last executing test programs: 7.042550328s ago: executing program 0 (id=119): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x189440, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x800}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x8, 0x0, 0x45, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x10, 0x1, 0x7, 0x5}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002340)={0x10, 0x12, 0x1}, 0x10}], 0x1}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}, 0x300}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000002b000095e90000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r8, r4, 0x25, 0x0, @void}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vxcan1\x00', 0x0}) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r11, &(0x7f0000000180)={0x1d, r12}, 0x10) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r13, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r14, 0x1, 0x0, 0x6, @multicast}, 0x14) r15 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x6, 0x0, 0x68, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x20, 0x0, 0x6}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001580)={&(0x7f0000000940)={0xc18, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0x26c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9e36}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0xf, 0x9, 0xfffff16b}, {0x5, 0x9, 0x5, 0x8}, {0x4, 0x8, 0x67, 0x6}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x9, 0x4, 0x8, 0x8000000}, {0x4409, 0x1, 0x81, 0x21c4}, {0x1800, 0x4, 0xd, 0x1}, {0x7627, 0x1, 0x3}, {0x7fff, 0x1, 0xc5, 0x3}, {0x6, 0xd, 0x1, 0x6}, {0x3, 0x9, 0x9, 0x4}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x284, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x5, 0xab, 0x6}, {0x100, 0x7, 0xd8, 0x7ff}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2ac}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r9}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r14}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r17}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbd47}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r18}}}]}}]}, 0xc18}, 0x1, 0x0, 0x0, 0x10}, 0x24002044) r19 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r19, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) 5.479839279s ago: executing program 0 (id=125): r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000000c0)={0x2, 0x0, 0x7}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20}) unshare(0x22020600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000c00)=@file={0x1, './file2\x00'}, 0x6e) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}, 0x3}) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000d8a000/0x3000)=nil, 0x3000}) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_format(r6, &(0x7f0000004b00)='-1\x00', 0x3) setsockopt$inet6_int(r6, 0x29, 0x3c, &(0x7f00000003c0)=0x4, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0xf) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000080)="3891f887675175d30f4dff2dd5f47366d2", 0x11}, {&(0x7f00000000c0)="eca3a9b113417b112cd1c2b37467368d30fc6b950612d10f162a092cb97d5e5e565d3e638db22f1dc78c7fe735a08e0e6a43cbd3e882ffaf48653ad4dc6f3f994ba637feb8aac9885e23b7458a34dd0173694da796b937840aaa0158ff19b1ee1199b4697bde83031f4bf3c03c0cf959f1c18e88ccb244604f291f9ba1ebba4b447acb3fad5a667b0d48cfd149aa4a2ffbd25ba66bf9d1c650d4189d5c611ae188c4c6ce7f9878eb7fd41c6738991c1545244845a0490d9b4bdd93de6adff4ed1072d1cadeeee6e02ab538045e629eaa8d010ae2ec8dce5e6bc7fa5af1eb605ac0e5", 0xe2}, {&(0x7f00000001c0)="b0d92d18020a9e30816852113cbf86997abeedda0db1af9fea703606043eee416b602c931f9b9125e0f735b3fafa26c9a9296a936b4dd148342a227043a14f62fe438bfc95999e49b1081b8f9dbe6edd828102a3f97e387b24ee604ef7ea22631c3765b65a996923c099bfd5c99ec5631238a9c85fcce46a409ac50351b24088659a91dd26acf99b4363dec2b8c851152676a4e23388162c50a44ffbc5f4893f4b79fd8fc5b6150a", 0xa8}, {&(0x7f0000000280)='<', 0x1}, {&(0x7f00000003c0)="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", 0x665}], 0x5) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x10, 0x3, 0x8001, 0x9, 0x0, 0x7, 0xfffff001}}, {0x0, 0x2, [0x400, 0xff52, 0x2, 0x7, 0x0, 0x3]}}, {{0x0, 0x1, {0x6, 0x2, 0x9, 0x5, 0x0, 0x5440, 0x7}}, {0x0, 0x2, [0x9, 0x508e, 0x4, 0xa43, 0x3, 0xbd]}}, {{0x0, 0x1, {0x36, 0x5, 0x7, 0x4, 0x1, 0xf0, 0x4}}, {0x0, 0x2, [0x6, 0xcd, 0xf, 0x2, 0x3, 0x20aa, 0x7]}}, {{0x0, 0x1, {0xff, 0x8, 0x7, 0x1, 0x3, 0x1ff, 0x67}}, {0x0, 0x2, [0x6, 0x6, 0x9, 0xfa5, 0x8000, 0x3, 0x6ce, 0x84, 0xca7e]}}, {{0x0, 0x1, {0x1, 0x0, 0x0, 0x66a, 0x0, 0x1, 0x3}}, {0x0, 0x2, [0xffff, 0x8, 0x5, 0x3ff]}}, {{0x0, 0x1, {0x0, 0xfb, 0x38, 0x3299, 0x1, 0x9, 0x5b0}}, {0x0, 0x2, [0x6, 0x1]}}, {{0x0, 0x1, {0xc, 0x1, 0x8001, 0xffff, 0x2, 0x0, 0x97}}, {0x0, 0x2, [0x8]}}]}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 5.12689141s ago: executing program 0 (id=128): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x100, 0x5, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x0, 0xc}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008012}, 0x400c0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9800000010000104fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="0025000000000000780012800b000100697036746e6c00006800028006000f00030000"], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 5.061296714s ago: executing program 0 (id=130): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x28040c1, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x80}}, {@grpquota}]}, 0xfb, 0x7a0, &(0x7f0000000280)="$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") r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000000)={0x40, 0x10, 0xc, "0c7b0c4b55afeef4ef851966"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000c40)={0x2c, &(0x7f0000000a40)={0x20, 0x22, 0x6f, {0x6f, 0xb, "0e469739f9b1d66f1f103b2cd06142392699f3f97bf653129f6305211b3e747c1fbe8df62f5c8161b6500088a342de3215d11633fca83f6ab9326bfda7397f0d4298aa8582b5a3bc7091262faed485f13834894a6427fd0cae419f7b89cb72a3ed2f31564ca66264adae6b65b7"}}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0003eb18483f980ae9685ea323451e543d8f2e8d6124000000000000"], &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000bc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x3, 0x7, 0x3, "1a041c7f", "75975b9b"}}, &(0x7f0000000c00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x80, 0x38, 0x7f, 0x3, 0x3, 0x2}}}, &(0x7f00000010c0)={0x84, &(0x7f0000000c80)={0x20, 0x10, 0x70, "4a28bdb2d4dabbe2c42a486ad14ef8757b4a5dabbbf4438b73117ad27306758470c040b87f6884ee44b64be3539ce10c1a0375a940b01eb7feda05a3fca8da23db0e30d2850bb89306a5a76217e3313408f2e4efa1a357c83e400af3e57a8b6352b1b1ed83388072d21370e32e8983da"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000d80)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000dc0)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf00f]}}, &(0x7f0000000e00)={0x40, 0x7, 0x2, 0xf6}, &(0x7f0000000e40)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000e80)={0x40, 0xb, 0x2, "a5a6"}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000f00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000f40)={0x40, 0x17, 0x6, @random="91be02a77f16"}, &(0x7f0000000f80)={0x40, 0x19, 0x2, "49a8"}, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0xc0}, &(0x7f0000001040)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001080)={0x40, 0x21, 0x1, 0x4}}) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0x200) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) getpid() 5.060529404s ago: executing program 2 (id=131): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x2710}, {r0, r1/1000+60000}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x20002, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xec'}}]}}, 0x0, 0x0, &(0x7f0000000380)="29c74443268f5f4c53d33385af38865a2526fdfa130d70ba6aaf222795f4f8daed79e5ca08dfd2e5d941ed69747b2d8558cc97f08014") r5 = openat2(r4, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x248901, 0x1be, 0x8}, 0x18) recvmmsg$unix(r5, &(0x7f0000000880)=[{{&(0x7f0000000440), 0x6e, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/28, 0x1c}], 0x1, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000005c0), 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000000740)=""/100, 0x64}], 0x2, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}], 0x2, 0x62, &(0x7f0000000900)) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f0000000940)) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r13, 0x89f3, &(0x7f0000000a80)={'tunl0\x00', &(0x7f0000000a00)={'erspan0\x00', 0x0, 0x7, 0x20, 0xfffffff7, 0x3, {{0x9, 0x4, 0x2, 0x6, 0x24, 0x67, 0x0, 0x9a, 0x29, 0x0, @empty, @remote, {[@generic={0x7, 0x10, "4fe00b89bc22ed7256a6b900293f"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x7c, r14, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x22a83bccf5a4515d}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd) creat(&(0x7f0000000bc0)='./file0\x00', 0x105) ioctl$XFS_IOC_START_COMMIT(r10, 0x80585882, &(0x7f0000000c00)={0xffffffffffffffff}) getdents(r16, &(0x7f0000000c80)=""/55, 0x37) r17 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000d00)={0x3, &(0x7f0000000cc0)=[{0xed, 0x4, 0x1, 0x5}, {0x0, 0xa, 0x6, 0xfff}, {0x9, 0x3, 0x89, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r17, 0xc0502100, &(0x7f0000000d40)) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000810}, 0x40) setsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000ec0)={r15, @multicast1, @rand_addr=0x7}, 0xc) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000f00)={0x81, 0x0, 0x1}) ioctl$KVM_SET_LAPIC(r12, 0x4400ae8f, &(0x7f0000000f80)={"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"}) prlimit64(r6, 0xb, &(0x7f0000001380)={0x93, 0x7f}, &(0x7f00000013c0)) getrlimit(0x6, &(0x7f0000001400)) write$P9_RREADLINK(r11, &(0x7f0000001440)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) fsconfig$FSCONFIG_SET_STRING(r16, 0x1, &(0x7f0000001480)='nl802154\x00', &(0x7f00000014c0)='!-)\x00', 0x0) request_key(&(0x7f0000001500)='cifs.spnego\x00', &(0x7f0000001540)={'syz', 0x1}, &(0x7f0000001580)='\x00', 0xfffffffffffffff9) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f00000015c0)=""/250) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000001700)=[{{0x1}}, {{0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}], 0x20) 4.801811949s ago: executing program 2 (id=134): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4f17d77487ced52f, 0x0, @private=0xa010101, @dev, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc989}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@multicast1}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}}}}}}}, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x800000, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$eJzs3ctrW1caAPBPUvyMZ/KYYUgyiwQykHkQyw+G2DOzmdXMLAJDA920kLq24rqWLWPJaWwCddpdFl2UlhZKF10W+g+0m2bVUChdt/uSRUlpUxfaQkFFV5IjP+SKxo7A9/eDG517zo2+cyy+46uja90AUutc7Z9MxFBEfBoRx+q7Ww84V3/YeHBzurZlolq98nUmOa623zy0+f+ORsR6RPRHxBP/iXg2szNueXVtfqpYLCw39vOVhaV8eXXt4tzC1GxhtrA4OnFpcnJiZHxsct/GevuV529f/uB/ve99//L9u69+9GGtW0ONttZx7Kf60HviREvdkYj410EE64JcYzwD3e4Iv0rt9ftdRJxP8v9Y5JJXE0iDarVa/ana1655vQocWtnkHDiTHY6IejmbHR6un8P/PgazxVK58rdrpZXFmfq58vHoyV6bKxZGGu8VjkdPprY/mpQf7o9t2x+PSM6BX8sNJPvD06XizOOd6oBtjm7L/+9y9fwHUsJbfkgv+Q/pJf8hveQ/pJf8h/SS/5Be8h/SS/5Desl/SC/5D+kl/yGV/n/5cm2rNv/+feb66sp86frFmUJ5fnhhZXp4urQcw7Olvvc7e75iqbQ0+vdYuZGvFMqVfHl17epCaWWxcnVuYWq2Nwo9BzweoHMnzt75PBMR6/8YSLaa3kabXIXDrfpi/TsAgPTJdXsCArrG0h+kl/f4wC5f0btFf7uGpUeK+kthgQOU7XYHgK65cNrnf5BW1v8hvaz/Q3ptPcd3NgBp1J31f6CbrP9Deg213P8n03L/r9+03LtrJCJ+GxGf5Xr6mvf6Ag6D7JeZRu5fOPanoe2tvZkfkkWB3oh44a0rb9yYqlSWR2v132zWV96s1/d2o/tAx5L8HWs8+kUOAKm28eDmdHPbrDx+8HG/+nf9IoSd8Y801ib7k88oBzcyW65VyOzTtQvrtyLi1G7xM437ndc/+RjcyO2If7LxmKk/RdLfI8l90x8l/r13O41/uiX+mZb4Zx75pwLpcKc2/4zslv/ZJKdjM/+2zj9D+3R9dPv5L7s5/+XazH9nO4zx3Nsv3Wsb/1bEmV3jN+P1J7G2x6/17UKH8e8//eQf2rVV36k/z27xm2qlfGVhKV9eXbs4tzA1W5gtLI5OXJqcnBgZH5vMJ2vU+eZK9U7/PPXJ3b3GP9gm/l7jr9X9pcPx//jHj586t0f8P5/f/fU/uUf8gYj4a4fxvx374pl2bbX4M23Gn90ev2WBr1Y33mH88uv/7evwUADgMSivrs1PFYuFZQUFBYXNQrdnJuCgPUz6bvcEAAAAAAAAAAAA6NTjuJy422MEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgMfg4AAP//Zn/SgA==") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getresuid(0x0, &(0x7f0000000480), 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff034}]}, 0x10) r2 = userfaultfd(0x80801) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) close_range(r2, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) 3.032236332s ago: executing program 2 (id=138): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0100001000130700000000f9dbdf252001000000000000000000000000000120010000000000000000000000000001000000004e210002020000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe0000000000000000000000000000ffffac1414bb000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000050000000000000043050000000000000700000000000000f7ffffffffffff7f000000000000000000000000000000000000000000000000000000022dbd7000003500000a00000050000000000000004c001200726663343130362867636d28616573292900000000000000e40f0000000000000d000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.877118802s