last executing test programs: 25m41.147826931s ago: executing program 32 (id=45): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x17, r2, 0x1, 0x7, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001050000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) 25m28.090868376s ago: executing program 33 (id=202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x9, r0, 0x80000005, 0x9) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000440)={0x0, 0xffffffc1, 0x2, 0x83, 0x3af}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x1000) io_uring_enter(r1, 0x8a1, 0xb08a, 0x6, 0x0, 0x0) 25m14.286477988s ago: executing program 34 (id=337): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) unshare(0x24020400) syz_create_resource$futex(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xa20, 0x8000c65) 25m4.266273871s ago: executing program 35 (id=408): setreuid(0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xb7, 0x2, 0xffff}]}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0x10, 0x803, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010003904000000100000000000000000", @ANYRES32=r4, @ANYBLOB="01980600000000001800128008000100677265000c00028008000700ac"], 0x38}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) sendto$packet(r1, &(0x7f00000001c0)="11", 0x1, 0x2404c081, &(0x7f0000000200)={0x11, 0x6558, r4, 0x1, 0x4, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xfc2, &(0x7f00000022c0)=ANY=[], 0x0) 24m25.072959449s ago: executing program 36 (id=675): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x50, r1, 0x1, 0x4000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) gettimeofday(0x0, 0xfffffffffffffffd) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000007d00), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000007d40)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000007e00)={&(0x7f00000002c0)={0x38, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x10008000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x6c, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20044091}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) 24m16.066639517s ago: executing program 37 (id=773): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20080, 0x0) preadv(r0, 0x0, 0x0, 0x7, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140), 0x10) listen(r2, 0xfffffffe) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000240)={0x28, 0x0, 0x0, @local}, 0x10) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000480)=""/124, 0x7c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 6m11.879400596s ago: executing program 38 (id=5341): r0 = socket$netlink(0x10, 0x3, 0xa) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x800}, 0xe) ioctl$sock_SIOCINQ(r4, 0x541b, 0x0) sendmmsg$unix(r3, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80801) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x14) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000340)={&(0x7f0000800000/0x800000)=nil, &(0x7f00001eb000/0x2000)=nil, 0x800000, 0x0, 0xf4ffffff}) r7 = dup(r0) r8 = open(&(0x7f0000000000)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r8, 0x200004) sendfile(r7, r8, 0x0, 0x80001d00c0d1) 2m28.390671796s ago: executing program 39 (id=5342): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000f80)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000fc0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001000)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001040)=0x5) fsopen(&(0x7f0000000000)='hfsplus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000240)="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", 0x559, 0xfffffffffffffffb) connect$unix(r1, &(0x7f00000010c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001140), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001180), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x2, 0x1}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r5, 0x111, 0x3, 0x1, 0x4) 2m28.366878379s ago: executing program 40 (id=5340): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x3a, 0x1, 0x0, 0x2000) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x8900, 0x4) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gre0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x8802, 0x0, 0x1, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) io_setup(0x15b, &(0x7f0000000480)=0x0) r7 = eventfd2(0x0, 0x0) read$eventfd(r7, &(0x7f00000004c0), 0x8) io_submit(r6, 0x0, 0x0) shutdown(r5, 0x0) sendmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f0000000200)=@xdp={0x2c, 0xa888, r3, 0x7}, 0x14, 0x0}}], 0x1, 0x80) 2m28.339293641s ago: executing program 41 (id=5344): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x3a, 0x1, 0x0, 0x2000) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x8900, 0x4) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gre0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, 0x50561}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x8802, 0x0, 0x1, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) io_setup(0x15b, &(0x7f0000000480)=0x0) r7 = eventfd2(0x0, 0x0) read$eventfd(r7, &(0x7f00000004c0), 0x8) io_submit(r6, 0x0, 0x0) shutdown(r5, 0x0) sendmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f0000000200)=@xdp={0x2c, 0xa888, r3, 0x7}, 0x14, 0x0}}], 0x1, 0x80) 2m28.308915245s ago: executing program 42 (id=5343): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x8, 0x2, 0x9, 0xb, 0xfffbffff, 0xc}) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000380)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x651, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x0, 0x400) recvmmsg(r3, &(0x7f0000000500), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r6 = socket$pppl2tp(0x18, 0x1, 0x1) accept4(r6, 0x0, 0x0, 0x80800) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x18, r5, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c811}, 0x20040884) r8 = pidfd_getfd(r1, r1, 0x0) setns(r8, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000080)='.\x00', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xffffff7d, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) 1m39.809735606s ago: executing program 43 (id=5635): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/tty/ttyS0/console\x00', 0x20002, 0x0) write(r0, &(0x7f0000000440)="74106a02ff3a10a4", 0x8) 51.906526566s ago: executing program 9 (id=6357): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='+cp'], 0xb) 51.8741542s ago: executing program 44 (id=6359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0x2, 0xe}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x5}, {0x9, 0xfffffff9, 0xfffffffe, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7, 0x0, 0x2}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880) 51.87164373s ago: executing program 9 (id=6373): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x200000, &(0x7f00000006c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@mblk_io_submit}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000780)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000d00)='./file0/file0\x00', &(0x7f0000000d40), &(0x7f0000000d80)=ANY=[], 0x835, 0x0) sync() setxattr$trusted_overlay_upper(&(0x7f0000000dc0)='./file1\x00', &(0x7f0000000e00), &(0x7f0000000e40)=ANY=[], 0x835, 0x0) creat(&(0x7f0000000e80)='./file0/file0\x00', 0x20) setxattr$trusted_overlay_upper(&(0x7f0000000ec0)='./file0/file0\x00', &(0x7f0000000f00), &(0x7f0000000f40)=ANY=[], 0x835, 0x2) 51.497910819s ago: executing program 9 (id=6380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000001c0)={@val={0xa, 0x10}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, '\x00', 0x0, 0x3c, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}}}}, 0x3a) 51.063636184s ago: executing program 9 (id=6395): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x80, &(0x7f0000000080)=ANY=[], 0x7d, 0x1508, &(0x7f0000001900)="$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") mkdir(&(0x7f0000002e80)='./bus\x00', 0x0) mount$incfs(&(0x7f0000002ec0)='.\x00', &(0x7f0000002f00)='./bus\x00', &(0x7f0000002f40), 0xc002, 0x0) chdir(&(0x7f0000002f80)='./bus\x00') r0 = open(&(0x7f0000000380)='.\x00', 0x80000, 0x103) getdents(r0, &(0x7f00000003c0)=""/184, 0xb8) 51.032232967s ago: executing program 0 (id=6387): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 50.983014932s ago: executing program 0 (id=6390): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents(r1, &(0x7f0000020380)=""/184, 0xb8) 50.979206802s ago: executing program 9 (id=6392): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000d80)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000dc0)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000e00)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000e80)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000ec0), 0x62, 0x12141, 0x0) 50.950973715s ago: executing program 0 (id=6393): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000540)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000004c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000700), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x0, 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x3, 0x1, 0x1, 0x0, 0x6, @random="ee52e7e07522"}, 0x14) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000000c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda5) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 50.692156992s ago: executing program 9 (id=6399): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x4f4c82, 0x74, 0x8}, 0x18) 50.547026117s ago: executing program 45 (id=6399): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x4f4c82, 0x74, 0x8}, 0x18) 49.980107836s ago: executing program 0 (id=6405): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x80, &(0x7f0000000080)=ANY=[], 0x7d, 0x1508, &(0x7f0000001900)="$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") mkdir(&(0x7f0000002e80)='./bus\x00', 0x0) mount$incfs(&(0x7f0000002ec0)='.\x00', &(0x7f0000002f00)='./bus\x00', &(0x7f0000002f40), 0xc002, 0x0) chdir(&(0x7f0000002f80)='./bus\x00') r0 = open(&(0x7f0000000380)='.\x00', 0x80000, 0x103) getdents(r0, &(0x7f00000003c0)=""/184, 0xb8) 49.769917047s ago: executing program 0 (id=6409): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000097, 0x1}}], 0x20}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 49.579184367s ago: executing program 0 (id=6416): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000540)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000004c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000700), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x0, 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x3, 0x1, 0x1, 0x0, 0x6, @random="ee52e7e07522"}, 0x14) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000000c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda5) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 49.532806142s ago: executing program 46 (id=6416): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000540)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000004c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000700), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x0, 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x3, 0x1, 0x1, 0x0, 0x6, @random="ee52e7e07522"}, 0x14) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000000c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda5) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 45.202690309s ago: executing program 2 (id=6458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000080)="0f781066b86f008ee00f01cbc4c1ee1110f3a766ba4000b807000000efc4e18e10cf643e660f38801d0f0000000f3266b814010f00d8", 0x36}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0xe000, 0x0, {}, 0x1, 0xffffffffffffffff}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 45.073265153s ago: executing program 2 (id=6464): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000600)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) 45.042698666s ago: executing program 2 (id=6465): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$key(0xf, 0x3, 0x2) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[], 0x48) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) 45.017189808s ago: executing program 2 (id=6469): getdents(0xffffffffffffffff, 0x0, 0x30) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f00000001c0)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@nombcache}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000000280)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f0000000840)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x0, &(0x7f0000000900)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file1\x00', 0x0) truncate(&(0x7f0000000940)='./file0/file1\x00', 0xe2) 44.824107548s ago: executing program 2 (id=6474): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wr_drn={0x68, 0x20, {0x0, 0x1}}], 0x20}) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000140)={0xf0001, 0x0, {[0x0, 0x0, 0x200000]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 44.027912671s ago: executing program 2 (id=6493): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setuid(0xee00) setrlimit(0x40000000000008, &(0x7f0000001800)={0x0, 0x5}) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f00000003c0)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="f6", 0x1}], 0x1}}], 0x1, 0x400c405) 43.973510846s ago: executing program 47 (id=6493): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setuid(0xee00) setrlimit(0x40000000000008, &(0x7f0000001800)={0x0, 0x5}) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000380)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f00000003c0)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="f6", 0x1}], 0x1}}], 0x1, 0x400c405) 43.64976999s ago: executing program 6 (id=6498): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000d00)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000d40)=[{{&(0x7f0000000d80)={0x2, 0x4e28, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) writev(r1, &(0x7f0000000e00)=[{&(0x7f0000000e40)=',', 0xfdef}], 0x1) 43.495920096s ago: executing program 6 (id=6501): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 43.414349044s ago: executing program 6 (id=6504): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=") r2 = openat(r1, &(0x7f00000006c0)='./file2\x00', 0x80000, 0x40) mmap(&(0x7f0000521000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x1000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 42.929063734s ago: executing program 6 (id=6509): getdents(0xffffffffffffffff, 0x0, 0x30) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f00000001c0)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@nombcache}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000000280)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000840)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x0, &(0x7f0000000900)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file1\x00', 0x0) truncate(&(0x7f0000000940)='./file0/file1\x00', 0xe2) 42.668999351s ago: executing program 6 (id=6512): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f00000003c0)=[@rdmsr={0x66, 0x18, {0x4b564d03}}], 0x18}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 41.51464084s ago: executing program 6 (id=6528): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x2, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000400)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 41.480621994s ago: executing program 48 (id=6528): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x2, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000400)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 30.042241526s ago: executing program 8 (id=6695): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000001000000040000000800000000"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002280)={0x1, 0xd, &(0x7f0000002340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000023c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002400)={r1, 0x0, 0xe, 0x0, &(0x7f0000002480)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 29.988147191s ago: executing program 8 (id=6696): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000880)='27', 0x2) write$binfmt_misc(r0, &(0x7f0000000180), 0xfffffecc) 29.71359694s ago: executing program 8 (id=6697): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 29.61421086s ago: executing program 8 (id=6699): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x80c000, &(0x7f0000000280)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b573262ed88dfec7618c03371693a5173bd0bf12d29c0180500a87e3789adea802a90933b243ca225dacfc27597d6e1ce3d9fdc12409748ba4fbde6f1d76e116fd437b79bbcea7fdc682fd0b90334eed137d03ce386950f5e50ff2516eb2b500a9b99e04f2a41864e44cb46101a23835877342485260d4510fa3240a2c9756d388e5861cdeaf4c88bca74fe3ce71eef72c"], 0xfd, 0x2b6, &(0x7f0000000c40)="$eJzs3E9rE08YwPGnaZOmKW1y+PEDBfFBL3pZ2vgKgrQgBpTaiHoQpnajIWtSsjESEdubV19H8ehNsL6BXrx5Fy9FELz0IF3pbtYkZaV/NN22+X6g7HRnnszM7iY8u7Czde/N02rZtcqmKYm0SkJkTbZFcruljpHONuGXU9JrTa5O/vh84c79BzcLxeLcgup8YfFaXlWnL354/vLtpY/Nybvvpt+Py2bu4db3/JfN/zfPbe0shp9eb6rRpXq9aZYcW5crbtVSve3YxrW1UnPtRl992amvrLTV1JanMisN23XV1NpatdvarGuz0Vbz2FRqalmWTmVk2IweOqK0vrBgCgMZDOIwEbWz0SiY0cjK0vpxDAoAAJwsg8j/Rw6Q/z+puFpxtbZf/p8Q8v/B8fP/ncikEWdDcvcGoGAyne9vP/J/AAAAAAAAAAAAAAAAAAAAAABOg23Py3qelw234d+4iKRFJPw/7nFiMI5w/kdiHC7+sZ4X99IizutWqVUKtkF9oSwVccSWmaTIT/966AjK8zeKczPqy8mGs9qJ918SHA/jQ7no+NkgXnviV1ulpGR6+89LVv6Ljs/viU+KSKuUkiuXe+ItycqnR1IXR5b967ob/2pW9fqt4p7+J/x2AAAAAACcBZb+luu//w1Wk7QsDZcN2VMf7Ow+H5DsPs8HVDZS0o0fk/Nj8c0bAAAAAIBh4rZfVI3j2I3TWkh2JnLcvR/10KVE5IQcukMXrHRwrCOq0hLu8TxvdbfR33eaEJGYZvrtz1dU+NDqpJyUwxS+PgvGfpDGcfwaAQAAABikbtIf90gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABheB108LGx/lLXHerob7e998hhnCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMTvVwAAAP//G5URgQ==") mkdir(&(0x7f0000000f00)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000f40)='.