last executing test programs: 10m17.646320848s ago: executing program 32 (id=2743): mount_setattr(0xffffffffffffffff, 0x0, 0x9000, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100, 0x1}) syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x4, &(0x7f0000000100)={[{@shortname_winnt}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@utf8}, {@utf8no}, {@fat=@gid}, {@shortname_mixed}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}]}, 0x1, 0x21d, &(0x7f00000005c0)="$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") setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000880)=0x7) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000002d40)={0x6, 0x1}, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000900)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r5, &(0x7f00000009c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000a40)={0x8, 0x0, &(0x7f0000000a80)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000ac0)={0x4c, 0x0, &(0x7f0000000b00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000bc0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace\x00', 0x1da) 10m17.383240364s ago: executing program 33 (id=2746): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002800)={r1, &(0x7f0000000100)="970e414d85eb0b1fa47a1eb0a049fa766c", 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f00000027c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002840)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000003380)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000033c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000003440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000034c0), 0x318, 0x0) recvmmsg(r3, &(0x7f0000003500), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000003540)=0x2) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000003580)='net/netlink\x00') preadv(r5, 0x0, 0x0, 0x162, 0xb) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x40002162, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) unshare(0x400) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000002780)=0x3) 10m15.710407531s ago: executing program 34 (id=2754): mount_setattr(0xffffffffffffffff, 0x0, 0x9000, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100, 0x1}) syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x4, &(0x7f0000000100)={[{@shortname_winnt}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@utf8}, {@utf8no}, {@fat=@gid}, {@shortname_mixed}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}]}, 0x1, 0x21d, &(0x7f00000005c0)="$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") setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000880)=0x7) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000002d40)={0x6, 0x1}, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000900)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r5, &(0x7f00000009c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000a40)={0x8, 0x0, &(0x7f0000000a80)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000ac0)={0x4c, 0x0, &(0x7f0000000b00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) 9m59.086786493s ago: executing program 35 (id=2822): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) read$msr(r1, &(0x7f00000040c0)=""/102400, 0x19000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000280)) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000080)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000380)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r5, &(0x7f00000003c0)=[{{&(0x7f0000000400)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x24000084) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000440)='lp', 0x2) sendmmsg$inet(r5, 0x0, 0x0, 0x2090) writev(r5, &(0x7f0000000540)=[{&(0x7f0000000580)="fb7ef3f08d8f0d64c4636b96073c171a2926f00a2baa2c2752e6ba348df7c6cb64a0a5dbc368e6e57135b7c7f20a1e4ca2d0c293b9df5480df71d6dcdd9beb4fa3247b3b7e38346fa0436ee2d9c57c41af42a71188cbd6b252eb449052ef2d76f3c0ab72b88db15921409f4efe9fe517430ec288238072967546e6a834ac62fec1df765d0147d8d2993dceb59f5b66b848a8f1d09a0d8108e7ef271311ea18df574e3e0b9242dd27f45258cb3bb762582f5737efdc15dabfa031673c84696ab886bdd35bb35a5346cf472e001e71c5384fc353b3181775acb185307d6f762e564b7fd4f06f875fc919c3ebb015f673a3cb380b03abbbfe30c781bd8b17292a1e2b748107e60e568c1e1f86a0cf01e30772b6b2146cd4d1f2e9fc7b5bcefded909fe7bf723490ced2d106004e3a0cd7b9c3519b05741751325fe8538085cc1f902fa544dcc929f10469fe39c3cf61f786254a373316923186fa08ef3c8917d4c2df0d3e41c32b6948177e71b23c3a9eb9c30db62011da02d48da9318c20a438f6ba2962ce066b8793e16831c350a379f8c54c5de2eab0b0117e3dc30f5c27c87b2eb33b43215bdcabb7185b1ca317dc967cfdfdcbf92a4e196bcf0d6ba1cea19dd296b4de3625a95ea0ee82efc84379be3125e84d8183ebce42f98654f44f86d49b13529b6cec5acbe93af52987080df30eed17685881b67777877226704091bd1f07b76c3a", 0x205}], 0x1) splice(r2, 0x0, r4, 0x0, 0xffffffffffffffff, 0x0) 9m50.477958623s ago: executing program 36 (id=2857): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000700)={0x1f, @none, 0x3}, 0xfffffffffffffdf0) connect$bt_rfcomm(r0, &(0x7f00000009c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2}, 0xa) 9m36.931007986s ago: executing program 37 (id=2911): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000080)=ANY=[], 0x1, 0x1520, &(0x7f0000000240)="$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") creat(&(0x7f0000001780)='./bus\x00', 0x182) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000002b40)={0xa, 0x4e22, 0xa, @loopback, 0x800002}, 0x1c) connect$inet6(r0, &(0x7f0000002b80)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002c00)={0x0}, 0x1, 0x0, 0x0, 0x400c084}, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000001800)='./bus\x00', 0x0, 0x1084, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x8840, 0xa2) r2 = openat(0xffffffffffffff9c, &(0x7f0000001880)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f00000018c0)="d4", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000002b00)='./binderfs/features/extended_error\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000001900)='.\x00', 0x0, 0x80) getdents64(r3, &(0x7f0000001940)=""/4096, 0x1000) 9m35.821424767s ago: executing program 38 (id=2917): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000080)=ANY=[], 0x1, 0x1520, &(0x7f0000000240)="$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") creat(&(0x7f0000001780)='./bus\x00', 0x182) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000001800)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000001880)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f00000018c0)="d4", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000002b00)='./binderfs/features/extended_error\x00', 0x0, 0x0) 9m34.865437063s ago: executing program 39 (id=2920): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000540), 0x4000087, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x4e24, 0x2, @local, 0x2}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}, 0x80) 9m19.828203345s ago: executing program 40 (id=2978): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r0, &(0x7f0000000080)='/', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x6}, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1000000009060108"], 0x14}}, 0x20008844) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f0000000280), 0x7fa) symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') syz_usb_connect$uac3(0x3, 0xa4, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0xf7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x2e, 0x1003}, [@output_terminal={0x13, 0x24, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0x4, 0x8, 0x4, 0xa}, @extension_unit={0x11, 0x24, 0xa, 0x6, 0x1, [0x0, 0x3, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0x8, 0x5, 0xf8, {0xa, 0x25, 0x25, 0x9, 0x7, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x2, 0x23, {0xa, 0x25, 0x25, 0xc, 0x2, 0x4}}}}}}}}]}}, 0x0) 9m9.589967308s ago: executing program 41 (id=3024): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000080)=ANY=[], 0x1, 0x1520, &(0x7f0000000240)="$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") creat(&(0x7f0000001780)='./bus\x00', 0x182) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000002b40)={0xa, 0x4e22, 0xa, @loopback, 0x800002}, 0x1c) connect$inet6(r0, &(0x7f0000002b80)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002c00)={0x0}, 0x1, 0x0, 0x0, 0x400c084}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002a00)='|', 0x1}], 0x1, 0x0, 0x0, 0x4044804}}], 0x1, 0x24004800) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r2, &(0x7f0000000100), 0x0, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x8840, 0xa2) r4 = openat(0xffffffffffffff9c, &(0x7f0000001880)='./bus\x00', 0x1c1002, 0x12) write(r4, &(0x7f00000018c0)="d4", 0x1) sendfile(r4, r3, 0x0, 0x3ffff) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000001900)='.\x00', 0x0, 0x80) getdents64(r5, &(0x7f0000001940)=""/4096, 0x1000) 9m7.502748507s ago: executing program 42 (id=3036): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1200000001000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0000000000e1cb4468870d27d2da71f6b04c0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) unshare(0x26000700) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4006}, 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x35) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f0000000440)={0x0, 0x14, &(0x7f00000004c0)=[{&(0x7f0000000500)=' ', 0x100120}], 0x1}, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000080)=0xbfe, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ba22f5b41c78240d9cec80a8520568e4e614f99a57bdd5ab7915d9cf762cf5260a43cab64e"], 0x0, 0x89, 0x0, 0x3}, 0x28) 9m3.909749896s ago: executing program 43 (id=3058): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x42, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000600)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) r5 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setsig(0x4203, r5, 0xdf80, &(0x7f0000000780)={0x0, 0x3, 0xd}) socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000000f80)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000740)="600fcd0192fc3650d3da757f89b4069921fd76b9469a7f36", 0x18}, {&(0x7f0000000ec0)="a83396f7713b0dcc8be305057c2903430f833e803739891ee198789c97e7d1ae4d9e397e2ef1fd6ae05e062e36c6d595a9bee4756e0384e10f8d3a142e073f3127992ef0f3bc93c64f7d46c7266196d426d0b62688a373a8996c77b184db46906b1eaef5ddbb35dbdb9004ae58d1191f6bd9", 0x72}], 0x2, 0x0, 0x0, 0x404c810}}], 0x1, 0x40cc0a1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 8m36.820934622s ago: executing program 44 (id=3178): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000080)=ANY=[], 0x1, 0x1520, &(0x7f0000000240)="$eJzs3AuYjtX2APC19t7vGJP4muQy7L3XyxeDbZIkl4REkiRJkltC0iRJQmIISRqSkOskuQwhuTUmjfv9EkLS5EiTJCEhYf8fnfo7nc6pc55zzt//ObN+z/M+s9e839rf2t+a+d7LPPN93WNE3eb1ajclIviX4J+/pABALAAMAYACABAAQKX4SvGAoyGvxJR/7UnYv9d96Ze7AnY5cf9zN+5/7sb9z924/7kb9z934/7nbtz/3I37z1hutm1W0at4y73bP3P/P+73dv7h/X/g+///7/Dx/79ITvmJn28of03PfyKF+5+7cf9zN+5/7sb9z924/7kb9/+/gce/uysAqPU7mdz/3I37z1hudrnvP/N2ebfL/fPHGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYyx3OOMvUQDwy/hy18UYY4wxxhhjjLF/H5/nL6OYv9qb//+2GMYYY4wxxhhjjP2HIAiQoCCAGMgDsZAX4uAKyAdXQn4oABG4CuLhaigI10AhKAxFoCgkQDEoDhoMWCAIoQSUhChcC6WgNCRCGSgL5cBBeUiC66ACXA8V4QaoBDdCZbgJqkBVqAbV4WaoAbdATagFteFWqAO3QV2oB7dDfbgDGsCd0BDugkZvL/Ue7oEmcC80hfugGdwPzeEBaAEPQktoBa2hDbT9vXy4Gxr/zfxnoQ88B32hH6RAfxgAz8NAGASD4QUYAi/CUHgJhsHLkArDYQS8AiPhVRgFr8FoGANj4XUYB+NhAkyESTAZ0uANmAJvwlR4C6bBdJgBMyEdZsFseBvmwFyYB+/AfHgXFsBCWASLYQm8BxmwFDLhfVgGH0AWLIcVsBJWwWpYA2thHayHDbARNsFm2AJbYRt8CNthB+yEj2AX7IY98DHshU9gH3wK2fDZX+cX+P3803+V3xMBAQUKVKgwBmMwFmMxDuMwH+bD/JgfIxjBeIzHglgQC2EhLIJFMAETsDgWR4MGCQlLYAmMYhRLYSlMxEQsi2XRocMkTMIKeD1WxIpYCSthZayMVbAqVsXqWB1rYA2siTWxNtbGOlgH62JdvB1vxzuwATbAhtgQG2EjbIyNsQk2wabYFJthM2yOzbEFtsCW2BJbY2tsi22xHbbD9tgeO2JH7ISdsDN2xmRMxi7YBbsiYjfsht2xO/bAHtgTe2EvfBafxefwOeyHdUR/HIADcCAOxMH4Ar6AL+JQfAlfwpcxFYfjCHwFX8FXcRSewtE4BsfiWKwhxuMEnIgkJmMapuEUnIJTcSpOw+k4HWdiOs7C2Tgb5+BcnIvv4Hx8F9/FhbgQF+MSXIIZuBQzMROX4WnMwuW4AlfiKlyNq3AtrsO1uAE34gbcjJtxK27FD/FD3IE7MA9+hLtxN36MH+Mn+AmmYjZm437cjwfwAB7Eg5iDOXgID+FhPIxH8AgexaN4DI/jCTyOJ/EknsLTeAbP4Fk8i+fw6YQvm+0usz4VxEVKKBEjYkSsiBVxIk7kE/lEfpFfRERExIt4UVAUFIVEIVFEFBEJIkEUF8WFEUaQCEUJUUJERVSUEqVEokgUZUVZ4YQTSSJJVBAVREVRUVQSN4rK4iZRRVQVHVx1UV3UEB1dTVFL1Ba1RR1xm6gr6ol6or6oLxqIBqKhaCgaiUaisbhHNBH9cTDeJy52prkYji3ECGwpWonWoo14FR8S7cQobC86iI7iETEGR2Nn0c4li8dFFzEBu4onxUR8SnQXk7GHeEb0FL1Eb/Gs6CPau76/3O4UM3GgGCQGixfEHLxNXOxYXfGySBXDxQjxiliMr4pR4jUxWowRY8XrYpwYLyaIiWKSmCzSxBtiinhTTBVviWliupghZop0MUvMFm+LOWKumCfeEfPFu2KBWCgWicViiXhPZIilIlO8L5aJD0SWWC5WiJVilVgt1oi1Yp1YLzaIjWKT2Cy2iK1im/hQbBc7xE7xkdgldos94mOxV3wi9olPRbb4TOwXfxIHxOfioPhC5IgvxSHxlTgsvhZHxDfiqPhWHBPHxQnxnTgpvo+cwl/W+6M4J86LC8ILkCiFlFLJQMbIPDJW5pVx8goJ8kqZXxaQEXmVjJdXy4LyGllIFpZFZFGZIIvJ4lJLI60kGcoSsqSMymtlKVlaJsoysqwsJ50sL5PkdbKCvF5WlDfISvJGWVneJKvIqrKarC5vljXkLbKmrCVry1tlHXmbrCvrydtlfXmHbCDvlA3lXbKRvFs2lvfIJvJe2VTeJ5vJ+2Vz+YBsIR+ULWUr2Vq2kW3lQ7KdfFi2lx1kR/mI7CQflZ3lYzJZPi67yCdkV/mk7Cafkt3l07KHfEb2lL1kb3leXpBe9pX9ZIrsLwfI5+VAOUgOlsHPL9BLcph8WabK4XKEfEWOlK/KUfI1OVqOkWPl63KcHC8nyIlykpws0+Qbcop8U06Vb8lpcrqcIWfKdDlLDpZD5ItyqJz3D+S/+VN+zK/yh/307FvlNvmh3C53yJ3yI7lL7pZ75B65V+6V++Q+mS2z5X65Xx6QB+RBeVDmyBx5SB6Sh+VheUQekUeblpbH5PFyIL+TJ+X38pQ8LU/LH+RZeVae+/k1AIVKKKmUClSMyqNiVV4Vp65Q+dSVKr8qoCLqKhWvrlYF1TWqkCqsiqiiKkEVU8WVVkZZRSpUJVRJFVXXqlKqtEpUZVRZVU45VV4lqev+5fw/qq+taqvaqXaqvWqvOqqOqpPqpDqrzipZJasuqovqqrqqbqqb6q66qx6qh+qpeqreqrfqo/qovqqvSlEpaoB6Xg1Ug9Rg9YIaol5UQ9VQNUwNU6kqVY1QI9RINVKNUqPUaDVajVVj1Tg1Tk1QE9QkNUmlqTQ1RU1RU9VUNU1NUzPUDJWu0tVsNVvNUXPUPDVPzVfz1QK1QC1Si9QStURlqAyVqTLVMrVMZanlarlaqVaq1Wq1WqvWqvVqvdqoNqrNarPKUtvUNrVdbVc71U61S+1Se9QetVftVfvUPpWtstV+tV8dUAfUQXVQ5agcdUgdUofVYXVEHVFH1VF1TB1TJ9QJdVKdVKfUKXVGnVFn1Vl1Tp1TF9SFi6d9gQhEoAIVxAQxQWwQG8QFcUG+IF+QP8gfRIJIEB/EBwWDa4JCQeGgSFA0SAiKBSmgAxPYgIIwKBGUDKLBtUGpoHSQGJQJygblAheUD5KC64IKwfVBxeCGoFJwY1A5uCmoElQNqgXVg5uDGsEtQc2gVlA7uDWoE9wW1A3qBbcH9YM7ggbBnUHD4K6gUXB30Di4J2gS3Bs0De4LmgX3B82DB4IWwYNBy6BV0DpoE7T9t87v/anCD7u+up9O0f31AP28HqgH6cH6BT1Ev6iH6pf0MP2yTtXD9Qj9ih6pX9Wj9Gt6tB6jx+rX9Tg9Xk/QE/UkPVmn6Tf0FP2mnqrf0tP0dD1Dz9Tpepaerd/Wc/RcPU+/o+frd/UCvVAv0ov1Ev2eztBLdaZ+Xy/TH+gsvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1Nv2h3q536J36I71L79Z79Md6r/5E79Of6mz9md6v/6QP6M/1Qf2FztFf6kP6K31Yf62P6G/0Uf2tPqaP6xP6O31Sf69P6dP6jP5Bn9U/6nP6vL6g/cWT+4uHd6OMMjEmxsSaWBNn4kw+k8/kN/lNxERMvIk3BU3Bi2+YpogpYhJMgiluipuLyJApYUqYqImaUqaUSTSJpqwpa5xxJskkmQqmgqloKppKppKpbCqbKqaKqWaqmZvNzeYWc4upZWqZW82t5jZzm6ln6pn6pr5pYBqYhqahaWQamcamsWlimpimpqlpZpqZ5qa5aWFamJampWltWpu2pq1pZ9qZ9qa96Wg6mk6mk+lsOptkk2y6mC6mq+lqupluprvpbnqYHqan6Wl6m96mj+lj+pq+JsWkmAFmgBloBprBZrAZYoaYoWaoGWaGmVSTakaYEWakGWlGmVFmtBljxprXzTgz3kwwE80kM9mkmTQzxUwxU81UM81MMzPMDJNu0s1sM9vMMXPMPDPPzDfzzQKzwCwyi8wSs8RkmAyTaTLNMrPMZJkss8KsMKvMKrPGrDHrzDqzwWwwm8wms8VsMdvMNrPdbDc7zU6zy+wye8wes9fsNfvMPpNtss1+s98cMAfMQXPQ5Jgcc8gcMofNYXPEHDFHzVFzzBwzJ8wJc9KcNKfMKXPGnDFnzY/mnDlvLhhvYq2AOHuFzWevtPltARtr89qL8cUj5MW4iC1qE2wxW9xqW8gW/lVsrLWJtowta8tZZ8vbJHvdb+IqtqqtZqvbm20Ne4ut+Zu4vr3DNrB32ob2LlvP3v6ruJG92za2D9gm9kHb1LayzWwb2zx4wLawD9qWtpVtbdvYTvZR29k+ZpPt47aLfeI3cYZdatfZ9XaD3Wj32k/sGfuDPWy/tmftj7av7WeH2BftUPuSHWZftql2+G/isfZ1O86OtxPsRDvJTv5NPMPOtOl2lp1t37Zz7NzfxEvse3a+zbQL7EK7yC7+Kb5YU6Z93y6zH9gsu9yusCvtKrvarrFr/7fWlXaz3WK32j32Y7vd7rA77Ud2l939U3xxHfvspzbbfmYP2a/sAfu5PWiP2Bz75U/xxfUdsd/Yo/Zbe8wetyfsd/ak/d6esqd/Wv/FtX9nz9sL1lsgJEGSFAUUQ3kolvJSHF1B+ehKyk8FKEJXUTxdTQXpGipEhakIFaUEKkbFSZMhS0QhlaCSFKVrqRSVpkQqQ2WpHDkqT0l0HVWg66ki3UCV6EaqTDdRFapK1ag63Uw16BaqSbWoNt1KdbynulSPbqf6dAc1oDupId1Fjehuakz3UBO6l5rSfdSM7qfm9AC1oAepJbWi1tSG2tJD1I4epvbUgTrSI9SJHqXO9Bgl0+PUhZ6grvQkdaOnqDs9TT3oGepJvag3PUt96DnqS/0ohfrTAHqeBtIgGkwv0BB6kYbSSzSMXqZUGk4j6BUaSa/SKHqNRtMYGkuv0zgaTxNoIk2iyZRGb9AUepOm0ls0jabTDJpJ6TSLZtPbNIfm0jx6h+bTu7SAFtIiWkxL6D3KoKWUSe/TMvqAsmg5raCVtIpW0xpaS+toPW2gjbSJNtMW2krb6EPaTjtoJ31Eu2g37aGPaS99QvvoU8qmz2g//YkO0Od0kL6gHPqSDtFXdJi+piP0DR2lb+kYHacT9B2dpO/pFJ2mM/QDnaUf6RydpwvkCUIMRShDFQZhTJgnjA3zhnHhFWG+8Mowf1ggjIRXhfHh1WHB8JqwUFg4LBIWDRPCYmHxUIcmtCGFYVgiLBlGw2vDUmHpMDEsE5YNy4UuLB8mhdeFFcLrw4rhDWGl8MawcnhTCClVwwfuqh7eHNYIbwlrhrXC2uGtYZ3wtrBuWC+8Pawf3hE2CO8MG4Z3hRXDu8PG4T1hk/DesGl4X9gsvD9sHj4QtggfDFuGrcLWYZuwbfhQ2C58OGwfdgg7ho+EncJHw87hY2Fy+HjYJXziD/enhP3DAeHz4fOh93eKny8LohnRpdHM6PvRZdEPolnR5dEV0ZXRVdHV0TXRtdFVALAhujG6Kbo5uiW6Nep9vTzg0AknnXKBi3F5XKzL6+LcFS6fu9LldwVcxF3l4t3VrqC7xhVyhV0RV9QluGKuuNPOOOvIha6EK+mi7lpXypV2ia6MK+vKOefKuyTXxrV1bV0797Br7zq4ju4R94h71D3qHnOPucddF/eE6+qedN3cU667e9o97Z5xPV0v19s96/q451xf18+luBQ3wA1wA91AN9gNdkPcEDfUDXXD3DCX6lLdCDfCjXQj3Sg3yo12o91YN9aNc+PcBDfBTXKTXJpLc1PcFDfVTXXT3DQ3w81w6S7dzXaz3Rw3x81z89z8xPlugVvgFrlFbolb4jJchst0mW6ZW+ayXJZb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+62u51up9vldrk9bo/b6/a6fW6fy3bZbr/b7w64A+6g+8LluC/dIfeVO+y+dkfcN+6o+9Ydc8fdCfedO+m+d6fcaXfG/eDOuh/dOXfeXXDepUXeiEyJvBmZGnkrMi0yPTIjMjOSHpkVmR15OzInMjcyL/JOZH7k3ciCyMLIosjiyJLIe5GMyNJIZuT9yLLIB5GsyPLIisjKyKrI6oj3xbaHvoQv6aP+Wl/Kl/aJvowv68t558v7JH+dr+Cv9xX9Db6Sv9FX9jf5Kr6qr+Yf9C19K9/at/Ft/UO+nX/Yt/cdfEf/iO/kH/Wd/WM+2T/uu/gnfFf/pO/mn/Ld/dO+h3/G9/S9fG//rO/jn/N9fT+f4vv7Af55P9AP8oP9C36If9EP9S/5Yf5ln+qH+xH+FT/Sv+pH+df8aD/Gj/Wv+3F+vJ/gJ/pJfrJP82/4Kf5NP9W/5af56X6Gn+nT/Sw/27/t5/i5fp5/x8/37/oFfqFf5Bf7Jf49n+GX+kz/vl/mP/BZfrlf4Vf6VX61X+PX+nV+vd/gN/pNfrPf4rf6bf5Dv93v8Dv9R36X3+33+I/9Xv+J3+c/9dn+M7/f/8kf8J/7g/4Ln+O/9If8V/6w/9of8d/4o/5bf8wf9yf8d/6k/96f8qf9Gf+DP+t/9Of8eX+B/2eNMcYYY+wfIv9gf/+/8b0YAPjlkmgAAFy5o2jOX8+5qdCfx4NEQqcIADzer8d9v2x16qSkpPz82CwJQcmFABD59fy/xMuhIzwKydABKvzN+gaJXmfpD+aP3ggQ9xc5sXApvjT/9X9n/oceGZtROTwT/zvzLwRILHkpJy9cii/NX/HvzF+43R/Un/fzNID2f5GTDy7Fl+ZPgofhCUj+1SMZY4wxxhhjjLE/GySqdfv715/yf6/PE9SlnDxwKf6j63PGGGOMMcYYY4xdfk/16v3YQ8nJHbr9YwP8+e/S/1wWD3jw3zPI+/Ovzv+Xev5Dg8v5rsQYY4wxxhj7T7h00n+5K2GMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxnKv/4uPE7vca2SMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYut/8JAAD//4cELAw=") creat(&(0x7f0000001780)='./bus\x00', 0x182) mount(0x0, &(0x7f0000001800)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000001880)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f00000018c0)="d4", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000002b00)='./binderfs/features/extended_error\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001900)='.\x00', 0x0, 0x80) getdents64(r2, &(0x7f0000001940)=""/4096, 0x1000) 7m50.20034931s ago: executing program 45 (id=3391): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000540), 0x4000087, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) io_setup(0x3, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000580)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x4e24, 0x2, @local, 0x2}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000680), 0x20a02, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}], 0xa0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xf25, 0x0, 0x0, 0x1000, 0xfffffff5, r6, 0x0, 0x121}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffa, 0x2f6, 0x0, r5}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2453, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c83, 0x100, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb3d0, 0x0, 0x40000003, 0xb9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7m46.652516075s ago: executing program 46 (id=3409): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x25) socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) pselect6(0x40, &(0x7f0000002280)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800}, 0x0, 0x0, 0x0, 0x0) 7m44.79501451s ago: executing program 47 (id=3426): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000002c0)={0x42, 0xfffffffc, 0x1}, 0x10) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x30, 0x5f, 0x2e, 0x0, 0x2e, 0x61, 0x1e]}}, &(0x7f00000004c0)=""/4096, 0x21, 0x1000, 0x1}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000014c0)=0x2) request_key(&(0x7f0000001500)='asymmetric\x00', &(0x7f0000001540)={'syz', 0x1}, &(0x7f0000001580)='q\xa9', 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYRESHEX=r4, @ANYRES64=0x0], 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000001640)) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000001680)={'bond_slave_0\x00', @random="013301300108"}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000016c0)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x10, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 7m42.779004222s ago: executing program 48 (id=3441): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000004c0)={0x0, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x8000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000500)={0x2, 0x25000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m24.201623088s ago: executing program 49 (id=3565): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) read$msr(r1, &(0x7f00000040c0)=""/102400, 0x19000) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000280)) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000300)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000080)=0x79, 0x4) 7m13.125570975s ago: executing program 50 (id=3643): socket$inet(0x2, 0xa, 0x0) syz_open_procfs$pagemap(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x62c40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) inotify_init1(0x0) pipe(&(0x7f0000000540)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x3, &(0x7f00000005c0)={0x0, 0x4}, &(0x7f0000000640)=0x0, 0x0, 0x0) syz_io_uring_modify_offsets$flags(r0, 0x0, 0x68, 0x1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000740)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000780)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 7m4.052001922s ago: executing program 51 (id=3748): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x522, &(0x7f00000003c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000e80)='./file1\x00', 0x143042, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000280), 0xfe, 0x259, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./file1\x00', 0x101e42, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x42, 0x0) write$selinux_load(r0, &(0x7f0000000c80)=ANY=[], 0x10) pwrite64(r1, &(0x7f0000000cc0)='\f', 0x1, 0x8000c61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./file1\x00', 0x101042, 0x15) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) read$FUSE(r2, &(0x7f0000000f80)={0x2020}, 0xfffffeb1) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x9000) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000002c0)={0x4, {{0xa, 0x4e23, 0xebd5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}}, 0x88) fallocate(0xffffffffffffffff, 0x8, 0xe, 0x8800c00) 7m2.412724745s ago: executing program 52 (id=3771): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000540), 0x4000087, 0x2, 0x0) io_setup(0x3, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000580)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000680), 0x20a02, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xf25, 0x0, 0x0, 0x1000, 0xfffffff5, r5, 0x0, 0x121}}}, &(0x7f0000000300)=0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffa, 