last executing test programs: 46.438538673s ago: executing program 0 (id=92): socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/hci\x00') read$rfkill(r0, &(0x7f0000000180), 0x8) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000700)=""/4082, 0xff2}], 0x1, 0x3c, 0x2) 46.411520025s ago: executing program 0 (id=94): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000d00)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{&(0x7f0000000e40)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)="1f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000f40)="3532e45a2a47b082daed2070cfb7486d610cbf2c61047b598bfe9cd45d4f49e6dc94c3258897ce5d1c79245647804c273df7b1f3a090a6db8597d29d858b3192fe623f600cb431634f4182a8b945a95d3c65a8a15745fac45de5b1988172b0e1e7b06a4f3127d260c9dd68402b1c9fbc5f8f1642170dbad52b1c5c43c486a4a957b356916878cd74336ee8f570470acfc47c4fecf1dc4fa15e34231cd2416c365555ac8d16494170df8159af76b077cdea7582961b8b53c94f63f69b2cd2ddd0e70342cb024c085d413f58279cd1f023f6a70bba2764028cd6bd76b24c0cf74de2deb2d78ba54e70e6510c9829ad154fe7b664167f69328b471490a5c0d2b89e1db10f4037369650b57d71894ac4b336cf720de94040d1099bf5a7fdaf560345372f0d896c786fbd34f0257f18b6c8106d21acd12ab2db03dd15fef1d25da97788cd180c6b6d4fb33822bf9839ff2ada5f6e2c8a2d1038292cc05b4a5e63fcbde50a915cd851d1c370b3c9be47ce4dc6e5fed05781c3c921c840738783256f861d1ccb710dc593a98a3e416c89abf2cc2eb19c99d5c3ae3341f7c8c14de7c7e997f008ac48eba6d94c828938685ca421ae4e90a9b45a4e5f1b4ace27816746826627b1829208efdd2c46f82b8259a8a3dbf412e5006cff9cf9778c337a0aab9f215edbfb6d1d0b1f9bac9c995a199074abd14f44fd9039983c703335e2451a8d0662655529ccdbf9b0773868c7686817ef845d611704feec78f492b8e55b4d5a2f58629a0a414d91592a68b9e976e563e390a3abada2a39d882059c4d81b67389561a98cf15eceb7da38c336ce45d0c2250c5f0c43c956d1dd9313174d312b02a6d15ecaa436f26153ab5dc10c88270e91b4295aa92458ee4f21e59aed97bb07d04cad7ecf0f6c02b3a118415ddcc7f7", 0x290}], 0x1}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001240)="8291", 0x2}], 0x1}}], 0x4, 0x2400c862) writev(r0, &(0x7f0000001280)=[{&(0x7f00000012c0)="b0", 0x306}], 0x1) 46.387762258s ago: executing program 0 (id=96): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write$cgroup_devices(r2, 0x0, 0x8) write(r0, 0x0, 0x0) 46.306485316s ago: executing program 2 (id=103): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000540)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000600)="580000001400add427323b472545b45602117fffffff81004e230e227f000501925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 46.292197508s