\x00', &(0x7f0000000f80)='./bus\x00', &(0x7f0000000fc0), 0xc002, 0x0) chdir(&(0x7f0000001000)='./bus\x00') mount(0x0, &(0x7f00000000c0)='./tracefs\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/trace_options\x00', 0x2, 0x0) 29.592955972s ago: executing program 8 (id=6700): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000280)={0x0, 0x0}) statfs(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0d0000000a00000004"], 0x50) close(r3) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={r4, &(0x7f00000008c0)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x284182, 0x0) sendmmsg$unix(r5, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x18, 0x1, 0x1, [r6, r5]}}], 0x18, 0x48000}}], 0x1, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x13, 0x13, &(0x7f0000000bc0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000c80)='GPL\x00', 0x2, 0xff5c, &(0x7f0000001400)=""/222, 0x0, 0x8}, 0x78) 29.411883671s ago: executing program 8 (id=6703): r0 = timerfd_create(0x9, 0x0) r1 = timerfd_create(0x9, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000fc0)={{0x77359400}, {0x77359400}}, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000001000)={{0x77359400}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000001040)=[{&(0x7f0000001080)=""/183, 0xb7}], 0x1) close(0x3) 29.411735541s ago: executing program 49 (id=6703): r0 = timerfd_create(0x9, 0x0) r1 = timerfd_create(0x9, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000fc0)={{0x77359400}, {0x77359400}}, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000001000)={{0x77359400}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000001040)=[{&(0x7f0000001080)=""/183, 0xb7}], 0x1) close(0x3) 11.185723024s ago: executing program 4 (id=6705): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) prlimit64(0x0, 0xe, &(0x7f0000001000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000010c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000011c0), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001240)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./trace\x00', 0x1ff) mount(&(0x7f00000012c0)=@filename='tracefs\x00', &(0x7f0000001300)='./trace\x00', &(0x7f0000001340)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./trace/trace\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x20000010) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000001500)=@req3={0x1, 0x3a, 0x1000, 0x3a, 0x802, 0xf83, 0x3}, 0x3b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtaction={0x488, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x3, 0x4, 0x6, 0x0, 0x20, 0xb, 0x5, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0x9, 0x8, 0x9, 0x7, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffffff9, 0x6, 0xfffffffe, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x5, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x6, 0x5, 0x1, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0x9, 0x401, 0x2, 0x1000, 0x101, 0x50, 0x4, 0x2, 0x1, 0x5, 0x5, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x10000008, 0x0, 0x8, 0xfffffff4, 0x3b96, 0xfffff800, 0x8, 0x3, 0x2000f, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x80000001, 0x7, 0x9, 0x0, 0x40, 0x8, 0xb, 0x5, 0x8c, 0xaa93, 0x800, 0x3, 0x9, 0x10001, 0x9, 0x1, 0xd12, 0x0, 0x23487474, 0x3cd2, 0x0, 0x7, 0x6, 0x5, 0xb1, 0x2, 0x6, 0x9, 0x2, 0xaa83, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x4, 0x1, 0x0, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0x0, 0x7, 0x8, 0xffff, 0x3, 0x4, 0xa, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x1, 0x3c34, 0x6, 0x10000, 0x5, 0x8100, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x3, 0x2, 0xb, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0x9, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x5, 0xfff, 0x9, 0x5, 0x279, 0x8000, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x9, 0x1ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x8000}, 0x4) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x74, 0x29, 0x1, {0x8000, [{{0x8, 0x0, 0x2}, 0x100000000000004, 0x0, 0x6, './proc'}, {{0x0, 0x3, 0x4}, 0x81d1, 0x0, 0x5, './sys'}]}}, 0x46) 9.246281265s ago: executing program 4 (id=6705): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) prlimit64(0x0, 0xe, &(0x7f0000001000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000010c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000011c0), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001240)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./trace\x00', 0x1ff) mount(&(0x7f00000012c0)=@filename='tracefs\x00', &(0x7f0000001300)='./trace\x00', &(0x7f0000001340)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./trace/trace\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x20000010) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000001500)=@req3={0x1, 0x3a, 0x1000, 0x3a, 0x802, 0xf83, 0x3}, 0x3b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtaction={0x488, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x3, 0x4, 0x6, 0x0, 0x20, 0xb, 0x5, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0x9, 0x8, 0x9, 0x7, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffffff9, 0x6, 0xfffffffe, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x5, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x6, 0x5, 0x1, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0x9, 0x401, 0x2, 0x1000, 0x101, 0x50, 0x4, 0x2, 0x1, 0x5, 0x5, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x10000008, 0x0, 0x8, 0xfffffff4, 0x3b96, 0xfffff800, 0x8, 0x3, 0x2000f, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x80000001, 0x7, 0x9, 0x0, 0x40, 0x8, 0xb, 0x5, 0x8c, 0xaa93, 0x800, 0x3, 0x9, 0x10001, 0x9, 0x1, 0xd12, 0x0, 0x23487474, 0x3cd2, 0x0, 0x7, 0x6, 0x5, 0xb1, 0x2, 0x6, 0x9, 0x2, 0xaa83, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x4, 0x1, 0x0, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0x0, 0x7, 0x8, 0xffff, 0x3, 0x4, 0xa, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x1, 0x3c34, 0x6, 0x10000, 0x5, 0x8100, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x3, 0x2, 0xb, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0x9, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x5, 0xfff, 0x9, 0x5, 0x279, 0x8000, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x9, 0x1ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x8000}, 0x4) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x74, 0x29, 0x1, {0x8000, [{{0x8, 0x0, 0x2}, 0x100000000000004, 0x0, 0x6, './proc'}, {{0x0, 0x3, 0x4}, 0x81d1, 0x0, 0x5, './sys'}]}}, 0x46) 7.353514481s ago: executing program 5 (id=6803): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001840)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.318987544s ago: executing program 1 (id=6796): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='27', 0x2) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000300)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1}, 0x50) 7.26609631s ago: executing program 5 (id=6798): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@newsa={0x194, 0x10, 0x1, 0x70bd2d, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@private=0xa010101, 0xffffffff, 0x32}, @in=@broadcast, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x9}, {0x5, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(twofish)\x00'}, 0x80, "3ae0bd000b000000366a6a849a739045"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x194}}, 0x44050) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000001900)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001940)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f00000019c0)="b9ff0300600d698cff9e13f008004de7f9c764360000ff3a00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.978318629s ago: executing program 1 (id=6799): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000280)={0x0, 0x0}) statfs(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) close(r4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={r5, &(0x7f00000008c0)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x284182, 0x0) sendmmsg$unix(r6, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x18, 0x1, 0x1, [r7, r6]}}], 0x18, 0x48000}}], 0x1, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x13, 0x13, &(0x7f0000000bc0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000c80)='GPL\x00', 0x2, 0xff5c, &(0x7f0000001400)=""/222, 0x0, 0x8}, 0x78) 6.97601067s ago: executing program 4 (id=6705): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) prlimit64(0x0, 0xe, &(0x7f0000001000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000010c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000011c0), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001240)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./trace\x00', 0x1ff) mount(&(0x7f00000012c0)=@filename='tracefs\x00', &(0x7f0000001300)='./trace\x00', &(0x7f0000001340)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./trace/trace\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x20000010) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000001500)=@req3={0x1, 0x3a, 0x1000, 0x3a, 0x802, 0xf83, 0x3}, 0x3b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtaction={0x488, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x3, 0x4, 0x6, 0x0, 0x20, 0xb, 0x5, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0x9, 0x8, 0x9, 0x7, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffffff9, 0x6, 0xfffffffe, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x5, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x6, 0x5, 0x1, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0x9, 0x401, 0x2, 0x1000, 0x101, 0x50, 0x4, 0x2, 0x1, 0x5, 0x5, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x10000008, 0x0, 0x8, 0xfffffff4, 0x3b96, 0xfffff800, 0x8, 0x3, 0x2000f, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x80000001, 0x7, 0x9, 0x0, 0x40, 0x8, 0xb, 0x5, 0x8c, 0xaa93, 0x800, 0x3, 0x9, 0x10001, 0x9, 0x1, 0xd12, 0x0, 0x23487474, 0x3cd2, 0x0, 0x7, 0x6, 0x5, 0xb1, 0x2, 0x6, 0x9, 0x2, 0xaa83, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x4, 0x1, 0x0, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0x0, 0x7, 0x8, 0xffff, 0x3, 0x4, 0xa, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x1, 0x3c34, 0x6, 0x10000, 0x5, 0x8100, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x3, 0x2, 0xb, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0x9, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x5, 0xfff, 0x9, 0x5, 0x279, 0x8000, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x9, 0x1ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x8000}, 0x4) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x74, 0x29, 0x1, {0x8000, [{{0x8, 0x0, 0x2}, 0x100000000000004, 0x0, 0x6, './proc'}, {{0x0, 0x3, 0x4}, 0x81d1, 0x0, 0x5, './sys'}]}}, 0x46) 4.995642904s ago: executing program 5 (id=6802): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000280)={0x0, 0x0}) statfs(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='\r\x00\x00\x00\n\x00\x00\x00'], 0x50) close(r4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={r5, &(0x7f00000008c0)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x284182, 0x0) sendmmsg$unix(r6, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x18, 0x1, 0x1, [r7, r6]}}], 0x18, 0x48000}}], 0x1, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x13, 0x13, &(0x7f0000000bc0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000c80)='GPL\x00', 0x2, 0xff5c, &(0x7f0000001400)=""/222, 0x0, 0x8}, 0x78) 4.993798484s ago: executing program 1 (id=6804): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 4.993681374s ago: executing program 7 (id=6805): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_mount_image$exfat(&(0x7f0000000680), &(0x7f00000006c0)='./file2\x00', 0x0, &(0x7f0000000700)=ANY=[], 0xfd, 0x1501, &(0x7f0000000740)="$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") openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file2\x00', 0x145042, 0x194) write$binfmt_format(r0, &(0x7f0000001e00)='1\x00', 0x2400) 4.962469907s ago: executing program 1 (id=6806): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000740), 0xf00) bind$can_raw(r1, &(0x7f0000000780), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000740)=0xfffffffe, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 4.954345908s ago: executing program 3 (id=6807): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x8, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.902391704s ago: executing program 4 (id=6705): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) prlimit64(0x0, 0xe, &(0x7f0000001000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000010c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000011c0), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001240)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./trace\x00', 0x1ff) mount(&(0x7f00000012c0)=@filename='tracefs\x00', &(0x7f0000001300)='./trace\x00', &(0x7f0000001340)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./trace/trace\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x20000010) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000001500)=@req3={0x1, 0x3a, 0x1000, 0x3a, 0x802, 0xf83, 0x3}, 0x3b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtaction={0x488, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x3, 0x4, 0x6, 0x0, 0x20, 0xb, 0x5, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0x9, 0x8, 0x9, 0x7, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffffff9, 0x6, 0xfffffffe, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x5, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x6, 0x5, 0x1, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0x9, 0x401, 0x2, 0x1000, 0x101, 0x50, 0x4, 0x2, 0x1, 0x5, 0x5, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x10000008, 0x0, 0x8, 0xfffffff4, 0x3b96, 0xfffff800, 0x8, 0x3, 0x2000f, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x80000001, 0x7, 0x9, 0x0, 0x40, 0x8, 0xb, 0x5, 0x8c, 0xaa93, 0x800, 0x3, 0x9, 0x10001, 0x9, 0x1, 0xd12, 0x0, 0x23487474, 0x3cd2, 0x0, 0x7, 0x6, 0x5, 0xb1, 0x2, 0x6, 0x9, 0x2, 0xaa83, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x4, 0x1, 0x0, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0x0, 0x7, 0x8, 0xffff, 0x3, 0x4, 0xa, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x1, 0x3c34, 0x6, 0x10000, 0x5, 0x8100, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x3, 0x2, 0xb, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0x9, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x5, 0xfff, 0x9, 0x5, 0x279, 0x8000, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x9, 0x1ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x8000}, 0x4) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x74, 0x29, 0x1, {0x8000, [{{0x8, 0x0, 0x2}, 0x100000000000004, 0x0, 0x6, './proc'}, {{0x0, 0x3, 0x4}, 0x81d1, 0x0, 0x5, './sys'}]}}, 0x46) 2.819590599s ago: executing program 5 (id=6808): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfe99) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000c80)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r1, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="06c37127bd146834e177aae5c34b20e023a9eac0a37d847a4dd32cf3778fc0031d746b106dbb10d7644d50f8c4c96806dcb3ba4fa4181b7fa29e1ad2ff35dfa9e76b899322d13b773aff9f6ab00b14037f544cd126afce859a70d1db4d2ae358bd87243d44f3217d7e", 0x69}, {&(0x7f00000013c0)="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", 0x5df}], 0x2) 2.819378239s ago: executing program 1 (id=6809): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x28) r1 = syz_clone(0x400a000, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) r2 = syz_pidfd_open(r1, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x25, 0x55ad, &(0x7f0000008400)="$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") mount$9p_fd(0x0, &(0x7f0000006240)='./file0\x00', &(0x7f0000006280), 0x0, &(0x7f00000062c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 2.819163919s ago: executing program 7 (id=6810): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000780)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000007c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'vlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000840)='\x00', 0x1, 0x240250d4, &(0x7f0000000880)={0x11, 0x8100, r2, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) 2.81487669s ago: executing program 3 (id=6818): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x80000009, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x80042, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f00000001c0)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42, 0x6}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) 2.749495806s ago: executing program 3 (id=6811): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, r2, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0xe, &(0x7f0000000400)={@remote, @remote, @void, {@generic={0x10}}}, 0x0) 2.749343396s ago: executing program 7 (id=6812): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='27', 0x2) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000300)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1}, 0x50) 2.748622376s ago: executing program 5 (id=6813): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) read(r0, &(0x7f0000000680)=""/4096, 0x1000) syz_io_uring_setup(0x131, &(0x7f0000001680)={0x0, 0xb2f3, 0x2}, &(0x7f0000ffe000), 0x0, &(0x7f0000000000)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) 2.41847648s ago: executing program 3 (id=6814): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x1000, @loopback, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x800ffff, @mcast2}}}, 0x32) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000380)=ANY=[], 0x8) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)='T', 0x1}], 0x1) 2.41817906s ago: executing program 3 (id=6815): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000280)={0x0, 0x0}) statfs(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) close(r4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={r5, &(0x7f00000008c0)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x284182, 0x0) sendmmsg$unix(r6, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x18, 0x1, 0x1, [r7, r6]}}], 0x18, 0x48000}}], 0x1, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x13, 0x13, &(0x7f0000000bc0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000c80)='GPL\x00', 0x2, 0xff5c, &(0x7f0000001400)=""/222, 0x0, 0x8}, 0x78) 2.416464811s ago: executing program 7 (id=6825): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file1/file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}, {@index_on}]}) 2.348973218s ago: executing program 4 (id=6705): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) prlimit64(0x0, 0xe, &(0x7f0000001000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000010c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000011c0), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001240)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./trace\x00', 0x1ff) mount(&(0x7f00000012c0)=@filename='tracefs\x00', &(0x7f0000001300)='./trace\x00', &(0x7f0000001340)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./trace/trace\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x20000010) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000001500)=@req3={0x1, 0x3a, 0x1000, 0x3a, 0x802, 0xf83, 0x3}, 0x3b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtaction={0x488, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x3, 0x4, 0x6, 0x0, 0x20, 0xb, 0x5, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0x9, 0x8, 0x9, 0x7, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffffff9, 0x6, 0xfffffffe, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x5, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x6, 0x5, 0x1, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0x9, 0x401, 0x2, 0x1000, 0x101, 0x50, 0x4, 0x2, 0x1, 0x5, 0x5, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x10000008, 0x0, 0x8, 0xfffffff4, 0x3b96, 0xfffff800, 0x8, 0x3, 0x2000f, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x80000001, 0x7, 0x9, 0x0, 0x40, 0x8, 0xb, 0x5, 0x8c, 0xaa93, 0x800, 0x3, 0x9, 0x10001, 0x9, 0x1, 0xd12, 0x0, 0x23487474, 0x3cd2, 0x0, 0x7, 0x6, 0x5, 0xb1, 0x2, 0x6, 0x9, 0x2, 0xaa83, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x4, 0x1, 