last executing test programs: 6.91445486s ago: executing program 2 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='sysfs\x00', 0x800000, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @local}, 0x2}}, 0x2e) getsockopt(r3, 0x111, 0x8c43, 0x0, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',afid=0x0000040000000011,']) 6.91416471s ago: executing program 2 (id=117): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x52fa, @remote, 0x7ff}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x886, &(0x7f0000000100)={0x2, 0x6e22, @multicast1}, 0x4f) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000000)=0x3, 0x4) readv(r3, &(0x7f0000001340)=[{&(0x7f0000000240)=""/67, 0x43}], 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) writev(r2, &(0x7f0000000140), 0x0) 6.832464202s ago: executing program 2 (id=118): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) dup(r3) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = socket(0x10, 0x80003, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0xc8, 0x8, 0x1b0, 0x5803, 0x278, 0x2e8, 0x2e8, 0x278, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast2, @empty, [], [], 'nicvf0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xa, 0x2, {0xd, "00db0500000000000001fb4bc81700"}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x2, 0x4, 0x80, 0x1, 0xa2, 0x8}}, {0x4}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) bind$packet(r6, &(0x7f0000000040)={0x11, 0xc, r5, 0x1, 0xc0, 0x6, @local}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fsync(r10) 6.013095765s ago: executing program 0 (id=121): syz_emit_ethernet(0x3b6, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xdb0b, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb04619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f604d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e10090cf6164000000020000000000000000000000ffff008879e66485201a0015ca837c7357a0274500f700"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) syz_usb_connect$uac1(0x2, 0x97, &(0x7f0000000680)=ANY=[@ANYBLOB="12010003000000086b1d01014000010203010902850003016aa0d00904000000010100000a24015dff0a00020102090401000001020000090401010101020000090501094000f0fd800725010c03f680090402000001020000090402010101020000072401040903000b24020100020701a21c3909240202040086bb000a2402026500050005050905820987008010f0079a01"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) 5.919346767s ago: executing program 2 (id=122): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x8, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.890339239s ago: executing program 2 (id=123): r0 = geteuid() syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x24, &(0x7f0000000140)={[{@data_err_abort}, {@noblock_validity}, {@data_err_ignore}, {@errors_remount}, {@lazytime, 0x0}, {@sb={'sb', 0x3d, 0x80000000}}, {@noload}, {@journal_checksum}, {@stripe={'stripe', 0x3d, 0x1b}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@data_ordered}, {@journal_dev={'journal_dev', 0x3d, 0x769}}, {@norecovery}, {@grpid}, {@dax_never}, {@dax_inode}], [{@fowner_lt={'fowner<', r0}}, {@hash}, {@smackfshat={'smackfshat', 0x3d, '\xc6\x92\f\f\xc2\x8d\xafa\bj\xecR]O\xe7\x80\xad\fs*n|\xcf\x97|\'\x06r\x81\xdd\x80*\xd9K\xad\x9b\xe6\x95\xa6\a\xb8Di\xc9\xdc\xd6\xcf\x9f\'L\xc8\x84E$\xce\x84\bp\a\x00N\xacN7\v\x03p\x96\xb2\xcd\x18\x87.\xd2\x81$\x85\xac\xd3\x8fj\xc8\x16\xcf\x16\xaf\xb2\xa5\x8c]\xd9N\x92\x06\xe9\xbd\xd1\x04\xee\xe5U\x91Y\xfa&$z\xb4\xb2J\xcbP\x88\xa5,\xfb\xafS\xef,\xa5\xd7\x12\xbc\x00'/151}}, {@context={'context', 0x3d, 'root'}}, {@measure}], 0x2c}, 0xa, 0x526, &(0x7f00000007c0)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x400) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x101402, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r6 = fsopen(&(0x7f0000000340)='configfs\x00', 0x1) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) unshare(0x60000600) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r8, &(0x7f0000000280)={0x2, 0x5e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a00010100000009040000170202000005241a00000524"], 0x0) 4.463777737s ago: executing program 4 (id=127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, &(0x7f00000002c0), 0x6, 0x0) syz_io_uring_setup(0x5a0a, &(0x7f0000000280)={0x0, 0x446b, 0x1100, 0x3, 0x2083}, 0x0, 0x0, 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x2, 0x12, r4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x2a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c000180050001"], 0xbc}}, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) munmap(&(0x7f0000fec000/0x3000)=nil, 0x3000) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f00000003c0)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4.094685288s ago: executing program 4 (id=129): r0 = syz_ublk_setup_io_uring(0x7568, &(0x7f0000000000)={0x0, 0xa6ae, 0x20c0, 0x1, 0x392}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) r1 = syz_clone(0x802000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, 0x0, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(r1, 0x7, &(0x7f0000000080)=0x8) r2 = getpid() r3 = syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000300)='./file0\x00', 0x1248b78, &(0x7f0000000000), 0x82, 0x4ad, &(0x7f0000000b40)="$eJzs3M1rXFUbAPDn3knSvv3Mq1XbWjRaxOBH0qRVu3AjKLioKOii6iomaSlNG2kimFJsFKkbQQq6VpeCf4E7N4KuBMGV7lxIoWg3reJi5M7c285M5ubLJJN2fj+Y9pw59845z5x75557TmYC6FoD2T9JxI6I+CUidtezzRsM1P+7ce3C+F/XLownUa2++kdS2+76tQvjxabFftvzzGAakX6Y5JU0m5k7f3psamryXJ4fnj3z9vDM3PknT50ZOzl5cvLs6NGjRw6PPPP06FNrEmcW1/X9700f2Pfi65dfGj9++a3vv87auyMvb4xjVfoWPjWQBf5ntaa17JH433+qbrPZ2ZBOejrYEFakEhFZd/Vm53+1Wr3YULY7XvggT/aW7L59A5oIrJPs2rSlIV9cxvLr4ny1VLJoKXA7SKLTLQA6o7juZ/e/xWPRAUNlXYYhHXP1ufoNUBb3jfxRL+mJNN+mt+X+di0NRMTx+b8/zx6xFvMQAABL+Hj8s2PxRLvxXxr3Nmy3K19D6Y+I/0fEXRFxd0TsiYh7Imrb3hcRe5dTacMCQevS0MLxT3pl9dEtLRv/PZuvbTWP/4rRX/RX8tzOWvy9yYlTU5OH8vdkMHq3ZPmRRer49vmfPikraxz/ZY+s/mIsmLfjSs+W5n0mxmbHSmfkV+jq+xH7e+KfarXaEn8SRS8lEbEvIvav7KV3FfcKpx776kDZRkvHf+vlFliDdabqlxGP1vt/PlriLyQL1yf7dt5anxzeGlOTh4aLo2KhH3689EpZ/cuPf31k/b+t+fjPS76YyxP9bzau185EycrljtI6Lv36Ufaebm1Xttrjvy95rfZ5VMxXvzs2O3tuJKIvOVbLNz0/emvfIl9sn8U/eDArKeIv9kxrn3GR9//9EXEgv/19ICIezNv+UEQ8HBEHS6OP+G2Rss3Q/xMN/Z9E6/G/N7/1Lfp/bsWJyunvvimrvyT+hkMs6/8jtdRg/kzt828Jy23g6t85AAAAuH2ktZmbJB26mU7ToaH6H/buiW3p1PTM7OMnpt85O1Gf4emP3rSY6drdMB86ksznr1jPj+ZzxUX54Xze+NNK1PJD49NTEx2OHbrd9pLzP/P7Hfa3PkAb7dbRRtt8oQ2487Se/2lz9uLLC/Zou5YL3IZ8Xxu61xLnf7pR7QA2nus/dK925//Flry1ALgDpS0/+Ad0FeN/6F7Of+he9fP/5pp+JX7uZGuADbKKr/N3b6KyOZqxORKRbopmLCux/N+DWO/EG5ujGctIdPqTCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYG38GwAA//8MterI") chdir(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat(r3, &(0x7f00000008c0)='./file0\x00', 0x1c742, 0x3a) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000880)={0x17c04, 0xffffffffffffffff, 0x6, 0x55e, 0x5, 0xd0c2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="00425076474fd3225e511e9b6e3c7e4c446a2a07c9fadc47fa7123099fd7d594e73908973bdbe8"], 0x1, 0x1530, &(0x7f0000006800)="$eJzs3AucjdX6OPDnWWu9Y0jaTXIZ1lrPy04uiyTJJUkuSZIkSW4JSZMcSUgMuSUNSUguQ5JbSC4Tk8b9fr8kJEmTJLnllqz/Z2L+6tT5n3N+dfL7n3m+n8/+WM9e+1nv884ze++13xnzbechNRrVrNqAiOAPwYv/JAJALAAMAIBrACAAgLJxZeMy5rNLTPxjB2F/roemXukK2JXE/c/auP9ZG/c/a+P+Z23c/6yN+5+1cf+zNu4/Y1nZpmn5r+Vb1r3x9f+sjN///4uklxzz5ZqS13cBiPlXU7j////DP5DL/f+vFfwrD+L+Z23c/6wq9koXwP4X4Od/VpDtH85w/7M27j9jWdkvrwXHwpW/Hv1X3yDyn/wZiO958at85c/zH54/Y4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDH2FzjjL1MAkDm+0nUxxhhjjDHGGGPsz+OzXekKGGOMMcYYY4wx9p+HIECCggBiIBvEQnbIAQIgJnP+WoiD6yA3XA95IC/kg/wQDwWgIGgwYIEghEJQGKJwAxSBG6EoFIPiUAIclIRScBOUhpuhDNwCZeFWKAe3QXmoABWhEtwOleEOqAJ3QlW4C6pBdagBNeFuqAX3QG24F+rAfVAX7od68ADUhwehATwEDeFhaASPQGN4FJpAU2gGzaHF/yj/BegOL0IP6AmJ0At6w0vQB/pCP+gPA+BlGAivwCB4FZJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg2QYDxPgbZgI78AkeBcmwxSYCtNgOrwHM2AmzIL3YTZ8AHNgLsyD+ZACH8ICWAip8BEsgo8hDRbDElgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW2ArbYDvsgE9gJ3wKu2A37IHPYC98/m/mn/67/C4ICChQoEKFMRiDsRiLOTAH5sScmAtzYQQjGIdxmBtzYx7Mg/kwH8ZjPBbEgmjQICFhISyEUYxiESyCRbEoFsfi6NBhKSyFpfFmLINlsCyWxXJYDstjBayAlbASVsbKWAWrYFWsitWwGtbAGng33o29sDbWxjpYB+ti3czLU9gAG2BDbIiNsBE2xsbYBJtgM2yGLbAFtsSW2ApbYRtsg22xLbbDdpiACdge22MH7IAdsSN2wk7YGTtjF+yKXdNfyAb4Ir6IPbGa6IW9sTf2waRs/bA/9seXcSC+gq/gq5iEg3EIvoav4es4DE/h8AsjcCSOxMriLRyNY5DEOEzGZJyAE3AiTsRJ+C6+i1NwKk7D6TgdZ+BMnInv42z8AD/AuTgX52MKpuACXIipmIqL8DSm4WJcgktxGS7HZbgSV+FKXINrcQ2ux/W4ETfiZtyMW3Erbsft+AkqAPwUd+NuTMK9uBf34T7cj/vxAB7AdEzHg3gQD+EhPIyH8QgewaN4DI/jMTyJJ/EUnsYzeAbP4Tk8j8/Ff93wk2Krk0BkUEKJGBEjYkWsyCFyiJwip8glcomIiIg4ESdyi9wij8gj8ol8Il7Ei4KioDDCCBJhxiuFiIqoKCKKiKKiqCguigsnnCglSonSorQoI8qIsuJWUU7cJsqLCqK1qyQqicqijasi7hRVRVVRTVQXNURNUVPUErVEbVFb1BF1RF1RV9QTD4j6ohf2w4dERmcaicHYWAzBJqKpkJdeoVqKYdhKtBZtxBNiBA7HdqKlSxBPi/ZiNHYQfxNj8FnRSYzDzuJ50UV0Fd3EC6K7aOV6iJ5iEvYSvcUU7CP6in6iv5iB1cX7ODt7DfGqSBKDxRDxmpiPr4th4g0xXIwQI8WbYpR4S4wWY8RYMU4ki/FignhbTBTviEniXTFZTBFCTBPTxXtihpgpZon3xWzxgZgj5op5Yr5IER+KBWKhSBUfiUXiY5EmFoslYqlYJpaLFWKlWCVWizVirVgn1osNYqPYJDaLLWKr2Ca2ix3iE7FTfCp2id1ij/hM7BWfi33iC7FffCkOiK9EuvhaHBTfiEPiW3FYfCeOiO/FUXFMHBcnxEnxgzglTosz4qw4J34U58VP4oLwAiRKIaVUMpAxMpuMldllDnmVzCmDzNd/GSevk7nl9TKPzCvzyfwyXhaQBaWWRlpJMpSFZGEZlTfIIvJGWVQWk8VlCelkSVlK3iRLy5tlGXmLLCtvleXkbbK8rCArykrydllZ3iEhcvEY1WR1WUPWlHfLRLhH1pb3yjryPllX3i/ryQdkffmgbCAfkg3lw7KRfEQ2lo/KJrKpbCabyxbyMdlSPi5bydayjXxCtpVPynbyKZkgn5btpb/0LfKs7CSfk53l87KL7Cq7yZ/kBellD9lTQi+QveVLso/sK/vJ/nKAfFkOlK/IQfJVmSQHyyHyNTlUvi6HyTfkcDlCjpRvylHyLTlajpFj5TiZLMfLCfJtOVG+IyfJd+VkOUVOldNkv0srzZLyn+a//Tv5g34++ka5SW6WW+RWuU1ulzvkJ3Kn3Cl3yV1yj9wj98q9cp/cJ/fL/fKAPCDTZbo8KA/KQ/KQPCwPyyPyiDwqj8mz8oQ8KX+Qp+RpeVqelefkOXn+0tcAFCqhpFIqUDEqm4pV2VUOdZXKqa5WudQ1KqKuVXHqOpVbXa/yqLwqn8qv4lUBVVBpZZRVpEJVSBVWUXUDXvqGUcVVCeVUSVVK3fTv5Ksi6kZVVBX7VX5mfYn/oL4WqoVqqVqqVqqVaqPaqLaqrWqn2qkElaDaq/aqg+qgOqqOqpPqpDqrzqqL6qK6qW6qu+queqgeKlElqt7qJdVH9VX9VH81QL0sMs5hkBqkklSSGqKGqKFqqBqmhqnhargaqUaqUWqUGq1Gq7FqrEpWyWqCmqAmqolqkpqkJqvJaqqaqqar6WqGmqFmqVlqtpqt5qg5ap6ap1JUilqgFqhUlaoWqUUqTS1Wi9VStVQtV8vVSrVSrVar1Vq1Vq1X61Wa2qQ2qS1qi9qmtqkdaofaqXaqXWqX2qP2qL1qr9qn9qn9ar86oA6odJWuDqqD6pA6pA6rw+qIOqKOqqPquDquTqqT6pQ6pc6oM+qcOqfOq/PqgrqQse0LRCACFaggJogJYoPYIEeQI8gZ5AxyBbmCSBAJ4oK4IHdwfZAnyBvkC/IH8UGBoGCgAxPYQFxqejS4ISgS3BgUDYoFxYMSgQtKBqWCm4LSwc1BmeCWoGxwa1AuuC0oH1QIKgaVgtuDysEdQZXgzqBqcFdQLage1AhqBncHtYJ7gtrBvUGd4L6gbnB/UC94IKgfPBg0CB4KGgYPB42CR4LGwaNBk6Bp0CxoHrT4U9f3/lTex10P3VMn6l66t35J99F9dT/dXw/QL+uB+hU9SL+qk/RgPUS/pofq1/Uw/YYerkfokfpNPUq/pUfrMXqsHqeT9Xg9Qb+tJ+p39CT9rp6sp+ipepqert/TM/RMPUu/r2frD/QcPVfP0/N1iv5QL9ALdar+SC/SH+s0vVgv0Uv1Mr1cr9Ar9Sq9Wq/Ra/U6vV5v0Bv1Jr1Zb9Fb9Ta9Xe/Qn+id+lO9S+/We/Rneq/+XO/TX+j9+kt9QH+l0/XX+qD+Rh/S3+rD+jt9RH+vj+pjuow+oU/qH/QpfVqf0Wf1Of2jPq9/0he0z9jcZ7y9G2WUiTExJtbEmhwmh8lpcppcJpeJmIiJM3Emt8lt8pg8Jp/JZ+JNvCloCpoMZMgUMoVM1ERNEVPEFDVFTXFT3DjjTClTypQ2pU0ZU8aUNWVNOVPOlDflTUVT0dxubjd3mDvMneZOc5e5y1Q31U1NU9PUMrVMbVPb1DF1TF1T19Qz9Ux9U980MA1MQ9PQNDKNTGPT2DQxTUwz08y0MC1MS9PStDKtTBvTxrQ1bU07084kmATT3rQ3HUwH09F0NJ1MJ9PZdDZdTBfTzXQz3U1308P0MIkm0fQ2vU0f08f0M/3MADPADDQDzSAzyCSZJDPEDDFDzVAzzAwzw80IMzJjo2reMqPNGDPWjDPJJtlMMBPMRDPRTDKTzGQz2Uw1U810M93MMDPMLDPLzDazzRwzx8wz80yKSTELzAKTalLNIrPIpJk0s8QsMcvMMrPCrDCrzCqzxqwx62Cd2WA2mE1mk9litphtZpvZYXaYnWan2WV2mT1mj9lr9pp9Zp/Zb/abA+aASTfp5qA5aA6ZQ+awOWyOmCPmqDlqjpvj5qQ5aU6ZU+aMOWPOmbyX3i+9ibXZbQ57lc1pr7a57DX27+N8Nr+NtwVsQattHpv3V7Gx1ha1xWxxW8I6W9KWsjf9Ji5vK9iKtpK93Va2d9gqv4lr2XtsbXuvrWPvszXt3b+K69r7bT37iK2PCGCb2oa2uW1kH7GN7aO2iW1qm9nmtq190razT9kE+7Rtb5/5TbzALrSr7Gq7xq61u+xue8aetYfst/ac/dH2sD3tAPuyHWhfsYPsqzbJDv5NPNK+aUfZt+xoO8aOteN+E0+2U+xUO81Ot+/ZGXbmb+IU+6GdbVPtHDvXzrPzf44zakq1H9lF9mObZgNYYpfaZXa5XWFX/t9al9r1doPdaHfaT+0Wu9Vus9vtjsyNsN1t99jP7F77uT1ov7H77Zf2gD1s0+3XP8cZ53fYfmeP2O/tUXvMHrcn7En7g8rMzjj3E/Yne8F6C4QEJElRQDGUjWIpO+WgqygnXU256BqK0LUUR9dRbrqe8lBeykf5KZ4KUEHSZMgSUUiFqDBF6QbKLK84lSBHJakU3USl6WYqQ7dQWbqVytFtVJ4qUEWqRLdTZbqDqtCdVJXuompUnWpQTbqbatE9VJvupTp0H9Wl+6kePUD16UFqQA9RQ3qYGtEj1JgepSbUlJpRc2pBj1FLepxaUWtqQ09QW3qS2tFTlEBPU3t6hjrQ36gjPUud6DnqTM9TF+pK3egF6k4vUg/qSYnUi3rTS9SH+lI/6k8D6GUaSK/QIHqVkmgwDaHXaCi9TsPoDRpOI2gkvUmj6C0aTWNoLI2jZBpPE+htmkjv0CR6lybTFJpK02g6vUczaCbNovdpNn1Ac2guzaP5lEIf0gJaSKn0ES2ijymNFtMSWkrLaDmtoJW0ilbTGlpL62g9baCNtIk20xbaSttoO+2gT2gnfUq7aDftoc9oL31O++gL2k9f0gH6itLpazpI39Ah+pYO03e+J31PR+kYHacTdJJ+oFN0ms7QWTpHP9J5+okukCcIMRShDFUYhDFhtjA2zB7mCK8Kc4ZXh7nCa8JIeG0YF14X5g6vD/OEecN8Yf4wPiwQFgx1aEIbUhiGhcLCYTS8ISwS3hgWDYuFxcMSoQtLhqXCm8LS4c1hmfCWsGx4a1guvC0sH1YIH7mvUnh7WDm8I6wS3hlWDe8Kq4XVwxphzfDusFZ4T1g7vDesE94XlgnvD+uFD4T1wwfDBuFDYcPw4bBR+EjYOHw0bBI2DZuFzcMW4WNhy/DxsFXYOmwTXhW2DZ8M24VPhQnh02H78Jmf5+9fmDn/xG/mE8NeYe/wpfCl0Pt75bzo/GhK9MPogujCaGr0o+ii6MfRtOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3NbOBQyecdMoFLsZlc7Euu8vhrnI53dUul7vGRdy1Ls5d53K7610el9flc/ldvCvgCjrtjLOOXOgKucIu6m5wRdyNrqgr5oq7Es65kq6Ua+5auBaupXvctXKtXRv3hHvCPemedE+5p9zTrr17xnVwf3Md3bOuk3vOPeeed11cV9fNveC6u/G5Lj4nE11v19v1cX1cP9fPDXAD3EA30A1yg1ySS3JD3BA31A11w9wwN9wNdyPdSDfKjXKj3Wg31o11yS7ZTXAT3EQ30U1yk9xkN9lNdVPddDfdzXAzXOWZF48yx81x89w8l+JS3AKXsWdMdYvcIpfm0twSt8Qtc8vcCrfCrXKr3Bq3xq1z69wGt8FtcpvcFrfFbXPb3A63w+10O90uf83FRd1et8/tc/vdfnfAfeXS3dfuoPvGHXLfusPuO3fEfe+OumPuuDvhTrof3Cl32p1xZ90596M7735yF5x3yZHxkQmRtyMTI+9EJkXejUyOTIlMjUyLTI+8F5kRmRmZFXk/MjvyQWROZG5kXmR+JCXyYWRBZGEkNfJRZFHk40haZHFkSWRpZFlkecT7AltCX8gX9lF/gy/ib/RFfTFf3Jfwzpf0pfxNvvTFutO8v9WX87f58r6Cr+gf9U18U9/MN/ct/GO+pX/ct/KtfRv/hG/rn/Tt/FM+wT/t2/tnfAf/N9/RP+s7+ed8Z/+87+K7+m7+Bd/dv+h7+J4+0ffyvf1Lvo/v6/v5/n6Af9kP9K/4Qf5Vn+QH+yH+NT/Uv+6H+Tf8cD/Cj4x504/K/IgM43yyH+8n+Lf9RL8i9uJ9U/xUP81P9+/5GX6mn+Xf97P9B36On+vn+fk+xX/oF/iFPtV/5Bf5j32aX5x50div8Cv9Kr/ar/Fr/Tq/3m/wG/0mv9lv8Vv9Nr/d7/Cf+J3+U7/L7/Z7/Gd+r//c7/Nf+P3+S3/Af+XT/df+oP/GH/Lf+sP+O3/Ef++P+mP+uD/hT/of/Cl/2p/xZ/05/6M/73/yF/j/rDHGGGOM/UvGXx6KX89cvJzf63dyxC8e3BsArt6aP/2X8xk7ynV5Lo77ivif95JP9+z8UOatWrXExMRLj02TEBSeC5D5k6AMP//qwaV4MbSBJyEBWkPp362/r+h6jv7J+tFbAXL8IiejoMz48vpfAGDi76z/2BMjF5QLz8T9P9afC1C08OWc7HA5Xgxtfr6+0hrK/IP687b8J/Vn/zIZoNUvcnLC5fhy/aXgcXgGEn71SMYYY4wxxhhj7KK+omLHzM+fmb/x+Xufz+PV5ZxscDn+Z5/PGWOMMcYYY4wxduU927XbU48lJLTu+O8PqvyPsv7lQWP4T63Mg98deA+QeY8CgD+4IEDGQP6VZ7H5LzlW0qWnzt9PLTvrA/jf0co/Y3CFX5gYY4wxxhhjf7rLm/5f36+uVEGMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxlgW9Ff8ObErfY6MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYlfZ/AgAA//+u9PSY") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x99c455, 