ago: executing program 2 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xa2) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000f00), 0x0, &(0x7f0000000f40)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000f80)='./file0\x00', 0x82000, 0xa1) lseek(r0, 0x1, 0x1) 46.277188219s ago: executing program 2 (id=105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000280)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000300)={0x1, 0x0, [{0x1, 0x0, 0x3, 0xb96c, 0x9, 0xfffffd29, 0x401}]}) 46.26374716s ago: executing program 0 (id=106): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') 46.247445892s ago: executing program 0 (id=107): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000003c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000440)='.\x00', &(0x7f0000000480), 0x804000, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 46.131991414s ago: executing program 0 (id=112): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b80)=@newtfilter={0x87c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x9, 0xe}, {0x0, 0x1}, {0x10, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0xffff0001, 0x1, 0x4, 0x487, 0x749, 0xd, 0xb, 0x8, 0x5, 0xfffffffc, 0x8, 0xf, 0x8, 0x8, 0x7f, 0x17f, 0x59, 0x1ff, 0xffffffff, 0x4, 0x9, 0x6063, 0x4, 0x0, 0x5, 0x4, 0x7, 0x52b7, 0x3, 0x800, 0x1000, 0x7, 0x5, 0x8, 0x9, 0x10, 0x10, 0xf97, 0x2, 0x81, 0x9, 0x4, 0x3ff0096e, 0xc6e, 0x40, 0x6, 0x2, 0x1, 0x20166826, 0x1, 0x800, 0x3, 0xff, 0x5, 0x7, 0x369, 0x3, 0xed, 0x3f, 0x5, 0x80000000, 0x67, 0x74, 0x3, 0x5, 0x2128, 0x5, 0xffffdaaa, 0x9, 0x2, 0x5, 0x6, 0x0, 0xf7d, 0x2, 0x9, 0x1, 0x807ffe, 0x7, 0x9, 0x4, 0x8, 0x8, 0x6, 0x0, 0x4, 0x9, 0x2, 0x9, 0x8, 0x4, 0xfff, 0x800, 0x8, 0x6, 0x5, 0x5, 0x0, 0x5, 0xfffffffd, 0x3, 0xfffffff9, 0x7367, 0x4, 0xf9, 0x9, 0x4, 0x4, 0xd027, 0x8, 0x8, 0xbd6, 0x3ff, 0x3, 0x7, 0x8a, 0x8001, 0x9, 0x80000001, 0x2, 0x8, 0xfd, 0x4, 0x6, 0x9, 0x0, 0xff, 0x2, 0x5, 0xef, 0x80000000, 0x5, 0x1, 0x7c, 0x0, 0x9, 0x0, 0x2, 0x5, 0x4, 0x401, 0x9, 0xffff6615, 0x1, 0x81, 0x4, 0x8, 0x3, 0x8, 0xfffffff6, 0xfffffffd, 0x0, 0x4, 0x48, 0x3, 0x6, 0x0, 0x80000001, 0x4, 0x43762573, 0x80000001, 0xfffffff1, 0x4, 0x8, 0x8, 0x0, 0x0, 0x3ff, 0x6, 0x120000, 0xa, 0x10001, 0x8, 0x80000001, 0x42, 0x1, 0x5, 0x6, 0x6, 0x8, 0x1000, 0x57c7, 0x7, 0x4, 0x6, 0x6, 0x0, 0x4, 0x3, 0x63, 0x3, 0x3, 0xffff, 0x12, 0x0, 0x5, 0x6, 0x7, 0x4, 0x0, 0x4, 0x8, 0x3, 0x3, 0x3, 0x4, 0x36e, 0x11, 0xc00, 0x40, 0x400, 0x7fff, 0x2, 0x101, 0x81, 0x6, 0x2, 0x9, 0xff, 0x2, 0x38a2, 0x58af, 0x1, 0x6, 0x80001, 0x9, 0xa, 0x3, 0xffbffff9, 