0x0, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0x0, 0x7, 0x8, 0xffff, 0x3, 0x4, 0xa, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x1, 0x3c34, 0x6, 0x10000, 0x5, 0x8100, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x3, 0x2, 0xb, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0x9, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x5, 0xfff, 0x9, 0x5, 0x279, 0x8000, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x9, 0x1ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x8000}, 0x4) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x74, 0x29, 0x1, {0x8000, [{{0x8, 0x0, 0x2}, 0x100000000000004, 0x0, 0x6, './proc'}, {{0x0, 0x3, 0x4}, 0x81d1, 0x0, 0x5, './sys'}]}}, 0x46) 175.309002ms ago: executing program 5 (id=6816): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x101}, {0x6, 0x24, 0x1a, 0x0, 0xa}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x36}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x8}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000800)={0x20, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000840)={0x14, 0x0, &(0x7f0000000880)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 175.014982ms ago: executing program 1 (id=6817): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="b805000000090200e1660f3a1429af320f01d9660ff7e31bf7c4c1672aaf65cd000066b81d018ec805000000b90000c0fe0f41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x63}], 0x1, 0x57, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x4, 0x3, 0x559, 0x2, 0x8, 0x3}, {0x7, 0xa, 0x2, 0x3, 0x6ed, 0x0, 0x9}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 174.868562ms ago: executing program 7 (id=6819): unshare(0x2040400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x9, 0x0, 0x0, r2, 0x5}) 172.672723ms ago: executing program 3 (id=6828): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000280)={0x0, 0x0}) statfs(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) close(r4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={r5, &(0x7f00000008c0)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x284182, 0x0) sendmmsg$unix(r6, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x18, 0x1, 0x1, [r7, r6]}}], 0x18, 0x48000}}], 0x1, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x13, 0x13, &(0x7f0000000bc0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000c80)='GPL\x00', 0x2, 0xff5c, &(0x7f0000001400)=""/222, 0x0, 0x8}, 0x78) 67.022683ms ago: executing program 7 (id=6820): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000280)={0x0, 0x0}) statfs(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='\r\x00\x00\x00\n\x00\x00\x00'], 0x50) close(r4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={r5, &(0x7f00000008c0)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x284182, 0x0) sendmmsg$unix(r6, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x18, 0x1, 0x1, [r7, r6]}}], 0x18, 0x48000}}], 0x1, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x13, 0x13, &(0x7f0000000bc0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000c80)='GPL\x00', 0x2, 0xff5c, &(0x7f0000001400)=""/222, 0x0, 0x8}, 0x78) 0s ago: executing program 4 (id=6705): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) prlimit64(0x0, 0xe, &(0x7f0000001000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000010c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000011c0), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001240)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./trace\x00', 0x1ff) mount(&(0x7f00000012c0)=@filename='tracefs\x00', &(0x7f0000001300)='./trace\x00', &(0x7f0000001340)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./trace/trace\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x20000010) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000001500)=@req3={0x1, 0x3a, 0x1000, 0x3a, 0x802, 0xf83, 0x3}, 0x3b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtaction={0x488, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x3, 0x4, 0x6, 0x0, 0x20, 0xb, 0x5, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0x9, 0x8, 0x9, 0x7, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffffff9, 0x6, 0xfffffffe, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x5, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x6, 0x5, 0x1, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0x9, 0x401, 0x2, 0x1000, 0x101, 0x50, 0x4, 0x2, 0x1, 0x5, 0x5, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x10000008, 0x0, 0x8, 0xfffffff4, 0x3b96, 0xfffff800, 0x8, 0x3, 0x2000f, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x80000001, 0x7, 0x9, 0x0, 0x40, 0x8, 0xb, 0x5, 0x8c, 0xaa93, 0x800, 0x3, 0x9, 0x10001, 0x9, 0x1, 0xd12, 0x0, 0x23487474, 0x3cd2, 0x0, 0x7, 0x6, 0x5, 0xb1, 0x2, 0x6, 0x9, 0x2, 0xaa83, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x4, 0x1, 0x0, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0x0, 0x7, 0x8, 0xffff, 0x3, 0x4, 0xa, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x1, 0x3c34, 0x6, 0x10000, 0x5, 0x8100, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x3, 0x2, 0xb, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0x9, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x5, 0xfff, 0x9, 0x5, 0x279, 0x8000, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x9, 0x1ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x8000}, 0x4) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x74, 0x29, 0x1, {0x8000, [{{0x8, 0x0, 0x2}, 0x100000000000004, 0x0, 0x6, './proc'}, {{0x0, 0x3, 0x4}, 0x81d1, 0x0, 0x5, './sys'}]}}, 0x46) kernel console output (not intermixed with test programs): s_add_key+0xbf/0xd0 [ 1502.968047][T21089] x64_sys_call+0x713/0x9a0 [ 1502.972977][T21089] do_syscall_64+0x4c/0xa0 [ 1502.977806][T21089] ? clear_bhb_loop+0x50/0xa0 [ 1502.982926][T21089] ? clear_bhb_loop+0x50/0xa0 [ 1502.988045][T21089] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1502.994502][T21089] RIP: 0033:0x7f1076c96559 [ 1502.999335][T21089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1503.020879][T21089] RSP: 002b:00007f10756ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1503.030117][T21089] RAX: ffffffffffffffda RBX: 00007f1076f1cfa0 RCX: 00007f1076c96559 [ 1503.038871][T21089] RDX: 00002000000018c0 RSI: 0000000000000000 RDI: 0000200000000200 [ 1503.047613][T21089] RBP: 00007f1076d2db20 R08: ffffffffffffffff R09: 0000000000000000 [ 1503.056358][T21089] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 1503.065099][T21089] R13: 00007f1076f1d038 R14: 00007f1076f1cfa0 R15: 00007ffe2eb46828 [ 1503.073851][T21089] [ 1503.091570][T21084] EXT4-fs (loop7): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000006,user_xattr,,errors=continue. Quota mode: none. [ 1503.107601][T21084] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1503.127207][T21084] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.6131: bg 0: block 345: padding at end of block bitmap is not set [ 1503.145048][T21084] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1503.146974][ T30] audit: type=1400 audit(2000525239.437:3563): avc: denied { ioctl } for pid=21094 comm="syz.5.6134" path="/171/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1503.674809][T21125] loop4: detected capacity change from 0 to 512 [ 1503.689067][T21115] kvm [21114]: vcpu2, guest rIP: 0x9135 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1503.712000][T21115] kvm [21114]: vcpu2, guest rIP: 0x9135 disabled perfctr wrmsr: 0xc2 data 0x0 [ 1503.735004][T21115] kvm [21114]: vcpu2, guest rIP: 0x9135 ignored wrmsr: 0x11e data 0x0 [ 1503.820071][T21136] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6147'. [ 1503.888949][T21138] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1503.897771][T21138] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1504.057777][ T30] audit: type=1400 audit(2000525240.277:3564): avc: denied { map } for pid=21162 comm="syz.5.6161" path="/177/dev/ram0" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1504.320934][T21163] kvm [21161]: vcpu2, guest rIP: 0x9135 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1504.331400][T21163] kvm [21161]: vcpu2, guest rIP: 0x9135 disabled perfctr wrmsr: 0xc2 data 0x0 [ 1504.357149][T21163] kvm [21161]: vcpu2, guest rIP: 0x9135 ignored wrmsr: 0x11e data 0x0 [ 1504.623145][T21171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6163'. [ 1504.695929][ T30] audit: type=1400 audit(2000525240.867:3565): avc: denied { append } for pid=21175 comm="syz.7.6164" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1504.985780][T21187] loop7: detected capacity change from 0 to 512 [ 1505.163141][T21180] loop6: detected capacity change from 0 to 40427 [ 1505.181639][T21180] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 1505.189144][T21180] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1505.202356][T21180] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1505.293162][T21180] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1505.301186][T21180] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1505.615516][T21194] loop7: detected capacity change from 0 to 40427 [ 1505.637320][T18913] attempt to access beyond end of device [ 1505.637320][T18913] loop6: rw=2049, want=45104, limit=40427 [ 1505.661947][T21213] kvm [21212]: vcpu2, guest rIP: 0x9135 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1505.685540][T21213] kvm [21212]: vcpu2, guest rIP: 0x9135 disabled perfctr wrmsr: 0xc2 data 0x0 [ 1505.697383][T21213] kvm [21212]: vcpu2, guest rIP: 0x9135 ignored wrmsr: 0x11e data 0x0 [ 1505.699592][T21194] F2FS-fs (loop7): invalid crc value [ 1505.821154][T21224] FAULT_INJECTION: forcing a failure. [ 1505.821154][T21224] name failslab, interval 1, probability 0, space 0, times 0 [ 1505.825810][T21194] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1505.835182][T21224] CPU: 0 PID: 21224 Comm: syz.6.6174 Tainted: G W syzkaller #0 [ 1505.851605][T21224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1505.862667][T21224] Call Trace: [ 1505.866263][T21224] [ 1505.869482][T21224] __dump_stack+0x21/0x30 [ 1505.874244][T21224] dump_stack_lvl+0x110/0x170 [ 1505.879380][T21224] ? show_regs_print_info+0x20/0x20 [ 1505.885093][T21224] dump_stack+0x15/0x20 [ 1505.889655][T21224] should_fail+0x3ab/0x500 [ 1505.894516][T21224] __should_failslab+0xa4/0xe0 [ 1505.899753][T21224] should_failslab+0x9/0x20 [ 1505.900878][T21194] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1505.904712][T21224] slab_pre_alloc_hook+0x39/0xd0 [ 1505.904737][T21224] kmem_cache_alloc_trace+0x48/0x270 [ 1505.924078][T21224] ? selinux_key_alloc+0x56/0x190 [ 1505.929590][T21224] selinux_key_alloc+0x56/0x190 [ 1505.934906][T21224] security_key_alloc+0x74/0xa0 [ 1505.940218][T21224] key_alloc+0x72c/0xef0 [ 1505.944861][T21224] keyring_alloc+0x47/0xb0 [ 1505.949698][T21224] lookup_user_key+0x448/0x11b0 [ 1505.955011][T21224] ? lookup_user_key_possessed+0x40/0x40 [ 1505.961179][T21224] ? search_process_keyrings_rcu+0x280/0x280 [ 1505.967732][T21224] ? __kasan_check_write+0x14/0x20 [ 1505.973369][T21224] ? _copy_from_user+0x95/0xd0 [ 1505.978586][T21224] __se_sys_add_key+0x311/0x410 [ 1505.983895][T21224] ? __x64_sys_add_key+0xd0/0xd0 [ 1505.989296][T21224] ? ksys_write+0x1fa/0x260 [ 1505.994240][T21224] ? __kasan_check_write+0x14/0x20 [ 1505.999835][T21224] __x64_sys_add_key+0xbf/0xd0 [ 1506.005047][T21224] x64_sys_call+0x713/0x9a0 [ 1506.009986][T21224] do_syscall_64+0x4c/0xa0 [ 1506.014821][T21224] ? clear_bhb_loop+0x50/0xa0 [ 1506.019940][T21224] ? clear_bhb_loop+0x50/0xa0 [ 1506.025059][T21224] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1506.031515][T21224] RIP: 0033:0x7fae582c9559 [ 1506.036345][T21224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1506.057881][T21224] RSP: 002b:00007fae56d21028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1506.067116][T21224] RAX: ffffffffffffffda RBX: 00007fae5854ffa0 RCX: 00007fae582c9559 [ 1506.075860][T21224] RDX: 00002000000018c0 RSI: 0000000000000000 RDI: 0000200000000200 [ 1506.084602][T21224] RBP: 00007fae58360b20 R08: ffffffffffffffff R09: 0000000000000000 [ 1506.093343][T21224] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 1506.102082][T21224] R13: 00007fae58550038 R14: 00007fae5854ffa0 R15: 00007ffe6750ccb8 [ 1506.110828][T21224] [ 1506.277756][T21194] attempt to access beyond end of device [ 1506.277756][T21194] loop7: rw=2049, want=45104, limit=40427 [ 1506.318707][T18911] attempt to access beyond end of device [ 1506.318707][T18911] loop7: rw=2049, want=45112, limit=40427 [ 1506.884501][T21258] loop4: detected capacity change from 0 to 512 [ 1506.928539][ T30] audit: type=1400 audit(2000525242.925:3566): avc: denied { read write } for pid=21259 comm="syz.6.6193" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 1506.958784][T21260] zero sized request [ 1506.973554][T21263] loop7: detected capacity change from 0 to 256 [ 1506.995563][ T30] audit: type=1400 audit(2000525242.925:3567): avc: denied { open } for pid=21259 comm="syz.6.6193" path="/196/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 1507.082165][T21263] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1507.097520][T21272] loop4: detected capacity change from 0 to 512 [ 1507.110574][ T30] audit: type=1400 audit(2000525242.962:3568): avc: denied { ioctl } for pid=21259 comm="syz.6.6193" path="/196/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 1507.111381][T21263] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1507.138833][ T30] audit: type=1400 audit(2000525243.045:3569): avc: denied { read } for pid=21268 comm="syz.6.6198" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1507.192547][T21275] netlink: 27 bytes leftover after parsing attributes in process `syz.6.6199'. [ 1507.211238][ T30] audit: type=1400 audit(2000525243.045:3570): avc: denied { open } for pid=21268 comm="syz.6.6198" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1507.238060][T21272] EXT4-fs (loop4): #blocks per group too big: 8724480 [ 1507.243062][ T30] audit: type=1400 audit(2000525243.045:3571): avc: denied { ioctl } for pid=21268 comm="syz.6.6198" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1507.278508][T21263] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1507.325680][ T30] audit: type=1400 audit(2000525243.294:3572): avc: denied { associate } for pid=21262 comm="syz.7.6194" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1508.044323][T21291] loop7: detected capacity change from 0 to 40427 [ 1508.076433][T21291] F2FS-fs (loop7): Small segment_count (9 < 1 * 24) [ 1508.091109][T21291] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1508.135306][T21291] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1508.204179][T21291] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1508.212289][T21291] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1508.240424][T21319] loop6: detected capacity change from 0 to 16 [ 1508.294360][T18911] attempt to access beyond end of device [ 1508.294360][T18911] loop7: rw=2049, want=45104, limit=40427 [ 1508.307912][T21319] erofs: (device loop6): mounted with root inode @ nid 36. [ 1508.329302][T21319] erofs: (device loop6): z_erofs_readahead: readahead error at page 21 @ nid 89 [ 1508.347148][T21319] erofs: (device loop6): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 1508.373592][T21319] erofs: (device loop6): z_erofs_pcluster_readmore: readmore error at page 6 @ nid 89 [ 1508.385851][T21319] attempt to access beyond end of device [ 1508.385851][T21319] loop6: rw=524288, want=136, limit=16 [ 1508.399795][T21325] erofs: (device loop6): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 1508.410056][T21325] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 1508.426456][T21325] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 1508.453119][T21325] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 1508.475557][T21325] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 1508.677166][T21339] loop9: detected capacity change from 0 to 4096 [ 1508.921543][T21339] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1509.423135][T14241] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1509.444563][T21358] loop4: detected capacity change from 0 to 40427 [ 1509.516999][T21360] loop7: detected capacity change from 0 to 40427 [ 1509.527929][T21358] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 1509.535350][T21358] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1509.547296][T21358] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1509.567870][T21360] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1509.577048][T21367] loop5: detected capacity change from 0 to 16 [ 1509.596566][T21360] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1509.607934][T21358] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1509.609920][T21360] F2FS-fs (loop7): invalid crc value [ 1509.615712][T21358] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1509.623544][T21360] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1509.641755][T21367] erofs: (device loop5): mounted with root inode @ nid 36. [ 1509.657953][T21367] erofs: (device loop5): z_erofs_readahead: readahead error at page 21 @ nid 89 [ 1509.668752][T21367] erofs: (device loop5): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 1509.679133][T21360] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1509.684076][T21367] erofs: (device loop5): z_erofs_pcluster_readmore: readmore error at page 6 @ nid 89 [ 1509.687127][T21360] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1509.697754][T21367] attempt to access beyond end of device [ 1509.697754][T21367] loop5: rw=524288, want=136, limit=16 [ 1509.716584][T18908] attempt to access beyond end of device [ 1509.716584][T18908] loop4: rw=2049, want=45104, limit=40427 [ 1509.718639][T21373] erofs: (device loop5): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 1509.740657][T21373] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 1509.749881][T21373] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 1509.757378][ T306] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1509.779993][ T306] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1509.783259][T21373] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 1509.809025][T21373] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 1509.867527][T14241] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1509.910903][T14241] usb 7-1: not running at top speed; connect to a high speed hub [ 1509.946691][T21381] loop5: detected capacity change from 0 to 1024 [ 1509.950655][T21380] loop7: detected capacity change from 0 to 512 [ 1509.972772][T21381] EXT4-fs (loop5): Ignoring removed bh option [ 1509.992145][T21381] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 1510.060154][T21380] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1510.171681][T21380] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1510.238141][T21394] loop9: detected capacity change from 0 to 256 [ 1510.259488][T21394] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1510.271302][T21394] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1510.282463][T21394] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1510.323113][T21398] loop5: detected capacity