0x0, 0x40, 0x0, &(0x7f0000000140)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x8a, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c041) unshare(0x20400) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) unshare(0x22020400) close(r7) 3.836318395s ago: executing program 3 (id=130): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0xb, 0x80, 0xdf, 0xd}, {0x1, 0xfc, 0x5, 0x9c}, {0xf, 0x81, 0x9, 0x1}, {0x0, 0xf0, 0x9, 0x6}]}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) syz_clone(0x48020000, &(0x7f0000000680)="2de54b1aace64994b23c84248b0b19738709caa4ade04ff3382376486a9899a5604488c627db9e3e3495c0720ff4b3155f4ef147b9b7cc0455b4d858bb4af6407ecdd73e00924ba12034146a5cffb19c1a365dc78651076abe2ecaf1478a49b4a24109beb6cde5e74fd6748e25876192a005cdd3fba7d51e9160f822a6cbdd4767bdc76be3866c7f53d55533105da0cd3f4de05734fd9fa427077ea8efb565df6aa438b87bf7248f108539b11244f1f9e1f46cf08030545bf25b1e3d26418639ffe2c989fdd0f9f847222b585452f4b2aed35744fcc21462b68de8b6f21ab3f3a788471e054c3c241d2c69ad", 0xec, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)="b735ae88789224793d80609f04dd82ff208d5caeb156a9a4809941f6816a4be95b09560d536407b5c14fa4df81f363d94a6acdd3fb945a14833124ab92921c2c858549bb77c12a02b97962916846ffc619886b04c54958489f9785d1ab53487688add9492cc9790afd60345b782d963429303042d14c277439bf84e0070afca5608fda8833cfc9e52e99cbd0545d88e38aa90e9369e55fd889c9fb4bb50a1f30897574b80c2a64e341a8936236d833e737db7e7f017ca6ef07cf0360d2026538f1ba136e74511bef64bd") syz_mount_image$ext4(&(0x7f0000000c80)='ext4\x00', &(0x7f0000000c40)='.\x00', 0x14, &(0x7f0000000900)={[{@test_dummy_encryption_v1}, {@resgid}, {@usrquota}, {@nobarrier}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fowner_gt}, {@context={'context', 0x3d, 'root'}}]}, 0x2, 0x5c0, &(0x7f00000000c0)="$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") 3.055540536s ago: executing program 4 (id=131): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000780)={r1, 0x0, 0x0, 0x4}, 0x20) r2 = eventfd2(0x2, 0x800) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r2}) epoll_create1(0x80000) mkdir(0x0, 0xfe7c07a8874f64cc) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r3, &(0x7f0000000700)={0xa, 0x4e20, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2d}, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xfffe}, &(0x7f0000000040)=0x20) read$eventfd(r2, &(0x7f0000000400), 0x8) 3.040177447s ago: executing program 3 (id=132): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) dup(r3) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = socket(0x10, 0x80003, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0xc8, 0x8, 0x1b0, 0x5803, 0x278, 0x2e8, 0x2e8, 0x278, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast2, @empty, [], [], 'nicvf0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xa, 0x2, {0xd, "00db0500000000000001fb4bc81700"}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x2, 0x4, 0x80, 0x1, 0xa2, 0x8}}, {0x4}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) bind$packet(r6, &(0x7f0000000040)={0x11, 0xc, r5, 0x1, 0xc0, 0x6, @local}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fsync(r10) 3.036598397s ago: executing program 0 (id=133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x8, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8, 0xfffffffe}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.945564159s ago: executing program 0 (id=134): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2e}, 0x14) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000004c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840c, &(0x7f0000000440)=ANY=[], 0x1, 0x2f5, &(0x7f0000000040)="$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") 2.945362359s ago: executing program 0 (id=135): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = dup(r1) r3 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x10, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x200000a0}, 0x200480d0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) r7 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000180)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$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") r8 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r8, 0x0, 0x4, 0x8800000) ioctl$FS_IOC_READ_VERITY_METADATA(r7, 0xc0286687, &(0x7f0000000240)={0x1, 0x0, 0x93, &(0x7f0000000080)=""/147}) 2.944487529s ago: executing program 4 (id=136): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x248, 0x228, 0x25a, 0x248, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a}, 0x5002, 0x118, 0x138, 0x52020000, {0x0, 0x6802000000000000}, [@common=@unspec=@limit={{0x48}, {0x28f5c, 0x80000000, 0x8, 0x5, 0x3, 0x0, 0x4}}, @common=@unspec=@state={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@local, @empty, [0x0, 0xff], [0xffffffff], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffe, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0xfffffffe}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000040c0)={0x2020}, 0x2020) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x3, 0x4, @tid=r3}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) timer_create(0x5, 0x0, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) getresuid(&(0x7f0000000080), 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1f) ptrace$setopts(0x4206, 0x0, 0x7, 0x10001d) timer_settime(r4, 0x1, &(0x7f0000002040), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) rt_sigprocmask(0x2, &(0x7f00000000c0)={[0xfffdff0000000000]}, 0x0, 0x8) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x14, 0x4, @tid=r5}, &(0x7f0000000000)=0x0) timer_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) r7 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r7}, &(0x7f0000044000)=0x0) timer_settime(r8, 0x236bd4336e4642df, &(0x7f0000000100)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r9 = gettid() tkill(r9, 0x12) timer_delete(r8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.90476225s ago: executing program 4 (id=137): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x141fe000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) getsockname$inet(r3, &(0x7f0000000c40), &(0x7f0000000c80)=0x10) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="646d61736b3d30303030303030303030303030303030303030347c283072d66c02c86172642c666d5ce5e6bd42db17cdc97261736b3d3030303030303030303030303030303030303030301b30362c00"], 0x1, 0x14d4, &(0x7f00000015c0)="$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") ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/202, 0xca}], 0x1) ioctl$XFS_IOC_FSGEOMETRY(0xffffffffffffffff, 0x8100587e, &(0x7f0000010b80)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ffffff1fb50a00000000000005000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000000340)=ANY=[@ANYBLOB='test_dummy_encryption=v1,checkpoint=disable,noacl,fsync_mode=strict,jqfmt=vfsold,noquota,fsync_mode=posix,usrjquota=ext4\x00,resuid=', @ANYRES64, @ANYRES16], 0x1, 0x105c5, &(0x7f0000000580)="$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") 1.416767171s ago: executing program 2 (id=138): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="05000000020801000000000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000800d00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x80}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000100)={0x0, 0x9, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @empty, @local, @empty, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @multicast]}) syz_emit_ethernet(0x5a, &(0x7f00000001c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @remote, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@canfd={0xd, {{0x3, 0x1, 0x0, 0x1}, 0x31, 0x3, 0x0, 0x0, "ba223a86d7ff2da601cea13a33a5d418439670a6442ae3055d423c7fad3f860f3cef4f70593a3946d4e8c365b3ce48f4b3a2a39cc792f3c0fb6a72c792859d15"}}}}, &(0x7f0000000380)={0x1, 0x2, [0xda8, 0xb38, 0x308, 0xa8c]}) ioctl$TIOCSSOFTCAR(r1, 0x541a, 0xfffffffffffffffd) syz_usb_connect(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x704a2f079d7b8c62}}, {0xd1, &(0x7f00000000c0)=@string={0xd1, 0x3, "9f4205826ed92a2d507b84fed9123afd4035c1850db8eef78bc02d24ae30914896ea0f2c81f124c0d0cfd487e0995d698101bf694b2d905176749398a3f6765cec3de9710c34a242ba4161ebc019029a1c5b6c09a709d2b200c3b3b34e2d6a097558da70717e2ef4d5752ff3d667b1501f900a966b9b066251b2281357de90b084fd523521df5aec7e658c99f71ef9d8ca5bc55a04737d3b1f96787b768a54c00087563e4869d9861e2165342842945fefe25afc86ce9cc0a18b995144b2935ca4dbf48fdfbe98ffbcaa91f469d5af"}}]}) 1.415262671s ago: executing program 3 (id=139): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback, r1}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x34, 0x2, 0x3, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xe02}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xf94e1e3eece9e75c}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x15}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000043000701f5a5f20c521092b4a2b75577186ab791feffff0100000000000000813eec00000000017c000004004201800400dd80000000801c9ac34e9404b6e414aaf4a9d600ca48df56329ef37f2d371255a8d6e4ecd55f880d83334300281f3ade9b8a2c78fa6b"], 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x4) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x4) futex(&(0x7f000000cffc), 0xa, 0x0, 0x0, 0x0, 0x1) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000001400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9ffffff0006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 936.435455ms ago: executing program 1 (id=142): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000003c0)='./bus\x00', 0x2801091, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x56, 0x1c4, &(0x7f00000007c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071180a000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r5, r4, 0x20}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r8, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r9, r6, 0x0, r7}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) bpf$BPF_PROG_QUERY(0x30, &(0x7f0000000180)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00'}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x2, 0x1ac, 0x9, 0x1, 0xfffffffb, 0x2}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x5c}}, 0x20040080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r12, 0x4) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) fcntl$setstatus(r0, 0x4, 0x2400) 846.090597ms ago: executing program 0 (id=143): sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r0, 0x0, 0x4000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500100001000130700000000fcdbdf252000000000000000000000000000000600000094a2c8682bcdbb350000000080024e210002020000001d000000e9aeace33cb6a8e9189b59fd42b603e7a6c463e915a877e0493ecee8b3a98d23bb561275ab19404555db80abbdc3e5bbcddbf0359a01ac7abc1abf6fff644bf91a45a3e26fdb468523128bdd9ddc", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x4010}, 0x48080) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 759.689029ms ago: executing program 1 (id=144): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x8, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8, 