0x2f6, 0x0, r4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2453, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c83, 0x100, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb3d0, 0x0, 0x40000003, 0xb9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 6m57.030334643s ago: executing program 53 (id=3834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m29.030657681s ago: executing program 54 (id=4099): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) read$msr(r1, &(0x7f00000040c0)=""/102400, 0x19000) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000280)) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000080)=0x79, 0x4) sendmmsg$inet(r3, &(0x7f00000003c0)=[{{&(0x7f0000000400)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x24000084) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000440)='lp', 0x2) sendmmsg$inet(r3, 0x0, 0x0, 0x2090) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000580)="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", 0x205}], 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x5, 0x19fd, 0x84, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000340), 0xffffff98) 6m27.442246479s ago: executing program 55 (id=4111): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x60000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x1) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x4008af04, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 6m25.479958515s ago: executing program 56 (id=4132): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x400000bce) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000280)) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000080)=0x79, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000440)='lp', 0x2) sendmmsg$inet(r4, 0x0, 0x0, 0x2090) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000580)="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", 0x205}], 0x1) splice(r1, 0x0, r3, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r3, &(0x7f0000000340), 0xffffff98) 6m24.0478695s ago: executing program 57 (id=4156): gettid() r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x3000014, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x2, 0xba, &(0x7f0000000380)=""/186, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000600), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000680), 0x10106, 0x2, 0x0) setfsgid(0xee00) keyctl$read(0xb, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000740)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x1ff) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000140)=0x6) 6m21.894985628s ago: executing program 58 (id=4173): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x42, 0x0) close(r1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000540)=ANY=[], 0xffdd) 6m19.857309535s ago: executing program 59 (id=4187): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, 0x0, 0x138) 6m14.46128761s ago: executing program 60 (id=4222): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000004c0)={0x0, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000500)={0x2, 0x25000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000540)={0x1ff8, 0x2000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m12.855518013s ago: executing program 61 (id=4234): lgetxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000780), 0x318, 0x0) recvmmsg(r0, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x100000000e2) syz_io_uring_setup(0x341c, 0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) r2 = fsopen(&(0x7f0000000080)='binder\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='rootcontext', &(0x7f0000000140)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7fff7ffc}, {0x9, 0x8, 0x9f, 0x3}]}) syz_emit_ethernet(0x6a, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c200000e0180c200000e08004503005cffff0000002f907800"], 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f00000000c0)={0x200000000000001}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000340)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmmsg$inet6(r3, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=' ', 0xfdef}], 0x1}}], 0x1, 0x4000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) 5m59.362698929s ago: executing program 8 (id=4352): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) writev(r0, &(0x7f00000033c0)=[{&(0x7f0000000380)="0886ba062dffa641154c62c7dafcc7eec5897038b9d51076b6cb2c924f48f1c99bfa7bb66609c7b0f9c50431c9a8cbb8bfccf654d803b0f2095ae8cf6cb0c6097ba865e6c7d8cce1b7bef10aadb0d77a25edf8b6b2dc17b70e77c7939ffd5b6e877c29516d5e0fbf77a9c19709cf585697ea18715e6ff323a60ff0c083ac6132e338d565b07139191730134d0cd078944d2df59f95c104ee1444dfd35ccf8231636ad60fbbd1718e1221e855305c02d5835d55c3100e0410709b14bcd8e25162ba587859d1e84d129347c1f297ab31eb57", 0xd1}, {&(0x7f0000000480)="3f0a365cc37e235b18a9e68d2ec062b8e7b611ca0cadff6ad7bb9aacd2fc43621b4ffe47374b932acfc3fc643891ce00f74e9d6ee83c1b6eb3d77ff58f4fd74ac59374acbf3bf69f3af608b71ed30f479bead25f14e8f2644c44df885e7adff76d87bbdd0e6d837a6c1fd749854337d7f0cf434a74aa38f1cc3726b349c97b73a4c4b6d58aef1f0c8a880edbaaaddeeec553af72aac2aedd331da1c84ff6b019a05e48e54b9dfe4d83934a1a4324b74cfdf36cfa5d2c908c", 0xb8}, {&(0x7f0000002380)="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", 0xe74}], 0x3) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffffa5}, &(0x7f0000000000)=0x24) 5m59.362219478s ago: executing program 8 (id=4354): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x24) open$dir(&(0x7f0000000680)='./mnt\x00', 0x0, 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, 0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe702, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x542b, 0x2, 0x4, 0x1bf, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x2, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 5m59.324784712s ago: executing program 64 (id=4353): memfd_create(&(0x7f0000000540)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) memfd_create(&(0x7f0000000940)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1a\xc1\xf5k\xb8:\xa4\x8af\xa7\xf1\xc3\xc3\xdce\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2JOp\xa9\xf3\xe2\"b;(\xb5\xe1jS\xd6\x91%||\xa0\x89z\xadT\x89\xbf;:\x99\x1e\xac`\xc3\xcf\xd3^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\x02\xe5\x9f5\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\x95g\a\xcc\x19b\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\b\xf2u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61\xda\xd6P\x13\xd0\x88gg\xbe\xff\xb0\xd8\xec\xd5\xc0\xb0\xa7\xf7m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xae\x14\xb0\x9f_\xbdxW\x82u\xb1\xf3\xf1\x922\x17c{-\x90U\xd5\xee\xa7\xc0\xfe\x05\x9b\x87M\x92\x84\xb9\xb2<\xd1\xea\x95:\xd6\xbfM\xc7AW\x02]d\xc2\xef\x18O.\xb9\xa6\x80\x8e\x91\x003\xac\x9a\xdb\x06\nC\x8d\x12\xd3\xc1\xf2\xc8\xd7=\x82\x8d7\x1c\x80\xc4\x81<\xbdK\x18?A\v\xbaz\x95\xb6\xcb\xbeY', 0xa) ioctl$FS_IOC_GETVERSION(r1, 0xff01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) syz_open_dev$loop(&(0x7f0000000080), 0x2, 0x281303) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_usb_connect(0x2, 0xc7, &(0x7f0000000480)=ANY=[], 0x0) socket$inet(0x2, 0x2, 0x1) socket(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r4, r3, &(0x7f0000000000)={0x0, 0xbd, 0x0, 0x3, 0x306}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x80000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe80, 0x800, 0x1, 0x26d, 0x0, r4}}], 0x1, 0x0, 0x0) 5m58.84750491s ago: executing program 8 (id=4356): r0 = socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m58.772094048s ago: executing program 8 (id=4358): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000080)=ANY=[], 0x1, 0x1520, &(0x7f0000000240)="$eJzs3AuYjtX2APC19t7vGJP4muQy7L3XyxeDbZIkl4REkiRJkltC0iRJQmIISRqSkOskuQwhuTUmjfv9EkLS5EiTJCEhYf8fnfo7nc6pc55zzt//ObN+z/M+s9e839rf2t+a+d7LPPN93WNE3eb1ajclIviX4J+/pABALAAMAYACABAAQKX4SvGAoyGvxJR/7UnYv9d96Ze7AnY5cf9zN+5/7sb9z924/7kb9z934/7nbtz/3I37z1hutm1W0at4y73bP3P/P+73dv7h/X/g+///7/Dx/79ITvmJn28of03PfyKF+5+7cf9zN+5/7sb9z924/7kb9/+/gce/uysAqPU7mdz/3I37z1hudrnvP/N2ebfL/fPHGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYyx3OOMvUQDwy/hy18UYY4wxxhhjjLF/H5/nL6OYv9qb//+2GMYYY4wxxhhjjP2HIAiQoCCAGMgDsZAX4uAKyAdXQn4oABG4CuLhaigI10AhKAxFoCgkQDEoDhoMWCAIoQSUhChcC6WgNCRCGSgL5cBBeUiC66ACXA8V4QaoBDdCZbgJqkBVqAbV4WaoAbdATagFteFWqAO3QV2oB7dDfbgDGsCd0BDugkZvL/Ue7oEmcC80hfugGdwPzeEBaAEPQktoBa2hDbT9vXy4Gxr/zfxnoQ88B32hH6RAfxgAz8NAGASD4QUYAi/CUHgJhsHLkArDYQS8AiPhVRgFr8FoGANj4XUYB+NhAkyESTAZ0uANmAJvwlR4C6bBdJgBMyEdZsFseBvmwFyYB+/AfHgXFsBCWASLYQm8BxmwFDLhfVgGH0AWLIcVsBJWwWpYA2thHayHDbARNsFm2AJbYRt8CNthB+yEj2AX7IY98DHshU9gH3wK2fDZX+cX+P3803+V3xMBAQUKVKgwBmMwFmMxDuMwH+bD/JgfIxjBeIzHglgQC2EhLIJFMAETsDgWR4MGCQlLYAmMYhRLYSlMxEQsi2XRocMkTMIKeD1WxIpYCSthZayMVbAqVsXqWB1rYA2siTWxNtbGOlgH62JdvB1vxzuwATbAhtgQG2EjbIyNsQk2wabYFJthM2yOzbEFtsCW2BJbY2tsi22xHbbD9tgeO2JH7ISdsDN2xmRMxi7YBbsiYjfsht2xO/bAHtgTe2EvfBafxefwOeyHdUR/HIADcCAOxMH4Ar6AL+JQfAlfwpcxFYfjCHwFX8FXcRSewtE4BsfiWKwhxuMEnIgkJmMapuEUnIJTcSpOw+k4HWdiOs7C2Tgb5+BcnIvv4Hx8F9/FhbgQF+MSXIIZuBQzMROX4WnMwuW4AlfiKlyNq3AtrsO1uAE34gbcjJtxK27FD/FD3IE7MA9+hLtxN36MH+Mn+AmmYjZm437cjwfwAB7Eg5iDOXgID+FhPIxH8AgexaN4DI/jCTyOJ/EknsLTeAbP4Fk8i+fw6YQvm+0usz4VxEVKKBEjYkSsiBVxIk7kE/lEfpFfRERExIt4UVAUFIVEIVFEFBEJIkEUF8WFEUaQCEUJUUJERVSUEqVEokgUZUVZ4YQTSSJJVBAVREVRUVQSN4rK4iZRRVQVHVx1UV3UEB1dTVFL1Ba1RR1xm6gr6ol6or6oLxqIBqKhaCgaiUaisbhHNBH9cTDeJy52prkYji3ECGwpWonWoo14FR8S7cQobC86iI7iETEGR2Nn0c4li8dFFzEBu4onxUR8SnQXk7GHeEb0FL1Eb/Gs6CPau76/3O4UM3GgGCQGixfEHLxNXOxYXfGySBXDxQjxiliMr4pR4jUxWowRY8XrYpwYLyaIiWKSmCzSxBtiinhTTBVviWliupghZop0MUvMFm+LOWKumCfeEfPFu2KBWCgWicViiXhPZIilIlO8L5aJD0SWWC5WiJVilVgt1oi1Yp1YLzaIjWKT2Cy2iK1im/hQbBc7xE7xkdgldos94mOxV3wi9olPRbb4TOwXfxIHxOfioPhC5IgvxSHxlTgsvhZHxDfiqPhWHBPHxQnxnTgpvo+cwl/W+6M4J86LC8ILkCiFlFLJQMbIPDJW5pVx8goJ8kqZXxaQEXmVjJdXy4LyGllIFpZFZFGZIIvJ4lJLI60kGcoSsqSMymtlKVlaJsoysqwsJ50sL5PkdbKCvF5WlDfISvJGWVneJKvIqrKarC5vljXkLbKmrCVry1tlHXmbrCvrydtlfXmHbCDvlA3lXbKRvFs2lvfIJvJe2VTeJ5vJ+2Vz+YBsIR+ULWUr2Vq2kW3lQ7KdfFi2lx1kR/mI7CQflZ3lYzJZPi67yCdkV/mk7Cafkt3l07KHfEb2lL1kb3leXpBe9pX9ZIrsLwfI5+VAOUgOlsHPL9BLcph8WabK4XKEfEWOlK/KUfI1OVqOkWPl63KcHC8nyIlykpws0+Qbcop8U06Vb8lpcrqcIWfKdDlLDpZD5ItyqJz3D+S/+VN+zK/yh/307FvlNvmh3C53yJ3yI7lL7pZ75B65V+6V++Q+mS2z5X65Xx6QB+RBeVDmyBx5SB6Sh+VheUQekUeblpbH5PFyIL+TJ+X38pQ8LU/LH+RZeVae+/k1AIVKKKmUClSMyqNiVV4Vp65Q+dSVKr8qoCLqKhWvrlYF1TWqkCqsiqiiKkEVU8WVVkZZRSpUJVRJFVXXqlKqtEpUZVRZVU45VV4lqev+5fw/qq+taqvaqXaqvWqvOqqOqpPqpDqrzipZJasuqovqqrqqbqqb6q66qx6qh+qpeqreqrfqo/qovqqvSlEpaoB6Xg1Ug9Rg9YIaol5UQ9VQNUwNU6kqVY1QI9RINVKNUqPUaDVajVVj1Tg1Tk1QE9QkNUmlqTQ1RU1RU9VUNU1NUzPUDJWu0tVsNVvNUXPUPDVPzVfz1QK1QC1Si9QStURlqAyVqTLVMrVMZanlarlaqVaq1Wq1WqvWqvVqvdqoNqrNarPKUtvUNrVdbVc71U61S+1Se9QetVftVfvUPpWtstV+tV8dUAfUQXVQ5agcdUgdUofVYXVEHVFH1VF1TB1TJ9QJdVKdVKfUKXVGnVFn1Vl1Tp1TF9SFi6d9gQhEoAIVxAQxQWwQG8QFcUG+IF+QP8gfRIJIEB/EBwWDa4JCQeGgSFA0SAiKBSmgAxPYgIIwKBGUDKLBtUGpoHSQGJQJygblAheUD5KC64IKwfVBxeCGoFJwY1A5uCmoElQNqgXVg5uDGsEtQc2gVlA7uDWoE9wW1A3qBbcH9YM7ggbBnUHD4K6gUXB30Di4J2gS3Bs0De4LmgX3B82DB4IWwYNBy6BV0DpoE7T9t87v/anCD7u+up9O0f31AP28HqgH6cH6BT1Ev6iH6pf0MP2yTtXD9Qj9ih6pX9Wj9Gt6tB6jx+rX9Tg9Xk/QE/UkPVmn6Tf0FP2mnqrf0tP0dD1Dz9Tpepaerd/Wc/RcPU+/o+frd/UCvVAv0ov1Ev2eztBLdaZ+Xy/TH+gsvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1Nv2h3q536J36I71L79Z79Md6r/5E79Of6mz9md6v/6QP6M/1Qf2FztFf6kP6K31Yf62P6G/0Uf2tPqaP6xP6O31Sf69P6dP6jP5Bn9U/6nP6vL6g/cWT+4uHd6OMMjEmxsSaWBNn4kw+k8/kN/lNxERMvIk3BU3Bi2+YpogpYhJMgiluipuLyJApYUqYqImaUqaUSTSJpqwpa5xxJskkmQqmgqloKppKppKpbCqbKqaKqWaqmZvNzeYWc4upZWqZW82t5jZzm6ln6pn6pr5pYBqYhqahaWQamcamsWlimpimpqlpZpqZ5qa5aWFamJampWltWpu2pq1pZ9qZ9qa96Wg6mk6mk+lsOptkk2y6mC6mq+lqupluprvpbnqYHqan6Wl6m96mj+lj+pq+JsWkmAFmgBloBprBZrAZYoaYoWaoGWaGmVSTakaYEWakGWlGmVFmtBljxprXzTgz3kwwE80kM9mkmTQzxUwxU81UM81MMzPMDJNu0s1sM9vMMXPMPDPPzDfzzQKzwCwyi8wSs8RkmAyTaTLNMrPMZJkss8KsMKvMKrPGrDHrzDqzwWwwm8wms8VsMdvMNrPdbDc7zU6zy+wye8wes9fsNfvMPpNtss1+s98cMAfMQXPQ5Jgcc8gcMofNYXPEHDFHzVFzzBwzJ8wJc9KcNKfMKXPGnDFnzY/mnDlvLhhvYq2AOHuFzWevtPltARtr89qL8cUj5MW4iC1qE2wxW9xqW8gW/lVsrLWJtowta8tZZ8vbJHvdb+IqtqqtZqvbm20Ne4ut+Zu4vr3DNrB32ob2LlvP3v6ruJG92za2D9gm9kHb1LayzWwb2zx4wLawD9qWtpVtbdvYTvZR29k+ZpPt47aLfeI3cYZdatfZ9XaD3Wj32k/sGfuDPWy/tmftj7av7WeH2BftUPuSHWZftql2+G/isfZ1O86OtxPsRDvJTv5NPMPOtOl2lp1t37Zz7NzfxEvse3a+zbQL7EK7yC7+Kb5YU6Z93y6zH9gsu9yusCvtKrvarrFr/7fWlXaz3WK32j32Y7vd7rA77Ud2l939U3xxHfvspzbbfmYP2a/sAfu5PWiP2Bz75U/xxfUdsd/Yo/Zbe8wetyfsd/ak/d6esqd/Wv/FtX9nz9sL1lsgJEGSFAUUQ3kolvJSHF1B+ehKyk8FKEJXUTxdTQXpGipEhakIFaUEKkbFSZMhS0QhlaCSFKVrqRSVpkQqQ2WpHDkqT0l0HVWg66ki3UCV6EaqTDdRFapK1ag63Uw16BaqSbWoNt1KdbynulSPbqf6dAc1oDupId1Fjehuakz3UBO6l5rSfdSM7qfm9AC1oAepJbWi1tSG2tJD1I4epvbUgTrSI9SJHqXO9Bgl0+PUhZ6grvQkdaOnqDs9TT3oGepJvag3PUt96DnqS/0ohfrTAHqeBtIgGkwv0BB6kYbSSzSMXqZUGk4j6BUaSa/SKHqNRtMYGkuv0zgaTxNoIk2iyZRGb9AUepOm0ls0jabTDJpJ6TSLZtPbNIfm0jx6h+bTu7SAFtIiWkxL6D3KoKWUSe/TMvqAsmg5raCVtIpW0xpaS+toPW2gjbSJNtMW2krb6EPaTjtoJ31Eu2g37aGPaS99QvvoU8qmz2g//YkO0Od0kL6gHPqSDtFXdJi+piP0DR2lb+kYHacT9B2dpO/pFJ2mM/QDnaUf6RydpwvkCUIMRShDFQZhTJgnjA3zhnHhFWG+8Mowf1ggjIRXhfHh1WHB8JqwUFg4LBIWDRPCYmHxUIcmtCGFYVgiLBlGw2vDUmHpMDEsE5YNy4UuLB8mhdeFFcLrw4rhDWGl8MawcnhTCClVwwfuqh7eHNYIbwlrhrXC2uGtYZ3wtrBuWC+8Pawf3hE2CO8MG4Z3hRXDu8PG4T1hk/DesGl4X9gsvD9sHj4QtggfDFuGrcLWYZuwbfhQ2C58OGwfdgg7ho+EncJHw87hY2Fy+HjYJXziD/enhP3DAeHz4fOh93eKny8LohnRpdHM6PvRZdEPolnR5dEV0ZXRVdHV0TXRtdFVALAhujG6Kbo5uiW6Nep9vTzg0AknnXKBi3F5XKzL6+LcFS6fu9LldwVcxF3l4t3VrqC7xhVyhV0RV9QluGKuuNPOOOvIha6EK+mi7lpXypV2ia6MK+vKOefKuyTXxrV1bV0797Br7zq4ju4R94h71D3qHnOPucddF/eE6+qedN3cU667e9o97Z5xPV0v19s96/q451xf18+luBQ3wA1wA91AN9gNdkPcEDfUDXXD3DCX6lLdCDfCjXQj3Sg3yo12o91YN9aNc+PcBDfBTXKTXJpLc1PcFDfVTXXT3DQ3w81w6S7dzXaz3Rw3x81z89z8xPlugVvgFrlFbolb4jJchst0mW6ZW+ayXJZb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+62u51up9vldrk9bo/b6/a6fW6fy3bZbr/b7w64A+6g+8LluC/dIfeVO+y+dkfcN+6o+9Ydc8fdCfedO+m+d6fcaXfG/eDOuh/dOXfeXXDepUXeiEyJvBmZGnkrMi0yPTIjMjOSHpkVmR15OzInMjcyL/JOZH7k3ciCyMLIosjiyJLIe5GMyNJIZuT9yLLIB5GsyPLIisjKyKrI6oj3xbaHvoQv6aP+Wl/Kl/aJvowv68t558v7JH+dr+Cv9xX9Db6Sv9FX9jf5Kr6qr+Yf9C19K9/at/Ft/UO+nX/Yt/cdfEf/iO/kH/Wd/WM+2T/uu/gnfFf/pO/mn/Ld/dO+h3/G9/S9fG//rO/jn/N9fT+f4vv7Af55P9AP8oP9C36If9EP9S/5Yf5ln+qH+xH+FT/Sv+pH+df8aD/Gj/Wv+3F+vJ/gJ/pJfrJP82/4Kf5NP9W/5af56X6Gn+nT/Sw/27/t5/i5fp5/x8/37/oFfqFf5Bf7Jf49n+GX+kz/vl/mP/BZfrlf4Vf6VX61X+PX+nV+vd/gN/pNfrPf4rf6bf5Dv93v8Dv9R36X3+33+I/9Xv+J3+c/9dn+M7/f/8kf8J/7g/4Ln+O/9If8V/6w/9of8d/4o/5bf8wf9yf8d/6k/96f8qf9Gf+DP+t/9Of8eX+B/2eNMcYYY+wfIv9gf/+/8b0YAPjlkmgAAFy5o2jOX8+5qdCfx4NEQqcIADzer8d9v2x16qSkpPz82CwJQcmFABD59fy/xMuhIzwKydABKvzN+gaJXmfpD+aP3ggQ9xc5sXApvjT/9X9n/oceGZtROTwT/zvzLwRILHkpJy9cii/NX/HvzF+43R/Un/fzNID2f5GTDy7Fl+ZPgofhCUj+1SMZY4wxxhhjjLE/GySqdfv715/yf6/PE9SlnDxwKf6j63PGGGOMMcYYY4xdfk/16v3YQ8nJHbr9YwP8+e/S/1wWD3jw3zPI+/Ovzv+Xev5Dg8v5rsQYY4wxxhj7T7h00n+5K2GMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxnKv/4uPE7vca2SMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYut/8JAAD//4cELAw=") creat(&(0x7f0000001780)='./bus\x00', 0x182) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000002b80)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c084}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000029c0), 0x0, 0x0, 0x0, 0x4044804}}], 0x1, 0x24004800) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000001800)='./bus\x00', 0x0, 0x1084, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x8840, 0xa2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001880)='./bus\x00', 0x1c1002, 0x12) write(r3, &(0x7f00000018c0)="d4", 0x1) sendfile(r3, r2, 0x0, 0x3ffff) openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000002b00)='./binderfs/features/extended_error\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000001900)='.\x00', 0x0, 0x80) getdents64(r4, &(0x7f0000001940)=""/4096, 0x1000) 5m58.5517842s ago: executing program 8 (id=4364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000240)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) 5m58.424272513s ago: executing program 8 (id=4368): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000080)=ANY=[], 0x1, 0x1520, &(0x7f0000000240)="$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") creat(&(0x7f0000001780)='./bus\x00', 0x182) mount(0x0, &(0x7f0000001800)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000001880)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f00000018c0)="d4", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) openat$binderfs_feature(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) getdents64(r2, &(0x7f0000001940)=""/4096, 0x1000) 5m58.385122747s ago: executing program 65 (id=4368): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000080)=ANY=[], 0x1, 0x1520, &(0x7f0000000240)="$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") creat(&(0x7f0000001780)='./bus\x00', 0x182) mount(0x0, &(0x7f0000001800)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000001880)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f00000018c0)="d4", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) openat$binderfs_feature(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) getdents64(r2, &(0x7f0000001940)=""/4096, 0x1000) 36.602143387s ago: executing program 0 (id=6915): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@noblock_validity}, {@inlinecrypt}, {@inlinecrypt}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@jqfmt_vfsold}, {@i_version}, {@dioread_nolock}]}, 0x1, 0x5aa, &(0x7f00000002c0)="$eJzs3T1sG2UfAPD/neOmH3nf9JXeV3pBHSpAKlJVJ+kHFKZ2RVSq1AGJBSLXjao4dRU70ESRSPcK0QEB6lI2GBhBDAyIhZGVhY8ZqaIRSE0HMHJ8TtPUDk6oY4h/P+ns57k7+/9/fH4e353u5AAG1uHGQxrxREScTyJG1y0bimzh4eZ6K8uLxfvLi8Uk6vULPyeRRMS95cVia/0kez4QEUsR8f+I+CofcTRde8s9rUJ1fmF6slwuzWb1sdrM1bHq/MKxyzOTU6Wp0pUTz79w6vTJUxPHJ9ane7++vpbfWltvfH/z7RvfvHT75sefHFoqvjuZxJkYyZatb8fj1PxM8nFmw/yTvQjWR0m/E2Bbclk/b3Sl/8Vo5LJe3059/eAwvCPpAT1UH46or1lXBAZAotPDgGrtBzSOf1vTTu5/3DnbPABpxF1ZXiy+Fa34Q81zE7F39dhk/y/JQ0cmjePNgzuZKLvS0vWIGB8aevT7n2Tfv+0bfxwJ0lNfnm1uqEe3f7o2/kSb8Wekde70L2qNfyvZ+LfSJn6uw/h3vssYv7364wcd418fjifbxk/W4idt4qcR8XqX8W+98vnpTsvqH0YcifbxW5LNzw+PXbpcLo03H9vG+OLIoRc7tz9if4f4zXO2e1cTWd/+PVlOaZft/+zrT59a2iT+s09vvv3bff77IuKdLuP/595HL3dadud6crexF7DV7Z9EPm53Gf+5M4e/y4rOGgIAAAAAAAAAwGOUrl7LlqSFtXKaFgrNe3j/G/vTcqVaO3qpMpfLrnk7GPm0daXVaLOeNOoT2fW4rfrxDfUTuSxgbt9qvVCslC/2ue0AAAAAAAAAAAAAAAAAAADwd3Fgw/3/v+ZW7//f+HfVwG7V+S+/gd1O/4fB9XD/T/qWB7Dz/P7DwKpv3v/tD8Bu5vcfBpf+D4NL/4fB1bb/79v5PICd5/cfBpf+DwAAAAAAAAAAAAAAAAAAAAAAAAAAPXH+3LnGVL+/vFhs1C8Ozc9NV944drFUnS7MzBULxcrs1cJUpTJVLhWKlZk/e7+kUrk6Hlfmro3VStXaWHV+4bWZytyV1n+IlfI9bxEAAAAAAAAAAAAAAAAAAAD884ysTklaiMg362laKET8KyIOJpFculwujUfEvyPi21x+uFGf6HfSAAAAAAAAAAAAAAAAAAAAsMtU5xemJ8vl0mzvCkNZqO5e9UOtp/kMbWXliFjadJ181rSu02i845ZzbkXp7WYakEKuy+/hwBf6NCABAAAAAAAAAAAAAAAAAMAAe3DTb7ev+L23CQEAAAAAAAAAAAAAAAAAAMBASn9KIqIxHRl9ZmTj0j3JSm71OSLevHXhvWuTtdrsRGP+3bX5tfez+cf7kT/QrVY/TSOi0Y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB6rzC9OT5XJpdpuF4S7W6XcbAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALbjjwAAAP//QKjKig==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x8541, 0x1a9) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000900)='\f', 0x1, 0x8000c65) fallocate(r0, 0x8, 0x4000, 0x8000) 36.512449756s ago: executing program 0 (id=6921): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x2002) write$evdev(r0, &(0x7f0000001b80)=[{{0x0, 0xea60}, 0x0, 0x2}], 0x18) 36.512272286s ago: executing program 0 (id=6923): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x752d, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="db13f57a23a8ff1fbc47a551eb0d", 0x0, 0x40001008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0xe}, 0x50) 32.666537965s ago: executing program 0 (id=6934): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000700)={[{@grpjquota}, {@nolazytime}, {@norecovery}, {@grpjquota}, {@barrier}]}, 0xfe, 0x295, &(0x7f0000000740)="$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") creat(&(0x7f0000000a00)='./bus\x00', 0xf2) mount(&(0x7f0000000a80)=@loop={'/dev/loop', 0x0}, &(0x7f0000000ac0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000b00)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 32.541256538s ago: executing program 0 (id=6945): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000600)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESHEX, @ANYRES16, @ANYRES8], 0x41, 0x2cb, &(0x7f0000000780)="$eJzs3MFrE3sQwPF5SV+TprTJg8eDJ6iDXvQS2njwqEFaEANKbYp6ELd2oyFrUnZDJSI2F/Hq31E8ehPUf6AX8eLdWxEELz2IK93dtJs2TdM2aVL7/UD5ze78pjtN0jIJdNfuvH5SKjjpglGVSFwlIlKXdZHURhT4K1gjXjwsYXW5OPrjy+nbd+/dyOZyUzOq09nZSxlVHT/7/unzN+c+Vkfn3o6/i8lq6v7a98zX1eHV/9d+zT4uOlp0tFypqqHzlUrVmLdMXSg6pbTqLcs0HFOLZce0m/IFq7K4WFOjvDCWWLRNx1GjXNOSWdNqRat2TY1HRrGs6XRaxxJygkVEhjrYll+ZmTGyu6bdaFebQs+NtDpp29l662R+5Qh6AgAAA6b9/O/P+rvP/7k5f93P/P/f1vzf+Fbb538R5v8eqTcd7TH/47i6HH7123bWSAS/v82Y/wEAAAAAAAAAAAAAAAAAAAAAOA7WXTfpum5yYw1OeccxEYmLiBvk+9wmeiT8/Luhrz2e/yt9ahddFvrHvbiI9Wopv5T3Vz+fLUhRLDFlQpLy03s9BPx4+npuakI9KflgLQf1y0v5qMQa9Q2pzZtShOrP/DPp12tz/d+SCF8/I0n5t/X1My3rh+XC+VB9WpLy6aFUxJIFr4Gt+heTqtdu5rbVj3j7AAAAAAD4E6R10473717e2xCXnXm/PvT5gOu6y+0+H9j2/npITnVyi0oAAAAAAHBoTu1ZybAs0z5AEBORQ5R3P3Bdkf63EZXBeDSag6siMgBtHFUQFxH/jB6k/NtmeUdVbgd7hkSk7w/LPoJ+/2UCAAAA0G1bQ3+7XQ+aDz+/7HFXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcLJ3eD6yxf0eqkWhTHrpc9Mh/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCA/A4AAP//H0gTzg==") sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./trace\x00', &(0x7f0000000440)='tracefs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./trace/set_event\x00', 0x161042, 0x7823963b0a991b2a) write$vga_arbiter(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='lock'], 0xa) 32.463749446s ago: executing program 0 (id=6948): syz_clone3(&(0x7f0000000040)={0x180801400, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40040, 0x59) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) waitid$P_PIDFD(0x3, r0, 0x0, 0x40000004, 0x0) 32.352389617s ago: executing program 66 (id=6948): syz_clone3(&(0x7f0000000040)={0x180801400, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40040, 0x59) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) waitid$P_PIDFD(0x3, r0, 0x0, 0x40000004, 0x0) 26.667934392s ago: executing program 6 (id=7084): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000001340)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85, 0x2}, 0x3c) 26.654251683s ago: executing program 6 (id=7086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000000101830000000000000000000a0000033c0001800c00028005000100110000002c0001"], 0x50}}, 0x0) 26.625375276s ago: executing program 6 (id=7088): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./tracing\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000740)="28fb7922c911a322", 0x8) 26.203516909s ago: executing program 6 (id=7093): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000300)={[{@grpjquota}, {@nolazytime}, {@norecovery}, {@grpjquota}, {@barrier}]}, 0xfe, 0x295, &(0x7f0000000340)="$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") creat(&(0x7f0000000b00)='./bus\x00', 0xf2) syz_mount_image$ext4(0x0, &(0x7f0000000b40)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) mount(&(0x7f0000000b80)=@loop={'/dev/loop', 0x0}, &(0x7f0000000bc0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000c00)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) rmdir(&(0x7f0000000d40)='./file0\x00') 26.126954407s ago: executing program 6 (id=7098): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0xffffffff7ffffffd, 0x160862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) 26.040567866s ago: executing program 6 (id=7100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'pim6reg0\x00', 0x400}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x21dfdbfe, {0x0, 0x0, 0x0, r2, {0x4, 0xfffa}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048091}, 0x0) 25.99486465s ago: executing program 67 (id=7100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'pim6reg0\x00', 0x400}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x21dfdbfe, {0x0, 0x0, 0x0, r2, {0x4, 0xfffa}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048091}, 0x0) 18.536511615s ago: executing program 1 (id=7350): mount$cgroup(0x0, &(0x7f0000000b80)='.