last executing test programs: 1m43.508297398s ago: executing program 32 (id=148): unshare(0x2068000) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, &(0x7f00007d0000)) clock_settime(0xa00, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, 0x0, 0x0) setpriority(0x0, 0x0, 0x200002a14b56) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x54}, {0x6, 0x1}]}) userfaultfd(0x1) bpf$PROG_LOAD(0x5, 0x0, 0x38) syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x0, 0x7a}, 0x0, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) timer_getoverrun(r3) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x8, 0x0) ptrace$getregset(0x4204, r5, 0x201, &(0x7f00000001c0)={&(0x7f0000000400)=""/95, 0x5f}) 1m28.093631178s ago: executing program 4 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) waitid(0x1, r0, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)) chdir(&(0x7f00000001c0)='./bus\x00') r3 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r3, &(0x7f0000000000), 0x4000}]) 1m26.887837032s ago: executing program 4 (id=227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) r4 = socket(0x10, 0x803, 0x0) write(r4, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0xa1}) mount$9p_tcp(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4000, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r4, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000640)={&(0x7f0000000540)=[{0x4, 0x8000000000000001, 0x4, 0x91, 0x1}, {0x3, 0x9, 0x0, 0x0, 0x4}, {0x800, 0xfffffffffffffff8, 0x4, 0x800, 0x2}, {0xc, 0x5, 0xffffffffffffffff, 0x3, 0x1}, {0x89e, 0x4, 0x0, 0x7fffffffffffffff, 0x5}, {0x5, 0x3, 0x8, 0x5, 0x2}], 0x6, 0x28, 0x5, 0x3}) syz_open_dev$vcsn(0x0, 0xd0f, 0x103000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sk_skb}, 0x94) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m26.017631226s ago: executing program 4 (id=233): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_GATEWAY={0x8, 0x5, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) 1m25.969633287s ago: executing program 4 (id=234): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, '.'}}]}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1528, &(0x7f0000000140)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000100)='?', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r2, &(0x7f0000003cc0)=""/4128, 0x1020) lstat(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, 0x0) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000007c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}, {0x20, 0x6}}, 0x24, 0x3) 1m25.048982553s ago: executing program 4 (id=243): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r0, 0x0, 0x0, 0x400c001, 0x0, 0x0) 1m24.231332776s ago: executing program 4 (id=247): unshare(0x2068000) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, &(0x7f00007d0000)) clock_settime(0xa00, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, 0x0, 0x0) setpriority(0x0, 0x0, 0x200002a14b56) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x54}, {0x6, 0x1}]}) userfaultfd(0x1) bpf$PROG_LOAD(0x5, 0x0, 0x38) syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x0, 0x7a}, 0x0, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) timer_getoverrun(r3) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) wait4(r4, 0x0, 0x8, 0x0) ptrace$getregset(0x4204, r4, 0x201, &(0x7f00000001c0)={&(0x7f0000000400)=""/95, 0x5f}) 1m24.153827878s ago: executing program 33 (id=247): unshare(0x2068000) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, &(0x7f00007d0000)) clock_settime(0xa00, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, 0x0, 0x0) setpriority(0x0, 0x0, 0x200002a14b56) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x54}, {0x6, 0x1}]}) userfaultfd(0x1) bpf$PROG_LOAD(0x5, 0x0, 0x38) syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x0, 0x7a}, 0x0, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) timer_getoverrun(r3) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) wait4(r4, 0x0, 0x8, 0x0) ptrace$getregset(0x4204, r4, 0x201, &(0x7f00000001c0)={&(0x7f0000000400)=""/95, 0x5f}) 1m7.460614435s ago: executing program 6 (id=379): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) 1m4.606331264s ago: executing program 6 (id=387): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) 1m4.298264433s ago: executing program 6 (id=390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010003000000fcdbdf2522000000"], 0x14}, 0x1, 0x0, 0x0, 0x44014}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) setns(0xc9, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000180)={'filter\x00', 0x0, [0x21, 0x6, 0x3]}, &(0x7f0000000200)=0x54) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000440)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xffff}}]}, 0x43, 0x480, &(0x7f0000001340)="$eJzs3M9vFFUcAPDvTLsFBGxF/MEPtYrGBrWlgMrBgxpNPGBiogeMp6YtBCnU0JoIIQrG4MkYE+/Go/+CJ70YoxcTr3o3JMT0AnhxzezOtLtld8u2225lP59k4L2dmX3f78683TfzdhtAzxrO/kkidkTEHxExWK3WbzBc/e/mwqXJWwuXJpMol9/+O6lsd2Ph0mSxabHf9rwykkaknyWxr0G7cxcunpmYmZk+n9fH5s9+MDZ34eJzp89OnJo+NX3u8LFjR4+Mv/jC4ecbBz7QXp5ZTDf2fjy7f88b73715vEv6vJflkeHDLda+VS53OHmumtnTTnp72IgtKUvIrLDVar0/8Hoi6WDNxivf9rV4IB1VS6Xy9ubr75cBu5iSdTXdXnoFcUHfXb9WyzLBwEvr9/wo+uuv1K9AMryvpkv1TX9kebblJZd33bScEScuPzPN9kSbd+HaPMmCABARPyQjX+ebTT+S+PBmu3uzeeGhiLivojYFRH3R8TuiHggorLtQxHxcGXPWBw7rWT5JMnt45/02poSXEE2/nspn9uqH/8tZjDUl9d2VvIvJSdPz0wfyl+TkShtyerjLdr48bXfv2y2rnb8ly1Z+8VYMI/jWv+W+n2mJuYn1pJzretXIvb2F7nW5p8szgQkEbEnIvauso3TB7/b32zdyvm30IF5pvK3EU9Xj//lWKjPv5C0np8c2xoz04fGirPidr/8dvWtJs1XXvgTB1eZfwdkx/+ehuf/Yv5DSe187Vz7bVz98/Om1zSrPf8Hkncq5eIK6KOJ+fnz4xEDyfFq0LWPH17at6gX22f5jxxo3P93xdIrsS8ispP4kYh4NCIey2N/PCKeiIgDLfL/+dUn32+4Il3j+d8BWf5TbR3/pcJALH+kcaHvzE/f1zU6tFTM87/V+vgfrZRG8kfu5P3vTuJa3dkMAAAA/z9pROyIJB1dLKfp6Gj1+/K7I9KZ2bn5Z07OfnhuqvobgaEopcWdrsGa+6Hj+WV9tX4lIqpfLSjWH8nvG3/dt61SH52cnZnqdvLQ47Y36f+Zv/q6HR2w7vxeC3qX/g+9q1H/39qFOICN5/MfeleD/r+tG3EAG6/R5/8nrXf5d71iATbWsv5v2g96SPvX/7++ty6BABuuaf+/m//yD1Dh/j/0pLltsfKP5FsWimda5e6bpZBEREefMEqbIq+1F8pJw4MbaVYobYYIFdah0N33JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE75LwAA//8YzNth") r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2f000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) 1m3.395756808s ago: executing program 6 (id=399): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1528, &(0x7f0000000140)="$eJzs3AuYjtX6MPB1r7Uehia9TXIY1r3uhzcNlkmSHFLJIUmSJMkpSdIkSUJiyClpSEKOkyaHISSnxqRxPh9yTppsaZIkJKdkfdeott3X/rf3/9v7+/tfe+7fda1r1v08z1rv/cz9XO+7nue9Zr7tPqJu83q1mhKR+JfALz+ShRAxQoghQoirhBCBEKJyXOW43P0FFCT/ay/C/r0eTL/cGbDLieuft3H98zauf97G9c/buP55G9c/b+P6521cf8bysq0zi1/NLe82fv6fl/Hn/3+QnAoTv1xf4doe/40hXP+8jeuft3H985Dgj5u4/nkb1z9v4/r/57vjT/Zx/f9Dxfxzh3H9GcvL/vos+Lz3/n/B8+h/d8v/h+84fnsEfflz+9/QLvPlxxhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsjzjjL9FCiN/6lzsvxhhjjDHGGGOM/fv4/Jc7A8YYY4wxxhhjjP3/B0IKJbQIRD6RX8SIAqKguELEiitFIXGViIirRZy4RhQW14oioqgoJoqLeFFClBRGoLCCRChKidIiKq4TZcT1IkGUFeVEeeFEBZEobhAVxY2ikrhJVBY3iyriFlFVVBPVRQ1xq6gpbhO3iztELXGnqC3qiLqinrhL1Bd3iwbiHtFQ3CsaiftEY3G/aCIeEE3Fg6KZeEg0Fw+LFuIR0VK0Eq1FG9H2/2n8i6K3eEn0EX1Fsugn+ouXxQAxUAwSg8UQ8YoYKl4Vw8RrIkUMFyPE62KkeEOMEm+K0WKMGCveEuPEeDFBTBSTxGSRKt4WU8Q7Ik28K6aKaWK6mCHSxUwxS7wnZos5Yq54X8wTH4j5YoFYKBaJxeJDkSGWiEzxkVgqPhZZYplYLlaIlWKVWC3WiLVinVgvNoiNYpPYLLaIreITsU1sFzvETrFL7BZ7xKdir/hM7BOfi2zxxX9z/On/a3wPECBAggQNGvJBPoiBGCgIBSEWYqEQFIIIRCAO4qAwFIYiUASKQTGIh3goCSUBAYGAoBSUgihEoQyUgQRIgHJQDhw4SIREqAg3QiWoBJWhMlSBKlAVqkE1qAE1oCbUhNvhdqgFtaA21Ia6UBfugrvgbmgADaAhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hNbQGtpCW2gH7aA9tIcO0AE6QkfoBJ0gCZKgM3SGLtAFukJX6AbdoDt0hx7QE3rCi/AivAQvQV+oLftBf+gPA2AADILBMBhegaHwKrwKr0EKDIcR8Dq8Dm/AKDgFo2EMjIWxUFOOhwkwEUhOhlRIhSkwBdIgDabCNJgGMyAdZsIsmAWzYQ7MgfdhHnwAH8ACWACLYDEshgxYApmQCUvhNGTBMlgOK2AlrIKVsAbWwhpYDxtgPWyCTbAFtsAn8Alsh+2wE3bCbtgNn8Kn8Bl8BimQDdmwH/bDATgAB+Eg5EAOHIJDcBgOwxE4AkfhKByD43ACjsNJOAmn4DScgTNwDs7BeXg+/utmu8uuSxEyl5Za5pP5ZIyMkQVlQRkrY2UhWUhGZETGyThZWBaWRWQRWUwWk/EyXpaUJSVKlCRDWUqWklEZlWVkGZkgE2Q5WU466WSiTJQVZUVZSVaSleXNsoq8RVaV1eTjroasIRsHv7z/1JK1ZG1ZR9aV9WQ9WV/Wlw1kA9lQNpSNZCPZWN4vm8h+MAgelLmVaS6HQws5AlrKVrK1bCPfgEdlOzkK2svHZQf5hBwDo6GTbOeS5NOys5wAXeSzciI8J7vJydBdviB7yJ6yl3xR9pbtXR/ZV06FfrK/nAED5EA5SA6Ws6GOzK1YXfmaTJHD5Qj5ulwEb8hR8k05Wo6RY+VbcpwcLyfIiXKSnCxT5dtyinxHpsl35VQ5TU6XM2S6nClnyffkbDlHzpXvy3nyAzlfLpAL5SK5WH4oM+QSmSk/kkvlxzJLLpPL5Qq5Uq6Sq+UauVauk+vlBrlRbpKb5Ra5VX4it8ntcofcKXfJ3XKP/FTulZ/JffJzmS2/kPvlX+QB+aU8KL+SOfJreUh+Iw/Lb+UR+Z08Kr+Xx+RxeUL+IE/KH+UpeVqekWflOfmTPC9/lhekl0KBkkoprQKVT+VXMaqAKqiuULHqSlVIXaUi6moVp65RhdW1qogqqoqp4ipelVAllVGorCIVqlKqtIqq61QZdb1KUGVVOVVeOVVBJaobVEV1o6qkblKV1c2qirpFVVXVVHVVQ92qaqrb1O3qDlVL3alqqzqqrqqn7lL11d2qgbpHNVT3qkbqPtVY3a+aqAdUU/WgaqYeUs3Vw6qFekS1VK1Ua9VGtVWPqnbqMdU+92pST6iO6knVST2lktTTqrN6RnVRz6qu6jnVTT2vuqsXVA/VU/VSP6sLyqs+qq9KVv1Uf/WyGqAGqkFqsBqiXlFD1atqmHpNpajhaoR6XY1Ub6hR6k01Wo1RY9VbapwaryaoiWqSmqxS1dtqinpHpal31VQ1TU1XM1S6mqkG/TrT3H9i/Dt/Z/ywi6++RW1Vn6htarvaoXaqXWq32qP2qL1qr9qn9qlsla32q/3qgDqgDqqDKkflqEPqkDqsDqsj6og6qo6qY+q4Oqt+UCfVj+qUOq1Oq7PqnDqnzv/6OxAatNRKax3ofDq/jtEFdEF9hY7VV+pC+iod0VfrOH2NLqyv1UV0UV1MF9fxuoQuqY1GbTXpUJfSpXVUX6fL6Ot1gi6ry+ny2ukKOlHf8C+P/0f5tdVtdTvdTrfX7XUH3UF31B11J91JJ+kk3Vl31l10F91Vd9XddDfdXXfXPXQP3Uv30r11b91H99HJOln31y/rAXqgHqQH6yH6FT1UD9XD9DCdolP0CD1Cj9Qj9Sg9So/Wo/VYPVaP0+P0BD1BT9KTdKpO1VP0FJ2m0/RUPVVP19N1uk7Xs/QsPVvP1nP1XD1Pz9Pz9Xy9UC/Ui/VinaEzdKbO1Ev1Up2ll+lleoVeoVfpVXqNXqPX6XV6g96gN+lNOktv1Vv1Nr1N79A79C69S+/Re/RevVfv0/t0ts7W+/V+fUAf0Af1QZ2jc/QhfUgf1of1EX1EH9VH9TF9TJ/QJ/RJfVKf0qf0GX1Gn9Pn9Hl9Xl/QF3KXfYEMZKADHeQL8gUxQUxQMCgYxAaxQaGgUBAJIkFcEBcUDq4NigRFg2JB8SA+KBGUDEyAgQ0oCINSQekgGlwXlAmuDxKCskG5oHzgggpBYnBDUDG4MagU3BRUDm4OqgS3BFWDakH1oEZwa1AzuC24PbgjqBXcGdQO6vz2PVRwd9AguCdoGNwbNAruCxoH9wdNggeCpsGDQbPgoaB58HDQIngkaBm0CloHbYK2/+z8Qd2gXnBXUP9P5/f+VNHHXB/T1ySbfqa/edkMMAPNIDPYDDGvmKHmVTPMvGZSzHAzwrxuRpo3zCjzphltxpix5i0zzow3E8xEM8lMNqnmbTPFvGPSzLtmqplmppsZJt3MNLPMe2a2mWPmmvfNPPOBmW8WmIVmkVlsPjQZZonJNB+ZpeZjk2WWmeVmhVlpVpnVZo1Za9aZ9WaD2Wg2mc1mi9lqPjHbzHazw+w0u8xus8d8avaaz8w+87nJNl+Y/eYv5oD50hw0X5kc87U5ZL4xh8235oj5zhw135tj5rg5YX4wJ82P5pQ5bc6Ys+ac+cmcNz+bC8bnLu5zP95Ro8Z8mA9jMAYLYkGMxVgshIUwghGMwzgsjIWxCBbBYlgM4zEeS2JJzEVIWApLYRSjWAbLYAImYDkshw4dJmIiVsSKWAkrYWWsjFWwClbFqlgdq+OteCvehrfhHXgH3ol3Yh2sg/WwHtbH+tgAG2BDbIiNsBE2xsbYBJtgU2yKzbAZNsfm2AJbYEtsia2xNbbFttgO22F7bI8dsAN2xI7YCTthEiZhZ+yMXbALdsWu2A27YXfsjj2wB/bCXtgbe2Ofs30wGZOxP/bHATgAB+EgHIJDcCgOxWE4DFMwBUfgCByJI3EUjsLROAbH4ls4DsfjBJyIk3AypmIqTsEpmIZpOBWn4nScjumYjrNwFs7G2TgX5+I8nIfzcT4uxIW4GBdjBmZgJmbiUlyKWZiFy3E5rsSVuBpX41pci+txPW7EjbgZN+NW3Irb1DbcgTtwF+7CPbgH9+Je3If7MBuzcT/uxwN4AA/iQczBHDyEh/AwHsYjeASP4lE8hsfwBJ7Ak3gST+EpPINn8Bz+hOfxZ7yAHmOsFAXtFTbWXmkL2atsjC1g/zYuZovbeFvClrTGFrFFfxejtTbBlrXlbHnrbAWbaG/4Q1zVVrPVbQ17q61pb7O3/yGub++2Dew9tqG919azd/0ubmTvs43tw7aJfcQ2ta1sM9vGNrcP2xb2EdvStrKtbRvb0T5pO9mnbJJ92na2z/whzrBL7Fq7zq63G+xe+5k9Y8/aw/Zbe87+ZPvYvnaIfcUOta/aYfY1m9Jw+O9jO9yOtW/ZcXa8nWAn2kl28h/i6XaGTbcz7Sz7np1t5/whXmw/tPNspp1vF9iFdtHFODenTPuRXWo/tll2mV1uV9iVdpVdbdf8NdcVdpPdbLfYPfZTu81utzvsTrvL7r4Y557HPvu5zbZf2EP2G3vAfmkP2iM2x359Mc49vyP2O3vUfm+P2eP2hP3BnrQ/2lP29MXzzz33H+zP9oL1VhCQJEWaAspH+SmGClBBuoJi6UoqRFdRhK6mOLqGCtO1VISKUjEqTvFUgkqSISRLRCGVotIUpeuoDF1PCVSWylF5clSBEukGqkg3UiW6iSrTzVSFbqGqVI2qUw26lWrSbXS7FlSL7qTaVIfqUj26i+rT3dSA7qGGdC81ovuoMd1PTegBakoPUjN6iJrTw9SCHqGW1IpaUxtqS49SO3qM2tPj1IGeoI70JHWipyiJnqbO9Ax1oWepKz1H3eh56k4vUA/qSb3oRepNL1Ef6kvJ1I/608s0gAbSIBpMQ+gVGkqv0jB6jVJoOI2g12kkvUGj6E0aTWNoLL1F42g8TaCJNIkmUyq9TVPoHUqjd2kqTaPpNIPSaSbNovdoNs2hufQ+zaMPaD4toIW0iBbTh5RBSyiTPqKl9DFl0TJaTitoJa2i1bSG1tI6Wk8baCNtos20hbbSJ7SNttMO2km7aDftoU9pL31G++hzyqYvaD/9hQ7Ql3SQvqIc+poO0Td0mL6lI/QdHaXv6RgdpxP0A52kH+kUnaYzdJbO0U90nn6mC+RJhBDKUIU6DMJ8Yf4wJiwQFgyvCGPDK8NC4VVhJLw6jAuvCQuH14ZFwqJhsbB4GB+WCEuGJsTQhhSGYamwdBgNrwvLhNeHCWHZsFxYPnRhhTAxvCGsGN4YVgpvCiuHN4dVwlvCqmG18OF7a4S3hjXD28LbwzvCWuGdYe2wTlg3rBfeFdYP7w4bhPeEDcN7w0rhfWHj8P6wSfhA2DR8MGwWPhQ2Dx8OW4SPhC3DVmHrsE3YNnw0bBc+FrYPHw87hE+EHcMnw07hU2FS+HTYOXzmH+5PDvuF/cOXw5dD7+9RC6OLooujH0YzokuimdGPokujH0ezosuiy6Mroiujq6Kro2uia6ProuujG6Ibo5uim6Nbot7Xyy8cOOmU0y5w+Vx+F+MKuILuChfrrnSF3FUu4q52ce4aV9hd64q4oq6YK+7iXQlX0hmHzjpyoSvlSruou86Vcde7BFfWlXPlnXMVXKJr49q6tq6de8y1d4+7Du4J94R70j3pnnJPuaddZ/eM6+KedV3dc66be949715wPVxP18u96Hq7l1wf19clu2TX3/V3A9wAN8gNyvfrGswNc8NciktxI9wIN9KNdKPcKDfajXZj3Vg3zo1zE9wEN8lNcqku1U1xU1yaS3NT3VQ33U136S7dzXKz3Gw32811c928hHluvpvvFrqFbrFb7DJchst0mW6pW+qyXJZb7pa7lW6lW+1Wu7VurVvv1ruNbqPb7Da7rW6r2+a2uR1uh9vldrk9bo/b6/a6fW6fy3bZbr/b7w64A+6g+8rluK/dIfeNO+y+dUfcd+6o+94dc8fdCfeDO+l+dKfcaXfGnXXn3E/uvPvZXXDepUbejkyJvBNJi7wbmRqZFpkemRFJj8yMzIq8F5kdmROZG3k/Mi/yQWR+ZEFkYSRGCPFhJCOyJJIZ+SiyNPJxJCuyLLI8siKyMrIq4n2JbaEv5Uv7qL/Ol/HX+wRf1pfz5b3zFXyiv8FX9Df6Sv4mX9nf7Kv4W3xVX81X94/4lr6Vb+3b+Lb+Ud/OP+bb+8d9B/+E7+if9J38Uz7JP+07+2d8F/+s7+qf89388767f8H38D19L/+i7+1f8n18X5/s+/n+/mU/wA/0g/xgP8S/4of6V/0w/5pP8cP9CP+6H+nf8KP8m360H+PH+rf8OD/eT/AT/SQ/2af6t/2UAu/4NP+un+qn+el+hk/3M/0s/56f7ef4uf59P89/4Of7BX6hX+QX+w99hl/iM/1Hfqn/2Gf5ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+k/8Nr/d7/A7/S6/2+/xn/q9/jO/z3/us/0XHn65+pIP+q98jv/aH/Lf+MP+W3/Ef+eP+u/9MX/cn/A/+JP+R3/Kn/Zn/Fl/zv/kz/uf/QX+mzXGGGOMsX9K2sE/39/v72yTv7Zc/YUQV24vnvO3+7UQYmORX/oDZXzHiBDi6b7dH/yt1a6dnJz867FZSgSlFwghIpfGX7wN+TVeJjqIJ0WSeFxU/Lv5DZQ9z9GfzA/HvI/eLETBvxmTu47/Lb40/43/xfyPPjE2o0p4Ju7385//db2Zm390gRAJpS+NKSAuxZfmr/RfzF+03Z/ln6VEgS9ThWj/N2NixaX40vyJ4jHxjEj63ZGMMcYYY4wxxtgvBsrqXf/B/efF+/N4fTG8uDm/+Gv8D+/PGWOMMcYYY4wxdvk917PXU48mJT3elTvc4Q53/tq53O9MjDHGGGOMsX+3S4v+y50JY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWd/1P/Duxy32OjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG2OX2fwIAAP//qCEzJQ==") creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000100)='?', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r2, 0x0, 0x0) lstat(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, 0x0) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000007c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}, {0x20, 0x6}}, 0x24, 0x3) 1m2.131001004s ago: executing program 6 (id=412): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1528, &(0x7f0000000140)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000100)='?', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r2, &(0x7f0000003cc0)=""/4128, 0x1020) lstat(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, 0x0) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000007c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}, {0x20, 0x6}}, 0x24, 0x3) 1m1.810232683s ago: executing program 6 (id=423): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="150000001000000008"], 0x50) io_uring_setup(0x650b, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000280)="b74560dc", 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)}}], 0x1, 0x20080058) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080)={[{@grpjquota}, {@grpjquota}, {@quota}], [{@context={'context', 0x3d, 'root'}}, {@subj_user={'subj_user', 0x3d, 'usrquota'}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, '/dev/loop'}}, {@context={'context', 0x3d, 'root'}}]}, 0x1, 0x4ec, &(0x7f0000000ac0)="$eJzs3c1rHG8dAPDv7iZpkkb7okhbwRYq1BeazQvSREXoST0UxIIXhRqTbazZZEN2U5vQQ6q3HjwURUE8ePLiX+DFniyCeBP0Lh6kRWsEKwgrM7vb5m3j+vulO2nm84Hpztvu93m6+T478+zMPgHk1pXkn0LEWET8PiLOtBZ373Cl9bD98uF8MhWi2bz9t0K6X7Lc2bXzvNMRsRURwxHx1S9GfKuwP259Y3NprlqtrLWXy43l1XJ9Y/P6veW5xcpiZWVy5sbs7MzE9NTskdX18Q++8/jWr7489Mt/ff/5sye/+XVSrLH2tp31OEqtqg/GuR3rBiLi828jWAZK7fqMZF0Q3pPk/ftQRFxN8/9MlNJ3E8iDZrPZ/E/zVLfNW03gxCqmx8CF4virThtQLI6Pt47hPxyjxWqt3vj03dr6ykLrWPlsDBbv3qtWJtrnCmdjsJAsT6bzb5an9ixPR6THwD8sjaTL4/O16kL/mjngAKc7+Z9kfkT8s9TKfyAnnPJDfsl/yK80/4ezLgWQBZ//kF/yH/KrW/4/6XM5gP7z+Q/5Jf8hv+Q/5NdAxBd+kXUhgEz4/Idc+sqtW8nU7Nz/vnB/Y32pdv/6QqW+NL68Pj8+X1tbHV+s1RbTe3aW/9frVWu11cnPxPqDcqNSb5TrG5t3lmvrK4076X39dyqDfakV0Itzl5/+qRARW58dSafEUHubXIWTrdksRNb3IAPZKGXdAAGZ0fUH+eUcH9j7E717jwu63h28+qa/EHi3FLMuAJCZaxd9/wd5pf8f8kv/P+SXY3zggCH6djms/x94N/1f/f/Nt1cOoP/G9oz/M9Ye/+sDO8bumoiID0bEH0uDpzpjfQEnQfGvhfbx/7UzHx/bu3Wo8Cr9imAoIr7709s/fjDXaKxNJuv//np94yft9VM7nmg4ATh2OnnayWMAIL+2Xz6c70z9jPtiqHURwv74A+2+yeH0O8rR7cKuaxUKR3TtwtajiLhwUPxCe7zz1onM6HZpX/zz7cdC6yXS8g6k46b3J/7FHfE/tiP+pff9vwL58PRmREwclH/FNKfjdf7tbn/GIoaP4tqJFze7tX/F1+1fqUv7d7nHGN/+2ff+0jX+o4hLB8bvxBtOY+2Nn5TtWo/xn3/jax/ptq3589brHBS/I5krN5ZXy/WNzevp78gtVlYmZ27Mzs5MTE/NltM+6nKnp3q/z1343bPD6j/aJf5h9U/WfbLH+v/7o7/9+h+6/LEk8T9x9eD3//wh8Uci4lM9xv/H1J+/2W1bEn+hS/2Lh8RP1k33GL/+oy+d6nFXAKAP6hubS3PVamXtJM8MHo9i7JspDByLYpjJdubR8SjGnpmsWybgbatvJKfmSdJnXRIAAAAAAAAAAACgV/24nDjrOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnAT/DQAA///NqNej") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x77) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r5], 0x20) 1m1.533647661s ago: executing program 34 (id=423): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="150000001000000008"], 0x50) io_uring_setup(0x650b, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000280)="b74560dc", 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)}}], 0x1, 0x20080058) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080)={[{@grpjquota}, {@grpjquota}, {@quota}], [{@context={'context', 0x3d, 'root'}}, {@subj_user={'subj_user', 0x3d, 'usrquota'}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, '/dev/loop'}}, {@context={'context', 0x3d, 'root'}}]}, 0x1, 0x4ec, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x77) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r5], 0x20) 41.363791354s ago: executing program 7 (id=618): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x4, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[], 0x20) 41.318425715s ago: executing program 7 (id=619): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r4, 0x4010586e, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 40.42670288s ago: executing program 7 (id=633): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0xa00018, &(0x7f0000000000), 0x1, 0x7c8, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000100)=0x2) 40.333936273s ago: executing program 7 (id=634): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1528, &(0x7f0000000140)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000100)='?', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) getdents64(r2, &(0x7f0000003cc0)=""/4128, 0x1020) lstat(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, 0x0) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000007c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}, {0x20, 0x6}}, 0x24, 0x3) 39.36377759s ago: executing program 7 (id=643): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r4, 0x4010586e, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 39.246056603s ago: executing program 7 (id=650): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000280), &(0x7f0000000400)=@tcp=r1, 0x2}, 0x20) 39.213662704s ago: executing program 35 (id=650): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000280), &(0x7f0000000400)=@tcp=r1, 0x2}, 0x20) 33.812313535s ago: executing program 8 (id=694): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00010029bd7000fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="8400aa060a000200aaaaaaaaaa0c"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) 32.773948354s ago: executing program 8 (id=702): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b3400000000000000000000092403000000000000092405009917211cfd0924030500000004000724050401", @ANYRES32=r0], 0x0) 30.980299134s ago: executing program 8 (id=717): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 30.623948024s ago: executing program 8 (id=720): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1528, &(0x7f0000000140)="$eJzs3AuYjtX6MPB1r7Uehia9TXIY1r3uhzcNlkmSHFLJIUmSJMkpSdIkSUJiyClpSEKOkyaHISSnxqRxPh9yTppsaZIkJKdkfdeott3X/rf3/9v7+/tfe+7fda1r1v08z1rv/cz9XO+7nue9Zr7tPqJu83q1mhKR+JfALz+ShRAxQoghQoirhBCBEKJyXOW43P0FFCT/ay/C/r0eTL/cGbDLieuft3H98zauf97G9c/buP55G9c/b+P6521cf8bysq0zi1/NLe82fv6fl/Hn/3+QnAoTv1xf4doe/40hXP+8jeuft3H985Dgj5u4/nkb1z9v4/r/57vjT/Zx/f9Dxfxzh3H9GcvL/vos+Lz3/n/B8+h/d8v/h+84fnsEfflz+9/QLvPlxxhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsjzjjL9FCiN/6lzsvxhhjjDHGGGOM/fv4/Jc7A8YYY4wxxhhjjP3/B0IKJbQIRD6RX8SIAqKguELEiitFIXGViIirRZy4RhQW14oioqgoJoqLeFFClBRGoLCCRChKidIiKq4TZcT1IkGUFeVEeeFEBZEobhAVxY2ikrhJVBY3iyriFlFVVBPVRQ1xq6gpbhO3iztELXGnqC3qiLqinrhL1Bd3iwbiHtFQ3CsaiftEY3G/aCIeEE3Fg6KZeEg0Fw+LFuIR0VK0Eq1FG9H2/2n8i6K3eEn0EX1Fsugn+ouXxQAxUAwSg8UQ8YoYKl4Vw8RrIkUMFyPE62KkeEOMEm+K0WKMGCveEuPEeDFBTBSTxGSRKt4WU8Q7Ik28K6aKaWK6mCHSxUwxS7wnZos5Yq54X8wTH4j5YoFYKBaJxeJDkSGWiEzxkVgqPhZZYplYLlaIlWKVWC3WiLVinVgvNoiNYpPYLLaIreITsU1sFzvETrFL7BZ7xKdir/hM7BOfi2zxxX9z/On/a3wPECBAggQNGvJBPoiBGCgIBSEWYqEQFIIIRCAO4qAwFIYiUASKQTGIh3goCSUBAYGAoBSUgihEoQyUgQRIgHJQDhw4SIREqAg3QiWoBJWhMlSBKlAVqkE1qAE1oCbUhNvhdqgFtaA21Ia6UBfugrvgbmgADaAhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hNbQGtpCW2gH7aA9tIcO0AE6QkfoBJ0gCZKgM3SGLtAFukJX6AbdoDt0hx7QE3rCi/AivAQvQV+oLftBf+gPA2AADILBMBhegaHwKrwKr0EKDIcR8Dq8Dm/AKDgFo2EMjIWxUFOOhwkwEUhOhlRIhSkwBdIgDabCNJgGMyAdZsIsmAWzYQ7MgfdhHnwAH8ACWACLYDEshgxYApmQCUvhNGTBMlgOK2AlrIKVsAbWwhpYDxtgPWyCTbAFtsAn8Alsh+2wE3bCbtgNn8Kn8Bl8BimQDdmwH/bDATgAB+Eg5EAOHIJDcBgOwxE4AkfhKByD43ACjsNJOAmn4DScgTNwDs7BeXg+/utmu8uuSxEyl5Za5pP5ZIyMkQVlQRkrY2UhWUhGZETGyThZWBaWRWQRWUwWk/EyXpaUJSVKlCRDWUqWklEZlWVkGZkgE2Q5WU466WSiTJQVZUVZSVaSleXNsoq8RVaV1eTjroasIRsHv7z/1JK1ZG1ZR9aV9WQ9WV/Wlw1kA9lQNpSNZCPZWN4vm8h+MAgelLmVaS6HQws5AlrKVrK1bCPfgEdlOzkK2svHZQf5hBwDo6GTbOeS5NOys5wAXeSzciI8J7vJydBdviB7yJ6yl3xR9pbtXR/ZV06FfrK/nAED5EA5SA6Ws6GOzK1YXfmaTJHD5Qj5ulwEb8hR8k05Wo6RY+VbcpwcLyfIiXKSnCxT5dtyinxHpsl35VQ5TU6XM2S6nClnyffkbDlHzpXvy3nyAzlfLpAL5SK5WH4oM+QSmSk/kkvlxzJLLpPL5Qq5Uq6Sq+UauVauk+vlBrlRbpKb5Ra5VX4it8ntcofcKXfJ3XKP/FTulZ/JffJzmS2/kPvlX+QB+aU8KL+SOfJreUh+Iw/Lb+UR+Z08Kr+Xx+RxeUL+IE/KH+UpeVqekWflOfmTPC9/lhekl0KBkkoprQKVT+VXMaqAKqiuULHqSlVIXaUi6moVp65RhdW1qogqqoqp4ipelVAllVGorCIVqlKqtIqq61QZdb1KUGVVOVVeOVVBJaobVEV1o6qkblKV1c2qirpFVVXVVHVVQ92qaqrb1O3qDlVL3alqqzqqrqqn7lL11d2qgbpHNVT3qkbqPtVY3a+aqAdUU/WgaqYeUs3Vw6qFekS1VK1Ua9VGtVWPqnbqMdU+92pST6iO6knVST2lktTTqrN6RnVRz6qu6jnVTT2vuqsXVA/VU/VSP6sLyqs+qq9KVv1Uf/WyGqAGqkFqsBqiXlFD1atqmHpNpajhaoR6XY1Ub6hR6k01Wo1RY9VbapwaryaoiWqSmqxS1dtqinpHpal31VQ1TU1XM1S6mqkG/TrT3H9i/Dt/Z/ywi6++RW1Vn6htarvaoXaqXWq32qP2qL1qr9qn9qlsla32q/3qgDqgDqqDKkflqEPqkDqsDqsj6og6qo6qY+q4Oqt+UCfVj+qUOq1Oq7PqnDqnzv/6OxAatNRKax3ofDq/jtEFdEF9hY7VV+pC+iod0VfrOH2NLqyv1UV0UV1MF9fxuoQuqY1GbTXpUJfSpXVUX6fL6Ot1gi6ry+ny2ukKOlHf8C+P/0f5tdVtdTvdTrfX7XUH3UF31B11J91JJ+kk3Vl31l10F91Vd9XddDfdXXfXPXQP3Uv30r11b91H99HJOln31y/rAXqgHqQH6yH6FT1UD9XD9DCdolP0CD1Cj9Qj9Sg9So/Wo/VYPVaP0+P0BD1BT9KTdKpO1VP0FJ2m0/RUPVVP19N1uk7Xs/QsPVvP1nP1XD1Pz9Pz9Xy9UC/Ui/VinaEzdKbO1Ev1Up2ll+lleoVeoVfpVXqNXqPX6XV6g96gN+lNOktv1Vv1Nr1N79A79C69S+/Re/RevVfv0/t0ts7W+/V+fUAf0Af1QZ2jc/QhfUgf1of1EX1EH9VH9TF9TJ/QJ/RJfVKf0qf0GX1Gn9Pn9Hl9Xl/QF3KXfYEMZKADHeQL8gUxQUxQMCgYxAaxQaGgUBAJIkFcEBcUDq4NigRFg2JB8SA+KBGUDEyAgQ0oCINSQekgGlwXlAmuDxKCskG5oHzgggpBYnBDUDG4MagU3BRUDm4OqgS3BFWDakH1oEZwa1AzuC24PbgjqBXcGdQO6vz2PVRwd9AguCdoGNwbNAruCxoH9wdNggeCpsGDQbPgoaB58HDQIngkaBm0CloHbYK2/+z8Qd2gXnBXUP9P5/f+VNHHXB/T1ySbfqa/edkMMAPNIDPYDDGvmKHmVTPMvGZSzHAzwrxuRpo3zCjzphltxpix5i0zzow3E8xEM8lMNqnmbTPFvGPSzLtmqplmppsZJt3MNLPMe2a2mWPmmvfNPPOBmW8WmIVmkVlsPjQZZonJNB+ZpeZjk2WWmeVmhVlpVpnVZo1Za9aZ9WaD2Wg2mc1mi9lqPjHbzHazw+w0u8xus8d8avaaz8w+87nJNl+Y/eYv5oD50hw0X5kc87U5ZL4xh8235oj5zhw135tj5rg5YX4wJ82P5pQ5bc6Ys+ac+cmcNz+bC8bnLu5zP95Ro8Z8mA9jMAYLYkGMxVgshIUwghGMwzgsjIWxCBbBYlgM4zEeS2JJzEVIWApLYRSjWAbLYAImYDkshw4dJmIiVsSKWAkrYWWsjFWwClbFqlgdq+OteCvehrfhHXgH3ol3Yh2sg/WwHtbH+tgAG2BDbIiNsBE2xsbYBJtgU2yKzbAZNsfm2AJbYEtsia2xNbbFttgO22F7bI8dsAN2xI7YCTthEiZhZ+yMXbALdsWu2A27YXfsjj2wB/bCXtgbe2Ofs30wGZOxP/bHATgAB+EgHIJDcCgOxWE4DFMwBUfgCByJI3EUjsLROAbH4ls4DsfjBJyIk3AypmIqTsEpmIZpOBWn4nScjumYjrNwFs7G2TgX5+I8nIfzcT4uxIW4GBdjBmZgJmbiUlyKWZiFy3E5rsSVuBpX41pci+txPW7EjbgZN+NW3Irb1DbcgTtwF+7CPbgH9+Je3If7MBuzcT/uxwN4AA/iQczBHDyEh/AwHsYjeASP4lE8hsfwBJ7Ak3gST+EpPINn8Bz+hOfxZ7yAHmOsFAXtFTbWXmkL2atsjC1g/zYuZovbeFvClrTGFrFFfxejtTbBlrXlbHnrbAWbaG/4Q1zVVrPVbQ17q61pb7O3/yGub++2Dew9tqG919azd/0ubmTvs43tw7aJfcQ2ta1sM9vGNrcP2xb2EdvStrKtbRvb0T5pO9mnbJJ92na2z/whzrBL7Fq7zq63G+xe+5k9Y8/aw/Zbe87+ZPvYvnaIfcUOta/aYfY1m9Jw+O9jO9yOtW/ZcXa8nWAn2kl28h/i6XaGTbcz7Sz7np1t5/whXmw/tPNspp1vF9iFdtHFODenTPuRXWo/tll2mV1uV9iVdpVdbdf8NdcVdpPdbLfYPfZTu81utzvsTrvL7r4Y557HPvu5zbZf2EP2G3vAfmkP2iM2x359Mc49vyP2O3vUfm+P2eP2hP3BnrQ/2lP29MXzzz33H+zP9oL1VhCQJEWaAspH+SmGClBBuoJi6UoqRFdRhK6mOLqGCtO1VISKUjEqTvFUgkqSISRLRCGVotIUpeuoDF1PCVSWylF5clSBEukGqkg3UiW6iSrTzVSFbqGqVI2qUw26lWrSbXS7FlSL7qTaVIfqUj26i+rT3dSA7qGGdC81ovuoMd1PTegBakoPUjN6iJrTw9SCHqGW1IpaUxtqS49SO3qM2tPj1IGeoI70JHWipyiJnqbO9Ax1oWepKz1H3eh56k4vUA/qSb3oRepNL1Ef6kvJ1I/608s0gAbSIBpMQ+gVGkqv0jB6jVJoOI2g12kkvUGj6E0aTWNoLL1F42g8TaCJNIkmUyq9TVPoHUqjd2kqTaPpNIPSaSbNovdoNs2hufQ+zaMPaD4toIW0iBbTh5RBSyiTPqKl9DFl0TJaTitoJa2i1bSG1tI6Wk8baCNtos20hbbSJ7SNttMO2km7aDftoU9pL31G++hzyqYvaD/9hQ7Ql3SQvqIc+poO0Td0mL6lI/QdHaXv6RgdpxP0A52kH+kUnaYzdJbO0U90nn6mC+RJhBDKUIU6DMJ8Yf4wJiwQFgyvCGPDK8NC4VVhJLw6jAuvCQuH14ZFwqJhsbB4GB+WCEuGJsTQhhSGYamwdBgNrwvLhNeHCWHZsFxYPnRhhTAxvCGsGN4YVgpvCiuHN4dVwlvCqmG18OF7a4S3hjXD28LbwzvCWuGdYe2wTlg3rBfeFdYP7w4bhPeEDcN7w0rhfWHj8P6wSfhA2DR8MGwWPhQ2Dx8OW4SPhC3DVmHrsE3YNnw0bBc+FrYPHw87hE+EHcMnw07hU2FS+HTYOXzmH+5PDvuF/cOXw5dD7+9RC6OLooujH0YzokuimdGPokujH0ezosuiy6Mroiujq6Kro2uia6ProuujG6Ibo5uim6Nbot7Xyy8cOOmU0y5w+Vx+F+MKuILuChfrrnSF3FUu4q52ce4aV9hd64q4oq6YK+7iXQlX0hmHzjpyoSvlSruou86Vcde7BFfWlXPlnXMVXKJr49q6tq6de8y1d4+7Du4J94R70j3pnnJPuaddZ/eM6+KedV3dc66be949715wPVxP18u96Hq7l1wf19clu2TX3/V3A9wAN8gNyvfrGswNc8NciktxI9wIN9KNdKPcKDfajXZj3Vg3zo1zE9wEN8lNcqku1U1xU1yaS3NT3VQ33U136S7dzXKz3Gw32811c928hHluvpvvFrqFbrFb7DJchst0mW6pW+qyXJZb7pa7lW6lW+1Wu7VurVvv1ruNbqPb7Da7rW6r2+a2uR1uh9vldrk9bo/b6/a6fW6fy3bZbr/b7w64A+6g+8rluK/dIfeNO+y+dUfcd+6o+94dc8fdCfeDO+l+dKfcaXfGnXXn3E/uvPvZXXDepUbejkyJvBNJi7wbmRqZFpkemRFJj8yMzIq8F5kdmROZG3k/Mi/yQWR+ZEFkYSRGCPFhJCOyJJIZ+SiyNPJxJCuyLLI8siKyMrIq4n2JbaEv5Uv7qL/Ol/HX+wRf1pfz5b3zFXyiv8FX9Df6Sv4mX9nf7Kv4W3xVX81X94/4lr6Vb+3b+Lb+Ud/OP+bb+8d9B/+E7+if9J38Uz7JP+07+2d8F/+s7+qf89388767f8H38D19L/+i7+1f8n18X5/s+/n+/mU/wA/0g/xgP8S/4of6V/0w/5pP8cP9CP+6H+nf8KP8m360H+PH+rf8OD/eT/AT/SQ/2af6t/2UAu/4NP+un+qn+el+hk/3M/0s/56f7ef4uf59P89/4Of7BX6hX+QX+w99hl/iM/1Hfqn/2Gf5ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+k/8Nr/d7/A7/S6/2+/xn/q9/jO/z3/us/0XHn65+pIP+q98jv/aH/Lf+MP+W3/Ef+eP+u/9MX/cn/A/+JP+R3/Kn/Zn/Fl/zv/kz/uf/QX+mzXGGGOMsX9K2sE/39/v72yTv7Zc/YUQV24vnvO3+7UQYmORX/oDZXzHiBDi6b7dH/yt1a6dnJz867FZSgSlFwghIpfGX7wN+TVeJjqIJ0WSeFxU/Lv5DZQ9z9GfzA/HvI/eLETBvxmTu47/Lb40/43/xfyPPjE2o0p4Ju7385//db2Zm390gRAJpS+NKSAuxZfmr/RfzF+03Z/ln6VEgS9ThWj/N2NixaX40vyJ4jHxjEj63ZGMMcYYY4wxxtgvBsrqXf/B/efF+/N4fTG8uDm/+Gv8D+/PGWOMMcYYY4wxdvk917PXU48mJT3elTvc4Q53/tq53O9MjDHGGGOMsX+3S4v+y50JY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWd/1P/Duxy32OjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG2OX2fwIAAP//qCEzJQ==") creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000100)='?', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r2, 0x0, 0x0) lstat(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, 0x0) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000007c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}, {0x20, 0x6}}, 0x24, 0x3) 28.053036086s ago: executing program 8 (id=736): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@shortname_lower}, {@shortname_winnt}, {@shortname_lower}, {@numtail}, {@rodir}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@fat=@time_offset={'time_offset', 0x3d, 0x471}}, {@shortname_win95}]}, 0x1, 0x36a, &(0x7f0000000600)="$eJzs3U9oHFUYAPBvO/lbqMlBKArC6E3Q0D940FNKSaGYi8pS9SAGm6rsxkIWF5NDt/EiHgWPevIiHurBQ88iKOLNg1crSFU8aG8Fi092d3Z3NrtpU2Fbg7/fYfnyvffNe7OZZF+G7NtXl6N2fjou3LhxPebmKjG1fHo5blZiMbLouRyjZsbkAICD4WZK8Wfq2mdJZcJTAgAmrPP6//qRUubdr0d7zfWj5NUfAA684u//+YjpbmLMjf25vYovTnJmAMCkjNz/f2yoeWZ4RTBV+q8AAOCgeuGll589tRrxfJ7PRWy816w2q/HMoP3UhXgz6rEex2IhbkV0Fwrth0rn8czZ1ZVjeZ634pfFqLYrmtWIjVaz2l0pnMo69bNxPBZisagvVhsppezMF6srx/OOiLjc6owfG5VmdToOF+P/eDjW40Tk8eBIfcTZ1ZUTeXGA6kavvhWxM7hv0Z7/UizE96/FxajH+flzkVJvWbO6cul4np9Oq0P1zepsnO8/C3veAQEAAAAAAAAAAAAAAAAAAAAAgH9lKe9b7O9/kwb79ywtjWnv7I/TrS/2B9rp7g+UZlOk9Mc7T1bfz2Jof6Dd+/M0q1Nx6P6eOgAAAAAAAAAAAAAAAAAAAPxnNLZmYq1eX99sbG3XykFrs7F1KCLambe+vfLVfIz2uUMwVYxRasqL1HZtLWW9zikb6lMEWXvwXuazq/0Zl/vM9s9i7DRm926q1488+vNHg8wjWe/Ifw/6ZDH+BLNd0ygHGw90p3Q3T9T2ySI4cYfO11JKex3n0itb27Urw01RiZi6+2/c7YPUDr65/sZDJxtHn+pkvkxdjz+xcO7ah5/8Vlurt0duq386s9m4lWprxdfjL7a9g6x0/VSiG1TKV8LU7cp3hjNr2Q+/v/jwB9/tb/RUzrw9pk/WPZ3PNxtbleInpdM00w3auV1V8/WzWcSu40yPufgnEBz9eHnt6qWfft1vVemXhI06AAAAAAAAAAAAAAAAAADgnii9V7xQvNl3+nZVTz83+ZkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL0z+Pz/UrAzktlP8FcrRptm1zcbETP3+zQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPif+ycAAP//ZaVsFQ==") r0 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 27.534240281s ago: executing program 8 (id=740): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 27.534155801s ago: executing program 36 (id=740): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 25.994679373s ago: executing program 9 (id=741): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) 25.947746595s ago: executing program 9 (id=754): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) fcntl$setstatus(r0, 0x4, 0x800) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(r4, 0xb) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r6 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000009b80)={0x40000012}) read$FUSE(r5, &(0x7f0000000500)={0x2020}, 0x2020) epoll_pwait(r6, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 25.695037322s ago: executing program 9 (id=763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010003000000fcdbdf2522000000"], 0x14}, 0x1, 0x0, 0x0, 0x44014}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) setns(0xc9, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000180)={'filter\x00', 0x0, [0x21, 0x6, 0x3]}, &(0x7f0000000200)=0x54) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000440)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xffff}}]}, 0x43, 0x480, &(0x7f0000001340)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000006c137d2dc5487fbbab0e67a6d78d000000000085000000970000009500000000000000d278ff2586366870cec92e942806392f12f2e00967e700fbc3e5da2af73ca901c1d438d404deaebe0450ff88788193c2029b3a171211e381f804bbe33ed98f833ad47715b50dd5d5c714b5875571fde3b5f3d079975f6e8d4205e45b5be2c719548c8dc56a6237b8ec84d11668464112dec56bb32fb8b336415e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x2f000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) 24.841507185s ago: executing program 9 (id=767): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1528, &(0x7f0000000140)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000100)='?', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r2, &(0x7f0000003cc0)=""/4128, 0x1020) lstat(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, 0x0) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000007c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}, {0x20, 0x6}}, 0x24, 0x3) 23.344384558s ago: executing program 9 (id=774): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0) 23.090127675s ago: executing program 9 (id=776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010003000000fcdbdf2522000000"], 0x14}, 0x1, 0x0, 0x0, 0x44014}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) setns(0xc9, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000180)={'filter\x00', 0x0, [0x21, 0x6, 0x3]}, &(0x7f0000000200)=0x54) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$eJzs3U9vVF0ZAPDn3nbon7fv26Is1KggomgIM+0AlbDCjcYQEiNx5QJqOzRNZzpNZ4q0sijfwUQSV7rwA7gwcWHCyr073bnBhQkq0VATF2PmzhQKnSlF2s6b3t8vObn33DOd5zyd3HPaM+2cAHLrXERsRcSpiLgXEZPd60m3xM1OaT/u5YtH89svHs0n0Wrd+UeStbevxa6vafuo+5yjEfGD70b8ONkbt7GxuTxXrVbWuvVSs7ZaamxsXl6qzS1WFisr5fLszOz09SvXyoeW69nab55/Z+nWD3//uy89++PWN3/a7tZEt213Hoepk3rhVZy24Yi4dRTBBmCom8+pQXeE/0saEZ+JiPPZ/T8ZQ9mrCQCcZK3WZLQmd9cBgJMuzdbAkrQYUeicp2mx2FnDOxPjabXeaF66X19fWeislU1FIb2/VK1Md9cKp6KQtOsz2fnrevmt+pWIOB0RPxsZy+rF+Xp1YZA/+ABAjn30ev7P3gv490hn/gcATrjRQXcAADh25n8AyB/zPwDkj/kfAPLH/A8A+WP+B4D8Mf8DQK58//btdmltdz//euHBxvpy/cHlhUpjuVhbny/O19dWi4v1+mL2mT21dz1ftV5fnbka6w9LzUqjWWpsbN6t1ddXmnezz/W+WykcS1YAwH5On3365yQitm6MZSV27eVgroaTLR10B4CBGRp0B4CBsdsX5Jff8YEeW/S+ofMnQmN7G54cTX+Ao3fx89b/Ia+s/0N+Wf+H/LL+D/nVaiX2/AeAnLHGDxzs/f8evP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAjk1kJUmL3b3AJyJNi8WIjyNiKgrJ/aVqZToiPomIP40URtr1mUF3GgD4QOnfku7+XxcnL0y83Xoq+c9IdoyIn/zizs8fzjWbazPt6//sXP/WWMST7vXyIPoPAHk09F6P3pmnd+bxHS9fPJrfKYffx/6ef7uzuWg77na3dFqGYzg7jkYhIsb/lXTrHcl7Z97b1uOI+Fyv/JNsbWSqu/Pp2/HbsT8+1vjpG/HTrK1zbH8vPnsIfYG8edoef272uv/SOJcde9//o9kI9eF2xr/tPeNf+mr8G+oz/p07SICxX0dc/cP3+sZ/HPGF4V7xk1fxkz7xLxwwx7988cvn+7W1fhlxMXrH3x2r1Kytlhobm5eXanOLlcXKSrk8OzM7ff3KtXIpW6Mu7axU7/X3G5c+2S//8T7xR9+R/9cOmP+v/nvvR1/ZJ/43vtr79T+zT/z2nPj1A8afG/9t3+272/EX+uT/rtf/0gHjP/vr5sIBHwoAHIPGxubyXLVaWRv0yU6HPi39ceIk1yeDHZeAo/f6ph90TwAAAAAAAAAAAAAAgH6O49+JBp0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ9f/AgAA//9gOtV4") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000440)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xffff}}]}, 0x43, 0x480, &(0x7f0000001340)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000006c137d2dc5487fbbab0e67a6d78d000000000085000000970000009500000000000000d278ff2586366870cec92e942806392f12f2e00967e700fbc3e5da2af73ca901c1d438d404deaebe0450ff88788193c2029b3a171211e381f804bbe33ed98f833ad47715b50dd5d5c714b5875571fde3b5f3d079975f6e8d4205e45b5be2c719548c8dc56a6237b8ec84d11668464112dec56bb32fb8b336"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2f000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) 23.089934235s ago: executing program 37 (id=776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010003000000fcdbdf2522000000"], 0x14}, 0x1, 0x0, 0x0, 0x44014}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) setns(0xc9, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000180)={'filter\x00', 0x0, [0x21, 0x6, 0x3]}, &(0x7f0000000200)=0x54) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$eJzs3U9vVF0ZAPDn3nbon7fv26Is1KggomgIM+0AlbDCjcYQEiNx5QJqOzRNZzpNZ4q0sijfwUQSV7rwA7gwcWHCyr073bnBhQkq0VATF2PmzhQKnSlF2s6b3t8vObn33DOd5zyd3HPaM+2cAHLrXERsRcSpiLgXEZPd60m3xM1OaT/u5YtH89svHs0n0Wrd+UeStbevxa6vafuo+5yjEfGD70b8ONkbt7GxuTxXrVbWuvVSs7ZaamxsXl6qzS1WFisr5fLszOz09SvXyoeW69nab55/Z+nWD3//uy89++PWN3/a7tZEt213Hoepk3rhVZy24Yi4dRTBBmCom8+pQXeE/0saEZ+JiPPZ/T8ZQ9mrCQCcZK3WZLQmd9cBgJMuzdbAkrQYUeicp2mx2FnDOxPjabXeaF66X19fWeislU1FIb2/VK1Md9cKp6KQtOsz2fnrevmt+pWIOB0RPxsZy+rF+Xp1YZA/+ABAjn30ev7P3gv490hn/gcATrjRQXcAADh25n8AyB/zPwDkj/kfAPLH/A8A+WP+B4D8Mf8DQK58//btdmltdz//euHBxvpy/cHlhUpjuVhbny/O19dWi4v1+mL2mT21dz1ftV5fnbka6w9LzUqjWWpsbN6t1ddXmnezz/W+WykcS1YAwH5On3365yQitm6MZSV27eVgroaTLR10B4CBGRp0B4CBsdsX5Jff8YEeW/S+ofMnQmN7G54cTX+Ao3fx89b/Ia+s/0N+Wf+H/LL+D/nVaiX2/AeAnLHGDxzs/f8evP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAjk1kJUmL3b3AJyJNi8WIjyNiKgrJ/aVqZToiPomIP40URtr1mUF3GgD4QOnfku7+XxcnL0y83Xoq+c9IdoyIn/zizs8fzjWbazPt6//sXP/WWMST7vXyIPoPAHk09F6P3pmnd+bxHS9fPJrfKYffx/6ef7uzuWg77na3dFqGYzg7jkYhIsb/lXTrHcl7Z97b1uOI+Fyv/JNsbWSqu/Pp2/HbsT8+1vjpG/HTrK1zbH8vPnsIfYG8edoef272uv/SOJcde9//o9kI9eF2xr/tPeNf+mr8G+oz/p07SICxX0dc/cP3+sZ/HPGF4V7xk1fxkz7xLxwwx7988cvn+7W1fhlxMXrH3x2r1Kytlhobm5eXanOLlcXKSrk8OzM7ff3KtXIpW6Mu7axU7/X3G5c+2S//8T7xR9+R/9cOmP+v/nvvR1/ZJ/43vtr79T+zT/z2nPj1A8afG/9t3+272/EX+uT/rtf/0gHjP/vr5sIBHwoAHIPGxubyXLVaWRv0yU6HPi39ceIk1yeDHZeAo/f6ph90TwAAAAAAAAAAAAAAgH6O49+JBp0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ9f/AgAA//9gOtV4") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000440)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xffff}}]}, 0x43, 0x480, &(0x7f0000001340)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000006c137d2dc5487fbbab0e67a6d78d000000000085000000970000009500000000000000d278ff2586366870cec92e942806392f12f2e00967e700fbc3e5da2af73ca901c1d438d404deaebe0450ff88788193c2029b3a171211e381f804bbe33ed98f833ad47715b50dd5d5c714b5875571fde3b5f3d079975f6e8d4205e45b5be2c719548c8dc56a6237b8ec84d11668464112dec56bb32fb8b336"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2f000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) 4.129664914s ago: executing program 5 (id=996): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000480)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,nfs=stale_rw,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,time_offset=0x00000000000003cc,errors=continue,nodots,dots,nodots,nodots,usefree,check=relaxed,nodots,nfs,nodots,showexec,nodots,umask=00000000000000000000007,nodots,nodots,dont_hash,seclabel,func=FILE_MMAP,subj_user=-+]^(-%*@@k+,:@{^[^@,uid>', @ANYRESOCT, @ANYBLOB="2c617564692c0093591481b2dac6c586482df1499a5d110264abd884a04c3c17f1c678294ba89de3d86c0645512aed6d9103b453b32f2367ac88ec9428d5c7acbe688a0077fcfc4862ee05f019c1f7fd56a6ffbf9af11e85ba202f6f3745d3"], 0x1, 0x1ff, &(0x7f0000000800)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180be7dce33e558413724c328fb0d50000000000000000000000000002000000000d0000ed0000000700000000000000000000000d00000000002e305f2e2e"], 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) 4.112973975s ago: executing program 5 (id=997): unshare(0x2068000) r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) clock_settime(0xa00, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, 0x0, 0x0) setpriority(0x0, 0x0, 0x200002a14b56) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x54}, {0x6, 0x1}]}) userfaultfd(0x1) bpf$PROG_LOAD(0x5, 0x0, 0x38) syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x0, 0x7a}, 0x0, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) timer_getoverrun(r2) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) wait4(r4, 0x0, 0x8, 0x0) ptrace$getregset(0x4204, r4, 0x201, &(0x7f00000001c0)={&(0x7f0000000400)=""/95, 0x5f}) 3.404448485s ago: executing program 2 (id=1007): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x7, 0x4, 0x0, 0x1, 0x2c, 0x65, 0x0, 0x4, 0x21, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xc}, {[@cipso={0x86, 0x6, 0x2}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x4, 0x0, "9cc7e8", 0x3, "94125f"}}}}}}, 0x0) 3.378287215s ago: executing program 2 (id=1008): unshare(0x2068000) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, &(0x7f00007d0000)) clock_settime(0xa00, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) socket$inet6(0xa, 0x2, 0x0) setpriority(0x0, 0x0, 0x200002a14b56) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x54}, {0x6, 0x1}]}) userfaultfd(0x1) bpf$PROG_LOAD(0x5, 0x0, 0x38) syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x0, 0x7a}, 0x0, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) timer_getoverrun(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ptrace(0x10, 0x0) wait4(0x0, 0x0, 0x8, 0x0) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f00000001c0)={&(0x7f0000000400)=""/95, 0x5f}) 3.21934918s ago: executing program 5 (id=1010): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x14, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x4, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x800004db, 0x1, 0x3, 0xa, 0x18, "10162dd7912fffff1a8a00004f6708080d0004"}) capset(&(0x7f0000000040)={0x20071026, r1}, &(0x7f0000000100)={0x7, 0x1, 0xfffffff8, 0x8, 0x9, 0x5}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 2.694210385s ago: executing program 3 (id=1012): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x96, &(0x7f0000000200)=ANY=[@ANYBLOB="6d6f64653d61646170746976652c696e6c696e6563727970742c6a71666d743d76667376302c71756f74612c6163746976655f6c6f67733d322c64697361626c655f726f6c6c5f666f72776172642c6e6f696e6c020000000000000072792c646174615f666c7573682c636865636b706f696e743d656e61626c652c757365725f78617474722c6d6f64653d667261676d656e743a626c6f636b2c64697361626c655f726f6c6c5f666f72776172642c6261636b67726f756e645f67633d6f66662c6163746976655f6c6f67733d342c726f6f74636f6e746578743d73797361646d5f752c736d61636b6673666c6f6f723df62a2c00"], 0x1, 0x5521, &(0x7f000000cf00)="$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") syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000000100)={[{@numtail}, {@utf8}, {@uni_xlate}, {@numtail}, {@shortname_win95}, {@shortname_mixed}, {@fat=@flush}, {@numtail}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@fat=@check_normal}, {@rodir}, {@utf8no}]}, 0x7f, 0x2b1, &(0x7f0000001880)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) 2.694007925s ago: executing program 1 (id=1013): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x800) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = gettid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(r2, 0xb) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x600, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000009b80)={0x40000012}) read$FUSE(r3, &(0x7f0000000500)={0x2020}, 0x2020) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) 2.564230698s ago: executing program 1 (id=1014): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0xff, 0x0, 0x0, 0x8, 0x3b00}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_DST={0x8, 0x1, @loopback}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0xea5bc50b6199d77e) 2.538176549s ago: executing program 1 (id=1015): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @desc3}, &(0x7f00000005c0)={0x0, "97c6e5c022b54c6e01b65660c23e2072121e3abaa079b86c68786694adfc6023d285b4dddea6bb5e36126e910840b462b36660c2e2aa14245c328b69992477ec", 0x400013}, 0x48, 