ago: executing program 3 (id=145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 2.637775326s ago: executing program 2 (id=149): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4f17d77487ced52f, 0x0, @private=0xa010101, @dev, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc989}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@multicast1}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}}}}}}}, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x800000, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getresuid(0x0, &(0x7f0000000480), 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff024}]}, 0x10) r2 = userfaultfd(0x80801) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) close_range(r2, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) 1.241677227s ago: executing program 2 (id=151): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2800810, &(0x7f0000002780)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES16=0x0], 0x3, 0x171, &(0x7f0000000600)="$eJzs2zGLE0EUB/C3l0RPba4WiwUbq6BWloqcIC4oyhZaKZw2d3LgNatV8JPY+uEEueoKYeQcTTRsMBDXDcnv1+SFPxPehJ0dZmFfXnt7eHB88ub4yWnsFkUM70YZZ0XsxU4MIpsEALBJzlKKr2n062tKqd9+AIDu5f0/pXRxEpc+2f8BYBv8df+/01NjAEBnnP8BYPs8e/7i0b2q2n9alrsRXyZN3dT5M+cPHlb7N8sf9majTpumHkzzWzkv/8xHcflnfrs1vxA3ruf8PLv/uJrLr8RB99MHAACArTAup1rP9+PxojxXvz0fmJ3fz4fWw7g6/H/zAACWd/L+w+Gro6PX7za8GK1HG4rWYmel6/BbSmkuKpYY/vFzXgLr8if806KIiNV+p+87E9C12aLvuxMAAAAAAAAAAAAAAGCRbt9GGvQ9PQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGj1PQAA//9kAUaX") utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x2000410, &(0x7f0000001f80)=ANY=[], 0x1, 0x557c, &(0x7f000000b500)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4a07e, 0xdc) fallocate(r0, 0x0, 0x0, 0x8804000) 1.068766468s ago: executing program 0 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setxattr$incfs_id(&(0x7f0000000240)='./file0\x00', &(0x7f0000000740), 0x0, 0x0, 0x2) setxattr$incfs_metadata(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', 0x0) 1.02303946s ago: executing program 0 (id=156): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x51, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_012={0x1, 0x0, 0x8, 'n'}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x2, 0x2, 0x8, 0xfffffff7, 0xf, 0x5}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040100007d173226107db8c800000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000001bcc5ad9fc0f00002115b7b910501609ef0bb6205e726467db43050000000000000005ab865551a54fba1ac3b22caea53181a7af481c4b575838a91000e1641b00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6002, 0x4, 0x3d0, 0xf0, 0x2e8, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0x0, 0x0, 0x1}}}, {{@arp={@multicast1, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x0, 0x0, 0x0, 0x6171, 0x0, 0xffff, 'veth1_vlan\x00', 'nicvf0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @private, 0x0, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xffffff, 0xff, 0x6, 0x5, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0x1c3ae9812108cb68]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x8, 0x46b, 0x1bd, 0x4, 0xc703, 'team_slave_1\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x420) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r4, 0x0, 0x0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000340)={&(0x7f00000008c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x26}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0x40c0) 1.002834341s ago: executing program 3 (id=158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x1f0}}, 0x0) 1.002160411s ago: executing program 1 (id=159): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x28040c1, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x80}}, {@grpquota}]}, 0xfb, 0x7a0, &(0x7f0000000280)="$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") r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000000)={0x40, 0x10, 0xc, "0c7b0c4b55afeef4ef851966"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000c40)={0x2c, &(0x7f0000000a40)={0x20, 0x22, 0x6f, {0x6f, 0xb, "0e469739f9b1d66f1f103b2cd06142392699f3f97bf653129f6305211b3e747c1fbe8df62f5c8161b6500088a342de3215d11633fca83f6ab9326bfda7397f0d4298aa8582b5a3bc7091262faed485f13834894a6427fd0cae419f7b89cb72a3ed2f31564ca66264adae6b65b7"}}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0003eb18483f980ae9685ea323451e543d8f2e8d6124000000000000"], &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000bc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x3, 0x7, 0x3, "1a041c7f", "75975b9b"}}, &(0x7f0000000c00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x80, 0x38, 0x7f, 0x3, 0x3, 0x2}}}, &(0x7f00000010c0)={0x84, &(0x7f0000000c80)={0x20, 0x10, 0x70, "4a28bdb2d4dabbe2c42a486ad14ef8757b4a5dabbbf4438b73117ad27306758470c040b87f6884ee44b64be3539ce10c1a0375a940b01eb7feda05a3fca8da23db0e30d2850bb89306a5a76217e3313408f2e4efa1a357c83e400af3e57a8b6352b1b1ed83388072d21370e32e8983da"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000d80)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000dc0)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf00f]}}, &(0x7f0000000e00)={0x40, 0x7, 0x2, 0xf6}, &(0x7f0000000e40)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000e80)={0x40, 0xb, 0x2, "a5a6"}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000f00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000f40)={0x40, 0x17, 0x6, @random="91be02a77f16"}, &(0x7f0000000f80)={0x40, 0x19, 0x2, "49a8"}, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0xc0}, &(0x7f0000001040)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001080)={0x40, 0x21, 0x1, 0x4}}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000001180), 0x6a03, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x6) fchdir(r4) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r6, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) getdents64(r5, &(0x7f0000000000)=""/49, 0x31) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000000)=""/49, 0x31) unlinkat(r7, &(0x7f00000000c0)='./file0/file0\x00', 0x200) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) 945.135135ms ago: executing program 3 (id=160): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x448, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd62df3858041221fffe80000000000000000f000000000035fe"], 0x0) 867.66009ms ago: executing program 3 (id=161): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 722.839358ms ago: executing program 4 (id=162): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x17c}, 0x1, 0x0, 0x0, 0x40008c10}, 0x20000401) getpgid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 708.527779ms ago: executing program 4 (id=163): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0100001000130700000000f9dbdf252001000000000000000000000000000120010000000000000000000000000001000000004e210002020000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe0000000000000000000000000000ffffac1414bb000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000050000000000000043050000000000000700000000000000f7ffffffffffff7f000000000000000000000000000000000000000000000000000000022dbd7000003500000a00000050000000000000004c001200726663343130362867636d28616573292900000000000000e40f0000000000000d000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 655.694212ms ago: executing program 4 (id=164): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="fc01000019000100000000000000003300000000000000000000000000000000ac14144200000000000000000000000000000000000080000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}}, 0x4894) 655.072132ms ago: executing program 4 (id=165): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x66, &(0x7f0000000d00)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "590500", 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1, [{0x4, 0x1, "67494a131d9d"}]}}}}}}, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000000)={[{@dax}, {@nogrpid}, {@dioread_lock}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0xfffffffffffffffd}}]}, 0x1, 0x741, &(0x7f0000000f40)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc00, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES8=r3, @ANYRES8=0x0], 0xfe, 0x1524, &(0x7f00000037c0)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000c40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f00000016c0)={0x200, 0x12, 0x108, 0x70bd2d, 0x25dfdbfe, {0x23, 0x6, 0x2, 0x5, {0x4e23, 0x4e23, [0x7, 0x3, 0x9, 0x4], [0x2, 0x800, 0x4, 0x8], r7, [0x9, 0x10000]}, 0xce2, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "d005912f5449ac4887e377cee5f3774f6eb2c3e59403a340c8060e9b1f47439c66e3654c3c17a95f3158c71e1032d7c9604e2ea51ab462e01d49543f9ab4cb0d1a8b51d7cd3cda5c1cb935d053e52dde588169ed44c37bb9693a3d32a8e616789fb984e0ff325677e01277637652687e60c2d575c9cd8c3e70fbaf24e41dcbe2bb3198e38b6875b86073ef43cb5c3b2e4a98fb1c97c5ff70cde247c7c5365760d848326d183cc99d0d68a5c5e86c9fceef28dd6c37a40d2bfe734717e72881d78c7d20e088e93f9609abe523060385dcc275478076e4b1bdcf38e3aa0dbd04ec603f3c85cec2a5b6acc74406038ddabef079987ef96f5d48"}, @INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "6512a60cfe52b8554bd939ee821dd9ef435aa6e2b38e081f8271547e1809756cc9484463eb82ca844236"}, @INET_DIAG_REQ_BYTECODE={0x85, 0x1, "48eea396a9f6d15f1a852a7dd352f0748f198db1166a556426680f79ded6a74e07c85daeb5c4433740370df3ff8a7e68c06a94b83d463ca0dcd58f69498a6e01bce362266c518618fce89396b82f76bed859cc637fa87b4f2249bb3ccd08ef116ed74fdbb08c48bc624179012f012d4f4f54cf1131a5ba3b746d75d52b8a2ee8c4"}]}, 0x200}, 0x1, 0x0, 0x0, 0xc1}, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5800000012001fa52cbd7000fddbdf252a0f098c4e214e2108000000000008000058ee00000e0000000a0000000800000006000000000000", @ANYRES32=0x0, @ANYBLOB="08000000000000800500000008000000090001001fee7f6a98000000"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x800) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="010025bd5100fedbdf250800000004000480"], 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x40080) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x4008b}, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCBRIDGECHAN(r9, 0x40047435, &(0x7f0000000400)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r10 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 654.709702ms ago: executing program 2 (id=166): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x28040c1, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x80}}, {@grpquota}]}, 0xfb, 0x7a0, &(0x7f0000000280)="$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") r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000000)={0x40, 0x10, 0xc, "0c7b0c4b55afeef4ef851966"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f0000000140), 0x80800) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0x200) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) getpid() 648.208432ms ago: executing program 3 (id=167): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@usrjquota}, {@debug}, {@dioread_nolock}, {}, {@grpquota}, {@inlinecrypt}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0xffea, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 388.292868ms ago: executing program 1 (id=168): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x3}) read$FUSE(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x6, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x0, 0x80, 0x2, 0x3, 0x8, 0x20000006, 0x4e, 0x3, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0xfffffffd, 0x50, 0x3c5b, 0x5, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0xfffffffe, 0x7, 0x3, 0x400, 0x4c74, 0x80000000, 0x243, 0x3, 0x2e, 0x0, 0x8000806e, 0x7, 0x4, 0x1, 0xfffffffa, 0x5, 0x3e, 0x4008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x8, 0x0, 0x6, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8008, 0x5, 0x2, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x2, 0xfffffff7, 0x3, 0x0, 0xff, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x3ff, 0x6, 0x9, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x800004, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8010, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x8, 0x3, 0x3, 0x9, 0x1, 0x8, 0x0, 0xbc45, 0x4, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x1, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x6, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0xb, 0x3, 0x3, 0x20000008, 0x4, 0x6d01, 0x0, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfae, 0x1000, 0xa0, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x39f, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x9, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x9, 0x938, 0x6, 0x40, 0xfffffffc, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x103, 0x10000, 0x4, 