\x00', &(0x7f0000000bc0), 0x4, &(0x7f0000000040)={[{@name={'name', 0x3d, '$-.\v'}}]}) 18.536322055s ago: executing program 1 (id=7352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0x80}}, 0x0) 18.529425826s ago: executing program 1 (id=7353): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4008811}, 0x480f0) 18.510520527s ago: executing program 1 (id=7355): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000980)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000a80)='\x00', 0x89901) move_mount(r0, &(0x7f0000000b40)='.\x00', 0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', 0x0) 18.451426904s ago: executing program 1 (id=7357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x2}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000680)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f00000007c0)={'syzkaller0\x00', @random="2b0100004ec6"}) 18.451317793s ago: executing program 1 (id=7359): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB=',shortname=mixed,utf8=1,gid=', @ANYRES16, @ANYBLOB="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"], 0x1, 0x2b4, &(0x7f0000000880)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001880)='./file0/file0\x00') 18.38308724s ago: executing program 68 (id=7359): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB=',shortname=mixed,utf8=1,gid=', @ANYRES16, @ANYBLOB="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"], 0x1, 0x2b4, &(0x7f0000000880)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001880)='./file0/file0\x00') 18.300359649s ago: executing program 5 (id=7366): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x8, 0x30, 0x66, 0x0, 0x8, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast2}, @parameter_prob={0xc, 0x0, 0x0, 0x9, 0x7, 0x0, {0x5, 0x4, 0x3, 0x30, 0x6, 0x68, 0x800, 0xbf, 0x16, 0x7, @dev={0xac, 0x14, 0x14, 0x24}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 18.277736761s ago: executing program 5 (id=7368): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x5a6, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000400), 0x800001d, 0x300) 18.09229552s ago: executing program 5 (id=7372): socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f00000003c0)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x632002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./trace/trace\x00', 0x0, 0x0) lseek(r3, 0x10001, 0x100000000000000) 17.246346765s ago: executing program 5 (id=7426): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000008c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000900)='.\x00', 0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0) 17.188329351s ago: executing program 5 (id=7428): r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='.\x00', 0x100, 0x52) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) fsync(r0) 17.168660923s ago: executing program 5 (id=7432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000f40)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="70000000ffffffe2ffffaaaaaaaaaabb08004500452c00206000002f90"], 0xfdef) 17.114541509s ago: executing program 69 (id=7432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000f40)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="70000000ffffffe2ffffaaaaaaaaaabb08004500452c00206000002f90"], 0xfdef) 1.061307343s ago: executing program 2 (id=7776): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1e, 0x0, 0xb, 0xff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r0}, 0x0, 0x0, 0x200000000000000}, 0x20) 1.061116453s ago: executing program 2 (id=7777): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f00000002c0)) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 1.022316777s ago: executing program 2 (id=7780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 952.140714ms ago: executing program 2 (id=7783): r0 = creat(&(0x7f0000000100)='./file1\x00', 0x12e) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1}, 0xc) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300), 0x200000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 579.230152ms ago: executing program 9 (id=7789): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000003e00010a00000000000000000a00000004"], 0x18}}, 0x0) 560.665083ms ago: executing program 9 (id=7791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 497.40138ms ago: executing program 9 (id=7792): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES16], 0x88, 0x2a9, &(0x7f0000000500)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', r0, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 479.307102ms ago: executing program 9 (id=7796): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f00000003c0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000480)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000580), 0x366, 0x10, &(0x7f00000005c0), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)={@map, r0, 0x4}, 0x10) 366.767403ms ago: executing program 9 (id=7800): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000001440)={0x0, 0x520, &(0x7f0000001480)={&(0x7f00000014c0)={0x28, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 366.232373ms ago: executing program 4 (id=7801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000dc0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000e00)={0x1, &(0x7f0000000e40)=[{0x6, 0x0, 0x0, 0x5387cf8b}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000e80)={'geneve1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ec0), 0x109a42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f00)={'rose0\x00', 0x112}) 335.250497ms ago: executing program 9 (id=7803): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000552000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000600)=""/194, 0xd7, 0x6) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000380), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = open(0x0, 0x288740, 0x189) r2 = creat(0x0, 0x8) close_range(r1, r2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r3) 282.195002ms ago: executing program 4 (id=7806): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x22020600) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 233.473096ms ago: executing program 4 (id=7808): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002640)='cgroup.events\x00', 0x275a, 0x0) fgetxattr(r0, &(0x7f0000002780)=@known='user.syz\x00', 0x0, 0x0) 233.166796ms ago: executing program 4 (id=7810): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbf7010000000000100000008000c0003000000450001000074f3733408438c6207ca41de3b74fc619855e941bbdaf3a1fbb169798f206c9110fe418bef5a622b1a9069b2b69c6c2ed332293f83a5ab2d875abb1599a2d765000000080002"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 233.073736ms ago: executing program 7 (id=7811): r0 = socket(0x1d, 0x2, 0x6) bind$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 232.936287ms ago: executing program 4 (id=7812): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000440)=r0, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0) 232.847327ms ago: executing program 7 (id=7813): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x49) 232.311347ms ago: executing program 3 (id=7814): creat(&(0x7f0000000b00)='./bus\x00', 0xf2) mount(&(0x7f0000000b80)=@loop={'/dev/loop', 0x0}, &(0x7f0000000bc0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000c00)='./bus\x00', 0x8000, 0xa0) capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000000600)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x20002}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) 213.496799ms ago: executing program 3 (id=7815): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x17f) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) rename(&(0x7f0000000080)='./sys/kernel/reboot/force\x00', &(0x7f00000000c0)='./sys/file0\x00') 213.222589ms ago: executing program 4 (id=7816): socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f00000003c0)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x632002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r0, &(0x7f00000006c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./trace/trace\x00', 0x0, 0x0) lseek(r2, 0x10001, 0x100000000000000) 212.097469ms ago: executing program 7 (id=7825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x2}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000680)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f00000007c0)={'syzkaller0\x00', @random="2b0100004ec6"}) 188.732301ms ago: executing program 3 (id=7817): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='GPL\x00', 0x4, 0xc3, &(0x7f00000004c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) close(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) socket(0x840000000002, 0x3, 0x100) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) sendmsg$nl_xfrm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x2004c801}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000c00)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000c40)=0x4, 0x4) connect$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @broadcast}, 0x10) 171.284273ms ago: executing program 3 (id=7818): mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000001f80)='./tracing\x00', &(0x7f0000001fc0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000495000/0x3000)=nil, 0x3000, 0xb000000, 0x11, r0, 0x3000) 112.624449ms ago: executing program 3 (id=7819): r0 = socket$unix(0x1, 0x2, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x2, 0xffffffffffffffff}) 112.373729ms ago: executing program 3 (id=7820): r0 = syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000880)='./file2\x00', 0x14552, &(0x7f00000008c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0], 0xfb, 0x11ff, &(0x7f0000000900)="$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") r1 = openat(r0, &(0x7f0000001b00)='./file2\x00', 0x101002, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x200000e, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_create_resource$futex(&(0x7f00000021c0)=0x1) futex(r2, 0xb, 0x1, 0x0, 0x0, 0x403) 112.249309ms ago: executing program 2 (id=7821): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x22000011, &(0x7f0000000680)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000001700)="$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") mount(0x0, 0x0, 0x0, 0x8410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='freezer.self_freezing\x00', 0x275a, 0x0) 106.6833ms ago: executing program 7 (id=7822): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000009c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000a00)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000a40)=[{{&(0x7f0000000ac0)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000b40)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="49c2"], 0x108}}], 0x2, 0xc040) 82.201882ms ago: executing program 7 (id=7823): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x4}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ipvlan1\x00'}) 192.66µs ago: executing program 7 (id=7824): capset(&(0x7f0000000280)={0x20080522}, &(0x7f0000000780)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfc, 0x10000000}, 0xc) 0s ago: executing program 2 (id=7826): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x115) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000d80)='3', 0x4e) futex_waitv(&(0x7f0000000dc0)=[{0x7fffffffffffffff, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 6.220308][ T28] kauditd_printk_skb: 104 callbacks suppressed [ 926.220331][ T28] audit: type=1326 audit(1794424596.695:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.2.2536" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f345f76974e code=0x7ffc0000 [ 926.316264][ T28] audit: type=1326 audit(1794424597.095:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.2.2536" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f345f7a8f19 code=0x7ffc0000 [ 926.321739][ T288] EXT4-fs (loop4): unmounting filesystem. [ 926.342488][ T28] audit: type=1326 audit(1794424597.095:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.2.2536" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345f7a8f19 code=0x7ffc0000 [ 926.372800][ T28] audit: type=1326 audit(1794424597.095:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.2.2536" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345f7a8f19 code=0x7ffc0000 [ 926.403201][T10626] caif0: tun_chr_ioctl cmd 2148553947 [ 926.409262][ T4375] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 926.417446][ T28] audit: type=1326 audit(1794424597.095:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.2.2536" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f345f7a8f19 code=0x7ffc0000 [ 927.518331][ T4375] usb 4-1: Using ep0 maxpacket: 32 [ 927.542733][ T4375] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 927.574467][ T4375] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 927.603986][ T4375] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 927.623163][ T4375] usb 4-1: Product: syz [ 927.636094][ T4375] usb 4-1: Manufacturer: syz [ 927.649470][ T4375] usb 4-1: SerialNumber: syz [ 927.664563][ T4375] usb 4-1: config 0 descriptor?? [ 927.674194][T10614] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 927.685856][ T4375] hub 4-1:0.0: bad descriptor, ignoring hub [ 927.696204][ T4375] hub: probe of 4-1:0.0 failed with error -5 [ 928.438697][ T1391] usb 4-1: USB disconnect, device number 26 [ 929.091221][T10650] overlayfs: overlapping lowerdir path [ 929.124056][T10652] caif0: tun_chr_ioctl cmd 2148553947 [ 929.132387][ T514] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 929.400256][ T514] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 929.432773][ T514] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 929.699844][ T514] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 929.712093][T10658] loop3: detected capacity change from 0 to 512 [ 929.718967][ T514] usb 4-1: Product: syz [ 929.745562][T10658] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 929.754391][ T514] usb 4-1: Manufacturer: syz [ 929.761286][T10660] loop2: detected capacity change from 0 to 256 [ 929.767722][ T514] usb 4-1: SerialNumber: syz [ 929.777170][ T514] usb 4-1: config 0 descriptor?? [ 929.807793][T10660] exfat: Deprecated parameter 'utf8' [ 929.817954][ T514] usb 4-1: can't set config #0, error -71 [ 929.824495][T10660] exfat: Deprecated parameter 'utf8' [ 929.831429][T10658] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 929.840558][T10658] ext4 filesystem being mounted at /502/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 929.852055][ T514] usb 4-1: USB disconnect, device number 27 [ 929.860893][T10660] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 930.377532][ T28] audit: type=1326 audit(1794424601.235:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10659 comm="syz.2.2547" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345f7a8f19 code=0x7ffc0000 [ 930.422527][ T28] audit: type=1326 audit(1794424601.235:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10659 comm="syz.2.2547" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345f7a8f19 code=0x7ffc0000 [ 930.484335][ T28] audit: type=1326 audit(1794424601.235:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10659 comm="syz.2.2547" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f345f7a8f19 code=0x7ffc0000 [ 930.525774][ T28] audit: type=1326 audit(1794424601.235:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10659 comm="syz.2.2547" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f345f7a8f19 code=0x7ffc0000 [ 930.601596][T10678] loop4: detected capacity change from 0 to 512 [ 931.802103][ T290] EXT4-fs (loop3): unmounting filesystem. [ 931.862302][T10678] ./dev/sda1: Can't open blockdev [ 931.875465][T10688] loop0: detected capacity change from 0 to 512 [ 931.891559][T10688] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 931.910861][T10688] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 931.920670][T10688] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 932.186830][T10694] caif0: tun_chr_ioctl cmd 2148553947 [ 932.373436][T10695] caif0: tun_chr_ioctl cmd 2148553947 [ 932.788675][T10702] loop4: detected capacity change from 0 to 128 [ 932.850318][ T287] EXT4-fs (loop0): unmounting filesystem. [ 933.184147][T10713] loop3: detected capacity change from 0 to 512 [ 933.194514][ T1391] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 933.203353][T10713] EXT4-fs (loop3): Test dummy encryption mode enabled [ 933.382613][T10713] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.2558: inode has both inline data and extents flags [ 933.397580][T10713] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2558: couldn't read orphan inode 15 (err -117) [ 933.411762][T10713] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 933.713618][ T1391] usb 1-1: Using ep0 maxpacket: 32 [ 934.065443][ T1391] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 934.097339][ T1391] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 934.116871][ T1391] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 934.129744][ T1391] usb 1-1: Product: syz [ 934.133958][ T1391] usb 1-1: Manufacturer: syz [ 934.168366][ T1391] usb 1-1: SerialNumber: syz [ 934.187430][ T1391] usb 1-1: config 0 descriptor?? [ 934.203151][T10706] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 934.296944][ T290] EXT4-fs (loop3): unmounting filesystem. [ 934.315193][T10720] loop4: detected capacity change from 0 to 512 [ 934.364481][ T1391] hub 1-1:0.0: bad descriptor, ignoring hub [ 934.433629][T10720] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 934.443143][T10720] ext4 filesystem being mounted at /510/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 934.464109][T10720] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #12: comm syz.4.2559: corrupted xattr block 6 [ 934.477436][T10720] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 934.486792][T10720] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #12: comm syz.4.2559: corrupted xattr block 6 [ 934.500365][T10720] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 934.513029][T10720] EXT4-fs error (device loop4): ext4_xattr_block_find:1828: inode #12: comm syz.4.2559: corrupted xattr block 6 [ 934.527662][T10723] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.2559: corrupted xattr block 33 [ 934.541215][T10723] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 934.550451][T10723] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.2559: corrupted xattr block 33 [ 934.563909][T10723] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 934.573137][T10723] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.2559: corrupted xattr block 33 [ 934.593636][T10723] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 934.602992][T10723] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.2559: corrupted xattr block 33 [ 934.616582][T10723] fscrypt (loop4, inode 15): Error -117 getting encryption context [ 934.643067][ T1391] hub: probe of 1-1:0.0 failed with error -5 [ 935.198362][ T1391] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 935.258438][ T8597] usb 1-1: USB disconnect, device number 29 [ 935.419455][ T1391] usb 4-1: config 0 has no interfaces? [ 935.426447][ T1391] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 935.455000][ T1391] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.479331][ T1391] usb 4-1: Product: syz [ 935.485240][ T288] EXT4-fs (loop4): unmounting filesystem. [ 935.495572][ T1391] usb 4-1: Manufacturer: syz [ 935.504549][ T1391] usb 4-1: SerialNumber: syz [ 935.519904][ T1391] usb 4-1: config 0 descriptor?? [ 935.571225][T10729] loop4: detected capacity change from 0 to 512 [ 935.595453][T10729] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 935.640269][T10729] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 935.658759][T10729] ext4 filesystem being mounted at /511/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 935.742395][ T8597] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 935.754185][ T1391] usb 4-1: USB disconnect, device number 28 [ 935.970330][ T8597] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 936.005401][ T8597] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 936.090730][ T8597] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 936.163741][ T8597] usb 1-1: Product: syz [ 936.224252][ T8597] usb 1-1: Manufacturer: syz [ 936.234067][ T8597] usb 1-1: SerialNumber: syz [ 936.248262][ T8597] usb 1-1: config 0 descriptor?? [ 936.259510][T10706] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 936.272013][ T8597] hub 1-1:0.0: bad descriptor, ignoring hub [ 936.283132][ T8597] hub: probe of 1-1:0.0 failed with error -5 [ 937.561832][ T8597] usb 1-1: USB disconnect, device number 30 [ 937.592500][ T288] EXT4-fs (loop4): unmounting filesystem. [ 937.902175][T10754] loop0: detected capacity change from 0 to 512 [ 938.815242][T10754] EXT4-fs (loop0): Test dummy encryption mode enabled [ 939.172781][T10759] loop2: detected capacity change from 0 to 512 [ 939.289554][T10759] EXT4-fs (loop2): Test dummy encryption mode enabled [ 939.531357][T10759] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.2568: inode has both inline data and extents flags [ 939.545450][T10754] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.2565: inode has both inline data and extents flags [ 939.559867][T10759] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.2568: couldn't read orphan inode 15 (err -117) [ 939.573377][T10759] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 939.637047][T10754] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.2565: couldn't read orphan inode 15 (err -117) [ 939.650207][T10754] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 940.391924][ T287] EXT4-fs (loop0): unmounting filesystem. [ 940.499937][ T291] EXT4-fs (loop2): unmounting filesystem. [ 940.825166][T10778] loop0: detected