0x3, 0x4, 0x7fffffff, 0x6, 0x2, 0x4, 0x7, 0x52b18d97, 0xff, 0x7fffffff, 0x1, 0x7, 0xfffffc3b, 0x401, 0x2, 0x4, 0x81, 0x6, 0x0, 0x1a0000, 0x8, 0xfffffff9, 0x8, 0x5, 0x3, 0xfffffff7, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xfffff482, 0x9, 0x0, 0x6, 0x3, 0x2, 0x0, 0x3d, 0x80, 0x28, 0x1005, 0x4, 0x4, 0x0, 0x5, 0x6, 0xe, 0x10, 0x8000, 0x8a3c, 0x7, 0x5f, 0xfffffffb, 0x80000000, 0xc, 0x6, 0x6, 0x0, 0x8, 0x4567f271, 0x6, 0x5, 0xd509, 0x8, 0xc99, 0x762b00, 0x6b54e9f7, 0xc1d, 0x6ca, 0xa, 0xf5f8, 0x48d, 0x8000, 0xefbb, 0x10000, 0x1, 0x3ff, 0xc670, 0xd7, 0xfb80, 0x0, 0x1000, 0x10, 0x2cfd, 0x3, 0xa, 0x6, 0x9, 0x74c, 0xffffffff, 0x9, 0x8, 0x9, 0x3, 0x5, 0x7, 0x3, 0xfffffffe, 0x8, 0x10000, 0x7b, 0x27, 0x8000, 0x8, 0x8, 0x1000, 0x5, 0x6, 0x3, 0xb, 0xfffffffa, 0x0, 0x2, 0x8, 0x10, 0x5, 0x7ff, 0x8, 0x86, 0x44, 0x5, 0x3, 0x6, 0x739, 0x7ff, 0xcc3c, 0x0, 0xf68f, 0x7, 0x5, 0x3, 0xfffffffa, 0xc82, 0xac, 0x5, 0xd6, 0x1, 0x8, 0x882, 0x7, 0x80000000, 0x3df, 0x9, 0x3, 0x9, 0x7, 0x9, 0x7, 0x7, 0x7, 0x49, 0x80000001, 0x9, 0x8, 0x10000, 0x7, 0x0, 0x0, 0x4, 0xfffffffc, 0xfffff800, 0x80, 0x0, 0x3, 0x9, 0xb, 0x0, 0x0, 0x2, 0xf, 0x5, 0x1013dd8d, 0xa80e, 0x365, 0x1, 0x3, 0x7, 0x3, 0x10000, 0x8, 0xf9d, 0x400, 0x80000001, 0x10, 0x3, 0x7fffffff, 0x8, 0x2, 0x349f, 0xb, 0xc, 0x8, 0xa7, 0x1, 0x9, 0xb, 0x7, 0x1, 0x7fff, 0x7, 0x1, 0x0, 0x1, 0x0, 0x3, 0x7, 0x6, 0x10000, 0x5, 0x3, 0x3ff, 0x2288, 0x6c, 0x101, 0x3, 0x5, 0x6, 0x1, 0x4, 0xc8, 0xff, 0x5, 0x15, 0x6, 0x5, 0x5, 0xe3f, 0x1000, 0x3, 0x3, 0x4, 0x10001, 0xab, 0x0, 0x7, 0x5, 0x1, 0xffff, 0xfffffffe, 0x10001, 0xe68, 0x2, 0x4f, 0x9, 0xe, 0x40, 0x80, 0x10000, 0xb, 0x8000, 0x6, 0x1ff, 0x800, 0x74ad, 0x7, 0x6, 0xe2e, 0xc, 0x101, 0x5, 0x8, 0x10, 0x7f, 0x7, 0x3, 0x5, 0x3, 0x8, 0x401, 0x1, 0x81, 0x0, 0xfff, 0x4, 0x5, 0x0, 0xf01, 0x7, 0x2, 0x3afa, 0x8dfb, 0xb, 0x4, 0x8, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x20000000, 0xa04, 0x4, 0x9, {0xa, 0x0, 0x9, 0x6, 0x2, 0x3}, {0x2, 0x0, 0x1, 0x6, 0x3, 0x4}, 0x8, 0x1, 0x4}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) 46.131640704s ago: executing program 2 (id=113): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x210000, &(0x7f0000000500)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f00000005c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000b40)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000b80)='./bus\x00', &(0x7f0000000bc0), 0x2000008, &(0x7f0000000c00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000c40)='./bus\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000c80)='./file1\x00', &(0x7f0000000cc0), 