0xfffffffffffffffe) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x3a) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000728000/0x4000)=nil, 0x4000, 0x2000009) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x80) removexattr(0x0, 0x0) fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) 2.48625733s ago: executing program 2 (id=1016): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005040)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11386}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x80000000}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) 2.476653141s ago: executing program 2 (id=1018): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x210802, &(0x7f00000006c0)=ANY=[], 0x1, 0x551b, &(0x7f0000000180)="$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") setgroups(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) fchmodat(r0, &(0x7f0000000080)='./file0\x00', 0xfffffffb) 2.418280562s ago: executing program 0 (id=1019): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) close(r0) 2.418097532s ago: executing program 3 (id=1020): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xd132}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'team_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="9601"], 0x6e8a) 2.413801162s ago: executing program 3 (id=1021): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 2.394896993s ago: executing program 0 (id=1022): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000850000007d00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1, r0}, 0xc) 1.914250056s ago: executing program 5 (id=1023): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x9, 0x0, 0x6}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) 1.525482487s ago: executing program 0 (id=1024): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x800) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = gettid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(r2, 0xb) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x600, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000009b80)={0x40000012}) read$FUSE(r3, &(0x7f0000000500)={0x2020}, 0x2020) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) 1.509336838s ago: executing program 5 (id=1025): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x4b564d06, 0x0, 0xad41}]}) 1.384432351s ago: executing program 0 (id=1026): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @desc3}, &(0x7f00000005c0)={0x0, "97c6e5c022b54c6e01b65660c23e2072121e3abaa079b86c68786694adfc6023d285b4dddea6bb5e36126e910840b462b36660c2e2aa14245c328b69992477ec", 0x400013}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='cgroup2\x00', r4) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) 1.345427582s ago: executing program 5 (id=1027): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) waitid(0x1, r0, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) 1.307768373s ago: executing program 1 (id=1028): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, 0x0) 1.094231609s ago: executing program 1 (id=1029): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x800) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(r4, 0xb) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r6 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000009b80)={0x40000012}) read$FUSE(r5, &(0x7f0000000500)={0x2020}, 0x2020) epoll_pwait(r6, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 1.094135059s ago: executing program 3 (id=1030): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000840)=ANY=[], 0x10}], 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1.089423119s ago: executing program 3 (id=1031): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000000000000023000000000000000000f900000000050000000a00"], 0xb8}}, 0x10) 1.07634641s ago: executing program 3 (id=1032): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100d83ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230"], 0x1, 0x105eb, &(0x7f000000cf00)="$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") fallocate(0xffffffffffffffff, 0x10, 0x6, 0x10001) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) 218.040304ms ago: executing program 2 (id=1033): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b"], 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@getlink={0x34, 0x12, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x5482, 0x8413}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4088080}, 0x80) 163.534435ms ago: executing program 1 (id=1034): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2800091, &(0x7f00000082c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e2eabcdf2226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004eca8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd1e6e194a04db64a13f8c019f54bcb0fc4d3b629670d76e9512b4a630436da7310", @ANYRES32, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="b18757"], 0x15, 0x1bc, &(0x7f0000000380)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) readahead(r1, 0x6, 0x57b3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x8) timer_settime(0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x1a1282, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETGROUP(r3, 0x400454ce, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000003c0)={[{@nobarrier}]}, 0x4, 0x521, &(0x7f0000000640)="$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") ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_mount_image$vfat(&(0x7f0000002100), &(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x304982f, 0x0, 0x3, 0x0, &(0x7f0000000240)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './cgroup.cpu/memory.force_empty\x00'}, 0x6e) madvise(&(0x7f00001c9000/0x2000)=nil, 0x2000, 0x8) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, 0x0, 0x0) write(r0, &(0x7f00000002c0)='0\n', 0x2) 119.990046ms ago: executing program 0 (id=1035): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xa) 83.405547ms ago: executing program 0 (id=1036): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x102) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=1037): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x800) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = gettid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(r2, 0xb) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) read$FUSE(r3, &(0x7f0000000500)={0x2020}, 0x2020) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): udit(1786030146.306:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=836 comm="syz.3.116" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc059f5a0d9 code=0x0 [ 85.786563][ T833] loop1: detected capacity change from 0 to 1024 [ 85.795978][ T30] audit: type=1400 audit(1786030146.366:318): avc: denied { bind } for pid=836 comm="syz.3.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.845346][ T833] EXT4-fs (loop1): dax option not supported [ 85.873215][ T845] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.889745][ T845] ext4 filesystem being mounted at /24/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.926629][ T845] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.117: corrupted xattr block 33 [ 85.953030][ T845] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 85.966814][ T845] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.117: corrupted xattr block 33 [ 85.995179][ T845] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 86.006592][ T845] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.117: corrupted xattr block 33 [ 86.033114][ T845] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 86.044287][ T845] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.117: corrupted xattr block 33 [ 86.105797][ T845] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.117: corrupted xattr block 33 [ 86.122503][ T845] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 86.209610][ T30] audit: type=1400 audit(1786030146.766:319): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 86.264811][ T30] audit: type=1400 audit(1786030146.816:320): avc: denied { read } for pid=865 comm="syz.2.121" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.357105][ T870] loop4: detected capacity change from 0 to 256 [ 86.369068][ T30] audit: type=1400 audit(1786030146.816:321): avc: denied { open } for pid=865 comm="syz.2.121" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.998329][ T30] audit: type=1400 audit(1786030146.816:322): avc: denied { ioctl } for pid=865 comm="syz.2.121" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.031209][ T30] audit: type=1400 audit(1786030146.816:323): avc: denied { set_context_mgr } for pid=865 comm="syz.2.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 87.172159][ T294] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.184020][ T882] loop3: detected capacity change from 0 to 512 [ 87.670601][ T882] EXT4-fs error (device loop3): ext4_quota_enable:6431: comm syz.3.120: Bad quota inum: 12023, type: 1 [ 87.682049][ T882] EXT4-fs warning (device loop3): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-117, ino=12023). Please run e2fsck to fix. [ 87.697708][ T882] EXT4-fs (loop3): mount failed [ 87.732139][ T294] usb 5-1: device descriptor read/64, error -71 [ 87.792597][ T882] loop3: detected capacity change from 0 to 512 [ 87.811302][ T882] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 87.824771][ T882] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.017847][ T894] loop2: detected capacity change from 0 to 512 [ 88.054050][ T894] EXT4-fs (loop2): dax option not supported [ 88.179676][ T896] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.187056][ T896] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.390476][ T294] usb 5-1: device descriptor read/64, error -71 [ 88.533453][ T900] futex_wake_op: syz.1.126 tries to shift op by 144; fix this program [ 88.563108][ T900] tipc: Started in network mode [ 88.568254][ T900] tipc: Node identity 00000000000400000000000000000001, cluster identity 4711 [ 88.577288][ T900] tipc: Enabling of bearer rejected, failed to enable media [ 88.732494][ T294] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.334427][ T913] loop1: detected capacity change from 0 to 256 [ 89.395247][ T915] loop2: detected capacity change from 0 to 512 [ 89.427490][ T913] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 89.469649][ T915] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.684148][ T915] ext4 filesystem being mounted at /24/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.705382][ T30] audit: type=1400 audit(1786030150.276:324): avc: denied { mount } for pid=912 comm="syz.1.129" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 89.814112][ T915] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.130: corrupted xattr block 33 [ 89.827018][ T915] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 89.840237][ T915] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.130: corrupted xattr block 33 [ 89.857633][ T30] audit: type=1400 audit(1786030150.426:325): avc: denied { write } for pid=912 comm="syz.1.129" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.863007][ T915] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 89.889402][ T915] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.130: corrupted xattr block 33 [ 89.905670][ T915] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 89.914811][ T30] audit: type=1400 audit(1786030150.426:326): avc: denied { add_name } for pid=912 comm="syz.1.129" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.932368][ T915] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.130: corrupted xattr block 33 [ 89.949375][ T915] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.130: corrupted xattr block 33 [ 89.961474][ T30] audit: type=1400 audit(1786030150.426:327): avc: denied { associate } for pid=912 comm="syz.1.129" name="cpuacct.usage_percpu" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 89.985456][ T30] audit: type=1400 audit(1786030150.426:328): avc: denied { append } for pid=912 comm="syz.1.129" path=2F32322FE91F7189591E9233614B2F637075616363742E75736167655F706572637075 dev="loop1" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.013868][ T915] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 90.117083][ T30] audit: type=1400 audit(1786030150.686:329): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 90.211597][ T30] audit: type=1326 audit(1786030150.776:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=924 comm="syz.0.131" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f9dd6d75e57 code=0x0 [ 90.297932][ T30] audit: type=1326 audit(1786030150.866:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=928 comm="syz.1.132" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f531017de57 code=0x0 [ 90.383966][ T935] 9pnet: p9_fd_create_tcp (935): problem binding to privport [ 91.109196][ T952] loop1: detected capacity change from 0 to 256 [ 91.129109][ T947] loop3: detected capacity change from 0 to 40427 [ 91.146604][ T952] exfat: Deprecated parameter 'utf8' [ 91.162493][ T952] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 91.182191][ T947] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 91.203473][ T947] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 91.715448][ T947] F2FS-fs (loop3): Found nat_bits in checkpoint [ 91.930500][ T30] audit: type=1400 audit(1786030152.396:332): avc: denied { mounton } for pid=950 comm="syz.1.137" path="/24/file0/file0" dev="loop1" ino=1048606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.617023][ T947] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 92.630733][ T947] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 92.766589][ T30] audit: type=1400 audit(1786030152.396:333): avc: denied { mount } for pid=950 comm="syz.1.137" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 94.886706][ T285] syz-executor (285) used greatest stack depth: 20696 bytes left [ 94.895613][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 94.895655][ T30] audit: type=1326 audit(1786030155.466:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=985 comm="syz.3.147" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fc059f53e57 code=0x0 [ 94.939756][ T988] Illegal XDP return value 4294967274, expect packet loss! [ 95.037677][ T914] tipc: Left network mode [ 95.084742][ T30] audit: type=1400 audit(1786030155.656:340): avc: denied { mounton } for pid=1002 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 95.154898][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.162127][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.170009][ T1002] device bridge_slave_0 entered promiscuous mode [ 95.179948][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.187231][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.195194][ T1002] device bridge_slave_1 entered promiscuous mode [ 95.288761][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.295903][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.303236][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.310277][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.333139][ T414] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.380668][ T1003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.389894][ T1003] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.397890][ T1019] loop4: detected capacity change from 0 to 512 [ 95.411341][ T1003] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.420347][ T1019] EXT4-fs (loop4): Ignoring removed oldalloc option [ 95.433347][ T1019] EXT4-fs (loop4): filesystem is read-only [ 95.439974][ T1019] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 95.462577][ T1019] EXT4-fs (loop4): filesystem is read-only [ 95.468486][ T1019] EXT4-fs (loop4): orphan cleanup on readonly fs [ 95.491123][ T1002] device veth0_vlan entered promiscuous mode [ 95.497939][ T1019] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.155: bg 0: block 64: padding at end of block bitmap is not set [ 95.538581][ T1002] device veth1_macvtap entered promiscuous mode [ 95.555036][ T1003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.563780][ T1003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.570973][ T1019] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 95.572885][ T1003] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.588343][ T1003] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.595995][ T1003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.596020][ T1019] EXT4-fs (loop4): 1 orphan inode deleted [ 95.605045][ T1003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.618665][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.625758][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.630274][ T1019] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noauto_da_alloc,auto_da_alloc=0x0000000000000000,stripe=0x0000000000000004,bsdgroups,noblock_validity,minixdf,nouid32,dioread_lock,nolazytime,oldalloc,usrquota,,errors=continue. Quota mode: writeback. [ 95.633708][ T1003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.669285][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.676403][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.684469][ T1003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.692501][ T414] usb 3-1: Using ep0 maxpacket: 8 [ 95.699771][ T1003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.822352][ T414] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 95.855930][ T414] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.955116][ T414] usb 3-1: config 0 has no interface number 0 [ 95.980162][ T1003] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.989249][ T1003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.005841][ T1003] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.014729][ T1003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.030773][ T30] audit: type=1400 audit(1786030156.596:341): avc: denied { mounton } for pid=1002 comm="syz-executor" path="/root/syzkaller.Mv45eK/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 96.059783][ T1027] loop3: detected capacity change from 0 to 512 [ 96.077207][ T30] audit: type=1400 audit(1786030156.596:342): avc: denied { mount } for pid=1002 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 96.103274][ T30] audit: type=1400 audit(1786030156.606:343): avc: denied { mounton } for pid=1002 comm="syz-executor" path="/root/syzkaller.Mv45eK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 96.131933][ T30] audit: type=1400 audit(1786030156.606:344): avc: denied { mounton } for pid=1002 comm="syz-executor" path="/root/syzkaller.Mv45eK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=18657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 96.163546][ T914] device bridge_slave_1 left promiscuous mode [ 96.169846][ T914] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.179472][ T914] device bridge_slave_0 left promiscuous mode [ 96.189885][ T1027] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.203817][ T1027] ext4 filesystem being mounted at /26/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.215219][ T414] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 96.225105][ T414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.233274][ T414] usb 3-1: Product: syz [ 96.270283][ T414] usb 3-1: Manufacturer: syz [ 96.275622][ T414] usb 3-1: SerialNumber: syz [ 96.363021][ T914] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.370946][ T414] usb 3-1: config 0 descriptor?? [ 96.448284][ T1027] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.157: corrupted xattr block 33 [ 96.488415][ T414] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 96.517956][ T30] audit: type=1400 audit(1786030156.626:345): avc: denied { mounton } for pid=1002 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 96.647266][ T30] audit: type=1400 audit(1786030156.626:346): avc: denied { mounton } for pid=1002 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 96.673600][ T1027] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 96.685699][ T414] usb 3-1: No valid video chain found. [ 96.701688][ T414] usb 3-1: USB disconnect, device number 2 [ 96.732692][ T1041] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.157: corrupted xattr block 33 [ 96.756108][ T1041] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 96.772751][ T1041] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.157: corrupted xattr block 33 [ 96.932373][ T30] audit: type=1400 audit(1786030157.436:347): avc: denied { execute } for pid=1039 