0xfffffffe}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 547.290155ms ago: executing program 1 (id=145): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000526) mount$incfs(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x800, 0x0) chdir(&(0x7f0000000040)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x1d4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r2, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) unshare(0x64000600) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002800)=ANY=[@ANYBLOB="14000000220000012bbd6d00fedbdf2500080000"], 0x14}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x6, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f0000000700)={0xa, 0x4e20, 0x8, @mcast1, 0x4efb}, 0x1c) unshare(0x2040400) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) 545.811435ms ago: executing program 4 (id=146): unshare(0x20400) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000d1000c0000000000010000850000002a000000b7c361e9080000000000007b8af8ff00000000b7080000ff0300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000279000/0x4000)=nil, 0x4000}, 0x1}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08000004003400650000042190780a14b673d614140c8308a464e654cfb786060000000200004e214e220451907808b402400394125fa5d2999540fba317d2fda94b7abe2a23271e20398a3911cb899648cf34ccf62c4e6fd567f46d310b5be606afbb954de50281d245388f740f8f6e5f35d2e652cfdc911f204762c1602a389e672f66fd5f81d6e37e8265fab4e7a73f1b7ae16a7ba7fa3ad893d314323f2ac332c96c68004ebda93e5d1657f0210ea2c2199e4d6376ac4349237a56ffd0f5ec528754bc4519d2e652"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x10000}, 0x10}, 0x94) 387.06343ms ago: executing program 3 (id=147): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000780)={r1, 0x0, 0x0, 0x4}, 0x20) r2 = eventfd2(0x2, 0x800) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r2}) r3 = epoll_create1(0x80000) mkdir(0x0, 0xfe7c07a8874f64cc) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r4, &(0x7f0000000700)={0xa, 0x4e20, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000440)={0x30000015}) read$eventfd(r2, &(0x7f0000000400), 0x8) 386.07774ms ago: executing program 3 (id=148): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) r0 = socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071182a000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}, 0xffffffff}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xa}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) r4 = fsopen(&(0x7f0000000040)='sysv\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000140)='-\\({\'\x00', 0x0, r3) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r5, 0x21, 0x0, 0x0) process_mrelease(r5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x3}}, 0x10) syz_emit_ethernet(0xaa, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1, {[@cipso={0x86, 0x6}, @generic={0x0, 0x3, "bf"}, @timestamp={0x44, 0x2c, 0x0, 0x0, 0x0, [0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @end, @lsrr={0x83, 0x2b, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr, @remote, @local, @rand_addr=0x64010101, @remote, @private, @dev, @loopback]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x44) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 344.256941ms ago: executing program 1 (id=149): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d400200000000004704000001ed000062030000000000002f440000000000007a0a00fe00ffffffdb030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 293.922522ms ago: executing program 1 (id=150): r0 = syz_open_dev$loop(&(0x7f0000000280), 0x7f, 0x2002) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000006c0)={r1, 0x400, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffb, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x57fd]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x400) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 177.803656ms ago: executing program 1 (id=151): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x20040880}, 0x4100) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/141, 0x8d}, {&(0x7f00000007c0)=""/4109, 0x100d}, {&(0x7f0000002a00)=""/4, 0x4}], 0x3}, 0xec}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000006ad873"], 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000100)=0x3) 39.617769ms ago: executing program 3 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120110010000000832151d0100000000000109022400010000a0020904000502030084000921010040012218000905010340"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e26, 0xfffffffe, @loopback, 0xa}, 0x1c, 0x0}}], 0x1, 0x200880c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x40004000}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xec47000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000000)={[{@grpquota}, {@nogrpid}, {@mblk_io_submit}]}, 0x1, 0x50c, &(0x7f0000000280)="$eJzs3c9vI1cdAPCvvWvHu5s2aekBELRLW1jQap3E20ZVD6icEEKVED2CtA2JN4pix1HslCasRHrmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLgasbj1EnsJtoknij+fKTRvDfPO9/vS9bvxS+xXwAT625E7EVEOSLejYiZ7HohO+Kt3pE87pP9J8sH+0+WC9HtvvOvQtqeXIuBf5O4k92zEhE//G7ETwon47Z3dteXGo36Vlaf6zQ359o7uw/Wmkur9dX6Rq22uLA4/8bD12sX1teXmuWs9NWP/7j3rZ8laU1nVwb7cZF6XS8dxkncjIjvX0awHNzI+lPOOxGeSjEino+Il9Pn/0zcSL+bAMB11u3ORHdmsA4AXHfFdA2sUKxmawHTUSxWq701vBfidrHRanfuP25tb6z01spmo1R8vNaoz2drhbNRKiT1hbT8Wb12rP4wIp6LiF9O3Urr1eVWYyXPH3wAYILdOTb//3eqN/8DANdcJe8EAICxM/8DwOQx/wPA5DH/A8Dk6c3/t/JOAwAYI6//AWDymP8BYKL84O23k6N7kH3+9cp7O9vrrfcerNTb69Xm9nJ1ubW1WV1ttVbTz+xpnna/Rqu1ufBabL8/++3NdmeuvbP7qNna3ug8Sj/X+1G9lD5qbww9AwBGee6lj/5SSGbkN2+lRwzs5VDKNTPgshXzTgDIzY28EwByY7cvmFzneI1veQCuiSFb9B5ROfoGoWz3kJ93u5edGHBp7n3J+j9MqoH1f38FDBPG+j9MLuv/MLm63cJZ9/yPsz4QALjarPEDI37//3x2/l32y4Efrxx/xIeXmRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcbf39f6vZXuDTUSxWqxHPRMRslAqP1xr1+Yh4NiL+PFWaSuoLOecMAJxX8e+FbP+vezOvTh9pevHOYbEcET/99Tu/en+p09n6U0S58O+p/vXOh9n12vizBwBO15+n0/PAC/lP9p8s949x5vOP70REpRf/YL8cB4fxb8bN9FyJUkTc/k8hq/cUBtYuzmPvg4j44rD+F2I6XQPp7Xx6PH4S+5mxxi8eiV9M23rn5GvxhaO37V5AanDtfZSMP28Ne/4V4256Hv78r6Qj1Pll419yq+WDdAz8LH5//LsxYvy7e9YYr/3he73SrZNtH0R8+WZEP/bBwPjTj18YEf/VM8b/61defHlUW/c3EfdiePzBWHOd5uZce2f3wVpzabW+Wt+o1RYXFuffePh6bS5do54bPRv88837z45qS/p/e0T8yin9//oZ+//b/7/7o699TvxvvjIsfjFe+Jz4yZz4jTPGX7r9+8qotiT+yoj+n/b9v3/G+B//bffEtuEAQH7aO7vrS41GfUvhEgv9n2Uv4oal/LuTXyH5Il6BNE4WymNMrBzDm37xSu9/2bGmbvepYo0aMS5i1Q24Cg6f9BHxv7yTAQAAAAAAAAAAAAAAhhrHO5by7iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADX16cBAAD//1NK0EI=") socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 0s ago: executing program 0 (id=153): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getdents64(r0, &(0x7f0000000240)=""/243, 0xf3) setxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts. [ 23.632954][ T30] audit: type=1400 audit(1791067855.908:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.636770][ T277] cgroup: Unknown subsys name 'net' [ 23.655748][ T30] audit: type=1400 audit(1791067855.908:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.683064][ T30] audit: type=1400 audit(1791067855.938:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.683529][ T277] cgroup: Unknown subsys name 'devices' [ 23.856742][ T277] cgroup: Unknown subsys name 'hugetlb' [ 23.862383][ T277] cgroup: Unknown subsys name 'rlimit' [ 24.004602][ T30] audit: type=1400 audit(1791067856.278:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.028333][ T30] audit: type=1400 audit(1791067856.288:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.051634][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.053975][ T30] audit: type=1400 audit(1791067856.288:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.085045][ T30] audit: type=1400 audit(1791067856.338:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.103179][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.111372][ T30] audit: type=1400 audit(1791067856.338:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.145096][ T30] audit: type=1400 audit(1791067856.368:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.170850][ T30] audit: type=1400 audit(1791067856.368:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.752548][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.759704][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.767543][ T286] device bridge_slave_0 entered promiscuous mode [ 24.788143][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.795356][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.802846][ T289] device bridge_slave_0 entered promiscuous mode [ 24.809635][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.816867][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.824240][ T286] device bridge_slave_1 entered promiscuous mode [ 24.849826][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.856949][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.864500][ T289] device bridge_slave_1 entered promiscuous mode [ 24.919456][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.926795][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.934257][ T287] device bridge_slave_0 entered promiscuous mode [ 24.944042][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.951153][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.958624][ T287] device bridge_slave_1 entered promiscuous mode [ 24.977256][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.984331][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.991878][ T285] device bridge_slave_0 entered promiscuous mode [ 25.014221][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.021356][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.028908][ T285] device bridge_slave_1 entered promiscuous mode [ 25.052625][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.059789][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.067258][ T288] device bridge_slave_0 entered promiscuous mode [ 25.074475][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.081598][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.089095][ T288] device bridge_slave_1 entered promiscuous mode [ 25.210776][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.217880][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.225221][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.232258][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.250477][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.257584][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.264906][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.271968][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.310940][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.318037][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.325380][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.332424][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.347528][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.355923][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.363838][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.370927][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.401189][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.408285][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.415626][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.422669][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.433127][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.440870][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.448091][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.455639][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.462836][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.470109][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.477312][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.484743][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.491978][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.499455][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.508093][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.515867][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.527006][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.551300][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.559573][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.566794][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.574223][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.583022][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.590243][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.605006][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.613063][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.621130][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.629212][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