0x0) 46.056216021s ago: executing program 32 (id=112): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b80)=@newtfilter={0x87c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x9, 0xe}, {0x0, 0x1}, {0x10, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0xffff0001, 0x1, 0x4, 0x487, 0x749, 0xd, 0xb, 0x8, 0x5, 0xfffffffc, 0x8, 0xf, 0x8, 0x8, 0x7f, 0x17f, 0x59, 0x1ff, 0xffffffff, 0x4, 0x9, 0x6063, 0x4, 0x0, 0x5, 0x4, 0x7, 0x52b7, 0x3, 0x800, 0x1000, 0x7, 0x5, 0x8, 0x9, 0x10, 0x10, 0xf97, 0x2, 0x81, 0x9, 0x4, 0x3ff0096e, 0xc6e, 0x40, 0x6, 0x2, 0x1, 0x20166826, 0x1, 0x800, 0x3, 0xff, 0x5, 0x7, 0x369, 0x3, 0xed, 0x3f, 0x5, 0x80000000, 0x67, 0x74, 0x3, 0x5, 0x2128, 0x5, 0xffffdaaa, 0x9, 0x2, 0x5, 0x6, 0x0, 0xf7d, 0x2, 0x9, 0x1, 0x807ffe, 0x7, 0x9, 0x4, 0x8, 0x8, 0x6, 0x0, 0x4, 0x9, 0x2, 0x9, 0x8, 0x4, 0xfff, 0x800, 0x8, 0x6, 0x5, 0x5, 0x0, 0x5, 0xfffffffd, 0x3, 0xfffffff9, 0x7367, 0x4, 0xf9, 0x9, 0x4, 0x4, 0xd027, 0x8, 0x8, 0xbd6, 0x3ff, 0x3, 0x7, 0x8a, 0x8001, 0x9, 0x80000001, 0x2, 0x8, 0xfd, 0x4, 0x6, 0x9, 0x0, 0xff, 0x2, 0x5, 0xef, 0x80000000, 0x5, 0x1, 0x7c, 0x0, 0x9, 0x0, 0x2, 0x5, 0x4, 0x401, 0x9, 0xffff6615, 0x1, 0x81, 0x4, 0x8, 0x3, 0x8, 0xfffffff6, 0xfffffffd, 0x0, 0x4, 0x48, 0x3, 0x6, 0x0, 0x80000001, 0x4, 0x43762573, 0x80000001, 0xfffffff1, 0x4, 0x8, 0x8, 0x0, 0x0, 0x3ff, 0x6, 0x120000, 0xa, 0x10001, 0x8, 0x80000001, 0x42, 0x1, 0x5, 0x6, 0x6, 0x8, 0x1000, 0x57c7, 0x7, 0x4, 0x6, 0x6, 0x0, 0x4, 0x3, 0x63, 0x3, 0x3, 0xffff, 0x12, 0x0, 0x5, 0x6, 0x7, 0x4, 0x0, 0x4, 0x8, 0x3, 0x3, 0x3, 0x4, 0x36e, 0x11, 0xc00, 0x40, 0x400, 0x7fff, 0x2, 0x101, 0x81, 0x6, 0x2, 0x9, 0xff, 0x2, 0x38a2, 0x58af, 0x1, 0x6, 0x80001, 0x9, 0xa, 0x3, 0xffbffff9, 0x3, 0x4, 0x7fffffff, 0x6, 0x2, 0x4, 0x7, 0x52b18d97, 0xff, 0x7fffffff, 0x1, 0x7, 0xfffffc3b, 0x401, 0x2, 0x4, 0x81, 0x6, 0x0, 0x1a0000, 0x8, 0xfffffff9, 0x8, 0x5, 0x3, 0xfffffff7, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xfffff482, 0x9, 0x0, 0x6, 0x3, 0x2, 0x0, 0x3d, 0x80, 0x28, 0x1005, 0x4, 0x4, 0x0, 0x5, 0x6, 0xe, 0x10, 0x8000, 0x8a3c, 0x7, 0x5f, 0xfffffffb, 0x80000000, 0xc, 0x6, 0x6, 0x0, 0x8, 0x4567f271, 0x6, 0x5, 0xd509, 0x8, 0xc99, 0x762b00, 0x6b54e9f7, 0xc1d, 0x6ca, 0xa, 0xf5f8, 0x48d, 0x8000, 0xefbb, 0x10000, 0x1, 0x3ff, 0xc670, 0xd7, 0xfb80, 0x0, 0x1000, 0x10, 0x2cfd, 0x3, 0xa, 0x6, 0x9, 0x74c, 0xffffffff, 0x9, 0x8, 0x9, 0x3, 0x5, 0x7, 0x3, 0xfffffffe, 0x8, 0x10000, 0x7b, 0x27, 0x8000, 0x8, 0x8, 0x1000, 0x5, 0x6, 0x3, 0xb, 0xfffffffa, 0x0, 0x2, 0x8, 0x10, 0x5, 0x7ff, 0x8, 0x86, 0x44, 0x5, 0x3, 0x6, 0x739, 