last executing test programs: 7m39.898738291s ago: executing program 2 (id=5477): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x99, &(0x7f0000000480)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 7m39.570487207s ago: executing program 2 (id=5479): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x60000000}, 0x50) 7m39.473212578s ago: executing program 2 (id=5481): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r3, 0x0, 0x1103) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x200000, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) openat$zero(0xffffff9c, &(0x7f00000002c0), 0x200800, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x80000007) fcntl$setsig(r4, 0xa, 0x21) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfcc00000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r2, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xa9) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000380)={0x3, 0x5, 0x3, 0x7, 0x1a, "90e05e7611df6e5b7a0b9154245b4688e1efd6"}) 7m39.35854621s ago: executing program 2 (id=5485): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000040)={[{@discard}]}, 0x3, 0x570, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000001080)="ffad7b", 0x3}], 0x1, 0x5412, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000001800), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x210, 0x70bd2d, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000004b) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r6, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730109000000000095000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) dup2(0xffffffffffffffff, 0xffffffffffffffff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_clone3(&(0x7f0000000200)={0x4000000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = dup(r9) syz_kvm_setup_cpu$x86(r10, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008f04"]) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) 7m38.955353467s ago: executing program 2 (id=5494): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x2044}, 0x60) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x40047451, &(0x7f0000000180)) 7m36.980702169s ago: executing program 2 (id=5496): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file1\x00') 7m36.768364882s ago: executing program 32 (id=5496): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file1\x00') 33.013178863s ago: executing program 3 (id=10812): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r1 = eventfd(0x100000d) fgetxattr(r1, &(0x7f0000000000)=@random={'osx.', 'krusted.overlay.opaque\x00'}, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x82c00) socket$netlink(0x10, 0x3, 0xa) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r3 = epoll_create1(0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x759, &(0x7f0000000340)={[{@noinit_itable}, {@jqfmt_vfsv1}, {@noload}, {@errors_remount}, {@data_err_ignore, 0x0}, {@noload}, {@nouid32}, {@grpquota}, {@resuid={'resuid', 0x3d, 0xffffffffffffffff}}, {@acl}, {@bsdgroups}, {@jqfmt_vfsold}], [], 0x2c}, 0x0, 0x511, &(0x7f0000000400)="$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") epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000380)={0x10000008}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) 31.97102193s ago: executing program 3 (id=10819): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x1e6, 0x0, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0x0, 0x7e, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b", 0x5dc}, 0x50) 31.311695471s ago: executing program 3 (id=10824): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x800080, &(0x7f00000004c0)=ANY=[@ANYBLOB='flush_merge,fastboot,background_gc=off,noinline_dentry,mode=lfs,fsync_mode=strict,flush_merge,prjjquota=,fsync_mode=strict,background_gc=sync,resgid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f666c7573685f6d657267652c6e6f6c617a7974696d652c002e5eab1ea1c8bbcec43f3f30"], 0x1, 0x5501, &(0x7f00000059c0)="$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") 30.816557118s ago: executing program 3 (id=10843): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) readlink(&(0x7f0000000280)='./file2\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 30.197897998s ago: executing program 3 (id=10850): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000004000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="ad4308a803a93ae832cfe6d5ef23337e0f698efa258fa9d3bc1c9df29b8749c5ffd0074397d4b10c19ca158b9169fc747e0ce81800f6ab54701b60db0d358f0341b17544b7edabe88d90fc5a63b52a5eee75baf1278b9c106f3c728d86482d41a1b38f52ef3ad9e716e77953d785625a2279cf4fd6266ccaba213de2e35c65a01968cf04d00a1ca520baf750b816fafde164d33bfafb0fee4aae07b55527d4d61deda8a79a1be0238b8309d25f34019a61f0363bd8bdf6bae02edd9d34b01b8157e510898a6e7d7217224d331981b5c2bb14d88bdc317c7a88eb04c5ef7be4021f8dbbf25c65b82d0f787de0c0b87c2d51c21e948c9c8f8077e0341b04c4ff0c0f3e7a48fae5ca15222bc350f59307d42d0670f91610d4dec94cfbbbe3b383decd29515965a3059d4b2cbed6a77948d374d320ef04b9fd74c87eef26125b3e3418aca9bd8e98db179d57611d0f85528116cae7b18393dd78c7528c45e7a8d64db9adb31bb95564d75ff0dc06fb71fc52ee5c02779cb166d93180cbd74ab3fb7e19b3509381c4e2b6e9cb7953347d0993c3d7445d201aa1e11c8eace70bc364fb0572af4c00f9c53d1a8fa4702a792ff9a83eef082e90a18dadd9dcbbc808b8887be9f1b74d8bd5de8adfbcd46b7ab3df6ea858bff5a1b4b5d5f85a6df2e90f370f67e9b7b9e9e02f7b5cb615a86297b112bd735d61d66e25624c465d5a87bfc7f7ec3daac70d4abc99c7a12cc79a14e9a7618a86a295c0fd5cbd9f716ad49a35b152828c3a16bdd4b649d0bf6a1c80a500cdde4627b13751d91cb67fd9003ba3a91891f240be702f978e4e55354de192406defe3d84917f02e27855d6611d8ffc41f73ea5abd7b0f48ad277b691a27e5b747a7d8aa632920f3fce2788d4437fc23f59f9a4b4dbe7fa3460c5c4047277a8b02cb508a2c1853d14aa78689c4814b44391bfc4acc022e7119e9109d35225271c063d6d89d09347a8c1d2ab958bad1ac3890de420877b875272db3402a63da014a38c8ddb9568f00c7c29f31d11bcd473dac29c91247d570cc491384ece7f19ce3a3e4b2c8d72bde83120c3c7d38b49fbb640d7842f9f9a86b1ea6915b2121b72e281667bec82aeb7665d5dde31c6bceb7eb14f41f08d71faaf1b8f31f96564a8add5fbdb69045bfba0fbf3a4e1ea032bbbf3babe0de46ca56fd7738562e8c65c7ad1e8ecf3fe810cca9521a345af1d1bab6eac8a35e391bf1787bf16ee6050635188afa2f9b455c44690b2fecf9f40f08a10c7caf00744db2d389f2d618abcf44e5a45348c186fe926d1eb87f7b402735c05ae96544b5ab3367b60bdb4598152cea9f8f2844ca81fd5fd0b87383db0024db1d2b3c7469245793199cb5aba92dafaf2c90a9e1a93841ff78663ca97d8d51deba8cc06f3f5b7a1af71d3b65dfa48c9acd436bf364641db455d6e8e8ed644b30a4dd7806f1ba82f33c856c76e1f28ec3939e1ad0a7d38426e7af4ae49c0aa9e575a13d9d520aa84bd15090c28a142777e0b6a9d5ddd07918e3a20257a6be334196489ee60ba275d0b821d1ff315da51921111905409311b457fef71d2679a271752cd98cd9b0b1f871ec2e1e02525b41587f88a0bbf7bb63e34f8ca3975789c252a0b803518f2c03d327af92f9c2ed4ec9beb301da910331ad8a2d79c2c461362662c47859154ce8a26c9a12bcae161899a4005572dd3191cec8e4db0ab78816455c0a388c78a979c8ebe0593b23a7fd8681555d686507cf215dd4b1ce9ecd49fb7a4e2884f0449e40bf8eb6347f59a268e7a51441890200a4bb9e86aa18c088e5994699657d4d2d518bf83b59adc8220841e7ad807ed7adad95403d2319836d069b15d245ce013867121224e5e74371c32ff8cd9d19cc477ca36b5e0ac7c15041f2fe7f46a91a8c9cd089f4f38a6118f45f1fc9c48eb4820d355a869fecc2b391630b13aeacb2b745b22018d554a2b8d833f404784f1687d554089aedba3d7036788860bf66e8735603e6e2ed2235e8800931fdc30c9eec3d224650c5b58229faaa9cfacc31", 0x5a9}], 0x1}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) sendmsg$tipc(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 28.566913734s ago: executing program 3 (id=10860): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e846000040000900ffffffff000000000200000004001f00d04601"], 0x46e8}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) 28.538520065s ago: executing program 33 (id=10860): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e846000040000900ffffffff000000000200000004001f00d04601"], 0x46e8}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) 6.413017107s ago: executing program 0 (id=11034): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x0, 0x0, 0x3, "62cbef"}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x7}}) syz_usb_control_io$hid(r1, &(0x7f00000010c0)={0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="200e5500000055300fa4b117bb6e3ec7da88c8"], 0x0, 0x0, &(0x7f0000001080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x19, 0xe, 0x1, {0x22, 0x974}}}}, &(0x7f0000001200)={0x2c, &(0x7f0000001100)={0x20, 0x13}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x6}, 0x0, &(0x7f0000001280)={0x20, 0x1, 0x25, "24a6e7ce682f041a8f58789dc3a4f2a65099ee95cab7359c66481e3823d6bf29265969c53d"}, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000001bc0)={0x34, &(0x7f0000001a00)={0x0, 0x10, 0x14, "fc4fc0950a572e1efa8b5bfb44d29f54c6eca0cc"}, 0x0, &(0x7f0000001ac0)={0x0, 0x8, 0x1, 0x75}, &(0x7f0000001b00)={0x20, 0x0, 0x2}, 0x0, 0x0}) 6.412428188s ago: executing program 5 (id=11035): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @broadcast}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b000000050000000500000009000000010000", @ANYRES32=0x0], 0x50) prlimit64(r0, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpid() r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x1c, r6, 0x205, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0xc0010) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000680), 0x64, 0x50a, &(0x7f00000009c0)="$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") 5.693916889s ago: executing program 6 (id=11037): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000004000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="ad4308a803a93ae832cfe6d5ef23337e0f698efa258fa9d3bc1c9df29b8749c5ffd0074397d4b10c19ca158b9169fc747e0ce81800f6ab54701b60db0d358f0341b17544b7edabe88d90fc5a63b52a5eee75baf1278b9c106f3c728d86482d41a1b38f52ef3ad9e716e77953d785625a2279cf4fd6266ccaba213de2e35c65a01968cf04d00a1ca520baf750b816fafde164d33bfafb0fee4aae07b55527d4d61deda8a79a1be0238b8309d25f34019a61f0363bd8bdf6bae02edd9d34b01b8157e510898a6e7d7217224d331981b5c2bb14d88bdc317c7a88eb04c5ef7be4021f8dbbf25c65b82d0f787de0c0b87c2d51c21e948c9c8f8077e0341b04c4ff0c0f3e7a48fae5ca15222bc350f59307d42d0670f91610d4dec94cfbbbe3b383decd29515965a3059d4b2cbed6a77948d374d320ef04b9fd74c87eef26125b3e3418aca9bd8e98db179d57611d0f85528116cae7b18393dd78c7528c45e7a8d64db9adb31bb95564d75ff0dc06fb71fc52ee5c02779cb166d93180cbd74ab3fb7e19b3509381c4e2b6e9cb7953347d0993c3d7445d201aa1e11c8eace70bc364fb0572af4c00f9c53d1a8fa4702a792ff9a83eef082e90a18dadd9dcbbc808b8887be9f1b74d8bd5de8adfbcd46b7ab3df6ea858bff5a1b4b5d5f85a6df2e90f370f67e9b7b9e9e02f7b5cb615a86297b112bd735d61d66e25624c465d5a87bfc7f7ec3daac70d4abc99c7a12cc79a14e9a7618a86a295c0fd5cbd9f716ad49a35b152828c3a16bdd4b649d0bf6a1c80a500cdde4627b13751d91cb67fd9003ba3a91891f240be702f978e4e55354de192406defe3d84917f02e27855d6611d8ffc41f73ea5abd7b0f48ad277b691a27e5b747a7d8aa632920f3fce2788d4437fc23f59f9a4b4dbe7fa3460c5c4047277a8b02cb508a2c1853d14aa78689c4814b44391bfc4acc022e7119e9109d35225271c063d6d89d09347a8c1d2ab958bad1ac3890de420877b875272db3402a63da014a38c8ddb9568f00c7c29f31d11bcd473dac29c91247d570cc491384ece7f19ce3a3e4b2c8d72bde83120c3c7d38b49fbb640d7842f9f9a86b1ea6915b2121b72e281667bec82aeb7665d5dde31c6bceb7eb14f41f08d71faaf1b8f31f96564a8add5fbdb69045bfba0fbf3a4e1ea032bbbf3babe0de46ca56fd7738562e8c65c7ad1e8ecf3fe810cca9521a345af1d1bab6eac8a35e391bf1787bf16ee6050635188afa2f9b455c44690b2fecf9f40f08a10c7caf00744db2d389f2d618abcf44e5a45348c186fe926d1eb87f7b402735c05ae96544b5ab3367b60bdb4598152cea9f8f2844ca81fd5fd0b87383db0024db1d2b3c7469245793199cb5aba92dafaf2c90a9e1a93841ff78663ca97d8d51deba8cc06f3f5b7a1af71d3b65dfa48c9acd436bf364641db455d6e8e8ed644b30a4dd7806f1ba82f33c856c76e1f28ec3939e1ad0a7d38426e7af4ae49c0aa9e575a13d9d520aa84bd15090c28a142777e0b6a9d5ddd07918e3a20257a6be334196489ee60ba275d0b821d1ff315da51921111905409311b457fef71d2679a271752cd98cd9b0b1f871ec2e1e02525b41587f88a0bbf7bb63e34f8ca3975789c252a0b803518f2c03d327af92f9c2ed4ec9beb301da910331ad8a2d79c2c461362662c47859154ce8a26c9a12bcae161899a4005572dd3191cec8e4db0ab78816455c0a388c78a979c8ebe0593b23a7fd8681555d686507cf215dd4b1ce9ecd49fb7a4e2884f0449e40bf8eb6347f59a268e7a51441890200a4bb9e86aa18c088e5994699657d4d2d518bf83b59adc8220841e7ad807ed7adad95403d2319836d069b15d245ce013867121224e5e74371c32ff8cd9d19cc477ca36b5e0ac7c15041f2fe7f46a91a8c9cd089f4f38a6118f45f1fc9c48eb4820d355a869fecc2b391630b13aeacb2b745b22018d554a2b8d833f404784f1687d554089aedba3d7036788860bf66e8735603e6e2ed2235e8800931fdc30c9eec3d224650c5b58229faaa9cfacc31", 0x5a9}], 0x1}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) sendmsg$tipc(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 4.727191324s ago: executing program 6 (id=11038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 4.594972266s ago: executing program 6 (id=11040): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) 4.491525128s ago: executing program 5 (id=11041): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 3.825186459s ago: executing program 1 (id=11042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0xc05, 0x0, 0x0, {0x7, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 3.805693599s ago: executing program 1 (id=11044): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="550a00000000000061193400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.77393953s ago: executing program 1 (id=11045): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @local}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x64}}, 0x0) 3.701137151s ago: executing program 1 (id=11046): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 3.647205232s ago: executing program 6 (id=11047): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000d40)={[{@test_dummy_encryption}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) syz_open_procfs(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB='nonumtail=0,iocharset=cp950,umask=00000000000000000000000,uni_xlate=1,uni_xlate=1,shortname=win95,utf8=0,shortname=win95,utf8=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c696f636861727365743d6d616363726f617469616e2c696f636861727365743d63703433372c757365667265652c726f6469722c7569643e74353a7bd912f41b207e4bc4478b479f5a21373fd412d72f65702b57308921a665e19ef4cc41aac5e7c09d211fd4c1fbf43833c769c6b16297c14d0d92df4f0371acd1b184d6", @ANYRES16, @ANYBLOB], 0x6, 0x2aa, &(0x7f0000000500)="$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") r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f00000001c0)={0x1fc, 0xffffffffffffffff, 0xfd2f, 0x2, 0x7ffb}) 3.555887023s ago: executing program 5 (id=11048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) gettid() sigaltstack(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x80, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 2.233245694s ago: executing program 1 (id=11049): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000004000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="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", 0x5a9}], 0x1}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r1, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 2.232750444s ago: executing program 5 (id=11050): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 2.222664795s ago: executing program 6 (id=11052): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f0000000000)='./file0\x00') add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6695d4982a83b71b906769e737201ac6b7a7804454156569cb03a5be811debc957b5831b89b59d703e748c7c", 0x25}, 0x48, 0xfffffffffffffffd) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) 2.200353825s ago: executing program 0 (id=11053): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x10000000005}, 0x76) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 2.161821705s ago: executing program 4 (id=11055): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@migrate={0xa0, 0x21, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@local, @in=@broadcast, 0x4e22, 0x0, 0x7, 0x0, 0xa, 0x80, 0x80, 0x1}, 0x6e6bb3, 0x1}, [@migrate={0x50, 0x11, [{@in6=@private0, @in6=@private0, @in6=@remote, @in=@empty, 0x2b, 0x0, 0x0, 0x34ff, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) 2.161416345s ago: executing program 1 (id=11056): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x60b, 0x0) write$char_usb(r1, 0x0, 0x0) ioctl$HIDIOCGRDESC(r1, 0x90044802, 0x0) syz_usb_disconnect(r0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESOCT=0x0, @ANYRES16], 0x0) 2.161197175s ago: executing program 4 (id=11057): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000080)=0x80000049, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss, @sack_perm, @window={0x3, 0x74a}, @timestamp, @mss, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) write(r0, &(0x7f0000000400)="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", 0x882) 2.111446896s ago: executing program 0 (id=11058): syz_emit_ethernet(0x2a, &(0x7f00000011c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010014"], 0x1c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3) 2.111158536s ago: executing program 4 (id=11059): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x9b}}, {@nobarrier}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x2) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000480)='7', 0x1}], 0x1, 0x26b8, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) lseek(r1, 0x4, 0x4) 2.110657856s ago: executing program 5 (id=11060): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x80101, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) dup2(r4, r3) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x802000, 0x0) syz_io_uring_setup(0x1111, 0x0, 0x0, 0x0) 1.101121792s ago: executing program 0 (id=11061): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 788.859207ms ago: executing program 4 (id=11062): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket(0x2, 0x3, 0xff38) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) read$msr(r0, &(0x7f0000000400)=""/102400, 0x19000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/3, 0x3}, 0xa}], 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 703.141479ms ago: executing program 5 (id=11063): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000d40)={[{@test_dummy_encryption}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) syz_open_procfs(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB='nonumtail=0,iocharset=cp950,umask=00000000000000000000000,uni_xlate=1,uni_xlate=1,shortname=win95,utf8=0,shortname=win95,utf8=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c696f636861727365743d6d616363726f617469616e2c696f636861727365743d63703433372c757365667265652c726f6469722c7569643e74353a7bd912f41b207e4bc4478b479f5a21373fd412d72f65702b57308921a665e19ef4cc41aac5e7c09d211fd4c1fbf43833c769c6b16297c14d0d92df4f0371acd1b184d6", @ANYRES16, @ANYBLOB], 0x6, 0x2aa, &(0x7f0000000500)="$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") r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f00000001c0)={0x1fc, 0xffffffffffffffff, 0xfd2f, 0x2, 0x7ffb}) 574.028161ms ago: executing program 6 (id=11064): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x800080, &(0x7f0000000200)=ANY=[@ANYBLOB='flush_merge,fastboot,background_gc=off,noinline_dentry,mode=lfs,fsync_mode=strict,flush_merge,prjjquota=,fsync_mode=strict,background_gc=sync,resgid=', @ANYRESHEX=0xee01, @ANYRESDEC=0x0], 0x1, 0x5512, &(0x7f000000af00)="$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") 81.089659ms ago: executing program 0 (id=11065): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 35.242109ms ago: executing program 0 (id=11066): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x20044881) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, r4, 0x1, 0x0, @void}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0xffff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x59a1417, 0x8b, &(0x7f0000000680)=""/139, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000600)=[{0x0, 0x5, 0x9, 0xb}, {0x3, 0x5, 0x10, 0xd}, {0x4, 0x3, 0x5, 0xa}], 0x10, 0x101, @void, @value}, 0x94) 19.584769ms ago: executing program 4 (id=11067): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000004000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="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", 0x5a9}], 0x1}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r1, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=11068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655d, 0x2, 0x1ffffffe, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): XT4-fs (loop5): orphan cleanup on readonly fs [ 1531.644304][T31052] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.9845: bg 0: block 248: padding at end of block bitmap is not set [ 1531.647650][T31051] FAT-fs (loop1): Directory bread(block 65) failed [ 1531.662203][T31052] Quota error (device loop5): write_blk: dquota write failed [ 1531.665264][T31051] FAT-fs (loop1): Directory bread(block 66) failed [ 1531.672901][T31052] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1531.678301][T31051] FAT-fs (loop1): Directory bread(block 67) failed [ 1531.678364][T31051] FAT-fs (loop1): Directory bread(block 68) failed [ 1531.678386][T31051] FAT-fs (loop1): Directory bread(block 69) failed [ 1531.678422][T31051] FAT-fs (loop1): Directory bread(block 70) failed [ 1531.678443][T31051] FAT-fs (loop1): Directory bread(block 71) failed [ 1531.678477][T31051] FAT-fs (loop1): Directory bread(block 72) failed [ 1531.678498][T31051] FAT-fs (loop1): Directory bread(block 73) failed [ 1531.733528][T31052] EXT4-fs error (device loop5): ext4_acquire_dquot:6188: comm syz.5.9845: Failed to acquire dquot type 1 [ 1531.753099][T31052] EXT4-fs (loop5): 1 truncate cleaned up [ 1531.758907][T31052] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1531.891196][T31070] device lo entered promiscuous mode [ 1531.897205][T31070] device tunl0 entered promiscuous mode [ 1531.902862][T31070] device gre0 entered promiscuous mode [ 1531.908501][T31070] device gretap0 entered promiscuous mode [ 1531.914558][T31070] device erspan0 entered promiscuous mode [ 1531.920658][T31070] device ip_vti0 entered promiscuous mode [ 1531.926504][T31070] device ip6_vti0 entered promiscuous mode [ 1531.932386][T31070] device sit0 entered promiscuous mode [ 1531.937968][T31070] device ip6tnl0 entered promiscuous mode [ 1531.943769][T31070] device ip6gre0 entered promiscuous mode [ 1531.949646][T31070] device syz_tun entered promiscuous mode [ 1531.955663][T31070] device ip6gretap0 entered promiscuous mode [ 1531.962029][T31070] device dummy0 entered promiscuous mode [ 1531.967707][T31070] device veth0 entered promiscuous mode [ 1531.973389][T31070] device veth1 entered promiscuous mode [ 1531.979247][T31070] device wg0 entered promiscuous mode [ 1531.984591][T31070] device wg1 entered promiscuous mode [ 1531.990012][T31070] device wg2 entered promiscuous mode [ 1531.995360][T31070] device veth0_to_bridge entered promiscuous mode [ 1532.002026][T31070] device bridge_slave_0 entered promiscuous mode [ 1532.008499][T31070] device veth1_to_bridge entered promiscuous mode [ 1532.015218][T31070] device bridge_slave_1 entered promiscuous mode [ 1532.021741][T31070] device veth0_to_bond entered promiscuous mode [ 1532.028185][T31070] device bond_slave_0 entered promiscuous mode [ 1532.034441][T31070] device veth1_to_bond entered promiscuous mode [ 1532.040944][T31070] device bond_slave_1 entered promiscuous mode [ 1532.047159][T31070] device veth0_to_team entered promiscuous mode [ 1532.053521][T31070] device team_slave_0 entered promiscuous mode [ 1532.059852][T31070] device veth1_to_team entered promiscuous mode [ 1532.066321][T31070] device team_slave_1 entered promiscuous mode [ 1532.072559][T31070] device veth0_to_batadv entered promiscuous mode [ 1532.079247][T31070] device batadv_slave_0 entered promiscuous mode [ 1532.085698][T31070] device veth1_to_batadv entered promiscuous mode [ 1532.092322][T31070] device batadv_slave_1 entered promiscuous mode [ 1532.098845][T31070] device xfrm0 entered promiscuous mode [ 1532.104373][T31070] device veth0_to_hsr entered promiscuous mode [ 1532.110765][T31070] device hsr_slave_0 entered promiscuous mode [ 1532.117129][T31070] device veth1_to_hsr entered promiscuous mode [ 1532.123606][T31070] device hsr_slave_1 entered promiscuous mode [ 1532.129916][T31070] device veth1_virt_wifi entered promiscuous mode [ 1532.136563][T31070] device veth0_virt_wifi entered promiscuous mode [ 1532.143092][T31070] device veth1_vlan entered promiscuous mode [ 1532.149966][T31070] device vlan0 entered promiscuous mode [ 1532.155679][T31070] device vlan1 entered promiscuous mode [ 1532.161762][T31070] device veth0_macvtap entered promiscuous mode [ 1532.168136][T31070] device macsec0 entered promiscuous mode [ 1532.192398][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1532.232640][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1532.247359][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1532.255305][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1532.263571][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1532.271684][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1532.279899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1532.287995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1532.304958][T31086] device pim6reg1 entered promiscuous mode [ 1532.502038][T31126] device pim6reg1 entered promiscuous mode [ 1532.934033][T31193] loop3: detected capacity change from 0 to 128 [ 1532.966573][T31193] attempt to access beyond end of device [ 1532.966573][T31193] loop3: rw=2049, want=1041, limit=128 [ 1532.993004][T31193] attempt to access beyond end of device [ 1532.993004][T31193] loop3: rw=524288, want=369, limit=128 [ 1533.004333][T31193] attempt to access beyond end of device [ 1533.004333][T31193] loop3: rw=0, want=153, limit=128 [ 1533.022303][T31193] attempt to access beyond end of device [ 1533.022303][T31193] loop3: rw=0, want=153, limit=128 [ 1533.044162][T31193] attempt to access beyond end of device [ 1533.044162][T31193] loop3: rw=0, want=153, limit=128 [ 1533.054865][T31193] attempt to access beyond end of device [ 1533.054865][T31193] loop3: rw=0, want=153, limit=128 [ 1533.075609][T31193] attempt to access beyond end of device [ 1533.075609][T31193] loop3: rw=0, want=153, limit=128 [ 1533.086459][T31193] attempt to access beyond end of device [ 1533.086459][T31193] loop3: rw=0, want=153, limit=128 [ 1533.097829][T31193] attempt to access beyond end of device [ 1533.097829][T31193] loop3: rw=0, want=153, limit=128 [ 1533.108625][T31193] attempt to access beyond end of device [ 1533.108625][T31193] loop3: rw=0, want=153, limit=128 [ 1533.262977][T31217] loop1: detected capacity change from 0 to 1024 [ 1533.343674][T31217] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 1534.374861][T31278] netlink: 300 bytes leftover after parsing attributes in process `syz.1.9948'. [ 1535.262954][T31359] loop4: detected capacity change from 0 to 1024 [ 1535.297972][T31359] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1535.306091][T31359] EXT4-fs (loop4): Ignoring removed bh option [ 1535.312730][T31359] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1535.344734][T31359] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,i_version,mblk_io_submit,grpid,data_err=ignore,mb_optimize_scan=0x0000000000000001,lazytime,max_batch_time=0x0000000000000078,noquota,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none. [ 1535.375603][T31359] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3876: comm syz.4.9987: Allocating blocks 497-513 which overlap fs metadata [ 1535.390556][T31359] EXT4-fs (loop4): pa ffff88812d40e498: logic 4193904, phys. 113, len 25 [ 1535.398953][T31359] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4893: group 0, free 24, pa_free 25 [ 1535.644884][T31401] loop5: detected capacity change from 0 to 256 [ 1536.553246][T31446] device pim6reg1 entered promiscuous mode [ 1536.586507][T31448] ------------[ cut here ]------------ [ 1536.606207][T31448] trace type BPF program uses run-time allocation [ 1536.612518][T31448] WARNING: CPU: 0 PID: 31448 at kernel/bpf/verifier.c:11701 check_map_prog_compatibility+0x6f1/0x890 [ 1536.651903][T31448] Modules linked in: [ 1536.655786][T31448] CPU: 0 PID: 31448 Comm: syz.0.10026 Not tainted 5.15.178-syzkaller-00034-g5e1b899f19c3 #0 [ 1536.666086][T31448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1536.676394][T31448] RIP: 0010:check_map_prog_compatibility+0x6f1/0x890 [ 1536.683045][T31448] Code: db e9 f9 fc ff ff e8 de 29 ed ff 31 db e9 ed fc ff ff e8 d2 29 ed ff c6 05 b0 53 a3 05 01 48 c7 c7 c0 f4 87 85 e8 2f 6f be ff <0f> 0b e9 5a fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 f9 ff [ 1536.703317][T31448] RSP: 0018:ffffc90000977328 EFLAGS: 00010246 [ 1536.709980][T31448] RAX: d8e5fd1014b6f700 RBX: 0000000000000001 RCX: 0000000000080000 [ 1536.718069][T31448] RDX: ffffc90004377000 RSI: 0000000000000955 RDI: 0000000000000956 [ 1536.726118][T31448] RBP: ffffc90000977370 R08: ffffffff8157a585 R09: ffffed103ee04e93 [ 1536.741460][T31448] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000011 [ 1536.750307][T31448] R13: ffff888119831000 R14: ffffc90000245000 R15: dffffc0000000000 [ 1536.761785][T31448] FS: 00007f10b2d4f6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1536.770806][T31448] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1536.777488][T31448] CR2: 0000001b31c1dff8 CR3: 0000000122da5000 CR4: 00000000003506b0 [ 1536.785333][T31448] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1536.793450][T31448] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1536.801616][T31448] Call Trace: [ 1536.815169][T31448] [ 1536.819267][T31448] ? show_regs+0x58/0x60 [ 1536.823982][T31448] ? __warn+0x160/0x2f0 [ 1536.828959][T31448] ? check_map_prog_compatibility+0x6f1/0x890 [ 1536.842385][T31448] ? report_bug+0x3d9/0x5b0 [ 1536.866225][T31448] ? check_map_prog_compatibility+0x6f1/0x890 [ 1536.876354][T31448] ? handle_bug+0x41/0x70 [ 1536.880518][T31448] ? exc_invalid_op+0x1b/0x50 [ 1536.885029][T31448] ? asm_exc_invalid_op+0x1b/0x20 [ 1536.891410][T31448] ? __wake_up_klogd+0xd5/0x110 [ 1536.896091][T31448] ? check_map_prog_compatibility+0x6f1/0x890 [ 1536.902178][T31448] ? check_map_prog_compatibility+0x6f1/0x890 [ 1536.908208][T31448] resolve_pseudo_ldimm64+0x682/0x1240 [ 1536.913494][T31448] ? check_attach_btf_id+0xef0/0xef0 [ 1536.918966][T31448] ? __mark_reg_known+0x1b0/0x1b0 [ 1536.931271][T31448] ? security_capable+0x87/0xb0 [ 1536.936040][T31448] bpf_check+0x3190/0x12c60 [ 1536.946576][T31448] ? 0xffffffffa002a000 [ 1536.950555][T31448] ? is_bpf_text_address+0x172/0x190 [ 1536.956821][T31448] ? stack_trace_save+0x1c0/0x1c0 [ 1536.961823][T31448] ? __kernel_text_address+0x9b/0x110 [ 1536.967273][T31448] ? unwind_get_return_address+0x4d/0x90 [ 1536.976704][T31448] ? bpf_get_btf_vmlinux+0x60/0x60 [ 1536.987975][T31448] ? arch_stack_walk+0xf3/0x140 [ 1536.992793][T31448] ? stack_trace_save+0x113/0x1c0 [ 1536.997849][T31448] ? stack_trace_snprint+0xf0/0xf0 [ 1537.002980][T31448] ? stack_trace_snprint+0xf0/0xf0 [ 1537.008784][T31448] ? __stack_depot_save+0x34/0x470 [ 1537.013868][T31448] ? ____kasan_kmalloc+0xed/0x110 [ 1537.021142][T31448] ? ____kasan_kmalloc+0xdb/0x110 [ 1537.026107][T31448] ? __kasan_kmalloc+0x9/0x10 [ 1537.030881][T31448] ? kmem_cache_alloc_trace+0x11a/0x270 [ 1537.036700][T31448] ? selinux_bpf_prog_alloc+0x51/0x140 [ 1537.042011][T31448] ? security_bpf_prog_alloc+0x62/0x90 [ 1537.047756][T31448] ? bpf_prog_load+0x9ee/0x1b50 [ 1537.052435][T31448] ? __sys_bpf+0x4bc/0x760 [ 1537.056992][T31448] ? __x64_sys_bpf+0x7c/0x90 [ 1537.061425][T31448] ? x64_sys_call+0x87f/0x9a0 [ 1537.065910][T31448] ? do_syscall_64+0x3b/0xb0 [ 1537.070719][T31448] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1537.076841][T31448] ? __kasan_kmalloc+0x9/0x10 [ 1537.081345][T31448] ? memset+0x35/0x40 [ 1537.085161][T31448] ? bpf_obj_name_cpy+0x196/0x1e0 [ 1537.101530][T31448] bpf_prog_load+0x12ac/0x1b50 [ 1537.106135][T31448] ? map_freeze+0x370/0x370 [ 1537.111437][T31448] ? selinux_bpf+0xcb/0x100 [ 1537.115819][T31448] ? security_bpf+0x82/0xb0 [ 1537.120497][T31448] __sys_bpf+0x4bc/0x760 [ 1537.135199][T31448] ? bpf_link_show_fdinfo+0x300/0x300 [ 1537.142204][T31448] ? __kasan_check_write+0x14/0x20 [ 1537.148240][T31448] ? switch_fpu_return+0x15f/0x2e0 [ 1537.153288][T31448] __x64_sys_bpf+0x7c/0x90 [ 1537.157820][T31448] x64_sys_call+0x87f/0x9a0 [ 1537.162229][T31448] do_syscall_64+0x3b/0xb0 [ 1537.166634][T31448] ? clear_bhb_loop+0x35/0x90 [ 1537.171229][T31448] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1537.177252][T31448] RIP: 0033:0x7f10b46e5169 [ 1537.186297][T31448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1537.211682][T31448] RSP: 002b:00007f10b2d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1537.220243][T31448] RAX: ffffffffffffffda RBX: 00007f10b48fdfa0 RCX: 00007f10b46e5169 [ 1537.228730][T31448] RDX: 0000000000000090 RSI: 0000200000000200 RDI: 0000000000000005 [ 1537.237669][T31448] RBP: 00007f10b47662a0 R08: 0000000000000000 R09: 0000000000000000 [ 1537.245600][T31448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1537.254171][T31448] R13: 0000000000000000 R14: 00007f10b48fdfa0 R15: 00007fffe624c698 [ 1537.262143][T31448] [ 1537.264971][T31448] ---[ end trace 49e03253cefc31ae ]--- [ 1537.440744][T31490] loop5: detected capacity change from 0 to 1024 [ 1537.498697][ T30] audit: type=1400 audit(1743236310.231:3830): avc: denied { map } for pid=31473 comm="syz.0.10039" path="socket:[115754]" dev="sockfs" ino=115754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1537.557353][T31490] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 1537.712199][ T30] audit: type=1400 audit(1743236310.441:3831): avc: denied { module_load } for pid=31496 comm="syz.4.10048" path="/sys/kernel/notes" dev="sysfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 1537.738214][T31502] Invalid ELF header magic: != ELF [ 1537.829201][T31507] loop4: detected capacity change from 0 to 256 [ 1538.334417][T31539] loop1: detected capacity change from 0 to 1024 [ 1538.452454][T31539] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 1538.585034][T31548] loop5: detected capacity change from 0 to 512 [ 1538.647160][T31548] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1538.698805][T31548] EXT4-fs (loop5): 1 truncate cleaned up [ 1538.704451][T31548] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,errors=remount-ro,. Quota mode: none. [ 1539.131102][T31572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.138188][T31572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.178420][T31572] device bridge0 left promiscuous mode [ 1539.189273][T31577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.206935][T31577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.277609][T31614] loop5: detected capacity change from 0 to 512 [ 1540.386131][T31613] loop1: detected capacity change from 0 to 1024 [ 1540.399068][T31614] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1540.408606][T31614] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.10088: bg 0: block 248: padding at end of block bitmap is not set [ 1540.424050][T31614] Quota error (device loop5): write_blk: dquota write failed [ 1540.431414][T31614] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1540.441355][T31614] EXT4-fs error (device loop5): ext4_acquire_dquot:6188: comm syz.5.10088: Failed to acquire dquot type 1 [ 1540.454931][T31614] EXT4-fs (loop5): 1 truncate cleaned up [ 1540.461409][T31614] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1540.649301][T31613] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1540.715761][T31613] EXT4-fs (loop1): Ignoring removed bh option [ 1540.747052][T31613] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1540.886120][T31613] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,i_version,mblk_io_submit,grpid,data_err=ignore,mb_optimize_scan=0x0000000000000001,lazytime,max_batch_time=0x0000000000000078,noquota,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none. [ 1541.082246][T31628] loop0: detected capacity change from 0 to 256 [ 1541.155171][T31613] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.10091: Allocating blocks 497-513 which overlap fs metadata [ 1541.223680][T31613] EXT4-fs (loop1): pa ffff88812d40e0a8: logic 4193904, phys. 113, len 25 [ 1541.231991][T31613] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4893: group 0, free 24, pa_free 25 [ 1541.457462][T31652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.464585][T31652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.474902][T31652] device bridge0 left promiscuous mode [ 1541.483031][T31652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.490854][T31652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.659923][T31664] loop1: detected capacity change from 0 to 1024 [ 1541.680873][T31664] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 1541.703343][T31671] syz.5.10113 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1541.853900][T31682] loop4: detected capacity change from 0 to 512 [ 1541.929744][T31682] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1541.939400][T31682] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10114: bg 0: block 248: padding at end of block bitmap is not set [ 1541.954726][T31682] Quota error (device loop4): write_blk: dquota write failed [ 1541.962125][T31682] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1541.971937][T31682] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.10114: Failed to acquire dquot type 1 [ 1541.985238][T31682] EXT4-fs (loop4): 1 truncate cleaned up [ 1541.991559][T31682] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1548.150251][T31732] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10137'. [ 1548.377833][T31763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.384953][T31763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.394649][T31763] device bridge0 left promiscuous mode [ 1548.432791][T31763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.456459][T31763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.175171][T31933] loop5: detected capacity change from 0 to 256 [ 1550.223081][T31933] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1550.236583][ T30] audit: type=1400 audit(1743236322.971:3832): avc: denied { read } for pid=31932 comm="syz.5.10234" name="/" dev="configfs" ino=14561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1550.284525][ T30] audit: type=1400 audit(1743236322.971:3833): avc: denied { open } for pid=31932 comm="syz.5.10234" path="/" dev="configfs" ino=14561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1551.619087][ T30] audit: type=1400 audit(1743236324.351:3834): avc: denied { write } for pid=31986 comm="syz.4.10258" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1551.949847][T31992] loop0: detected capacity change from 0 to 40427 [ 1552.067986][T31992] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 1552.085459][T31992] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1552.094618][T31992] F2FS-fs (loop0): fault_injection options not supported [ 1554.078151][T31992] F2FS-fs (loop0): fault_type options not supported [ 1554.124913][T31992] F2FS-fs (loop0): invalid crc value [ 1554.133004][T31992] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1554.174864][T31992] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1554.183755][ T30] audit: type=1400 audit(1743236326.911:3835): avc: denied { bind } for pid=32034 comm="syz.1.10278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1554.198289][T31992] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1554.289493][T31992] handle_bad_sector: 14659 callbacks suppressed [ 1554.289530][T31992] attempt to access beyond end of device [ 1554.289530][T31992] loop0: rw=2049, want=45232, limit=40427 [ 1554.313942][T29725] attempt to access beyond end of device [ 1554.313942][T29725] loop0: rw=2049, want=45240, limit=40427 [ 1555.077432][T32056] loop5: detected capacity change from 0 to 512 [ 1555.114366][T32077] loop3: detected capacity change from 0 to 1024 [ 1555.130832][T32056] EXT4-fs (loop5): Ignoring removed orlov option [ 1555.145827][T32056] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.10286: Attempting to read directory block (0) that is past i_size (256) [ 1555.162286][T32056] EXT4-fs (loop5): Remounting filesystem read-only [ 1555.180676][T32056] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 1555.189020][T32056] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,orlov,nogrpid,init_itable,grpquota,grpjquota=.oldalloc,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 1555.258951][T32077] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 1555.632100][ T30] audit: type=1326 audit(1743236328.361:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32099 comm="syz.4.10304" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f800829b169 code=0x0 [ 1556.940044][T32141] device pim6reg1 entered promiscuous mode [ 1557.127447][T10479] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1557.143921][T32164] loop5: detected capacity change from 0 to 1024 [ 1557.184951][T32168] loop3: detected capacity change from 0 to 4096 [ 1557.194849][T32164] EXT4-fs error (device loop5): ext4_map_blocks:739: inode #3: block 1: comm syz.5.10330: lblock 1 mapped to illegal pblock 1 (length 1) [ 1557.230963][T32168] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1557.245838][T32164] Quota error (device loop5): write_blk: dquota write failed [ 1557.260773][T32164] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1557.280486][T32164] EXT4-fs error (device loop5): ext4_acquire_dquot:6188: comm syz.5.10330: Failed to acquire dquot type 0 [ 1557.283079][T32168] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #15: comm syz.3.10332: corrupted inode contents [ 1557.304708][T32164] EXT4-fs error (device loop5): ext4_free_blocks:6223: comm syz.5.10330: Freeing blocks not in datazone - block = 0, count = 4096 [ 1557.321693][T32168] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #15: comm syz.3.10332: mark_inode_dirty error [ 1557.333469][T32164] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.10330: Invalid inode bitmap blk 0 in block_group 0 [ 1557.338851][T32168] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #15: comm syz.3.10332: corrupted inode contents [ 1557.358079][ T8] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1557.372788][T32164] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 1557.373225][T32183] EXT4-fs (loop3): shut down requested (1) [ 1557.381913][T10479] usb 1-1: Using ep0 maxpacket: 16 [ 1557.388148][ T8] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 1557.400477][T32164] EXT4-fs (loop5): 1 orphan inode deleted [ 1557.404859][ T8] EXT4-fs error (device loop5): ext4_release_dquot:6211: comm kworker/u4:0: Failed to release dquot type 0 [ 1557.406442][T32164] EXT4-fs (loop5): mounted filesystem without journal. Opts: €; max_dir_size_kb=0x0000000000000001,noblock_validity,user_xattr,max_batch_time=0x00000000000008cc,block_validity,nolazytime,,errors=continue. Quota mode: writeback. [ 1557.463920][T32164] EXT4-fs error (device loop5): ext4_search_dir:1549: inode #2: block 16: comm syz.5.10330: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1557.483329][ T744] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1557.493921][ T744] Quota error (device loop3): write_blk: dquota write failed [ 1557.501762][ T744] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 1557.536329][T10479] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1557.549339][T10479] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1557.555823][T10479] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 1557.566306][T10479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.574979][T10479] usb 1-1: config 0 descriptor?? [ 1557.927841][ T60] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1558.057579][T10479] logitech-djreceiver 0003:046D:C52B.0005: item fetching failed at offset 4/5 [ 1558.069646][T10479] logitech-djreceiver 0003:046D:C52B.0005: logi_dj_probe: parse failed [ 1558.078155][T10479] logitech-djreceiver: probe of 0003:046D:C52B.0005 failed with error -22 [ 1558.186201][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 1558.260646][ T529] usb 1-1: USB disconnect, device number 18 [ 1558.326299][ T60] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.336367][ T60] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1558.526320][ T60] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 1558.535419][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.543216][ T60] usb 5-1: Product: syz [ 1558.547227][ T60] usb 5-1: Manufacturer: syz [ 1558.551582][ T60] usb 5-1: SerialNumber: syz [ 1558.557018][ T60] usb 5-1: config 0 descriptor?? [ 1558.804001][ T529] usb 5-1: USB disconnect, device number 10 [ 1559.019067][ T30] audit: type=1400 audit(1743236331.751:3837): avc: denied { create } for pid=32256 comm="syz.0.10371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1559.039890][T32259] loop0: detected capacity change from 0 to 256 [ 1559.091194][T32259] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1559.102738][T32259] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1559.114146][T32259] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1559.124629][T32259] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1559.134826][T32259] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1559.145240][T32258] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1559.157318][T32259] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1559.167517][T32258] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1559.187960][T32259] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1559.198050][T32258] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1560.723598][ T30] audit: type=1400 audit(1743236333.451:3838): avc: denied { mount } for pid=32357 comm="syz.4.10418" name="/" dev="ramfs" ino=118447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1560.726047][T32358] loop1: detected capacity change from 0 to 4096 [ 1560.758126][T32355] syz.3.10416[32355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1560.758209][T32355] syz.3.10416[32355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1560.904440][T32355] loop3: detected capacity change from 0 to 40427 [ 1560.977043][T32355] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 1560.985221][T32355] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1560.995429][T32355] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 1561.118577][T32358] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1561.144792][T32355] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1561.216969][T32355] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 1561.224137][T32355] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1561.343534][ T30] audit: type=1400 audit(1743236333.941:3839): avc: denied { rename } for pid=32351 comm="syz.1.10414" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1561.373703][T32358] EXT4-fs error (device loop1): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.1.10414: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1561.427060][ T30] audit: type=1400 audit(1743236333.941:3840): avc: denied { reparent } for pid=32351 comm="syz.1.10414" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1561.455501][T32378] attempt to access beyond end of device [ 1561.455501][T32378] loop3: rw=2049, want=45104, limit=40427 [ 1561.497232][T32358] EXT4-fs error (device loop1): ext4_get_first_dir_block:3619: inode #12: comm syz.1.10414: directory missing '..' [ 1562.016260][T32404] loop3: detected capacity change from 0 to 128 [ 1562.650166][T32411] loop3: detected capacity change from 0 to 256 [ 1563.164302][ T30] audit: type=1400 audit(1743236335.891:3841): avc: denied { bind } for pid=32435 comm="syz.1.10445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1563.269078][ T30] audit: type=1400 audit(1743236335.891:3842): avc: denied { listen } for pid=32435 comm="syz.1.10445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1563.298170][ T30] audit: type=1400 audit(1743236335.891:3843): avc: denied { accept } for pid=32435 comm="syz.1.10445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1564.161097][T32462] loop5: detected capacity change from 0 to 4096 [ 1564.179474][T32465] loop0: detected capacity change from 0 to 1024 [ 1564.195291][T32462] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1564.216941][T32462] EXT4-fs error (device loop5): ext4_do_update_inode:5205: inode #15: comm syz.5.10453: corrupted inode contents [ 1564.225249][T32465] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #3: block 1: comm syz.0.10452: lblock 1 mapped to illegal pblock 1 (length 1) [ 1564.233647][T32462] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #15: comm syz.5.10453: mark_inode_dirty error [ 1564.254015][T32462] EXT4-fs error (device loop5): ext4_do_update_inode:5205: inode #15: comm syz.5.10453: corrupted inode contents [ 1564.266503][T32462] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #15: comm syz.5.10453: mark_inode_dirty error [ 1564.268543][T32465] Quota error (device loop0): write_blk: dquota write failed [ 1564.285554][T32462] EXT4-fs error (device loop5): ext4_do_update_inode:5205: inode #15: comm syz.5.10453: corrupted inode contents [ 1564.285833][T32469] EXT4-fs (loop5): shut down requested (1) [ 1564.302986][T32465] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1564.315492][T32465] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.10452: Failed to acquire dquot type 0 [ 1564.326951][T32465] EXT4-fs error (device loop0): ext4_free_blocks:6223: comm syz.0.10452: Freeing blocks not in datazone - block = 0, count = 4096 [ 1564.340453][T32465] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.10452: Invalid inode bitmap blk 0 in block_group 0 [ 1564.353568][ T744] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 1564.367947][T32465] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 1564.377944][T32465] EXT4-fs (loop0): 1 orphan inode deleted [ 1564.379417][ T744] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 1564.383524][T32465] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; max_dir_size_kb=0x0000000000000001,noblock_validity,user_xattr,max_batch_time=0x00000000000008cc,block_validity,nolazytime,,errors=continue. Quota mode: writeback. [ 1564.419275][ T744] EXT4-fs error (device loop0): ext4_release_dquot:6211: comm kworker/u4:6: Failed to release dquot type 0 [ 1564.434750][ T744] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1564.446428][T32465] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #2: block 16: comm syz.0.10452: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1564.468432][ T744] Quota error (device loop5): write_blk: dquota write failed [ 1564.621899][T32488] loop1: detected capacity change from 0 to 1024 [ 1564.668931][T32488] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,abort,,errors=continue. Quota mode: none. [ 1564.706206][T32488] EXT4-fs (loop1): shut down requested (1) [ 1564.826812][T32499] loop4: detected capacity change from 0 to 1024 [ 1564.931918][T32499] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1565.054601][T32491] loop3: detected capacity change from 0 to 1024 [ 1565.297555][T32491] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.10465: Invalid block bitmap block 0 in block_group 0 [ 1565.312086][T32491] EXT4-fs error (device loop3): ext4_acquire_dquot:6188: comm syz.3.10465: Failed to acquire dquot type 0 [ 1565.323482][T32491] EXT4-fs error (device loop3): ext4_free_blocks:6223: comm syz.3.10465: Freeing blocks not in datazone - block = 0, count = 4096 [ 1565.338084][T32491] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.10465: Invalid inode bitmap blk 0 in block_group 0 [ 1565.356621][T32491] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 1565.357574][ T8] EXT4-fs error (device loop3): ext4_release_dquot:6211: comm kworker/u4:0: Failed to release dquot type 0 [ 1565.384684][T32491] EXT4-fs (loop3): 1 orphan inode deleted [ 1565.390377][T32491] EXT4-fs (loop3): mounted filesystem without journal. Opts: €; nobarrier,grpid,,errors=continue. Quota mode: writeback. [ 1565.855945][T32545] device wireguard0 entered promiscuous mode [ 1566.090998][T32576] loop4: detected capacity change from 0 to 512 [ 1566.163380][T32576] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.10496: casefold flag without casefold feature [ 1566.176455][T32576] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.10496: couldn't read orphan inode 15 (err -117) [ 1566.188514][T32576] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1566.314993][T32579] loop1: detected capacity change from 0 to 16 [ 1566.398161][T32579] erofs: (device loop1): mounted with root inode @ nid 36. [ 1566.926634][T32589] syz.5.10501[32589] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1566.926720][T32589] syz.5.10501[32589] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1567.068125][T32589] loop5: detected capacity change from 0 to 40427 [ 1567.153120][T32589] F2FS-fs (loop5): Mismatch start address, segment0(0) cp_blkaddr(512) [ 1567.161247][T32589] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1567.170551][T32589] F2FS-fs (loop5): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 1567.215220][T32589] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1568.006661][T32589] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 1568.013719][T32589] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1568.030951][ T7832] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1568.074740][T32619] loop4: detected capacity change from 0 to 512 [ 1568.204337][T32619] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1569.077354][T32633] attempt to access beyond end of device [ 1569.077354][T32633] loop5: rw=2049, want=45104, limit=40427 [ 1569.640086][T32638] loop3: detected capacity change from 0 to 2048 [ 1569.666376][T32638] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1569.674135][T32619] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 1569.682951][T32619] System zones: 1-12 [ 1569.701790][T32619] EXT4-fs (loop4): 1 truncate cleaned up [ 1569.710981][T32619] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 1569.744745][T32638] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 1569.766287][ T7832] usb 1-1: Using ep0 maxpacket: 16 [ 1569.769973][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1569.769991][ T30] audit: type=1400 audit(1743236342.481:3849): avc: denied { mounton } for pid=32618 comm="syz.4.10513" path="/228/file2/file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1569.794599][T32650] loop1: detected capacity change from 0 to 2048 [ 1569.837585][ T30] audit: type=1400 audit(1743236342.571:3850): avc: denied { append } for pid=32637 comm="syz.3.10519" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1569.857173][T32638] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.10519: bg 0: block 234: padding at end of block bitmap is not set [ 1569.874832][T32638] EXT4-fs (loop3): Remounting filesystem read-only [ 1569.896493][ T7832] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1569.905007][ T7832] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1569.913254][ T7832] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1569.922336][ T7832] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1569.930853][ T7832] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1569.941035][ T7832] usb 1-1: config 0 has no interface number 0 [ 1569.942602][T32650] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 1569.947344][ T7832] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1569.974631][ T7832] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1569.985203][ T7832] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1569.995226][ T7832] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1569.999816][T28256] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1570.008317][ T7832] usb 1-1: config 0 interface 125 has no altsetting 2 [ 1570.037360][T32658] loop4: detected capacity change from 0 to 512 [ 1570.153595][T32658] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1570.163390][T32658] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10524: bg 0: block 248: padding at end of block bitmap is not set [ 1570.176314][ T7832] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1570.188210][T32658] Quota error (device loop4): write_blk: dquota write failed [ 1570.195548][T32658] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1570.197182][ T7832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.205308][T32658] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.10524: Failed to acquire dquot type 1 [ 1570.253679][T32658] EXT4-fs (loop4): 1 truncate cleaned up [ 1570.277722][ T7832] usb 1-1: Product: syz [ 1570.282215][ T7832] usb 1-1: Manufacturer: syz [ 1570.289518][T32667] device pim6reg1 entered promiscuous mode [ 1570.292218][ T7832] usb 1-1: SerialNumber: syz [ 1570.300663][T32658] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1570.356754][ T7832] usb 1-1: config 0 descriptor?? [ 1570.386325][ T7832] usb 1-1: can't set config #0, error -71 [ 1570.401103][ T7832] usb 1-1: USB disconnect, device number 19 [ 1570.484679][T32679] syz.0.10533[32679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1570.484758][T32679] syz.0.10533[32679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1570.629538][T32679] loop0: detected capacity change from 0 to 40427 [ 1570.691048][T32679] F2FS-fs (loop0): Mismatch start address, segment0(0) cp_blkaddr(512) [ 1570.699199][T32679] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1570.709053][T32679] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 1570.723817][T32679] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1570.764635][T32679] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1570.771566][T32679] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1571.106876][T32707] device pim6reg1 entered promiscuous mode [ 1571.181828][T32717] loop4: detected capacity change from 0 to 512 [ 1571.234140][T32717] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1571.241586][T32717] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10545: bg 0: block 248: padding at end of block bitmap is not set [ 1571.256515][T32717] Quota error (device loop4): write_blk: dquota write failed [ 1571.263725][T32717] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1571.273603][T32717] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.10545: Failed to acquire dquot type 1 [ 1571.285476][T32717] EXT4-fs (loop4): 1 truncate cleaned up [ 1571.291222][T32717] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1571.344300][ T30] audit: type=1400 audit(1743236344.071:3851): avc: denied { create } for pid=32730 comm="syz.1.10555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1571.563619][T32712] loop0: detected capacity change from 0 to 40427 [ 1571.588300][T32745] device pim6reg1 entered promiscuous mode [ 1571.621655][T32712] F2FS-fs (loop0): Mismatch start address, segment0(0) cp_blkaddr(512) [ 1571.643604][T32712] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1571.666850][T32751] loop1: detected capacity change from 0 to 256 [ 1571.677873][T32751] exfat: Deprecated parameter 'utf8' [ 1571.681575][T32712] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 1571.682988][T32751] exfat: Deprecated parameter 'utf8' [ 1571.696712][T32751] exfat: Deprecated parameter 'utf8' [ 1571.713450][T32712] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1571.723839][T32751] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4899f300, utbl_chksum : 0xe619d30d) [ 1571.754817][ T30] audit: type=1400 audit(1743236344.481:3852): avc: denied { mounton } for pid=32749 comm="syz.1.10563" path="/423/file0/file0" dev="loop1" ino=1049414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1571.797877][ T30] audit: type=1400 audit(1743236344.511:3853): avc: denied { write } for pid=28256 comm="syz-executor" name="file0" dev="loop1" ino=1049414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1571.821917][ T30] audit: type=1400 audit(1743236344.511:3854): avc: denied { remove_name } for pid=28256 comm="syz-executor" name="file0" dev="loop1" ino=1049419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1571.836448][T32747] loop5: detected capacity change from 0 to 40427 [ 1571.849293][T32712] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1571.860590][T32712] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1571.926631][T32747] F2FS-fs (loop5): fault_type options not supported [ 1571.933283][T32747] F2FS-fs (loop5): Unrecognized mount option "barrier" or missing value [ 1572.073732][ T307] device lo left promiscuous mode [ 1572.080552][ T307] device tunl0 left promiscuous mode [ 1572.086736][ T307] device gre0 left promiscuous mode [ 1572.093519][ T307] device gretap0 left promiscuous mode [ 1572.100717][ T307] device erspan0 left promiscuous mode [ 1572.107254][ T307] device ip_vti0 left promiscuous mode [ 1572.113335][ T307] device ip6_vti0 left promiscuous mode [ 1572.122207][ T307] device sit0 left promiscuous mode [ 1572.131425][ T307] device ip6tnl0 left promiscuous mode [ 1572.141121][ T307] device ip6gre0 left promiscuous mode [ 1572.153737][ T307] device syz_tun left promiscuous mode [ 1572.164176][ T307] device ip6gretap0 left promiscuous mode [ 1572.189446][ T307] device dummy0 left promiscuous mode [ 1572.199745][ T307] device veth0 left promiscuous mode [ 1572.209249][ T307] device veth1 left promiscuous mode [ 1572.219107][ T307] device wg0 left promiscuous mode [ 1572.230284][ T307] device wg1 left promiscuous mode [ 1572.317890][ T307] device wg2 left promiscuous mode [ 1572.349550][ T307] device veth0_to_bridge left promiscuous mode [ 1572.356659][ T307] device bridge_slave_0 left promiscuous mode [ 1572.363317][ T307] device veth1_to_bridge left promiscuous mode [ 1572.384448][ T307] device bridge_slave_1 left promiscuous mode [ 1572.396879][ T307] device veth0_to_bond left promiscuous mode [ 1572.405098][ T307] device bond_slave_0 left promiscuous mode [ 1572.411833][ T307] device veth1_to_bond left promiscuous mode [ 1572.418664][ T307] device bond_slave_1 left promiscuous mode [ 1572.424825][ T307] device veth0_to_team left promiscuous mode [ 1572.431657][ T307] device team_slave_0 left promiscuous mode [ 1572.438142][ T307] device veth1_to_team left promiscuous mode [ 1572.444581][ T307] device team_slave_1 left promiscuous mode [ 1572.450939][ T307] device veth0_to_batadv left promiscuous mode [ 1572.457880][ T307] device batadv_slave_0 left promiscuous mode [ 1572.464650][ T307] device veth1_to_batadv left promiscuous mode [ 1572.471315][ T307] device batadv_slave_1 left promiscuous mode [ 1572.477976][ T307] device xfrm0 left promiscuous mode [ 1572.483631][ T307] device veth0_to_hsr left promiscuous mode [ 1572.490176][ T307] device hsr_slave_0 left promiscuous mode [ 1572.496378][ T307] device veth1_to_hsr left promiscuous mode [ 1572.502767][ T307] device hsr_slave_1 left promiscuous mode [ 1572.509114][ T307] device veth1_virt_wifi left promiscuous mode [ 1572.515727][ T307] device veth0_virt_wifi left promiscuous mode [ 1572.522493][ T307] device veth1_vlan left promiscuous mode [ 1572.531113][ T307] device vlan0 left promiscuous mode [ 1572.536479][ T307] device vlan1 left promiscuous mode [ 1572.542242][ T307] device veth0_macvtap left promiscuous mode [ 1572.549103][ T307] device macsec0 left promiscuous mode [ 1572.558649][ T316] device pim6reg1 entered promiscuous mode [ 1572.653697][ T326] loop1: detected capacity change from 0 to 512 [ 1572.668938][ T329] loop5: detected capacity change from 0 to 512 [ 1572.693920][ T326] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1572.700699][ T326] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.10579: bg 0: block 248: padding at end of block bitmap is not set [ 1572.707709][ T321] loop3: detected capacity change from 0 to 40427 [ 1572.715592][ T326] EXT4-fs error (device loop1): ext4_acquire_dquot:6188: comm syz.1.10579: Failed to acquire dquot type 1 [ 1572.732787][ T326] EXT4-fs (loop1): 1 truncate cleaned up [ 1572.738571][ T326] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1572.751579][ T329] EXT4-fs (loop5): Ignoring removed oldalloc option [ 1572.758334][ T329] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1572.766617][ T321] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 1572.768880][ T329] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1572.774745][ T321] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1572.790399][ T321] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 1572.796672][ T329] EXT4-fs error (device loop5): ext4_acquire_dquot:6188: comm syz.5.10581: Failed to acquire dquot type 1 [ 1572.800416][ T321] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1572.810246][ T329] EXT4-fs (loop5): 1 truncate cleaned up [ 1572.821464][ T329] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,mblk_io_submit,abort,nodiscard,nodiscard,,errors=continue. Quota mode: writeback. [ 1572.879488][ T321] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 1572.886440][ T321] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1573.180716][ T369] loop5: detected capacity change from 0 to 512 [ 1573.842577][ T369] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1573.851461][ T369] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.10594: bg 0: block 248: padding at end of block bitmap is not set [ 1573.867438][ T369] EXT4-fs error (device loop5): ext4_acquire_dquot:6188: comm syz.5.10594: Failed to acquire dquot type 1 [ 1573.881147][ T369] EXT4-fs (loop5): 1 truncate cleaned up [ 1573.887336][ T369] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1575.319724][ T403] loop4: detected capacity change from 0 to 512 [ 1575.382571][ T403] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1575.389853][ T403] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10610: bg 0: block 248: padding at end of block bitmap is not set [ 1575.404654][ T403] __quota_error: 9 callbacks suppressed [ 1575.404669][ T403] Quota error (device loop4): write_blk: dquota write failed [ 1575.417274][ T403] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1575.426991][ T403] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.10610: Failed to acquire dquot type 1 [ 1575.440499][ T403] EXT4-fs (loop4): 1 truncate cleaned up [ 1575.452004][ T403] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1575.816830][ T444] loop4: detected capacity change from 0 to 512 [ 1575.925508][ T446] loop1: detected capacity change from 0 to 512 [ 1575.976280][ T488] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 1576.447079][ T444] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1576.495473][ T444] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10622: bg 0: block 248: padding at end of block bitmap is not set [ 1576.511707][ T444] Quota error (device loop4): write_blk: dquota write failed [ 1576.519140][ T444] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1576.529011][ T444] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.10622: Failed to acquire dquot type 1 [ 1576.540896][ T488] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1576.553369][ T444] EXT4-fs (loop4): 1 truncate cleaned up [ 1576.667539][ T488] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.719025][ T446] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1576.727514][ T446] EXT4-fs warning (device loop1): ext4_enable_quotas:6423: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1576.791098][ T488] usb 1-1: Product: syz [ 1576.818175][ T488] usb 1-1: Manufacturer: syz [ 1576.822806][ T488] usb 1-1: SerialNumber: syz [ 1576.867967][ T444] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1576.907694][ T446] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1576.949062][ T488] usb 1-1: config 0 descriptor?? [ 1576.973532][ T446] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #13: comm syz.1.10625: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1576.991605][ T446] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.10625: couldn't read orphan inode 13 (err -117) [ 1577.003562][ T446] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1577.043972][ T30] audit: type=1400 audit(1743236349.771:3858): avc: denied { remount } for pid=445 comm="syz.1.10625" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1577.043993][ T446] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1577.118804][ T446] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 2 [ 1577.200461][ T459] loop3: detected capacity change from 0 to 40427 [ 1577.253848][ T469] loop4: detected capacity change from 0 to 512 [ 1577.356919][ T488] usb 1-1: USB disconnect, device number 20 [ 1577.369169][ T459] F2FS-fs (loop3): fault_injection options not supported [ 1577.437388][ T469] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1577.447199][ T469] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10631: bg 0: block 248: padding at end of block bitmap is not set [ 1577.462328][ T469] Quota error (device loop4): write_blk: dquota write failed [ 1577.469754][ T469] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1577.479717][ T469] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.10631: Failed to acquire dquot type 1 [ 1577.493206][ T469] EXT4-fs (loop4): 1 truncate cleaned up [ 1577.540178][ T469] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1577.583550][ T459] F2FS-fs (loop3): LFS not compatible with checkpoint=disable [ 1579.492191][ T501] syz.0.10645[501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1579.492494][ T501] syz.0.10645[501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1579.723291][ T501] loop0: detected capacity change from 0 to 40427 [ 1579.747455][ T503] loop1: detected capacity change from 0 to 512 [ 1579.887467][ T501] F2FS-fs (loop0): Mismatch start address, segment0(0) cp_blkaddr(512) [ 1579.895601][ T501] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1579.910940][ T501] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 1579.948899][ T503] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1579.970027][ T503] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.10642: bg 0: block 248: padding at end of block bitmap is not set [ 1579.993406][ T503] Quota error (device loop1): write_blk: dquota write failed [ 1580.000979][ T503] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1580.012308][ T503] EXT4-fs error (device loop1): ext4_acquire_dquot:6188: comm syz.1.10642: Failed to acquire dquot type 1 [ 1580.033402][ T503] EXT4-fs (loop1): 1 truncate cleaned up [ 1580.042438][ T503] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1580.300969][ T501] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1580.411658][ T511] syz.3.10647[511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1580.411743][ T511] syz.3.10647[511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1580.550743][ T511] loop3: detected capacity change from 0 to 40427 [ 1580.646054][ T511] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 1580.654386][ T511] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1580.667042][ T511] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 1582.046749][ T511] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1582.088605][ T30] audit: type=1400 audit(1743236354.821:3859): avc: denied { create } for pid=509 comm="syz.4.10646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1582.108113][ T501] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1582.114957][ T501] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1582.135794][ T511] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 1582.143046][ T511] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1582.252966][ T526] loop4: detected capacity change from 0 to 1024 [ 1582.265665][ T527] loop5: detected capacity change from 0 to 16 [ 1582.307806][ T527] erofs: (device loop5): mounted with root inode @ nid 36. [ 1582.327834][ T528] attempt to access beyond end of device [ 1582.327834][ T528] loop3: rw=2049, want=45104, limit=40427 [ 1582.360268][ T30] audit: type=1400 audit(1743236355.091:3860): avc: denied { map } for pid=520 comm="syz.5.10649" path="/427/file1/file2" dev="loop5" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1583.515866][ T49] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1583.536183][ T527] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1583.557223][ T527] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1583.577924][ T527] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1583.598656][ T527] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1583.688396][ T526] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1583.793269][ T537] device pim6reg1 entered promiscuous mode [ 1583.921406][ T546] loop5: detected capacity change from 0 to 512 [ 1584.040658][ T562] syz.3.10663[562] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1584.040743][ T562] syz.3.10663[562] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1584.090030][ T546] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1584.110133][ T546] EXT4-fs warning (device loop5): ext4_enable_quotas:6423: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1584.125417][ T546] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1584.133825][ T546] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #13: comm syz.5.10658: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1584.152622][ T546] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.10658: couldn't read orphan inode 13 (err -117) [ 1584.164869][ T546] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1584.198956][ T562] loop3: detected capacity change from 0 to 40427 [ 1584.257926][ T569] loop4: detected capacity change from 0 to 512 [ 1584.276261][ T60] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1584.297245][ T562] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 1584.305337][ T562] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1584.321362][ T562] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 1584.386134][ T546] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 1584.441010][ T569] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1584.452321][ T569] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10664: bg 0: block 248: padding at end of block bitmap is not set [ 1584.468701][ T569] Quota error (device loop4): write_blk: dquota write failed [ 1584.476078][ T569] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1584.485900][ T569] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.10664: Failed to acquire dquot type 1 [ 1584.500248][ T569] EXT4-fs (loop4): 1 truncate cleaned up [ 1584.506451][ T569] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1584.560070][ T562] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1584.630280][ T546] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 2 [ 1584.726247][ T60] usb 1-1: Using ep0 maxpacket: 32 [ 1584.846326][ T60] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 1584.860044][ T60] usb 1-1: config 0 has no interface number 0 [ 1584.883903][ T60] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1585.824353][ T562] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 1585.831318][ T60] usb 1-1: config 0 interface 85 has no altsetting 0 [ 1585.838001][ T562] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1585.986811][ T60] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1586.005981][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.045929][ T60] usb 1-1: Product: syz [ 1586.051158][ T602] loop5: detected capacity change from 0 to 1024 [ 1586.055451][ T60] usb 1-1: Manufacturer: syz [ 1586.085298][ T60] usb 1-1: SerialNumber: syz [ 1586.096838][ T607] syz.3.10680[607] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1586.096902][ T607] syz.3.10680[607] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1586.100339][ T60] usb 1-1: config 0 descriptor?? [ 1586.139793][ T602] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1586.150672][ T602] ext4 filesystem being mounted at /435/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1586.248737][ T607] loop3: detected capacity change from 0 to 40427 [ 1586.287275][ T607] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 1586.295473][ T607] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1586.307780][ T607] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 1586.321679][ T607] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1586.389635][ T607] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 1586.396856][ T607] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1586.637917][ T60] usb 1-1: USB disconnect, device number 21 [ 1586.906259][ T488] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1587.146239][ T488] usb 4-1: Using ep0 maxpacket: 16 [ 1587.534076][ T645] loop0: detected capacity change from 0 to 40427 [ 1587.546422][ T645] F2FS-fs (loop0): Mismatch start address, segment0(0) cp_blkaddr(512) [ 1587.554494][ T645] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1587.564057][ T488] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 75, changing to 10 [ 1587.565075][ T645] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 1587.587258][ T488] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1587.595226][ T645] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1587.729073][ T650] syz.5.10695[650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1587.729162][ T650] syz.5.10695[650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1587.779817][ T488] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1587.808120][ T488] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1431, setting to 1024 [ 1587.819148][ T488] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1587.832239][ T645] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1587.839584][ T645] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1587.876269][ T650] loop5: detected capacity change from 0 to 40427 [ 1587.904234][ T650] F2FS-fs (loop5): Mismatch start address, segment0(0) cp_blkaddr(512) [ 1587.912609][ T650] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1587.921214][ T658] loop4: detected capacity change from 0 to 512 [ 1587.927895][ T488] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1587.941223][ T650] F2FS-fs (loop5): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 1587.944070][ T488] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1587.958141][ T488] usb 4-1: SerialNumber: syz [ 1587.963272][ T650] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1587.976291][ T624] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1587.996668][ T488] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1588.006191][ T529] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1588.015161][ T488] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 1588.022368][ T650] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 1588.029341][ T650] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1588.078413][ T658] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 1588.117206][ T658] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1588.166789][ T670] attempt to access beyond end of device [ 1588.166789][ T670] loop5: rw=2049, want=45104, limit=40427 [ 1588.167523][ T671] loop0: detected capacity change from 0 to 512 [ 1588.263350][ T671] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1588.272876][ T671] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.10700: bg 0: block 248: padding at end of block bitmap is not set [ 1588.289715][ T671] Quota error (device loop0): write_blk: dquota write failed [ 1588.297179][ T671] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1588.307052][ T671] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.10700: Failed to acquire dquot type 1 [ 1588.321342][ T671] EXT4-fs (loop0): 1 truncate cleaned up [ 1588.330142][ T671] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1588.358414][ T30] audit: type=1400 audit(1743236361.081:3861): avc: denied { setattr } for pid=657 comm="syz.4.10699" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1588.381200][ T529] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1588.432155][ T529] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1588.457993][ T529] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1588.468305][ T529] usb 2-1: config 1 has no interface number 0 [ 1588.475071][ T529] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1588.487310][ T529] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1588.501291][ T529] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1588.513241][ T529] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.545450][ T688] usb 4-1: USB disconnect, device number 16 [ 1589.946363][ T695] loop4: detected capacity change from 0 to 40427 [ 1589.966819][ T695] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(512) [ 1589.974904][ T695] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1589.984129][ T695] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 1590.004071][ T695] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1590.021699][ T683] loop5: detected capacity change from 0 to 40427 [ 1590.047844][ T695] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1590.054705][ T695] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1590.075779][ T683] F2FS-fs (loop5): invalid crc value [ 1590.083257][ T683] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1590.108015][ T683] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 1590.114500][ T683] F2FS-fs (loop5): Start checkpoint disabled! [ 1590.121635][ T683] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1590.285524][ T30] audit: type=1326 audit(1743236363.011:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=717 comm="syz.5.10714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3325af8169 code=0x7ffc0000 [ 1590.310050][ T30] audit: type=1326 audit(1743236363.011:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=717 comm="syz.5.10714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3325af8169 code=0x7ffc0000 [ 1590.333809][ T30] audit: type=1326 audit(1743236363.011:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=717 comm="syz.5.10714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f3325af8169 code=0x7ffc0000 [ 1590.379682][ T720] loop4: detected capacity change from 0 to 512 [ 1590.390495][ T30] audit: type=1326 audit(1743236363.011:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=717 comm="syz.5.10714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3325af8169 code=0x7ffc0000 [ 1590.501838][ T720] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1590.511103][ T720] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10715: bg 0: block 248: padding at end of block bitmap is not set [ 1590.526877][ T720] Quota error (device loop4): write_blk: dquota write failed [ 1590.534240][ T720] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1590.544034][ T720] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.10715: Failed to acquire dquot type 1 [ 1590.557531][ T720] EXT4-fs (loop4): 1 truncate cleaned up [ 1590.563898][ T720] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1590.674207][ T60] usb 2-1: USB disconnect, device number 10 [ 1591.171927][ T30] audit: type=1326 audit(1743236363.011:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=717 comm="syz.5.10714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3325af8169 code=0x7ffc0000 [ 1592.960564][ T777] loop1: detected capacity change from 0 to 512 [ 1593.146593][ T778] loop0: detected capacity change from 0 to 512 [ 1593.239126][ T777] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1593.249359][ T777] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.10730: bg 0: block 248: padding at end of block bitmap is not set [ 1593.265969][ T777] EXT4-fs error (device loop1): ext4_acquire_dquot:6188: comm syz.1.10730: Failed to acquire dquot type 1 [ 1593.280260][ T777] EXT4-fs (loop1): 1 truncate cleaned up [ 1593.287671][ T777] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1593.379241][ T778] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1593.388971][ T778] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.10736: bg 0: block 248: padding at end of block bitmap is not set [ 1593.404476][ T778] __quota_error: 2 callbacks suppressed [ 1593.404503][ T778] Quota error (device loop0): write_blk: dquota write failed [ 1593.417354][ T778] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1593.427179][ T778] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.10736: Failed to acquire dquot type 1 [ 1593.441110][ T778] EXT4-fs (loop0): 1 truncate cleaned up [ 1593.447398][ T778] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1594.385839][ T30] audit: type=1400 audit(1743236367.091:3867): avc: denied { accept } for pid=787 comm="syz.3.10740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1595.045767][ T820] loop3: detected capacity change from 0 to 512 [ 1595.067437][ T30] audit: type=1400 audit(1743236367.501:3868): avc: denied { create } for pid=807 comm="syz.4.10747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1595.205888][ T30] audit: type=1400 audit(1743236367.541:3869): avc: denied { getopt } for pid=807 comm="syz.4.10747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1595.618238][ T820] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1595.627626][ T820] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.10748: bg 0: block 248: padding at end of block bitmap is not set [ 1595.643092][ T820] Quota error (device loop3): write_blk: dquota write failed [ 1595.650517][ T820] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1595.660332][ T820] EXT4-fs error (device loop3): ext4_acquire_dquot:6188: comm syz.3.10748: Failed to acquire dquot type 1 [ 1595.674052][ T820] EXT4-fs (loop3): 1 truncate cleaned up [ 1595.680623][ T820] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1595.798976][ T827] loop5: detected capacity change from 0 to 1024 [ 1595.958023][ T827] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 1596.314123][ T839] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 1596.346201][T12850] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1596.669584][ T856] loop3: detected capacity change from 0 to 2048 [ 1596.762303][ T859] loop5: detected capacity change from 0 to 512 [ 1596.963753][T12850] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1597.160816][T12850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1597.346174][ T859] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1597.451216][ T859] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.10756: bg 0: block 248: padding at end of block bitmap is not set [ 1597.727408][ T859] Quota error (device loop5): write_blk: dquota write failed [ 1597.734911][ T859] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1597.744765][ T859] EXT4-fs error (device loop5): ext4_acquire_dquot:6188: comm syz.5.10756: Failed to acquire dquot type 1 [ 1597.767772][ T859] EXT4-fs (loop5): 1 truncate cleaned up [ 1597.774672][ T859] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1597.801417][ T856] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1598.011198][ T856] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,jqfmt=vfsold,nomblk_io_submit,jqfmt=vfsv0,journal_dev=0x0000000000000008,inode_readahead_blks=0x0000000000000100,usrquota,noinit_itable,data_err=ignore,,errors=continue. Quota mode: writeback. [ 1598.276236][ T488] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1598.416207][T12850] usb 2-1: string descriptor 0 read error: -71 [ 1598.422203][T12850] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1598.437560][T12850] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1598.447215][T12850] usb 2-1: config 0 descriptor?? [ 1598.496289][T12850] usb 2-1: can't set config #0, error -71 [ 1598.502336][T12850] usb 2-1: USB disconnect, device number 11 [ 1598.618449][ T899] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1598.880710][ T901] kvm: pic: non byte write [ 1598.896177][T12850] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1598.896252][ T488] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1598.914343][ T488] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1599.076230][ T488] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1599.085084][ T488] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.092945][ T488] usb 5-1: Product: syz [ 1599.096883][ T488] usb 5-1: Manufacturer: syz [ 1599.101294][ T488] usb 5-1: SerialNumber: syz [ 1599.126226][ T867] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1599.166173][T12850] usb 2-1: Using ep0 maxpacket: 16 [ 1599.321776][ T30] audit: type=1400 audit(1743236372.051:3870): avc: denied { unmount } for pid=28067 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1599.327990][T12850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1599.351101][ T907] syz.5.10775[907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1599.352377][ T907] syz.5.10775[907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1599.353270][T12850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1599.384805][T12850] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1599.398226][T12850] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1599.408425][T12850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.424321][T12850] usb 2-1: config 0 descriptor?? [ 1599.493632][ T908] loop3: detected capacity change from 0 to 1024 [ 1599.566337][ T30] audit: type=1400 audit(1743236372.251:3871): avc: denied { mounton } for pid=905 comm="syz.3.10776" path="/368/file0/file0" dev="ramfs" ino=121555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1599.646530][ T908] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1599.658335][ T907] loop5: detected capacity change from 0 to 40427 [ 1599.707189][ T907] F2FS-fs (loop5): Mismatch start address, segment0(0) cp_blkaddr(512) [ 1599.715336][ T907] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1599.736278][ T907] F2FS-fs (loop5): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 1599.751599][ T907] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1599.810164][ T907] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 1599.817361][ T907] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1599.864953][ T907] attempt to access beyond end of device [ 1599.864953][ T907] loop5: rw=2049, want=45104, limit=40427 [ 1600.478680][ T921] loop3: detected capacity change from 0 to 512 [ 1600.620550][ T921] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1600.650892][ T921] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.10778: bg 0: block 248: padding at end of block bitmap is not set [ 1600.671633][ T921] Quota error (device loop3): write_blk: dquota write failed [ 1600.679658][ T921] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1600.692404][ T921] EXT4-fs error (device loop3): ext4_acquire_dquot:6188: comm syz.3.10778: Failed to acquire dquot type 1 [ 1600.713134][ T921] EXT4-fs (loop3): 1 truncate cleaned up [ 1600.720269][ T921] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1601.477200][ T488] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1601.485716][ T488] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1601.878758][T12850] microsoft 0003:045E:07DA.0006: collection stack underflow [ 1601.886212][T12850] microsoft 0003:045E:07DA.0006: item 0 0 0 12 parsing failed [ 1601.895292][T12850] microsoft 0003:045E:07DA.0006: parse failed [ 1601.901342][T12850] microsoft: probe of 0003:045E:07DA.0006 failed with error -22 [ 1601.963043][ T488] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 1601.967574][T12850] usb 2-1: USB disconnect, device number 12 [ 1602.026268][ T488] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 1602.048495][ T488] cdc_ncm 5-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 1602.084695][ T488] usb 5-1: USB disconnect, device number 11 [ 1602.095521][ T30] audit: type=1400 audit(1743236374.831:3872): avc: denied { read } for pid=139 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1602.116601][ T488] cdc_ncm 5-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 1602.134638][ T30] audit: type=1400 audit(1743236374.831:3873): avc: denied { search } for pid=139 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1602.173492][ T30] audit: type=1400 audit(1743236374.831:3874): avc: denied { read } for pid=139 comm="dhcpcd" name="n15" dev="tmpfs" ino=66136 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1602.215923][ T30] audit: type=1400 audit(1743236374.831:3875): avc: denied { open } for pid=139 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=66136 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1602.275628][ T30] audit: type=1400 audit(1743236374.831:3876): avc: denied { getattr } for pid=139 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=66136 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1602.420266][ T30] audit: type=1400 audit(1743236374.861:3877): avc: denied { read } for pid=934 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1603.320586][ T927] loop0: detected capacity change from 0 to 40427 [ 1603.343427][ T979] loop5: detected capacity change from 0 to 256 [ 1603.358034][ T927] F2FS-fs (loop0): invalid crc value [ 1603.383692][ T927] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1603.526228][ T994] loop4: detected capacity change from 0 to 512 [ 1603.557865][ T979] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1604.352299][ T994] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1604.376769][ T994] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10792: bg 0: block 248: padding at end of block bitmap is not set [ 1604.397682][ T994] __quota_error: 9 callbacks suppressed [ 1604.397729][ T994] Quota error (device loop4): write_blk: dquota write failed [ 1604.410867][ T994] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1604.422592][ T994] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.10792: Failed to acquire dquot type 1 [ 1604.440502][ T994] EXT4-fs (loop4): 1 truncate cleaned up [ 1604.447954][ T994] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1605.975038][ T680] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1606.165595][ T1010] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 1606.177549][ T1016] loop5: detected capacity change from 0 to 512 [ 1606.291983][ T1016] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1606.303333][ T1016] ext4 filesystem being mounted at /457/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1606.376481][ T1016] fs-verity (loop5, inode 15): Unrecognized descriptor size: 0 bytes [ 1606.396876][ T1016] fs-verity (loop5, inode 15): Unrecognized descriptor size: 0 bytes [ 1606.411615][ T1016] fs-verity (loop5, inode 15): Unrecognized descriptor size: 0 bytes [ 1606.650158][ T1047] input: syz1 as /devices/virtual/input/input96 [ 1606.657314][ T30] audit: type=1400 audit(1743236379.391:3887): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=2909 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1606.688959][ T30] audit: type=1400 audit(1743236379.391:3888): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=2909 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1606.713453][ T30] audit: type=1400 audit(1743236379.391:3889): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=2909 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1606.765009][ T1049] loop0: detected capacity change from 0 to 512 [ 1606.966778][ T1049] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1606.980192][ T1049] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.10808: bg 0: block 248: padding at end of block bitmap is not set [ 1606.996582][ T1049] Quota error (device loop0): write_blk: dquota write failed [ 1607.004000][ T1049] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1607.013825][ T1049] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.10808: Failed to acquire dquot type 1 [ 1607.029426][ T1049] EXT4-fs (loop0): 1 truncate cleaned up [ 1607.037092][ T1049] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1607.615859][ T1059] device pim6reg1 entered promiscuous mode [ 1607.627969][ T30] audit: type=1400 audit(1743236380.361:3890): avc: denied { create } for pid=1056 comm="syz.3.10812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1607.653076][ T1057] loop3: detected capacity change from 0 to 512 [ 1607.676298][ T60] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1607.701015][ T1062] loop1: detected capacity change from 0 to 256 [ 1607.737209][ T1057] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1607.747413][ T1057] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 1607.755225][ T1057] System zones: 1-12 [ 1607.761995][ T1062] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1607.774374][ T1057] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1607.781355][ T1057] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.10812: invalid indirect mapped block 12 (level 1) [ 1607.801206][ T1057] EXT4-fs (loop3): Remounting filesystem read-only [ 1607.803271][ T30] audit: type=1400 audit(1743236380.531:3891): avc: denied { add_name } for pid=1061 comm="syz.1.10814" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1607.807550][ T1057] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.10812: invalid indirect mapped block 2 (level 2) [ 1607.808568][ T1057] EXT4-fs (loop3): Remounting filesystem read-only [ 1607.849683][ T30] audit: type=1400 audit(1743236380.541:3892): avc: denied { associate } for pid=1061 comm="syz.1.10814" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1607.911765][ T1057] EXT4-fs (loop3): 1 truncate cleaned up [ 1607.922739][ T1057] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,noload,errors=remount-ro,data_err=ignore. Quota mode: none. [ 1608.209079][ T1071] loop1: detected capacity change from 0 to 40427 [ 1608.223807][ T1073] loop4: detected capacity change from 0 to 512 [ 1608.257999][ T1071] F2FS-fs (loop1): Mismatch start address, segment0(0) cp_blkaddr(512) [ 1608.266255][ T1071] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1608.278295][ T1071] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 1608.306230][ T60] usb 6-1: config 0 has no interfaces? [ 1608.333225][ T1073] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1608.342616][ T1073] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10817: bg 0: block 248: padding at end of block bitmap is not set [ 1608.358691][ T1073] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.10817: Failed to acquire dquot type 1 [ 1608.372859][ T1073] EXT4-fs (loop4): 1 truncate cleaned up [ 1608.379492][ T1073] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1608.503995][ T1071] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1608.596454][ T60] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1608.634546][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.673411][ T60] usb 6-1: Product: syz [ 1608.693621][ T60] usb 6-1: Manufacturer: syz [ 1608.715511][ T60] usb 6-1: SerialNumber: syz [ 1608.762116][ T60] usb 6-1: config 0 descriptor?? [ 1608.894218][ T1065] loop0: detected capacity change from 0 to 40427 [ 1608.956923][ T1065] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1608.964638][ T1065] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1608.973857][ T1065] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 1608.981468][ T1065] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1609.021345][ T1065] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1609.028389][ T1065] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1609.086437][ T60] usb 6-1: USB disconnect, device number 2 [ 1609.162048][ T1071] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1609.169117][ T1071] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1609.190656][ T1071] attempt to access beyond end of device [ 1609.190656][ T1071] loop1: rw=2049, want=45104, limit=40427 [ 1609.261628][ T1089] loop0: detected capacity change from 0 to 512 [ 1609.270637][ T1092] syz.3.10824[1092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1609.270717][ T1092] syz.3.10824[1092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1609.277603][ T1091] netlink: 156 bytes leftover after parsing attributes in process `syz.4.10821'. [ 1609.338976][ T1089] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1609.385339][ T1094] device pim6reg1 entered promiscuous mode [ 1609.392773][ T1089] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1609.408823][ T1089] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1609.428843][ T1089] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1609.437224][ T1089] System zones: 0-2, 18-18, 34-35 [ 1609.464026][ T1089] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1609.489953][ T1092] loop3: detected capacity change from 0 to 40427 [ 1609.565142][ T1092] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 1609.594614][ T1092] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1609.627013][ T1092] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 1609.654544][ T1092] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1609.731089][ T1122] device syzkaller0 entered promiscuous mode [ 1609.737851][ T1092] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 1609.744782][ T1128] device pim6reg1 entered promiscuous mode [ 1609.750423][ T1092] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1610.198135][ T1143] loop3: detected capacity change from 0 to 4096 [ 1610.263174][ T1143] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1610.277562][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1610.277579][ T30] audit: type=1400 audit(1743236383.011:3893): avc: denied { module_load } for pid=1151 comm="syz.1.10848" path="/479/bus/bus" dev="overlay" ino=2451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 1610.308184][ T1153] Invalid ELF header magic: != ELF [ 1610.315454][ T1143] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 1610.342185][ T1143] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback. [ 1610.360641][ T30] audit: type=1400 audit(1743236383.061:3894): avc: denied { execute } for pid=1142 comm="syz.3.10843" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1610.375881][ T1150] loop4: detected capacity change from 0 to 40427 [ 1610.392187][T29052] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 80: comm syz-executor: path /386/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1610.413560][T29052] EXT4-fs error (device loop3): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1610.432972][T29052] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 1610.444567][T29052] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 80: comm syz-executor: path /386/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1610.468042][T29052] EXT4-fs error (device loop3): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1610.488271][T29052] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 1610.501710][T29052] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 80: comm syz-executor: path /386/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1610.525340][T29052] EXT4-fs error (device loop3): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1610.525715][ T1150] F2FS-fs (loop4): Unrecognized mount option "errors=continue" or missing value [ 1610.545442][T29052] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 1610.567194][T29052] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 80: comm syz-executor: path /386/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1610.600037][T29052] EXT4-fs error (device loop3): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1610.619627][T29052] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 1610.631535][T29052] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 80: comm syz-executor: path /386/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1610.682217][T29052] EXT4-fs error (device loop3): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1610.705008][T29052] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 1610.757818][T29052] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 1610.809217][T29052] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 1610.859359][T29052] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 1610.900841][T29052] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 1610.928159][T29052] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 1610.988906][ T1165] loop5: detected capacity change from 0 to 40427 [ 1611.067270][ T1171] loop1: detected capacity change from 0 to 512 [ 1611.239945][ T1171] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1611.248810][ T1171] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.10855: bg 0: block 248: padding at end of block bitmap is not set [ 1611.264261][ T1171] Quota error (device loop1): write_blk: dquota write failed [ 1611.271667][ T1171] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1611.281523][ T1171] EXT4-fs error (device loop1): ext4_acquire_dquot:6188: comm syz.1.10855: Failed to acquire dquot type 1 [ 1611.295852][ T1171] EXT4-fs (loop1): 1 truncate cleaned up [ 1611.302095][ T1171] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1611.341669][ T1165] F2FS-fs (loop5): Mismatch start address, segment0(0) cp_blkaddr(512) [ 1611.478263][ T1165] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1611.589435][ T1165] F2FS-fs (loop5): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 1611.672669][ T1165] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1611.841801][ T1165] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 1611.848866][ T1165] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1612.157002][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.164173][ T1188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.171867][ T1188] device bridge_slave_0 entered