.637723][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.644777][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.667625][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.677364][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.685682][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.692713][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.700240][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.709228][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.716375][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.723832][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.732279][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.739688][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.748090][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.756495][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.763540][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.771221][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.779587][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.787690][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.795867][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.803228][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.828629][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.837187][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.846054][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.853499][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.861432][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.869938][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.878182][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.886465][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.894960][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.903244][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.911527][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.918571][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.929895][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.938079][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.957562][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.965195][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.973877][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.982619][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.991443][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.998545][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.006147][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.016078][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.024073][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.032363][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.040527][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.048661][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.058137][ T286] device veth0_vlan entered promiscuous mode [ 26.065254][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.073597][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.085656][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.094098][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.110329][ T286] device veth1_macvtap entered promiscuous mode [ 26.119580][ T285] device veth0_vlan entered promiscuous mode [ 26.132975][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.141467][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.149878][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.158005][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.166190][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.174361][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.182934][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.191541][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.199226][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.209385][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.217800][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.229086][ T289] device veth0_vlan entered promiscuous mode [ 26.243398][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.251638][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.260049][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.269246][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.278612][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.287120][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.295778][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.303327][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.318028][ T287] device veth0_vlan entered promiscuous mode [ 26.327163][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.336347][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.344222][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.352815][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.360529][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.373388][ T285] device veth1_macvtap entered promiscuous mode [ 26.387450][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.396470][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.397765][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 26.406136][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.419219][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.427952][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.437161][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.447856][ T289] device veth1_macvtap entered promiscuous mode [ 26.460231][ T288] device veth0_vlan entered promiscuous mode [ 26.467237][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.475557][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.483369][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.491501][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.500128][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.509292][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.517625][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.527492][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.536121][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.546590][ T287] device veth1_macvtap entered promiscuous mode [ 26.567514][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.576392][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.585132][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.593444][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.604365][ T288] device veth1_macvtap entered promiscuous mode [ 26.626960][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.636663][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.645781][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.654203][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.662726][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.695628][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.700309][ T314] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.707798][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.729866][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.738654][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.794733][ T20] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 26.893263][ T326] loop0: detected capacity change from 0 to 256 [ 26.925950][ T327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 26.939476][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.956430][ T327] device bridge_slave_1 left promiscuous mode [ 26.962577][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.996601][ T326] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 27.384832][ T20] usb 2-1: not running at top speed; connect to a high speed hub [ 27.464860][ T20] usb 2-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 27.475870][ T20] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.486479][ T20] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 27.501920][ T20] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 27.514528][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.535432][ T20] usb 2-1: config 0 descriptor?? [ 27.586112][ T20] usb 2-1: Found UVC 9.00 device (046d:0825) [ 27.690405][ T335] loop4: detected capacity change from 0 to 4096 [ 27.792970][ T336] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7'. [ 27.821383][ T336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 27.830232][ T336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7'. [ 27.943929][ T307] loop1: detected capacity change from 0 to 256 [ 28.056874][ T341] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9'. [ 28.068639][ T307] exFAT-fs (loop1): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 28.073296][ T335] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 28.171096][ T335] EXT4-fs error (device loop4): ext4_generic_delete_entry:2731: inode #2: block 16: comm syz.4.8: bad entry in directory: inode out of bounds - offset=24, inode=41227, rec_len=20, size=4096 fake=0 [ 28.192633][ T349] loop3: detected capacity change from 0 to 1024 [ 28.200313][ T335] EXT4-fs error (device loop4) in ext4_delete_entry:2802: Corrupt filesystem [ 28.225726][ T349] ======================================================= [ 28.225726][ T349] WARNING: The mand mount option has been deprecated and [ 28.225726][ T349] and is ignored by this kernel. Remove the mand [ 28.225726][ T349] option from the mount to silence this warning. [ 28.225726][ T349] ======================================================= [ 28.295962][ T349] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 28.307006][ T349] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.326587][ T348] EXT4-fs error (device loop3): ext4_map_blocks:742: inode #15: block 3: comm syz.3.10: lblock 3 mapped to illegal pblock 3 (length 3) [ 28.326896][ T348] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 28.326920][ T348] EXT4-fs (loop3): This should not happen!! Data will be lost [ 28.326920][ T348] [ 28.327182][ T348] EXT4-fs error (device loop3): ext4_map_blocks:742: inode #15: comm syz.3.10: lblock 0 mapped to illegal pblock 0 (length 1) [ 28.327338][ T348] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 28.327363][ T348] EXT4-fs (loop3): This should not happen!! Data will be lost [ 28.327363][ T348] [ 28.330145][ T348] EXT4-fs error (device loop3): ext4_map_blocks:742: inode #15: block 1: comm syz.3.10: lblock 1 mapped to illegal pblock 1 (length 1) [ 28.330303][ T348] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 28.330326][ T348] EXT4-fs (loop3): This should not happen!! Data will be lost [ 28.330326][ T348] [ 28.332989][ T349] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #15: comm syz.3.10: lblock 0 mapped to illegal pblock 0 (length 1) [ 28.333180][ T349] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #15: block 3: comm syz.3.10: lblock 3 mapped to illegal pblock 3 (length 1) [ 28.333342][ T349] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #15: comm syz.3.10: lblock 0 mapped to illegal pblock 0 (length 1) [ 28.333480][ T349] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #15: block 3: comm syz.3.10: lblock 3 mapped to illegal pblock 3 (length 1) [ 28.333634][ T349] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #15: comm syz.3.10: lblock 0 mapped to illegal pblock 0 (length 1) [ 28.333768][ T349] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #15: block 3: comm syz.3.10: lblock 3 mapped to illegal pblock 3 (length 1) [ 28.333920][ T349] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #15: comm syz.3.10: lblock 0 mapped to illegal pblock 0 (length 1) [ 28.547925][ T20] uvcvideo 2-1:0.1: Failed to set UVC probe control : -71 (exp. 48). [ 28.576066][ T20] uvcvideo 2-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48). [ 28.576105][ T20] uvcvideo 2-1:0.1: Failed to initialize the device (-5). [ 28.577484][ T20] usb 2-1: USB disconnect, device number 2 [ 28.605912][ T361] process 'syz.4.13' launched './file0' with NULL argv: empty string added [ 28.618854][ T360] netlink: 25 bytes leftover after parsing attributes in process `syz.4.13'. [ 28.619146][ T360] device gretap0 entered promiscuous mode [ 28.621779][ T360] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.13'. [ 28.622006][ T360] 0ªX¹¦Dö»: renamed from gretap0 [ 28.624543][ T360] device 00ªX¹¦Dö» left promiscuous mode [ 28.699919][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 28.699935][ T30] audit: type=1400 audit(1791067860.978:150): avc: denied { ioctl } for pid=355 comm="syz.0.14" path="socket:[15750]" dev="sockfs" ino=15750 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.746212][ T368] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 28.746246][ T368] EXT4-fs (loop3): This should not happen!! Data