0x7ff, 0xcc3c, 0x0, 0xf68f, 0x7, 0x5, 0x3, 0xfffffffa, 0xc82, 0xac, 0x5, 0xd6, 0x1, 0x8, 0x882, 0x7, 0x80000000, 0x3df, 0x9, 0x3, 0x9, 0x7, 0x9, 0x7, 0x7, 0x7, 0x49, 0x80000001, 0x9, 0x8, 0x10000, 0x7, 0x0, 0x0, 0x4, 0xfffffffc, 0xfffff800, 0x80, 0x0, 0x3, 0x9, 0xb, 0x0, 0x0, 0x2, 0xf, 0x5, 0x1013dd8d, 0xa80e, 0x365, 0x1, 0x3, 0x7, 0x3, 0x10000, 0x8, 0xf9d, 0x400, 0x80000001, 0x10, 0x3, 0x7fffffff, 0x8, 0x2, 0x349f, 0xb, 0xc, 0x8, 0xa7, 0x1, 0x9, 0xb, 0x7, 0x1, 0x7fff, 0x7, 0x1, 0x0, 0x1, 0x0, 0x3, 0x7, 0x6, 0x10000, 0x5, 0x3, 0x3ff, 0x2288, 0x6c, 0x101, 0x3, 0x5, 0x6, 0x1, 0x4, 0xc8, 0xff, 0x5, 0x15, 0x6, 0x5, 0x5, 0xe3f, 0x1000, 0x3, 0x3, 0x4, 0x10001, 0xab, 0x0, 0x7, 0x5, 0x1, 0xffff, 0xfffffffe, 0x10001, 0xe68, 0x2, 0x4f, 0x9, 0xe, 0x40, 0x80, 0x10000, 0xb, 0x8000, 0x6, 0x1ff, 0x800, 0x74ad, 0x7, 0x6, 0xe2e, 0xc, 0x101, 0x5, 0x8, 0x10, 0x7f, 0x7, 0x3, 0x5, 0x3, 0x8, 0x401, 0x1, 0x81, 0x0, 0xfff, 0x4, 0x5, 0x0, 0xf01, 0x7, 0x2, 0x3afa, 0x8dfb, 0xb, 0x4, 0x8, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x20000000, 0xa04, 0x4, 0x9, {0xa, 0x0, 0x9, 0x6, 0x2, 0x3}, {0x2, 0x0, 0x1, 0x6, 0x3, 0x4}, 0x8, 0x1, 0x4}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) 45.993362838s ago: executing program 2 (id=117): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001c40)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=@base={0x12, 0x7, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x404000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d80)={{r1, 0xffffffffffffffff}, &(0x7f0000001dc0), &(0x7f0000001e00)=r0}, 0x22) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b80)={&(0x7f0000001e80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r2, &(0x7f0000001e80), 0x0}, 0x20) 44.623987617s ago: executing program 2 (id=126): r0 = syz_io_uring_setup(0x1cf8, &(0x7f0000000700)={0x0, 0xca2, 0x1, 0x800001, 0x3}, &(0x7f00000006c0)=0x0, &(0x7f0000000480)=0x0, &(0x7f00000004c0)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) syz_io_uring_complete(r1, r2) pselect6(0x40, &(0x7f0000000500)={0x3, 0x7, 0xe, 0x0, 0xf, 0xffffffffffffffff, 0xc, 0x20008000}, 0x0, &(0x7f0000000540)={0x8, 0x3, 0x6, 0x2, 0x2, 0x0, 0xfffffffffffffffc, 0x9}, 0x0, 0x0) io_uring_enter(r0, 0x1, 0x8000020, 0x1, 0x0, 0x0) 44.583865781s ago: executing program 33 (id=126): r0 = syz_io_uring_setup(0x1cf8, &(0x7f0000000700)={0x0, 0xca2, 0x1, 0x800001, 0x3}, &(0x7f00000006c0)=0x0, &(0x7f0000000480)=0x0, &(0x7f00000004c0)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) syz_io_uring_complete(r1, r2) pselect6(0x40, &(0x7f0000000500)={0x3, 