0x7fff, 0xffff, 0x3, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x8000006, 0x2, 0xffffffff, 0x80000000, 0x1005, 0x4, 0xc5, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x2e12, 0x9, 0xe8a5, 0xa, 0xaf, 0x8, 0x3, 0x4, 0x4, 0x5, 0x8, 0x4, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1b, 0xd7, 0x200, 0xffff3441, 0x10fff]}, 0x45c) openat$ptp0(0xffffffffffffff9c, 0x0, 0x80, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 283.183944ms ago: executing program 1 (id=169): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007001e9c51820000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2ffdd934517f3e145fa02e086dd", 0x0, 0xd5b0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x810, r0, 0x4579000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000016c0)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./bus\x00', 0x322020, &(0x7f0000000400)=ANY=[@ANYRES64=r7], 0x1, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x19) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) r8 = dup(r1) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) io_setup(0x4, &(0x7f0000000180)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) 171.870581ms ago: executing program 1 (id=170): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x17c}, 0x1, 0x0, 0x0, 0x40008c10}, 0x20000401) getpgid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) setns(r1, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 131.296263ms ago: executing program 1 (id=171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1f0}}, 0x0) 114.212424ms ago: executing program 1 (id=172): syz_usb_connect$uac1(0x3, 0x93, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902810003010070000904000000010100000a240104000d02020208240400000000000000010000010200000904010101010200000b240202900b08000236df09050109000400000007250100000000090402"], 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x320f, 0x5041, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x81, {0x9, 0x21, 0x8ba, 0x4, 0x1, {0x22, 0x3c0}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0x98, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0x7, 0xb}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x9, 0x8, 0x6, 0x20, 0x80}, 0x33, &(0x7f0000000080)={0x5, 0xf, 0x33, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "7be0b870dbaba96e6c29bf74c5a7fde9"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "e8f6832cda63b5cec7bc1a46e0c569b5"}]}, 0x6, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x807}}, {0x32, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40b}}, {0xc1, &(0x7f0000000200)=@string={0xc1, 0x3, "77115ed5abea4e91ff601a33edea2a869dcf4a7354e23a851a6ad46df3acb1fdf9f999fd20810999bb4eea240bdf9de73354e50f944183a28b3b7684f3b95d0cc5e074b4fac172aee67bcf71d2bb0635fe0cd39ddd708d453fe407a7834bb230df34727c3a48ac205a06a422055253cc32497f4d91b9f57b1261a083b6ab6dec7f63d25ff74ee2116d89dde550446bae2e2694ab07159fea1c53ac7bec912922bf4a2ebfaf0dbae58c81c999f783e0882ae45c605c6a6afdefff384c225c03"}}, {0xc, &(0x7f0000000300)=@string={0xc, 0x3, "7dfb3dc65efb131dfc01"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x425}}]}) 55.745367ms ago: executing program 3 (id=173): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000001c0)) 26.124039ms ago: executing program 4 (id=174): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x17c}, 0x1, 0x0, 0x0, 0x40008c10}, 0x20000401) getpgid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 0s ago: executing program 4 (id=175): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) close(0x3) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x7a, &(0x7f0000001d00)=ANY=[@ANYBLOB="aaaaaaaaaaaaac90fe8ea87986dd6685117e00442ffffc010000000000000000006558000000ff020000000000000000000000000001"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. [ 26.812014][ T28] audit: type=1400 audit(1771273929.688:64): avc: denied { mounton } for pid=275 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.815789][ T275] cgroup: Unknown subsys name 'net' [ 26.835029][ T28] audit: type=1400 audit(1771273929.688:65): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.863158][ T28] audit: type=1400 audit(1771273929.728:66): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.863662][ T275] cgroup: Unknown subsys name 'devices' [ 27.007796][ T275] cgroup: Unknown subsys name 'hugetlb' [ 27.013661][ T275] cgroup: Unknown subsys name 'rlimit' [ 27.120033][ T28] audit: type=1400 audit(1771273929.998:67): avc: denied { setattr } for pid=275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.144051][ T28] audit: type=1400 audit(1771273929.998:68): avc: denied { mounton } for pid=275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.171145][ T28] audit: type=1400 audit(1771273929.998:69): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.197039][ T277] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 27.206484][ T28] audit: type=1400 audit(1771273930.088:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.233413][ T28] audit: type=1400 audit(1771273930.088:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.261961][ T28] audit: type=1400 audit(1771273930.148:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.290762][ T28] audit: type=1400 audit(1771273930.148:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.290798][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.644624][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.652056][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.659825][ T283] device bridge_slave_0 entered promiscuous mode [ 28.668087][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.675728][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.683853][ T283] device bridge_slave_1 entered promiscuous mode [ 28.743609][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.751882][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.760140][ T287] device bridge_slave_0 entered promiscuous mode [ 28.781453][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.789295][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.798449][ T287] device bridge_slave_1 entered promiscuous mode [ 28.855851][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.863380][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.871217][ T286] device bridge_slave_0 entered promiscuous mode [ 28.883854][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.892487][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.901131][ T286] device bridge_slave_1 entered promiscuous mode [ 28.931397][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.938974][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.948798][ T284] device bridge_slave_0 entered promiscuous mode [ 28.960338][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.968352][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.976768][ T284] device bridge_slave_1 entered promiscuous mode [ 29.048263][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.057651][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.066830][ T285] device bridge_slave_0 entered promiscuous mode [ 29.093779][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.101708][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.113302][ T285] device bridge_slave_1 entered promiscuous mode [ 29.260786][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.269270][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.277085][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.284497][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.312679][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.320852][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.329215][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.337013][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.367773][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.376643][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.385045][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.392526][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.408819][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.419182][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.427732][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.435799][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.444167][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.452260][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.460309][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.468402][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.488463][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.499328][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.510569][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.521730][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.533265][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.565554][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.574785][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.584834][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.593550][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.606099][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.614948][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.624783][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.632263][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.657333][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.668274][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.677974][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.687106][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.694368][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.729437][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.737977][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.747990][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.759325][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.768381][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.777120][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.786879][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.796157][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.806425][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.815625][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.824747][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.834189][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.844674][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.855993][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.877826][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.887122][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.896094][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.904740][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.913570][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.923537][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.941744][ T287] device veth0_vlan entered promiscuous mode [ 29.955873][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.964524][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.973478][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.981764][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.989911][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.999016][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.008210][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.020631][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.029838][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.037481][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.046376][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.055107][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.063001][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.072380][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.081695][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.090188][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.098606][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.107108][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.120188][ T283] device veth0_vlan entered promiscuous mode [ 30.138347][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.149329][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.160142][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.170874][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.181082][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.189880][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.199634][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.209020][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.218785][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.227386][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.236131][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.246166][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.256679][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.265745][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.274790][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 