promiscuous mode [ 1612.187534][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.194411][ T1188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.201961][ T1188] device bridge_slave_1 entered promiscuous mode [ 1612.305301][ T1196] 9pnet: Insufficient options for proto=fd [ 1612.620714][ T688] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1612.677670][ T1200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10866'. [ 1612.696695][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.703547][ T1188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1612.710686][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.717544][ T1188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1612.746056][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1612.753864][ T2420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.761895][ T2420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.790517][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1612.799743][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1612.808535][ T2420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.815415][ T2420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1612.824337][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1612.833029][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1612.842974][ T2420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.849872][ T2420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1612.869821][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1612.878081][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1613.085530][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1613.093725][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1613.105745][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1613.114052][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1613.116220][ T688] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1613.139199][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1613.147126][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1613.155720][ T1188] device veth0_vlan entered promiscuous mode [ 1613.167977][ T1188] device veth1_macvtap entered promiscuous mode [ 1613.190622][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1613.200755][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1613.208350][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1613.216592][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1613.224627][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1613.232571][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1613.240622][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1613.248801][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1613.256840][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1613.550880][ T488] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1613.558568][ T688] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1613.573821][ T688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.581777][ T688] usb 6-1: Product: syz [ 1613.585719][ T688] usb 6-1: Manufacturer: syz [ 1613.590255][ T688] usb 6-1: SerialNumber: syz [ 1613.867374][ T688] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1613.886285][ T60] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1613.936182][ T488] usb 5-1: Using ep0 maxpacket: 32 [ 1614.056223][ T488] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 1614.064290][ T488] usb 5-1: config 0 has no interface number 0 [ 1614.070292][ T488] usb 5-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1614.080806][ T488] usb 5-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 1614.096787][ T30] audit: type=1400 audit(1743236386.831:3895): avc: denied { read write } for pid=1181 comm="syz.5.10859" name="lp0" dev="devtmpfs" ino=2930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1614.098530][ T488] usb 5-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping [ 1614.128121][ T30] audit: type=1400 audit(1743236386.831:3896): avc: denied { open } for pid=1181 comm="syz.5.10859" path="/dev/usb/lp0" dev="devtmpfs" ino=2930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1614.133087][ T488] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 2 [ 1614.155442][ T30] audit: type=1400 audit(1743236386.831:3897): avc: denied { ioctl } for pid=1181 comm="syz.5.10859" path="/dev/usb/lp0" dev="devtmpfs" ino=2930 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1614.166440][ T1182] usblp0:failed reading printer status (-71) [ 1614.195643][ T488] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1614.211019][ T688] usb 6-1: USB disconnect, device number 3 [ 1614.266449][ T60] usb 7-1: config 0 has no interfaces? [ 1614.417202][ T488] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1614.443195][ T488] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.453539][ T1181] usblp0: removed [ 1614.457163][ T488] usb 5-1: Product: syz [ 1614.461135][ T488] usb 5-1: Manufacturer: syz [ 1614.465565][ T488] usb 5-1: SerialNumber: syz [ 1614.470248][ T60] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1614.480834][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.489738][ T60] usb 7-1: Product: syz [ 1614.501329][ T488] usb 5-1: config 0 descriptor?? [ 1614.506273][ T60] usb 7-1: Manufacturer: syz [ 1614.510627][ T60] usb 7-1: SerialNumber: syz [ 1614.516608][ T60] usb 7-1: config 0 descriptor?? [ 1614.536269][ T1210] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1614.543080][ T1210] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1614.758848][ T60] usb 7-1: USB disconnect, device number 2 [ 1614.784535][ T1210] loop4: detected capacity change from 0 to 2048 [ 1614.877941][ T1210] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 1614.892164][ T488] usb 5-1: USB disconnect, device number 12 [ 1614.906255][ T397] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1614.997313][ T1266] device ip6erspan0 entered promiscuous mode [ 1615.017948][ T1266] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10889'. [ 1615.352672][ T397] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1615.361173][ T397] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1615.378982][ T397] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1615.435034][ T397] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1615.446066][ T397] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1615.826574][ T397] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1615.861579][ T397] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1615.870462][ T397] usb 2-1: Product: syz [ 1615.874526][ T397] usb 2-1: Manufacturer: syz [ 1615.968566][ T1289] loop5: detected capacity change from 0 to 512 [ 1615.968675][ T397] cdc_wdm 2-1:1.0: skipping garbage [ 1616.008820][ T397] cdc_wdm 2-1:1.0: skipping garbage [ 1616.021167][ T397] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1616.099419][ T1293] loop4: detected capacity change from 0 to 128 [ 1616.118059][ T1289] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 1616.133947][ T1289] ext4 filesystem being mounted at /468/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1616.162527][ T30] audit: type=1400 audit(1743236388.891:3898): avc: denied { link } for pid=1288 comm="syz.5.10898" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1617.745331][ T60] usb 2-1: USB disconnect, device number 13 [ 1617.782839][ T1312] loop1: detected capacity change from 0 to 128 [ 1618.813022][ T1318] loop4: detected capacity change from 0 to 512 [ 1619.191440][ T1318] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1619.347876][ T30] audit: type=1400 audit(1743236391.971:3899): avc: denied { write } for pid=1311 comm="syz.1.10907" path="socket:[123176]" dev="sockfs" ino=123176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1619.700759][ T1318] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10906: bg 0: block 248: padding at end of block bitmap is not set [ 1619.716166][ T1318] Quota error (device loop4): write_blk: dquota write failed [ 1619.723566][ T1318] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1619.733408][ T1318] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.10906: Failed to acquire dquot type 1 [ 1619.749678][ T1318] EXT4-fs (loop4): 1 truncate cleaned up [ 1619.760598][ T1318] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1621.717146][ T1396] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1621.975080][ T1395] loop6: detected capacity change from 0 to 512 [ 1622.528172][ T1395] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1622.543950][ T1395] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.10932: bg 0: block 248: padding at end of block bitmap is not set [ 1622.565284][ T1395] Quota error (device loop6): write_blk: dquota write failed [ 1622.573141][ T1395] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1622.583892][ T1395] EXT4-fs error (device loop6): ext4_acquire_dquot:6188: comm syz.6.10932: Failed to acquire dquot type 1 [ 1622.598838][ T30] audit: type=1400 audit(1743236395.221:3900): avc: denied { read } for pid=1390 comm="syz.5.10936" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=124472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1622.627365][ T1395] EXT4-fs (loop6): 1 truncate cleaned up [ 1622.635608][ T1395] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1624.137961][ T1404] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10940'. [ 1624.198342][ T1411] loop4: detected capacity change from 0 to 1024 [ 1624.215316][ T1411] EXT4-fs (loop4): Ignoring removed orlov option [ 1624.225414][ T1411] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 1624.239399][ T1411] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,orlov,nolazytime,quota,nomblk_io_submit,. Quota mode: writeback. [ 1624.267108][ T1411] EXT4-fs (loop4): shut down requested (2) [ 1624.356758][ T20] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1624.397089][ T1432] loop6: detected capacity change from 0 to 256 [ 1624.837910][ T1437] loop6: detected capacity change from 0 to 512 [ 1624.878490][ T1437] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.10951: bg 0: block 248: padding at end of block bitmap is not set [ 1624.892958][ T1437] Quota error (device loop6): write_blk: dquota write failed [ 1624.900460][ T1437] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1624.910600][ T1437] EXT4-fs error (device loop6): ext4_acquire_dquot:6188: comm syz.6.10951: Failed to acquire dquot type 1 [ 1624.922469][ T1437] EXT4-fs (loop6): 1 truncate cleaned up [ 1624.927959][ T1437] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1624.938948][ T1437] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1624.971646][ T1443] loop5: detected capacity change from 0 to 128 [ 1625.006268][ T20] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1625.006638][ T1443] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1625.025775][ T20] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1625.036635][ T1443] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1625.043910][ T20] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1625.060644][ T20] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1625.096760][ T20] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1625.108160][ T2420] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1625.243862][ T1454] device pim6reg1 entered promiscuous mode [ 1625.296313][ T20] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1625.320615][ T20] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1625.372445][ T20] usb 1-1: Product: syz [ 1625.391282][ T20] usb 1-1: Manufacturer: syz [ 1625.399465][ T1463] input: syz1 as /devices/virtual/input/input97 [ 1625.439379][ T20] cdc_wdm 1-1:1.0: skipping garbage [ 1625.452905][ T20] cdc_wdm 1-1:1.0: skipping garbage [ 1625.474161][ T20] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1625.727537][ T20] usb 1-1: USB disconnect, device number 22 [ 1625.784464][ T1481] loop4: detected capacity change from 0 to 128 [ 1625.850251][ T1481] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1625.860948][ T1481] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1625.880888][ T1481] syz.4.10969 (pid 1481) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1625.894419][ T1481] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 1626.386148][ T397] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1626.601116][ T1520] loop4: detected capacity change from 0 to 128 [ 1626.676216][ T397] usb 7-1: Using ep0 maxpacket: 8 [ 1626.756152][ T1320] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1626.806333][ T397] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1626.822468][ T397] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1626.833137][ T397] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1626.862357][ T397] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1626.875636][ T397] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1626.884699][ T397] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.176319][ T1320] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 1627.184714][ T1320] usb 2-1: config 0 has no interface number 0 [ 1627.458365][ T1537] loop5: detected capacity change from 0 to 1024 [ 1627.536261][ T1320] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=2a.cb [ 1627.562584][ T1320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.575142][ T1537] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1627.596435][ T1320] usb 2-1: Product: syz [ 1627.613873][ T1320] usb 2-1: Manufacturer: syz [ 1627.632826][ T1320] usb 2-1: SerialNumber: syz [ 1627.655657][ T1320] usb 2-1: config 0 descriptor?? [ 1627.697597][ T1320] usb_ehset_test: probe of 2-1:0.128 failed with error -32 [ 1627.706884][ T1320] usbhid 2-1:0.128: couldn't find an input interrupt endpoint [ 1627.897552][ T1320] usb 2-1: USB disconnect, device number 14 [ 1628.017034][ T30] audit: type=1400 audit(1743236400.751:3901): avc: denied { create } for pid=1557 comm="syz.5.11000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1628.095536][ T30] audit: type=1400 audit(1743236400.821:3902): avc: denied { audit_write } for pid=1551 comm="syz.0.10998" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1628.138253][ T30] audit: type=1107 audit(1743236400.821:3903): pid=1551 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1628.849593][ T1574] loop5: detected capacity change from 0 to 512 [ 1629.004048][ T1574] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1629.035984][ T1574] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.11005: bg 0: block 248: padding at end of block bitmap is not set [ 1629.058071][ T1574] Quota error (device loop5): write_blk: dquota write failed [ 1629.065860][ T1574] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1629.075798][ T1574] EXT4-fs error (device loop5): ext4_acquire_dquot:6188: comm syz.5.11005: Failed to acquire dquot type 1 [ 1629.095091][ T1574] EXT4-fs (loop5): 1 truncate cleaned up [ 1629.102213][ T1574] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1629.641793][ T488] usb 7-1: USB disconnect, device number 3 [ 1631.308075][ T482] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1631.316949][ T30] audit: type=1400 audit(1743236404.031:3904): avc: denied { create } for pid=1591 comm="syz.4.11013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1631.793311][ T1608] loop6: detected capacity change from 0 to 1024 [ 1631.878242][ T1612] loop4: detected capacity change from 0 to 512 [ 1631.886925][ T1608] EXT4-fs (loop6): Ignoring removed orlov option [ 1631.916225][ T482] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1631.925616][ T482] usb 2-1: config 1 has no interface number 0 [ 1631.931769][ T1608] EXT4-fs (loop6): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 1631.946361][ T1600] loop5: detected capacity change from 0 to 40427 [ 1631.953487][ T482] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1631.968837][ T482] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1631.978177][ T482] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1631.986902][ T1600] F2FS-fs (loop5): Mismatch start address, segment0(0) cp_blkaddr(512) [ 1631.997439][ T482] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 1632.006151][ T1600] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1632.027034][ T1600] F2FS-fs (loop5): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 1632.036587][ T1612] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1632.052721][ T1612] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1632.075976][ T1600] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1632.110451][ T1612] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #19: comm syz.4.11019: corrupted inode contents [ 1632.125288][ T1612] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #19: comm syz.4.11019: mark_inode_dirty error [ 1632.142153][ T1600] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 1632.306242][ T1612] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #19: comm syz.4.11019: corrupted inode contents [ 1632.320354][ T1600] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1632.467938][ T1612] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2961: inode #19: comm syz.4.11019: mark_inode_dirty error [ 1632.659801][ T1612] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2964: inode #19: comm syz.4.11019: mark inode dirty (error -117) [ 1633.027764][ T1612] EXT4-fs warning (device loop4): ext4_evict_inode:303: xattr delete (err -117) [ 1633.326334][ T482] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1633.354164][ T482] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.508267][ T482] usb 2-1: Product: syz [ 1633.818424][ T482] usb 2-1: can't set config #1, error -71 [ 1633.831732][ T482] usb 2-1: USB disconnect, device number 15 [ 1634.239252][ T482] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1634.301568][ T1664] loop5: detected capacity change from 0 to 512 [ 1634.353194][ T1664] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1634.361994][ T1664] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.11035: bg 0: block 248: padding at end of block bitmap is not set [ 1634.377905][ T1664] Quota error (device loop5): write_blk: dquota write failed [ 1634.385238][ T1664] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1634.395055][ T1664] EXT4-fs error (device loop5): ext4_acquire_dquot:6188: comm syz.5.11035: Failed to acquire dquot type 1 [ 1634.406390][ T1320] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1634.415709][ T1664] EXT4-fs (loop5): 1 truncate cleaned up [ 1634.422157][ T1664] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1634.656167][ T1320] usb 1-1: Using ep0 maxpacket: 32 [ 1634.882877][ T1320] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1634.946715][ T1669] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1635.865819][ T1674] device pim6reg1 entered promiscuous mode [ 1635.941096][ T1320] usb 1-1: config 0 has no interface number 0 [ 1635.947358][ T1320] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1635.968645][ T1320] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1635.997490][ T1679] overlayfs: failed to resolve './file2': -2 [ 1636.126251][ T1320] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1636.135253][ T1320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.155748][ T1320] usb 1-1: Product: syz [ 1636.160926][ T1320] usb 1-1: Manufacturer: syz [ 1636.165941][ T1320] usb 1-1: SerialNumber: syz [ 1636.181520][ T1320] usb 1-1: config 0 descriptor?? [ 1636.271363][ T482] usb 2-1: Using ep0 maxpacket: 16 [ 1636.406200][ T482] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.416225][ T482] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 4 [ 1636.477464][ T1320] usb 1-1: USB disconnect, device number 23 [ 1636.616236][ T482] usb 2-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=41.72 [ 1636.625135][ T482] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.633302][ T482] usb 2-1: Product: syz [ 1636.637270][ T482] usb 2-1: Manufacturer: syz [ 1636.641699][ T482] usb 2-1: SerialNumber: syz [ 1636.715933][ T488] usb 2-1: USB disconnect, device number 16 [ 1636.791310][ T30] audit: type=1400 audit(1743236409.501:3905): avc: denied { connect } for pid=1685 comm="syz.1.11042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1636.818586][ T1693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1693 comm=syz.1.11045 [ 1636.950797][ T1699] loop6: detected capacity change from 0 to 128 [ 1637.030429][ T1699] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1637.081446][ T1699] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1637.093943][ T1699] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1637.125801][ T1320] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1638.405857][ T1723] loop6: detected capacity change from 0 to 128 [ 1638.415685][ T1717] device pim6reg1 entered promiscuous mode [ 1638.453910][ T1733] loop4: detected capacity change from 0 to 2048 [ 1638.479296][ T1723] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1638.489887][ T1723] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1638.557670][ T1733] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,journal_dev=0x000000000000009b,nobarrier,,errors=continue. Quota mode: none. [ 1639.301040][ T1733] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1639.315837][ T1733] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 28 [ 1639.328030][ T1733] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1639.328030][ T1733] [ 1639.337713][ T1733] EXT4-fs (loop4): Total free blocks count 0 [ 1639.343573][ T1733] EXT4-fs (loop4): Free/Dirty block details [ 1639.349360][ T1733] EXT4-fs (loop4): free_blocks=2415919104 [ 1639.438497][ T30] audit: type=1400 audit(1743236412.171:3906): avc: denied { mounton } for pid=1735 comm="syz.5.11060" path="/505/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1639.438686][ T488] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1639.445246][ T1733] EXT4-fs (loop4): dirty_blocks=16 [ 1639.775881][ T1733] EXT4-fs (loop4): Block reservation details [ 1639.782221][ T1733] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 1639.795548][T15655] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1639.808192][T15655] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1639.808192][T15655] [ 1639.875919][ T1320] usb 1-1: device not accepting address 24, error -71 [ 1639.892214][ T1749] loop5: detected capacity change from 0 to 128 [ 1639.928411][ T1749] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1639.953737][ T1749] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1639.966902][ T1749] ext4 filesystem being mounted at /506/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1640.166254][ T488] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1640.176017][ T488] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1640.186240][ T488] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1640.604856][ T1767] ================================================================== [ 1640.605204][ T1756] loop6: detected capacity change from 0 to 40427 [ 1640.612752][ T1767] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0xb9d/0x3430 [ 1640.612781][ T1767] Read of size 8 at addr ffff88813366dac0 by task syz.4.11068/1767 [ 1640.612797][ T1767] [ 1640.612803][ T1767] CPU: 1 PID: 1767 Comm: syz.4.11068 Tainted: G W 5.15.178-syzkaller-00034-g5e1b899f19c3 #0 [ 1640.612823][ T1767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1640.612835][ T1767] Call Trace: [ 1640.612841][ T1767] [ 1640.612849][ T1767] dump_stack_lvl+0x151/0x1c0 [ 1640.668377][ T1767] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1640.673853][ T1767] ? panic+0x760/0x760 [ 1640.677751][ T1767] print_address_description+0x87/0x3b0 [ 1640.683131][ T1767] kasan_report+0x179/0x1c0 [ 1640.687473][ T1767] ? tc_setup_flow_action+0xb9d/0x3430 [ 1640.692763][ T1767] ? tc_setup_flow_action+0xb9d/0x3430 [ 1640.698059][ T1767] __asan_report_load8_noabort+0x14/0x20 [ 1640.703530][ T1767] tc_setup_flow_action+0xb9d/0x3430 [ 1640.708660][ T1767] mall_replace_hw_filter+0x394/0xc20 [ 1640.713860][ T1767] ? mall_set_parms+0x4b0/0x4b0 [ 1640.718547][ T1767] ? tcf_exts_destroy+0xb0/0xb0 [ 1640.723227][ T1767] ? pcpu_memcg_post_alloc_hook+0x1b1/0x260 [ 1640.728962][ T1767] ? pcpu_alloc+0xda0/0x13e0 [ 1640.733387][ T1767] ? mall_set_parms+0x1c3/0x4b0 [ 1640.738093][ T1767] mall_change+0x56e/0x780 [ 1640.742327][ T1767] ? mall_get+0xb0/0xb0 [ 1640.746318][ T1767] ? tcf_chain_tp_insert_unique+0xa90/0xbb0 [ 1640.752046][ T1767] ? nla_strcmp+0xed/0x120 [ 1640.756296][ T1767] ? mall_get+0xb0/0xb0 [ 1640.760288][ T1767] tc_new_tfilter+0x151a/0x1c00 [ 1640.764979][ T1767] ? tcf_gate_entry_destructor+0x20/0x20 [ 1640.770448][ T1767] ? security_capable+0x87/0xb0 [ 1640.775130][ T1767] ? ns_capable+0x89/0xe0 [ 1640.779297][ T1767] ? netlink_net_capable+0x125/0x160 [ 1640.784414][ T1767] ? tcf_gate_entry_destructor+0x20/0x20 [ 1640.789882][ T1767] rtnetlink_rcv_msg+0x776/0xc40 [ 1640.794658][ T1767] ? compat_start_thread+0x20/0x20 [ 1640.799604][ T1767] ? rtnetlink_bind+0x80/0x80 [ 1640.804118][ T1767] ? native_set_ldt+0x360/0x360 [ 1640.808806][ T1767] ? __this_cpu_preempt_check+0x13/0x20 [ 1640.814184][ T1767] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 1640.820694][ T1767] ? avc_has_perm_noaudit+0x348/0x430 [ 1640.825903][ T1767] ? memcpy+0x56/0x70 [ 1640.829720][ T1767] ? avc_has_perm_noaudit+0x2dd/0x430 [ 1640.834928][ T1767] ? avc_denied+0x1b0/0x1b0 [ 1640.839270][ T1767] ? __stack_depot_save+0x167/0x470 [ 1640.844306][ T1767] ? avc_has_perm+0x16f/0x260 [ 1640.848816][ T1767] ? avc_has_perm_noaudit+0x430/0x430 [ 1640.854020][ T1767] ? x64_sys_call+0x16a/0x9a0 [ 1640.858537][ T1767] netlink_rcv_skb+0x1cf/0x410 [ 1640.863135][ T1767] ? rtnetlink_bind+0x80/0x80 [ 1640.867650][ T1767] ? netlink_ack+0xb10/0xb10 [ 1640.872079][ T1767] ? __netlink_lookup+0x37b/0x3a0 [ 1640.876936][ T1767] rtnetlink_rcv+0x1c/0x20 [ 1640.881188][ T1767] netlink_unicast+0x8df/0xac0 [ 1640.885790][ T1767] ? netlink_detachskb+0x90/0x90 [ 1640.890563][ T1767] ? security_netlink_send+0x7b/0xa0 [ 1640.895725][ T1767] netlink_sendmsg+0xa0a/0xd20 [ 1640.900285][ T1767] ? netlink_getsockopt+0x560/0x560 [ 1640.905318][ T1767] ? security_socket_sendmsg+0x82/0xb0 [ 1640.910612][ T1767] ? netlink_getsockopt+0x560/0x560 [ 1640.915650][ T1767] ____sys_sendmsg+0x59e/0x8f0 [ 1640.920250][ T1767] ? __sys_sendmsg_sock+0x40/0x40 [ 1640.925107][ T1767] ? import_iovec+0xe5/0x120 [ 1640.929536][ T1767] ___sys_sendmsg+0x252/0x2e0 [ 1640.934048][ T1767] ? __sys_sendmsg+0x260/0x260 [ 1640.938649][ T1767] ? check_stack_object+0xf4/0x130 [ 1640.943603][ T1767] ? __fdget+0x1bc/0x240 [ 1640.947674][ T1767] __se_sys_sendmsg+0x19a/0x260 [ 1640.952370][ T1767] ? __x64_sys_sendmsg+0x90/0x90 [ 1640.957132][ T1767] ? __kasan_check_write+0x14/0x20 [ 1640.962076][ T1767] ? switch_fpu_return+0x15f/0x2e0 [ 1640.967024][ T1767] __x64_sys_sendmsg+0x7b/0x90 [ 1640.971626][ T1767] x64_sys_call+0x16a/0x9a0 [ 1640.975962][ T1767] do_syscall_64+0x3b/0xb0 [ 1640.980220][ T1767] ? clear_bhb_loop+0x35/0x90 [ 1640.984729][ T1767] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1640.990463][ T1767] RIP: 0033:0x7f800829b169 [ 1640.994839][ T1767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1641.014273][ T1767] RSP: 002b:00007f8006905038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1641.022524][ T1767] RAX: ffffffffffffffda RBX: 00007f80084b3fa0 RCX: 00007f800829b169 [ 1641.030330][ T1767] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 1641.038138][ T1767] RBP: 00007f800831c2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1641.045950][ T1767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1641.053762][ T1767] R13: 0000000000000000 R14: 00007f80084b3fa0 R15: 00007ffe968114c8 [ 1641.061581][ T1767] [ 1641.064434][ T1767] [ 1641.066605][ T1767] Allocated by task 1767: [ 1641.070771][ T1767] ____kasan_kmalloc+0xdb/0x110 [ 1641.075459][ T1767] __kasan_kmalloc+0x9/0x10 [ 1641.079796][ T1767] __kmalloc+0x13f/0x2c0 [ 1641.083875][ T1767] tcf_idr_create+0x5f/0x780 [ 1641.088304][ T1767] tcf_idr_create_from_flags+0x5f/0x70 [ 1641.093597][ T1767] tcf_gact_init+0x3cd/0x6e0 [ 1641.098023][ T1767] tcf_action_init_1+0x50f/0x7f0 [ 1641.102796][ T1767] tcf_action_init+0x306/0x840 [ 1641.107396][ T1767] tcf_exts_validate+0x236/0x520 [ 1641.112169][ T1767] mall_set_parms+0x44/0x4b0 [ 1641.116599][ T1767] mall_change+0x495/0x780 [ 1641.120850][ T1767] tc_new_tfilter+0x151a/0x1c00 [ 1641.125538][ T1767] rtnetlink_rcv_msg+0x776/0xc40 [ 1641.130309][ T1767] netlink_rcv_skb+0x1cf/0x410 [ 1641.134911][ T1767] rtnetlink_rcv+0x1c/0x20 [ 1641.139168][ T1767] netlink_unicast+0x8df/0xac0 [ 1641.143762][ T1767] netlink_sendmsg+0xa0a/0xd20 [ 1641.148379][ T1767] ____sys_sendmsg+0x59e/0x8f0 [ 1641.152962][ T1767] ___sys_sendmsg+0x252/0x2e0 [ 1641.157476][ T1767] __se_sys_sendmsg+0x19a/0x260 [ 1641.162162][ T1767] __x64_sys_sendmsg+0x7b/0x90 [ 1641.166764][ T1767] x64_sys_call+0x16a/0x9a0 [ 1641.171102][ T1767] do_syscall_64+0x3b/0xb0 [ 1641.175358][ T1767] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1641.181083][ T1767] [ 1641.183256][ T1767] Last potentially related work creation: [ 1641.188811][ T1767] kasan_save_stack+0x3b/0x60 [ 1641.193323][ T1767] __kasan_record_aux_stack+0xd3/0xf0 [ 1641.198534][ T1767] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1641.204171][ T1767] call_rcu+0x123/0x10b0 [ 1641.208258][ T1767] neigh_parms_release+0x1e1/0x220 [ 1641.213195][ T1767] addrconf_ifdown+0x1844/0x1ae0 [ 1641.217969][ T1767] addrconf_notify+0x37d/0xdd0 [ 1641.222570][ T1767] raw_notifier_call_chain+0x8c/0xf0 [ 1641.227692][ T1767] unregister_netdevice_many+0xe0a/0x17c0 [ 1641.233244][ T1767] unregister_netdevice_queue+0x2e6/0x350 [ 1641.238800][ T1767] __tun_detach+0xd14/0x1510 [ 1641.243227][ T1767] tun_chr_close+0x92/0x140 [ 1641.247573][ T1767] __fput+0x228/0x8c0 [ 1641.251385][ T1767] ____fput+0x15/0x20 [ 1641.255217][ T1767] task_work_run+0x129/0x190 [ 1641.259630][ T1767] exit_to_user_mode_loop+0xc4/0xe0 [ 1641.264666][ T1767] exit_to_user_mode_prepare+0x5a/0xa0 [ 1641.269957][ T1767] syscall_exit_to_user_mode+0x26/0x160 [ 1641.275357][ T1767] do_syscall_64+0x47/0xb0 [ 1641.279597][ T1767] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1641.285327][ T1767] [ 1641.287490][ T1767] Second to last potentially related work creation: [ 1641.293915][ T1767] kasan_save_stack+0x3b/0x60 [ 1641.298447][ T1767] __kasan_record_aux_stack+0xd3/0xf0 [ 1641.303633][ T1767] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1641.309284][ T1767] kvfree_call_rcu+0xb1/0x8b0 [ 1641.313789][ T1767] drop_sysctl_table+0x311/0x450 [ 1641.318562][ T1767] unregister_sysctl_table+0x7b/0x120 [ 1641.323767][ T1767] unregister_net_sysctl_table+0x15/0x20 [ 1641.329238][ T1767] nf_ct_net_exit+0xec/0x140 [ 1641.334127][ T1767] cleanup_net+0x64b/0xc00 [ 1641.338375][ T1767] process_one_work+0x6bb/0xc10 [ 1641.343070][ T1767] worker_thread+0xad5/0x12a0 [ 1641.347576][ T1767] kthread+0x421/0x510 [ 1641.351482][ T1767] ret_from_fork+0x1f/0x30 [ 1641.355735][ T1767] [ 1641.357901][ T1767] The buggy address belongs to the object at ffff88813366da00 [ 1641.357901][ T1767] which belongs to the cache kmalloc-192 of size 192 [ 1641.371789][ T1767] The buggy address is located 0 bytes to the right of [ 1641.371789][ T1767] 192-byte region [ffff88813366da00, ffff88813366dac0) [ 1641.385243][ T1767] The buggy address belongs to the page: [ 1641.390725][ T1767] page:ffffea0004cd9b40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13366d [ 1641.400780][ T1767] flags: 0x4000000000000200(slab|zone=1) [ 1641.406263][ T1767] raw: 4000000000000200 ffffea00043d3d40 0000000500000002 ffff888100042c00 [ 1641.414670][ T1767] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 1641.423086][ T1767] page dumped because: kasan: bad access detected [ 1641.429348][ T1767] page_owner tracks the page as allocated [ 1641.434888][ T1767] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 39, ts 375646881308, free_ts 375339762846 [ 1641.452163][ T1767] post_alloc_hook+0x1a3/0x1b0 [ 1641.456758][ T1767] prep_new_page+0x1b/0x110 [ 1641.461097][ T1767] get_page_from_freelist+0x3550/0x35d0 [ 1641.466480][ T1767] __alloc_pages+0x27e/0x8f0 [ 1641.470906][ T1767] new_slab+0x9a/0x4e0 [ 1641.474811][ T1767] ___slab_alloc+0x39e/0x830 [ 1641.479239][ T1767] __slab_alloc+0x4a/0x90 [ 1641.483402][ T1767] kmem_cache_alloc_trace+0x147/0x270 [ 1641.488612][ T1767] br_multicast_new_group+0x11c/0x360 [ 1641.493818][ T1767] __br_multicast_add_group+0x28d/0x950 [ 1641.499203][ T1767] br_multicast_rcv+0x3ddb/0x7880 [ 1641.504058][ T1767] br_dev_xmit+0x6aa/0x1030 [ 1641.508410][ T1767] dev_hard_start_xmit+0x228/0x620 [ 1641.513351][ T1767] sch_direct_xmit+0x298/0x9b0 [ 1641.517952][ T1767] __dev_queue_xmit+0x170d/0x2e80 [ 1641.522806][ T1767] dev_queue_xmit+0x17/0x20 [ 1641.527147][ T1767] page last free stack trace: [ 1641.531659][ T1767] free_unref_page_prepare+0x7c8/0x7d0 [ 1641.536956][ T1767] free_unref_page_list+0x14b/0xa60 [ 1641.541989][ T1767] release_pages+0x1310/0x1370 [ 1641.546588][ T1767] free_pages_and_swap_cache+0x8a/0xa0 [ 1641.551881][ T1767] tlb_finish_mmu+0x177/0x320 [ 1641.556399][ T1767] exit_mmap+0x484/0x990 [ 1641.560483][ T1767] __mmput+0x95/0x310 [ 1641.564294][ T1767] mmput+0x5b/0x170 [ 1641.567938][ T1767] do_exit+0xb9c/0x2ca0 [ 1641.571931][ T1767] do_group_exit+0x141/0x310 [ 1641.576358][ T1767] get_signal+0x7a3/0x1630 [ 1641.580612][ T1767] arch_do_signal_or_restart+0xbd/0x1680 [ 1641.586079][ T1767] exit_to_user_mode_loop+0xa0/0xe0 [ 1641.591114][ T1767] exit_to_user_mode_prepare+0x5a/0xa0 [ 1641.596405][ T1767] syscall_exit_to_user_mode+0x26/0x160 [ 1641.601894][ T1767] do_syscall_64+0x47/0xb0 [ 1641.606148][ T1767] [ 1641.608328][ T1767] Memory state around the buggy address: [ 1641.613790][ T1767] ffff88813366d980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1641.621685][ T1767] ffff88813366da00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1641.629584][ T1767] >ffff88813366da80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 1641.637485][ T1767] ^ [ 1641.643594][ T1767] ffff88813366db00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1641.651482][ T1767] ffff88813366db80: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1641.659377][ T1767] ================================================================== [ 1641.667275][ T1767] Disabling lock debugging due to kernel taint [ 1641.704986][ T488] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1641.716489][ T488] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.724300][ T488] usb 2-1: Product: syz [ 1641.728336][ T488] usb 2-1: Manufacturer: syz [ 1641.732712][ T488] usb 2-1: SerialNumber: syz [ 1641.747709][ T1756] F2FS-fs (loop6): Mismatch start address, segment0(0) cp_blkaddr(512) [ 1641.756088][ T1756] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 1641.756256][ T488] usb 2-1: can't set config #1, error -71 [ 1641.775354][ T488] usb 2-1: USB disconnect, device number 17 [ 1641.777641][ T1756] F2FS-fs (loop6): invalid crc value [ 1641.788585][ T1756] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1641.841481][ T1756] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 1641.848555][ T1756] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5