comm="syz.0.160" name="file2" dev="tmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.122859][ T1041] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 97.129223][ T30] audit: type=1400 audit(1786030157.436:348): avc: denied { execute_no_trans } for pid=1039 comm="syz.0.160" path="/38/file2" dev="tmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.155628][ T1041] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.157: corrupted xattr block 33 [ 97.168463][ T1041] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.157: corrupted xattr block 33 [ 97.180678][ T1041] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 97.199985][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.207252][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.543011][ T1047] loop4: detected capacity change from 0 to 40427 [ 97.551626][ T1047] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 97.559446][ T1047] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 97.562213][ T738] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.575793][ T1047] F2FS-fs (loop4): invalid crc value [ 97.728711][ T1054] device veth0_vlan left promiscuous mode [ 97.735838][ T1054] device veth0_vlan entered promiscuous mode [ 97.749074][ T1054] device veth1_macvtap left promiscuous mode [ 97.758446][ T1054] device veth1_macvtap entered promiscuous mode [ 97.835521][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.845667][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.916533][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.935880][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.943023][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.950838][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.959358][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.968079][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.975164][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.997166][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.007871][ T1047] F2FS-fs (loop4): Found nat_bits in checkpoint [ 98.033886][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 98.050789][ T1033] loop5: detected capacity change from 0 to 131072 [ 98.061534][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.076369][ T1033] F2FS-fs (loop5): Test dummy encryption mode enabled [ 98.085033][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 98.094107][ T1033] F2FS-fs (loop5): invalid crc value [ 98.100098][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.108539][ T1047] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 98.110703][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.123805][ T1047] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 98.126056][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.142409][ T1033] F2FS-fs (loop5): Found nat_bits in checkpoint [ 98.173862][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.191776][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.202150][ T738] usb 4-1: Using ep0 maxpacket: 32 [ 98.210062][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.227758][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.237735][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.246054][ T1033] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 98.257282][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.266087][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.274351][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.322337][ T738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.337675][ T1054] syz.2.163 (1054) used greatest stack depth: 19656 bytes left [ 98.342602][ T738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.363796][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.385648][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.392305][ T738] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 98.406678][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.429289][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.446971][ T738] usb 4-1: New USB device found, idVendor=054c, idProduct=e05c, bcdDevice=6e.9e [ 98.456443][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.470256][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.478157][ T738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.491670][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.509214][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.520223][ T738] usb 4-1: config 0 descriptor?? [ 98.527273][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.548477][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.567854][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.584755][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 98.602836][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 98.621636][ T414] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 98.639463][ T414] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 98.653772][ T414] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 98.661445][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.677816][ T1046] attempt to access beyond end of device [ 98.677816][ T1046] loop4: rw=2049, want=79824, limit=40427 [ 98.760064][ T1047] attempt to access beyond end of device [ 98.760064][ T1047] loop4: rw=2049, want=81920, limit=40427 [ 98.777360][ T1077] loop2: detected capacity change from 0 to 512 [ 98.794888][ T1067] attempt to access beyond end of device [ 98.794888][ T1067] loop4: rw=2049, want=49160, limit=40427 [ 98.842440][ T1077] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 98.845012][ T1047] attempt to access beyond end of device [ 98.845012][ T1047] loop4: rw=2049, want=49568, limit=40427 [ 98.872209][ T1077] SELinux: duplicate or incompatible mount options [ 98.901487][ T1067] attempt to access beyond end of device [ 98.901487][ T1067] loop4: rw=524288, want=77840, limit=40427 [ 98.938441][ T1067] attempt to access beyond end of device [ 98.938441][ T1067] loop4: rw=524288, want=78080, limit=40427 [ 98.981547][ T1067] attempt to access beyond end of device [ 98.981547][ T1067] loop4: rw=0, want=77840, limit=40427 [ 99.032381][ T414] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 99.040156][ T1067] attempt to access beyond end of device [ 99.040156][ T1067] loop4: rw=0, want=77840, limit=40427 [ 99.143186][ T1067] attempt to access beyond end of device [ 99.143186][ T1067] loop4: rw=0, want=77840, limit=40427 [ 99.266696][ T1067] attempt to access beyond end of device [ 99.266696][ T1067] loop4: rw=0, want=77840, limit=40427 [ 99.572229][ T738] usbhid 4-1:0.0: can't add hid device: -71 [ 99.583780][ T1089] loop3: detected capacity change from 0 to 512 [ 99.591655][ T738] usbhid: probe of 4-1:0.0 failed with error -71 [ 99.612843][ T294] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 99.628568][ T738] usb 4-1: USB disconnect, device number 2 [ 99.675015][ T1089] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.712974][ T1089] ext4 filesystem being mounted at /28/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.762543][ T1089] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.171: corrupted xattr block 33 [ 99.775146][ T1089] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 99.784673][ T1089] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.171: corrupted xattr block 33 [ 99.797120][ T1089] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 99.806742][ T1089] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.171: corrupted xattr block 33 [ 99.818639][ T1089] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 99.828081][ T1089] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.171: corrupted xattr block 33 [ 99.841211][ T1089] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.171: corrupted xattr block 33 [ 99.862168][ T1089] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 100.066542][ T1097] futex_wake_op: syz.5.173 tries to shift op by 144; fix this program [ 100.366229][ T1099] loop3: detected capacity change from 0 to 512 [ 100.422366][ T1099] EXT4-fs (loop3): dax option not supported [ 100.500589][ T1101] loop4: detected capacity change from 0 to 512 [ 100.534211][ T1103] loop2: detected capacity change from 0 to 128 [ 100.554628][ T1103] FAT-fs (loop2): bogus number of reserved sectors [ 100.561262][ T1103] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 100.571734][ T1103] FAT-fs (loop2): Can't find a valid FAT filesystem [ 100.582805][ T1101] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 100.597392][ T1101] SELinux: duplicate or incompatible mount options [ 102.070045][ T1121] incfs: Error accessing: ./file0. [ 102.087313][ T1121] incfs: mount failed -2 [ 102.096843][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 102.096857][ T30] audit: type=1326 audit(1786030162.666:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1114 comm="syz.0.178" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f9dd6d75e57 code=0x0 [ 102.292192][ T998] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 102.376408][ T998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.417748][ T998] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 102.426331][ T998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.434903][ T998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.481136][ T998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.496728][ T998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.508971][ T998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.527884][ T1123] loop2: detected capacity change from 0 to 1024 [ 102.541618][ T30] audit: type=1400 audit(1786030163.106:364): avc: denied { remount } for pid=1122 comm="syz.2.182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 102.565229][ T1133] loop4: detected capacity change from 0 to 512 [ 102.617881][ T1133] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.631549][ T1133] ext4 filesystem being mounted at /40/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.663887][ T1133] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.184: corrupted xattr block 33 [ 102.681583][ T1133] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 102.695382][ T1133] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.184: corrupted xattr block 33 [ 102.725747][ T1133] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 102.760980][ T1133] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.184: corrupted xattr block 33 [ 102.812194][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 102.823025][ T1133] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 102.882272][ T1133] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.184: corrupted xattr block 33 [ 102.921409][ T30] audit: type=1400 audit(1786030163.486:365): avc: denied { connect } for pid=1122 comm="syz.2.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.960776][ T1133] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.184: corrupted xattr block 33 [ 103.012372][ T1133] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 103.385010][ T1110] loop3: detected capacity change from 0 to 131072 [ 103.419733][ T1110] F2FS-fs (loop3): Test dummy encryption mode enabled [ 103.448742][ T1110] F2FS-fs (loop3): invalid crc value [ 103.479875][ T1110] F2FS-fs (loop3): Found nat_bits in checkpoint [ 103.480349][ T1158] loop4: detected capacity change from 0 to 16 [ 103.517428][ T1123] loop2: detected capacity change from 0 to 16 [ 103.558260][ T1110] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 103.593286][ T1123] erofs: (device loop2): mounted with root inode @ nid 36. [ 103.678256][ T1158] erofs: (device loop4): mounted with root inode @ nid 36. [ 103.705848][ T1158] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 103.714997][ T1158] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 103.780398][ T1171] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 103.789335][ T1171] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 103.898526][ T1158] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 104.017436][ T1158] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 1 @ nid 89 [ 104.027574][ T1123] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=86 [ 104.037224][ T1158] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 104.072295][ T1158] handle_bad_sector: 1925 callbacks suppressed [ 104.072316][ T1158] attempt to access beyond end of device [ 104.072316][ T1158] loop4: rw=524288, want=34359738368, limit=16 [ 104.103195][ T1158] attempt to access beyond end of device [ 104.103195][ T1158] loop4: rw=524288, want=24, limit=16 [ 104.105013][ T1123] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=86 [ 104.133837][ T30] audit: type=1400 audit(1786030164.706:366): avc: denied { execute } for pid=1122 comm="syz.2.182" name="file1" dev="loop2" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.133857][ T1123] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=86 [ 104.182223][ T1123] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=86 [ 104.192661][ T30] audit: type=1400 audit(1786030164.766:367): avc: denied { execute_no_trans } for pid=1122 comm="syz.2.182" path="/35/file1/file1" dev="loop2" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.217669][ T1123] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=86 [ 104.311851][ T1179] overlayfs: missing 'workdir' [ 104.395789][ T30] audit: type=1326 audit(1786030164.966:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1178 comm="syz.5.198" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55033870d9 code=0x0 [ 104.906389][ T1190] loop4: detected capacity change from 0 to 128 [ 107.036368][ T1195] 9pnet: p9_fd_create_tcp (1195): problem binding to privport [ 107.123441][ T1190] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.134268][ T1190] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.448033][ T1214] loop4: detected capacity change from 0 to 16 [ 107.488364][ T1181] loop2: detected capacity change from 0 to 40427 [ 107.512877][ T1214] erofs: (device loop4): mounted with root inode @ nid 36. [ 107.527568][ T1214] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 107.566982][ T1214] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 107.582588][ T1214] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 107.614457][ T30] audit: type=1326 audit(1786030168.186:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1180 comm="syz.2.200" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d58dbf0d9 code=0x0 [ 107.622180][ T1214] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 1 @ nid 89 [ 107.672411][ T1214] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 107.702206][ T1214] attempt to access beyond end of device [ 107.702206][ T1214] loop4: rw=524288, want=34359738368, limit=16 [ 107.771413][ T1227] overlayfs: missing 'lowerdir' [ 108.345221][ T1229] 9pnet_virtio: no channels available for device 127.0.0.1 [ 108.710241][ T1214] attempt to access beyond end of device [ 108.710241][ T1214] loop4: rw=524288, want=24, limit=16 [ 108.864431][ T30] audit: type=1326 audit(1786030169.436:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1240 comm="syz.3.218" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fc059f53e57 code=0x0 [ 108.931653][ T1244] overlayfs: missing 'lowerdir' [ 108.943711][ T1245] futex_wake_op: syz.2.215 tries to shift op by 144; fix this program [ 111.092956][ T1275] overlayfs: missing 'lowerdir' [ 111.200752][ T1277] overlayfs: missing 'lowerdir' [ 111.452770][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 111.810081][ T1291] 9pnet_virtio: no channels available for device 127.0.0.1 [ 112.209750][ T30] audit: type=1326 audit(1786030172.776:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1286 comm="syz.3.228" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fc059f53e57 code=0x0 [ 112.303957][ T30] audit: type=1326 audit(1786030172.866:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1296 comm="syz.2.232" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d58dbf0d9 code=0x0 [ 112.394759][ T30] audit: type=1326 audit(1786030172.966:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1278 comm="syz.5.225" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55033870d9 code=0x0 [ 112.529149][ T1310] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 112.554652][ T1310] loop4: detected capacity change from 0 to 256 [ 112.628851][ T1310] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 113.066121][ T1321] overlayfs: missing 'lowerdir' [ 113.092195][ T30] audit: type=1400 audit(1786030173.656:374): avc: denied { mounton } for pid=1309 comm="syz.4.234" path="/50/file0/bus" dev="loop4" ino=1048615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 113.424175][ T288] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 113.435619][ T288] exFAT-fs (loop4): Filesystem has been set read-only [ 113.442890][ T288] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 113.644155][ T1338] overlayfs: missing 'lowerdir' [ 114.077740][ T1340] 9pnet_virtio: no channels available for device 127.0.0.1 [ 114.168330][ T30] audit: type=1400 audit(1786030174.736:375): avc: denied { getopt } for pid=1342 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.344087][ T30] audit: type=1400 audit(1786030174.916:376): avc: denied { write } for pid=1350 comm="syz.2.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.375548][ T1352] overlayfs: missing 'lowerdir' [ 114.437159][ T1356] loop2: detected capacity change from 0 to 512 [ 114.460805][ T1356] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 114.482029][ T1356] SELinux: duplicate or incompatible mount options [ 114.656555][ T30] audit: type=1326 audit(1786030175.226:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1346 comm="syz.0.248" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9dd6d7c0d9 code=0x0 [ 114.691576][ T1357] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.698742][ T1357] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.708612][ T1357] device bridge_slave_0 entered promiscuous mode [ 114.787144][ T1357] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.898439][ T1357] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.984393][ T1357] device bridge_slave_1 entered promiscuous mode [ 115.034333][ T30] audit: type=1326 audit(1786030175.606:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1362 comm="syz.5.253" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f5503380e57 code=0x0 [ 115.090324][ T1357] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.097576][ T1357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.104914][ T1357] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.111970][ T1357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.123558][ T1370] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 115.132272][ T1004] device bridge_slave_1 left promiscuous mode [ 115.138561][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.148955][ T1004] device bridge_slave_0 left promiscuous mode [ 115.149056][ T30] audit: type=1400 audit(1786030175.716:379): avc: denied { mounton } for pid=1369 comm="syz.3.254" path="/42/bus" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 115.169490][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.292326][ T30] audit: type=1326 audit(1786030175.816:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1369 comm="syz.3.254" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc059f5a0d9 code=0x0 [ 115.379707][ T1379] overlayfs: missing 'workdir' [ 115.400542][ T1379] loop2: detected capacity change from 0 to 256 [ 115.466545][ T1380] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 115.475450][ T1380] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 115.513616][ T1379] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 115.725603][ T1257] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.737798][ T30] audit: type=1326 audit(1786030176.306:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1378 comm="syz.2.257" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d58dbf0d9 code=0x0 [ 115.762472][ T1257] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.798098][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.806881][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.825067][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.834220][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.842927][ T1257] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.850007][ T1257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.858360][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.867594][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.876124][ T1257] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.883247][ T1257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.946455][ T1387] 9pnet_virtio: no channels available for device 127.0.0.1 [ 116.019428][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.031811][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.046150][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.059606][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.095760][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.117255][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.134857][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.170959][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.179165][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.186717][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.204721][ T1357] device veth0_vlan entered promiscuous mode [ 116.212325][ T30] audit: type=1400 audit(1786030176.776:382): avc: denied { setopt } for pid=1391 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.268657][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.277238][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.297259][ T30] audit: type=1400 audit(1786030176.866:383): avc: denied { write } for pid=1399 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.319242][ T1357] device veth1_macvtap entered promiscuous mode [ 116.343111][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.350825][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.378637][ T1412] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 116.392464][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.413785][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.424556][ T1416] overlayfs: missing 'workdir' [ 116.442917][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.537932][ T1423] 9pnet_virtio: no channels available for device 127.0.0.1 [ 116.969753][ T1430] overlayfs: missing 'lowerdir' [ 116.984515][ T1429] loop6: detected capacity change from 0 to 4096 [ 117.059220][ T1429] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.776639][ T1469] overlayfs: missing 'workdir' [ 118.815192][ T1473] overlayfs: missing 'workdir' [ 118.840712][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 118.840726][ T30] audit: type=1326 audit(1786030179.406:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1467 comm="syz.5.290" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55033870d9 code=0x0 [ 118.872158][ T6] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 118.912182][ T30] audit: type=1326 audit(1786030179.436:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1471 comm="syz.3.292" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc059f5a0d9 code=0x0 [ 118.966294][ T30] audit: type=1400 audit(1786030179.436:390): avc: denied { ioctl } for pid=1474 comm="syz.0.294" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 119.019736][ T30] audit: type=1400 audit(1786030179.516:391): avc: denied { write } for pid=1481 comm="syz.0.296" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 119.252227][ T6] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 119.266610][ T6] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 119.869728][ T1493] overlayfs: missing 'workdir' [ 120.152194][ T30] audit: type=1326 audit(1786030180.706:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1492 comm="syz.3.300" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc059f5a0d9 code=0x0 [ 120.722175][ T6] usb 7-1: string descriptor 0 read error: -71 [ 120.728411][ T6] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.742127][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 120.763463][ T6] usb 7-1: can't set config #1, error -71 [ 120.773975][ T6] usb 7-1: USB disconnect, device number 2 [ 120.800045][ T1508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.305'. [ 120.823163][ T1472] loop2: detected capacity change from 0 to 131072 [ 120.831472][ T1510] mip6: mip6_destopt_init_state: spi is not 0: 4286578688 [ 120.844038][ T1472] F2FS-fs (loop2): Test dummy encryption mode enabled [ 120.862801][ T1472] F2FS-fs (loop2): invalid crc value [ 120.893260][ T1472] F2FS-fs (loop2): Found nat_bits in checkpoint [ 120.903883][ T30] audit: type=1400 audit(1786030181.476:393): avc: denied { setopt } for pid=1516 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.081816][ T1472] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 123.292128][ T30] audit: type=1400 audit(1786030183.856:394): avc: denied { nlmsg_read } for pid=1555 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.354555][ T1558] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 123.387661][ T1558] overlayfs: missing 'lowerdir' [ 123.443033][ T1506] loop6: detected capacity change from 0 to 131072 [ 123.470219][ T1506] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(512) [ 123.499373][ T1506] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 123.517089][ T1506] F2FS-fs (loop6): invalid crc value [ 123.581075][ T1506] F2FS-fs (loop6): Mismatch valid blocks 2 vs. 10 [ 123.589302][ T1506] F2FS-fs (loop6): Failed to initialize F2FS segment manager (-117) [ 125.240970][ T1592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.334'. [ 125.644068][ T1596] device sit1 left promiscuous mode [ 125.703417][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 125.756337][ T1592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.334'. [ 125.783430][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.798472][ T1592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.334'. [ 125.830349][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 125.869635][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.894996][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.904115][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.912653][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.924763][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.167050][ T1623] 9pnet_virtio: no channels available for device 127.0.0.1 [ 126.616216][ T30] audit: type=1400 audit(1786030187.186:395): avc: denied { getopt } for pid=1635 comm="syz.2.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.809995][ T30] audit: type=1326 audit(1786030188.376:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1646 comm="syz.0.360" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f9dd6d75e57 code=0x0 [ 128.332752][ T26] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 128.503953][ T1666] loop6: detected capacity change from 0 to 512 [ 128.578684][ T30] audit: type=1400 audit(1786030189.146:397): avc: denied { getopt } for pid=1677 comm="syz.5.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 128.846336][ T1681] 9pnet_virtio: no channels available for device 127.0.0.1 [ 129.340910][ T1666] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.353118][ T1666] ext4 filesystem being mounted at /12/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.366870][ T1661] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #15: comm syz.6.363: corrupted xattr block 33 [ 129.380438][ T1661] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 129.383159][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 129.415217][ T1661] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #15: comm syz.6.363: corrupted xattr block 33 [ 129.462633][ T1661] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 129.478885][ T1661] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #15: comm syz.6.363: corrupted xattr block 33 [ 130.495745][ T1690] 9pnet_virtio: no channels available for device 127.0.0.1 [ 130.536432][ T294] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 130.550265][ T1661] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 130.580383][ T1661] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #15: comm syz.6.363: corrupted xattr block 33 [ 130.617978][ T1661] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #15: comm syz.6.363: corrupted xattr block 33 [ 130.656784][ T1661] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 130.982179][ T30] audit: type=1400 audit(1786030191.546:398): avc: denied { setopt } for pid=1704 comm="syz.0.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.164748][ T1721] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.077523][ T1730] overlayfs: missing 'workdir' [ 134.095825][ T30] audit: type=1400 audit(1786030194.666:399): avc: denied { create } for pid=1731 comm="syz.6.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 134.188429][ T30] audit: type=1400 audit(1786030194.686:400): avc: denied { setopt } for pid=1731 comm="syz.6.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 134.239805][ T1739] loop6: detected capacity change from 0 to 512 [ 134.324482][ T30] audit: type=1326 audit(1786030194.796:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1729 comm="syz.3.388" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc059f5a0d9 code=0x0 [ 134.378238][ T1739] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.407368][ T1739] ext4 filesystem being mounted at /15/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.477503][ T1739] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #15: comm syz.6.390: corrupted xattr block 33 [ 134.492820][ T30] audit: type=1326 audit(1786030194.866:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1733 comm="syz.0.389" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f9dd6d75e57 code=0x0 [ 134.544767][ T1739] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 134.558698][ T1739] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #15: comm syz.6.390: corrupted xattr block 33 [ 134.576759][ T1739] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 134.586086][ T1739] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #15: comm syz.6.390: corrupted xattr block 33 [ 134.598704][ T1739] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 134.682060][ T1739] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #15: comm syz.6.390: corrupted xattr block 33 [ 134.695882][ T30] audit: type=1400 audit(1786030195.266:403): avc: denied { write } for pid=1756 comm="syz.0.395" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 134.723478][ T1739] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #15: comm syz.6.390: corrupted xattr block 33 [ 134.742039][ T1739] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 135.117694][ T1767] netlink: 16 bytes leftover after parsing attributes in process `syz.0.400'. [ 135.126822][ T1767] netlink: 16 bytes leftover after parsing attributes in process `syz.0.400'. [ 135.150902][ T1771] overlayfs: missing 'workdir' [ 135.157744][ T1771] loop6: detected capacity change from 0 to 256 [ 135.174764][ T1773] overlayfs: missing 'workdir' [ 135.180725][ T1775] overlayfs: missing 'workdir' [ 135.189196][ T30] audit: type=1326 audit(1786030195.756:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1774 comm="syz.0.403" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9dd6d7c0d9 code=0x0 [ 135.217677][ T30] audit: type=1326 audit(1786030195.786:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1772 comm="syz.3.402" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc059f5a0d9 code=0x0 [ 135.250701][ T1771] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 135.300881][ T30] audit: type=1326 audit(1786030195.866:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1770 comm="syz.6.399" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8262c950d9 code=0x0 [ 135.599142][ T1782] exFAT-fs (loop6): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 135.610847][ T1782] exFAT-fs (loop6): Filesystem has been set read-only [ 136.351512][ T1357] exFAT-fs (loop6): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 136.394740][ T1804] overlayfs: failed to clone upperpath [ 136.405579][ T1357] exFAT-fs (loop6): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 136.464519][ T1811] overlayfs: missing 'workdir' [ 136.561185][ T30] audit: type=1326 audit(1786030197.126:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1807 comm="syz.5.417" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55033870d9 code=0x0 [ 136.609668][ T1818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'. [ 137.058399][ T1843] netlink: 48 bytes leftover after parsing attributes in process `syz.2.432'. [ 137.067515][ T1843] netlink: 32 bytes leftover after parsing attributes in process `syz.2.432'. [ 137.082552][ T1839] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.089799][ T1839] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.097673][ T1839] device bridge_slave_0 entered promiscuous mode [ 137.107928][ T1839] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.115393][ T1839] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.125866][ T1839] device bridge_slave_1 entered promiscuous mode [ 138.179956][ T1853] 9pnet_virtio: no channels available for device 127.0.0.1 [ 138.585209][ T851] device bridge_slave_1 left promiscuous mode [ 138.592564][ T851] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.632058][ T851] device bridge_slave_0 left promiscuous mode [ 138.644790][ T851] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.656022][ T851] device veth1_macvtap left promiscuous mode [ 138.662841][ T851] device veth0_vlan left promiscuous mode [ 139.579745][ T1871] device veth1_macvtap left promiscuous mode [ 139.590667][ T1871] device veth1_macvtap entered promiscuous mode [ 139.992387][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.001877][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.025442][ T1885] overlayfs: missing 'workdir' [ 140.030608][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.052340][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.059447][ T1262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.067615][ T30] audit: type=1326 audit(1786030200.636:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1884 comm="syz.0.446" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9dd6d7c0d9 code=0x0 [ 140.115532][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.143679][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.171791][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.178937][ T1262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.216723][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.236459][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 140.245012][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.256100][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 140.264306][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.272559][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.280672][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.288931][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.297199][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.309340][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.317916][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.326530][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.342601][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.359724][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.384360][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.401206][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.417996][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.434857][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.570446][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.650960][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.728446][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.894559][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.997351][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.202659][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.231169][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.261466][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.294749][ T30] audit: type=1400 audit(1786030201.866:409): avc: denied { bind } for pid=1900 comm="syz.0.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 141.380810][ T30] audit: type=1400 audit(1786030201.906:410): avc: denied { name_bind } for pid=1900 comm="syz.0.452" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 141.460956][ T30] audit: type=1400 audit(1786030201.906:411): avc: denied { node_bind } for pid=1900 comm="syz.0.452" saddr=255.255.255.255 src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 141.493372][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.521387][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.531608][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.557264][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.634801][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.657076][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.664206][ T1262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.707770][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.758185][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.807961][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.815089][ T1262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.895772][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.292859][ T1839] device veth0_vlan entered promiscuous mode [ 143.307065][ T1839] device veth1_macvtap entered promiscuous mode [ 143.549603][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.595393][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.738035][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.850575][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.991523][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.116549][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.231972][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.373072][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.382821][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.391159][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.413756][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.438360][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.467103][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.487317][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.513013][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.550417][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.577400][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.685949][ T1926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.773445][ T30] audit: type=1326 audit(1786030205.346:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1913 comm="syz.2.457" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d58dbf0d9 code=0x0 [ 144.825106][ T30] audit: type=1400 audit(1786030205.396:413): avc: denied { read } for pid=1936 comm="syz.3.466" path="socket:[21665]" dev="sockfs" ino=21665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.873967][ T1944] loop7: detected capacity change from 0 to 512 [ 144.935496][ T30] audit: type=1400 audit(1786030205.506:414): avc: denied { bind } for pid=1948 comm="syz.0.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 144.961384][ T1944] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 144.991124][ T1944] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.094260][ T1944] EXT4-fs error (device loop7): ext4_map_blocks:632: inode #2: block 3: comm syz.7.469: lblock 8 mapped to illegal pblock 3 (length 26) [ 145.264364][ T30] audit: type=1400 audit(1786030205.826:415): avc: denied { connect } for pid=1997 comm="syz.7.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.312198][ T738] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 145.359269][ T2005] loop7: detected capacity change from 0 to 256 [ 145.406199][ T2005] exfat: Deprecated parameter 'utf8' [ 145.411877][ T2005] exfat: Deprecated parameter 'namecase' [ 145.418376][ T2005] exfat: Deprecated parameter 'namecase' [ 145.443529][ T2009] 9pnet: Insufficient options for proto=fd [ 145.453482][ T2005] exFAT-fs (loop7): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1189b7a0) [ 145.467471][ T2005] exFAT-fs (loop7): invalid boot region [ 145.473347][ T2005] exFAT-fs (loop7): failed to recognize exfat type [ 145.522436][ T30] audit: type=1326 audit(1786030206.096:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1985 comm="syz.3.488" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc059f5a0d9 code=0x0 [ 145.979309][ T30] audit: type=1400 audit(1786030206.546:417): avc: denied { write } for pid=2004 comm="syz.7.