30.300608][ T286] device veth0_vlan entered promiscuous mode [ 30.307137][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.316133][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.326220][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.334814][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.344581][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.353379][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.362502][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.370722][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.380463][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.395106][ T283] device veth1_macvtap entered promiscuous mode [ 30.408875][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.417530][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.426083][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.434492][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.443061][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.451950][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.473414][ T286] device veth1_macvtap entered promiscuous mode [ 30.486209][ T287] device veth1_macvtap entered promiscuous mode [ 30.497960][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.507342][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.516462][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.525741][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.534894][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.544120][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.553328][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.563381][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.584536][ T284] device veth0_vlan entered promiscuous mode [ 30.592453][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.601580][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.601689][ T283] request_module fs-gadgetfs succeeded, but still no fs? [ 30.612427][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.626011][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.636180][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.645058][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.654442][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.664840][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.682957][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.692772][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.726245][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.736989][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.738458][ T337] loop3: detected capacity change from 0 to 512 [ 30.745265][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.760443][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.769473][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.770008][ T337] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.779988][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.802436][ T337] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 30.816171][ T284] device veth1_macvtap entered promiscuous mode [ 30.818111][ T337] EXT4-fs (loop3): 1 truncate cleaned up [ 30.829913][ T337] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 30.830776][ T285] device veth0_vlan entered promiscuous mode [ 30.847964][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.863667][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.872621][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.894755][ T283] EXT4-fs (loop3): unmounting filesystem. [ 30.908132][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.920448][ T342] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.923113][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.955612][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.974499][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.991178][ T285] device veth1_macvtap entered promiscuous mode [ 31.019126][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.041034][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.057770][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.066948][ T352] loop2: detected capacity change from 0 to 128 [ 31.167257][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.180914][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.190071][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.201331][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.216228][ T358] loop4: detected capacity change from 0 to 2048 [ 31.268722][ T358] loop4: p1 p3 p4 [ 31.274961][ T358] loop4: p4 size 589824 extends beyond EOD, truncated [ 31.370177][ T358] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3819385218 (15277540872 ns) > initial count (2487658756 ns). Using initial count to start timer. [ 31.433777][ T345] ======================================================= [ 31.433777][ T345] WARNING: The mand mount option has been deprecated and [ 31.433777][ T345] and is ignored by this kernel. Remove the mand [ 31.433777][ T345] option from the mount to silence this warning. [ 31.433777][ T345] ======================================================= [ 31.477568][ T291] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 31.517529][ T345] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 31.537364][ T371] device wireguard0 entered promiscuous mode [ 31.545676][ T345] overlayfs: missing 'lowerdir' [ 31.687273][ T291] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 31.716928][ T291] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.755456][ T291] usb 1-1: config 0 has no interface number 0 [ 31.772099][ T291] usb 1-1: config 0 interface 41 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 31.793169][ T291] usb 1-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.817211][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 31.817709][ T28] audit: type=1400 audit(1771273934.698:124): avc: denied { read } for pid=375 comm="syz.4.12" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 31.854198][ T376] loop4: detected capacity change from 0 to 512 [ 31.875576][ T376] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 31.936146][ T291] usb 1-1: config 0 interface 41 has no altsetting 0 [ 31.950910][ T376] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 31.960759][ T376] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.026192][ T291] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 32.144992][ T28] audit: type=1400 audit(1771273934.698:125): avc: denied { open } for pid=375 comm="syz.4.12" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 32.227875][ T291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.295795][ T291] usb 1-1: Product: syz [ 32.325580][ T291] usb 1-1: Manufacturer: syz [ 32.365408][ T291] usb 1-1: SerialNumber: syz [ 32.380886][ T28] audit: type=1400 audit(1771273934.918:126): avc: denied { write } for pid=375 comm="syz.4.12" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.430834][ T291] usb 1-1: config 0 descriptor?? [ 32.467247][ T291] CoreChips: probe of 1-1:0.41 failed with error -22 [ 32.491849][ T285] EXT4-fs (loop4): unmounting filesystem. [ 32.528906][ T28] audit: type=1400 audit(1771273934.918:127): avc: denied { add_name } for pid=375 comm="syz.4.12" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.582299][ T373] loop1: detected capacity change from 0 to 40427 [ 32.598743][ T28] audit: type=1400 audit(1771273934.918:128): avc: denied { create } for pid=375 comm="syz.4.12" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 32.623263][ T28] audit: type=1400 audit(1771273934.978:129): avc: denied { create } for pid=375 comm="syz.4.12" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.675825][ T373] F2FS-fs (loop1): invalid crc value [ 32.696562][ T373] F2FS-fs (loop1): Found nat_bits in checkpoint [ 32.806832][ T373] F2FS-fs (loop1): Start checkpoint disabled! [ 32.825946][ T373] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 32.845536][ T373] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 32.955777][ T28] audit: type=1400 audit(1771273935.838:130): avc: denied { create } for pid=372 comm="syz.1.11" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.005847][ T28] audit: type=1400 audit(1771273935.858:131): avc: denied { read open } for pid=372 comm="syz.1.11" path="/4/file0/file0" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.105507][ T28] audit: type=1400 audit(1771273935.918:132): avc: denied { create } for pid=388 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.242773][ T28] audit: type=1400 audit(1771273935.918:133): avc: denied { write } for pid=388 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.558155][ T394] loop4: detected capacity change from 0 to 512 [ 33.615584][ T394] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.667692][ T334] kworker/u4:3: attempt to access beyond end of device [ 33.667692][ T334] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 33.695755][ T394] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 33.726607][ T394] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.13: bad orphan inode 131083 [ 33.797367][ T394] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 33.977656][ T389] overlayfs: unrecognized mount option "smackfsfloor=upperdir" or missing value [ 34.078781][ T285] EXT4-fs (loop4): unmounting filesystem. [ 35.355279][ T340] usb 1-1: USB disconnect, device number 2 [ 35.374223][ T405] syz.1.15 (405) used greatest stack depth: 20680 bytes left [ 35.430524][ T385] loop3: detected capacity change from 0 to 40427 [ 35.448047][ T411] loop4: detected capacity change from 0 to 512 [ 35.474352][ T415] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17'. [ 35.497161][ T414] loop0: detected capacity change from 0 to 512 [ 35.509406][ T415] Zero length message leads to an empty skb [ 35.518814][ T415] loop1: detected capacity change from 0 to 128 [ 35.556073][ T414] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.605569][ T385] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 35.660584][ T414] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 35.670081][ T414] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.685829][ T411] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.16: iget: bad i_size value: 38620345925642 [ 35.946624][ T385] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 35.956083][ T411] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.16: couldn't read orphan inode 15 (err -117) [ 36.018932][ T411] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 36.029481][ T385] F2FS-fs (loop3): invalid crc value [ 36.042646][ T385] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4) [ 36.087996][ T410] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.16: iget: bad i_size value: 38620345925642 [ 36.125518][ T415] tipc: Started in network mode [ 36.136231][ T415] tipc: Node identity 7f000001, cluster identity 4711 [ 36.260837][ T415] tipc: Enabled bearer , priority 10 [ 36.346837][ T284] EXT4-fs (loop0): unmounting filesystem. [ 36.425228][ T428] loop3: detected capacity change from 0 to 2048 [ 36.524057][ T431] binder: 430:431 ioctl c0046209 9999999999999999 returned -22 [ 36.536656][ T428] EXT4-fs (loop3): cluster size (2048) smaller than block size (4096) [ 36.586292][ T355] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 36.670580][ T433] loop1: detected capacity change from 0 to 512 [ 36.725827][ T433] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 36.766921][ T433] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 36.776238][ T433] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.855316][ T285] EXT4-fs (loop4): unmounting filesystem. [ 36.968078][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 36.968094][ T28] audit: type=1400 audit(1771273943.853:155): avc: denied { create } for pid=438 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.018935][ T28] audit: type=1400 audit(1771273943.883:156): avc: denied { ioctl } for pid=438 comm="syz.0.20" path="socket:[16015]" dev="sockfs" ino=16015 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.056260][ T441] loop0: detected capacity change from 0 to 512 [ 37.079115][ T441] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.098347][ T441] EXT4-fs (loop0): Test dummy encryption mode enabled [ 37.114919][ T441] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.138681][ T441] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 37.189175][ T287] EXT4-fs (loop1): unmounting filesystem. [ 37.335463][ T424] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 37.385539][ T41] tipc: Node number set to 2130706433 [ 38.086676][ T424] usb 4-1: Using ep0 maxpacket: 16 [ 38.455374][ C0] sched: RT throttling activated [ 38.458493][ T28] audit: type=1400 audit(1771273945.343:157): avc: denied { create } for pid=438 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.491421][ T28] audit: type=1400 audit(1771273945.373:158): avc: denied { setopt } for pid=438 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.729871][ T424] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 38.743636][ T424] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.987135][ T424] usb 4-1: Product: syz [ 38.992197][ T424] usb 4-1: Manufacturer: syz [ 38.997164][ T424] usb 4-1: SerialNumber: syz [ 39.003449][ T424] r8152-cfgselector 4-1: config 0 descriptor?? [ 40.231560][ T28] audit: type=1400 audit(1771273947.113:159): avc: denied { create } for pid=457 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.267617][ T424] r8152-cfgselector 4-1: Unknown version 0x0000 [ 40.285539][ T424] r8152-cfgselector 4-1: Unknown version 0x0000 [ 40.292160][ T424] r8152-cfgselector 4-1: bad CDC descriptors [ 40.299045][ T424] r8152-cfgselector 4-1: Unknown version 0x0000 [ 40.316062][ T424] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 40.405817][ T28] audit: type=1400 audit(1771273947.143:160): avc: denied { mount } for pid=459 comm="syz.1.24" name="/" dev="ramfs" ino=16037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 40.470087][ T465] loop3: detected capacity change from 0 to 512 [ 40.485964][ T465] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.114127][ T468] loop0: detected capacity change from 0 to 128 [ 41.729398][ T474] loop4: detected capacity change from 0 to 256 [ 41.773327][ T474] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.053424][ T474] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 42.068929][ T465] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 42.078983][ T465] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.184852][ T28] audit: type=1400 audit(1771273947.263:161): avc: denied { remount } for pid=459 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 42.263203][ T474] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011ea0, chksum : 0x9b6c779e, utbl_chksum : 0xe619d30d) [ 42.444677][ T28] audit: type=1400 audit(1771273947.263:162): avc: denied { mounton } for pid=459 comm="syz.1.24" path="/9/file0" dev="ramfs" ino=16037 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 42.496945][ T283] EXT4-fs (loop3): unmounting filesystem. [ 42.573992][ T28] audit: type=1400 audit(1771273947.273:163): avc: denied { unmount } for pid=459 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 42.597333][ T28] audit: type=1400 audit(1771273948.893:164): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 42.619945][ T28] audit: type=1400 audit(1771273948.963:165): avc: denied { mount } for pid=464 comm="syz.3.27" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.643373][ T28] audit: type=1400 audit(1771273948.983:166): avc: denied { rename } for pid=464 comm="syz.3.27" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.684836][ T493] loop0: detected capacity change from 0 to 1024 [ 42.695453][ T28] audit: type=1400 audit(1771273949.353:167): avc: denied { read append } for pid=480 comm="syz.0.32" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.085416][ T28] audit: type=1400 audit(1771273949.353:168): avc: denied { open } for pid=480 comm="syz.0.32" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.140165][ T28] audit: type=1400 audit(1771273949.353:169): avc: denied { read } for pid=480 comm="syz.0.32" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 43.172083][ T493] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 43.217155][ T28] audit: type=1400 audit(1771273949.353:170): avc: denied { open } for pid=480 comm="syz.0.32" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 43.218699][ T493] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5930: Corrupt filesystem [ 43.269471][ T493] EXT4-fs (loop0): Remounting filesystem read-only [ 43.277128][ T493] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5930: Corrupt filesystem [ 43.287083][ T493] EXT4-fs (loop0): Remounting filesystem read-only [ 43.294495][ T493] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #18: comm syz.0.36: mark_inode_dirty error [ 43.306008][ T493] EXT4-fs (loop0): Remounting filesystem read-only [ 43.312552][ T493] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 43.324294][ T503] netlink: 180 bytes leftover after parsing attributes in process `syz.1.37'. [ 43.333505][ T502] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5930: Corrupt filesystem [ 43.343516][ T503] netlink: 48 bytes leftover after parsing attributes in process `syz.1.37'. [ 43.352920][ T502] EXT4-fs (loop0): Remounting filesystem read-only [ 43.361110][ T502] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5930: Corrupt filesystem [ 43.371414][ T502] EXT4-fs (loop0): Remounting filesystem read-only [ 43.378185][ T502] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #19: comm syz.0.36: mark_inode_dirty error [ 43.389667][ T502] EXT4-fs (loop0): Remounting filesystem read-only [ 43.397571][ T502] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 43.446785][ T284] EXT4-fs (loop0): unmounting filesystem. [ 43.478532][ T505] loop0: detected capacity change from 0 to 16 [ 43.526125][ T505] erofs: (device loop0): erofs_init_device: empty device tag @ pos 0 [ 43.672445][ T512] loop4: detected capacity change from 0 to 256 [ 43.720000][ T512] FAT-fs (loop4): Directory bread(block 64) failed [ 43.743342][ T512] FAT-fs (loop4): Directory bread(block 65) failed [ 43.753220][ T514] loop0: detected capacity change from 0 to 512 [ 43.761493][ T512] FAT-fs (loop4): Directory bread(block 66) failed [ 43.769402][ T512] FAT-fs (loop4): Directory bread(block 67) failed [ 43.855760][ T512] FAT-fs (loop4): Directory bread(block 68) failed [ 43.917917][ T514] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 43.963168][ T514] EXT4-fs (loop0): 1 truncate cleaned up [ 43.973066][ T512] FAT-fs (loop4): Directory bread(block 69) failed [ 44.002281][ T514] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.020462][ T512] FAT-fs (loop4): Directory bread(block 70) failed [ 44.054316][ T512] FAT-fs (loop4): Directory bread(block 71) failed [ 44.107922][ T512] FAT-fs (loop4): Directory bread(block 72) failed [ 44.114538][ T512] FAT-fs (loop4): Directory bread(block 73) failed [ 44.175775][ T514] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #2: block 4: comm syz.0.41: lblock 0 mapped to illegal pblock 4 (length 1) [ 44.210664][ T514] EXT4-fs (loop0): Remounting filesystem read-only [ 44.242380][ T371] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 322) [ 44.252454][ T371] FAT-fs (loop2): Filesystem has been set read-only [ 44.259867][ T512] syz.4.40: attempt to access beyond end of device [ 44.259867][ T512] loop4: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 44.276838][ T284] EXT4-fs (loop0): unmounting filesystem. [ 44.284642][ T512] syz.4.40: attempt to access beyond end of device [ 44.284642][ T512] loop4: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 44.298768][ T371] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 322) [ 44.372877][ T524] netlink: 63 bytes leftover after parsing attributes in process `syz.4.44'. [ 44.512695][ T526] loop3: detected capacity change from 0 to 2048 [ 44.545762][ T526] EXT4-fs (loop3): cluster size (2048) smaller than block size (4096) [ 44.577518][ T530] loop2: detected capacity change from 0 to 512 [ 44.602380][ T530] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.684213][ T530] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 44.694057][ T530] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.992817][ T286] EXT4-fs (loop2): unmounting filesystem. [ 45.055472][ T455] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 45.158685][ T19] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 45.235491][ T456] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 45.255538][ T455] usb 4-1: Using ep0 maxpacket: 16 [ 45.267908][ T455] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 45.290341][ T455] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.308755][ T455] usb 4-1: Product: syz [ 45.315469][ T19] usb 1-1: device descriptor read/64, error -71 [ 45.319499][ T455] usb 4-1: Manufacturer: syz [ 45.337816][ T455] usb 4-1: SerialNumber: syz [ 45.355553][ T455] r8152-cfgselector 4-1: config 0 descriptor?? [ 45.386330][ T547] netlink: 288 bytes leftover after parsing attributes in process `syz.2.52'. [ 45.396007][ T547] netlink: 32 bytes leftover after parsing attributes in process `syz.2.52'. [ 45.425402][ T456] usb 5-1: Using ep0 maxpacket: 16 [ 45.431090][ T456] usb 5-1: too many configurations: 251, using maximum allowed: 8 [ 45.443171][ T549] loop2: detected capacity change from 0 to 128 [ 45.452356][ T456] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 45.462698][ T456] usb 5-1: New USB device strings: Mfr=14, Product=241, SerialNumber=178 [ 45.472674][ T456] usb 5-1: Product: syz [ 45.479197][ T456] usb 5-1: Manufacturer: syz [ 45.484220][ T456] usb 5-1: SerialNumber: syz [ 45.498125][ T456] usb 5-1: config 0 descriptor?? [ 45.511487][ T456] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 45.528469][ T456] usb 5-1: Detected FT232A [ 45.544675][ T456] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 45.585486][ T19] usb 1-1: device descriptor read/64, error -71 [ 45.736827][ T424] usb 5-1: USB disconnect, device number 2 [ 45.745911][ T424] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 45.757990][ T424] ftdi_sio 5-1:0.0: device disconnected [ 45.771533][ T455] r8152-cfgselector 4-1: Unknown version 0x30b0 [ 45.778753][ T455] r8152-cfgselector 4-1: bad CDC descriptors [ 45.815458][ T340] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 45.855419][ T19] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 45.973438][ T455] r8152-cfgselector 4-1: Unknown version 0x0000 [ 45.986145][ T455] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 45.999070][ T340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.011891][ T340] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 46.025449][ T19] usb 1-1: device descriptor read/64, error -71 [ 46.034880][ T340] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 46.045176][ T340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.058478][ T340] usb 3-1: config 0 descriptor?? [ 46.254528][ T552] loop4: detected capacity change from 0 to 1024 [ 46.270198][ T552] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 46.283383][ T552] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.297745][ T19] usb 1-1: device descriptor read/64, error -71 [ 46.304525][ T552] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003] [ 46.314386][ T552] System zones: 0-1, 3-36 [ 46.320896][ T552] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 46.415518][ T19] usb usb1-port1: attempt power cycle [ 46.514203][ T285] EXT4-fs (loop4): unmounting filesystem. [ 46.545986][ T559] loop4: detected capacity change from 0 to 512 [ 46.558758][ T559] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.574714][ T559] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2823: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 46.590346][ T559] EXT4-fs (loop4): 1 truncate cleaned up [ 46.596621][ T559] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 46.629100][ T559] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5930: Corrupt filesystem [ 46.639980][ T559] EXT4-fs (loop4): Remounting filesystem read-only [ 46.647377][ T559] EXT4-fs error (device loop4): ext4_dirty_inode:6134: inode #15: comm syz.4.56: mark_inode_dirty error [ 46.659663][ T559] EXT4-fs (loop4): Remounting filesystem read-only [ 46.668142][ T559] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5930: Corrupt filesystem [ 46.679695][ T559] EXT4-fs (loop4): Remounting filesystem read-only [ 46.687037][ T559] EXT4-fs error (device loop4): ext4_dirty_inode:6134: inode #15: comm syz.4.56: mark_inode_dirty error [ 46.699162][ T559] EXT4-fs (loop4): Remounting filesystem read-only [ 46.706069][ T559] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.56: Invalid block bitmap block 3 in block_group 0 [ 46.720030][ T559] EXT4-fs (loop4): Remounting filesystem read-only [ 46.727020][ T559] EXT4-fs error (device loop4): ext4_mb_discard_group_preallocations:4958: comm syz.4.56: Error -117 reading block bitmap for 0 [ 46.741508][ T559] EXT4-fs (loop4): Remounting filesystem read-only [ 46.748744][ T559] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.56: Invalid block bitmap block 3 in block_group 0 [ 46.763256][ T559] EXT4-fs (loop4): Remounting filesystem read-only [ 46.770452][ T559] EXT4-fs error (device loop4): ext4_mb_discard_group_preallocations:4958: comm syz.4.56: Error -117 reading block bitmap for 0 [ 46.791435][ T559] EXT4-fs (loop4): Remounting filesystem read-only [ 46.805086][ T559] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5930: Corrupt filesystem [ 46.815538][ T559] EXT4-fs (loop4): Remounting filesystem read-only [ 46.822750][ T559] EXT4-fs error (device loop4): ext4_dirty_inode:6134: inode #15: comm syz.4.56: mark_inode_dirty error [ 46.836112][ T19] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 46.875984][ T19] usb 1-1: device descriptor read/8, error -71 [ 46.998399][ T549] capability: warning: `syz.2.53' uses 32-bit capabilities (legacy support in use) [ 47.026579][ T19] usb 1-1: device descriptor read/8, error -71 [ 47.096255][ T570] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.60'. [ 47.140996][ T572] loop4: detected capacity change from 0 to 2048 [ 47.168007][ T572] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 47.176933][ T572] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.208845][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 47.208862][ T28] audit: type=1400 audit(1771273954.093:206): avc: denied { setattr } for pid=571 comm="syz.4.61" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.238717][ T285] EXT4-fs (loop4): unmounting filesystem. [ 47.307153][ T576] loop4: detected capacity change from 0 to 8192 [ 47.315750][ T19] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 47.377345][ T19] usb 1-1: device descriptor read/8, error -71 [ 47.488620][ T590] loop3: detected capacity change from 0 to 2048 [ 47.552636][ T590] EXT4-fs (loop3): cluster size (2048) smaller than block size (4096) [ 47.566330][ T19] usb 1-1: device descriptor read/8, error -71 [ 47.580197][ T590] 9pnet_fd: Insufficient options for proto=fd [ 47.814417][ T19] usb usb1-port1: unable to enumerate USB device [ 49.096572][ T340] usbhid 3-1:0.0: can't add hid device: -71 [ 49.112605][ T340] usbhid: probe of 3-1:0.0 failed with error -71 [ 49.336959][ T340] usb 3-1: USB disconnect, device number 2 [ 49.634404][ T610] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 49.703654][ T610] kvm: pic: non byte write [ 49.905627][ T602] loop0: detected capacity change from 0 to 131072 [ 49.918105][ T602] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 49.935239][ T602] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 50.032424][ T628] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 50.040140][ T628] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 50.094787][ T628] device wireguard0 left promiscuous mode [ 50.332003][ T28] audit: type=1400 audit(1771273958.168:207): avc: denied { name_bind } for pid=620 comm="syz.2.77" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 50.355138][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 50.364622][ T602] F2FS-fs (loop0): Found nat_bits in checkpoint [ 50.381105][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.406593][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 50.425335][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.435074][ T28] audit: type=1400 audit(1771273958.308:208): avc: denied { map } for pid=616 comm="syz.1.75" path="socket:[16983]" dev="sockfs" ino=16983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.451385][ T617] overlayfs: unrecognized mount option "xino=on:/" or missing value [ 50.470395][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.488463][ T28] audit: type=1400 audit(1771273958.308:209): avc: denied { read accept } for pid=616 comm="syz.1.75" path="socket:[16983]" dev="sockfs" ino=16983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.515238][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.524442][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.533441][ T602] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 50.540962][ T602] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 50.549726][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.568700][ T28] audit: type=1400 audit(1771273958.308:210): avc: denied { mount } for pid=616 comm="syz.1.75" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 50.637383][ T28] audit: type=1400 audit(1771273958.518:211): avc: denied { append } for pid=601 comm="syz.0.71" name="file1" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.712680][ T631] overlayfs: failed to clone upperpath [ 50.726797][ T28] audit: type=1400 audit(1771273958.608:212): avc: denied { remount } for pid=630 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.973766][ T28] audit: type=1400 audit(1771273958.848:213): avc: denied { read } for pid=637 comm="syz.2.81" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 51.027821][ T641] process 'syz.2.81' launched '/dev/fd/-1/./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 51.055662][ T28] audit: type=1400 audit(1771273958.848:214): avc: denied { open } for pid=637 comm="syz.2.81" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 51.169414][ T643] loop2: detected capacity change from 0 to 1024 [ 51.202877][ T643] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.275146][ T643] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.335401][ T643] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003] [ 51.343594][ T643] System zones: 0-1, 3-36 [ 51.398623][ T643] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 51.513593][ T615] loop3: detected capacity change from 0 to 131072 [ 51.569455][ T615] F2FS-fs (loop3): Found nat_bits in checkpoint [ 51.715912][ T615] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 51.865236][ T286] EXT4-fs (loop2): unmounting filesystem. [ 51.943716][ T28] audit: type=1400 audit(1771273959.818:215): avc: denied { mount } for pid=676 comm="syz.2.85" name="/" dev="ramfs" ino=17011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 52.032650][ T671] loop0: detected capacity change from 0 to 40427 [ 52.044905][ T682] loop4: detected capacity change from 0 to 512 [ 52.051953][ T671] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 52.060982][ T671] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 52.070420][ T682] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.086625][ T671] F2FS-fs (loop0): invalid crc value [ 52.106020][ T682] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.125705][ T680] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 52.154767][ T671] F2FS-fs (loop0): Found nat_bits in checkpoint [ 52.174856][ T682] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.86: bad orphan inode 131083 [ 52.205133][ T680] kvm: pic: non byte write [ 52.280990][ T682] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 52.349703][ T671] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 52.356993][ T671] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 52.511585][ T695] loop3: detected capacity change from 0 to 256 [ 52.522379][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 52.522451][ T28] audit: type=1400 audit(1771273960.338:218): avc: denied { create } for pid=690 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.577346][ T695] FAT-fs (loop3): Directory bread(block 64) failed [ 52.584114][ T695] FAT-fs (loop3): Directory bread(block 65) failed [ 52.590997][ T695] FAT-fs (loop3): Directory bread(block 66) failed [ 52.597650][ T695] FAT-fs (loop3): Directory bread(block 67) failed [ 52.604483][ T695] FAT-fs (loop3): Directory bread(block 68) failed [ 52.611155][ T695] FAT-fs (loop3): Directory bread(block 69) failed [ 52.618106][ T695] FAT-fs (loop3): Directory bread(block 70) failed [ 52.624755][ T695] FAT-fs (loop3): Directory bread(block 71) failed [ 52.631775][ T695] FAT-fs (loop3): Directory bread(block 72) failed [ 52.638442][ T695] FAT-fs (loop3): Directory bread(block 73) failed [ 52.778889][ T28] audit: type=1400 audit(1771273960.378:219): avc: denied { setopt } for pid=690 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.822872][ T675] overlayfs: unrecognized mount option "smackfsfloor=upperdir" or missing value [ 52.833976][ T28] audit: type=1400 audit(1771273960.378:220): avc: denied { write } for pid=690 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.885305][ T285] EXT4-fs (loop4): unmounting filesystem. [ 53.012849][ T701] loop0: detected capacity change from 0 to 512 [ 53.049745][ T701] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.89: inode has both inline data and extents flags [ 53.083393][ T701] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.89: couldn't read orphan inode 15 (err -117) [ 53.115318][ T701] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 53.161707][ T28] audit: type=1400 audit(1771273961.038:221): avc: denied { write } for pid=700 comm="syz.0.89" path="/12/file0/file1" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.228675][ T705] loop3: detected capacity change from 0 to 512 [ 53.245590][ T705] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.364002][ T28] audit: type=1400 audit(1771273961.148:222): avc: denied { bind } for pid=700 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.389799][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 53.410981][ T705] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 53.420418][ T705] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.508001][ T283] EXT4-fs (loop3): unmounting filesystem. [ 53.531946][ T28] audit: type=1400 audit(1771273961.148:223): avc: denied { name_bind } for pid=700 comm="syz.0.89" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 53.647307][ T715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.94'. [ 53.671809][ T28] audit: type=1400 audit(1771273961.148:224): avc: denied { node_bind } for pid=700 comm="syz.0.89" saddr=ff05::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 53.711057][ T715] bridge0: port 3(vlan2) entered blocking state [ 53.731702][ T715] bridge0: port 3(vlan2) entered disabled state [ 53.753004][ T715] device vlan2 entered promiscuous mode [ 53.769074][ T28] audit: type=1400 audit(1771273961.578:225): avc: denied { set_context_mgr } for pid=712 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 53.819328][ T715] device gretap0 entered promiscuous mode [ 53.837795][ T715] bridge0: port 3(vlan2) entered blocking state [ 53.844179][ T715] bridge0: port 3(vlan2) entered forwarding state [ 53.872900][ T28] audit: type=1400 audit(1771273961.748:226): avc: denied { read write } for pid=717 comm="syz.3.95" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 53.883438][ T718] 9pnet: Could not find request transport: rdma [ 53.925437][ T28] audit: type=1400 audit(1771273961.748:227): avc: denied { open } for pid=717 comm="syz.3.95" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 54.186912][ T697] loop2: detected capacity change from 0 to 131072 [ 54.202862][ T697] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 54.235418][ T697] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 54.269592][ T697] F2FS-fs (loop2): Found nat_bits in checkpoint [ 54.324475][ T697] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 54.332475][ T697] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 54.357887][ T699] loop4: detected capacity change from 0 to 131072 [ 54.378502][ T699] F2FS-fs (loop4): Test dummy encryption mode enabled [ 54.396172][ T699] F2FS-fs (loop4): invalid crc value [ 54.417060][ T699] F2FS-fs (loop4): Found nat_bits in checkpoint [ 54.447370][ T744] loop3: detected capacity change from 0 to 512 [ 54.497112][ T744] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.606269][ T744] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 54.617585][ T744] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.806378][ T699] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 54.941544][ T283] EXT4-fs (loop3): unmounting filesystem. [ 55.005911][ T699] F2FS-fs (loop4): Test dummy encryption mode enabled [ 55.385564][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 55.425125][ T284] EXT4-fs (loop0): unmounting filesystem. [ 55.501714][ T767] loop0: detected capacity change from 0 to 128 [ 55.517464][ T767] EXT4-fs (loop0): Test dummy encryption mode enabled [ 55.536539][ T768] netlink: 'syz.4.109': attribute type 13 has an invalid length. [ 55.547930][ T768] gretap0: refused to change device tx_queue_len [ 55.554888][ T768] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 55.588977][ T767] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 55.608671][ T767] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.677800][ T767] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 55.947811][ T756] loop3: detected capacity change from 0 to 40427 [ 55.995347][ T756] F2FS-fs (loop3): Found nat_bits in checkpoint [ 56.049962][ T756] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 56.059436][ T775] f2fs_ckpt-7:3: attempt to access beyond end of device [ 56.059436][ T775] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 56.774383][ T284] EXT4-fs (loop0): unmounting filesystem. [ 56.961443][ T800] loop4: detected capacity change from 0 to 512 [ 56.971300][ T800] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.125482][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 58.125501][ T28] audit: type=1400 audit(1771273965.978:235): avc: denied { ioctl } for pid=802 comm="syz.0.119" path="socket:[18001]" dev="sockfs" ino=18001 