change from 0 to 512 [ 1510.384305][T21400] netlink: 27 bytes leftover after parsing attributes in process `syz.9.6241'. [ 1510.394565][T14241] usb 7-1: New USB device found, idVendor=17cc, idProduct=1915, bcdDevice= 0.40 [ 1510.404577][T14241] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.419498][T14241] usb 7-1: Product: syz [ 1510.435513][T14241] usb 7-1: Manufacturer: syz [ 1510.450545][T14241] usb 7-1: SerialNumber: syz [ 1510.465688][T21408] device ip6gre1 entered promiscuous mode [ 1510.505348][T21410] loop9: detected capacity change from 0 to 16 [ 1510.583804][T21410] erofs: (device loop9): mounted with root inode @ nid 36. [ 1510.605681][T21410] erofs: (device loop9): z_erofs_readahead: readahead error at page 21 @ nid 89 [ 1510.622732][T21410] erofs: (device loop9): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 1510.650117][T21402] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 1510.659093][T21410] erofs: (device loop9): z_erofs_pcluster_readmore: readmore error at page 6 @ nid 89 [ 1510.672429][T21402] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1510.682134][T21410] attempt to access beyond end of device [ 1510.682134][T21410] loop9: rw=524288, want=136, limit=16 [ 1510.682143][T21411] erofs: (device loop9): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 1510.705765][T21411] erofs: (device loop9): z_erofs_readpage: failed to read, err [-117] [ 1510.715612][T21411] erofs: (device loop9): z_erofs_readpage: failed to read, err [-117] [ 1510.724730][T21411] erofs: (device loop9): z_erofs_readpage: failed to read, err [-117] [ 1510.734122][T21411] erofs: (device loop9): z_erofs_readpage: failed to read, err [-117] [ 1510.743544][T21402] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1510.821284][T21402] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1510.829159][T21402] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1510.854050][T14241] usb 7-1: unit 2 not found! [ 1510.873661][T14241] usb 7-1: USB disconnect, device number 2 [ 1510.885134][T18912] attempt to access beyond end of device [ 1510.885134][T18912] loop5: rw=2049, want=45104, limit=40427 [ 1511.293416][T18970] udevd[18970]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1511.350190][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1511.350205][ T30] audit: type=1400 audit(2000525247.003:3577): avc: denied { mounton } for pid=21434 comm="syz.4.6262" path="/168/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1511.358552][T21437] netlink: 27 bytes leftover after parsing attributes in process `syz.5.6253'. [ 1511.447834][T21443] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1511.455971][T21443] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 1511.484592][T21443] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 1511.508226][T21443] EXT4-fs (loop4): Ignoring removed orlov option [ 1511.524651][T21443] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec128, mo2=0002] [ 1511.533940][T21443] System zones: 0-5 [ 1511.539432][T21443] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,resuid=0x000000000000ee01,user_xattr,noinit_itable,norecovery,jqfmt=vfsold,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,orlov,. Quota mode: writeback. [ 1511.571115][T21450] erofs: (device loop7): mounted with root inode @ nid 36. [ 1511.585932][ T30] audit: type=1400 audit(2000525247.225:3578): avc: denied { mounton } for pid=21442 comm="syz.4.6256" path="/170/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1511.588475][T21450] erofs: (device loop7): z_erofs_readahead: readahead error at page 21 @ nid 89 [ 1511.624852][T21450] erofs: (device loop7): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 1511.626560][ T30] audit: type=1400 audit(2000525247.225:3579): avc: denied { write } for pid=21442 comm="syz.4.6256" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1511.635237][T21450] erofs: (device loop7): z_erofs_pcluster_readmore: readmore error at page 6 @ nid 89 [ 1511.660324][ T30] audit: type=1400 audit(2000525247.225:3580): avc: denied { add_name } for pid=21442 comm="syz.4.6256" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1511.669606][T21455] erofs: (device loop7): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 1511.693137][ T30] audit: type=1400 audit(2000525247.225:3581): avc: denied { setattr } for pid=21442 comm="syz.4.6256" name="work" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1511.701634][T21450] attempt to access beyond end of device [ 1511.701634][T21450] loop7: rw=524288, want=136, limit=16 [ 1511.726336][ T30] audit: type=1400 audit(2000525247.253:3582): avc: denied { remove_name } for pid=21442 comm="syz.4.6256" name="#e" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1511.748115][T21455] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 1511.771000][ T30] audit: type=1400 audit(2000525247.253:3583): avc: denied { rename } for pid=21442 comm="syz.4.6256" name="#e" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1511.839412][ T30] audit: type=1400 audit(2000525247.253:3584): avc: denied { unlink } for pid=21442 comm="syz.4.6256" name="#e" dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1511.870797][T21455] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 1511.927959][T21455] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 1511.934947][ T30] audit: type=1400 audit(2000525247.253:3585): avc: denied { write } for pid=21442 comm="syz.4.6256" name="/" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1511.960625][T21455] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 1511.980709][ T30] audit: type=1400 audit(2000525247.253:3586): avc: denied { remove_name } for pid=21442 comm="syz.4.6256" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1512.148886][T21462] F2FS-fs (loop9): Small segment_count (9 < 1 * 24) [ 1512.169056][T21462] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1512.272623][T21462] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1512.569794][T21462] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1512.586731][T21462] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1512.728201][T19769] attempt to access beyond end of device [ 1512.728201][T19769] loop9: rw=2049, want=45104, limit=40427 [ 1512.779101][T21483] netlink: 27 bytes leftover after parsing attributes in process `syz.7.6269'. [ 1513.003286][T21497] FAT-fs (loop7): error, invalid FAT chain (i_pos 548, last_block 8) [ 1513.018225][T21497] FAT-fs (loop7): Filesystem has been set read-only [ 1513.032124][T21497] FAT-fs (loop7): error, corrupted file size (i_pos 548, 522) [ 1513.058498][T21512] EXT4-fs (loop9): Ignoring removed bh option [ 1513.346871][T21512] EXT4-fs (loop9): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 1513.487272][T14241] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1513.910017][T14241] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1513.931622][T14241] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1514.105141][T14241] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1514.115243][T14241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.124351][T14241] usb 5-1: Product: syz [ 1514.129271][T14241] usb 5-1: Manufacturer: syz [ 1514.134391][T14241] usb 5-1: SerialNumber: syz [ 1514.531631][T14241] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1514.761724][T21561] device syzkaller1 entered promiscuous mode [ 1514.842158][T20891] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1514.943615][T21570] set_capacity_and_notify: 7 callbacks suppressed [ 1514.943633][T21570] loop6: detected capacity change from 0 to 512 [ 1514.965312][T21570] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1514.977586][T21570] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1515.232213][T20891] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1515.243322][T20891] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1515.329763][T20891] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1515.339724][T20891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1515.348615][T20891] usb 6-1: SerialNumber: syz [ 1515.384692][T20812] usb 5-1: USB disconnect, device number 5 [ 1515.391974][T20812] usblp0: removed [ 1515.550130][T21579] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6315'. [ 1515.666087][T20891] usb 6-1: 0:2 : does not exist [ 1515.759624][T20891] usb 6-1: USB disconnect, device number 2 [ 1516.011074][T21603] af_packet: packet size is too long (4294966816 > 2016) [ 1516.153978][T21613] device syzkaller1 entered promiscuous mode [ 1516.197518][T18970] udevd[18970]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1516.235947][T21614] loop7: detected capacity change from 0 to 512 [ 1516.384180][T21620] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1516.446976][T21614] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1516.459183][T21614] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1516.601014][T21617] loop9: detected capacity change from 0 to 40427 [ 1516.615356][T21637] loop6: detected capacity change from 0 to 512 [ 1516.639508][T21617] F2FS-fs (loop9): invalid crc value [ 1516.646213][T21637] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1516.652646][T21641] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6328'. [ 1516.674147][T21617] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1516.681858][T21637] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1516.689224][T21637] EXT4-fs (loop6): 1 truncate cleaned up [ 1516.695674][T21637] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,grpid,. Quota mode: none. [ 1516.720980][T21617] F2FS-fs (loop9): Start checkpoint disabled! [ 1516.728883][T21617] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1516.775235][T21617] attempt to access beyond end of device [ 1516.775235][T21617] loop9: rw=2049, want=45104, limit=40427 [ 1516.829898][ T306] attempt to access beyond end of device [ 1516.829898][ T306] loop9: rw=2049, want=40976, limit=40427 [ 1516.833234][T21650] loop6: detected capacity change from 0 to 4096 [ 1516.858405][T21650] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1516.865894][T21650] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 1516.877148][T21650] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 1516.887914][T21650] EXT4-fs (loop6): Ignoring removed orlov option [ 1516.896217][T21650] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec128, mo2=0002] [ 1516.906342][T21650] System zones: 0-5 [ 1516.912219][T21650] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,resuid=0x000000000000ee01,user_xattr,noinit_itable,norecovery,jqfmt=vfsold,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,orlov,. Quota mode: writeback. [ 1517.036948][T21655] device syzkaller1 entered promiscuous mode [ 1517.602084][T21685] loop5: detected capacity change from 0 to 256 [ 1517.660019][T21685] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 1517.742864][T21685] incfs: ino conflict with backing FS 1 [ 1517.750295][T21691] device syzkaller1 entered promiscuous mode [ 1518.055921][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1518.055935][ T30] audit: type=1326 audit(2000525253.195:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21693 comm="syz.9.6349" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd178dfa559 code=0x7fc00000 [ 1518.119522][T21708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.127508][T21708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.135482][T21708] device bridge_slave_0 entered promiscuous mode [ 1518.143139][T21708] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.150910][T21708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.159090][T21708] device bridge_slave_1 entered promiscuous mode [ 1518.217668][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1518.225790][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1518.236302][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1518.245642][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1518.254651][T13186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.262396][T13186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1518.270752][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1518.279929][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1518.288921][T13186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.296661][T13186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1518.304939][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1518.321792][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1518.332416][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1518.352150][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1518.364965][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1518.373780][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1518.382059][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1518.393670][T21708] device veth0_vlan entered promiscuous mode [ 1518.405250][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1518.416003][T21708] device veth1_macvtap entered promiscuous mode [ 1518.429192][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1518.440613][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1518.470830][T21715] loop4: detected capacity change from 0 to 256 [ 1518.527845][ T306] device bridge_slave_1 left promiscuous mode [ 1518.534593][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.534741][T21715] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 1518.555898][ T306] device bridge_slave_0 left promiscuous mode [ 1518.562958][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.572401][ T306] device veth0_vlan left promiscuous mode [ 1518.574703][T21715] incfs: ino conflict with backing FS 1 [ 1518.629230][T18908] bridge0: port 3(syz_tun) entered disabled state [ 1518.637797][T18908] device syz_tun left promiscuous mode [ 1518.643871][T18908] bridge0: port 3(syz_tun) entered disabled state [ 1518.762822][ T30] audit: type=1326 audit(2000525253.850:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21693 comm="syz.9.6349" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd178d9b8d9 code=0x7fc00000 [ 1518.869425][T21734] loop9: detected capacity change from 0 to 1024 [ 1518.950389][T21734] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1518.969443][T21740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.978410][T21740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.986905][T21740] device bridge_slave_0 entered promiscuous mode [ 1518.994941][T21740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.996015][T21734] EXT4-fs (loop9): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,mblk_io_submit,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nobarrier,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 1519.002712][T21740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1519.040842][T21740] device bridge_slave_1 entered promiscuous mode [ 1519.067644][T21760] loop7: detected capacity change from 0 to 512 [ 1519.117936][T21760] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 1519.134655][T21760] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1519.135193][T21740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.153854][T21740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.161875][T21740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.169625][T21740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.179558][T13186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1519.188505][T13186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1519.222156][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1519.235242][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1519.255205][ T30] audit: type=1400 audit(2000525254.302:3599): avc: denied { unmount } for pid=18911 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1519.255582][T13186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.285036][T13186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.305051][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1519.314959][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1519.324464][T13186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.332329][T13186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.343427][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1519.362621][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1519.371758][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1519.383024][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1519.399535][T21787] loop6: detected capacity change from 0 to 512 [ 1519.414652][T21787] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1519.414931][T18983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1519.423206][T18983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1519.432696][T21787] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1519.457388][T18983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1519.459523][T21787] EXT4-fs (loop6): 1 truncate cleaned up [ 1519.466620][T18983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1519.472088][T21787] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,test_dummy_encryption,debug_want_extra_isize=0x000000000000006e,user_xattr,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1519.479461][T21787] EXT4-fs (loop6): shut down requested (2) [ 1519.481421][T18983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1519.521613][T18983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1519.522937][T21787] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 1519.531069][T21740] device veth0_vlan entered promiscuous mode [ 1519.546310][T21787] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 1519.553816][T21740] device veth1_macvtap entered promiscuous mode [ 1519.574694][T18983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1519.583921][T18983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1519.593329][T18983] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1519.610297][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1519.619558][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1519.630287][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1519.639445][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1519.702652][T21794] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 1519.731108][T21794] incfs: ino conflict with backing FS 1 [ 1520.047297][T21817] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1520.173874][T21817] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1520.181041][T21817] EXT4-fs (loop5): 1 truncate cleaned up [ 1520.192634][T21817] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,grpid,. Quota mode: none. [ 1520.226692][ T306] device bridge_slave_1 left promiscuous mode [ 1520.233481][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1520.241663][ T306] device bridge_slave_0 left promiscuous mode [ 1520.248388][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1520.263616][ T306] device veth1_macvtap left promiscuous mode [ 1520.270238][ T306] device veth0_vlan left promiscuous mode [ 1520.360762][T21826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.368565][T21826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1520.377017][T21826] device