will be lost [ 28.746246][ T368] [ 28.746259][ T368] EXT4-fs (loop3): Total free blocks count 0 [ 28.746271][ T368] EXT4-fs (loop3): Free/Dirty block details [ 29.032546][ T30] audit: type=1400 audit(1791067861.308:151): avc: denied { create } for pid=380 comm="syz.2.17" dev="anon_inodefs" ino=16682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.119414][ T30] audit: type=1400 audit(1791067861.318:152): avc: denied { create } for pid=380 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 29.175846][ T30] audit: type=1400 audit(1791067861.368:153): avc: denied { ioctl } for pid=380 comm="syz.2.17" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16682 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.207987][ T391] loop1: detected capacity change from 0 to 4096 [ 29.214484][ T30] audit: type=1400 audit(1791067861.398:154): avc: denied { create } for pid=390 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.279167][ T30] audit: type=1400 audit(1791067861.398:155): avc: denied { connect } for pid=390 comm="syz.1.19" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.302553][ T389] loop2: detected capacity change from 0 to 512 [ 29.313530][ T391] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 29.344162][ T394] loop0: detected capacity change from 0 to 4096 [ 29.359069][ T391] EXT4-fs (loop1): Test dummy encryption mode enabled [ 29.371187][ T30] audit: type=1400 audit(1791067861.398:156): avc: denied { write } for pid=390 comm="syz.1.19" laddr=fe80::13 lport=60 faddr=fe80::d fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.397733][ T391] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,bsddf,test_dummy_encryption,nombcache,nodelalloc,resuid=0x0000000000000000,min_batch_time=0x0000000000000400,,errors=continue. Quota mode: writeback. [ 29.431848][ T389] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,,errors=continue. Quota mode: writeback. [ 29.465027][ T389] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.474017][ T394] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 29.491967][ T30] audit: type=1400 audit(1791067861.768:157): avc: denied { append } for pid=380 comm="syz.2.17" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.541871][ T401] Zero length message leads to an empty skb [ 29.552012][ T391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 29.620566][ T30] audit: type=1400 audit(1791067861.798:158): avc: denied { map } for pid=380 comm="syz.2.17" path="/dev/loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.644738][ T30] audit: type=1400 audit(1791067861.818:159): avc: denied { read } for pid=400 comm="syz.0.21" dev="nsfs" ino=4026532462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.827126][ T405] loop0: detected capacity change from 0 to 256 [ 30.070092][ T412] netlink: 'syz.4.22': attribute type 3 has an invalid length. [ 30.086935][ T412] netlink: 80 bytes leftover after parsing attributes in process `syz.4.22'. [ 30.098070][ T412] netlink: 'syz.4.22': attribute type 1 has an invalid length. [ 30.274703][ T20] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.452601][ T414] loop4: detected capacity change from 0 to 40427 [ 30.463106][ T414] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 30.483121][ T414] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 30.501004][ T414] F2FS-fs (loop4): fault_type options not supported [ 30.514217][ T414] F2FS-fs (loop4): fault_injection options not supported [ 30.529804][ T414] F2FS-fs (loop4): invalid crc value [ 30.540130][ T414] F2FS-fs (loop4): Found nat_bits in checkpoint [ 30.593085][ T414] F2FS-fs (loop4): Start checkpoint disabled! [ 30.612460][ T414] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 30.620190][ T414] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 30.644774][ T20] usb 2-1: config 8 has an invalid interface number: 231 but max is 0 [ 30.657781][ T20] usb 2-1: config 8 has no interface number 0 [ 30.797575][ T407] attempt to access beyond end of device [ 30.797575][ T407] loop4: rw=2049, want=40976, limit=40427 [ 30.834738][ T20] usb 2-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice=4e.57 [ 30.851838][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.890803][ T20] usb 2-1: Product: syz [ 30.898948][ T20] usb 2-1: Manufacturer: syz [ 30.904958][ T20] usb 2-1: SerialNumber: syz [ 31.188722][ T368] syz.3.10 (368) used greatest stack depth: 21928 bytes left [ 31.199473][ T451] loop4: detected capacity change from 0 to 256 [ 31.235949][ T20] usb 2-1: USB disconnect, device number 3 [ 31.242784][ T328] udevd[328]: setting owner of /dev/bus/usb/002/003 to uid=0, gid=0 failed: No such file or directory [ 31.264724][ T451] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 31.304687][ T451] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 31.348814][ T451] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 31.614689][ T39] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.655046][ T312] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 31.864750][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 31.895297][ T312] usb 5-1: Using ep0 maxpacket: 16 [ 31.984421][ T464] set_capacity_and_notify: 1 callbacks suppressed [ 31.984439][ T464] loop1: detected capacity change from 0 to 512 [ 31.997488][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.014707][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.034698][ T39] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 32.043860][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.052721][ T39] usb 4-1: config 0 descriptor?? [ 32.085013][ T312] usb 5-1: unable to get BOS descriptor or descriptor too short [ 32.115765][ T464] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=continue,,errors=continue. Quota mode: writeback. [ 32.137935][ T464] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.174749][ T312] usb 5-1: config 121 has an invalid interface number: 127 but max is 1 [ 32.189812][ T312] usb 5-1: config 121 has an invalid interface number: 127 but max is 1 [ 32.206164][ T312] usb 5-1: config 121 has 1 interface, different from the descriptor's value: 2 [ 32.224707][ T312] usb 5-1: config 121 has no interface number 0 [ 32.234155][ T312] usb 5-1: config 121 interface 127 altsetting 1 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 32.246429][ T312] usb 5-1: config 121 interface 127 has no altsetting 0 [ 32.259738][ T472] tipc: Can't bind to reserved service type 0 [ 32.269596][ T472] loop0: detected capacity change from 0 to 128 [ 32.279694][ T472] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.292206][ T472] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.359161][ T474] loop2: detected capacity change from 0 to 1024 [ 32.404821][ T312] usb 5-1: New USB device found, idVendor=07aa, idProduct=9601, bcdDevice=89.4c [ 32.415193][ T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.425481][ T312] usb 5-1: Product: syz [ 32.432790][ T312] usb 5-1: Manufacturer: syz [ 32.437598][ T312] usb 5-1: SerialNumber: syz [ 32.534990][ T455] loop3: detected capacity change from 0 to 4096 [ 32.585410][ T455] EXT4-fs (loop3): Test dummy encryption mode enabled [ 32.593147][ T455] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 32.604004][ T455] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 32.612423][ T455] System zones: 0-5 [ 32.617393][ T455] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 32.644775][ T311] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 32.663401][ T455] netlink: 'syz.3.33': attribute type 49 has an invalid length. [ 32.677953][ T451] exFAT-fs (loop4): error, failed to bmap (inode : ffff888129c70dc0 iblock : 0, err : -5) [ 32.688441][ T451] exFAT-fs (loop4): Filesystem has been set read-only [ 32.697239][ T455] device ip6gretap0 entered promiscuous mode [ 32.703772][ T487] netlink: 'syz.3.33': attribute type 49 has an invalid length. [ 32.716970][ T455] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 32.768321][ T39] hid-generic 0003:04D8:00DD.0001: item fetching failed at offset 3/5 [ 32.779731][ T312] dm9601: probe of 5-1:121.127 failed with error -22 [ 32.798963][ T312] usb 5-1: USB disconnect, device number 2 [ 32.807456][ T39] hid-generic: probe of 0003:04D8:00DD.0001 failed with error -22 [ 32.831450][ T293] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 32.844108][ T293] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 32.934711][ T311] usb 3-1: device descriptor read/64, error -71 [ 32.955317][ T500] loop1: detected capacity change from 0 to 1024 [ 32.967692][ T293] usb 4-1: USB disconnect, device number 2 [ 32.978629][ T500] EXT4-fs (loop1): Unrecognized mount option "mask=^MAY_WRITE" or missing value [ 32.995711][ T500] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1043 sclass=netlink_xfrm_socket pid=500 comm=syz.1.41 [ 33.254754][ T20] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 33.335032][ T311] usb 3-1: device descriptor read/64, error -71 [ 33.468037][ T455] syz.3.33 (455) used greatest stack depth: 20640 bytes left [ 33.494898][ T20] usb 2-1: Using ep0 maxpacket: 8 [ 33.514751][ T6] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 33.539697][ T519] capability: warning: `syz.3.43' uses deprecated v2 capabilities in a way that may be insecure [ 33.614712][ T311] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 33.654878][ T20] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 33.664364][ T20] usb 2-1: can't read configurations, error -61 [ 33.754841][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 33.814773][ T20] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 33.834700][ T312] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.894837][ T311] usb 3-1: device descriptor read/64, error -71 [ 33.914729][ T6] usb 5-1: unable to get BOS descriptor or descriptor too short [ 33.994801][ T6] usb 5-1: config 1 interface 0 has no altsetting 0 [ 34.054796][ T20] usb 2-1: Using ep0 maxpacket: 8 [ 34.084717][ T312] usb 4-1: Using ep0 maxpacket: 32 [ 34.154812][ T6] usb 5-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.40 [ 34.163967][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.172012][ T6] usb 5-1: Product: syz [ 34.176347][ T6] usb 5-1: Manufacturer: syz [ 34.180965][ T6] usb 5-1: SerialNumber: syz [ 34.214768][ T20] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 34.222695][ T20] usb 2-1: can't read configurations, error -61 [ 34.229555][ T20] usb usb2-port1: attempt power cycle [ 34.264774][ T312] usb 4-1: unable to get BOS descriptor or descriptor too short [ 34.284742][ T311] usb 3-1: device descriptor read/64, error -71 [ 34.344733][ T312] usb 4-1: config 1 has an invalid interface number: 32 but max is 2 [ 34.352934][ T312] usb 4-1: config 1 has no interface number 0 [ 34.359336][ T312] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 34.404821][ T311] usb usb3-port1: attempt power cycle [ 34.429828][ T516] UDC core: couldn't find an available UDC or it's busy: -16 [ 34.437366][ T516] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 34.555650][ T6] usb 5-1: USB disconnect, device number 3 [ 34.604754][ T312] usb 4-1: string descriptor 0 read error: -22 [ 34.611059][ T312] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 34.620372][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.654720][ T20] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 34.744766][ T20] usb 2-1: Using ep0 maxpacket: 8 [ 34.824738][ T311] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 34.866775][ T524] UDC core: couldn't find an available UDC or it's busy: -16 [ 34.874542][ T524] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 34.904741][ T20] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 34.912763][ T20] usb 2-1: can't read configurations, error -61 [ 34.958421][ T523] loop3: detected capacity change from 0 to 2048 [ 34.973814][ T532] netlink: 28 bytes leftover after parsing attributes in process `syz.4.45'. [ 35.004765][ T311] usb 3-1: device descriptor read/8, error -71 [ 35.064693][ T20] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 35.227867][ T540] netlink: 48 bytes leftover after parsing attributes in process `syz.4.46'. [ 35.452404][ T20] usb 2-1: Using ep0 maxpacket: 8 [ 35.474707][ T311] usb 3-1: device descriptor read/8, error -71 [ 35.486845][ T545] loop2: detected capacity change from 0 to 512 [ 35.562348][ T545] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,grpquota,,errors=continue. Quota mode: writeback. [ 35.605641][ T545] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.616762][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 35.616777][ T30] audit: type=1400 audit(1791067867.898:216): avc: denied { mount } for pid=546 