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.251715][ T800] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 58.262843][ T800] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.356546][ T28] audit: type=1400 audit(1771273965.978:236): avc: denied { bind } for pid=802 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.375725][ T28] audit: type=1400 audit(1771273965.978:237): avc: denied { ioctl } for pid=802 comm="syz.0.119" path="socket:[18003]" dev="sockfs" ino=18003 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.417752][ T285] EXT4-fs (loop4): unmounting filesystem. [ 58.483842][ T821] FAULT_INJECTION: forcing a failure. [ 58.483842][ T821] name failslab, interval 1, probability 0, space 0, times 1 [ 58.502609][ T824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.125'. [ 58.514776][ T824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.125'. [ 58.525059][ T821] CPU: 0 PID: 821 Comm: syz.2.124 Not tainted syzkaller #0 [ 58.532332][ T821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 58.542730][ T821] Call Trace: [ 58.546044][ T821] [ 58.549002][ T821] __dump_stack+0x21/0x24 [ 58.553379][ T821] dump_stack_lvl+0x110/0x170 [ 58.558189][ T821] ? __cfi_dump_stack_lvl+0x8/0x8 [ 58.563355][ T821] dump_stack+0x15/0x24 [ 58.567548][ T821] should_fail_ex+0x3d4/0x520 [ 58.572876][ T821] ? mas_alloc_nodes+0x2d8/0x850 [ 58.577891][ T821] __should_failslab+0xac/0xf0 [ 58.582697][ T821] should_failslab+0x9/0x20 [ 58.587412][ T821] kmem_cache_alloc+0x3b/0x330 [ 58.592301][ T821] mas_alloc_nodes+0x2d8/0x850 [ 58.597251][ T821] mas_preallocate+0xe13/0x1440 [ 58.602132][ T821] ? __cfi_mas_preallocate+0x10/0x10 [ 58.607558][ T821] __vma_adjust+0x604/0x1eb0 [ 58.612190][ T821] ? __cfi___anon_vma_interval_tree_augment_rotate+0x10/0x10 [ 58.619870][ T821] ? __cfi___vma_adjust+0x10/0x10 [ 58.625574][ T821] ? rwsem_write_trylock+0x136/0x300 [ 58.631878][ T821] __split_vma+0x73b/0x980 [ 58.636632][ T821] do_mas_align_munmap+0x314/0x1320 [ 58.641880][ T821] ? mas_state_walk+0x79b/0xa60 [ 58.646857][ T821] ? do_mas_munmap+0x2b0/0x2b0 [ 58.651850][ T821] ? _parse_integer+0x2a/0x40 [ 58.656579][ T821] ? mas_find+0x307/0x370 [ 58.660958][ T821] do_mas_munmap+0x241/0x2b0 [ 58.665774][ T821] do_munmap+0xeb/0x140 [ 58.669975][ T821] ? __cfi_do_munmap+0x10/0x10 [ 58.674781][ T821] mremap_to+0x377/0x600 [ 58.679063][ T821] __se_sys_mremap+0x475/0xcb0 [ 58.683969][ T821] ? __kasan_check_write+0x14/0x20 [ 58.689116][ T821] ? mutex_unlock+0x8f/0x230 [ 58.693779][ T821] ? __cfi_mutex_unlock+0x10/0x10 [ 58.698851][ T821] ? __x64_sys_mremap+0xd0/0xd0 [ 58.703741][ T821] ? __kasan_check_write+0x14/0x20 [ 58.708898][ T821] ? ksys_write+0x1f4/0x250 [ 58.713425][ T821] ? __cfi_ksys_write+0x10/0x10 [ 58.718303][ T821] __x64_sys_mremap+0xbf/0xd0 [ 58.723023][ T821] x64_sys_call+0x989/0x9a0 [ 58.727911][ T821] do_syscall_64+0x4c/0xa0 [ 58.732447][ T821] ? clear_bhb_loop+0x30/0x80 [ 58.737152][ T821] ? clear_bhb_loop+0x30/0x80 [ 58.741856][ T821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 58.748087][ T821] RIP: 0033:0x7f38bc99bf79 [ 58.752641][ T821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.772463][ T821] RSP: 002b:00007f38bb3f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 58.781003][ T821] RAX: ffffffffffffffda RBX: 00007f38bcc15fa0 RCX: 00007f38bc99bf79 [ 58.782186][ T828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.123'. [ 58.789012][ T821] RDX: 0000000000003000 RSI: 0000000000009000 RDI: 0000200000000000 [ 58.789029][ T821] RBP: 00007f38bb3f7090 R08: 0000200000ffc000 R09: 0000000000000000 [ 58.789042][ T821] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 58.822210][ T821] R13: 00007f38bcc16038 R14: 00007f38bcc15fa0 R15: 00007fff738673e8 [ 58.830220][ T821] [ 58.896457][ T835] netlink: 92 bytes leftover after parsing attributes in process `syz.0.128'. [ 58.957907][ T842] loop3: detected capacity change from 0 to 128 [ 58.976060][ T844] loop0: detected capacity change from 0 to 2048 [ 58.989107][ T846] loop2: detected capacity change from 0 to 512 [ 59.981724][ T850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.127'. [ 60.008966][ T846] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 60.065632][ T844] EXT4-fs (loop0): cluster size (2048) smaller than block size (4096) [ 60.376081][ T842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 60.415246][ T846] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 60.425521][ T846] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.708975][ T286] EXT4-fs (loop2): unmounting filesystem. [ 60.925451][ T407] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 60.959168][ T861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.137'. [ 61.032159][ T867] overlayfs: failed to clone lowerpath [ 61.046507][ T867] x_tables: duplicate underflow at hook 2 [ 61.105495][ T407] usb 1-1: Using ep0 maxpacket: 16 [ 61.114503][ T407] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 61.127753][ T28] audit: type=1400 audit(1771273969.008:238): avc: denied { execute_no_trans } for pid=877 comm="syz.1.147" path=2F6D656D66643A2D42D54E343A29202864656C6574656429 dev="tmpfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.162020][ T877] process 'memfd:-BÕN4:)' started with executable stack [ 61.176221][ T407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.191591][ T407] usb 1-1: Product: syz [ 61.192835][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.204147][ T407] usb 1-1: Manufacturer: syz [ 61.209527][ T28] audit: type=1400 audit(1771273969.078:239): avc: denied { ioctl } for pid=882 comm="syz.4.146" path="socket:[18150]" dev="sockfs" ino=18150 ioctlcmd=0x48e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.280719][ T28] audit: type=1400 audit(1771273969.158:240): avc: denied { read append } for pid=882 comm="syz.4.146" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.308147][ T28] audit: type=1400 audit(1771273969.158:241): avc: denied { open } for pid=882 comm="syz.4.146" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.345147][ T407] usb 1-1: SerialNumber: syz [ 61.348164][ T28] audit: type=1400 audit(1771273969.158:242): avc: denied { write } for pid=882 comm="syz.4.146" name="event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.361770][ T407] r8152-cfgselector 1-1: config 0 descriptor?? [ 61.382762][ T28] audit: type=1400 audit(1771273969.158:243): avc: denied { ioctl } for pid=882 comm="syz.4.146" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.412178][ T894] loop2: detected capacity change from 0 to 512 [ 61.419915][ T894] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.440364][ T28] audit: type=1400 audit(1771273969.258:244): avc: denied { ioctl } for pid=882 comm="syz.4.146" path="socket:[18147]" dev="sockfs" ino=18147 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.529758][ T887] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 61.573249][ T894] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 61.582715][ T894] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.085956][ T906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.150'. [ 62.122738][ T407] r8152-cfgselector 1-1: Unknown version 0x30b0 [ 62.327438][ T407] r8152-cfgselector 1-1: bad CDC descriptors [ 62.500220][ T407] r8152-cfgselector 1-1: Unknown version 0x0000 [ 62.518395][ T286] EXT4-fs (loop2): unmounting filesystem. [ 62.524980][ T407] r8152-cfgselector 1-1: USB disconnect, device number 7 [ 62.831990][ T912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.153'. [ 62.983595][ T923] loop2: detected capacity change from 0 to 128 [ 63.118638][ T931] kvm: pic: non byte write [ 63.205479][ T19] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 63.225484][ T710] Bluetooth: hci0: command 0x1003 tx timeout [ 63.225511][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.241290][ T883] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 63.298523][ T942] xt_hashlimit: size too large, truncated to 1048576 [ 63.376401][ T947] loop3: detected capacity change from 0 to 1024 [ 63.384054][ T943] loop4: detected capacity change from 0 to 2048 [ 63.401578][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.413774][ T945] loop2: detected capacity change from 0 to 2048 [ 63.420211][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.439572][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.454493][ T943] EXT4-fs: dax option not supported [ 63.458183][ T947] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 63.472888][ T945] EXT4-fs (loop2): cluster size (2048) smaller than block size (4096) [ 63.486101][ T19] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.504262][ T947] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.513399][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.522585][ T947] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003] [ 63.533007][ T19] usb 1-1: config 0 descriptor?? [ 63.537094][ T947] System zones: 0-1, 3-36 [ 63.557358][ T947] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 63.569243][ T943] loop4: detected capacity change from 0 to 256 [ 63.576479][ T943] exfat: Unknown parameter '18446744073709551615' [ 63.613986][ T335] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 63.675321][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 63.675337][ T28] audit: type=1400 audit(1771273971.548:246): avc: denied { map } for pid=952 comm="syz.1.169" path="pipe:[18570]" dev="pipefs" ino=18570 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 63.706876][ T953] overlayfs: failed to clone upperpath [ 63.760619][ T28] audit: type=1400 audit(1771273971.548:247): avc: denied { execute } for pid=952 comm="syz.1.169" path="pipe:[18570]" dev="pipefs" ino=18570 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 63.805405][ T407] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 63.881446][ T283] EXT4-fs (loop3): unmounting filesystem. [ 63.902921][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.942601][ T19] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 63.963737][ T19] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 63.993020][ T966] xt_hashlimit: size too large, truncated to 1048576 [ 64.015399][ T407] usb 3-1: Using ep0 maxpacket: 16 [ 64.033550][ T407] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 64.047893][ T407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.057723][ T407] usb 3-1: Product: syz [ 64.062106][ T407] usb 3-1: Manufacturer: syz [ 64.067540][ T407] usb 3-1: SerialNumber: syz [ 64.073441][ T407] r8152-cfgselector 3-1: config 0 descriptor?? [ 64.258419][ T19] ================================================================== [ 64.266725][ T19] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 64.274155][ T19] Write of size 8 at addr ffff888117190a00 by task kworker/0:1/19 [ 64.281991][ T19] [ 64.284322][ T19] CPU: 0 PID: 19 Comm: kworker/0:1 Not tainted syzkaller #0 [ 64.291702][ T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 64.301765][ T19] Workqueue: usb_hub_wq hub_event [ 64.306798][ T19] Call Trace: [ 64.310076][ T19] [ 64.313003][ T19] __dump_stack+0x21/0x24 [ 64.317339][ T19] dump_stack_lvl+0x110/0x170 [ 64.322021][ T19] ? __cfi_dump_stack_lvl+0x8/0x8 [ 64.327049][ T19] ? enqueue_timer+0xae/0x480 [ 64.331735][ T19] print_address_description+0x71/0x200 [ 64.337285][ T19] print_report+0x4a/0x60 [ 64.341714][ T19] kasan_report+0x122/0x150 [ 64.346339][ T19] ? enqueue_timer+0xae/0x480 [ 64.351378][ T19] __asan_report_store8_noabort+0x17/0x20 [ 64.357216][ T19] enqueue_timer+0xae/0x480 [ 64.361749][ T19] __mod_timer+0x84c/0xc00 [ 64.366249][ T19] schedule_timeout+0x154/0x340 [ 64.371156][ T19] ? __cfi_schedule_timeout+0x10/0x10 [ 64.376563][ T19] ? __cfi_process_timeout+0x10/0x10 [ 64.381978][ T19] ? _raw_spin_lock+0x94/0xf0 [ 64.386843][ T19] wait_for_common+0x365/0x640 [ 64.391915][ T19] ? usb_hcd_giveback_urb+0x351/0x410 [ 64.397335][ T19] ? wait_for_completion+0x20/0x20 [ 64.402571][ T19] ? usb_submit_urb+0x1150/0x1820 [ 64.407609][ T19] wait_for_completion_timeout+0xe/0x10 [ 64.413187][ T19] usb_start_wait_urb+0x173/0x300 [ 64.418262][ T19] ? usb_api_blocking_completion+0xb0/0xb0 [ 64.424089][ T19] ? __kasan_check_write+0x14/0x20 [ 64.429254][ T19] usb_control_msg+0x241/0x3f0 [ 64.434471][ T19] hub_ext_port_status+0x100/0x6b0 [ 64.439695][ T19] hub_event+0x7da/0x46b0 [ 64.444210][ T19] ? sched_clock+0x9/0x10 [ 64.448558][ T19] ? kthread_data+0x50/0xc0 [ 64.453098][ T19] ? _raw_spin_unlock+0x4c/0x70 [ 64.457988][ T19] ? __cfi_hub_event+0x10/0x10 [ 64.462861][ T19] ? __schedule+0xbae/0x1500 [ 64.467492][ T19] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 64.473243][ T19] process_one_work+0x71f/0xc40 [ 64.478370][ T19] worker_thread+0xa29/0x11e0 [ 64.483258][ T19] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 64.489016][ T19] kthread+0x281/0x320 [ 64.493119][ T19] ? __cfi_worker_thread+0x10/0x10 [ 64.498457][ T19] ? __cfi_kthread+0x10/0x10 [ 64.503417][ T19] ret_from_fork+0x1f/0x30 [ 64.508487][ T19] [ 64.511946][ T19] [ 64.514280][ T19] Allocated by task 883: [ 64.518609][ T19] kasan_set_track+0x4b/0x70 [ 64.523297][ T19] kasan_save_alloc_info+0x25/0x30 [ 64.528543][ T19] __kasan_kmalloc+0x95/0xb0 [ 64.533491][ T19] __kmalloc+0xb1/0x1e0 [ 64.537925][ T19] hci_alloc_dev_priv+0x27/0x1bd0 [ 64.543131][ T19] hci_uart_tty_ioctl+0x3d6/0xa20 [ 64.548428][ T19] tty_ioctl+0x8ef/0xc60 [ 64.552717][ T19] __se_sys_ioctl+0x12f/0x1b0 [ 64.557473][ T19] __x64_sys_ioctl+0x7b/0x90 [ 64.562147][ T19] x64_sys_call+0x58b/0x9a0 [ 64.566699][ T19] do_syscall_64+0x4c/0xa0 [ 64.571441][ T19] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.577461][ T19] [ 64.579789][ T19] Freed by task 883: [ 64.583685][ T19] kasan_set_track+0x4b/0x70 [ 64.588346][ T19] kasan_save_free_info+0x31/0x50 [ 64.593494][ T19] ____kasan_slab_free+0x132/0x180 [ 64.599059][ T19] __kasan_slab_free+0x11/0x20 [ 64.604729][ T19] slab_free_freelist_hook+0xc2/0x190 [ 64.611102][ T19] __kmem_cache_free+0xb7/0x1b0 [ 64.616437][ T19] kfree+0x6f/0xf0 [ 64.620188][ T19] hci_release_dev+0x12a3/0x13b0 [ 64.625251][ T19] bt_host_release+0x82/0x90 [ 64.630181][ T19] device_release+0xa4/0x1d0 [ 64.635558][ T19] kobject_put+0x19d/0x280 [ 64.640004][ T19] put_device+0x1f/0x30 [ 64.644357][ T19] hci_dev_cmd+0x279/0x740 [ 64.648973][ T19] hci_sock_ioctl+0x41e/0x7f0 [ 64.653750][ T19] sock_do_ioctl+0x114/0x330 [ 64.658512][ T19] sock_ioctl+0x4ca/0x720 [ 64.662848][ T19] __se_sys_ioctl+0x12f/0x1b0 [ 64.667679][ T19] __x64_sys_ioctl+0x7b/0x90 [ 64.672362][ T19] x64_sys_call+0x58b/0x9a0 [ 64.676867][ T19] do_syscall_64+0x4c/0xa0 [ 64.681457][ T19] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.687454][ T19] [ 64.689792][ T19] Last potentially related work creation: [ 64.695502][ T19] kasan_save_stack+0x3a/0x60 [ 64.700405][ T19] __kasan_record_aux_stack+0xb6/0xc0 [ 64.705890][ T19] kasan_record_aux_stack_noalloc+0xb/0x10 [ 64.711783][ T19] insert_work+0x51/0x300 [ 64.716125][ T19] __queue_work+0x9b1/0xd30 [ 64.720822][ T19] queue_work_on+0xde/0x150 [ 64.725337][ T19] __hci_cmd_sync_sk+0xa7f/0xd30 [ 64.730328][ T19] hci_cmd_sync_status+0x53/0x120 [ 64.735497][ T19] hci_dev_cmd+0x648/0x740 [ 64.740003][ T19] hci_sock_ioctl+0x41e/0x7f0 [ 64.744811][ T19] sock_do_ioctl+0x114/0x330 [ 64.749775][ T19] sock_ioctl+0x4ca/0x720 [ 64.754238][ T19] __se_sys_ioctl+0x12f/0x1b0 [ 64.759018][ T19] __x64_sys_ioctl+0x7b/0x90 [ 64.763806][ T19] x64_sys_call+0x58b/0x9a0 [ 64.768872][ T19] do_syscall_64+0x4c/0xa0 [ 64.773405][ T19] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.779667][ T19] [ 64.782047][ T19] Second to last potentially related work creation: [ 64.788625][ T19] kasan_save_stack+0x3a/0x60 [ 64.793311][ T19] __kasan_record_aux_stack+0xb6/0xc0 [ 64.798965][ T19] kasan_record_aux_stack_noalloc+0xb/0x10 [ 64.804955][ T19] insert_work+0x51/0x300 [ 64.809403][ T19] __queue_work+0x9b1/0xd30 [ 64.814007][ T19] queue_work_on+0xde/0x150 [ 64.818684][ T19] hci_cmd_timeout+0x191/0x200 [ 64.823559][ T19] process_one_work+0x71f/0xc40 [ 64.828413][ T19] worker_thread+0xa29/0x11e0 [ 64.833088][ T19] kthread+0x281/0x320 [ 64.837595][ T19] ret_from_fork+0x1f/0x30 [ 64.842336][ T19] [ 64.844672][ T19] The buggy address belongs to the object at ffff888117190000 [ 64.844672][ T19] which belongs to the cache kmalloc-8k of size 8192 [ 64.859432][ T19] The buggy address is located 2560 bytes inside of [ 64.859432][ T19] 8192-byte region [ffff888117190000, ffff888117192000) [ 64.873507][ T19] [ 64.875954][ T19] The buggy address belongs to the physical page: [ 64.882404][ T19] page:ffffea00045c6400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117190 [ 64.893135][ T19] head:ffffea00045c6400 order:3 compound_mapcount:0 compound_pincount:0 [ 64.901871][ T19] flags: 0x4000000000010200(slab|head|zone=1) [ 64.908693][ T19] raw: 4000000000010200 ffffea00045cfe00 dead000000000004 ffff888100043500 [ 64.917832][ T19] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 64.927111][ T19] page dumped because: kasan: bad access detected [ 64.933736][ T19] page_owner tracks the page as allocated [ 64.939469][ T19] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 411, tgid 409 (syz.4.16), ts 35619193948, free_ts 35598959275 [ 64.962057][ T19] post_alloc_hook+0x1f5/0x210 [ 64.966853][ T19] prep_new_page+0x1c/0x110 [ 64.971569][ T19] get_page_from_freelist+0x2d12/0x2d80 [ 64.977147][ T19] __alloc_pages+0x1d9/0x480 [ 64.981750][ T19] alloc_slab_page+0x6e/0xf0 [ 64.986358][ T19] new_slab+0x98/0x3d0 [ 64.990573][ T19] ___slab_alloc+0x6bd/0xb20 [ 64.995300][ T19] __slab_alloc+0x5e/0xa0 [ 64.999690][ T19] __kmem_cache_alloc_node+0x203/0x2c0 [ 65.005162][ T19] __kmalloc+0xa1/0x1e0 [ 65.009363][ T19] mb_cache_create+0x187/0x5a0 [ 65.014601][ T19] ext4_xattr_create_cache+0x13/0x20 [ 65.019984][ T19] ext4_fill_super+0x59fb/0x7a40 [ 65.025119][ T19] get_tree_bdev+0x447/0x690 [ 65.029885][ T19] ext4_get_tree+0x1c/0x20 [ 65.034386][ T19] vfs_get_tree+0x9a/0x270 [ 65.038959][ T19] page last free stack trace: [ 65.043737][ T19] free_unref_page_prepare+0x742/0x750 [ 65.049327][ T19] free_unref_page+0x95/0x540 [ 65.054372][ T19] __free_pages+0x67/0x100 [ 65.058811][ T19] __free_slab+0xca/0x1a0 [ 65.063676][ T19] __unfreeze_partials+0x160/0x190 [ 65.069630][ T19] put_cpu_partial+0xa9/0x100 [ 65.074505][ T19] __slab_free+0x1c4/0x280 [ 65.079032][ T19] ___cache_free+0xbf/0xd0 [ 65.083751][ T19] qlist_free_all+0xc6/0x140 [ 65.088382][ T19] kasan_quarantine_reduce+0x14a/0x170 [ 65.093895][ T19] __kasan_slab_alloc+0x24/0x80 [ 65.098755][ T19] slab_post_alloc_hook+0x4f/0x2d0 [ 65.103966][ T19] kmem_cache_alloc+0x16e/0x330 [ 65.108952][ T19] getname_flags+0xb9/0x500 [ 65.113538][ T19] __x64_sys_rmdir+0x3c/0x50 [ 65.118308][ T19] x64_sys_call+0x68e/0x9a0 [ 65.122960][ T19] [ 65.125315][ T19] Memory state around the buggy address: [ 65.130993][ T19] ffff888117190900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.139170][ T19] ffff888117190980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.147481][ T19] >ffff888117190a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.155742][ T19] ^ [ 65.159841][ T19] ffff888117190a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.169937][ T19] ffff888117190b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.178960][ T19] ================================================================== [ 65.188096][ T19] Disabling lock debugging due to kernel taint [ 65.209307][ T19] usb 1-1: USB disconnect, device number 8 [ 65.215768][ T28] audit: type=1400 audit(1771273973.098:248): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 65.243689][ T28] audit: type=1400 audit(1771273973.098:249): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.268030][ T28] audit: type=1400 audit(1771273973.098:250): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.293153][ T28] audit: type=1400 audit(1771273973.098:251): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.314031][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 65.314059][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 65.314076][ C0] CPU: 0 PID: 28 Comm: kauditd Tainted: G B syzkaller #0 [ 65.314097][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 65.314109][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 65.314144][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 18 47 29 00 4c 89 ff e8 10 31 b8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 cc 74 6e 00 49 8b 7d 00 e8 a3 2c [ 65.314163][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 65.314182][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88810033e540 [ 65.314196][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 65.314209][ C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: fffffffffffffffb [ 65.314223][ C0] R10: dffffc0000000000 R11: ffffed1022e32139 R12: dffffc0000000000 [ 65.314238][ C0] R13: 0000000000000000 R14: ffff8881171909c8 R15: 0000000000000008 [ 65.314252][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 65.314269][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.314285][ C0] CR2: 000055bb37f62a68 CR3: 0000000120d9c000 CR4: 00000000003506b0 [ 65.314302][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.314315][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.314327][ C0] Call Trace: [ 65.314333][ C0] [ 65.314344][ C0] delayed_work_timer_fn+0x61/0x80 [ 65.314372][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 65.314399][ C0] call_timer_fn+0x46/0x2a0 [ 65.314426][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 65.314452][ C0] __run_timers+0x689/0x9f0 [ 65.314482][ C0] ? calc_index+0x200/0x200 [ 65.314509][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 65.314543][ C0] run_timer_softirq+0x6a/0xf0 [ 65.314567][ C0] handle_softirqs+0x1d7/0x600 [ 65.314629][ C0] ? irqtime_account_irq+0xc4/0x240 [ 65.314658][ C0] __irq_exit_rcu+0x52/0xf0 [ 65.314679][ C0] irq_exit_rcu+0x9/0x10 [ 65.314698][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 65.314719][ C0] [ 65.314725][ C0] [ 65.314731][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 65.314752][ C0] RIP: 0010:console_emit_next_record+0x8a1/0xab0 [ 65.314781][ C0] Code: de 48 81 e6 00 02 00 00 31 ff e8 4a 89 19 00 48 81 e3 00 02 00 00 75 07 e8 7c 84 19 00 eb 06 e8 75 84 19 00 fb 0f b6 5c 24 17 <66> 43 c7 44 25 20 f8 f8 43 c6 44 25 22 f8 4f 89 74 25 10 66 43 c7 [ 65.314798][ C0] RSP: 0018:ffffc900001df800 EFLAGS: 00000293 [ 65.314815][ C0] RAX: ffffffff8157e79b RBX: 0000000000000001 RCX: ffff88810033e540 [ 65.314829][ C0] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 65.314841][ C0] RBP: ffffc900001df9f0 R08: 0000000000000003 R09: 0000000000000004 [ 65.314854][ C0] R10: dffffc0000000000 R11: fffff5200003bef0 R12: dffffc0000000000 [ 65.314869][ C0] R13: 1ffff9200003bf0c R14: f8f8f8f8f8f8f8f8 R15: ffffc900001dfa3f [ 65.314886][ C0] ? console_emit_next_record+0x89b/0xab0 [ 65.314917][ C0] ? info_print_prefix+0x360/0x360 [ 65.314948][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 65.314975][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 65.315003][ C0] ? __cfi_vprintk_store+0x10/0x10 [ 65.315024][ C0] ? kthread+0x281/0x320 [ 65.315046][ C0] console_unlock+0x246/0x560 [ 65.315068][ C0] ? down_trylock+0x52/0xb0 [ 65.315087][ C0] ? __cfi_console_unlock+0x10/0x10 [ 65.315112][ C0] vprintk_emit+0x14d/0x420 [ 65.315135][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 65.315157][ C0] ? __kasan_check_write+0x14/0x20 [ 65.315177][ C0] ? _raw_spin_trylock+0xb7/0x150 [ 65.315202][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 65.315229][ C0] vprintk_default+0x26/0x30 [ 65.315250][ C0] vprintk+0x7a/0x80 [ 65.315275][ C0] _printk+0xda/0x128 [ 65.315297][ C0] ? __cfi__printk+0x8/0x8 [ 65.315319][ C0] kauditd_hold_skb+0x1c1/0x210 [ 65.315355][ C0] ? __cfi_kauditd_send_multicast_skb+0x10/0x10 [ 65.315373][ C0] ? __cfi_kauditd_hold_skb+0x10/0x10 [ 65.315402][ C0] kauditd_send_queue+0x2b6/0x300 [ 65.315419][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 65.315446][ C0] ? __cfi_kauditd_hold_skb+0x10/0x10 [ 65.315476][ C0] ? __cfi_kauditd_send_multicast_skb+0x10/0x10 [ 65.315498][ C0] kauditd_thread+0x4dc/0x740 [ 65.315528][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 65.315554][ C0] ? __cfi_kauditd_thread+0x10/0x10 [ 65.315589][ C0] ? __cfi_autoremove_wake_function+0x10/0x10 [ 65.315620][ C0] ? __kasan_check_read+0x11/0x20 [ 65.315639][ C0] ? __kthread_parkme+0x142/0x180 [ 65.315659][ C0] kthread+0x281/0x320 [ 65.315678][ C0] ? __cfi_kauditd_thread+0x10/0x10 [ 65.315707][ C0] ? __cfi_kthread+0x10/0x10 [ 65.315729][ C0] ret_from_fork+0x1f/0x30 [ 65.315757][ C0] [ 65.315770][ C0] Modules linked in: [ 65.315786][ C0] ---[ end trace 0000000000000000 ]--- [ 65.315795][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 65.315821][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 18 47 29 00 4c 89 ff e8 10 31 b8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 cc 74 6e 00 49 8b 7d 00 e8 a3 2c [ 65.315837][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 65.315853][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88810033e540 [ 65.315867][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 65.315881][ C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: fffffffffffffffb [ 65.315895][ C0] R10: dffffc0000000000 R11: ffffed1022e32139 R12: dffffc0000000000 [ 65.315910][ C0] R13: 0000000000000000 R14: ffff8881171909c8 R15: 0000000000000008 [ 65.315923][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 65.315940][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.315954][ C0] CR2: 000055bb37f62a68 CR3: 0000000120d9c000 CR4: 00000000003506b0 [ 65.315973][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.315984][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.315998][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 65.316550][ C0] Kernel Offset: disabled [ 65.958933][ C0] Rebooting in 86400 seconds..