bridge_slave_0 entered promiscuous mode [ 1520.385102][T21826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.392916][T21826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1520.400989][T21826] device bridge_slave_1 entered promiscuous mode [ 1520.458924][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1520.467170][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1520.477483][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1520.486948][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1520.496593][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.504339][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1520.526857][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1520.535948][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1520.545927][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1520.555141][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.555152][T21841] set_capacity_and_notify: 2 callbacks suppressed [ 1520.555164][T21841] loop5: detected capacity change from 0 to 512 [ 1520.562871][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1520.584920][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1520.602731][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1520.614208][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1520.628394][T21841] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1520.636189][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1520.642051][T21841] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1520.645881][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1520.661611][T21841] EXT4-fs (loop5): 1 truncate cleaned up [ 1520.664041][T13186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1520.669823][T21841] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,test_dummy_encryption,debug_want_extra_isize=0x000000000000006e,user_xattr,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1520.695432][T21826] device veth0_vlan entered promiscuous mode [ 1520.733091][T21826] device veth1_macvtap entered promiscuous mode [ 1520.758286][T21848] loop0: detected capacity change from 0 to 256 [ 1520.768465][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1520.782955][T21841] EXT4-fs (loop5): shut down requested (2) [ 1520.790220][T21841] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 1520.793413][T21848] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 1520.800720][T21841] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 1520.820736][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1520.848479][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1520.880616][T21848] incfs: ino conflict with backing FS 1 [ 1520.925202][T21856] loop3: detected capacity change from 0 to 1024 [ 1521.002765][T21856] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1521.040314][T21856] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,mblk_io_submit,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nobarrier,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 1521.074240][T21864] loop6: detected capacity change from 0 to 512 [ 1521.100150][T21864] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 1521.116707][T21864] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1521.256744][T21884] loop3: detected capacity change from 0 to 4096 [ 1521.286422][T21884] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1521.305478][T21887] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.307968][ T30] audit: type=1400 audit(2000525256.194:3600): avc: denied { reparent } for pid=21881 comm="syz.3.6421" name="file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1521.313298][T21887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.344899][T21884] EXT4-fs error (device loop3): ext4_empty_dir:3156: inode #12: block 80: comm syz.3.6421: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1521.366924][T21884] EXT4-fs warning (device loop3): ext4_empty_dir:3158: inode #12: comm syz.3.6421: directory missing '..' [ 1521.375161][T21887] device bridge_slave_0 entered promiscuous mode [ 1521.386679][ T30] audit: type=1326 audit(2000525256.267:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21874 comm="syz.6.6419" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae582c9559 code=0x7fc00000 [ 1521.387586][T21887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.421945][T21887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.430178][T21887] device bridge_slave_1 entered promiscuous mode [ 1521.533068][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1521.541341][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1521.567589][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1521.579173][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1521.589094][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.596838][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1521.628883][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1521.639317][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1521.648373][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.656106][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1521.664357][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1521.674066][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1521.692018][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1521.704584][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1521.713734][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1521.730196][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1521.739512][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1521.753446][T21887] device veth0_vlan entered promiscuous mode [ 1521.762067][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1521.771189][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1521.780417][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1521.788682][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1522.274922][ T30] audit: type=1326 audit(2000525257.089:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21874 comm="syz.6.6419" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae5826a8d9 code=0x7fc00000 [ 1523.673174][T21914] loop6: detected capacity change from 0 to 1024 [ 1523.679744][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1523.690000][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1523.694383][T21916] loop7: detected capacity change from 0 to 512 [ 1523.700693][T21887] device veth1_macvtap entered promiscuous mode [ 1523.715461][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1523.723911][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1523.733084][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1523.743378][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1523.755609][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1523.798762][T21914] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 1523.807802][ T306] device bridge_slave_1 left promiscuous mode [ 1523.845621][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.862616][T21923] loop2: detected capacity change from 0 to 512 [ 1523.876196][ T306] device bridge_slave_0 left promiscuous mode [ 1523.889983][T21914] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,mblk_io_submit,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nobarrier,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 1523.891808][T21928] attempt to access beyond end of device [ 1523.891808][T21928] loop7: rw=524288, want=17179852722, limit=512 [ 1523.923569][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.942120][ T306] device veth1_macvtap left promiscuous mode [ 1523.952689][T21923] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1523.985206][ T306] device veth0_vlan left promiscuous mode [ 1524.000292][T21923] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1524.044425][T21923] EXT4-fs (loop2): 1 truncate cleaned up [ 1524.061586][T21923] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,test_dummy_encryption,debug_want_extra_isize=0x000000000000006e,user_xattr,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1524.132331][T21923] EXT4-fs (loop2): shut down requested (2) [ 1524.147662][T21923] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 1524.222548][T21923] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 1524.249595][T21943] loop6: detected capacity change from 0 to 512 [ 1524.261937][T21943] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1524.366992][T21920] loop5: detected capacity change from 0 to 131072 [ 1524.395615][T21920] F2FS-fs (loop5): Invalid segment/section count (458783, 24 x 150994945) [ 1524.415187][T21920] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1524.430353][T21920] F2FS-fs (loop5): invalid crc value [ 1524.446714][ T30] audit: type=1400 audit(2000525259.100:3603): avc: denied { ioctl } for pid=21950 comm="syz.6.6443" path="/dev/fuse" dev="devtmpfs" ino=91 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1524.507774][T21920] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1524.553595][T21920] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1524.562240][T21920] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 1524.580129][T21970] using random self ethernet address [ 1524.590262][T21972] xt_hashlimit: size too large, truncated to 1048576 [ 1524.599569][T21970] using random host ethernet address [ 1524.606676][ T30] audit: type=1400 audit(2000525259.238:3604): avc: denied { write } for pid=21968 comm="syz.6.6449" name="ifname" dev="configfs" ino=92591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1524.669386][T21975] ip_tables: iptables: counters copy to user failed while replacing table [ 1524.679671][ T30] audit: type=1400 audit(2000525259.238:3605): avc: denied { open } for pid=21968 comm="syz.6.6449" path="/253/cfg/usb_gadget/g1/functions/eem.usb0/ifname" dev="configfs" ino=92591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1524.737304][ T30] audit: type=1400 audit(2000525259.275:3606): avc: denied { unmount } for pid=18913 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1525.268789][T21993] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1525.280251][T21993] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,mblk_io_submit,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nobarrier,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 1525.593894][ T306] device bridge_slave_1 left promiscuous mode [ 1525.601777][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.623207][ T306] device bridge_slave_0 left promiscuous mode [ 1525.637391][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.652467][ T306] device veth1_macvtap left promiscuous mode [ 1525.660094][ T306] device veth0_vlan left promiscuous mode [ 1525.668809][T22014] ip_tables: iptables: counters copy to user failed while replacing table [ 1525.800769][T22022] EXT4-fs (loop2): Ignoring removed bh option [ 1525.808134][T22028] xt_hashlimit: size too large, truncated to 1048576 [ 1525.812230][T22022] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,nombcache,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 1525.862041][T21887] EXT4-fs error (device loop2): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /7/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 1525.887976][T21887] EXT4-fs (loop2): Remounting filesystem read-only [ 1525.912305][T21887] EXT4-fs error (device loop2): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /7/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 1525.963713][T22037] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 1525.976397][T21887] EXT4-fs (loop2): Remounting filesystem read-only [ 1525.984731][T21887] EXT4-fs error (device loop2): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 1526.007251][T21887] EXT4-fs (loop2): Remounting filesystem read-only [ 1526.015186][T22037] EXT4-fs (loop7): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,mblk_io_submit,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nobarrier,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 1526.015973][T21887] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1526.059539][T21887] EXT4-fs error (device loop2): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /7/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 1526.084949][T21887] EXT4-fs (loop2): Remounting filesystem read-only [ 1526.092525][T21887] EXT4-fs error (device loop2): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /7/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 1526.126186][T21887] EXT4-fs (loop2): Remounting filesystem read-only [ 1526.133443][T21887] EXT4-fs error (device loop2): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 1526.155269][T21887] EXT4-fs (loop2): Remounting filesystem read-only [ 1526.162659][T21887] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1526.185903][T21887] EXT4-fs error (device loop2): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /7/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 1526.216553][T21887] EXT4-fs (loop2): Remounting filesystem read-only [ 1526.224195][T21887] EXT4-fs error (device loop2): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /7/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 1526.248879][T22047] ip_tables: iptables: counters copy to user failed while replacing table [ 1526.259751][T21887] EXT4-fs (loop2): Remounting filesystem read-only [ 1526.267249][T21887] EXT4-fs error (device loop2): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 1526.297522][T21887] EXT4-fs (loop2): Remounting filesystem read-only [ 1526.304938][T21887] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1526.322436][T21887] EXT4-fs error (device loop2): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /7/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 1526.355821][T21887] EXT4-fs (loop2): Remounting filesystem read-only [ 1526.364460][T21887] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1526.387836][T21887] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1526.404446][T21887] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1526.421065][T21887] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1526.438781][T21887] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1526.460361][T21887] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1526.476521][T21887] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1526.479407][T22065] set_capacity_and_notify: 3 callbacks suppressed [ 1526.479422][T22065] loop5: detected capacity change from 0 to 512 [ 1526.509045][T22065] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1526.521897][T22067] ip_tables: iptables: counters copy to user failed while replacing table [ 1526.532466][T22065] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.6486: inode has both inline data and extents flags [ 1526.547878][T22065] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.6486: couldn't read orphan inode 15 (err -117) [ 1526.561911][T22065] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 1526.597418][T22074] xt_hashlimit: size too large, truncated to 1048576 [ 1526.650210][T22082] xt_hashlimit: size too large, truncated to 1048576 [ 1527.104881][T22095] ip_tables: iptables: counters copy to user failed while replacing table [ 1527.254798][T22097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.264863][T22097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.273226][T22097] device bridge_slave_0 entered promiscuous mode [ 1527.283502][T22097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.291462][T22097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.299752][T22097] device bridge_slave_1 entered promiscuous mode [ 1527.350075][T22114] loop6: detected capacity change from 0 to 512 [ 1527.362132][ T306] device bridge_slave_1 left promiscuous mode [ 1527.370807][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.389941][ T306] device bridge_slave_0 left promiscuous mode [ 1527.400557][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.413070][ T306] device veth1_macvtap left promiscuous mode [ 1527.421337][ T306] device veth0_vlan left promiscuous mode [ 1527.495031][T22114] attempt to access beyond end of device [ 1527.495031][T22114] loop6: rw=524288, want=17179852722, limit=512 [ 1527.525143][T22097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.532933][T22097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1527.540951][T22097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.548692][T22097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1527.777909][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1527.786836][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1527.803255][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1527.804445][T22125] loop6: detected capacity change from 0 to 1024 [ 1527.830047][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1527.840993][T22125] EXT4-fs (loop6): Ignoring removed bh option [ 1527.854870][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1527.880081][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1527.889918][T22125] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,nombcache,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 1527.895008][T22097] device veth0_vlan entered promiscuous mode [ 1527.920607][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1527.938887][T18913] EXT4-fs error (device loop6): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /265/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 1527.963545][T18913] EXT4-fs (loop6): Remounting filesystem read-only [ 1527.963880][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1527.971167][T18913] EXT4-fs error (device loop6): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /265/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 1528.003206][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1528.010091][T18913] EXT4-fs (loop6): Remounting filesystem read-only [ 1528.018712][T18913] EXT4-fs error (device loop6): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 1528.020015][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1528.050667][T18913] EXT4-fs (loop6): Remounting filesystem read-only [ 1528.058666][T22097] device veth1_macvtap entered promiscuous mode [ 1528.065786][T22139] ip_tables: iptables: counters copy to user failed while replacing table [ 1528.067622][T18913] EXT4-fs warning (device loop6): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1528.091555][T18913] EXT4-fs error (device loop6): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /265/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 1528.123317][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1528.136647][T18913] EXT4-fs (loop6): Remounting filesystem read-only [ 1528.144125][T18913] EXT4-fs error (device loop6): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /265/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 1528.168995][T18913] EXT4-fs (loop6): Remounting filesystem read-only [ 1528.176602][T18913] EXT4-fs error (device loop6): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 1528.201147][T18913] EXT4-fs (loop6): Remounting filesystem read-only [ 