0x7, 0xe, 0x0, 0xf, 0xffffffffffffffff, 0xc, 0x20008000}, 0x0, &(0x7f0000000540)={0x8, 0x3, 0x6, 0x2, 0x2, 0x0, 0xfffffffffffffffc, 0x9}, 0x0, 0x0) io_uring_enter(r0, 0x1, 0x8000020, 0x1, 0x0, 0x0) 28.872699343s ago: executing program 3 (id=399): setns(0xc9, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000001c0)={0x5, {{0x2, 0x4e1d, @empty=0xe0009eff}}, {{0x2, 0x4e24, @local}}}, 0x108) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000e80)={0x1, &(0x7f0000000ec0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 28.859161975s ago: executing program 3 (id=400): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x3a, 0x0, 0xb9}]}) 28.104168261s ago: executing program 3 (id=406): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[], 0x4, 0x1517, &(0x7f0000000300)="$eJzs3AuYT9X6OPD3XWvtMSbp2ySXYa31br7JZZkkiSTJJUmSJMktIWmSIwmJIbekIQnJZUguQ0guE5PG/X6/JkmSJMktt2T9nyn+Tqd6zjm/Osfv+c37eZ79fPc7e79rv3u/38ve+zsz33YaXL1hjSr1iQj+FPzlIRkAYgGgPwBcAwABAJSNLxuftTynxOQ/txH213o47UpXwK4k7n/2xv3P3rj/2Rv3P3vj/mdv3P/sjfufvXH/GcvONk4tcC1P2Xfi+//ZGX/+/x9yoNToL1eXur7zv5HC/c/euP//ZwX/ykrc/+yN+5+9cf+zN+5/dpDjD5dw/7M37j9j2dmVvv/M05WdrvTzjzHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZY9nDGX6YA4NL8la6LMcYYY4wxxhhjfx2f40pXwBhjjDHGGGOMsf88BAESFAQQAzkgFnJCHAgAuBpywzUQgWshHq6DPHA95IV8kB8KQAIUhEKgwYAFghAKQxGIwg1QFG6EYlAcSkBJcFAKEuEmKA03Qxm4BcrCrVAOboPyUAFuh4pwB1SCO6Ey3AVV4G6oCtWgOtSAe6Am3Au14D6oDfdDHXgA6sKDUA8egvrwMDSAR6AhPAqN4DFoDE2gKTSD5v+j/BehG7wE3aEHJENP6AUvQ2/oA32hH/SHV2AAvAoD4TVIgUEwGF6HIfAGDIU3YRgMhxHwFoyEt2EUjIYxMBZSYRyMh3dgArwLE2ESTIYpkAZTYRq8B9NhBsyE92EWfACzYQ7MhXmQDh/CfFgAGfARLISPIRMWwWJYAkthGSyHFbASVsFqWANrYR2shw2wETbBZtgCW2EbbIcdsBM+gV3wKeyGz2APfP5v5p/+h/zOCAgoUKBChTEYg7EYi3EYh7kwF+bG3BjBCMZjPObBPJgX82J+zI8JmICFsBAaNEhIWBgLYxSjWBSLYjEshiWwBDp0mIiJWBpvxjJYBstiWSyH5bA8VsAKWBErYiWshJWxMlbBKlgVq2J1rI734D3YE2thLayNtbEO1rl0ewrrY31sgA2wITbERtgIG2NjbIpNsTk2xxbYAltiS2yNrbENtsG22BaTMAnbYTtsj+2xA3bAjtgRO2En7IxdsAu+mAPwJXwJe2BV0RN7YS/sjSk5+mI/7Iev4AB8FV/F1zAFB+FgfB1fxzdwKJ7CYTgcR+AIrCTexlE4GkmMxVRMxfE4HifgBJyIk3ASTsE0nIrTcBpOxxk4A9/HWfgBfoBzcA7Ow3RMx/m4ADMwAxfiaczERbgYl+BSXIZLcQWuxBW4GtfgalyH63ADbsBNuAm34BbchttwByoA/AQ/xU8xBffgHtyLe3Ef7sP9uB8PoISDeBAP4SE8jIfxCB7Bo3gMj+MxPIkn8RSexjN4Bs/hOTyPzyd83WBH8VUpILIooUSMiBGxIlbEiTiRS+QSuUVuERERES/iRR6RR+QVeUV+kV8kiARRSBQSRhhBIowBABEVUVFUFBXFRDFRQpQQTjiRKBJFaVFalBFlRFlxqygnbhPlRQXRylUUFUUl0dpVFneJKqKKqCqqieqihqghaoqaopaoJWqL2qKOqCPqigdFPdET++LDIqszDcUgbCQGY2PRRMiL72AtxFBsKVqJ1uJJMRyHYVvRwiWJZ0Q7MQrbi7+J0fic6CjGYifxgugsuoiu4kXRTbR03