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 146.202273][ T738] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 146.216210][ T738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.243788][ T738] usb 1-1: Product: syz [ 146.248226][ T738] usb 1-1: Manufacturer: syz [ 146.253451][ T738] usb 1-1: SerialNumber: syz [ 146.584945][ T738] ums-karma 1-1:1.0: USB Mass Storage device detected [ 146.601715][ T738] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 146.601715][ T738] Please send a copy of this message to and [ 146.626808][ T2045] loop7: detected capacity change from 0 to 256 [ 147.172883][ T738] ums-karma: probe of 1-1:1.0 failed with error -5 [ 147.180762][ T738] usb 1-1: USB disconnect, device number 5 [ 147.196962][ T2045] FAT-fs (loop7): Directory bread(block 64) failed [ 147.211188][ T2045] FAT-fs (loop7): Directory bread(block 65) failed [ 147.218255][ T2045] FAT-fs (loop7): Directory bread(block 66) failed [ 147.225258][ T2045] FAT-fs (loop7): Directory bread(block 67) failed [ 147.233380][ T2045] FAT-fs (loop7): Directory bread(block 68) failed [ 147.239984][ T2045] FAT-fs (loop7): Directory bread(block 69) failed [ 147.246905][ T2045] FAT-fs (loop7): Directory bread(block 70) failed [ 147.262612][ T2045] FAT-fs (loop7): Directory bread(block 71) failed [ 147.269585][ T2045] FAT-fs (loop7): Directory bread(block 72) failed [ 147.276427][ T2045] FAT-fs (loop7): Directory bread(block 73) failed [ 147.381539][ T2068] loop7: detected capacity change from 0 to 256 [ 147.634561][ T2068] exfat: Deprecated parameter 'namecase' [ 147.932513][ T2068] exfat: Deprecated parameter 'namecase' [ 147.976734][ T2068] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xcec2b026, utbl_chksum : 0xe619d30d) [ 148.043861][ T30] audit: type=1326 audit(1786030208.616:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2058 comm="syz.5.516" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55033870d9 code=0x0 [ 148.105699][ T2084] loop7: detected capacity change from 0 to 512 [ 148.128240][ T2089] netlink: 277 bytes leftover after parsing attributes in process `syz.0.528'. [ 148.166314][ T2084] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.179875][ T2084] ext4 filesystem being mounted at /15/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.196326][ T30] audit: type=1400 audit(1786030208.766:419): avc: denied { read write } for pid=2096 comm="syz.0.530" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 148.221174][ T2084] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #15: comm syz.7.523: corrupted xattr block 33 [ 148.242923][ T1727] logitech-hidpp-device 0005:046D:B012.0001: Device not connected [ 148.251133][ T2084] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 148.260010][ T30] audit: type=1400 audit(1786030208.806:420): avc: denied { open } for pid=2096 comm="syz.0.530" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 148.288660][ T2100] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #15: comm syz.7.523: corrupted xattr block 33 [ 148.303868][ T2100] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 148.316740][ T2100] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #15: comm syz.7.523: corrupted xattr block 33 [ 148.328965][ T2100] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 148.917247][ T2100] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #15: comm syz.7.523: corrupted xattr block 33 [ 148.944792][ T2100] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #15: comm syz.7.523: corrupted xattr block 33 [ 148.957523][ T2100] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 148.986432][ T30] audit: type=1400 audit(1786030209.556:421): avc: denied { read write } for pid=2111 comm="syz.0.535" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 149.010895][ T30] audit: type=1400 audit(1786030209.556:422): avc: denied { open } for pid=2111 comm="syz.0.535" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 149.059243][ T30] audit: type=1400 audit(1786030209.576:423): avc: denied { ioctl } for pid=2111 comm="syz.0.535" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 150.457618][ T30] audit: type=1400 audit(1786030211.026:424): avc: denied { bind } for pid=2133 comm="syz.2.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 150.533198][ T2136] 9pnet_virtio: no channels available for device 127.0.0.1 [ 150.838202][ T2139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 150.918128][ T2139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.545'. [ 151.063271][ T30] audit: type=1400 audit(1786030211.636:425): avc: denied { mount } for pid=2152 comm="syz.0.551" name="/" dev="configfs" ino=13649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 151.391294][ T30] audit: type=1400 audit(1786030211.636:426): avc: denied { search } for pid=2152 comm="syz.0.551" name="/" dev="configfs" ino=13649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 151.413543][ T30] audit: type=1400 audit(1786030211.696:427): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 151.446239][ T2161] usb usb9: usbfs: process 2161 (syz.0.553) did not claim interface 47 before use [ 151.535013][ T2174] loop7: detected capacity change from 0 to 512 [ 151.619638][ T2174] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 151.630931][ T2174] ext4 filesystem being mounted at /20/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.667566][ T2174] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #15: comm syz.7.557: corrupted xattr block 33 [ 151.713432][ T2174] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 151.742273][ T2182] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #15: comm syz.7.557: corrupted xattr block 33 [ 151.758012][ T2182] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 151.770697][ T2182] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #15: comm syz.7.557: corrupted xattr block 33 [ 151.829124][ T2182] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 151.849444][ T2182] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #15: comm syz.7.557: corrupted xattr block 33 [ 151.886080][ T2182] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #15: comm syz.7.557: corrupted xattr block 33 [ 151.920624][ T2182] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 151.934733][ T2189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.564'. [ 152.128649][ T2202] loop7: detected capacity change from 0 to 256 [ 152.216144][ T2204] 9pnet_virtio: no channels available for device 127.0.0.1 [ 152.487577][ T2202] exfat: Deprecated parameter 'utf8' [ 152.617555][ T2202] exfat: Deprecated parameter 'namecase' [ 152.624117][ T2202] exfat: Deprecated parameter 'namecase' [ 152.641761][ T2202] exFAT-fs (loop7): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1189b7a0) [ 152.653591][ T2202] exFAT-fs (loop7): invalid boot region [ 152.659251][ T2202] exFAT-fs (loop7): failed to recognize exfat type [ 152.996441][ T30] audit: type=1400 audit(1786030213.566:428): avc: denied { bind } for pid=2212 comm="syz.5.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 153.031805][ T30] audit: type=1400 audit(1786030213.596:429): avc: denied { setopt } for pid=2212 comm="syz.5.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 154.880127][ T30] audit: type=1400 audit(1786030215.446:430): avc: denied { mount } for pid=2256 comm="syz.5.591" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 155.462964][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 155.485628][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.502719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 155.510996][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.531821][ T2275] loop7: detected capacity change from 0 to 512 [ 155.541420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.557986][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.566842][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.576288][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.616166][ T2275] EXT4-fs (loop7): mounted filesystem without journal. Opts: user_xattr,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 155.648509][ T2275] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.659663][ T30] audit: type=1326 audit(1786030216.236:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2289 comm="syz.2.603" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d58dbf0d9 code=0x0 [ 156.142411][ T2309] overlayfs: missing 'workdir' [ 156.150750][ T30] audit: type=1326 audit(1786030216.716:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2308 comm="syz.5.610" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55033870d9 code=0x0 [ 156.202167][ T20] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 156.279864][ T2312] loop7: detected capacity change from 0 to 16 [ 156.289116][ T2312] erofs: (device loop7): mounted with root inode @ nid 36. [ 156.301350][ T2312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=86 [ 156.310995][ T2312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=86 [ 156.320620][ T2312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=86 [ 156.330096][ T2312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=86 [ 156.339801][ T2312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=86 [ 156.442109][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 156.562155][ T20] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.577613][ T20] usb 1-1: config 0 has no interfaces? [ 156.630150][ T30] audit: type=1326 audit(1786030217.196:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2318 comm="syz.2.613" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d58dbf0d9 code=0x0 [ 156.772174][ T20] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 156.781366][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.802110][ T20] usb 1-1: Product: syz [ 156.806339][ T20] usb 1-1: Manufacturer: syz [ 156.810965][ T20] usb 1-1: SerialNumber: syz [ 156.832885][ T20] usb 1-1: config 0 descriptor?? [ 156.930351][ T30] audit: type=1326 audit(1786030217.496:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2323 comm="syz.3.615" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc059f5a0d9 code=0x0 [ 157.076812][ T2283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.600'. [ 157.095550][ T39] usb 1-1: USB disconnect, device number 6 [ 157.630900][ T2355] overlayfs: missing 'workdir' [ 157.640890][ T30] audit: type=1326 audit(1786030218.216:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2354 comm="syz.2.626" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d58dbf0d9 code=0x0 [ 157.727590][ T2356] overlayfs: failed to clone upperpath [ 157.984368][ T2366] netlink: 'syz.0.629': attribute type 1 has an invalid length. [ 158.070160][ T2374] loop7: detected capacity change from 0 to 2048 [ 158.093833][ T2374] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.115938][ T30] audit: type=1400 audit(1786030218.686:436): avc: denied { ioctl } for pid=2373 comm="syz.7.633" path="/35/file1/file1" dev="loop7" ino=15 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.176047][ T2380] overlayfs: missing 'workdir' [ 158.188165][ T2380] loop7: detected capacity change from 0 to 256 [ 158.217573][ T2380] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 158.293573][ T30] audit: type=1326 audit(1786030218.866:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2379 comm="syz.7.634" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb2af7f0d9 code=0x0 [ 158.344612][ T2392] exFAT-fs (loop7): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 158.361357][ T2392] exFAT-fs (loop7): Filesystem has been set read-only [ 158.373988][ T30] audit: type=1326 audit(1786030218.946:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2393 comm="syz.0.640" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9dd6d7c0d9 code=0x0 [ 158.804687][ T2406] 9pnet_virtio: no channels available for device 127.0.0.1 [ 159.106163][ T1839] exFAT-fs (loop7): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 159.118732][ T1839] exFAT-fs (loop7): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 159.643016][ T2426] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 159.672129][ T20] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 159.695941][ T2425] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.703230][ T2425] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.716367][ T2425] device bridge_slave_0 entered promiscuous mode [ 159.728460][ T2425] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.736925][ T2425] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.751695][ T2435] overlayfs: failed to clone upperpath [ 159.780156][ T2425] device bridge_slave_1 entered promiscuous mode [ 160.102252][ T2425] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.109368][ T2425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.116776][ T2425] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.123870][ T2425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.160003][ T1001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.173248][ T1001] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.186549][ T1001] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.212475][ T1001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.223902][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.231008][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.246357][ T1001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.260547][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.267685][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.286754][ T1001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.301789][ T1001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.310744][ T1001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.319305][ T1001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.334529][ T1001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.343172][ T1001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.356348][ T1001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.365033][ T1001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.381981][ T2425] device veth0_vlan entered promiscuous mode [ 160.400175][ T1001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.414731][ T1001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.451591][ T1001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.459765][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.471760][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.527489][ T1001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.536618][ T20] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 160.546225][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.558755][ T2425] device veth1_macvtap entered promiscuous mode [ 160.568829][ T20] usb 1-1: config 0 descriptor?? [ 160.630883][ T1000] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 160.644987][ T1000] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.669308][ T1000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.678509][ T1000] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.687193][ T1000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.859112][ T2460] loop8: detected capacity change from 0 to 16 [ 161.147120][ T2460] erofs: (device loop8): mounted with root inode @ nid 36. [ 161.204886][ T20] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 161.211970][ T20] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 161.219308][ T20] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 161.226569][ T20] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 161.233797][ T20] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 161.241295][ T20] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 161.249432][ T2460] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=86 [ 161.258847][ T20] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 161.267965][ T20] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 161.279483][ T2460] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=86 [ 161.291805][ T2460] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=86 [ 161.303015][ T610] device bridge_slave_1 left promiscuous mode [ 161.308720][ T2460] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=86 [ 161.310219][ T610] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.327695][ T2460] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=86 [ 161.339876][ T610] device bridge_slave_0 left promiscuous mode [ 161.346338][ T610] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.355074][ T610] device veth1_macvtap left promiscuous mode [ 161.362359][ T610] device veth0_vlan left promiscuous mode [ 161.372389][ T20] cp2112 0003:10C4:EA90.0002: error requesting version [ 161.382397][ T20] cp2112: probe of 0003:10C4:EA90.0002 failed with error -71 [ 161.405353][ T20] usb 1-1: USB disconnect, device number 7 [ 161.526440][ T30] audit: type=1400 audit(1786030222.096:439): avc: denied { read } for pid=2466 comm="syz.2.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.566450][ T2465] fido_id[2465]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 161.771370][ T30] audit: type=1326 audit(1786030222.336:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.3.667" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc059f5a0d9 code=0x7ffc0000 [ 161.822320][ T30] audit: type=1326 audit(1786030222.376:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.3.667" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc059f5a0d9 code=0x7ffc0000 [ 161.865047][ T2482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.669'. [ 161.892186][ T30] audit: type=1326 audit(1786030222.376:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.3.667" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc059f5a0d9 code=0x7ffc0000 [ 162.057580][ T30] audit: type=1326 audit(1786030222.376:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.3.667" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc059f5a0d9 code=0x7ffc0000 [ 162.343987][ T30] audit: type=1326 audit(1786030222.376:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.3.667" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc059f5a0d9 code=0x7ffc0000 [ 162.449624][ T30] audit: type=1326 audit(1786030222.376:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.3.667" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc059f5a0d9 code=0x7ffc0000 [ 162.615027][ T30] audit: type=1326 audit(1786030222.376:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.3.667" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc059f5a0d9 code=0x7ffc0000 [ 163.336730][ T30] audit: type=1326 audit(1786030222.376:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.3.667" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc059f5a0d9 code=0x7ffc0000 [ 163.377004][ T30] audit: type=1326 audit(1786030222.376:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.3.667" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc059f5a0d9 code=0x7ffc0000 [ 163.960571][ T2530] loop8: detected capacity change from 0 to 128 [ 164.045978][ T2536] xt_hashlimit: size too large, truncated to 1048576 [ 164.388290][ T2538] loop8: detected capacity change from 0 to 40427 [ 164.414829][ T2538] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 164.435730][ T2538] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 164.457195][ T2538] F2FS-fs (loop8): invalid crc_offset: 33558524 [ 164.482864][ T2538] F2FS-fs (loop8): Found nat_bits in checkpoint [ 164.555877][ T2538] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 164.567352][ T2538] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 164.619900][ T2538] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 165.212357][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 165.510360][ T2562] overlayfs: failed to clone upperpath [ 165.701227][ T2566] overlayfs: missing 'workdir' [ 165.913350][ T2580] netlink: 220 bytes leftover after parsing attributes in process `syz.2.706'. [ 165.939538][ T2580] netlink: 156 bytes leftover after parsing attributes in process `syz.2.706'. [ 166.002124][ T20] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 166.382200][ T20] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.401208][ T20] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.502202][ T20] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 166.515696][ T20] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 166.532113][ T20] usb 9-1: SerialNumber: syz [ 166.580000][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 166.580015][ T30] audit: type=1326 audit(1786030227.146:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2589 