capacity change from 0 to 512 [ 940.844861][T10778] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 941.151460][T10778] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 941.219546][T10778] ext4 filesystem being mounted at /512/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 941.817745][ T287] EXT4-fs (loop0): unmounting filesystem. [ 941.828348][ T6506] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 942.018364][ T6506] usb 4-1: Using ep0 maxpacket: 32 [ 942.024722][ T6506] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 942.460892][T10796] caif0: tun_chr_ioctl cmd 2148553947 [ 942.940647][T10801] loop2: detected capacity change from 0 to 512 [ 942.967319][T10801] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 942.998202][T10801] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 943.021744][T10801] ext4 filesystem being mounted at /521/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 943.032987][ T6506] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 943.430676][ T6506] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 943.440581][ T6506] usb 4-1: Product: syz [ 943.444794][ T6506] usb 4-1: Manufacturer: syz [ 943.450287][ T6506] usb 4-1: SerialNumber: syz [ 943.456419][ T6506] usb 4-1: config 0 descriptor?? [ 943.462488][T10790] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 943.470435][ T6506] hub 4-1:0.0: bad descriptor, ignoring hub [ 943.476392][ T6506] hub: probe of 4-1:0.0 failed with error -5 [ 943.879459][ T291] EXT4-fs (loop2): unmounting filesystem. [ 944.000366][T10819] loop1: detected capacity change from 0 to 512 [ 944.011998][T10819] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 944.025026][T10810] loop0: detected capacity change from 0 to 512 [ 944.064191][T10819] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 944.078808][T10819] ext4 filesystem being mounted at /518/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 944.273622][ T1484] usb 4-1: USB disconnect, device number 29 [ 944.911987][T10810] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 945.351748][T10828] caif0: tun_chr_ioctl cmd 2148553947 [ 945.358574][ T289] EXT4-fs (loop1): unmounting filesystem. [ 945.612204][T10831] loop4: detected capacity change from 0 to 512 [ 945.848529][T10831] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 946.412629][T10850] caif0: tun_chr_ioctl cmd 2148553947 [ 947.960114][T10853] loop3: detected capacity change from 0 to 512 [ 948.058869][T10853] EXT4-fs (loop3): Test dummy encryption mode enabled [ 948.213205][T10853] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.2588: inode has both inline data and extents flags [ 948.226772][T10853] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2588: couldn't read orphan inode 15 (err -117) [ 948.239084][T10853] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 948.769018][ T290] EXT4-fs (loop3): unmounting filesystem. [ 950.162333][T10882] loop3: detected capacity change from 0 to 512 [ 951.058574][T10882] EXT4-fs (loop3): Test dummy encryption mode enabled [ 951.241911][ T1484] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 951.409211][T10882] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.2594: inode has both inline data and extents flags [ 951.420937][T10885] overlayfs: './file0' not a directory [ 951.427987][T10882] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2594: couldn't read orphan inode 15 (err -117) [ 951.440251][T10882] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 951.686965][T10898] loop0: detected capacity change from 0 to 256 [ 952.008382][ T1484] usb 5-1: Using ep0 maxpacket: 32 [ 952.030175][ T290] EXT4-fs (loop3): unmounting filesystem. [ 952.081192][ T1484] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 952.326580][ T1484] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 952.489702][ T1484] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 952.514654][ T1484] usb 5-1: Product: syz [ 952.525212][ T1484] usb 5-1: Manufacturer: syz [ 953.013391][T10904] overlayfs: overlapping lowerdir path [ 953.031681][ T1484] usb 5-1: SerialNumber: syz [ 953.044862][ T1484] usb 5-1: config 0 descriptor?? [ 953.056488][ T1484] usb 5-1: can't set config #0, error -71 [ 953.189075][ T1484] usb 5-1: USB disconnect, device number 30 [ 954.310163][T10928] caif0: tun_chr_ioctl cmd 2148553947 [ 955.372907][T10937] overlayfs: overlapping lowerdir path [ 956.084074][T10943] loop2: detected capacity change from 0 to 512 [ 957.058681][T10943] EXT4-fs (loop2): Test dummy encryption mode enabled [ 958.018744][T10943] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.2610: inode has both inline data and extents flags [ 958.032418][T10943] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.2610: couldn't read orphan inode 15 (err -117) [ 958.044437][T10943] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 958.552766][ T291] EXT4-fs (loop2): unmounting filesystem. [ 958.741188][T10963] loop1: detected capacity change from 0 to 512 [ 959.030331][T10963] EXT4-fs (loop1): Test dummy encryption mode enabled [ 959.048016][T10963] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.2613: inode has both inline data and extents flags [ 959.491497][T10963] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.2613: couldn't read orphan inode 15 (err -117) [ 959.504356][T10963] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 959.912441][ T289] EXT4-fs (loop1): unmounting filesystem. [ 960.036862][T10972] loop1: detected capacity change from 0 to 512 [ 960.044045][T10972] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 960.163292][ T9012] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 960.176803][T10978] loop3: detected capacity change from 0 to 512 [ 960.190891][T10978] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 960.731501][T10982] caif0: tun_chr_ioctl cmd 2148553947 [ 960.869657][ T8983] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 960.881971][ T28] audit: type=1400 audit(1794425399.951:1533): avc: denied { create } for pid=10962 comm="syz.4.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 961.436658][T10994] overlayfs: overlapping lowerdir path [ 961.477478][T10997] caif0: tun_chr_ioctl cmd 2148553947 [ 965.333919][T11012] loop3: detected capacity change from 0 to 512 [ 965.458009][T11012] EXT4-fs (loop3): Test dummy encryption mode enabled [ 965.585373][T11012] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.2626: inode has both inline data and extents flags [ 967.735003][T11012] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2626: couldn't read orphan inode 15 (err -117) [ 967.842196][T11024] loop2: detected capacity change from 0 to 512 [ 968.014222][T11012] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 968.382689][T11024] EXT4-fs (loop2): Test dummy encryption mode enabled [ 968.439971][ T290] EXT4-fs (loop3): unmounting filesystem. [ 968.497978][T11024] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.2629: inode has both inline data and extents flags [ 968.512359][T11024] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.2629: couldn't read orphan inode 15 (err -117) [ 968.525188][T11024] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 968.767559][ T291] EXT4-fs (loop2): unmounting filesystem. [ 968.812036][T11030] caif0: tun_chr_ioctl cmd 2148553947 [ 969.533278][T11040] caif0: tun_chr_ioctl cmd 2148553947 [ 969.538935][T11042] caif0: tun_chr_ioctl cmd 2148553947 [ 970.007205][T11051] loop0: detected capacity change from 0 to 512 [ 970.399506][T11051] EXT4-fs (loop0): Test dummy encryption mode enabled [ 970.489526][T11051] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.2634: inode has both inline data and extents flags [ 970.503730][T11051] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.2634: couldn't read orphan inode 15 (err -117) [ 970.517454][T11051] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 970.679298][ T287] EXT4-fs (loop0): unmounting filesystem. [ 970.690831][T11058] loop3: detected capacity change from 0 to 512 [ 970.722349][T11058] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 974.722206][T11117] loop0: detected capacity change from 0 to 512 [ 975.019771][T11117] EXT4-fs (loop0): Test dummy encryption mode enabled [ 975.414814][T11117] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.2649: inode has both inline data and extents flags [ 975.428625][T11117] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.2649: couldn't read orphan inode 15 (err -117) [ 975.441845][T11117] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 975.506303][T11126] loop3: detected capacity change from 0 to 512 [ 975.651887][ T287] EXT4-fs (loop0): unmounting filesystem. [ 975.699340][T11126] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 975.708449][T11126] ext4 filesystem being mounted at /521/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 975.720501][T11126] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #12: comm syz.3.2651: corrupted xattr block 6 [ 975.732778][T11126] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 975.741875][T11126] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #12: comm syz.3.2651: corrupted xattr block 6 [ 975.753866][T11126] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 975.763750][T11126] EXT4-fs error (device loop3): ext4_xattr_block_find:1828: inode #12: comm syz.3.2651: corrupted xattr block 6 [ 975.777641][T11132] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.2651: corrupted xattr block 33 [ 975.790198][T11132] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 975.799223][T11132] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.2651: corrupted xattr block 33 [ 975.811277][T11132] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 975.820288][T11132] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.2651: corrupted xattr block 33 [ 975.833410][T11132] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 975.842467][T11132] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.2651: corrupted xattr block 33 [ 975.854581][T11132] fscrypt (loop3, inode 15): Error -117 getting encryption context [ 976.512974][T11137] caif0: tun_chr_ioctl cmd 2148553947 [ 976.776978][ T290] EXT4-fs (loop3): unmounting filesystem. [ 978.032215][T11141] loop0: detected capacity change from 0 to 512 [ 978.604344][T11145] loop2: detected capacity change from 0 to 256 [ 979.253543][T11141] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 981.278802][T11164] loop3: detected capacity change from 0 to 512 [ 981.290348][T11164] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 981.301569][T11167] loop0: detected capacity change from 0 to 512 [ 981.366596][T11167] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 981.494522][T11179] loop3: detected capacity change from 0 to 512 [ 981.517343][T11179] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 981.535146][T11181] ./dev/sda1: Can't open blockdev [ 981.555869][T11179] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 981.567304][T11179] ext4 filesystem being mounted at /525/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 983.593131][ T290] EXT4-fs (loop3): unmounting filesystem. [ 984.606915][T11211] loop4: detected capacity change from 0 to 512 [ 984.635950][T11211] EXT4-fs (loop4): Test dummy encryption mode enabled [ 985.291082][T11211] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.2670: inode has both inline data and extents flags [ 985.304541][T11211] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.2670: couldn't read orphan inode 15 (err -117) [ 985.317115][T11211] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 985.793367][T11224] caif0: tun_chr_ioctl cmd 2148553947 [ 986.528371][ T60] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 986.570244][T11233] loop2: detected capacity change from 0 to 512 [ 986.640363][T11233] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 986.737355][ T60] usb 4-1: config 0 has no interfaces? [ 986.848215][ T60] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 987.035348][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.046334][ T60] usb 4-1: Product: syz [ 987.051966][ T60] usb 4-1: Manufacturer: syz [ 987.057758][ T60] usb 4-1: SerialNumber: syz [ 987.085542][ T60] usb 4-1: config 0 descriptor?? [ 987.238166][T11243] loop0: detected capacity change from 0 to 512 [ 987.304211][ T8597] usb 4-1: USB disconnect, device number 31 [ 987.339046][T11243] EXT4-fs (loop0): Test dummy encryption mode enabled [ 987.432444][T11243] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.2679: inode has both inline data and extents flags [ 987.760351][T11243] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.2679: couldn't read orphan inode 15 (err -117) [ 987.773556][T11243] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 988.430001][ T287] EXT4-fs (loop0): unmounting filesystem. [ 988.511248][T11250] loop0: detected capacity change from 0 to 256 [ 988.557649][T11250] exfat: Deprecated parameter 'utf8' [ 988.597004][T11250] exfat: Deprecated parameter 'utf8' [ 988.625891][T11250] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 989.764483][T11258] loop3: detected capacity change from 0 to 512 [ 989.772483][T11258] EXT4-fs (loop3): Test dummy encryption mode enabled [ 989.862855][T11258] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.2682: inode has both inline data and extents flags [ 989.877103][T11258] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2682: couldn't read orphan inode 15 (err -117) [ 989.891141][T11258] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 990.247247][T11263] caif0: tun_chr_ioctl cmd 2148553947 [ 990.767032][ T290] EXT4-fs (loop3): unmounting filesystem. [ 990.788413][ T288] EXT4-fs (loop4): unmounting filesystem. [ 992.523260][T11289] loop4: detected capacity change from 0 to 512 [ 992.562425][T11289] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 994.527112][T11292] loop3: detected capacity change from 0 to 512 [ 994.618446][T11292] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 994.685495][T11314] loop4: detected capacity change from 0 to 512 [ 994.698398][T11314] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 994.809565][T11321] loop2: detected capacity change from 0 to 512 [ 994.889326][T11321] EXT4-fs (loop2): Test dummy encryption mode enabled [ 995.756054][T11321] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.2696: inode has both inline data and extents flags [ 995.789227][T11321] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.2696: couldn't read orphan inode 15 (err -117) [ 995.803856][T11321] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 995.904074][T11322] loop0: detected capacity change from 0 to 256 [ 996.040092][T11322] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 996.098392][T11332] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.105817][T11332] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.145144][ T291] EXT4-fs (loop2): unmounting filesystem. [ 996.185418][T11335] ip_tables: iptables: counters copy to user failed while replacing table [ 996.920983][ T28] audit: type=1400 audit(1794426460.201:1534): avc: denied { ioctl } for pid=11342 comm="syz.3.2703" path="socket:[49283]" dev="sockfs" ino=49283 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 996.992959][T11341] loop4: detected capacity change from 0 to 512 [ 997.351659][T11341] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 997.615046][T11351] loop1: detected capacity change from 0 to 512 [ 997.671486][T11351] EXT4-fs (loop1): Test dummy encryption mode enabled [ 998.263190][T11351] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.2705: inode has both inline data and extents flags [ 998.277515][T11351] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.2705: couldn't read orphan inode 15 (err -117) [ 998.290753][T11351] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 998.786162][ T289] EXT4-fs (loop1): unmounting filesystem. [ 1002.338436][ T28] audit: type=1400 audit(1794426721.660:1535): avc: denied { write } for pid=11373 comm="syz.0.2711" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1002.659934][T11376] caif0: tun_chr_ioctl cmd 2148553947 [ 1002.899145][ T28] audit: type=1400 audit(1794426721.660:1536): avc: denied { map } for pid=11373 comm="syz.0.2711" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1003.016296][T11386] loop3: detected capacity change from 0 to 256 [ 1003.033682][T11386] exfat: Deprecated parameter 'utf8' [ 1003.039150][T11386] exfat: Deprecated parameter 'utf8' [ 1003.069878][T11386] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1003.089689][T11390] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1004.437138][T11406] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2718'. [ 1005.216167][T11408] loop3: detected capacity change from 0 to 512 [ 1005.719797][T11408] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1005.763972][T11387] loop1: detected capacity change from 0 to 512 [ 1005.914150][T11387] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1005.925376][T11408] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.2720: inode has both inline data and extents flags [ 1005.940516][T11408] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2720: couldn't read orphan inode 15 (err -117) [ 1005.953007][T11408] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1005.993348][T11406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2718'. [ 1006.041936][T11406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2718'. [ 1006.049438][T11387] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.2713: inode has both inline data and extents flags [ 1006.069730][T11387] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.2713: couldn't read orphan inode 15 (err -117) [ 1006.123139][T11387] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1006.152271][ T290] EXT4-fs (loop3): unmounting filesystem. [ 1007.520043][ T28] audit: type=1400 audit(1794427238.960:1537): avc: denied { ioctl } for pid=11435 comm="syz.0.2724" path="socket:[49151]" dev="sockfs" ino=49151 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1007.548508][T11436] device syzkaller0 entered promiscuous mode [ 1007.626122][T11438] printk: console [ttyS0] disabled syzkaller syzkaller login: [ 1014.332749][T11517] printk: console [ttyS0] enabled [ 1014.389361][T11519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.396572][T11519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.434211][T11520] ip_tables: iptables: counters copy to user failed while replacing table [ 1014.444303][T11520] ip_tables: iptables: counters copy to user failed while replacing table [ 1014.513457][T11521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.520692][T11521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.528222][T11521] device bridge_slave_0 entered promiscuous mode [ 1014.535774][T11521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.542964][T11521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.550772][T11521] device bridge_slave_1 entered promiscuous mode [ 1014.608210][T11521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.615320][T11521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.622791][T11521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.629872][T11521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.645714][ T288] EXT4-fs (loop4): unmounting filesystem. [ 1014.714102][T11521] device veth0_vlan entered promiscuous mode [ 1014.753131][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1014.767337][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1014.776036][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1014.785644][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1014.793898][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1014.803694][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1014.816839][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1014.840853][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1014.857758][T11532] loop4: detected capacity change from 0 to 256 [ 1014.895407][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1016.029384][T11539] loop5: detected capacity change from 0 to 512 [ 1016.831634][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1016.843341][T11539] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1016.854462][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1016.864512][T11539] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1016.886510][T11550] printk: console [ttyS0] disabled [ 1016.898212][T11521] device veth1_macvtap entered promiscuous mode [ 1016.960460][T11550] printk: console [ttyS0] enabled [ 1016.974715][T11552] loop2: detected capacity change from 0 to 256 [ 1016.985880][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1017.008784][T11552] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1017.051478][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1017.062189][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1017.080885][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1017.098629][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1017.116721][ T28] audit: type=1400 audit(1794427504.606:1553): avc: denied { read } for pid=11556 comm="syz.4.2765" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1017.141233][ T8074] device bridge_slave_1 left promiscuous mode [ 1017.147583][ T8074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.148167][T11557] loop4: detected capacity change from 0 to 256 [ 1017.177015][ T8074] device bridge_slave_0 left promiscuous mode [ 1017.190924][T11557] exfat: Deprecated parameter 'utf8' [ 1017.196743][ T8074] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.207727][ T8074] device veth1_macvtap left promiscuous mode [ 1017.208878][T11557] exfat: Deprecated parameter 'utf8' [ 1017.222656][ T8074] device veth0_vlan left promiscuous mode [ 1017.229318][ T28] audit: type=1400 audit(1794427504.606:1554): avc: denied { open } for pid=11556 comm="syz.4.2765" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1017.259718][T11557] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1017.288408][ T6170] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1017.479650][ T6170] usb 4-1: config 0 has no interfaces? [ 1017.486761][ T6170] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1017.560487][T11559] ip_tables: iptables: counters copy to user failed while replacing table [ 1017.797542][ T6170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.805677][ T6170] usb 4-1: Product: syz [ 1017.809896][ T6170] usb 4-1: Manufacturer: syz [ 1017.814518][ T6170] usb 4-1: SerialNumber: syz [ 1017.843139][ T6170] usb 4-1: config 0 descriptor?? [ 1018.050794][ T19] usb 4-1: USB disconnect, device number 32 [ 1018.570197][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1018.570252][ T28] audit: type=1400 audit(1794427506.066:1557): avc: denied { map } for pid=11571 comm="syz.4.2767" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1018.575500][T11572] loop4: detected capacity change from 0 to 256 [ 1018.749731][ T28] audit: type=1400 audit(1794427506.246:1558): avc: denied { call } for pid=11571 comm="syz.4.