1528.206638][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1528.209936][T18913] EXT4-fs warning (device loop6): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1528.218108][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1528.242462][T18913] EXT4-fs error (device loop6): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /265/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 1528.274778][T22146] loop5: detected capacity change from 0 to 8192 [ 1528.286240][T18913] EXT4-fs (loop6): Remounting filesystem read-only [ 1528.295119][T18913] EXT4-fs error (device loop6): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /265/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 1528.332106][T18913] EXT4-fs (loop6): Remounting filesystem read-only [ 1528.339629][T18913] EXT4-fs error (device loop6): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 1528.362062][T18913] EXT4-fs (loop6): Remounting filesystem read-only [ 1528.369330][T18913] EXT4-fs warning (device loop6): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1528.392362][T18913] EXT4-fs error (device loop6): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /265/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 1528.421440][T22146] attempt to access beyond end of device [ 1528.421440][T22146] loop5: rw=0, want=57848, limit=8192 [ 1528.440496][T18913] EXT4-fs (loop6): Remounting filesystem read-only [ 1528.449406][T18913] EXT4-fs warning (device loop6): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1528.453871][T22146] Buffer I/O error on dev loop5, logical block 57847, async page read [ 1528.467047][T18913] EXT4-fs warning (device loop6): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1528.482638][T22146] attempt to access beyond end of device [ 1528.482638][T22146] loop5: rw=0, want=57848, limit=8192 [ 1528.491680][T22154] xt_hashlimit: size too large, truncated to 1048576 [ 1528.650692][T18913] EXT4-fs warning (device loop6): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1528.700643][T22146] Buffer I/O error on dev loop5, logical block 57847, async page read [ 1528.759818][T18913] EXT4-fs warning (device loop6): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1528.792858][T18913] EXT4-fs warning (device loop6): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1528.796646][T22162] loop3: detected capacity change from 0 to 512 [ 1528.853664][T18913] EXT4-fs warning (device loop6): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1528.874223][T18913] EXT4-fs warning (device loop6): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1528.896938][T22167] loop7: detected capacity change from 0 to 1024 [ 1528.950577][T22162] attempt to access beyond end of device [ 1528.950577][T22162] loop3: rw=524288, want=17179852722, limit=512 [ 1528.984784][T22167] EXT4-fs (loop7): Ignoring removed bh option [ 1529.023573][T22167] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,nombcache,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 1529.086255][T18911] EXT4-fs error (device loop7): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /231/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 1529.195279][T18911] EXT4-fs (loop7): Remounting filesystem read-only [ 1529.197483][T22178] kvm [22175]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x7 [ 1529.203324][T18911] EXT4-fs error (device loop7): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /231/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 1529.213770][T22178] kvm [22175]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x7 [ 1529.242654][T18911] EXT4-fs (loop7): Remounting filesystem read-only [ 1529.261527][T18911] EXT4-fs error (device loop7): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 1529.305227][T18911] EXT4-fs (loop7): Remounting filesystem read-only [ 1529.325305][T22187] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 1529.325305][T22187] Q&|x6 [ 1529.325517][T18911] EXT4-fs warning (device loop7): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1529.412751][T18911] EXT4-fs error (device loop7): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /231/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 1529.440254][T18911] EXT4-fs (loop7): Remounting filesystem read-only [ 1529.447954][T18911] EXT4-fs error (device loop7): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /231/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 1529.472669][T18911] EXT4-fs (loop7): Remounting filesystem read-only [ 1529.479958][T22191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.482819][T18911] EXT4-fs error (device loop7): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 1529.498641][T22191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.510252][T18911] EXT4-fs (loop7): Remounting filesystem read-only [ 1529.524649][T18911] EXT4-fs warning (device loop7): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1529.540671][T18911] EXT4-fs error (device loop7): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /231/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 1529.575528][T18911] EXT4-fs (loop7): Remounting filesystem read-only [ 1529.582948][T18911] EXT4-fs error (device loop7): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /231/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 1529.610269][T22196] loop8: detected capacity change from 0 to 512 [ 1529.617499][T18911] EXT4-fs (loop7): Remounting filesystem read-only [ 1529.624272][T22191] device bridge_slave_0 entered promiscuous mode [ 1529.639008][T22191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1529.660167][T18911] EXT4-fs error (device loop7): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 1529.670846][T22191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.690142][T22191] device bridge_slave_1 entered promiscuous mode [ 1529.712923][T18911] EXT4-fs (loop7): Remounting filesystem read-only [ 1529.714581][T22196] attempt to access beyond end of device [ 1529.714581][T22196] loop8: rw=524288, want=17179852722, limit=512 [ 1529.727965][T18911] EXT4-fs warning (device loop7): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1529.755224][T18911] EXT4-fs error (device loop7): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /231/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 1529.780925][T18911] EXT4-fs (loop7): Remounting filesystem read-only [ 1529.789244][T18911] EXT4-fs warning (device loop7): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1529.805441][T18911] EXT4-fs warning (device loop7): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1529.810061][T22191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1529.822920][T18911] EXT4-fs warning (device loop7): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1529.828729][T22191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1529.828848][T22191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.844858][T18911] EXT4-fs warning (device loop7): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1529.852183][T22191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1529.860411][T18911] EXT4-fs warning (device loop7): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1529.901246][T18911] EXT4-fs warning (device loop7): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1529.920074][T18911] EXT4-fs warning (device loop7): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1529.935781][T18983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1529.944919][T18983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1529.955038][T18983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1529.970615][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1529.992050][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1530.009752][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1530.023648][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1530.032591][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1530.040925][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1530.054884][T22191] device veth0_vlan entered promiscuous mode [ 1530.067617][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1530.078312][T22191] device veth1_macvtap entered promiscuous mode [ 1530.090416][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1530.102618][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1530.112208][ T306] device bridge_slave_1 left promiscuous mode [ 1530.119149][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1530.127508][ T306] device bridge_slave_0 left promiscuous mode [ 1530.134398][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1530.143067][ T306] device veth1_macvtap left promiscuous mode [ 1530.149708][ T306] device veth0_vlan left promiscuous mode [ 1530.225376][T22206] loop5: detected capacity change from 0 to 512 [ 1530.238909][T22209] xt_hashlimit: size too large, truncated to 1048576 [ 1530.310839][T22206] attempt to access beyond end of device [ 1530.310839][T22206] loop5: rw=524288, want=17179852722, limit=512 [ 1530.380165][T22214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1530.397599][T22214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1530.406017][T22214] device bridge_slave_0 entered promiscuous mode [ 1530.414100][T22214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1530.422077][T22214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1530.432184][T22214] device bridge_slave_1 entered promiscuous mode [ 1530.487812][ T30] audit: type=1400 audit(2000525264.664:3607): avc: denied { setattr } for pid=22230 comm="syz.3.6542" name="file0" dev="tmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1530.497768][T22214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1530.520443][T22214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1530.528472][T22214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1530.536215][T22214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1530.613802][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1530.623796][ T4152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1530.635772][ T4152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1530.647834][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1530.656935][ T4152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1530.664662][ T4152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1530.924147][T22214] device veth0_vlan entered promiscuous mode [ 1530.937840][T22214] device veth1_macvtap entered promiscuous mode [ 1530.948375][T22242] loop1: detected capacity change from 0 to 128 [ 1530.959160][T22244] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6551'. [ 1530.972960][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1530.982389][T22242] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,dioread_lock,nouid32,,errors=continue. Quota mode: none. [ 1530.997507][T22242] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1530.997955][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1531.041680][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1531.050146][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1531.058717][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1531.073837][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1531.083182][ T4152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1531.090940][ T4152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1531.099421][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1531.108730][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1531.135967][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1531.151439][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1531.171872][T22254] loop1: detected capacity change from 0 to 512 [ 1531.183561][T18970] udevd[18970]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 1531.504148][T22254] attempt to access beyond end of device [ 1531.504148][T22254] loop1: rw=524288, want=17179852722, limit=512 [ 1531.568039][T22281] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 1531.568039][T22281] Q&|x6 [ 1531.605166][T18970] udevd[18970]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 1531.636666][T18970] udevd[18970]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 1531.778042][ T1522] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1531.896128][T18970] udevd[18970]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 1531.912812][ T306] device bridge_slave_1 left promiscuous mode [ 1531.915550][T22291] set_capacity_and_notify: 1 callbacks suppressed [ 1531.915564][T22291] loop7: detected capacity change from 0 to 2048 [ 1531.919561][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1531.931740][T18970] udevd[18970]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 1531.956604][T22288] attempt to access beyond end of device [ 1531.956604][T22288] loop8: rw=0, want=57848, limit=8192 [ 1531.969174][ T306] device bridge_slave_0 left promiscuous mode [ 1531.969938][T18969] udevd[18969]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1531.976025][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.002007][T18969] udevd[18969]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1532.012687][T22288] Buffer I/O error on dev loop8, logical block 57847, async page read [ 1532.028830][T22291] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1532.044738][ T306] device veth1_macvtap left promiscuous mode [ 1532.051348][ T306] device veth0_vlan left promiscuous mode [ 1532.074328][T22291] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1532.139190][ T1522] usb 6-1: Using ep0 maxpacket: 32 [ 1532.191555][T22291] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 1532.219589][T22291] overlayfs: failed to verify index dir 'upper' xattr [ 1532.243193][T22291] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1532.280078][ T1522] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1532.305736][ T1522] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1532.326687][ T1522] usb 6-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.00 [ 1532.336740][ T1522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.349307][ T1522] usb 6-1: config 0 descriptor?? [ 1532.384145][T18970] udevd[18970]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1532.413746][T18970] udevd[18970]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1532.417359][T22310] loop1: detected capacity change from 0 to 512 [ 1532.436170][T18933] udevd[18933]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 1532.466436][T22292] loop3: detected capacity change from 0 to 131072 [ 1532.482031][T22292] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1532.530992][T22310] attempt to access beyond end of device [ 1532.530992][T22310] loop1: rw=524288, want=17179852722, limit=512 [ 1532.555932][T22292] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1532.577553][ T30] audit: type=1400 audit(2000525266.592:3608): avc: denied { read write } for pid=22289 comm="syz.3.6566" name="file1" dev="overlay" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1532.603936][ T30] audit: type=1400 audit(2000525266.592:3609): avc: denied { open } for pid=22289 comm="syz.3.6566" path="/40/file0/file0/file1" dev="overlay" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1532.635836][ T30] audit: type=1400 audit(2000525266.629:3610): avc: denied { setattr } for pid=22289 comm="syz.3.6566" name="#15" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1532.661978][ T30] audit: type=1400 audit(2000525266.629:3611): avc: denied { link } for pid=22289 comm="syz.3.6566" name="#15" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1532.683080][T22326] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 1532.683080][T22326] Q&|x6 [ 1532.780166][T22338] loop1: detected capacity change from 0 to 8192 [ 1532.824946][T22338] attempt to access beyond end of device [ 1532.824946][T22338] loop1: rw=0, want=57848, limit=8192 [ 1532.837036][T22338] Buffer I/O error on dev loop1, logical block 57847, async page read [ 1532.846469][T22338] attempt to access beyond end of device [ 1532.846469][T22338] loop1: rw=0, want=57848, limit=8192 [ 1532.859411][T22338] Buffer I/O error on dev loop1, logical block 57847, async page read [ 1532.868972][T22338] attempt to access beyond end of device [ 1532.868972][T22338] loop1: rw=0, want=57848, limit=8192 [ 1532.881176][T22338] Buffer I/O error on dev loop1, logical block 57847, async page read [ 1532.899148][ T1522] apple 0003:05AC:0252.0003: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 1532.926611][ T1522] input: HID 05ac:0252 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:0252.0003/input/input13 [ 1533.020464][ T1522] apple 0003:05AC:0252.0003: input,hiddev96,hidraw0: USB HID vff.f9 Device [HID 05ac:0252] on usb-dummy_hcd.5-1/input0 [ 1533.116468][T20812] usb 6-1: USB disconnect, device number 3 [ 1533.129377][T22360] loop8: detected capacity change from 0 to 512 [ 1533.130337][T22362] FAULT_INJECTION: forcing a failure. [ 1533.130337][T22362] name failslab, interval 1, probability 0, space 0, times 0 [ 1533.150838][T22362] CPU: 0 PID: 22362 Comm: syz.3.6595 Tainted: G W syzkaller #0 [ 1533.160582][T22362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1533.171623][T22362] Call Trace: [ 1533.175199][T22362] [ 1533.178393][T22362] __dump_stack+0x21/0x30 [ 1533.183140][T22362] dump_stack_lvl+0x110/0x170 [ 1533.188280][T22362] ? show_regs_print_info+0x20/0x20 [ 1533.193976][T22362] dump_stack+0x15/0x20 [ 1533.198518][T22362] should_fail+0x3ab/0x500 [ 1533.203366][T22362] __should_failslab+0xa4/0xe0 [ 1533.208581][T22362] should_failslab+0x9/0x20 [ 1533.213507][T22362] slab_pre_alloc_hook+0x39/0xd0 [ 1533.218909][T22362] ? __d_alloc+0x2d/0x690 [ 1533.223662][T22362] kmem_cache_alloc+0x44/0x260 [ 1533.228905][T22362] __d_alloc+0x2d/0x690 [ 1533.233447][T22362] d_alloc_pseudo+0x1d/0x70 [ 1533.238370][T22362] alloc_file_pseudo+0xe0/0x200 [ 1533.243682][T22362] ? alloc_empty_file_noaccount+0x80/0x80 [ 1533.249958][T22362] ? alloc_fd+0x4c2/0x570 [ 1533.254694][T22362] sock_alloc_file+0xba/0x260 [ 1533.259810][T22362] __sys_socket+0x12b/0x190 [ 1533.264753][T22362] __x64_sys_socket+0x7a/0x90 [ 1533.269870][T22362] x64_sys_call+0x8c5/0x9a0 [ 1533.274804][T22362] do_syscall_64+0x4c/0xa0 [ 1533.279632][T22362] ? clear_bhb_loop+0x50/0xa0 [ 1533.284748][T22362] ? clear_bhb_loop+0x50/0xa0 [ 1533.289884][T22362] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1533.296339][T22362] RIP: 0033:0x7f348adad559 [ 1533.301188][T22362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1533.322741][T22362] RSP: 002b:00007f3489805028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1533.331970][T22362] RAX: ffffffffffffffda RBX: 00007f348b033fa0 RCX: 00007f348adad559 [ 1533.340714][T22362] RDX: 0000000000000009 RSI: 0000000000000003 RDI: 0000000000000010 [ 1533.349452][T22362] RBP: 00007f348ae44b20 R08: 0000000000000000 R09: 0000000000000000 [ 1533.358192][T22362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1533.366929][T22362] R13: 00007f348b034038 R14: 00007f348b033fa0 R15: 00007ffdd42e2948 [ 1533.375698][T22362] [ 1533.405664][T22368] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 1533.405664][T22368] Q&|x6 [ 1533.418421][T22360] EXT4-fs (loop8): mounted