comm="syz.5.710" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f5503380e57 code=0x0 [ 166.595191][ T20] usb 9-1: 0:2 : does not exist [ 166.967116][ T307] usb 9-1: USB disconnect, device number 2 [ 167.562141][ T2609] overlayfs: failed to clone upperpath [ 167.714294][ T2613] netlink: 20 bytes leftover after parsing attributes in process `syz.8.717'. [ 167.832739][ T2613] device vlan2 entered promiscuous mode [ 167.838361][ T2613] device gretap0 entered promiscuous mode [ 167.863199][ T2617] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2617 comm=syz.0.719 [ 167.878119][ T2619] overlayfs: missing 'workdir' [ 167.885426][ T2617] mmap: syz.0.719 (2617): VmData 29208576 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 167.899101][ T2619] loop8: detected capacity change from 0 to 256 [ 167.937883][ T2619] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 168.046840][ T30] audit: type=1326 audit(1786030228.616:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2618 comm="syz.8.720" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0491500d9 code=0x0 [ 168.071487][ T30] audit: type=1326 audit(1786030228.616:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2632 comm="syz.0.727" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f9dd6d75e57 code=0x0 [ 168.103587][ T2639] exFAT-fs (loop8): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 170.061144][ T2642] 9pnet_virtio: no channels available for device 127.0.0.1 [ 170.070736][ T2639] exFAT-fs (loop8): Filesystem has been set read-only [ 170.256479][ T2650] overlayfs: missing 'workdir' [ 170.327494][ T30] audit: type=1326 audit(1786030230.896:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2649 comm="syz.3.731" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc059f5a0d9 code=0x0 [ 170.413446][ T2425] exFAT-fs (loop8): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 170.449821][ T2425] exFAT-fs (loop8): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 170.546308][ T2666] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.987656][ T2675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.742'. [ 170.996943][ T2675] netlink: 20 bytes leftover after parsing attributes in process `syz.5.742'. [ 171.066478][ T30] audit: type=1326 audit(1786030231.636:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2676 comm="syz.5.743" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f5503380e57 code=0x0 [ 171.242563][ T2678] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.262115][ T2678] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.292488][ T2678] device bridge_slave_0 entered promiscuous mode [ 171.312617][ T2678] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.352127][ T2678] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.359858][ T2678] device bridge_slave_1 entered promiscuous mode [ 171.560193][ T2678] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.567425][ T2678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.574758][ T2678] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.581833][ T2678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.693844][ T2694] overlayfs: missing 'workdir' [ 171.700776][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.711430][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.726912][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.777228][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.794737][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.801849][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.811403][ T30] audit: type=1326 audit(1786030232.386:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2693 comm="syz.0.747" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9dd6d7c0d9 code=0x0 [ 171.857745][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.878453][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.886000][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.910505][ T2698] xt_hashlimit: size too large, truncated to 1048576 [ 171.911448][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.942800][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.981747][ T1007] device bridge_slave_1 left promiscuous mode [ 171.988497][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.996376][ T1007] device bridge_slave_0 left promiscuous mode [ 172.012662][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.031355][ T1007] device veth1_macvtap left promiscuous mode [ 172.047973][ T1007] device veth0_vlan left promiscuous mode [ 172.255616][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.267577][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.292703][ T2678] device veth0_vlan entered promiscuous mode [ 172.309229][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.323624][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.342006][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.355108][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.378392][ T2678] device veth1_macvtap entered promiscuous mode [ 172.395321][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.404050][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.412910][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.427086][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.436106][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.444834][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.453724][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.717314][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 172.745865][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.759365][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 172.767720][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.776565][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.788118][ T2729] loop9: detected capacity change from 0 to 512 [ 172.793982][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.823608][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.841391][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.841775][ T2729] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 172.860932][ T2729] ext4 filesystem being mounted at /2/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.874145][ T2729] EXT4-fs error (device loop9): ext4_xattr_block_get:543: inode #15: comm syz.9.763: corrupted xattr block 33 [ 172.887958][ T2729] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 172.916702][ T2729] EXT4-fs error (device loop9): ext4_xattr_block_get:543: inode #15: comm syz.9.763: corrupted xattr block 33 [ 172.980111][ T2729] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 173.011539][ T2729] EXT4-fs error (device loop9): ext4_xattr_block_get:543: inode #15: comm syz.9.763: corrupted xattr block 33 [ 173.041836][ T2729] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 173.053014][ T2729] EXT4-fs error (device loop9): ext4_xattr_block_get:543: inode #15: comm syz.9.763: corrupted xattr block 33 [ 173.074748][ T2729] EXT4-fs error (device loop9): ext4_xattr_block_get:543: inode #15: comm syz.9.763: corrupted xattr block 33 [ 173.253962][ T2729] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 174.064265][ T30] audit: type=1326 audit(1786030234.636:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2749 comm="syz.2.770" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d58dbf0d9 code=0x0 [ 174.222639][ T2758] overlayfs: missing 'workdir' [ 174.229472][ T2758] loop9: detected capacity change from 0 to 256 [ 174.310421][ T2758] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 174.552905][ T30] audit: type=1326 audit(1786030235.126:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2757 comm="syz.9.767" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55058c50d9 code=0x0 [ 175.137747][ T2678] exFAT-fs (loop9): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 175.172184][ T2678] exFAT-fs (loop9): Filesystem has been set read-only [ 175.189739][ T2678] exFAT-fs (loop9): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 175.558047][ T2778] 9pnet_virtio: no channels available for device 127.0.0.1 [ 176.006637][ T2776] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.013816][ T2776] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.021393][ T2776] device bridge_slave_0 entered promiscuous mode [ 176.040340][ T2776] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.053778][ T2776] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.067784][ T2776] device bridge_slave_1 entered promiscuous mode [ 176.148101][ T2776] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.155253][ T2776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.162609][ T2776] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.169665][ T2776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.220940][ T2776] device veth0_vlan entered promiscuous mode [ 176.236498][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.249427][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.258450][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.268028][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.277444][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.639908][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.706360][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.717420][ T2794] overlayfs: missing 'workdir' [ 176.771793][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.844988][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.884503][ T30] audit: type=1326 audit(1786030237.446:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2793 comm="syz.3.784" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc059f5a0d9 code=0x0 [ 176.944686][ T1007] device bridge_slave_1 left promiscuous mode [ 176.958341][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.101695][ T1007] device bridge_slave_0 left promiscuous mode [ 177.121829][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.161802][ T1007] device veth1_macvtap left promiscuous mode [ 177.181619][ T1007] device veth0_vlan left promiscuous mode [ 177.462171][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.474911][ T2801] tipc: Started in network mode [ 177.479860][ T2801] tipc: Node identity 7f000001, cluster identity 4711 [ 177.502431][ T2801] tipc: New replicast peer: 127.0.0.1 [ 177.522509][ T2801] tipc: Enabled bearer , priority 10 [ 177.533534][ T2776] device veth1_macvtap entered promiscuous mode [ 177.553364][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.562023][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.575687][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.593282][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.663947][ T30] audit: type=1400 audit(1786030238.236:467): avc: denied { ioctl } for pid=2816 comm="syz.2.793" path="socket:[24279]" dev="sockfs" ino=24279 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.750478][ T2826] netlink: 104 bytes leftover after parsing attributes in process `syz.2.796'. [ 177.782638][ T2828] overlayfs: missing 'workdir' [ 177.844483][ T2831] device erspan0 entered promiscuous mode [ 177.868219][ T30] audit: type=1326 audit(1786030238.436:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2827 comm="syz.5.797" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55033870d9 code=0x0 [ 178.021020][ T30] audit: type=1400 audit(1786030238.586:469): avc: denied { setopt } for pid=2842 comm="syz.2.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.095423][ T30] audit: type=1400 audit(1786030238.666:470): avc: denied { getopt } for pid=2845 comm="syz.2.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 178.254056][ T30] audit: type=1326 audit(1786030238.826:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2856 comm="syz.1.809" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3916f050d9 code=0x0 [ 178.293329][ T2859] overlayfs: failed to clone upperpath [ 178.413991][ T2868] netlink: 'syz.0.813': attribute type 1 has an invalid length. [ 178.439060][ T2868] netlink: 8968 bytes leftover after parsing attributes in process `syz.0.813'. [ 178.472198][ T2868] netlink: 32 bytes leftover after parsing attributes in process `syz.0.813'. [ 178.491365][ T2868] netlink: 5 bytes leftover after parsing attributes in process `syz.0.813'. [ 178.653223][ T2884] 9pnet_virtio: no channels available for device 127.0.0.1 [ 178.911623][ T307] tipc: Node number set to 2130706433 [ 179.073401][ T30] audit: type=1400 audit(1786030239.636:472): avc: denied { connect } for pid=2890 comm="syz.5.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 179.196532][ T30] audit: type=1326 audit(1786030239.766:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2894 comm="syz.1.825" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f3916efee57 code=0x0 [ 179.267592][ T2900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.827'. [ 179.445977][ T30] audit: type=1326 audit(1786030240.016:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2922 comm="syz.3.835" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc059f5a0d9 code=0x0 [ 180.076285][ T30] audit: type=1400 audit(1786030240.646:475): avc: denied { block_suspend } for pid=2936 comm="syz.1.840" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.896291][ T2949] 9pnet_virtio: no channels available for device 127.0.0.1 [ 181.966409][ T2939] loop1: detected capacity change from 0 to 131072 [ 182.051855][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 182.051870][ T30] audit: type=1400 audit(1786030242.616:479): avc: denied { mount } for pid=2977 comm="syz.0.857" name="/" dev="ramfs" ino=24461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 182.315668][ T30] audit: type=1400 audit(1786030242.886:480): avc: denied { bind } for pid=2995 comm="syz.1.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 182.751410][ T3011] loop1: detected capacity change from 0 to 128 [ 182.807554][ T2982] netlink: 300 bytes leftover after parsing attributes in process `syz.0.858'. [ 182.827455][ T30] audit: type=1400 audit(1786030243.396:481): avc: denied { map } for pid=3013 comm="syz.1.871" path="socket:[23476]" dev="sockfs" ino=23476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 182.897308][ T30] audit: type=1400 audit(1786030243.396:482): avc: denied { read accept } for pid=3013 comm="syz.1.871" path="socket:[23476]" dev="sockfs" ino=23476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 182.993255][ T30] audit: type=1400 audit(1786030243.516:483): avc: denied { associate } for pid=3020 comm="syz.3.844" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 183.248368][ T3018] loop1: detected capacity change from 0 to 40427 [ 183.517961][ T30] audit: type=1326 audit(1786030244.086:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.1.873" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3916f050d9 code=0x0 [ 183.648518][ T3039] loop1: detected capacity change from 0 to 4096 [ 183.659532][ T3041] netlink: 260 bytes leftover after parsing attributes in process `syz.5.881'. [ 183.692196][ T3041] netlink: 'syz.5.881': attribute type 1 has an invalid length. [ 183.712122][ T3041] netlink: 76 bytes leftover after parsing attributes in process `syz.5.881'. [ 183.721028][ T3041] netlink: 8 bytes leftover after parsing attributes in process `syz.5.881'. [ 183.784139][ T3039] EXT4-fs (loop1): Test dummy encryption mode enabled [ 183.791008][ T3039] EXT4-fs (loop1): Ignoring removed bh option [ 183.807471][ T3039] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 183.837830][ T3039] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec198, mo2=0003] [ 183.852427][ T3039] System zones: 0-5 [ 183.871995][ T3039] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,bh,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 183.897426][ T738] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 183.922219][ T30] audit: type=1400 audit(1786030244.476:485): avc: denied { mounton } for pid=3017 comm="syz.1.873" path="/15/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 183.971885][ T3039] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 183.972360][ T30] audit: type=1400 audit(1786030244.486:486): avc: denied { create } for pid=3017 comm="syz.1.873" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 184.067206][ T30] audit: type=1400 audit(1786030244.636:487): avc: denied { remove_name } for pid=2776 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.111302][ T30] audit: type=1400 audit(1786030244.636:488): avc: denied { rmdir } for pid=2776 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.302196][ T738] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 184.332107][ T738] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 184.852149][ T738] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 184.861269][ T738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.887710][ T738] usb 1-1: Product: syz [ 184.902104][ T738] usb 1-1: Manufacturer: syz [ 184.906748][ T738] usb 1-1: SerialNumber: syz [ 184.968769][ T3089] loop1: detected capacity change from 0 to 1024 [ 185.003904][ T3090] overlayfs: failed to clone upperpath [ 185.025751][ T3089] EXT4-fs (loop1): Ignoring removed bh option [ 185.038370][ T3089] EXT4-fs error (device loop1): ext4_map_blocks:742: inode #3: block 1: comm syz.1.900: lblock 1 mapped to illegal pblock 1 (length 1) [ 185.062161][ T3089] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.900: Failed to acquire dquot type 0 [ 185.080800][ T3089] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.900: Freeing blocks not in datazone - block = 0, count = 4096 [ 185.151549][ T3089] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.900: Invalid inode bitmap blk 0 in block_group 0 [ 185.164387][ T45] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 185.178870][ T3089] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 185.187538][ T738] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 185.198406][ T3089] EXT4-fs (loop1): 1 orphan inode deleted [ 185.210274][ T3089] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; dioread_lock,min_batch_time=0x0000000000000008,norecovery,delalloc,nodiscard,inlinecrypt,bh,,errors=continue. Quota mode: writeback. [ 185.218635][ T45] EXT4-fs error (device loop1): ext4_release_dquot:6263: comm kworker/u4:2: Failed to release dquot type 0 [ 185.251660][ T3089] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 185.571525][ T3107] tipc: Started in network mode [ 185.576842][ T3107] tipc: Node identity , cluster identity 4711 [ 185.584596][ T307] usb 1-1: USB disconnect, device number 8 [ 185.649874][ T307] usblp0: removed [ 187.869758][ T3135] overlayfs: failed to clone upperpath [ 187.920587][ T3140] overlayfs: failed to clone lowerpath [ 188.307663][ T3109] loop1: detected capacity change from 0 to 131072 [ 188.376120][ T3109] F2FS-fs (loop1): Test dummy encryption mode enabled [ 188.412516][ T3109] F2FS-fs (loop1): invalid crc value [ 188.489509][ T3109] F2FS-fs (loop1): Found nat_bits in checkpoint [ 189.015294][ T3109] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 189.074379][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 189.074403][ T30] audit: type=1400 audit(1786030249.646:500): avc: denied { ioctl } for pid=3164 comm="syz.0.929" path="socket:[25728]" dev="sockfs" ino=25728 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.141578][ T3109] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 189.177739][ T3109] F2FS-fs (loop1): Start checkpoint disabled! [ 189.630683][ T3166] overlayfs: failed to clone upperpath [ 189.968544][ T3181] netlink: 9000 bytes leftover after parsing attributes in process `syz.0.936'. [ 191.295982][ T3206] loop1: detected capacity change from 0 to 40427 [ 191.352381][ T3206] F2FS-fs (loop1): invalid crc value [ 191.378933][ T3206] F2FS-fs (loop1): Found nat_bits in checkpoint [ 191.462945][ T3206] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 191.508411][ T3211] capability: warning: `syz.0.949' uses 32-bit capabilities (legacy support in use) [ 191.538160][ T3206] F2FS-fs (loop1): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 191.798523][ T3248] loop1: detected capacity change from 0 to 256 [ 191.812843][ T3248] exfat: Deprecated parameter 'utf8' [ 191.818277][ T3248] exfat: Deprecated parameter 'utf8' [ 191.821975][ T3250] overlayfs: failed to clone upperpath [ 191.871696][ T3248] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 191.902313][ T30] audit: type=1400 audit(1786030252.476:501): avc: denied { remount } for pid=3247 comm="syz.1.963" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 192.063724][ T30] audit: type=1326 