comm="syz.0.49" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 35.617698][ T20] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 35.653643][ T552] device-mapper: ioctl: Unable to rename non-existent device, to DUfwˆ™ª»ÌÝîÿ> [ 35.662752][ T30] audit: type=1400 audit(1791067867.928:217): avc: denied { read } for pid=546 comm="syz.0.49" name="control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 35.727783][ T30] audit: type=1400 audit(1791067867.928:218): avc: denied { open } for pid=546 comm="syz.0.49" path="/12/dev/mapper/control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 35.760207][ T20] usb 2-1: can't read configurations, error -61 [ 35.766868][ T20] usb usb2-port1: unable to enumerate USB device [ 35.775251][ T30] audit: type=1400 audit(1791067867.928:219): avc: denied { ioctl } for pid=546 comm="syz.0.49" path="/12/dev/mapper/control" dev="devtmpfs" ino=262 ioctlcmd=0xfd05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 35.802881][ T30] audit: type=1400 audit(1791067867.998:220): avc: denied { remount } for pid=544 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.980925][ T557] loop4: detected capacity change from 0 to 512 [ 36.028536][ T557] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=continue,,errors=continue. Quota mode: writeback. [ 36.073490][ T557] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.208300][ T30] audit: type=1400 audit(1791067868.488:221): avc: denied { ioctl } for pid=564 comm="syz.4.54" path="socket:[16162]" dev="sockfs" ino=16162 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.280524][ T30] audit: type=1400 audit(1791067868.518:222): avc: denied { setopt } for pid=564 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.328572][ T30] audit: type=1400 audit(1791067868.588:223): avc: denied { getopt } for pid=570 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.386033][ T30] audit: type=1400 audit(1791067868.638:224): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 36.439356][ T583] loop4: detected capacity change from 0 to 256 [ 36.515342][ T583] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 36.728153][ T589] loop0: detected capacity change from 0 to 128 [ 36.785047][ T589] FAT-fs (loop0): Unrecognized mount option "rod" or missing value [ 37.044809][ T312] snd-usb-audio: probe of 4-1:1.32 failed with error -71 [ 37.061461][ T312] usb 4-1: USB disconnect, device number 3 [ 37.165468][ T30] audit: type=1400 audit(1791067869.448:225): avc: denied { ioctl } for pid=590 comm="syz.3.60" path="socket:[16254]" dev="sockfs" ino=16254 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.196371][ T591] loop3: detected capacity change from 0 to 256 [ 37.205574][ T554] loop2: detected capacity change from 0 to 131072 [ 37.265438][ T591] exfat: Deprecated parameter 'namecase' [ 37.271244][ T591] exfat: Deprecated parameter 'namecase' [ 37.287745][ T591] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 37.308578][ T554] F2FS-fs (loop2): Test dummy encryption mode enabled [ 37.320803][ T554] F2FS-fs (loop2): invalid crc value [ 37.341355][ T554] F2FS-fs (loop2): Found nat_bits in checkpoint [ 37.406212][ T554] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 37.417703][ T554] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 37.425042][ T554] F2FS-fs (loop2): Start checkpoint disabled! [ 37.440428][ T554] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 37.577233][ T554] overlayfs: workdir and upperdir must be separate subtrees [ 37.624809][ T309] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 37.687102][ T598] netlink: 48 bytes leftover after parsing attributes in process `syz.4.62'. [ 37.745469][ T8] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 38.234760][ T312] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 38.275061][ T608] Illegal XDP return value 4294967262, expect packet loss! [ 38.294718][ T309] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 38.303005][ T309] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 38.312069][ T309] usb 4-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 38.322668][ T309] usb 4-1: config 220 has no interface number 2 [ 38.329037][ T309] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 38.351485][ T609] loop2: detected capacity change from 0 to 2048 [ 38.357922][ T309] usb 4-1: config 220 interface 0 has no altsetting 0 [ 38.364926][ T309] usb 4-1: config 220 interface 76 has no altsetting 0 [ 38.371820][ T309] usb 4-1: config 220 interface 1 has no altsetting 0 [ 38.414473][ T612] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 38.422583][ T612] SELinux: failed to load policy [ 38.456597][ T609] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,bsdgroups,resgid=0x0000000000000000,barrier,quota,delalloc,,errors=continue. Quota mode: writeback. [ 38.489208][ T609] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.554759][ T309] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 38.571725][ T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.580074][ T309] usb 4-1: Product: syz [ 38.582699][ T622] kvm [621]: vcpu2, guest rIP: 0x9135 disabled perfctr wrmsr: 0xc1 data 0xfffffc00 [ 38.584391][ T309] usb 4-1: Manufacturer: syz [ 38.594540][ T622] kvm [621]: vcpu2, guest rIP: 0x9135 disabled perfctr wrmsr: 0xc2 data 0xfffffc00 [ 38.599319][ T309] usb 4-1: SerialNumber: syz [ 38.613298][ T622] kvm [621]: vcpu2, guest rIP: 0x9135 ignored wrmsr: 0x11e data 0xfffffc00 [ 38.624538][ T622] kvm [621]: vcpu2, guest rIP: 0x9135 disabled perfctr wrmsr: 0x186 data 0xfffffc00 [ 38.634871][ T622] kvm [621]: vcpu2, guest rIP: 0x9135 disabled perfctr wrmsr: 0x187 data 0xfffffc00 [ 38.674789][ T312] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 38.683199][ T312] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 38.692622][ T312] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 38.702950][ T312] usb 2-1: config 220 has no interface number 2 [ 38.709364][ T312] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 38.722669][ T312] usb 2-1: config 220 interface 0 has no altsetting 0 [ 38.729503][ T312] usb 2-1: config 220 interface 76 has no altsetting 0 [ 38.736405][ T312] usb 2-1: config 220 interface 1 has no altsetting 0 [ 38.774752][ T6] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 38.784767][ T311] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 38.904743][ T312] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 38.913833][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.922205][ T312] usb 2-1: Product: syz [ 38.927907][ T312] usb 2-1: Manufacturer: syz [ 38.932639][ T312] usb 2-1: SerialNumber: syz [ 38.944812][ T20] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 38.964877][ T309] usb 4-1: selecting invalid altsetting 0 [ 38.970668][ T309] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 38.977401][ T309] usb 4-1: No valid video chain found. [ 39.044704][ T6] usb 3-1: device descriptor read/64, error -71 [ 39.059225][ T309] usb 4-1: USB disconnect, device number 4 [ 39.154796][ T311] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.167766][ T311] usb 1-1: config 0 interface 0 has no altsetting 0 [ 39.174385][ T311] usb 1-1: New USB device found, idVendor=0eef, idProduct=72fa, bcdDevice= 0.00 [ 39.183643][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.192898][ T311] usb 1-1: config 0 descriptor?? [ 39.294773][ T20] usb 5-1: not running at top speed; connect to a high speed hub [ 39.295191][ T312] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 39.308942][ T312] usb 2-1: No valid video chain found. [ 39.314414][ T312] usb 2-1: selecting invalid altsetting 0 [ 39.334921][ T618] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 39.358755][ T312] usb 2-1: USB disconnect, device number 8 [ 39.394776][ T20] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.405980][ T20] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 39.420263][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.433648][ T628] loop3: detected capacity change from 0 to 1024 [ 39.444786][ T6] usb 3-1: device descriptor read/64, error -71 [ 39.466814][ T20] usb 5-1: Found UVC 1.00 device (0000:0000) [ 39.473867][ T20] usb 5-1: No streaming interface found for terminal 2. [ 39.535708][ T628] loop3: detected capacity change from 0 to 16 [ 39.543849][ T628] erofs: (device loop3): mounted with root inode @ nid 36. [ 39.552198][ T628] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 39.561887][ T628] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4 in[63, 4033] out[1851] [ 39.576843][ T628] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 39.591108][ T628] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 39.599707][ T628] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 39.666171][ T309] usb 5-1: USB disconnect, device number 4 [ 39.701373][ T632] loop1: detected capacity change from 0 to 256 [ 39.736297][ T6] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 39.754737][ T311] usbhid 1-1:0.0: can't add hid device: -71 [ 39.760877][ T311] usbhid: probe of 1-1:0.0 failed with error -71 [ 39.769087][ T311] usb 1-1: USB disconnect, device number 2 [ 39.881602][ T642] loop3: detected capacity change from 0 to 40427 [ 39.935382][ T642] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 39.942808][ T642] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 39.952039][ T642] F2FS-fs (loop3): invalid crc value [ 39.958480][ T642] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 39.988332][ T642] F2FS-fs (loop3): Start checkpoint disabled! [ 39.995470][ T642] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 40.002647][ T642] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 40.024842][ T6] usb 3-1: device descriptor read/64, error -71 [ 40.038402][ T8] attempt to access beyond end of device [ 40.038402][ T8] loop3: rw=2049, want=45104, limit=40427 [ 40.830762][ T659] netlink: 48 bytes leftover after parsing attributes in process `syz.3.77'. [ 40.948826][ T657] loop0: detected capacity change from 0 to 4096 [ 41.073509][ T657] EXT4-fs (loop0): Test dummy encryption mode enabled [ 41.093923][ T657] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 41.135588][ T657] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 41.195833][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 41.195848][ T30] audit: type=1400 audit(1791067873.478:246): avc: denied { mounton } for pid=653 comm="syz.0.78" path="/16/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.227526][ T656] overlayfs: workdir and upperdir must be separate subtrees [ 41.291515][ T30] audit: type=1400 audit(1791067873.528:247): avc: denied { write } for pid=653 comm="syz.0.78" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.312910][ T30] audit: type=1400 audit(1791067873.528:248): avc: denied { add_name } for pid=653 comm="syz.0.78" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.336490][ T668] fuse: Bad value for 'fd' [ 41.354259][ T30] audit: type=1400 audit(1791067873.628:249): avc: denied { mount } for pid=669 comm="syz.3.81" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 41.386818][ T662] loop1: detected capacity change from 0 to 40427 [ 41.394390][ T30] audit: type=1400 audit(1791067873.658:250): avc: denied { rmdir } for pid=287 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.417633][ T30] audit: type=1400 audit(1791067873.658:251): avc: denied { unlink } for pid=287 comm="syz-executor" name=66696C6507 dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 41.441792][ T30] audit: type=1400 audit(1791067873.678:252): avc: denied { remove_name } for pid=287 comm="syz-executor" name=".index" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.464272][ T662] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 41.484317][ T662] F2FS-fs (loop1): invalid crc value [ 41.490815][ T662] F2FS-fs (loop1): Invalid segment type: 8, segno: 11 [ 41.498256][ T662] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 41.594578][ T30] audit: type=1400 audit(1791067873.868:253): avc: denied { mount } for pid=676 comm="syz.2.83" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 41.707109][ T680] netlink: 48 bytes leftover after parsing attributes in process `syz.0.82'. [ 41.723855][ T680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.82'. [ 41.733578][ T680] netlink: 20 bytes leftover after parsing attributes in process `syz.0.82'. [ 41.968808][ T309] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 42.081888][ T682] loop1: detected capacity change from 0 to 512 [ 42.108166][ T682] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 42.120234][ T682] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.182186][ T652] F2FS-fs (loop4): Test dummy encryption