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1018.903197][T11486] EXT4-fs (loop5): unmounting filesystem. [ 1018.913543][T11576] printk: console [ttyS0] disabled [ 1018.942710][T11576] printk: console [ttyS0] enabled [ 1019.012434][T11580] netlink: 'syz.7.2770': attribute type 4 has an invalid length. [ 1019.032832][T11580] netlink: 'syz.7.2770': attribute type 4 has an invalid length. [ 1019.054118][T11580] syz.7.2770 (11580) used greatest stack depth: 21472 bytes left [ 1019.173806][T11586] ./dev/sda1: Can't open blockdev [ 1019.235445][T11582] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1019.414256][T11594] loop2: detected capacity change from 0 to 256 [ 1019.427370][T11594] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1019.554420][T11594] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1019.587895][T11598] loop7: detected capacity change from 0 to 512 [ 1019.599033][T11598] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1019.689221][T11597] loop4: detected capacity change from 0 to 256 [ 1019.699645][T11598] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.2773: inode has both inline data and extents flags [ 1019.714033][T11598] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.2773: couldn't read orphan inode 15 (err -117) [ 1019.727467][T11598] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1019.899187][T11594] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 1020.382433][T11605] IPv6: NLM_F_CREATE should be specified when creating new route [ 1020.504080][T11607] loop4: detected capacity change from 0 to 512 [ 1020.534180][T11607] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1020.556924][T11521] EXT4-fs (loop7): unmounting filesystem. [ 1020.642138][T11607] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2777: invalid indirect mapped block 256 (level 1) [ 1020.712356][T11607] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2777: invalid indirect mapped block 2683928664 (level 1) [ 1020.804233][T11607] EXT4-fs (loop4): 1 truncate cleaned up [ 1020.836003][T11607] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1021.044157][T11621] loop3: detected capacity change from 0 to 256 [ 1021.107918][T11625] netlink: 'syz.7.2783': attribute type 4 has an invalid length. [ 1021.128731][T11625] netlink: 'syz.7.2783': attribute type 4 has an invalid length. [ 1021.568580][ T28] audit: type=1400 audit(1794427509.016:1559): avc: denied { bind } for pid=11604 comm="syz.4.2777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1021.621771][ T28] audit: type=1400 audit(1794427509.016:1560): avc: denied { setopt } for pid=11604 comm="syz.4.2777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1021.692706][ T288] EXT4-fs (loop4): unmounting filesystem. [ 1021.700313][T11634] ./dev/sda1: Can't open blockdev [ 1021.737349][T11636] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 25 (only 8 groups) [ 1022.111679][T11648] netlink: 'syz.7.2787': attribute type 4 has an invalid length. [ 1022.129420][T11648] netlink: 'syz.7.2787': attribute type 4 has an invalid length. [ 1022.144968][T11649] loop4: detected capacity change from 0 to 4096 [ 1022.155399][T11649] EXT4-fs: Ignoring removed mblk_io_submit option [ 1022.169824][T11649] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1022.198168][T11649] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1022.687287][T11659] loop5: detected capacity change from 0 to 512 [ 1022.698243][T11659] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1022.814326][T11659] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.2789: inode has both inline data and extents flags [ 1022.829930][T11659] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.2789: couldn't read orphan inode 15 (err -117) [ 1023.095520][T11659] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1023.415763][ T28] audit: type=1400 audit(1794427510.906:1561): avc: denied { ioctl } for pid=11667 comm="syz.2.2794" path="socket:[51926]" dev="sockfs" ino=51926 ioctlcmd=0x8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1023.449790][T11486] EXT4-fs (loop5): unmounting filesystem. [ 1023.585045][ T288] EXT4-fs (loop4): unmounting filesystem. [ 1023.708863][T11680] loop5: detected capacity change from 0 to 512 [ 1023.759913][T11680] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1023.857903][T11680] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.2795: inode has both inline data and extents flags [ 1023.872584][T11680] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.2795: couldn't read orphan inode 15 (err -117) [ 1023.887300][T11680] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1023.978168][T11683] ./dev/sda1: Can't open blockdev [ 1024.474916][T11687] loop2: detected capacity change from 0 to 256 [ 1024.504874][T11690] loop4: detected capacity change from 0 to 256 [ 1024.539572][T11687] exfat: Deprecated parameter 'utf8' [ 1024.619747][T11687] exfat: Deprecated parameter 'utf8' [ 1024.731373][T11486] EXT4-fs (loop5): unmounting filesystem. [ 1024.829929][T11687] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1025.078409][T11697] ip_tables: iptables: counters copy to user failed while replacing table [ 1025.538130][T11701] loop4: detected capacity change from 0 to 256 [ 1025.568384][ T762] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1025.788292][ T762] usb 6-1: Using ep0 maxpacket: 8 [ 1025.798013][ T762] usb 6-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 1025.906238][ T762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.555503][ T762] usb 6-1: Product: syz [ 1026.574183][ T762] usb 6-1: Manufacturer: syz [ 1026.595451][ T762] usb 6-1: SerialNumber: syz [ 1026.949224][T11710] loop2: detected capacity change from 0 to 4096 [ 1027.111104][ T762] usb 6-1: unit 0 not found! [ 1027.134039][T11710] EXT4-fs: Ignoring removed mblk_io_submit option [ 1027.298888][T11710] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1027.375940][T11710] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1027.388372][ T762] usb 6-1: USB disconnect, device number 2 [ 1027.578723][T11722] loop3: detected capacity change from 0 to 256 [ 1027.587826][T11722] exfat: Deprecated parameter 'utf8' [ 1027.598597][T11722] exfat: Deprecated parameter 'utf8' [ 1027.746056][T11724] loop4: detected capacity change from 0 to 512 [ 1027.756588][T11724] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1027.782688][T11696] syz.5.2800 (11696) used greatest stack depth: 20136 bytes left [ 1027.932813][T11724] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.2806: inode has both inline data and extents flags [ 1027.948361][T11724] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.2806: couldn't read orphan inode 15 (err -117) [ 1027.961780][T11724] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1028.088979][T11722] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1028.473191][T11727] loop5: detected capacity change from 0 to 256 [ 1028.622040][T11727] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1028.688176][T11729] ip_tables: iptables: counters copy to user failed while replacing table [ 1028.707086][ T288] EXT4-fs (loop4): unmounting filesystem. [ 1028.967780][T11727] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1028.982486][T11727] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 1029.088811][ T291] EXT4-fs (loop2): unmounting filesystem. [ 1029.181465][T11740] ip_tables: iptables: counters copy to user failed while replacing table [ 1029.191180][T11740] ip_tables: iptables: counters copy to user failed while replacing table [ 1029.209948][T11742] loop2: detected capacity change from 0 to 256 [ 1029.218223][T11742] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1029.248170][T11742] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1029.280362][T11742] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 1029.311942][T11745] loop7: detected capacity change from 0 to 256 [ 1029.312877][T11746] loop3: detected capacity change from 0 to 256 [ 1029.359302][T11746] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1029.415615][T11748] loop7: detected capacity change from 0 to 256 [ 1029.454292][T11748] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1029.516125][T11748] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1029.563250][T11748] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 1029.836211][T11755] loop5: detected capacity change from 0 to 4096 [ 1029.861525][T11755] EXT4-fs: Ignoring removed mblk_io_submit option [ 1029.905697][T11755] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1030.026848][T11755] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1030.136338][T11759] loop4: detected capacity change from 0 to 256 [ 1030.163815][T11756] exFAT-fs (loop7): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 1030.196516][T11759] exfat: Deprecated parameter 'utf8' [ 1030.209933][T11756] exFAT-fs (loop7): Filesystem has been set read-only [ 1030.223324][T11759] exfat: Deprecated parameter 'utf8' [ 1030.249817][T11759] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1030.431688][T11521] exFAT-fs (loop7): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 1030.445798][T11521] exFAT-fs (loop7): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 1030.541374][T11765] ip_tables: iptables: counters copy to user failed while replacing table [ 1030.832215][T11486] EXT4-fs (loop5): unmounting filesystem. [ 1032.419443][T11778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.436299][T11791] loop3: detected capacity change from 0 to 256 [ 1032.442818][T11778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.467998][T11778] device bridge_slave_0 entered promiscuous mode [ 1032.476923][ T43] device bridge_slave_1 left promiscuous mode [ 1032.485749][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.500672][ T43] device bridge_slave_0 left promiscuous mode [ 1032.512047][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.528397][ T43] device veth1_macvtap left promiscuous mode [ 1032.534608][ T43] device veth0_vlan left promiscuous mode [ 1032.559176][T11796] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1032.580703][ T28] audit: type=1400 audit(1794427776.126:1562): avc: denied { write } for pid=11795 comm="syz.4.2830" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1032.624440][ T28] audit: type=1400 audit(1794427776.166:1563): avc: denied { ioctl } for pid=11785 comm="syz.5.2827" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=51032 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1032.815815][T11778] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.829249][T11778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.877555][T11778] device bridge_slave_1 entered promiscuous mode [ 1032.901759][T11797] netlink: 'syz.2.2829': attribute type 4 has an invalid length. [ 1032.926958][T11803] netlink: 'syz.2.2829': attribute type 4 has an invalid length. [ 1033.339838][T11813] set_capacity_and_notify: 1 callbacks suppressed [ 1033.339871][T11813] loop2: detected capacity change from 0 to 512 [ 1034.143823][T11813] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1034.267972][T11813] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.2832: inode has both inline data and extents flags [ 1034.282587][T11813] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.2832: couldn't read orphan inode 15 (err -117) [ 1034.296140][T11813] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1034.540253][T11816] loop3: detected capacity change from 0 to 512 [ 1034.572216][ T291] EXT4-fs (loop2): unmounting filesystem. [ 1034.578474][T11802] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1034.638588][T11816] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1034.655389][T11818] loop5: detected capacity change from 0 to 512 [ 1034.670796][T11816] ext4 filesystem being mounted at /561/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1034.674477][ T43] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 1034.698683][T11818] ./dev/sda1: Can't open blockdev [ 1034.705724][ T43] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1034.705724][ T43] [ 1034.719692][ T28] audit: type=1400 audit(1794428034.320:1564): avc: denied { append } for pid=11815 comm="syz.3.2833" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1034.738372][ T43] EXT4-fs (loop4): Total free blocks count 0 [ 1034.753551][T11822] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 25 (only 8 groups) [ 1034.767135][ T43] EXT4-fs (loop4): Free/Dirty block details [ 1034.773591][ T43] EXT4-fs (loop4): free_blocks=2415919504 [ 1034.779845][ T43] EXT4-fs (loop4): dirty_blocks=2272 [ 1034.785256][ T43] EXT4-fs (loop4): Block reservation details [ 1034.791927][ T43] EXT4-fs (loop4): i_reserved_data_blocks=142 [ 1034.798464][ T28] audit: type=1400 audit(1794428034.350:1565): avc: denied { setattr } for pid=11815 comm="syz.3.2833" path="/561/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1034.822737][ T28] audit: type=1400 audit(1794428034.360:1566): avc: denied { map } for pid=11815 comm="syz.3.2833" path="/561/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1034.855387][ T43] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 222 with error 28 [ 1034.881925][T11827] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #18: comm syz.3.2833: corrupted inode contents [ 1034.905799][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1034.915028][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1034.923788][T11827] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #18: comm syz.3.2833: mark_inode_dirty error [ 1034.935574][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1034.945400][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1034.968628][T11827] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #18: comm syz.3.2833: corrupted inode contents [ 1034.981118][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.988179][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.996151][T11827] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2947: inode #18: comm syz.3.2833: mark_inode_dirty error [ 1035.009451][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1035.017214][T11827] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2950: inode #18: comm syz.3.2833: mark inode dirty (error -117) [ 1035.040613][T11827] EXT4-fs warning (device loop3): ext4_evict_inode:301: xattr delete (err -117) [ 1035.052872][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1035.078655][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1035.095145][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.102254][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.110304][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1035.118613][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1035.126736][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1035.147229][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1035.159120][T11829] netlink: 'syz.4.2836': attribute type 4 has an invalid length. [ 1035.202751][T11832] netlink: 'syz.4.2836': attribute type 4 has an invalid length. [ 1035.252932][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1035.253372][ T290] EXT4-fs (loop3): unmounting filesystem. [ 1035.266545][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1035.273495][T11829] ./dev/sda1: Can't open blockdev [ 1035.281217][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1035.290589][T11778] device veth0_vlan entered promiscuous mode [ 1035.624633][T11778] device veth1_macvtap entered promiscuous mode [ 1035.882079][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1036.097836][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1036.216216][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1036.516605][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1036.552679][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1036.602344][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1036.651735][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1036.686556][T11858] netlink: 'syz.5.2841': attribute type 4 has an invalid length. [ 1036.696754][T11855] ./dev/sda1: Can't open blockdev [ 1038.013193][T11864] netlink: 'syz.5.2841': attribute type 4 has an invalid length. [ 1038.336938][T11874] loop3: detected capacity change from 0 to 512 [ 1038.378040][T11857] syz.4.2842 (11857) used greatest stack depth: 18728 bytes left [ 1038.413159][T11874] ./dev/sda1: Can't open blockdev [ 1038.500641][T11883] netlink: 216 bytes leftover after parsing attributes in process `syz.5.2851'. [ 1038.513920][T11884] loop8: detected capacity change from 0 to 256 [ 1038.526811][T11883] tc_dump_action: action bad kind [ 1038.538992][T11884] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1038.560123][T11884] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1038.579665][T11884] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 1038.695148][ T514] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1038.906233][ T514] usb 3-1: Using ep0 maxpacket: 8 [ 1038.917383][ T514] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 1038.997967][T11896] loop3: detected capacity change from 0 to 512 [ 1039.009537][ T514] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.056902][ T514] usb 3-1: Product: syz [ 1039.074673][ T514] usb 3-1: Manufacturer: syz [ 1039.083257][T11896] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1039.100702][T11896] ext4 filesystem being mounted at /566/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1039.111736][ T514] usb 3-1: SerialNumber: syz [ 1039.167869][T11884] exFAT-fs (loop8): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 1039.205940][T11884] exFAT-fs (loop8): Filesystem has been set read-only [ 1039.324736][T11778] exFAT-fs (loop8): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 1039.348446][T11778] exFAT-fs (loop8): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 1039.395006][T11902] netlink: 'syz.4.2856': attribute type 4 has an invalid length. [ 1039.409653][T11902] netlink: 'syz.4.2856': attribute type 4 has an invalid length. [ 1039.418107][ T514] usb 3-1: unit 0 not found! [ 1039.451595][ T514] usb 3-1: USB disconnect, device number 18 [ 1039.458658][T11902] ./dev/sda1: Can't open blockdev [ 1039.473958][ T28] audit: type=1400 audit(1794428039.070:1567): avc: denied { execute } for pid=11893 comm="syz.3.2854" path="/566/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1039.506302][ T290] EXT4-fs (loop3): unmounting filesystem. [ 1039.564941][T11906] loop3: detected capacity change from 0 to 256 [ 1039.974866][T11910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.014019][T11910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.085540][T11910] device bridge_slave_0 entered promiscuous mode [ 1040.101480][T11910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.108883][T11910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.116695][T11910] device bridge_slave_1 entered promiscuous mode [ 1040.201216][T11910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.208463][T11910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1040.215788][T11910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.222900][T11910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1040.254419][T11920] loop4: detected capacity change from 0 to 512 [ 1040.267746][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1040.284100][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.292555][T11920] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1040.300908][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.309110][T11920] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2862: invalid indirect mapped block 256 (level 1) [ 1040.323586][T11920] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2862: invalid indirect mapped block 2683928664 (level 1) [ 1040.338128][T11920] EXT4-fs (loop4): 1 truncate cleaned up [ 1040.344223][T11920] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1040.353356][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1040.366242][ T6094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.373339][ T6094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1040.411573][ T308] device bridge_slave_1 left promiscuous mode [ 1040.428578][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.461962][ T308] device bridge_slave_0 left promiscuous mode [ 1040.468158][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.499553][ T308] device veth1_macvtap left promiscuous mode [ 1040.505663][ T308] device veth0_vlan left promiscuous mode [ 1040.620569][T11928] loop3: detected capacity change from 0 to 256 [ 1040.673500][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1040.682243][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1040.746983][ T6094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.754158][ T6094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1040.874997][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1040.884681][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1040.902352][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1040.910717][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1040.927436][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1040.936243][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1040.944931][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1040.953472][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1040.963314][T11910] device veth0_vlan entered promiscuous mode [ 1040.970074][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1040.978008][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1040.993263][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1041.001884][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1041.011910][T11910] device veth1_macvtap entered promiscuous mode [ 1041.032616][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1041.041871][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1041.051241][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1041.071750][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1041.096255][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1041.144540][ T288] EXT4-fs (loop4): unmounting filesystem. [ 1041.388126][T11941] loop4: detected capacity change from 0 to 512 [ 1041.479079][T11941] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1041.566826][T11941] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.2865: inode has both inline data and extents flags [ 1041.582094][T11941] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.2865: couldn't read orphan inode 15 (err -117) [ 1041.596071][T11941] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1042.149976][T11946] netlink: 'syz.3.2869': attribute type 4 has an invalid length. [ 1042.191350][T11946] netlink: 'syz.3.2869': attribute