audit(1786030252.636:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3254 comm="syz.3.965" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fc059f53e57 code=0x0 [ 192.346202][ T3274] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.353486][ T3274] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.365675][ T3274] device bridge_slave_0 entered promiscuous mode [ 192.388247][ T3274] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.402452][ T3274] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.411224][ T3274] device bridge_slave_1 entered promiscuous mode [ 192.532824][ T3274] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.539932][ T3274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.547289][ T3274] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.554359][ T3274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.592131][ T6] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 192.610927][ T909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.619444][ T909] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.631935][ T909] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.643773][ T909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.652173][ T909] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.659239][ T909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.668414][ T909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.683699][ T909] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.690805][ T909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.711213][ T45] device bridge_slave_1 left promiscuous mode [ 192.719887][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.739734][ T45] device bridge_slave_0 left promiscuous mode [ 192.748062][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.770266][ T45] device veth1_macvtap left promiscuous mode [ 192.779348][ T45] device veth0_vlan left promiscuous mode [ 192.907918][ T3295] fuse: Bad value for 'fd' [ 192.933991][ T909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.942994][ T909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.952153][ T6] usb 1-1: config 0 interface 0 has no altsetting 0 [ 192.961613][ T6] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 192.972384][ T30] audit: type=1326 audit(1786030253.546:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3292 comm="syz.2.980" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f8d58db8e57 code=0x0 [ 192.986406][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.009163][ T999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.025119][ T1007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.035721][ T1007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.052925][ T6] usb 1-1: config 0 descriptor?? [ 193.063618][ T1007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.108163][ T3274] device veth0_vlan entered promiscuous mode [ 193.146540][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.165087][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.185388][ T3274] device veth1_macvtap entered promiscuous mode [ 193.198498][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.206747][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.240296][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.318311][ T1003] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.338253][ T1003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.430580][ T3311] loop1: detected capacity change from 0 to 128 [ 193.504176][ T3311] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 193.527169][ T3311] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 193.590295][ T3313] overlayfs: failed to clone upperpath [ 193.623719][ T6] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x1 [ 193.631024][ T6] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x5 [ 193.639220][ T6] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x6 [ 193.647997][ T6] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 193.656616][ T6] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 193.672454][ T6] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 193.690248][ T6] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 193.699677][ T6] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 193.715996][ T6] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 193.723933][ T6] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 193.884847][ T6] hid-led: probe of 0003:0FC5:B080.0003 failed with error -71 [ 193.908183][ T6] usb 1-1: USB disconnect, device number 9 [ 194.366957][ T30] audit: type=1326 audit(1786030254.936:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3331 comm="syz.3.994" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc059f5a0d9 code=0x0 [ 194.421836][ T30] audit: type=1326 audit(1786030254.986:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3339 comm="syz.5.997" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f5503380e57 code=0x0 [ 194.748407][ T3355] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1000'. [ 194.779422][ T3355] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1000'. [ 195.109350][ T30] audit: type=1326 audit(1786030255.676:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3371 comm="syz.2.1008" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d58dbf0d9 code=0x0 [ 196.218676][ T3408] loop1: detected capacity change from 0 to 128 [ 196.704374][ T3408] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.715497][ T3408] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 197.222755][ T30] audit: type=1400 audit(1786030257.796:507): avc: denied { wake_alarm } for pid=3404 comm="syz.3.1021" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 197.253698][ T30] audit: type=1400 audit(1786030257.816:508): avc: denied { read } for pid=3423 comm="syz.1.1028" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 197.286650][ T30] audit: type=1400 audit(1786030257.816:509): avc: denied { open } for pid=3423 comm="syz.1.1028" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 197.311319][ T30] audit: type=1400 audit(1786030257.856:510): avc: denied { ioctl } for pid=3423 comm="syz.1.1028" path="/dev/usbmon0" dev="devtmpfs" ino=155 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 198.192414][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 198.212673][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.238105][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 198.262648][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.295548][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.323668][ T3442] loop1: detected capacity change from 0 to 16 [ 198.330506][ T3440] overlayfs: failed to clone upperpath [ 198.340466][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.362720][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.382104][ T1004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.398828][ T3442] erofs: (device loop1): mounted with root inode @ nid 36. [ 198.417160][ T3442] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 198.437472][ T3439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1033'. [ 198.468595][ T3442] erofs: (device loop1): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 198.498554][ T3442] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 198.518742][ T3442] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 1 @ nid 89 [ 198.538911][ T3442] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 198.571118][ T3442] attempt to access beyond end of device [ 198.571118][ T3442] loop1: rw=524288, want=34359738368, limit=16 [ 198.583410][ T3442] attempt to access beyond end of device [ 198.583410][ T3442] loop1: rw=524288, want=24, limit=16 [ 198.599290][ T3448] ================================================================== [ 198.607412][ T3448] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x6f1/0x760 [ 198.615616][ T3448] Read of size 4 at addr ffff888125cef470 by task syz.1.1034/3448 [ 198.623445][ T3448] [ 198.625784][ T3448] CPU: 0 PID: 3448 Comm: syz.1.1034 Not tainted syzkaller #0 [ 198.633172][ T3448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.643267][ T3448] Call Trace: [ 198.646567][ T3448] [ 198.649520][ T3448] __dump_stack+0x21/0x30 [ 198.653874][ T3448] dump_stack_lvl+0x110/0x170 [ 198.658578][ T3448] ? show_regs_print_info+0x20/0x20 [ 198.663808][ T3448] ? load_image+0x3f0/0x3f0 [ 198.668338][ T3448] print_address_description+0x7f/0x2c0 [ 198.673909][ T3448] ? unaccount_page_cache_page+0x6f1/0x760 [ 198.679736][ T3448] kasan_report+0x10f/0x150 [ 198.684290][ T3448] ? unaccount_page_cache_page+0x6f1/0x760 [ 198.690123][ T3448] __asan_report_load4_noabort+0x14/0x20 [ 198.695790][ T3448] unaccount_page_cache_page+0x6f1/0x760 [ 198.701449][ T3448] __delete_from_page_cache+0xbe/0x470 [ 198.706937][ T3448] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 198.713994][ T3448] ? __kasan_check_write+0x14/0x20 [ 198.719142][ T3448] ? __kasan_check_read+0x11/0x20 [ 198.724192][ T3448] ? workingset_eviction+0x402/0x9f0 [ 198.729516][ T3448] __remove_mapping+0x601/0x990 [ 198.734396][ T3448] ? jbd2_journal_try_to_free_buffers+0x2c8/0x300 [ 198.740835][ T3448] ? remove_mapping+0xa0/0xa0 [ 198.745543][ T3448] ? __kasan_check_read+0x11/0x20 [ 198.750607][ T3448] shrink_page_list+0x2a24/0x5800 [ 198.755661][ T3448] ? shrink_page_list+0x8e1/0x5800 [ 198.760799][ T3448] ? reclaim_clean_pages_from_list+0x7e0/0x7e0 [ 198.766974][ T3448] ? __this_cpu_preempt_check+0x13/0x20 [ 198.772571][ T3448] ? __mod_zone_page_state+0x8e/0xd0 [ 198.777910][ T3448] ? isolate_lru_pages+0xff1/0x11f0 [ 198.783138][ T3448] ? should_run_aging+0x410/0x410 [ 198.788188][ T3448] ? cgroup_rstat_updated+0x30/0x360 [ 198.793494][ T3448] ? _raw_spin_lock_irq+0x95/0xf0 [ 198.798547][ T3448] ? __this_cpu_preempt_check+0x13/0x20 [ 198.804131][ T3448] ? __count_memcg_events+0xad/0x120 [ 198.809447][ T3448] shrink_lruvec+0x1297/0x3a40 [ 198.814244][ T3448] ? release_firmware_map_entry+0x190/0x190 [ 198.820155][ T3448] ? wake_up_process+0x20/0x20 [ 198.824944][ T3448] ? mem_cgroup_shrink_node+0x550/0x550 [ 198.830513][ T3448] ? preempt_schedule_common+0xbe/0xf0 [ 198.836003][ T3448] ? schedule_preempt_disabled+0x20/0x20 [ 198.841661][ T3448] ? __kasan_check_write+0x14/0x20 [ 198.846799][ T3448] ? _raw_spin_lock+0x94/0xf0 [ 198.851494][ T3448] ? _raw_spin_trylock_bh+0x150/0x150 [ 198.856882][ T3448] ? cgroup_rstat_flush_locked+0xa29/0xa70 [ 198.862726][ T3448] ? inactive_is_low+0x160/0x2f0 [ 198.867685][ T3448] ? css_next_descendant_pre+0x1e1/0x210 [ 198.873335][ T3448] ? mem_cgroup_iter+0x465/0x6c0 [ 198.878290][ T3448] shrink_node+0x11ee/0x2a40 [ 198.882901][ T3448] ? allow_direct_reclaim+0x370/0x370 [ 198.888284][ T3448] do_try_to_free_pages+0x5a7/0x1580 [ 198.893591][ T3448] ? try_to_free_pages+0xc50/0xc50 [ 198.898713][ T3448] ? __queue_work+0x903/0xc60 [ 198.903400][ T3448] try_to_free_mem_cgroup_pages+0x261/0x610 [ 198.909325][ T3448] ? shrink_lruvec+0x3a40/0x3a40 [ 198.914289][ T3448] ? mutex_unlock+0x8f/0x230 [ 198.918900][ T3448] mem_cgroup_force_empty_write+0x130/0x170 [ 198.924807][ T3448] ? memcg_stat_show+0x1360/0x1360 [ 198.929936][ T3448] cgroup_file_write+0x294/0x560 [ 198.934885][ T3448] ? cgroup_seqfile_stop+0xc0/0xc0 [ 198.940006][ T3448] ? mutex_lock+0x9b/0x1c0 [ 198.944437][ T3448] ? wait_for_completion_killable_timeout+0x10/0x10 [ 198.951041][ T3448] ? __kasan_check_write+0x14/0x20 [ 198.956175][ T3448] ? cgroup_seqfile_stop+0xc0/0xc0 [ 198.961315][ T3448] kernfs_fop_write_iter+0x2bd/0x400 [ 198.966614][ T3448] vfs_write+0x831/0xfd0 [ 198.970872][ T3448] ? file_end_write+0x1b0/0x1b0 [ 198.975728][ T3448] ? wait_for_completion_killable_timeout+0x10/0x10 [ 198.982330][ T3448] ? __fget_files+0x2e1/0x340 [ 198.987022][ T3448] ? __fdget_pos+0x2d2/0x380 [ 198.991622][ T3448] ? ksys_write+0x70/0x260 [ 198.996048][ T3448] ksys_write+0x14a/0x260 [ 199.000389][ T3448] ? __ia32_sys_read+0x90/0x90 [ 199.005161][ T3448] ? __kasan_check_write+0x14/0x20 [ 199.010293][ T3448] ? switch_fpu_return+0x15d/0x2c0 [ 199.015418][ T3448] __x64_sys_write+0x7b/0x90 [ 199.020024][ T3448] x64_sys_call+0x8ef/0x9a0 [ 199.024539][ T3448] do_syscall_64+0x4c/0xa0 [ 199.028971][ T3448] ? clear_bhb_loop+0x50/0xa0 [ 199.033657][ T3448] ? clear_bhb_loop+0x50/0xa0 [ 199.038344][ T3448] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.044267][ T3448] RIP: 0033:0x7fb7594ce0d9 [ 199.048697][ T3448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.068340][ T3448] RSP: 002b:00007fb757f06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 199.076768][ T3448] RAX: ffffffffffffffda RBX: 00007fb759756090 RCX: 00007fb7594ce0d9 [ 199.084774][ T3448] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: 0000000000000003 [ 199.092760][ T3448] RBP: 00007fb759565024 R08: 0000000000000000 R09: 0000000000000000 [ 199.100749][ T3448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.108728][ T3448] R13: 00007fb759756128 R14: 00007fb759756090 R15: 00007ffead82fbc8 [ 199.116719][ T3448] [ 199.119745][ T3448] [ 199.122079][ T3448] Allocated by task 3109: [ 199.126423][ T3448] __kasan_kmalloc+0xd4/0x100 [ 199.131116][ T3448] kmem_cache_alloc_trace+0x119/0x270 [ 199.136496][ T3448] alloc_super+0x5e/0x840 [ 199.140837][ T3448] sget+0x1e2/0x4c0 [ 199.144659][ T3448] mount_bdev+0xec/0x3c0 [ 199.148921][ T3448] f2fs_mount+0x34/0x40 [ 199.153090][ T3448] legacy_get_tree+0xed/0x190 [ 199.157813][ T3448] vfs_get_tree+0x89/0x260 [ 199.162245][ T3448] do_new_mount+0x251/0xb40 [ 199.166761][ T3448] path_mount+0x640/0xff0 [ 199.171096][ T3448] __se_sys_mount+0x320/0x390 [ 199.175778][ T3448] __x64_sys_mount+0xbf/0xd0 [ 199.180380][ T3448] x64_sys_call+0x6bf/0x9a0 [ 199.184897][ T3448] do_syscall_64+0x4c/0xa0 [ 199.189321][ T3448] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.195227][ T3448] [ 199.197584][ T3448] Freed by task 307: [ 199.201494][ T3448] kasan_set_track+0x4a/0x70 [ 199.206092][ T3448] kasan_set_free_info+0x23/0x40 [ 199.211045][ T3448] ____kasan_slab_free+0x125/0x160 [ 199.216164][ T3448] __kasan_slab_free+0x11/0x20 [ 199.220933][ T3448] slab_free_freelist_hook+0xc2/0x190 [ 199.226319][ T3448] kfree+0xc4/0x270 [ 199.230155][ T3448] destroy_super_work+0x40/0x50 [ 199.235018][ T3448] process_one_work+0x6c8/0xbb0 [ 199.239878][ T3448] worker_thread+0xaa0/0x1250 [ 199.244579][ T3448] kthread+0x3f5/0x4f0 [ 199.248678][ T3448] ret_from_fork+0x1f/0x30 [ 199.253197][ T3448] [ 199.255523][ T3448] Last potentially related work creation: [ 199.261240][ T3448] kasan_save_stack+0x3a/0x60 [ 199.265927][ T3448] __kasan_record_aux_stack+0xd2/0x100 [ 199.271398][ T3448] kasan_record_aux_stack_noalloc+0xb/0x10 [ 199.277215][ T3448] insert_work+0x51/0x310 [ 199.281556][ T3448] __queue_work+0x8e1/0xc60 [ 199.286068][ T3448] queue_work_on+0xde/0x150 [ 199.290578][ T3448] destroy_super_rcu+0xd1/0xe0 [ 199.295379][ T3448] rcu_do_batch+0x4c1/0xbf0 [ 199.299894][ T3448] rcu_core+0x4a3/0xef0 [ 199.304056][ T3448] rcu_core_si+0x9/0x10 [ 199.308222][ T3448] handle_softirqs+0x250/0x560 [ 199.312996][ T3448] __irq_exit_rcu+0x52/0xf0 [ 199.317512][ T3448] irq_exit_rcu+0x9/0x10 [ 199.321855][ T3448] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 199.327503][ T3448] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 199.333494][ T3448] [ 199.335825][ T3448] Second to last potentially related work creation: [ 199.342411][ T3448] kasan_save_stack+0x3a/0x60 [ 199.347118][ T3448] __kasan_record_aux_stack+0xd2/0x100 [ 199.352603][ T3448] kasan_record_aux_stack_noalloc+0xb/0x10 [ 199.358422][ T3448] call_rcu+0x10b/0xf60 [ 199.362599][ T3448] __put_super+0x26b/0x2d0 [ 199.367026][ T3448] deactivate_locked_super+0xd4/0x100 [ 199.372404][ T3448] mount_bdev+0x2ab/0x3c0 [ 199.376735][ T3448] f2fs_mount+0x34/0x40 [ 199.380898][ T3448] legacy_get_tree+0xed/0x190 [ 199.385601][ T3448] vfs_get_tree+0x89/0x260 [ 199.390023][ T3448] do_new_mount+0x251/0xb40 [ 199.394532][ T3448] path_mount+0x640/0xff0 [ 199.398876][ T3448] __se_sys_mount+0x320/0x390 [ 199.403567][ T3448] __x64_sys_mount+0xbf/0xd0 [ 199.408161][ T3448] x64_sys_call+0x6bf/0x9a0 [ 199.412678][ T3448] do_syscall_64+0x4c/0xa0 [ 199.417102][ T3448] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.423014][ T3448] [ 199.425340][ T3448] The buggy address belongs to the object at ffff888125cef000 [ 199.425340][ T3448] which belongs to the cache kmalloc-2k of size 2048 [ 199.439403][ T3448] The buggy address is located 1136 bytes inside of [ 199.439403][ T3448] 2048-byte region [ffff888125cef000, ffff888125cef800) [ 199.453554][ T3448] The buggy address belongs to the page: [ 199.459236][ T3448] page:ffffea0004973a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x125ce8 [ 199.469485][ T3448] head:ffffea0004973a00 order:3 compound_mapcount:0 compound_pincount:0 [ 199.477819][ T3448] flags: 0x4000000000010200(slab|head|zone=1) [ 199.483905][ T3448] raw: 4000000000010200 ffffea0004973400 0000000200000002 ffff888100043200 [ 199.492499][ T3448] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 199.501088][ T3448] page dumped because: kasan: bad access detected [ 199.507506][ T3448] page_owner tracks the page as allocated [ 199.513221][ T3448] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2425, ts 160279149787, free_ts 145380544429 [ 199.534868][ T3448] post_alloc_hook+0x192/0x1b0 [ 199.539648][ T3448] prep_new_page+0x1c/0x110 [ 199.544155][ T3448] get_page_from_freelist+0x2c3a/0x2cd0 [ 199.549714][ T3448] __alloc_pages+0x1a2/0x460 [ 199.554334][ T3448] new_slab+0xa0/0x4d0 [ 199.558420][ T3448] ___slab_alloc+0x3ac/0x840 [ 199.563017][ T3448] __slab_alloc+0x49/0x90 [ 199.567355][ T3448] __kmalloc_track_caller+0x169/0x2c0 [ 199.572740][ T3448] pskb_expand_head+0x123/0x1280 [ 199.577690][ T3448] netlink_trim+0x193/0x230 [ 199.582563][ T3448] netlink_broadcast_filtered+0x75/0x1280 [ 199.588296][ T3448] nlmsg_notify+0xe9/0x1a0 [ 199.592728][ T3448] rtnetlink_event+0x13a/0x1a0 [ 199.597506][ T3448] raw_notifier_call_chain+0x90/0x100 [ 199.602900][ T3448] dev_set_mac_address+0x317/0x420 [ 199.608028][ T3448] dev_set_mac_address_user+0x31/0x50 [ 199.613410][ T3448] page last free stack trace: [ 199.618088][ T3448] free_unref_page_prepare+0x5fa/0x600 [ 199.623559][ T3448] free_unref_page+0xae/0x540 [ 199.628251][ T3448] __free_pages+0x6c/0x100 [ 199.632673][ T3448] free_pages+0x82/0x90 [ 199.636835][ T3448] packet_set_ring+0x18ef/0x2480 [ 199.641780][ T3448] packet_release+0x7c2/0xd00 [ 199.646481][ T3448] sock_close+0xb8/0x200 [ 199.650736][ T3448] __fput+0x22b/0x900 [ 199.654725][ T3448] ____fput+0x15/0x20 [ 199.658715][ T3448] task_work_run+0x127/0x190 [ 199.663316][ T3448] exit_to_user_mode_loop+0xd0/0xe0 [ 199.668523][ T3448] exit_to_user_mode_prepare+0x87/0xd0 [ 199.673987][ T3448] syscall_exit_to_user_mode+0x1a/0x30 [ 199.679461][ T3448] do_syscall_64+0x58/0xa0 [ 199.683889][ T3448] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.689796][ T3448] [ 199.692128][ T3448] Memory state around the buggy address: [ 199.697785][ T3448] ffff888125cef300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.705852][ T3448] ffff888125cef380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.713919][ T3448] >ffff888125cef400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.722073][ T3448] ^ [ 199.729886][ T3448] ffff888125cef480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.737958][ T3448] ffff888125cef500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.746027][ T3448] ================================================================== [ 199.754088][ T3448] Disabling lock debugging due to kernel taint [ 199.777374][ T30] audit: type=1400 audit(1786030260.346:511): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 199.804623][ T30] audit: type=1400 audit(1786030260.346:512): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.826623][ T30] audit: type=1400 audit(1786030260.346:513): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.848600][ T30] audit: type=1400 audit(1786030260.346:514): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.869906][ T30] audit: type=1400 audit(1786030260.346:515): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 199.900050][ T30] audit: type=1400 audit(1786030260.346:516): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 199.925680][ T30] audit: type=1400 audit(1786030260.346:517): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 199.951867][ T30] audit: type=1326 audit(1786030260.456:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3453 comm="syz.2.1038" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f8d58db8e57 code=0x0