mode enabled [ 42.192046][ T652] F2FS-fs (loop4): invalid crc value [ 42.199483][ T652] F2FS-fs (loop4): Found nat_bits in checkpoint [ 42.214746][ T309] usb 4-1: Using ep0 maxpacket: 32 [ 42.238002][ T652] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 42.293657][ T652] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 42.304495][ T652] F2FS-fs (loop4): Start checkpoint disabled! [ 42.312423][ T652] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 42.329321][ T652] overlayfs: workdir and upperdir must be separate subtrees [ 42.335087][ T309] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 42.371280][ T407] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 42.422382][ T30] audit: type=1400 audit(1791067874.698:254): avc: denied { setattr } for pid=695 comm="syz.0.89" name="rfkill" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:wireless_device_t tclass=chr_file permissive=1 [ 42.446672][ T694] set_capacity_and_notify: 1 callbacks suppressed [ 42.446689][ T694] loop2: detected capacity change from 0 to 1024 [ 42.460802][ T30] audit: type=1400 audit(1791067874.728:255): avc: denied { getopt } for pid=695 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.496064][ T694] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.508284][ T309] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 42.508304][ T694] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.518911][ T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.553203][ T694] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #15: comm syz.2.88: lblock 0 mapped to illegal pblock 0 (length 1) [ 42.557044][ T309] usb 4-1: Product: syz [ 42.567388][ T694] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 42.581123][ T309] usb 4-1: Manufacturer: syz [ 42.583896][ T694] EXT4-fs (loop2): This should not happen!! Data will be lost [ 42.583896][ T694] [ 42.594834][ T309] usb 4-1: SerialNumber: syz [ 42.611387][ T309] usb 4-1: config 0 descriptor?? [ 42.646882][ T694] @0Ù: renamed from bond_slave_1 [ 42.655552][ T309] usb 4-1: bad CDC descriptors [ 42.661150][ T309] usb 4-1: unsupported MDLM descriptors [ 42.684439][ T407] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #15: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 3) [ 42.710157][ T407] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 42.734949][ T407] EXT4-fs (loop2): This should not happen!! Data will be lost [ 42.734949][ T407] [ 42.793325][ T702] loop0: detected capacity change from 0 to 8192 [ 42.794129][ T705] fuse: Bad value for 'fd' [ 42.820485][ T707] netlink: 60 bytes leftover after parsing attributes in process `syz.2.93'. [ 42.833735][ T702] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.858716][ T6] usb 4-1: USB disconnect, device number 5 [ 42.881622][ T713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=713 comm=syz.2.94 [ 42.917006][ T713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=713 comm=syz.2.94 [ 42.968915][ T709] loop4: detected capacity change from 0 to 512 [ 43.016676][ T715] 9pnet: Insufficient options for proto=fd [ 43.058872][ T709] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 43.084795][ T709] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.156068][ T731] fuse: Unknown parameter 'ð²gup_id' [ 43.178577][ T727] loop0: detected capacity change from 0 to 512 [ 43.184956][ T709] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: writeback. [ 43.358503][ T741] loop0: detected capacity change from 0 to 2048 [ 43.451868][ T743] netlink: 48 bytes leftover after parsing attributes in process `syz.2.99'. [ 43.468939][ T743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 43.478319][ T743] netlink: 20 bytes leftover after parsing attributes in process `syz.2.99'. [ 43.720685][ T741] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000005,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 43.746670][ T741] EXT4-fs error (device loop0): ext4_find_extent:929: inode #2: comm syz.0.101: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 43.776601][ T741] EXT4-fs (loop0): Remounting filesystem read-only [ 43.793447][ T741] EXT4-fs error (device loop0): ext4_ext_precache:608: inode #2: comm syz.0.101: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 43.812477][ T753] loop3: detected capacity change from 0 to 1024 [ 43.830701][ T741] EXT4-fs (loop0): Remounting filesystem read-only [ 43.865996][ T753] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,bsdgroups,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,nodelalloc,usrquota,noauto_da_alloc,init_itable,init_itable,,errors=continue. Quota mode: writeback. [ 43.939218][ T39] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 43.954458][ T39] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.084134][ T729] loop1: detected capacity change from 0 to 131072 [ 44.120897][ T729] F2FS-fs (loop1): Test dummy encryption mode enabled [ 44.129388][ T759] loop0: detected capacity change from 0 to 256 [ 44.150776][ T729] F2FS-fs (loop1): invalid crc value [ 44.161138][ T759] FAT-fs (loop0): Unrecognized mount option "utâtlq9ò‡"æ D«f8=1" or missing value [ 44.173575][ T729] F2FS-fs (loop1): Found nat_bits in checkpoint [ 44.216299][ T762] loop2: detected capacity change from 0 to 128 [ 44.223017][ T729] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 44.235211][ T729] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 44.244881][ T729] F2FS-fs (loop1): Start checkpoint disabled! [ 44.252726][ T770] netlink: 48 bytes leftover after parsing attributes in process `syz.3.107'. [ 44.262637][ T729] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 44.268766][ T770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 44.293587][ T729] overlayfs: workdir and upperdir must be separate subtrees [ 44.296142][ T776] loop3: detected capacity change from 0 to 512 [ 44.339030][ T776] EXT4-fs (loop3): Test dummy encryption mode enabled [ 44.356674][ T776] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.372918][ T407] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 44.388830][ T776] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.404870][ T776] EXT4-fs (loop3): 1 truncate cleaned up [ 44.417101][ T776] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,test_dummy_encryption,debug_want_extra_isize=0x000000000000006e,user_xattr,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 44.453840][ T775] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 211 vs 220 free clusters [ 44.824728][ T39] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 44.887024][ T800] EXT4-fs (loop0): Test dummy encryption mode enabled [ 44.895843][ T801] ------------[ cut here ]------------ [ 44.912064][ T801] trace type BPF program uses run-time allocation [ 44.920898][ T800] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,test_dummy_encryption=v1,inlinecrypt,errors=remount-ro,noinit_itable,auto_da_alloc,minixdf,usrquota,errors=remount-ro,max_dir_size_kb=0x0000000000000008,nodioread_nolock,mb_optimize_scan=0x0000000000000000,. Quota mode: writeback. [ 44.933412][ T801] WARNING: CPU: 1 PID: 801 at kernel/bpf/verifier.c:11749 check_map_prog_compatibility+0x6cc/0x870 [ 44.962301][ T801] Modules linked in: [ 44.967080][ T801] CPU: 1 PID: 801 Comm: syz.1.109 Not tainted syzkaller #0 [ 44.974885][ T801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 44.985140][ T801] RIP: 0010:check_map_prog_compatibility+0x6cc/0x870 [ 44.992197][ T801] Code: ee ff 48 c7 c6 20 5e 48 85 4c 8b 65 d0 e9 f9 fc ff ff e8 87 21 ee ff c6 05 28 7e 6a 05 01 48 c7 c7 80 5a 48 85 e8 54 f4 2f 03 <0f> 0b e9 83 fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a7 f9 ff [ 45.012268][ T801] RSP: 0018:ffffc90000cd7450 EFLAGS: 00010246 [ 45.018543][ T801] RAX: 4b370cf34dbbed00 RBX: 0000000000000001 RCX: 0000000000080000 [ 45.029445][ T801] RDX: ffffc90000e11000 RSI: 0000000000002562 RDI: 0000000000002563 [ 45.039840][ T801] RBP: ffffc90000cd7490 R08: ffff8881f7132eff R09: 1ffff1103ee265df [ 45.049996][ T801] R10: dffffc0000000000 R11: ffffed103ee265e0 R12: ffff8881281d0000 [ 45.059247][ T801] R13: 0000000000000005 R14: dffffc0000000000 R15: ffff88812891b800 [ 45.070918][ T801] FS: 00007f7ade6e76c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 45.082757][ T801] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.090594][ T801] CR2: 00007f7ae0140840 CR3: 000000011b421000 CR4: 00000000003506a0 [ 45.100224][ T801] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.109182][ T801] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.117729][ T801] Call Trace: [ 45.121357][ T801] [ 45.124442][ T801] resolve_pseudo_ldimm64+0x617/0x10f0 [ 45.139411][ T801] ? check_attach_btf_id+0xd80/0xd80 [ 45.172779][ T801] ? __mark_reg_known+0x1b0/0x1b0 [ 45.188805][ T801] ? security_capable+0x87/0xb0 [ 45.204406][ T801] bpf_check+0x2cfc/0xf750 [ 45.226485][ T801] ? is_bpf_text_address+0x177/0x190 [ 45.241992][ T801] ? is_bpf_text_address+0x177/0x190 [ 45.247603][ T39] usb 5-1: unable to get BOS descriptor or descriptor too short [ 45.276504][ T801] ? bpf_get_btf_vmlinux+0x70/0x70 [ 45.294719][ T39] usb 5-1: not running at top speed; connect to a high speed hub [ 45.306278][ T39] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 45.315691][ T801] ? unwind_get_return_address+0x4d/0x90 [ 45.325669][ T819] raw_sendmsg: syz.2.117 forgot to set AF_INET. Fix it! [ 45.341172][ T801] ? stack_trace_save+0xf0/0xf0 [ 45.355993][ T801] ? arch_stack_walk+0xee/0x140 [ 45.370634][ T801] ? stack_trace_save+0xa6/0xf0 [ 45.384997][ T801] ? __stack_depot_save+0x34/0x480 [ 45.424825][ T801] ? __kasan_slab_alloc+0x69/0xe0 [ 45.432229][ T801] ? __kasan_kmalloc+0xe6/0x100 [ 45.444590][ T801] ? __kasan_kmalloc+0xd4/0x100 [ 45.449887][ T801] ? kmem_cache_alloc_trace+0x119/0x270 [ 45.455829][ T801] ? selinux_bpf_prog_alloc+0x51/0x140 [ 45.461733][ T801] ? security_bpf_prog_alloc+0x62/0x90 [ 45.468210][ T801] ? bpf_prog_load+0x9d4/0x1620 [ 45.473858][ T801] ? __sys_bpf+0x51d/0x7d0 [ 45.478978][ T801] ? __x64_sys_bpf+0x7c/0x90 [ 45.483934][ T801] ? x64_sys_call+0x4b9/0x9a0 [ 45.489143][ T801] ? do_syscall_64+0x4c/0xa0 [ 45.492912][ T39] usb 5-1: config 1 has an invalid interface number: 5 but max is 2 [ 45.502069][ T39] usb 5-1: config 1 has no interface number 2 [ 45.508269][ T39] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 119, changing to 4 [ 45.519292][ T39] usb 5-1: config 1 interface 5 has no altsetting 0 [ 45.532202][ T801] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 45.538449][ T801] ? check_stack_object+0x81/0x150 [ 45.543977][ T801] ? memset+0x35/0x40 [ 45.548216][ T801] ? bpf_obj_name_cpy+0x193/0x1e0 [ 45.553408][ T801] bpf_prog_load+0x10c5/0x1620 [ 45.564304][ T801] ? __anon_inode_getfd+0x35c/0x3d0 [ 45.576439][ T801] ? map_freeze+0x370/0x370 [ 45.604982][ T39] usb 5-1: config 1 has an invalid interface number: 5 but max is 2 [ 45.662591][ T39] usb 5-1: config 1 has no interface number 2 [ 45.702562][ T801] ? selinux_bpf+0xc7/0xf0 [ 45.746247][ T39] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 119, changing to 4 [ 45.854864][ T801] ? security_bpf+0x82/0xa0 [ 45.865999][ T39] usb 5-1: config 1 interface 5 has no altsetting 0 [ 45.914020][ T801] __sys_bpf+0x51d/0x7d0 [ 45.918478][ T801] ? bpf_link_show_fdinfo+0x330/0x330 [ 45.923989][ T801] ? __kasan_check_write+0x14/0x20 [ 45.929175][ T801] ? switch_fpu_return+0x15d/0x2c0 [ 45.934339][ T801] __x64_sys_bpf+0x7c/0x90 [ 45.938827][ T801] x64_sys_call+0x4b9/0x9a0 [ 45.943451][ T801] do_syscall_64+0x4c/0xa0 [ 45.948962][ T801] ? clear_bhb_loop+0x50/0xa0 [ 45.954690][ T801] ? clear_bhb_loop+0x50/0xa0 [ 45.959599][ T801] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 45.966563][ T801] RIP: 0033:0x7f7ae00f3159 [ 45.971043][ T801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.004938][ T801] RSP: 002b:00007f7ade6e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.034762][ T39] usb 5-1: config 1 has an invalid interface number: 5 but max is 2 [ 46.044938][ T801] RAX: ffffffffffffffda RBX: 00007f7ae037b270 RCX: 00007f7ae00f3159 [ 46.053288][ T39] usb 5-1: config 1 has no interface number 2 [ 46.064391][ T39] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 119, changing to 4 [ 46.084699][ T801] RDX: 0000000000000094 RSI: 0000200000000800 RDI: 0000000000000005 [ 46.093033][ T39] usb 5-1: config 1 interface 5 has no altsetting 0 [ 46.123030][ T801] RBP: 00007f7ae018a06b R08: 0000000000000000 R09: 0000000000000000 [ 46.145098][ T830] IPv6: addrconf: prefix option has invalid lifetime [ 46.164714][ T801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.174996][ T39] usb 5-1: config 1 has an invalid interface number: 5 but max is 2 [ 46.186356][ T39] usb 5-1: config 1 has no