filesystem without journal. Opts: user_xattr,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback. [ 1533.462478][T22360] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1533.483669][T22360] EXT4-fs error (device loop8): ext4_do_update_inode:5260: inode #2: comm syz.8.6594: corrupted inode contents [ 1533.518587][T22360] EXT4-fs (loop8): Remounting filesystem read-only [ 1533.525801][T22360] EXT4-fs error (device loop8): ext4_dirty_inode:6118: inode #2: comm syz.8.6594: mark_inode_dirty error [ 1533.568900][T22360] EXT4-fs (loop8): Remounting filesystem read-only [ 1533.576417][T22360] EXT4-fs error (device loop8): ext4_do_update_inode:5260: inode #2: comm syz.8.6594: corrupted inode contents [ 1533.577775][T22375] loop7: detected capacity change from 0 to 8192 [ 1533.589630][T22360] EXT4-fs (loop8): Remounting filesystem read-only [ 1533.604937][T22380] EXT4-fs error (device loop8): ext4_do_update_inode:5260: inode #2: comm syz.8.6594: corrupted inode contents [ 1533.625562][T22380] EXT4-fs (loop8): Remounting filesystem read-only [ 1533.632729][T22380] EXT4-fs error (device loop8): ext4_dirty_inode:6118: inode #2: comm syz.8.6594: mark_inode_dirty error [ 1533.650671][T22380] EXT4-fs (loop8): Remounting filesystem read-only [ 1533.660956][T22375] attempt to access beyond end of device [ 1533.660956][T22375] loop7: rw=0, want=57848, limit=8192 [ 1533.662030][T22387] loop3: detected capacity change from 0 to 2048 [ 1533.673083][T22380] EXT4-fs error (device loop8): ext4_do_update_inode:5260: inode #2: comm syz.8.6594: corrupted inode contents [ 1533.682369][T22375] Buffer I/O error on dev loop7, logical block 57847, async page read [ 1533.693401][T22380] EXT4-fs (loop8): Remounting filesystem read-only [ 1533.702330][T22375] attempt to access beyond end of device [ 1533.702330][T22375] loop7: rw=0, want=57848, limit=8192 [ 1533.708998][T22380] EXT4-fs error (device loop8): __ext4_ext_dirty:183: inode #2: comm syz.8.6594: mark_inode_dirty error [ 1533.721221][T22375] Buffer I/O error on dev loop7, logical block 57847, async page read [ 1533.743656][T22380] EXT4-fs (loop8): Remounting filesystem read-only [ 1533.750857][T22380] EXT4-fs error (device loop8): ext4_do_update_inode:5260: inode #2: comm syz.8.6594: corrupted inode contents [ 1533.770159][T22380] EXT4-fs (loop8): Remounting filesystem read-only [ 1533.778899][T22380] EXT4-fs error (device loop8): ext4_dirty_inode:6118: inode #2: comm syz.8.6594: mark_inode_dirty error [ 1533.799794][T22380] EXT4-fs (loop8): Remounting filesystem read-only [ 1533.800290][T22387] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1533.829910][T22360] EXT4-fs error (device loop8): ext4_do_update_inode:5260: inode #2: comm syz.8.6594: corrupted inode contents [ 1533.830334][T22387] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1533.869413][T22360] EXT4-fs (loop8): Remounting filesystem read-only [ 1533.920947][T22387] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 1533.929259][T22387] overlayfs: failed to verify index dir 'upper' xattr [ 1533.936725][T22387] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1534.122370][T20891] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1534.218140][T22393] loop5: detected capacity change from 0 to 131072 [ 1534.277111][T22393] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1534.299262][T22393] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1534.344784][T22409] loop7: detected capacity change from 0 to 128 [ 1534.363867][T22409] EXT4-fs (loop7): mounted filesystem without journal. Opts: nogrpid,dioread_lock,nouid32,,errors=continue. Quota mode: none. [ 1534.378363][T22409] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1534.488206][T22418] loop7: detected capacity change from 0 to 1024 [ 1534.513875][T22418] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 1534.522039][T22418] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1534.555981][T20891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1534.568539][T20891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1534.579566][T20891] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1534.587090][T22418] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier=0x0000000000000003,noinit_itable,nobarrier,delalloc,dioread_nolock,quota,nomblk_io_submit,delalloc,nolazytime,,errors=continue. Quota mode: writeback. [ 1534.590474][T20891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.625640][T20891] usb 2-1: config 0 descriptor?? [ 1534.626596][T22418] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1534.642873][T20812] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1534.648374][T22418] EXT4-fs error (device loop7): ext4_map_blocks:742: inode #15: block 3: comm syz.7.6615: lblock 3 mapped to illegal pblock 3 (length 2) [ 1534.651185][ T30] audit: type=1400 audit(2000525268.502:3612): avc: denied { append } for pid=22417 comm="syz.7.6615" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1534.670547][T22418] EXT4-fs error (device loop7): ext4_map_blocks:742: inode #15: block 3: comm syz.7.6615: lblock 3 mapped to illegal pblock 3 (length 2) [ 1534.706937][T22418] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 2 with error 117 [ 1534.720613][T22418] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1534.720613][T22418] [ 1534.738950][ T4152] EXT4-fs error (device loop7): ext4_map_blocks:742: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 1534.754796][ T4152] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1534.768596][ T4152] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1534.768596][ T4152] [ 1534.924388][T14241] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1534.967944][T20812] usb 9-1: Using ep0 maxpacket: 16 [ 1534.980175][T22436] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback. [ 1534.999451][T22436] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1535.018231][T22436] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #2: comm syz.3.6622: corrupted inode contents [ 1535.031455][T22436] EXT4-fs (loop3): Remounting filesystem read-only [ 1535.038641][T22436] EXT4-fs error (device loop3): ext4_dirty_inode:6118: inode #2: comm syz.3.6622: mark_inode_dirty error [ 1535.051177][T22436] EXT4-fs (loop3): Remounting filesystem read-only [ 1535.058619][T22436] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #2: comm syz.3.6622: corrupted inode contents [ 1535.071716][T22436] EXT4-fs (loop3): Remounting filesystem read-only [ 1535.079807][T22439] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #2: comm syz.3.6622: corrupted inode contents [ 1535.092920][T22439] EXT4-fs (loop3): Remounting filesystem read-only [ 1535.097815][T20812] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.100162][T22439] EXT4-fs error (device loop3): ext4_dirty_inode:6118: inode #2: comm syz.3.6622: mark_inode_dirty error [ 1535.111299][T20812] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1535.124019][T22439] EXT4-fs (loop3): Remounting filesystem read-only [ 1535.135825][T20812] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1535.143784][T20891] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1535.153416][T20812] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1535.161594][T22439] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #2: comm syz.3.6622: corrupted inode contents [ 1535.175179][T20812] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1535.188041][T20891] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1535.195467][T20812] usb 9-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1535.202883][T20891] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1535.212848][T20812] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.220565][T22439] EXT4-fs (loop3): Remounting filesystem read-only [ 1535.232346][T20812] usb 9-1: config 0 descriptor?? [ 1535.236312][T20891] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1535.242040][T22439] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.6622: mark_inode_dirty error [ 1535.249340][T20891] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1535.262101][T22439] EXT4-fs (loop3): Remounting filesystem read-only [ 1535.269049][T20891] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1535.277233][T22439] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #2: comm syz.3.6622: corrupted inode contents [ 1535.283921][T20891] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1535.285015][T20891] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1535.297945][T22439] EXT4-fs (loop3): Remounting filesystem read-only [ 1535.323899][T22439] EXT4-fs error (device loop3): ext4_dirty_inode:6118: inode #2: comm syz.3.6622: mark_inode_dirty error [ 1535.336329][T14241] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 21792, setting to 64 [ 1535.336594][T22439] EXT4-fs (loop3): Remounting filesystem read-only [ 1535.371901][T22436] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #2: comm syz.3.6622: corrupted inode contents [ 1535.385094][T22436] EXT4-fs (loop3): Remounting filesystem read-only [ 1535.444937][T20891] cp2112 0003:10C4:EA90.0004: Part Number: 0x00 Device Version: 0x00 [ 1535.520559][T14241] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1535.530579][T14241] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.539452][T14241] usb 6-1: Product: syz [ 1535.544067][T14241] usb 6-1: Manufacturer: syz [ 1535.549110][T14241] usb 6-1: SerialNumber: syz [ 1535.574688][T22426] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1535.750760][T20812] logitech-djreceiver 0003:046D:C53A.0005: hiddev96,hidraw1: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.8-1/input0 [ 1535.972680][T20812] usb 9-1: USB disconnect, device number 3 [ 1536.073861][T14241] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1536.138248][T20891] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71 [ 1536.149751][T20891] usb 2-1: USB disconnect, device number 2 [ 1536.714662][T22466] netlink: 'syz.1.6632': attribute type 4 has an invalid length. [ 1536.727350][T22466] netlink: 'syz.1.6632': attribute type 4 has an invalid length. [ 1536.762618][T18970] udevd[18970]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 1536.779255][T22476] EXT4-fs (loop1): Ignoring removed bh option [ 1536.786795][T22476] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1536.797740][T22476] EXT4-fs (loop1): 1 truncate cleaned up [ 1536.804009][T22476] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 1536.856123][T18970] udevd[18970]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 1536.867330][T18970] udevd[18970]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 1536.989218][T20812] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1537.011179][ T30] audit: type=1400 audit(2000525270.689:3613): avc: denied { associate } for pid=22491 comm="syz.1.6643" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1537.066362][ T30] audit: type=1400 audit(2000525270.735:3614): avc: denied { mounton } for pid=22489 comm="syz.1.6643" path="/proc/60/task" dev="proc" ino=95040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1537.254503][T20812] usb 9-1: Using ep0 maxpacket: 32 [ 1537.384606][T20812] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1537.398893][T20812] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1537.406155][T20812] usb 9-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.00 [ 1537.416328][T20812] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.426134][T20812] usb 9-1: config 0 descriptor?? [ 1537.452065][T22496] xt_hashlimit: size too large, truncated to 1048576 [ 1537.719302][T22516] device ip6gre1 entered promiscuous mode [ 1537.752178][T22522] set_capacity_and_notify: 2 callbacks suppressed [ 1537.752191][T22522] loop7: detected capacity change from 0 to 512 [ 1537.804479][T18969] udevd[18969]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1537.976665][T20812] apple 0003:05AC:0252.0006: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 1537.999277][T20891] usb 6-1: USB disconnect, device number 4 [ 1538.014188][T22522] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1538.027606][T20891] usblp0: removed [ 1538.028028][T20812] input: HID 05ac:0252 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:05AC:0252.0006/input/input14 [ 1538.034125][T22522] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1538.068984][T22536] netlink: 'syz.3.6661': attribute type 4 has an invalid length. [ 1538.093162][T22536] netlink: 'syz.3.6661': attribute type 4 has an invalid length. [ 1538.123757][T20812] apple 0003:05AC:0252.0006: input,hiddev96,hidraw0: USB HID vff.f9 Device [HID 05ac:0252] on usb-dummy_hcd.8-1/input0 [ 1538.140887][T18969] udevd[18969]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1538.147486][T22544] loop5: detected capacity change from 0 to 1024 [ 1538.163143][T18933] udevd[18933]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 1538.171906][T18970] udevd[18970]: Error opening device "/dev/input/event3": Not a directory [ 1538.175094][T22548] udevd[22548]: open /dev/null failed: Not a directory [ 1538.183464][T18969] udevd[18969]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1538.215735][T20812] usb 9-1: USB disconnect, device number 4 [ 1538.223967][T18970] udevd[18970]: Unable to EVIOCGABS device "/dev/input/event3" [ 1538.247943][T22544] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 1538.260074][T22544] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1538.279046][T22553] device ip6gre1 entered promiscuous mode [ 1538.297663][T22544] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000003,noinit_itable,nobarrier,delalloc,dioread_nolock,quota,nomblk_io_submit,delalloc,nolazytime,,errors=continue. Quota mode: writeback. [ 1538.322788][T22544] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1538.573668][T22544] EXT4-fs error (device loop5): ext4_map_blocks:742: inode #15: block 3: comm syz.5.6666: lblock 3 mapped to illegal pblock 3 (length 2) [ 1538.594825][T22544] EXT4-fs error (device loop5): ext4_map_blocks:742: inode #15: block 3: comm syz.5.6666: lblock 3 mapped to illegal pblock 3 (length 2) [ 1538.610544][T22544] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 2 with error 117 [ 1538.624170][T22544] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1538.624170][T22544] [ 1538.654816][ T306] EXT4-fs error (device loop5): ext4_map_blocks:742: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 1538.670759][ T306] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1538.676909][ T30] audit: type=1400 audit(2000525272.230:3615): avc: denied { read write } for pid=22567 comm="syz.1.6673" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1538.684764][ T306] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1538.684764][ T306] [ 1538.714052][ T30] audit: type=1400 audit(2000525272.258:3616): avc: denied { open } for pid=22567 comm="syz.1.6673" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1538.992299][T22575] netlink: 'syz.8.6674': attribute type 4 has an invalid length. [ 1539.007152][T22575] netlink: 'syz.8.6674': attribute type 4 has an invalid length. [ 1539.009665][ T30] audit: type=1400 audit(2000525272.525:3617): avc: denied { read } for pid=22576 comm="syz.7.6676" name="no_out_endpoint" dev="configfs" ino=96334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1539.033529][T22584] device ip6gre1 entered promiscuous mode [ 1539.693068][ T1522] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1539.700667][T22615] binder: 22614:22615 ioctl c0306201 2000000003c0 returned -14 [ 1539.704188][ T30] audit: type=1400 audit(2000525273.162:3618): avc: denied { set_context_mgr } for pid=22614 comm="syz.8.6690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1539.747465][T22615] binder: 22614:22615 ioctl c0306201 2000000004c0 returned -14 [ 1539.898896][T20891] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1539.996442][ T1522] usb 4-1: Using ep0 maxpacket: 32 [ 1540.126585][ T1522] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1540.140831][ T1522] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1540.148095][ T1522] usb 4-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.00 [ 1540.158043][ T1522] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.167807][ T1522] usb 4-1: config 0 descriptor?? [ 1540.173277][T20891] usb 2-1: Using ep0 maxpacket: 8 [ 1540.299990][T20891] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1540.312202][T20891] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1540.323205][T20891] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1540.337251][T20891] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1540.344548][T20891] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1540.354508][T20891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.364154][T20891] usb 2-1: config 0 descriptor?? [ 1540.691058][ T1522] apple 0003:05AC:0252.0007: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 1540.700052][T22631] FAULT_INJECTION: forcing a failure. [ 1540.700052][T22631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1540.704634][ T1522] input: HID 05ac:0252 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:0252.0007/input/input15 [ 1540.718272][T22631] CPU: 0 PID: 22631 Comm: syz.8.6696 Tainted: G W syzkaller #0 [ 1540.740177][T22631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1540.751229][T22631] Call Trace: [ 1540.754822][T22631] [ 1540.758031][T22631] __dump_stack+0x21/0x30 [ 1540.762785][T22631] dump_stack_lvl+0x110/0x170 [ 1540.767914][T22631] ? show_regs_print_info+0x20/0x20 [ 1540.773612][T22631] ? exc_page_fault+0x5e/0xb0 [ 1540.778739][T22631] dump_stack+0x15/0x20 [ 1540.783301][T22631] should_fail+0x3ab/0x500 [ 1540.788145][T22631] should_fail_usercopy+0x1a/0x20 [ 1540.793679][T22631] copy_page_from_iter+0x2f6/0x680 [ 1540.799326][T22631] pipe_write+0x90b/0x1910 [ 1540.804165][T22631] ? pipe_write+0xf1/0x1910 [ 1540.809099][T22631] ? pipe_read+0x1050/0x1050 [ 1540.814123][T22631] ? selinux_file_permission+0x3f4/0x510 [ 1540.820310][T22631] ? memset+0x35/0x40 [ 1540.824672][T22631] ? iov_iter_init+0xbc/0x180 [ 1540.829812][T22631] vfs_write+0x831/0xfd0 [ 1540.834458][T22631] ? file_end_write+0x1b0/0x1b0 [ 1540.839772][T22631] ? __fget_files+0x2e1/0x340 [ 1540.844890][T22631] ? __fdget_pos+0x1f7/0x380 [ 1540.849911][T22631] ? ksys_write+0x70/0x260 [ 1540.854746][T22631] ksys_write+0x14a/0x260 [ 1540.859505][T22631] ? __ia32_sys_read+0x90/0x90 [ 1540.864728][T22631] ? __kasan_check_write+0x14/0x20 [ 1540.870433][T22631] ? switch_fpu_return+0x15d/0x2c0 [ 1540.876039][T22631] __x64_sys_write+0x7b/0x90 [ 1540.881066][T22631] x64_sys_call+0x8ef/0x9a0 [ 1540.885999][T22631] do_syscall_64+0x4c/0xa0 [ 1540.890844][T22631] ? clear_bhb_loop+0x50/0xa0 [ 1540.895965][T22631] ? clear_bhb_loop+0x50/0xa0 [ 1540.901089][T22631] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1540.907552][T22631] RIP: 0033:0x7f9f58e89559 [ 1540.912388][T22631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1540.933933][T22631] RSP: 002b:00007f9f578e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1540.943167][T22631] RAX: ffffffffffffffda RBX: 00007f9f5910ffa0 RCX: 00007f9f58e89559 [ 1540.951913][T22631] RDX: 