type 4 has an invalid length. [ 1042.279526][T11948] loop3: detected capacity change from 0 to 256 [ 1042.395928][ T288] EXT4-fs (loop4): unmounting filesystem. [ 1042.474515][T11951] loop4: detected capacity change from 0 to 4096 [ 1042.489892][T11951] EXT4-fs: Ignoring removed mblk_io_submit option [ 1042.503584][T11951] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1042.510724][ T514] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1042.520198][T11951] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1042.718326][ T514] usb 10-1: Using ep0 maxpacket: 8 [ 1042.729933][ T514] usb 10-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 1042.751874][ T28] audit: type=1400 audit(1794428298.399:1568): avc: denied { mounton } for pid=11950 comm="syz.4.2871" path=2F3537342F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1042.879788][ T288] EXT4-fs (loop4): unmounting filesystem. [ 1042.885724][ T514] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.894280][ T514] usb 10-1: Product: syz [ 1042.898797][ T514] usb 10-1: Manufacturer: syz [ 1042.903594][ T514] usb 10-1: SerialNumber: syz [ 1042.936261][T11961] loop4: detected capacity change from 0 to 256 [ 1042.951917][T11961] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1042.963908][T11961] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1042.975835][T11961] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 1042.992493][T11963] loop2: detected capacity change from 0 to 256 [ 1043.117051][ T514] usb 10-1: unit 0 not found! [ 1043.145903][ T514] usb 10-1: USB disconnect, device number 2 [ 1043.380244][T11973] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1043.389293][T11973] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1043.580341][T11486] EXT4-fs (loop5): unmounting filesystem. [ 1043.680757][T11983] set_capacity_and_notify: 1 callbacks suppressed [ 1043.680776][T11983] loop9: detected capacity change from 0 to 512 [ 1043.721662][T11983] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1043.730955][T11983] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1044.110725][T11989] EXT4-fs error (device loop9): ext4_do_update_inode:5281: inode #18: comm syz.9.2878: corrupted inode contents [ 1044.311453][T11989] EXT4-fs error (device loop9): ext4_dirty_inode:6158: inode #18: comm syz.9.2878: mark_inode_dirty error [ 1045.417209][T11999] loop3: detected capacity change from 0 to 512 [ 1046.028334][T11989] EXT4-fs error (device loop9): ext4_do_update_inode:5281: inode #18: comm syz.9.2878: corrupted inode contents [ 1046.040506][T11989] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2947: inode #18: comm syz.9.2878: mark_inode_dirty error [ 1046.058534][T11999] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1046.497017][T11989] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2950: inode #18: comm syz.9.2878: mark inode dirty (error -117) [ 1046.509916][T11999] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.2881: inode has both inline data and extents flags [ 1046.523450][T11999] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2881: couldn't read orphan inode 15 (err -117) [ 1046.525670][T11989] EXT4-fs warning (device loop9): ext4_evict_inode:301: xattr delete (err -117) [ 1046.568580][T11999] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1046.772437][T12004] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 25 (only 8 groups) [ 1046.899286][ T290] EXT4-fs (loop3): unmounting filesystem. [ 1046.960086][T11910] EXT4-fs (loop9): unmounting filesystem. [ 1046.996386][T12013] loop3: detected capacity change from 0 to 512 [ 1047.022594][T12013] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1047.823866][T12013] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1047.879824][T12033] loop5: detected capacity change from 0 to 256 [ 1047.890074][T12035] loop2: detected capacity change from 0 to 256 [ 1047.902279][T12036] loop4: detected capacity change from 0 to 256 [ 1047.921036][T12033] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1047.926974][T12036] exfat: Deprecated parameter 'utf8' [ 1047.938116][T12036] exfat: Deprecated parameter 'utf8' [ 1047.947795][T12035] exfat: Deprecated parameter 'utf8' [ 1047.956773][T12035] exfat: Deprecated parameter 'utf8' [ 1047.963362][T12033] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1047.970760][T12036] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1047.985393][T12033] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 1048.005882][T12035] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1048.313494][T12046] ip_tables: iptables: counters copy to user failed while replacing table [ 1048.587013][ T290] EXT4-fs (loop3): unmounting filesystem. [ 1048.616969][T12052] loop9: detected capacity change from 0 to 512 [ 1048.644550][T12052] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1048.653772][T12052] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1048.824195][T12058] loop3: detected capacity change from 0 to 512 [ 1048.909123][T12058] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1048.994477][T12058] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.2895: inode has both inline data and extents flags [ 1049.009270][T12058] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2895: couldn't read orphan inode 15 (err -117) [ 1049.022271][T12058] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1049.105819][T12059] EXT4-fs error (device loop9): ext4_do_update_inode:5281: inode #18: comm syz.9.2896: corrupted inode contents [ 1049.615039][T12059] EXT4-fs error (device loop9): ext4_dirty_inode:6158: inode #18: comm syz.9.2896: mark_inode_dirty error [ 1049.684537][T12066] loop4: detected capacity change from 0 to 4096 [ 1049.693143][T12059] EXT4-fs error (device loop9): ext4_do_update_inode:5281: inode #18: comm syz.9.2896: corrupted inode contents [ 1049.827995][T12070] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1049.857074][ T290] EXT4-fs (loop3): unmounting filesystem. [ 1049.907453][T12066] EXT4-fs: Ignoring removed mblk_io_submit option [ 1049.928382][ T28] audit: type=1400 audit(1794428817.596:1569): avc: denied { getopt } for pid=12067 comm="syz.2.2898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1050.013688][T12059] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2947: inode #18: comm syz.9.2896: mark_inode_dirty error [ 1050.028080][T12066] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1050.046406][T12066] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1050.536926][T12079] ip_tables: iptables: counters copy to user failed while replacing table [ 1050.581776][ T288] EXT4-fs (loop4): unmounting filesystem. [ 1050.597557][T12059] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2950: inode #18: comm syz.9.2896: mark inode dirty (error -117) [ 1050.627985][T12059] EXT4-fs warning (device loop9): ext4_evict_inode:301: xattr delete (err -117) [ 1050.662683][T12083] loop5: detected capacity change from 0 to 256 [ 1050.806634][T12083] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1050.832598][T12083] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1050.965842][T12083] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 1051.141124][T12089] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1051.189198][T11910] EXT4-fs (loop9): unmounting filesystem. [ 1051.595474][T12098] loop3: detected capacity change from 0 to 512 [ 1051.674614][T12101] loop2: detected capacity change from 0 to 256 [ 1052.513885][T12093] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 1052.528985][T12098] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1052.540456][T12105] loop4: detected capacity change from 0 to 256 [ 1052.558568][T12098] ext4 filesystem being mounted at /578/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1052.569770][T12093] exFAT-fs (loop5): Filesystem has been set read-only [ 1052.589068][T12105] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1052.611283][T12093] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 1052.649659][T12105] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1052.681709][T12105] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 1052.810125][T12109] loop2: detected capacity change from 0 to 256 [ 1052.821545][T12109] exfat: Deprecated parameter 'utf8' [ 1052.822193][T11486] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 1052.827037][T12109] exfat: Deprecated parameter 'utf8' [ 1052.850262][T12109] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1052.888480][T11486] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 1053.061053][ T290] EXT4-fs (loop3): unmounting filesystem. [ 1053.283423][T12119] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 1053.387408][T12119] exFAT-fs (loop4): Filesystem has been set read-only [ 1053.412265][T12111] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 1053.641592][ T288] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 1053.672660][ T288] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 1053.762313][T12125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.769808][T12125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.777502][T12125] device bridge_slave_0 entered promiscuous mode [ 1053.784900][T12125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.792704][T12125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.800446][T12125] device bridge_slave_1 entered promiscuous mode [ 1053.883115][T12125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.890264][T12125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1053.897607][T12125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.904749][T12125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1054.017365][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1054.034796][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.069174][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.097752][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1054.111138][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1054.129089][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.136194][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1054.168381][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1054.176833][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1054.207850][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.214972][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1054.238383][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1054.258523][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1054.266643][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1054.288610][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1054.307212][T11846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.328950][T11846] device bridge_slave_0 left promiscuous mode [ 1054.335143][T11846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.367922][T11846] device veth1_macvtap left promiscuous mode [ 1054.375055][T12137] loop9: detected capacity change from 0 to 256 [ 1054.377119][T11846] device veth0_vlan left promiscuous mode [ 1054.403723][T12137] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1054.417050][T12137] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1054.430834][T12137] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 1054.479884][T12137] exFAT-fs (loop9): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 1054.500491][T12137] exFAT-fs (loop9): Filesystem has been set read-only [ 1054.533289][T11910] exFAT-fs (loop9): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 1054.553168][T11910] exFAT-fs (loop9): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 1054.616854][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1054.625870][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1054.634591][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1054.647451][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1054.655987][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1054.664791][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1054.673350][T12125] device veth0_vlan entered promiscuous mode [ 1054.733170][T12142] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1055.113933][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1055.125364][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1055.151952][T12125] device veth1_macvtap entered promiscuous mode [ 1055.167693][T12138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.188690][T12138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.196293][T12138] device bridge_slave_0 entered promiscuous mode [ 1055.222936][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1055.231454][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1055.248643][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1055.262788][T12138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.279443][T12138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.287020][T12138] device bridge_slave_1 entered promiscuous mode [ 1055.311059][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1055.319874][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1055.403955][T12150] loop0: detected capacity change from 0 to 512 [ 1055.431127][T12150] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1055.440261][T12150] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1055.455702][ T43] tipc: Left network mode [ 1055.845108][T12158] loop2: detected capacity change from 0 to 256 [ 1055.889888][T12158] exfat: Deprecated parameter 'utf8' [ 1055.899597][T12158] exfat: Deprecated parameter 'utf8' [ 1055.914176][T12158] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1055.984705][T12138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.991869][T12138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1055.999202][T12138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.006248][T12138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.047208][T12125] EXT4-fs (loop0): unmounting filesystem. [ 1056.049989][T12147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.060161][T12147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.067812][T12147] device bridge_slave_0 entered promiscuous mode [ 1056.081580][T12147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.089724][T12147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.098902][T12147] device bridge_slave_1 entered promiscuous mode [ 1056.131569][T12164] ip_tables: iptables: counters copy to user failed while replacing table [ 1056.396854][ T545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.404639][ T545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.407362][T12168] loop0: detected capacity change from 0 to 256 [ 1056.420083][T12168] exfat: Deprecated parameter 'utf8' [ 1056.425557][T12168] exfat: Deprecated parameter 'utf8' [ 1056.440674][T12168] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1056.539585][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1056.595785][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1056.605950][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1056.616579][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1056.627628][ T545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.634732][ T545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.300919][T11846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1057.314480][T11846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1057.323095][T11846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.330243][T11846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.381633][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1057.392477][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1057.402281][T12183] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1057.495000][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1057.504946][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1057.749764][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1057.758655][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1057.775668][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1057.783787][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1057.793466][T12138] device veth0_vlan entered promiscuous mode [ 1057.800583][ T43] device bridge_slave_1 left promiscuous mode [ 1057.806739][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.814791][ T43] device bridge_slave_0 left promiscuous mode [ 1057.821087][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.830099][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.837756][ T43] device bridge_slave_0 left promiscuous mode [ 1057.844293][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.869632][ T43] device veth1_macvtap left promiscuous mode [ 1057.875742][ T43] device veth0_vlan left promiscuous mode [ 1057.890838][ T43] device veth1_macvtap left promiscuous mode [ 1057.897193][ T43] device veth0_vlan left promiscuous mode [ 1057.938729][T12189] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 25 (only 8 groups) [ 1058.296188][T12194] loop3: detected capacity change from 0 to 256 [ 1058.463428][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1058.471063][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1058.481683][T12196] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.511865][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1058.523352][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1058.543529][T12138] device veth1_macvtap entered promiscuous mode [ 1058.553402][T12201] binder: BINDER_SET_CONTEXT_MGR already set [ 1058.559835][T12201] binder: 12200:12201 ioctl 4018620d 200000000140 returned -16 [ 1058.570133][T12201] loop2: detected capacity change from 0 to 256 [ 1058.582368][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1058.596167][T12201] exfat: Deprecated parameter 'utf8' [ 1058.604181][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1058.613756][T12201] exfat: Deprecated parameter 'utf8' [ 1058.619765][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1058.631426][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1058.632625][T12201] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1058.645362][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1058.700079][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1058.716331][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1058.766182][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1058.783996][T12204] loop0: detected capacity change from 0 to 512 [ 1058.784006][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1058.785300][ T545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.805538][ T545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.854330][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1058.868853][T12205] ip_tables: iptables: counters copy to user failed while replacing table [ 1058.987872][T12204] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1058.997613][T12204] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1059.110252][T11846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1059.142717][T11846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1059.151366][T11846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.158470][T11846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1059.179757][T12210] loop3: detected capacity change from 0 to 256 [ 1059.189010][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1059.206329][T12210] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1059.220528][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1059.235960][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1059.244307][T12210] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1059.254191][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1059.263466][T12210] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 1060.099072][T12125] EXT4-fs (loop0): unmounting filesystem. [ 1060.202028][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1060.210864][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1060.225497][T12147] device veth0_vlan entered promiscuous mode [ 1060.233056][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1060.268014][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1060.301503][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1060.395842][T12233] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1060.768574][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1061.000613][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1061.042052][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1061.052400][T12147] device veth1_macvtap entered promiscuous mode [ 1061.063219][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1061.071922][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1061.081035][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1061.129055][T12235] loop3: detected capacity change from 0 to 4096 [ 1061.135789][T12235] EXT4-fs: Ignoring removed mblk_io_submit option [ 1061.150763][T11846] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1061.171532][T11846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1061.239337][T12235] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1061.282579][T12235] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1061.306448][T12243] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1062.125670][T12252] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1062.205758][T12253] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1062.729147][T12264] loop1: detected capacity change from 0 to 256 [ 1063.051959][T12264] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1063.160370][ T290] EXT4-fs (loop3): unmounting filesystem. [ 1063.314856][T12264] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1063.437454][T12268] loop0: detected capacity change from 0 to 4096 [ 1063.446303][T12270] netlink: 'syz.3.2948': attribute type 4 has an invalid length. [ 1063.454958][T12264] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 1063.513275][T12268] EXT4-fs: Ignoring removed mblk_io_submit option [ 1063.533429][T12268] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1063.561535][T12272] device bridge1 entered promiscuous mode [ 1063.585844][T12268] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1064.451667][T12125] EXT4-fs (loop0): unmounting filesystem. [ 1064.937568][T12296] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1065.028897][ T545] tipc: Left network mode [ 1065.122582][T12301] loop1: detected capacity change from 0 to 256 [ 1065.136452][T12301] exfat: Deprecated parameter 'utf8' [ 1065.174878][T12301] exfat: Deprecated parameter 'utf8' [ 1065.199729][T12301] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1065.237636][T12297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.263153][T12297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.293227][T12297] device bridge_slave_0 entered promiscuous mode [ 1065.313034][T12297] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.328286][T12297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.346283][T12297] device