interface number 2 [ 46.197640][ T801] R13: 00007f7ae037b308 R14: 00007f7ae037b270 R15: 00007ffec90504f8 [ 46.205783][ T39] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 119, changing to 4 [ 46.224735][ T801] [ 46.227913][ T801] ---[ end trace 8effbe4f745422d6 ]--- [ 46.270035][ T39] usb 5-1: config 1 interface 5 has no altsetting 0 [ 46.354702][ T39] usb 5-1: config 1 has an invalid interface number: 5 but max is 2 [ 46.362886][ T39] usb 5-1: config 1 has no interface number 2 [ 46.375161][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 46.375178][ T30] audit: type=1400 audit(1791067878.658:276): avc: denied { remount } for pid=834 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.414681][ T39] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 119, changing to 4 [ 46.424848][ T58] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 46.435745][ T39] usb 5-1: config 1 interface 5 has no altsetting 0 [ 46.490105][ T30] audit: type=1400 audit(1791067878.768:277): avc: denied { create } for pid=841 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 46.564799][ T30] audit: type=1400 audit(1791067878.788:278): avc: denied { write } for pid=841 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 46.644957][ T39] usb 5-1: config 1 has an invalid interface number: 5 but max is 2 [ 47.058830][ T39] usb 5-1: config 1 has no interface number 2 [ 47.123917][ T39] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 119, changing to 4 [ 47.190297][ T39] usb 5-1: config 1 interface 5 has no altsetting 0 [ 47.324925][ T39] usb 5-1: config 1 has an invalid interface number: 5 but max is 2 [ 47.384044][ T39] usb 5-1: config 1 has no interface number 2 [ 47.394705][ T30] audit: type=1326 audit(1791067879.578:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=851 comm="syz.1.126" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae00f3159 code=0x7ffc0000 [ 47.468703][ T39] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 119, changing to 4 [ 47.618026][ T39] usb 5-1: config 1 interface 5 has no altsetting 0 [ 47.698674][ T30] audit: type=1326 audit(1791067879.588:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=851 comm="syz.1.126" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae00f3159 code=0x7ffc0000 [ 47.814907][ T39] usb 5-1: unable to read config index 7 descriptor/start: -71 [ 47.894782][ T293] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 47.918456][ T39] usb 5-1: can't read configurations, error -71 [ 47.928328][ T859] __nla_validate_parse: 3 callbacks suppressed [ 47.928376][ T859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.127'. [ 47.945660][ T30] audit: type=1326 audit(1791067879.588:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=851 comm="syz.1.126" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae00f3159 code=0x7ffc0000 [ 47.970907][ T30] audit: type=1326 audit(1791067879.588:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=851 comm="syz.1.126" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7ae00f3159 code=0x7ffc0000 [ 47.996511][ T30] audit: type=1326 audit(1791067879.588:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=851 comm="syz.1.126" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae00f3159 code=0x7ffc0000 [ 48.021539][ T30] audit: type=1326 audit(1791067879.598:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=851 comm="syz.1.126" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae00f3159 code=0x7ffc0000 [ 48.047470][ T30] audit: type=1326 audit(1791067879.598:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=851 comm="syz.1.126" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae00f3159 code=0x7ffc0000 [ 48.113910][ T865] set_capacity_and_notify: 2 callbacks suppressed [ 48.113928][ T865] loop4: detected capacity change from 0 to 512 [ 48.132731][ T824] loop3: detected capacity change from 0 to 131072 [ 48.144832][ T58] usb 1-1: unable to get BOS descriptor or descriptor too short [ 48.157892][ T824] F2FS-fs (loop3): Test dummy encryption mode enabled [ 48.192445][ T824] F2FS-fs (loop3): invalid crc value [ 48.198582][ T58] usb 1-1: not running at top speed; connect to a high speed hub [ 48.211199][ T824] F2FS-fs (loop3): Found nat_bits in checkpoint [ 48.247980][ T824] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 48.259640][ T824] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 48.266580][ T824] F2FS-fs (loop3): Start checkpoint disabled! [ 48.273720][ T824] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 48.285160][ T58] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 240, changing to 4 [ 48.299015][ T824] overlayfs: workdir and upperdir must be separate subtrees [ 48.324821][ T293] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.335530][ T293] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 48.350483][ T871] loop4: detected capacity change from 0 to 256 [ 48.384014][ T45] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 48.394257][ T503] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 48.409601][ T871] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f912, utbl_chksum : 0xe619d30d) [ 48.454789][ T293] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.473296][ T293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 48.499478][ T293] usb 3-1: SerialNumber: syz [ 48.545158][ T293] hub 3-1:1.0: bad descriptor, ignoring hub [ 48.551819][ T293] hub: probe of 3-1:1.0 failed with error -5 [ 48.794737][ T503] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 48.809470][ T503] usb 2-1: config 0 has no interface number 0 [ 48.829664][ T503] usb 2-1: config 0 interface 41 has no altsetting 0 [ 48.973562][ T873] loop3: detected capacity change from 0 to 512 [ 48.991425][ T873] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 49.005856][ T873] SELinux: duplicate or incompatible mount options [ 49.015010][ T503] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 49.025233][ T503] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.033840][ T503] usb 2-1: Product: syz [ 49.038893][ T503] usb 2-1: Manufacturer: syz [ 49.044108][ T503] usb 2-1: SerialNumber: syz [ 49.053736][ T503] usb 2-1: config 0 descriptor?? [ 49.133826][ T58] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 4 [ 49.184739][ T58] usb 1-1: string descriptor 0 read error: -71 [ 49.191358][ T58] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 49.201023][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.254755][ T58] usb 1-1: can't set config #1, error -71 [ 49.265205][ T58] usb 1-1: USB disconnect, device number 3 [ 49.273295][ T887] xt_limit: Overflow, try lower: 167772/2147483648 [ 49.314992][ T503] CoreChips: probe of 2-1:0.41 failed with error -71 [ 49.518091][ T882] netlink: 48 bytes leftover after parsing attributes in process `syz.3.132'. [ 49.536712][ T503] usb 2-1: USB disconnect, device number 9 [ 49.546210][ T885] loop0: detected capacity change from 0 to 1024 [ 49.585399][ T885] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 49.713631][ T892] loop4: detected capacity change from 0 to 256 [ 49.746085][ T892] exfat: Bad value for 'dmask' [ 49.775047][ T885] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 50.795403][ T899] netlink: 'syz.3.139': attribute type 4 has an invalid length. [ 50.879367][ T902] netlink: 7 bytes leftover after parsing attributes in process `syz.1.140'. [ 50.893865][ T902] loop1: detected capacity change from 0 to 512 [ 50.944030][ T904] netlink: 'syz.3.139': attribute type 4 has an invalid length. [ 50.956610][ T902] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 51.088372][ T892] loop4: detected capacity change from 0 to 131072 [ 51.136615][ T892] F2FS-fs (loop4): Test dummy encryption mode enabled [ 51.144538][ T892] F2FS-fs (loop4): invalid crc value [ 51.151265][ T892] F2FS-fs (loop4): Found nat_bits in checkpoint [ 51.186770][ T892] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 51.208183][ T892] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 51.215145][ T892] F2FS-fs (loop4): Start checkpoint disabled! [ 51.226112][ T892] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 51.265934][ T911] loop1: detected capacity change from 0 to 16 [ 51.284969][ T39] usb 3-1: USB disconnect, device number 8 [ 51.605402][ T918] netlink: 96 bytes leftover after parsing attributes in process `syz.0.143'. [ 51.767110][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 51.767129][ T30] audit: type=1400 audit(1791067884.038:307): avc: denied { watch } for pid=919 comm="syz.1.145" path="/26" dev="tmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 51.874682][ T39] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 51.917452][ T931] loop7: detected capacity change from 0 to 7 [ 51.932270][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 51.943975][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 51.955016][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 51.974668][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 51.985626][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 51.994094][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.005032][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 52.013263][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.024278][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 52.032480][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.043410][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 52.053969][ T30] audit: type=1400 audit(1791067884.328:308): avc: denied { setopt } for pid=925 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.077080][ T934] program syz.1.151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.124686][ T39] usb 3-1: Using ep0 maxpacket: 16 SYZFAIL: SIGBUS pc-offset:0xffffffffffee62a9 pc:0x7f4ff2e73287 addr:0x7f4ff0909000 code=2 (errno 11: Resource temporarily unavailable) [ 52.208991][ T30] audit: type=1400 audit(1791067884.488:309): avc: denied { write } for pid=277 comm="syz-executor" path="pipe:[418]" dev="pipefs" ino=418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 52.254693][ T39] usb 3-1: config 127 has an invalid interface number: 167 but max is 1 [ 52.314708][ T39] usb 3-1: config 127 has an invalid descriptor of length 79, skipping remainder of the config [ 52.355860][ T39] usb 3-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 52.372389][ T39] usb 3-1: config 127 has no interface number 0 [ 52.385557][ T39] usb 3-1: config 127 interface 167 altsetting 182 endpoint 0x8 has invalid maxpacket 15936, setting to 64 [ 52.397066][ T39] usb 3-1: config 127 interface 167 has no altsetting 0 [ 52.535075][ T39] usb 3-1: string descriptor 0 read error: -71 [ 52.541314][ T39] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a55, bcdDevice=77.61 [ 52.550763][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.594784][ T39] usb 3-1: can't set config #127, error -71 [ 52.612257][ T39] usb 3-1: USB disconnect, device number 9 [ 53.177130][ T407] device bridge_slave_1 left promiscuous mode [ 53.183273][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.190969][ T407] device bridge_slave_0 left promiscuous mode [ 53.197656][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.205806][ T407] device bridge_slave_0 left promiscuous mode [ 53.212067][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.219965][ T407] device bridge_slave_1 left promiscuous mode [ 53.226145][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.233561][ T407] device bridge_slave_0 left promiscuous mode [ 53.239950][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.247853][ T407] device bridge_slave_1 left promiscuous mode [ 53.253989][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.262349][ T407] device bridge_slave_0 left promiscuous mode [ 53.269568][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.277784][ T407] device bridge_slave_1 left promiscuous mode [ 53.284057][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.291848][ T407] device bridge_slave_0 left promiscuous mode [ 53.298619][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.307804][ T407] device veth1_macvtap left promiscuous mode [ 53.314198][ T407] device veth0_vlan left promiscuous mode [ 53.320542][ T407] device veth1_macvtap left promiscuous mode [ 53.326881][ T407] device veth0_vlan left promiscuous mode [ 53.332781][ T407] device veth1_macvtap left promiscuous mode [ 53.339040][ T407] device veth0_vlan left promiscuous mode [ 53.345063][ T407] device veth1_macvtap left promiscuous mode [ 53.351078][ T407] device veth0_vlan left promiscuous mode [ 53.357642][ T407] device veth1_macvtap left promiscuous mode [ 53.363654][ T407] device veth0_vlan left promiscuous mode