00000000fffffecc RSI: 0000200000000180 RDI: 0000000000000004 [ 1540.960657][T22631] RBP: 00007f9f58f20b20 R08: 0000000000000000 R09: 0000000000000000 [ 1540.969408][T22631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1540.978156][T22631] R13: 00007f9f59110038 R14: 00007f9f5910ffa0 R15: 00007ffe7eab0758 [ 1540.987098][T22631] [ 1540.998568][ T1522] apple 0003:05AC:0252.0007: input,hiddev96,hidraw0: USB HID vff.f9 Device [HID 05ac:0252] on usb-dummy_hcd.3-1/input0 [ 1541.018138][T20891] input: HID 046d:c623 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046D:C623.0008/input/input16 [ 1541.041822][ T1522] usb 4-1: USB disconnect, device number 3 [ 1541.053122][T22636] loop5: detected capacity change from 0 to 512 [ 1541.069089][T22639] loop8: detected capacity change from 0 to 128 [ 1541.093424][T22636] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1541.095167][T22639] incfs: ino conflict with backing FS 1 [ 1541.112813][T22636] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1541.122540][T22097] FAT-fs (loop8): error, invalid access to FAT (entry 0xffff0000) [ 1541.133016][T22097] FAT-fs (loop8): Filesystem has been set read-only [ 1541.145425][T20891] logitech 0003:046D:C623.0008: input,hiddev97,hidraw1: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.1-1/input0 [ 1541.156165][T22097] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 1541.167818][T22097] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 1541.244979][T20891] usb 2-1: USB disconnect, device number 3 [ 1541.882379][T14241] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1541.893598][ T306] device bridge_slave_1 left promiscuous mode [ 1541.900295][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.908616][ T306] device bridge_slave_0 left promiscuous mode [ 1541.915397][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.923968][ T306] device veth1_macvtap left promiscuous mode [ 1541.930576][ T306] device veth0_vlan left promiscuous mode [ 1542.185707][T14241] usb 6-1: Using ep0 maxpacket: 16 [ 1542.250260][T22671] APIC base relocation is unsupported by KVM [ 1542.326629][T14241] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1542.344337][T14241] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1542.356285][T14241] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1542.366979][T14241] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1542.381022][T14241] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1542.388278][T14241] usb 6-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1542.398200][T14241] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.407596][T14241] usb 6-1: config 0 descriptor?? [ 1542.846928][T22682] loop3: detected capacity change from 0 to 512 [ 1542.855054][T18969] udevd[18969]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 1542.936110][T14241] logitech-djreceiver 0003:046D:C53A.0009: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.5-1/input0 [ 1542.936517][T22682] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1542.963365][T22682] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1543.208976][T22689] udevd[22689]: open /dev/null failed: Not a directory [ 1543.242639][T20891] usb 6-1: USB disconnect, device number 5 [ 1543.303556][T22632] udevd[22632]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 1543.314203][T22632] udevd[22632]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 1543.746957][T18983] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1543.755979][T18983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1543.765021][T18983] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1543.781686][T18983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1543.792448][T18983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1543.809863][T18983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1543.825255][T18983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1543.957266][T18983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1543.970177][T18983] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1543.978652][T18983] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1544.841333][T12333] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1544.960158][T20812] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1545.231076][T20812] usb 6-1: Using ep0 maxpacket: 8 [ 1545.252834][T12333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1545.264958][T12333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1545.275888][T12333] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1545.285873][T12333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.295590][T12333] usb 4-1: config 0 descriptor?? [ 1545.361194][T20812] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1545.373235][T20812] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1545.383953][T20812] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1545.398635][T20812] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1545.405909][T20812] usb 6-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1545.415834][T20812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.425188][T20812] usb 6-1: config 0 descriptor?? [ 1545.454187][T22729] loop1: detected capacity change from 0 to 512 [ 1545.462380][T18933] udevd[18933]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 1545.525460][T22729] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1545.537898][T22729] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1545.602284][T18933] udevd[18933]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 1545.613024][T18933] udevd[18933]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 1545.817271][T12333] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1545.825144][T12333] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1545.832815][T12333] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1545.840470][T12333] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1545.848091][T12333] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1545.855732][T12333] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1545.863402][T12333] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1545.871862][T12333] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1545.947533][T20812] input: HID 046d:c623 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:046D:C623.000B/input/input17 [ 1546.035381][T20812] logitech 0003:046D:C623.000B: input,hiddev96,hidraw1: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.5-1/input0 [ 1546.044310][T12333] cp2112 0003:10C4:EA90.000A: Part Number: 0x00 Device Version: 0x00 [ 1546.067328][T22733] udevd[22733]: open /dev/null failed: Not a directory [ 1546.748397][T12333] cp2112 0003:10C4:EA90.000A: error reading lock byte: -71 [ 1546.758299][T12333] usb 4-1: USB disconnect, device number 4 [ 1546.767731][T22739] udevd[22739]: open /dev/null failed: Not a directory [ 1547.703939][T22751] ip_tables: iptables: counters copy to user failed while replacing table [ 1547.789115][T22763] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1548.071005][T18936] usb 6-1: USB disconnect, device number 6 [ 1549.349435][T13084] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1549.761337][T13084] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 1549.773461][T13084] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1549.956618][T13084] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1549.966555][T13084] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.975517][T13084] usb 4-1: Product: syz [ 1549.980103][T13084] usb 4-1: Manufacturer: syz [ 1549.985148][T13084] usb 4-1: SerialNumber: syz [ 1550.260756][T22787] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1550.975317][T22787] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1551.224448][T13084] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1551.231614][T13084] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1551.239739][T13084] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1551.452039][T13084] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 1551.475342][T13084] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 1551.489837][T13084] usb 4-1: USB disconnect, device number 5 [ 1551.496540][T13084] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 1551.505729][ T30] audit: type=1400 audit(2000525284.059:3619): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1551.990334][T22831] ip_tables: iptables: counters copy to user failed while replacing table [ 1554.670619][T22852] loop7: detected capacity change from 0 to 128 [ 1554.679176][T22632] udevd[22632]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1554.716284][T22852] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1554.729511][T22852] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1554.943191][T22632] udevd[22632]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1554.954667][T22632] udevd[22632]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1555.277687][T14241] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1555.667946][T14241] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 1555.680004][T14241] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1555.862999][T14241] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1555.872950][T14241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.881734][T14241] usb 2-1: Product: syz [ 1555.886300][T14241] usb 2-1: Manufacturer: syz [ 1555.891317][T14241] usb 2-1: SerialNumber: syz [ 1556.156541][T22858] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1558.360563][T22878] ip_tables: iptables: counters copy to user failed while replacing table [ 1559.439438][T14241] cdc_ncm 2-1:1.0: bind() failure [ 1559.445914][T14241] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1559.454744][T14241] cdc_ncm 2-1:1.1: bind() failure [ 1559.466613][T14241] usb 2-1: USB disconnect, device number 4 [ 1559.477164][T22886] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1559.589059][T22900] xt_hashlimit: size too large, truncated to 1048576 [ 1561.423896][T22912] loop1: detected capacity change from 0 to 256 [ 1561.431986][T22632] udevd[22632]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 1561.479542][T22912] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1561.555871][T22632] udevd[22632]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 1561.567597][T22632] udevd[22632]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 1563.418031][T22929] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1563.430609][T22928] FAULT_INJECTION: forcing a failure. [ 1563.430609][T22928] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1563.445448][T22928] CPU: 0 PID: 22928 Comm: syz.1.6796 Tainted: G W syzkaller #0 [ 1563.455185][T22928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1563.466231][T22928] Call Trace: [ 1563.469812][T22928] [ 1563.473008][T22928] __dump_stack+0x21/0x30 [ 1563.477745][T22928] dump_stack_lvl+0x110/0x170 [ 1563.482856][T22928] ? show_regs_print_info+0x20/0x20 [ 1563.488544][T22928] dump_stack+0x15/0x20 [ 1563.493082][T22928] should_fail+0x3ab/0x500 [ 1563.497911][T22928] should_fail_alloc_page+0x55/0x80 [ 1563.503629][T22928] prepare_alloc_pages+0x13f/0x590 [ 1563.509230][T22928] ? __alloc_pages_bulk+0xab0/0xab0 [ 1563.514917][T22928] ? pcpu_chunk_refresh_hint+0x7f0/0x940 [ 1563.521086][T22928] __alloc_pages+0x11d/0x460 [ 1563.526133][T22928] ? zone_watermark_fast+0x250/0x250 [ 1563.531919][T22928] ? pcpu_block_update_hint_alloc+0x8b5/0xc50 [ 1563.538559][T22928] pcpu_populate_chunk+0x184/0xcb0 [ 1563.544151][T22928] ? _find_next_bit+0x106/0x200 [ 1563.549745][T22928] pcpu_alloc+0xc8c/0x16f0 [ 1563.554583][T22928] __alloc_percpu_gfp+0x25/0x30 [ 1563.559904][T22928] bpf_map_alloc_percpu+0xc5/0x150 [ 1563.565590][T22928] htab_map_alloc+0xc32/0x15d0 [ 1563.570850][T22928] map_create+0x3f4/0x1fa0 [ 1563.575675][T22928] __sys_bpf+0x2ff/0x7d0 [ 1563.580306][T22928] ? bpf_link_show_fdinfo+0x330/0x330 [ 1563.586183][T22928] ? __kasan_check_write+0x14/0x20 [ 1563.591789][T22928] ? switch_fpu_return+0x15d/0x2c0 [ 1563.597380][T22928] __x64_sys_bpf+0x7c/0x90 [ 1563.602221][T22928] x64_sys_call+0x4b9/0x9a0 [ 1563.607165][T22928] do_syscall_64+0x4c/0xa0 [ 1563.611994][T22928] ? clear_bhb_loop+0x50/0xa0 [ 1563.617119][T22928] ? clear_bhb_loop+0x50/0xa0 [ 1563.622228][T22928] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1563.628677][T22928] RIP: 0033:0x7fa633639559 [ 1563.633517][T22928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1563.655066][T22928] RSP: 002b:00007fa632091028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1563.664295][T22928] RAX: ffffffffffffffda RBX: 00007fa6338bffa0 RCX: 00007fa633639559 [ 1563.673032][T22928] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 4400000000000000 [ 1563.681784][T22928] RBP: 00007fa6336d0b20 R08: 0000000000000000 R09: 0000000000000000 [ 1563.690526][T22928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1563.699276][T22928] R13: 00007fa6338c0038 R14: 00007fa6338bffa0 R15: 00007ffeea9f8718 [ 1563.708033][T22928] [ 1565.738937][T22951] loop7: detected capacity change from 0 to 256 [ 1565.747959][T22632] udevd[22632]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1565.830362][T22951] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1566.047983][T22632] udevd[22632]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1566.076528][T22632] udevd[22632]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1567.924527][T22968] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1567.958975][T22975] FAULT_INJECTION: forcing a failure. [ 1567.958975][T22975] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1567.982663][T22975] CPU: 0 PID: 22975 Comm: syz.7.6812 Tainted: G W syzkaller #0 [ 1567.992430][T22975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1568.003958][T22975] Call Trace: [ 1568.007552][T22975] [ 1568.010759][T22975] __dump_stack+0x21/0x30 [ 1568.015504][T22975] dump_stack_lvl+0x110/0x170 [ 1568.020629][T22975] ? show_regs_print_info+0x20/0x20 [ 1568.026331][T22975] dump_stack+0x15/0x20 [ 1568.030881][T22975] should_fail+0x3ab/0x500 [ 1568.035716][T22975] should_fail_alloc_page+0x55/0x80 [ 1568.041418][T22975] prepare_alloc_pages+0x13f/0x590 [ 1568.047017][T22975] ? __alloc_pages_bulk+0xab0/0xab0 [ 1568.052709][T22975] ? pcpu_chunk_refresh_hint+0x7f0/0x940 [ 1568.058879][T22975] __alloc_pages+0x11d/0x460 [ 1568.063905][T22975] ? zone_watermark_fast+0x250/0x250 [ 1568.069695][T22975] ? pcpu_block_update_hint_alloc+0x8b5/0xc50 [ 1568.076344][T22975] pcpu_populate_chunk+0x184/0xcb0 [ 1568.082039][T22975] ? _find_next_bit+0x106/0x200 [ 1568.087356][T22975] pcpu_alloc+0xc8c/0x16f0 [ 1568.092199][T22975] __alloc_percpu_gfp+0x25/0x30 [ 1568.097544][T22975] bpf_map_alloc_percpu+0xc5/0x150 [ 1568.103148][T22975] htab_map_alloc+0xc32/0x15d0 [ 1568.108368][T22975] map_create+0x3f4/0x1fa0 [ 1568.113204][T22975] __sys_bpf+0x2ff/0x7d0 [ 1568.117868][T22975] ? bpf_link_show_fdinfo+0x330/0x330 [ 1568.123752][T22975] ? __kasan_check_write+0x14/0x20 [ 1568.129351][T22975] ? switch_fpu_return+0x15d/0x2c0 [ 1568.134956][T22975] __x64_sys_bpf+0x7c/0x90 [ 1568.139787][T22975] x64_sys_call+0x4b9/0x9a0 [ 1568.144745][T22975] do_syscall_64+0x4c/0xa0 [ 1568.149581][T22975] ? clear_bhb_loop+0x50/0xa0 [ 1568.154725][T22975] ? clear_bhb_loop+0x50/0xa0 [ 1568.159847][T22975] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1568.166326][T22975] RIP: 0033:0x7f5b9fd30559 [ 1568.171159][T22975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1568.192702][T22975] RSP: 002b:00007f5b9e788028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1568.201935][T22975] RAX: ffffffffffffffda RBX: 00007f5b9ffb6fa0 RCX: 00007f5b9fd30559 [ 1568.210685][T22975] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 4400000000000000 [ 1568.219436][T22975] RBP: 00007f5b9fdc7b20 R08: 0000000000000000 R09: 0000000000000000 [ 1568.228180][T22975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1568.236922][T22975] R13: 00007f5b9ffb7038 R14: 00007f5b9ffb6fa0 R15: 00007fff29693bf8 [ 1568.245685][T22975] [ 1568.337568][T22985] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1568.398192][T22969] loop1: detected capacity change from 0 to 40427 [ 1568.406322][T22632] udevd[22632]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 1568.435601][T22969] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1568.444228][T22969] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1568.601428][T22969] F2FS-fs (loop1): invalid crc value [ 1568.609782][T22969] F2FS-fs (loop1): invalid crc value [ 1568.615816][T22969] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 1568.697450][T22632] udevd[22632]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 1568.709808][T22632] udevd[22632]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 1570.611616][T22998] kvm [22991]: vcpu0, guest rIP: 0x9143 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1570.628662][T22998] kvm [22991]: vcpu0, guest rIP: 0x9143 disabled perfctr wrmsr: 0xc2 data 0x0 [ 1570.640687][T22998] kvm [22991]: vcpu0, guest rIP: 0x9143 ignored wrmsr: 0x11e data 0xbe702111 [ 1571.003771][T13084] usb 6-1: new high-speed USB device number 7 using dummy_hcd SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=6705 state=3 status=67 (errno 9: Bad file descriptor) [ 1571.155016][ T30] audit: type=1400 audit(2000525302.162:3620): avc: denied { write } for pid=277 comm="syz-executor" path="pipe:[393]" dev="pipefs" ino=393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1571.458612][T13084] usb 6-1: device descriptor read/all, error -71 [ 1572.395217][T18983] device bridge_slave_1 left promiscuous mode [ 1572.401974][T18983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.410059][T18983] device bridge_slave_0 left promiscuous mode [ 1572.416873][T18983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.425289][T18983] device bridge_slave_1 left promiscuous mode [ 1572.431973][T18983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.440121][T18983] device bridge_slave_0 left promiscuous mode [ 1572.446913][T18983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.455260][T18983] device bridge_slave_1 left promiscuous mode [ 1572.462029][T18983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.470081][T18983] device bridge_slave_0 left promiscuous mode [ 1572.476765][T18983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.485394][T18983] device bridge_slave_1 left promiscuous mode [ 1572.492169][T18983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.500331][T18983] device bridge_slave_0 left promiscuous mode [ 1572.507015][T18983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.516159][T18983] device veth1_macvtap left promiscuous mode [ 1572.522823][T18983] device veth0_vlan left promiscuous mode [ 1572.529245][T18983] device veth1_macvtap left promiscuous mode [ 1572.535873][T18983] device veth0_vlan left promiscuous mode [ 1572.542540][T18983] device veth1_macvtap left promiscuous mode [ 1572.549106][T18983] device veth0_vlan left promiscuous mode [ 1572.555688][T18983] device veth1_macvtap left promiscuous mode [ 1572.562259][T18983] device veth0_vlan left promiscuous mode