bridge_slave_1 entered promiscuous mode [ 1065.414432][T12314] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1065.891120][ T28] audit: type=1326 audit(1794428833.646:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.1.2960" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44bd3a8f19 code=0x7ffc0000 [ 1066.068143][ T28] audit: type=1326 audit(1794428833.676:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.1.2960" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44bd36974e code=0x7ffc0000 [ 1066.119138][ T545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.128947][ T545] device bridge_slave_0 left promiscuous mode [ 1066.187412][ T28] audit: type=1326 audit(1794428833.676:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.1.2960" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44bd36974e code=0x7ffc0000 [ 1066.213749][ T545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.249437][ T545] device veth0_vlan left promiscuous mode [ 1066.269966][ T28] audit: type=1326 audit(1794428833.676:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.1.2960" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44bd3a8f19 code=0x7ffc0000 [ 1066.306239][ T28] audit: type=1326 audit(1794428833.676:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.1.2960" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44bd36974e code=0x7ffc0000 [ 1066.505544][ T28] audit: type=1326 audit(1794428833.676:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.1.2960" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44bd36974e code=0x7ffc0000 [ 1066.744045][T12331] loop6: detected capacity change from 0 to 4096 [ 1066.760393][T12331] EXT4-fs: Ignoring removed mblk_io_submit option [ 1066.766778][ T28] audit: type=1326 audit(1794428833.676:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.1.2960" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44bd36974e code=0x7ffc0000 [ 1066.799304][T12331] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1066.824299][T12331] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1066.896682][ T28] audit: type=1326 audit(1794428833.686:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.1.2960" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44bd36974e code=0x7ffc0000 [ 1066.976137][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1066.989676][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1067.025051][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1067.033665][ T28] audit: type=1326 audit(1794428833.686:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.1.2960" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44bd36974e code=0x7ffc0000 [ 1067.060832][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1067.070600][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.077680][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.086619][ T28] audit: type=1326 audit(1794428833.686:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.1.2960" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44bd36974e code=0x7ffc0000 [ 1067.112493][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1067.121717][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1067.130644][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.137752][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.189748][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1067.222987][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1067.260946][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1067.394143][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1067.549395][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1067.716446][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1067.737017][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1067.756081][T12340] loop0: detected capacity change from 0 to 256 [ 1067.768130][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1067.782522][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1067.810424][T12297] device veth0_vlan entered promiscuous mode [ 1067.814161][T12340] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1067.819713][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1067.842784][T12340] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1067.856736][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1067.902431][T12344] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1067.927281][T12340] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 1067.997030][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1068.219634][T12147] EXT4-fs (loop6): unmounting filesystem. [ 1068.234740][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1068.270116][T12348] loop6: detected capacity change from 0 to 256 [ 1068.279036][T12348] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1068.290921][T12348] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1068.373786][T12297] device veth1_macvtap entered promiscuous mode [ 1068.382011][T12348] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 1068.412252][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1068.454515][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1068.482931][T12350] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 1068.505811][T12350] exFAT-fs (loop0): Filesystem has been set read-only [ 1068.513138][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1068.538396][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1069.785819][T12364] printk: console [ttyS0] disabled [ 1613.406238][T26570] printk: console [ttyS0] enabled [ 1613.641356][T26572] netlink: 400 bytes leftover after parsing attributes in process `syz.7.7456'. [ 1613.651113][T26572] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7456'. [ 1613.701276][T26586] set_capacity_and_notify: 12 callbacks suppressed [ 1613.701329][T26586] loop7: detected capacity change from 0 to 512 [ 1613.733646][T26586] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1613.743000][T26586] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1613.784583][T26592] xt_hashlimit: size too large, truncated to 1048576 [ 1613.794456][T26106] EXT4-fs (loop7): unmounting filesystem. [ 1613.842546][T26597] device syzkaller0 entered promiscuous mode [ 1613.890815][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 1613.890830][ T28] audit: type=1326 audit(2000000126.650:13597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26593 comm="syz.7.7465" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd64eda8f19 code=0x0 [ 1614.004141][ T28] audit: type=1400 audit(2000000126.760:13598): avc: denied { mount } for pid=26609 comm="syz.9.7471" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1614.046198][T26612] loop9: detected capacity change from 0 to 1024 [ 1614.063485][T26612] EXT4-fs: Ignoring removed bh option [ 1614.081516][T26612] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1614.100353][T26372] EXT4-fs (loop9): unmounting filesystem. [ 1614.275144][T26625] loop3: detected capacity change from 0 to 2048 [ 1614.283564][T26625] EXT4-fs: Ignoring removed nobh option [ 1614.300221][T26625] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1614.311174][ T28] audit: type=1400 audit(2000000127.070:13599): avc: denied { read write } for pid=26624 comm="syz.3.7477" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1614.334529][ T28] audit: type=1400 audit(2000000127.070:13600): avc: denied { open } for pid=26624 comm="syz.3.7477" path="/72/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1614.336937][ T545] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1614.373445][ T545] EXT4-fs (loop3): Remounting filesystem read-only [ 1614.381200][T25751] EXT4-fs (loop3): unmounting filesystem. [ 1614.402169][T26631] device syzkaller0 entered promiscuous mode [ 1614.533798][T26660] device syzkaller0 entered promiscuous mode [ 1614.554370][T26663] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 25 (only 8 groups) [ 1614.709522][T26676] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1614.729796][T11846] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1614.754723][T11846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1614.774499][T11846] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1614.783804][T11846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1614.794659][T11846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1614.805403][T11846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1614.816925][T11846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1614.827855][T11846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1614.841977][T26678] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1614.982353][T26693] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7508'. [ 1615.024752][T26697] device syzkaller0 entered promiscuous mode [ 1615.092081][ T28] audit: type=1326 audit(2000000127.850:13601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26698 comm="syz.2.7511" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efce37a8f19 code=0x0 [ 1615.163814][ T28] audit: type=1400 audit(2000000127.920:13602): avc: denied { load_policy } for pid=26723 comm="syz.7.7522" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1615.253055][T26733] device syzkaller0 entered promiscuous mode [ 1615.702898][T26741] loop3: detected capacity change from 0 to 512 [ 1615.715958][T26741] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1615.801633][ T28] audit: type=1400 audit(2000000128.560:13603): avc: denied { read } for pid=26750 comm="syz.3.7534" path="socket:[199614]" dev="sockfs" ino=199614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1615.897153][T26760] device syzkaller0 entered promiscuous mode [ 1615.911924][T26762] FAULT_INJECTION: forcing a failure. [ 1615.911924][T26762] name failslab, interval 1, probability 0, space 0, times 0 [ 1615.924728][T26762] CPU: 1 PID: 26762 Comm: syz.2.7539 Not tainted syzkaller #0 [ 1615.932234][T26762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1615.942336][T26762] Call Trace: [ 1615.945636][T26762] [ 1615.948571][T26762] __dump_stack+0x21/0x24 [ 1615.952921][T26762] dump_stack_lvl+0x110/0x170 [ 1615.957599][T26762] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1615.962802][T26762] ? fcntl_setlk+0xa6/0x1070 [ 1615.967511][T26762] dump_stack+0x15/0x24 [ 1615.971705][T26762] should_fail_ex+0x3bf/0x510 [ 1615.976396][T26762] ? posix_lock_inode+0x240/0x34e0 [ 1615.981521][T26762] __should_failslab+0xac/0xf0 [ 1615.986409][T26762] should_failslab+0x9/0x20 [ 1615.990930][T26762] kmem_cache_alloc+0x3b/0x320 [ 1615.995716][T26762] ? locks_get_lock_context+0x57/0x2d0 [ 1616.001190][T26762] posix_lock_inode+0x240/0x34e0 [ 1616.006148][T26762] ? file_has_perm+0x52d/0x700 [ 1616.010998][T26762] ? match_file+0x130/0x130 [ 1616.015524][T26762] ? posix_lock_file+0x50/0x50 [ 1616.020307][T26762] ? security_file_lock+0x8a/0xb0 [ 1616.025431][T26762] fcntl_setlk+0xa38/0x1070 [ 1616.029967][T26762] ? __cfi_fcntl_setlk+0x10/0x10 [ 1616.034924][T26762] ? __cfi_avc_has_perm+0x10/0x10 [ 1616.039972][T26762] ? __kasan_check_write+0x14/0x20 [ 1616.045111][T26762] do_fcntl+0x582/0x1110 [ 1616.049364][T26762] ? match_file+0x130/0x130 [ 1616.053885][T26762] ? kill_fasync+0x210/0x210 [ 1616.058534][T26762] ? __fget_files+0x2d1/0x330 [ 1616.063233][T26762] ? security_file_fcntl+0x95/0xc0 [ 1616.068348][T26762] __se_sys_fcntl+0xdf/0x1b0 [ 1616.072943][T26762] __x64_sys_fcntl+0x7b/0x90 [ 1616.077555][T26762] x64_sys_call+0x1a9/0x9a0 [ 1616.082106][T26762] do_syscall_64+0x4c/0xa0 [ 1616.086561][T26762] ? clear_bhb_loop+0x30/0x80 [ 1616.091276][T26762] ? clear_bhb_loop+0x30/0x80 [ 1616.095958][T26762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1616.101885][T26762] RIP: 0033:0x7efce37a8f19 [ 1616.106321][T26762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1616.125932][T26762] RSP: 002b:00007efce4581028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1616.134369][T26762] RAX: ffffffffffffffda RBX: 00007efce3a25fa0 RCX: 00007efce37a8f19 [ 1616.142372][T26762] RDX: 0000200000000400 RSI: 0000000000000006 RDI: 0000000000000003 [ 1616.150360][T26762] RBP: 00007efce3837f6d R08: 0000000000000000 R09: 0000000000000000 [ 1616.158355][T26762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1616.166342][T26762] R13: 00007efce3a26038 R14: 00007efce3a25fa0 R15: 00007fffbdc43458 [ 1616.174339][T26762] [ 1616.235064][T26770] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1616.326781][ T28] audit: type=1326 audit(2000000129.080:13604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26774 comm="syz.3.7547" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c1c3a8f19 code=0x0 [ 1616.755536][T26794] device syzkaller0 entered promiscuous mode [ 1616.915714][T26806] tap0: tun_chr_ioctl cmd 1074025680 [ 1616.921501][T26806] tap0: tun_chr_ioctl cmd 2147767520 [ 1617.333919][T26820] device syzkaller0 entered promiscuous mode [ 1617.440778][ T292] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1617.455234][ T28] audit: type=1326 audit(2000000130.210:13605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26831 comm="syz.7.7570" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd64eda8f19 code=0x0 [ 1617.539553][T26845] loop9: detected capacity change from 0 to 512 [ 1617.565769][T26845] EXT4-fs error (device loop9): ext4_orphan_get:1405: inode #15: comm syz.9.7574: iget: bad extended attribute block 32767 [ 1617.581402][T26845] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.7574: couldn't read orphan inode 15 (err -117) [ 1617.596185][T26845] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1617.645471][T26372] EXT4-fs (loop9): unmounting filesystem. [ 1617.738917][ T292] usb 3-1: not running at top speed; connect to a high speed hub [ 1617.747542][ T292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1617.757786][ T292] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1617.766907][ T292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.779078][ T292] usb 3-1: Found UVC 1.00 device (046d:0825) [ 1617.786386][ T292] usb 3-1: No streaming interface found for terminal 2. [ 1618.290391][T26859] loop3: detected capacity change from 0 to 128 [ 1618.371798][T26866] device syzkaller0 entered promiscuous mode [ 1618.668273][ T28] audit: type=1326 audit(2000000131.410:13606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26873 comm="syz.9.7587" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c78ba8f19 code=0x0 [ 1619.330415][ T28] audit: type=1400 audit(2000000132.090:13607): avc: denied { read } for pid=26887 comm="syz.3.7591" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1619.435240][T26896] device syzkaller0 entered promiscuous mode [ 1619.483154][T26898] loop9: detected capacity change from 0 to 512 [ 1619.490417][T26898] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1619.706643][ T28] audit: type=1326 audit(2000000132.460:13608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26911 comm="syz.9.7603" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c78ba8f19 code=0x0 [ 1619.927719][ T292] usb 3-1: USB disconnect, device number 75 [ 1620.013595][T26924] device syzkaller0 entered promiscuous mode [ 1620.086301][T26934] netem: change failed [ 1620.127134][T26941] netlink: 'syz.7.7615': attribute type 12 has an invalid length. [ 1620.753730][T26956] device syzkaller0 entered promiscuous mode [ 1620.755740][T26955] random: crng reseeded on system resumption [ 1620.924100][T26966] loop9: detected capacity change from 0 to 512 [ 1620.934711][T26965] loop3: detected capacity change from 0 to 512 [ 1620.942942][T26965] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1620.956841][T26965] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1620.966047][T26966] EXT4-fs error (device loop9): ext4_orphan_get:1431: comm syz.9.7625: bad orphan inode 13 [ 1620.987508][T26966] ext4_test_bit(bit=12, block=4) = 1 [ 1620.993621][T26966] is_bad_inode(inode)=0 [ 1620.998346][T26966] NEXT_ORPHAN(inode)=0 [ 1621.002637][T26966] max_ino=32 [ 1621.003284][T26965] EXT4-fs (loop3): 1 truncate cleaned up [ 1621.006750][T26966] i_nlink=1 [ 1621.015116][T26966] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1621.022321][T26965] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1621.034266][T26966] EXT4-fs warning (device loop9): dx_probe:845: inode #2: comm syz.9.7625: Hash code is SIPHASH, but hash not in dirent [ 1621.047369][T26966] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.7625: Corrupt directory, running e2fsck is recommended [ 1621.068330][T26966] EXT4-fs warning (device loop9): dx_probe:845: inode #2: comm syz.9.7625: Hash code is SIPHASH, but hash not in dirent [ 1621.072643][T25751] EXT4-fs (loop3): unmounting filesystem. [ 1621.087613][T26966] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.7625: Corrupt directory, running e2fsck is recommended [ 1621.102687][T26966] EXT4-fs error (device loop9): ext4_find_dest_de:2115: inode #2: block 13: comm syz.9.7625: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 1621.141159][T26372] EXT4-fs (loop9): unmounting filesystem. [ 1621.165599][T26979] ip_tables: iptables: counters copy to user failed while replacing table [ 1621.232283][T26992] FAULT_INJECTION: forcing a failure. [ 1621.232283][T26992] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1621.249419][T26992] CPU: 0 PID: 26992 Comm: syz.3.7637 Not tainted syzkaller #0 [ 1621.256943][T26992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1621.267027][T26992] Call Trace: [ 1621.270339][T26992] [ 1621.273322][T26992] __dump_stack+0x21/0x24 [ 1621.277689][T26992] dump_stack_lvl+0x110/0x170 [ 1621.282401][T26992] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1621.287466][T26992] dump_stack+0x15/0x24 [ 1621.291649][T26992] should_fail_ex+0x3bf/0x510 [ 1621.296364][T26992] should_fail_alloc_page+0x61/0x90 [ 1621.301611][T26992] prepare_alloc_pages+0x131/0x570 [ 1621.306772][T26992] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 1621.312010][T26992] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 1621.317780][T26992] ? kernel_text_address+0xa0/0xd0 [ 1621.322938][T26992] __alloc_pages+0x15b/0x610 [ 1621.327592][T26992] ? __cfi___alloc_pages+0x10/0x10 [ 1621.332750][T26992] ? percpu_counter_add_batch+0x13c/0x160 [ 1621.338513][T26992] __folio_alloc+0x12/0x40 [ 1621.342983][T26992] shmem_alloc_and_acct_folio+0x6dd/0x8c0 [ 1621.348831][T26992] ? ____kasan_slab_free+0x132/0x180 [ 1621.354153][T26992] ? __kasan_slab_free+0x11/0x20 [ 1621.359131][T26992] ? shmem_replace_folio+0x660/0x660 [ 1621.364460][T26992] ? xas_start+0x324/0x3e0 [ 1621.368988][T26992] ? xas_load+0x394/0x3c0 [ 1621.373357][T26992] ? __filemap_get_folio+0x848/0xa70 [ 1621.378736][T26992] ? kasan_quarantine_put+0x34/0x190 [ 1621.384053][T26992] ? ____kasan_slab_free+0x13d/0x180 [ 1621.389381][T26992] ? __cfi___filemap_get_folio+0x10/0x10 [ 1621.395047][T26992] ? __kasan_slab_free+0x11/0x20 [ 1621.400030][T26992] ? security_inode_init_security+0x2b5/0x3c0 [ 1621.406150][T26992] shmem_get_folio_gfp+0xd6d/0x20f0 [ 1621.411398][T26992] shmem_symlink+0x242/0x4c0 [ 1621.416033][T26992] vfs_symlink+0x261/0x3f0 [ 1621.420491][T26992] do_symlinkat+0x24a/0x5d0 [ 1621.425083][T26992] __x64_sys_symlink+0x7e/0x90 [ 1621.429886][T26992] x64_sys_call+0x369/0x9a0 [ 1621.434437][T26992] do_syscall_64+0x4c/0xa0 [ 1621.438883][T26992] ? clear_bhb_loop+0x30/0x80 [ 1621.443596][T26992] ? clear_bhb_loop+0x30/0x80 [ 1621.448307][T26992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1621.454327][T26992] RIP: 0033:0x7f6c1c3a8f19 [ 1621.458772][T26992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1621.478408][T26992] RSP: 002b:00007f6c1d271028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 1621.486865][T26992] RAX: ffffffffffffffda RBX: 00007f6c1c625fa0 RCX: 00007f6c1c3a8f19 [ 1621.494866][T26992] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000200000000680 [ 1621.502870][T26992] RBP: 00007f6c1c437f6d R08: 0000000000000000 R09: 0000000000000000 [ 1621.510873][T26992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1621.518872][T26992] R13: 00007f6c1c626038 R14: 00007f6c1c625fa0 R15: 00007ffd5fbae6c8 [ 1621.526884][T26992] [ 1621.562210][ T28] audit: type=1326 audit(2000000134.290:13609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26977 comm="syz.9.7630" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c78ba8f19 code=0x0 [ 1621.580828][T26996] device syzkaller0 entered promiscuous mode [ 1621.812921][T27026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7653'. [ 1621.881741][T27035] device syzkaller0 entered promiscuous mode [ 1622.107905][T27057] netlink: 'syz.9.7667': attribute type 15 has an invalid length. [ 1622.161023][T27061] device syzkaller0 entered promiscuous mode [ 1622.389480][ T28] audit: type=1326 audit(2000000135.140:13610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27069 comm="syz.2.7673" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efce37a8f19 code=0x0 [ 1622.711302][T27092] tipc: Enabling of bearer rejected, failed to enable media [ 1622.720560][T27092] device syzkaller0 entered promiscuous mode [ 1622.790986][T27109] loop7: detected capacity change from 0 to 128 [ 1623.126658][T27133] tipc: Enabling of bearer rejected, failed to enable media [ 1623.147956][T27133] device syzkaller0 entered promiscuous mode [ 1623.633873][ T28] audit: type=1326 audit(2000000136.390:13611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27163 comm="syz.2.7714" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efce37a8f19 code=0x0 [ 1623.970132][T27173] tipc: Enabling of bearer rejected, failed to enable media [ 1624.002617][T27173] device syzkaller0 entered promiscuous mode [ 1624.018923][T27176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7718'. [ 1624.256351][T27190] loop9: detected capacity change from 0 to 1024 [ 1624.264792][T27192] loop4: detected capacity change from 0 to 1024 [ 1624.271921][T27192] EXT4-fs: Ignoring removed bh option [ 1624.277833][T27190] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1624.310770][T27190] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1624.319725][T27192] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1624.339815][T27190] EXT4-fs (loop9): unmounting filesystem. [ 1624.345718][T27197] loop3: detected capacity change from 0 to 128 [ 1624.423229][T25751] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 1624.437104][T25751] FAT-fs (loop3): Filesystem has been set read-only [ 1624.448391][T27205] device-mapper: ioctl: only supply one of name or uuid, cmd(12) [ 1624.521017][T27217] tipc: Enabling of bearer rejected, failed to enable media [ 1624.548368][T27217] device syzkaller0 entered promiscuous mode [ 1624.574671][T27220] loop3: detected capacity change from 0 to 512 [ 1624.646635][T27220] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1624.857301][ T28] audit: type=1326 audit(2000000137.610:13612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27227 