5 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 44 05 00 84 c0 0f 85 a8 01 00 00 4d 01 fc 41 8b 1e bf 08 [ 330.749737][T21029] RSP: 0018:ffffc90001417600 EFLAGS: 00010206 [ 330.755632][T21029] RAX: dffffc0000000000 RBX: ffffffff8674a898 RCX: 0000000000080000 [ 330.763441][T21029] RDX: ffffc9000177a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 330.771230][T21029] RBP: ffffc90001417638 R08: ffffffff8198100e R09: fffffbfff0f6e2fd [ 330.779069][T21029] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f6f00000 [ 330.786878][T21029] R13: 0098914adede0933 R14: 04c48a56f6f04998 R15: 04c501d500004940 [ 330.794690][T21029] FS: 00007f4e1bf186c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 330.803452][T21029] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.809855][T21029] CR2: 0000001b31519ff8 CR3: 000000013e049000 CR4: 00000000003506a0 [ 330.817694][T21029] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 330.825496][T21029] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 330.833327][T21029] Kernel panic - not syncing: Fatal exception in interrupt [ 330.840541][T21029] Kernel Offset: disabled [ 330.844679][T21029] Rebooting in 86400 seconds..