comm="syz.2.7741" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efce37a8f19 code=0x0 [ 1625.207826][ T28] audit: type=1400 audit(2000000137.960:13613): avc: denied { map } for pid=27244 comm="syz.3.7746" path="/dev/ttyS3" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 1625.419633][T27257] FAULT_INJECTION: forcing a failure. [ 1625.419633][T27257] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1625.456136][T27257] CPU: 0 PID: 27257 Comm: syz.7.7752 Not tainted syzkaller #0 [ 1625.464007][T27257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1625.474100][T27257] Call Trace: [ 1625.477419][T27257] [ 1625.480375][T27257] __dump_stack+0x21/0x24 [ 1625.484741][T27257] dump_stack_lvl+0x110/0x170 [ 1625.489443][T27257] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1625.494507][T27257] dump_stack+0x15/0x24 [ 1625.498893][T27257] should_fail_ex+0x3bf/0x510 [ 1625.503619][T27257] should_fail+0xb/0x10 [ 1625.507810][T27257] get_futex_key+0x143/0xb10 [ 1625.512459][T27257] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1625.518755][T27257] ? __cfi_get_futex_key+0x10/0x10 [ 1625.523933][T27257] futex_wait_setup+0xb8/0x260 [ 1625.528745][T27257] ? __cfi_futex_wait_setup+0x10/0x10 [ 1625.534154][T27257] ? futex_setup_timer+0xb0/0xc0 [ 1625.539135][T27257] futex_wait+0x1ce/0x900 [ 1625.543513][T27257] ? __cfi_futex_wait+0x10/0x10 [ 1625.548404][T27257] ? __cfi_futex_wake+0x10/0x10 [ 1625.553309][T27257] do_futex+0x2e2/0x430 [ 1625.557496][T27257] ? __cfi_do_futex+0x10/0x10 [ 1625.562207][T27257] __se_sys_futex+0x136/0x310 [ 1625.566922][T27257] ? __x64_sys_futex+0x100/0x100 [ 1625.571902][T27257] __x64_sys_futex+0xe5/0x100 [ 1625.576612][T27257] x64_sys_call+0x7ec/0x9a0 [ 1625.581154][T27257] do_syscall_64+0x4c/0xa0 [ 1625.585606][T27257] ? clear_bhb_loop+0x30/0x80 [ 1625.590332][T27257] ? clear_bhb_loop+0x30/0x80 [ 1625.595053][T27257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1625.600984][T27257] RIP: 0033:0x7fd64eda8f19 [ 1625.605562][T27257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1625.625469][T27257] RSP: 002b:00007fd64fd1b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1625.633923][T27257] RAX: ffffffffffffffda RBX: 00007fd64f025fa8 RCX: 00007fd64eda8f19 [ 1625.641930][T27257] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd64f025fa8 [ 1625.649931][T27257] RBP: 00007fd64f025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1625.657959][T27257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1625.665960][T27257] R13: 00007fd64f026038 R14: 00007ffe7d422050 R15: 00007ffe7d422138 [ 1625.673979][T27257] [ 1627.273301][T27263] tipc: Enabling of bearer rejected, failed to enable media [ 1627.292594][T27263] device syzkaller0 entered promiscuous mode [ 1628.345241][T27272] loop7: detected capacity change from 0 to 1024 [ 1628.391904][ T28] audit: type=1400 audit(2000000141.150:13614): avc: denied { view } for pid=27278 comm="syz.2.7761" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1628.425998][T27272] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 2: comm syz.7.7765: lblock 2 mapped to illegal pblock 2 (length 1) [ 1628.440213][T27272] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 1628.455431][T27272] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 48: comm syz.7.7765: lblock 0 mapped to illegal pblock 48 (length 1) [ 1628.469793][T27289] loop4: detected capacity change from 0 to 128 [ 1628.472616][T27272] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 1628.486384][T27293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7764'. [ 1628.524705][T27272] EXT4-fs error (device loop7): ext4_acquire_dquot:6828: comm syz.7.7765: Failed to acquire dquot type 0 [ 1628.560431][T27272] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 1628.577627][ T28] audit: type=1326 audit(2000000141.330:13615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27300 comm="syz.4.7771" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9667a8f19 code=0x0 [ 1628.583248][T27294] loop9: detected capacity change from 0 to 8192 [ 1628.608608][T27272] EXT4-fs error (device loop7): ext4_evict_inode:281: inode #11: comm syz.7.7765: mark_inode_dirty error [ 1628.620100][T27272] EXT4-fs warning (device loop7): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 1628.620156][T27272] EXT4-fs (loop7): 1 orphan inode deleted [ 1628.635944][ T8] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1628.636063][ T8] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 1628.636087][ T8] EXT4-fs error (device loop7): ext4_release_dquot:6864: comm kworker/u4:0: Failed to release dquot type 0 [ 1628.636233][T26106] EXT4-fs error (device loop7): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1628.636321][T26106] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 1628.636395][T26106] EXT4-fs error (device loop7): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 1628.679277][T27294] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1628.769704][T27307] tipc: Enabling of bearer rejected, failed to enable media [ 1628.770603][T27307] device syzkaller0 entered promiscuous mode [ 1628.870304][T27314] EXT4-fs warning (device sda1): ext4_group_extend:1878: need to use ext2online to resize further [ 1629.019412][ T28] audit: type=1326 audit(2000000141.780:13616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27330 comm="syz.9.7784" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c78ba8f19 code=0x7ffc0000 [ 1629.045764][T27334] loop3: detected capacity change from 0 to 512 [ 1629.064384][T27334] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1629.072871][T27334] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 1629.081537][T27334] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1629.084943][ T28] audit: type=1326 audit(2000000141.780:13617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27330 comm="syz.9.7784" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c78ba8f19 code=0x7ffc0000 [ 1629.112382][T27337] tipc: Enabling of bearer rejected, failed to enable media [ 1629.121884][T27334] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #13: comm syz.3.7785: iget: bad i_size value: 12154761577498 [ 1629.136082][T27334] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.7785: couldn't read orphan inode 13 (err -117) [ 1629.148266][ T28] audit: type=1326 audit(2000000141.780:13618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27330 comm="syz.9.7784" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c78ba8f19 code=0x7ffc0000 [ 1629.151300][T27337] device syzkaller0 entered promiscuous mode [ 1629.187547][T27334] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.7785: dx entry: limit 65535 != root limit 120 [ 1629.201892][T27334] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.7785: Corrupt directory, running e2fsck is recommended [ 1629.215997][T27334] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.7785: path /148/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 1629.297935][T27340] loop3: detected capacity change from 0 to 512 [ 1629.352616][T27340] EXT4-fs warning (device loop3): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1629.379530][T27340] EXT4-fs (loop3): mount failed [ 1629.463767][T27353] loop9: detected capacity change from 0 to 256 [ 1629.567984][T27348] loop4: detected capacity change from 0 to 8192 [ 1629.670035][T27376] tipc: Enabling of bearer rejected, failed to enable media [ 1629.680112][T27376] device syzkaller0 entered promiscuous mode [ 1629.779237][T27404] tipc: Enabling of bearer rejected, failed to enable media [ 1629.789061][T27404] device syzkaller0 entered promiscuous mode [ 1629.948786][T27418] loop3: detected capacity change from 0 to 8192 [ 1629.958058][ C1] ================================================================== [ 1629.966171][ C1] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0 [ 1629.973583][ C1] Read of size 8 at addr ffff88813277e190 by task syz.7.7824/27421 [ 1629.981508][ C1] [ 1629.983855][ C1] CPU: 1 PID: 27421 Comm: syz.7.7824 Not tainted syzkaller #0 [ 1629.991355][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1630.001444][ C1] Call Trace: [ 1630.004782][ C1] [ 1630.007647][ C1] __dump_stack+0x21/0x24 [ 1630.012043][ C1] dump_stack_lvl+0x110/0x170 [ 1630.016755][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1630.021813][ C1] ? debug_smp_processor_id+0x17/0x20 [ 1630.027238][ C1] ? rcu_cblist_dequeue+0x6c/0xb0 [ 1630.032302][ C1] print_address_description+0x71/0x200 [ 1630.037892][ C1] print_report+0x4a/0x60 [ 1630.042261][ C1] kasan_report+0x122/0x150 [ 1630.046829][ C1] ? rcu_cblist_dequeue+0x6c/0xb0 [ 1630.051896][ C1] __asan_report_load8_noabort+0x14/0x20 [ 1630.057565][ C1] rcu_cblist_dequeue+0x6c/0xb0 [ 1630.062455][ C1] rcu_do_batch+0x4bc/0xc30 [ 1630.066999][ C1] ? rcu_core+0xf00/0xf00 [ 1630.071359][ C1] ? queued_spin_lock_slowpath+0x47/0x50 [ 1630.077043][ C1] ? _raw_spin_lock_irqsave+0x120/0x130 [ 1630.082629][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 1630.088559][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 1630.094420][ C1] ? rcu_report_qs_rnp+0x2b9/0x390 [ 1630.099568][ C1] rcu_core+0x486/0xf00 [ 1630.103767][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 1630.109001][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 1630.114243][ C1] ? irqtime_account_irq+0x75/0x240 [ 1630.119492][ C1] rcu_core_si+0x9/0x10 [ 1630.123690][ C1] handle_softirqs+0x1dd/0x5f0 [ 1630.128494][ C1] __irq_exit_rcu+0x52/0xf0 [ 1630.133059][ C1] irq_exit_rcu+0x9/0x10 [ 1630.137336][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1630.143017][ C1] [ 1630.145977][ C1] [ 1630.148936][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1630.154959][ C1] RIP: 0010:unmap_page_range+0xdd1/0x2360 [ 1630.160726][ C1] Code: 84 a1 05 00 00 e8 cf 52 c6 ff e9 f0 04 00 00 e8 c5 52 c6 ff eb 05 e8 be 52 c6 ff 48 8b 84 24 90 00 00 00 42 0f b6 04 30 84 c0 <48> 8b 54 24 18 0f 85 88 0d 00 00 44 0f b7 32 44 89 f6 83 e6 01 31 [ 1630.180364][ C1] RSP: 0018:ffffc900024e77a0 EFLAGS: 00000246 [ 1630.186473][ C1] RAX: 0000000000000000 RBX: 1ffff11023b350f0 RCX: ffff88811fb79440 [ 1630.194480][ C1] RDX: 0000000000000000 RSI: 000000000023ffff RDI: 0000000000113cb8 [ 1630.202495][ C1] RBP: ffffc900024e7970 R08: ffff88811fb79447 R09: 1ffff11023f6f288 [ 1630.210504][ C1] R10: dffffc0000000000 R11: ffffed1023f6f289 R12: 00007fd64e200000 [ 1630.218510][ C1] R13: 8000000113cb8007 R14: dffffc0000000000 R15: ffffea00044f2e00 [ 1630.226532][ C1] ? __cfi_unmap_page_range+0x10/0x10 [ 1630.231955][ C1] ? mas_find+0xdf/0x380 [ 1630.236241][ C1] unmap_vmas+0x34c/0x480 [ 1630.240621][ C1] ? __cfi_unmap_vmas+0x10/0x10 [ 1630.245516][ C1] ? __cfi_lru_add_drain_cpu+0x10/0x10 [ 1630.246946][T27418] bio_check_eod: 24931 callbacks suppressed [ 1630.246987][T27418] syz.3.7820: attempt to access beyond end of device [ 1630.246987][T27418] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1630.251008][ C1] ? __kasan_check_write+0x14/0x20 [ 1630.251039][ C1] exit_mmap+0x2a4/0xc10 [ 1630.278616][T27418] Buffer I/O error on dev loop3, logical block 57847, async page read [ 1630.279674][ C1] ? perf_event_exit_event+0x530/0x530 [ 1630.293150][T27418] syz.3.7820: attempt to access beyond end of device [ 1630.293150][T27418] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1630.293356][ C1] ? __cfi_exit_mmap+0x10/0x10 [ 1630.311508][ C1] ? __cfi_exit_aio+0x10/0x10 [ 1630.316207][ C1] ? uprobe_clear_state+0x2c6/0x320 [ 1630.321424][ C1] __mmput+0x92/0x340 [ 1630.325427][ C1] mmput+0x4b/0x150 [ 1630.329258][ C1] do_exit+0xa62/0x29f0 [ 1630.333439][ C1] ? ttwu_do_wakeup+0x468/0x490 [ 1630.338308][ C1] ? __cfi_do_exit+0x10/0x10 [ 1630.342922][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 1630.348748][ C1] ? try_to_wake_up+0x622/0x1250 [ 1630.353701][ C1] ? _raw_spin_lock_irq+0x95/0xf0 [ 1630.358739][ C1] ? wake_up_state+0xb/0x10 [ 1630.363267][ C1] ? zap_other_threads+0x317/0x3a0 [ 1630.368402][ C1] do_group_exit+0x21b/0x2e0 [ 1630.373032][ C1] __x64_sys_exit_group+0x3f/0x40 [ 1630.378077][ C1] x64_sys_call+0x7b4/0x9a0 [ 1630.382599][ C1] do_syscall_64+0x4c/0xa0 [ 1630.387032][ C1] ? clear_bhb_loop+0x30/0x80 [ 1630.391747][ C1] ? clear_bhb_loop+0x30/0x80 [ 1630.396447][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1630.402360][ C1] RIP: 0033:0x7fd64eda8f19 [ 1630.406789][ C1] Code: Unable to access opcode bytes at 0x7fd64eda8eef. [ 1630.413840][ C1] RSP: 002b:00007ffe7d422478 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1630.422267][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd64eda8f19 [ 1630.430252][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1630.438257][ C1] RBP: 00007ffe7d4224dc R08: 0000000000000000 R09: 00000000000927c0 [ 1630.446237][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000082 [ 1630.454224][ C1] R13: 00000000000927c0 R14: 000000000018ded7 R15: 00007ffe7d422530 [ 1630.462240][ C1] [ 1630.465305][ C1] [ 1630.467639][ C1] Allocated by task 27420: [ 1630.472086][ C1] kasan_set_track+0x4b/0x70 [ 1630.476701][ C1] kasan_save_alloc_info+0x1f/0x30 [ 1630.481845][ C1] __kasan_kmalloc+0x95/0xb0 [ 1630.486457][ C1] __kmalloc+0xb4/0x1e0 [ 1630.490635][ C1] l2tp_session_create+0x38/0xbd0 [ 1630.495765][ C1] pppol2tp_connect+0xbf5/0x1640 [ 1630.500749][ C1] __sys_connect+0x3da/0x460 [ 1630.505396][ C1] __x64_sys_connect+0x7a/0x90 [ 1630.510185][ C1] x64_sys_call+0x88d/0x9a0 [ 1630.514718][ C1] do_syscall_64+0x4c/0xa0 [ 1630.519147][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1630.525060][ C1] [ 1630.527393][ C1] Freed by task 11846: [ 1630.531486][ C1] kasan_set_track+0x4b/0x70 [ 1630.536097][ C1] kasan_save_free_info+0x2b/0x40 [ 1630.541162][ C1] ____kasan_slab_free+0x132/0x180 [ 1630.546296][ C1] __kasan_slab_free+0x11/0x20 [ 1630.551079][ C1] slab_free_freelist_hook+0xc2/0x190 [ 1630.556459][ C1] __kmem_cache_free+0xb7/0x1b0 [ 1630.561341][ C1] kfree+0x6f/0xf0 [ 1630.565082][ C1] l2tp_session_put+0xaf/0x1a0 [ 1630.569859][ C1] l2tp_session_delete+0x3df/0x4d0 [ 1630.574993][ C1] l2tp_tunnel_del_work+0x199/0x410 [ 1630.580332][ C1] process_one_work+0x717/0xc30 [ 1630.585204][ C1] worker_thread+0xa4d/0x11d0 [ 1630.589896][ C1] kthread+0x281/0x320 [ 1630.593989][ C1] ret_from_fork+0x1f/0x30 [ 1630.598422][ C1] [ 1630.600768][ C1] Last potentially related work creation: [ 1630.606492][ C1] kasan_save_stack+0x3a/0x60 [ 1630.611192][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 1630.616601][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1630.622424][ C1] call_rcu+0xcf/0xf50 [ 1630.626512][ C1] pppol2tp_release+0x1e3/0x2b0 [ 1630.631383][ C1] sock_close+0xc9/0x220 [ 1630.635643][ C1] __fput+0x1fd/0x8f0 [ 1630.639672][ C1] ____fput+0x15/0x20 [ 1630.643690][ C1] task_work_run+0x1e1/0x250 [ 1630.648310][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 1630.653637][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 1630.659119][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 1630.664604][ C1] do_syscall_64+0x58/0xa0 [ 1630.669034][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1630.674944][ C1] [ 1630.677287][ C1] Second to last potentially related work creation: [ 1630.683876][ C1] kasan_save_stack+0x3a/0x60 [ 1630.688578][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 1630.693959][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1630.699794][ C1] call_rcu+0xcf/0xf50 [ 1630.703886][ C1] ip6_route_info_create+0xaa8/0x14d0 [ 1630.709362][ C1] ip6_route_add+0x27/0x130 [ 1630.713883][ C1] addrconf_add_dev+0x388/0x4a0 [ 1630.718757][ C1] inet6_addr_add+0x1a8/0x9c0 [ 1630.723560][ C1] inet6_rtm_newaddr+0x74a/0xa10 [ 1630.728515][ C1] rtnetlink_rcv_msg+0xb28/0xde0 [ 1630.733555][ C1] netlink_rcv_skb+0x200/0x450 [ 1630.738338][ C1] rtnetlink_rcv+0x1c/0x20 [ 1630.742769][ C1] netlink_unicast+0x8c1/0xa60 [ 1630.747559][ C1] netlink_sendmsg+0x8b9/0xbd0 [ 1630.752353][ C1] __sys_sendto+0x4ac/0x660 [ 1630.756872][ C1] __x64_sys_sendto+0xe5/0x100 [ 1630.761656][ C1] x64_sys_call+0x83/0x9a0 [ 1630.766093][ C1] do_syscall_64+0x4c/0xa0 [ 1630.770522][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1630.776455][ C1] [ 1630.778799][ C1] The buggy address belongs to the object at ffff88813277e000 [ 1630.778799][ C1] which belongs to the cache kmalloc-512 of size 512 [ 1630.792864][ C1] The buggy address is located 400 bytes inside of [ 1630.792864][ C1] 512-byte region [ffff88813277e000, ffff88813277e200) [ 1630.806154][ C1] [ 1630.808494][ C1] The buggy address belongs to the physical page: [ 1630.814943][ C1] page:ffffea0004c9df00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13277c [ 1630.825195][ C1] head:ffffea0004c9df00 order:2 compound_mapcount:0 compound_pincount:0 [ 1630.833554][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 1630.839657][ C1] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042f00 [ 1630.848250][ C1] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 1630.856838][ C1] page dumped because: kasan: bad access detected [ 1630.863273][ C1] page_owner tracks the page as allocated [ 1630.868993][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 43, tgid 43 (kworker/u4:2), ts 24690277941, free_ts 0 [ 1630.887065][ C1] post_alloc_hook+0x1f5/0x210 [ 1630.891856][ C1] prep_new_page+0x1c/0x110 [ 1630.896372][ C1] get_page_from_freelist+0x2ca9/0x2d20 [ 1630.901933][ C1] __alloc_pages+0x1fa/0x610 [ 1630.906540][ C1] alloc_slab_page+0x6e/0xf0 [ 1630.911138][ C1] new_slab+0x98/0x3e0 [ 1630.915223][ C1] ___slab_alloc+0x70f/0xb70 [ 1630.919827][ C1] __slab_alloc+0x5e/0xa0 [ 1630.924177][ C1] __kmem_cache_alloc_node+0x204/0x2d0 [ 1630.929658][ C1] __kmalloc+0xa4/0x1e0 [ 1630.933825][ C1] fib6_info_alloc+0x34/0xe0 [ 1630.938507][ C1] ip6_route_info_create+0x51b/0x14d0 [ 1630.943937][ C1] ip6_route_add+0x27/0x130 [ 1630.948453][ C1] addrconf_add_linklocal+0x3d2/0x660 [ 1630.953838][ C1] addrconf_addr_gen+0x542/0x690 [ 1630.958787][ C1] addrconf_init_auto_addrs+0x872/0xbc0 [ 1630.964349][ C1] page_owner free stack trace missing [ 1630.969718][ C1] [ 1630.972059][ C1] Memory state around the buggy address: [ 1630.977699][ C1] ffff88813277e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1630.985775][ C1] ffff88813277e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1630.993843][ C1] >ffff88813277e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1631.001913][ C1] ^ [ 1631.006508][ C1] ffff88813277e200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1631.014573][ C1] ffff88813277e280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1631.022988][ C1] ================================================================== [ 1631.031113][ C1] Disabling lock debugging due to kernel taint [ 1631.063515][T27424] FAULT_INJECTION: forcing a failure. [ 1631.063515][T27424] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.091980][T27418] Buffer I/O error on dev loop3, logical block 57847, async page read [ 1631.094477][T27424] CPU: 0 PID: 27424 Comm: syz.2.7826 Tainted: G B syzkaller #0 [ 1631.104255][T27418] syz.3.7820: attempt to access beyond end of device [ 1631.104255][T27418] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1631.109156][T27424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1631.109171][T27424] Call Trace: [ 1631.109178][T27424] [ 1631.109186][T27424] __dump_stack+0x21/0x24 [ 1631.122626][T27418] Buffer I/O error on dev loop3, logical block 57847, async page read [ 1631.132734][T27424] dump_stack_lvl+0x110/0x170 [ 1631.136223][T27418] syz.3.7820: attempt to access beyond end of device [ 1631.136223][T27418] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1631.138996][T27424] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1631.139020][T27424] ? futex_wait+0x5f1/0x900 [ 1631.143435][T27418] Buffer I/O error on dev loop3, logical block 57847, async page read [ 1631.151589][T27424] ? __cfi_futex_wait+0x10/0x10 [ 1631.151621][T27424] dump_stack+0x15/0x24 [ 1631.151640][T27424] should_fail_ex+0x3bf/0x510 [ 1631.156473][T27418] syz.3.7820: attempt to access beyond end of device [ 1631.156473][T27418] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1631.169706][T27424] __should_failslab+0xac/0xf0 [ 1631.169742][T27424] should_failslab+0x9/0x20 [ 1631.174782][T27418] Buffer I/O error on dev loop3, logical block 57847, async page read [ 1631.179291][T27424] __kmem_cache_alloc_node+0x3d/0x2d0 [ 1631.187607][T27418] syz.3.7820: attempt to access beyond end of device [ 1631.187607][T27418] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1631.192322][T27424] ? __se_sys_futex_waitv+0x2b0/0x610 [ 1631.192353][T27424] ? __se_sys_futex_waitv+0x2b0/0x610 [ 1631.196679][T27418] Buffer I/O error on dev loop3, logical block 57847, async page read [ 1631.201356][T27424] __kmalloc+0xa4/0x1e0 [ 1631.201383][T27424] __se_sys_futex_waitv+0x2b0/0x610 [ 1631.214951][T27418] syz.3.7820: attempt to access beyond end of device [ 1631.214951][T27418] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1631.219499][T27424] ? __x64_sys_futex_waitv+0xd0/0xd0 [ 1631.224038][T27418] Buffer I/O error on dev loop3, logical block 57847, async page read [ 1631.232185][T27424] ? mutex_unlock+0x8f/0x230 [ 1631.232222][T27424] ? __this_cpu_preempt_check+0x13/0x20 [ 1631.237769][T27418] syz.3.7820: attempt to access beyond end of device [ 1631.237769][T27418] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1631.251118][T27424] ? __kasan_check_write+0x14/0x20 [ 1631.251162][T27424] ? fpregs_restore_userregs+0x128/0x260 [ 1631.256748][T27418] Buffer I/O error on dev loop3, logical block 57847, async page read [ 1631.262127][T27424] __x64_sys_futex_waitv+0xbf/0xd0 [ 1631.262167][T27424] x64_sys_call+0x50d/0x9a0 [ 1631.270675][T27418] syz.3.7820: attempt to access beyond end of device [ 1631.270675][T27418] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1631.274491][T27424] do_syscall_64+0x4c/0xa0 [ 1631.279769][T27418] Buffer I/O error on dev loop3, logical block 57847, async page read [ 1631.293064][T27424] ? clear_bhb_loop+0x30/0x80 [ 1631.298580][T27418] syz.3.7820: attempt to access beyond end of device [ 1631.298580][T27418] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1631.306529][T27424] ? clear_bhb_loop+0x30/0x80 [ 1631.311166][T27418] Buffer I/O error on dev loop3, logical block 57847, async page read [ 1631.316684][T27424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1631.421301][T27424] RIP: 0033:0x7efce37a8f19 [ 1631.425751][T27424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1631.445385][T27424] RSP: 002b:00007efce4581028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 1631.454383][T27424] RAX: ffffffffffffffda RBX: 00007efce3a25fa0 RCX: 00007efce37a8f19 [ 1631.462404][T27424] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000dc0 [ 1631.470396][T27424] RBP: 00007efce3837f6d R08: 0000000000000000 R09: 0000000000000000 [ 1631.478633][T27424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1631.486637][T27424] R13: 00007efce3a26038 R14: 00007efce3a25fa0 R15: 00007fffbdc43458 [ 1631.494643][T27424]