UUPMRF7il5iCvYWfURf0U9Mx2rifZyVs7p4TaSIQWKweF3MwzfEUPGmGCaGixHiLTFSvC1GidFijBgrUsU4MV68IyaId8VEMUlMFlNEmpgqpon3xHQxQ8wU74tZ4gMxW8wRc8U8kS4+FPPFApEhPhILxcciUywSi8USsVQsE8vFCrFSrBKrxRqxVqwT68UGsVFsEpvFFrFVbBPbxQ6xU3widolPxW7xmdgjPhd7xRdin/hS7BdfiQPia3FQfCMOiW/FYfGdOCK+F0fFMXFcnBAnxQ/ilDgtzoiz4pz4UZwXP4kLwguQKIWUUslAxsgcMlbmlHHyKplLBheP7rUyXl4n88jrZV6ZT+aXBWSCLCgLSS2NtJJkKAvLIjIqb5BF5Y2ymCwuS8iS0slSMlHeJEvLm2UZeYssK2+V5eRtsrysIG+XFeUdspK8U0Lkl21UldVkdVlD3iNryntlLXmfrC3vl3XkA7KufFDWkw/J+vJh2UA+IhvKR2Uj+ZhsLJvIprKZbC4fly3kE7KlbCVbyydlG/mUbCuflknyGdlO+otPkedkR/m87CRfkJ1lF9lV/iQvSC+7yx4SoKfsJV+WvWUf2Vf2k/3lK3KAfFUOlK/JFDlIDpavyyHyDTlUvimHyeFyhHxLjpRvy1FytBwjx8pUOU6Ol+/ICfJdOVFOkpPlFJkmp8q+F0eaKeU/zX/nH/LbXDzyg+QGuVFukpvlFrlVbpPb5Q65U+6Uu+QuuVvulnvkHrlX7pX75D65X+6XB+QBeVAelIfkIXlYHpZH5BF5VB6TZ+UJeVL+IE/J0/K0PCvPyXPy/MVjAAqVUFIpFagYlUPFqpwqTl2lcqmrVW51jYqoa1W8uk7lUdervCqfyq8KqARVUBVSWhllFalQFVZFVFTdgBfLViVUSeVUKZWobvp38lVRdaMqpor/Kv9Sfcl/UF9z1Vy1UC1US9VStVatVRvVRrVVbVWSSlLtVDvVXrVXHVQH1VF1VJ1UJ9VZdVZdVVfVTXVT3VV3laySVS/1suqt+qi+qp/qr15RA9QANVANVCkqRQ1Wg9UQNUQNVUPVMDVMjVAj1Eg1Uo1So9QYNUalqlQ1Xo1XE9QENVFNVJPVZJWm0tQ0NU1NV9PVTDVTzVKz1Gw1W81Vc1W6Slfz1XyVoTLUQrVQZapFapFaopaoZWqZWqFWqFVqlVqj1qh1ap3KVBvVRrVZbVZb1Va1XW1XO9VOtUvtUrvVbrVH7VF71V61T+1T+9V+dUAdUAfVQXVIHVKH1WF1RB1RR9VRdVwdVyfVSXVKnVJn1Bl1Tp1T59V5dUFdyDrtC0QgAhWoICaICWKD2CAuiAtyBbmC3EHuIBJEgvggPsgTXB/kDfIF+YMCQUJQMCgU6MAENhAXmx4NbgiKBjcGxYLiQYmgZOCCUkFicFNQOrg5KBPcEpQNbg3KBbcF5YMKwe1BxeCOoFJwZ1A5uCuoEtwdVA2qBdWDGsE9Qc3g3qBWcF9QO7g/qBM8ENQNHgzqBQ8F9YOHgwbBI0HD4NGgUfBY0DhoEjQNmgXN/9LxvT+V7wnXXffQybqn7qVf1r11H91X99P99St6gH5VD9Sv6RQ9SA/Wr+sh+g09VL+ph+nheoR+S4/Ub+tRerQeo8fqVD1Oj9fv6An6XT1RT9KT9RSdpqfqafo9PV3P0DP1+3qW/kDP1nP0XD1Pp+sP9Xy9QGfoj/RC/bHO1Iv0Yr1EL9XL9HK9Qq/Uq/RqvUav1ev0er1Bb9Sb9Ga9RW/V2/R2vUPv1J/oXfpTvVt/pvfoz/Ve/YXep7/U+/VX+oD+Wh/U3+hD+lt9WH+nj+jv9VF9TB/XJ/RJ/YM+pU/rM/qsPqd/1Of1T/qCvvSloDDKKBNjYkysiTVxJs7kMrlMbpPbREzExJt4k8fkMXlNXpPf5DcJJsEUMoVMFjJkCpvCJmqipqgpaoqZYqaEKWGccSbRJJrSprQpY8qYsqasKWfKmfKmvLnd3G7uMHeYO82d5i5zl7nb3G2qmWqmhqlhapqappapZWqb2qaOqWPqmrqmnqln6pv6poFpYBqahqaRaWQam8amqWlqmpvmpoVpYVqalqa1aW3amDamrWlrkkySaWfamfamvelgOpiOpqPpZDqZzqaz6Wq6mm6mm+luuptkk2x6mV6mt+lt+pq+pr/pbwaYAWagGWhSTIoZbAabIWaIGWqGmmFmuBmRdcjM22aUGW3GmLEm1aSa8Wa8mWAmmIlmovEIkGbSzDQzzUw3081MM9PMMrPMbDPbzDVzTbpJN/PNfJNhMsxCs9Bkmkyz2Cw2S81Ss9wsNyvNSrParDZrYa1Zb9abjWaj2Ww2m61mq9lutpudZqfZZXaZ3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agOWQOmcPmsDlijpij5qg5bo6bk+akOWVOmTPmjDln8l38vPQm1ua0cfYqm8tebXPba+w/xvltAZtgC9pCVtu8Nt+vYmOtLWaL2xK2pHW2lE20N/0mLm8r2NttRXuHrWTvtJV/E9e099pa9j5b295va9h7fhXXsQ/YuvZRWw8RwDaxDWwz29A+ahvZx2xj28Q2tc1sG/uUbWuftkn2GdvOPvubeL5dYFfaVXa1XWN32U/tGXvWHrLf2nP2R9vd9rD97St2gH3VDrSv2RQ76DfxCPuWHWnftqPsaDvGjv1NPNlOsWl2qp1m37PT7YzfxOn2QzvLZtjZdo6da+f9HGfVlGE/sgvtxzbTLrKL7RK71C6zy+2K/1/rErvOrrcb7E77id1st9itdpvdbnf8HGftx277md1jP7cH7Td2n/3S7reH7QH79c9x1v4dtt/ZI/Z7e9Qes8ftCXvS/mBP2dM/73/Wvp+wP9kL1lsgJCBJigKKoRwUSzkpjq6iXHQ15aZrKELXUjxdR3noespL+Sg/FaAEKkiFSJMhS0QhFaYiFKUb6NJ5egkqSY5KUSLdRKXpZipDt1BZupXK0W1UnirQ7VSR7qBKdCdVpruoCt1NVakaVacadA/VpHupFt1Htel+qkMPUF16kOrRQ1SfHqYG9Ag1pEepET1GjakJNaVm1Jwepxb0BLWkVtSanqQ29BS1pacpiZ6hdvQstae/UQd6jjrS89SJXqDO1IW60ovUjV6i7tSDkqkn9aKXqTf1ob7Uj/rTKzSAXqWB9Bql0CAaTK/TEHqDhtKbNIyG0wh6i0bS2zSKRtMYGkupNI7G0zs0gd6liTSJJtMUSqOpNI3eo+k0g2bS+zSLPqDZNIfm0jxKpw9pPi2gDPqIFtLHlEmLaDEtoaW0jJbTClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttMO2kmf0C76lHbTZ7SHPqe99AXtoy9pP31FB+hrOkjf0CH6lg7Td74HfU9H6RgdpxN0kn6gU3SaztBZOkc/0nn6iS6QJwgxFKEMVRiEMWGOMDbMGcaFV4W5wqvD3OE1YSS8NowPrwvzhNeHecN8Yf6wQJgQFgwLhTo0oQ0pDMPCYZEwGt4QFg1vDIuFxcMSYcnQhaXCxPCmsHR4c1gmvCUsG94algtvC8uHFcJH768Y3hFWCu8MK4d3hVXCu8OqYbWwelgjvCesGd4b1grvC2uH94dlwgfCuuGDYb3wobB++HDYIHwkbBg+GjYKHwsbh03CpmGzsHn4eNgifCJsGbYKW4dPhm3Cp8K24dNhUvhM2C589uflDyz44+XJYc+wV/hy+HLo/X1ybnReND36YXR+dEE0I/pRdGH042hmdFF0cXRJdGl0WXR5dEV0ZXRVdHV0TXRtdF10fXRD1PsaOcChE0465QIX43K4WJfTxbmrXC53tcvtrnERd62Ld9e5PO56l9flc/ldAZfgCrpCTjvjrCMXusKuiIu6G1xRd6Mr5oq7Eq6kc66US3TNXHPX3LVwT7iWrpVr7Z50T7qn3FPuafe0e8a1c8+69u5vroN7znV0z7vn3Quus+viuroXXTc3Lvcvr8lk18v1cr1db9fX9XX9XX83wA1wA91Al+JS3GA32A1xQ9xQN9QNc8PcCDfCjXQj3Sg3yo1xY1yqS3Xj3Xg3wU1wE91EN9lNdmkuzU1z09x0N91VmvHLVma72W6um+vSXbqb77LOGTPcQrfQZbpMt9gtdkvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot8tf88ugbo/b6/a6fW6f2+++cgfc1+6g+8Ydct+6w+47d8R97466Y+64O+FOuh/cKXfanXFn3Tn3ozvvfnIXnHepkXGR8ZF3IhMi70YmRiZFJkemRNIiUyPTIu9FpkdmRGZG3o/MinwQmR2ZE5kbmRdJj3wYmR9ZEMmIxEYWRj6OZEYWRRZHlkSWRpZFvC+4OfSFfREf9Tf4ov5GX8wX9yV8Se98KZ/ob/Kl/c2+jL/Fl/W3+nL+Nl/eV/C3+8d8Y9/EN/XNfHP/uG/hn/AtfSvf2j/p2/infFv/tE/yz/h2/lnf3v/Nd/DP+Y7+ed/Jv+A7+y6+q3/Rd/Mv+e6+h0/2PX0v/7Lv7fv4vr6f7+9f8QP8q36gf82n+EF+sH/dD/Fv+KH+TT/MD/cjYt7yIy9dIsNYn+rH+fH+HT/Bv+sn+kl+sp/i0/xUP82/56f7GX6mf9/P8h/42X6On+vn+XT/oZ/vF/gM/5Ff6D/2mX7RpZvKfrlf4Vf6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+k/8Lv+p3+0/83v8536v/8Lv81/6/f4rf8B/7Q/6b/wh/60/7L/zR/z3/qg/5o/7E/6k/8Gf8qf9GX/Wn/M/+vP+J3+B/2aNMcYYY+xfMu7yrPi95T1/52fi71buBQBXbylw4O+XZ51Rrs37y3wfkdAmAgDP9Oj08KWpatXk5OSL62ZKCIrMAbj0TVCWGLgcL4LW8BQkQSso/bv19xFdztE/GT96K0Dc3+XEwuX48vhf/MH4jz85Yn658Ez874yPF8efA1CsyOWcnHA5XgStVdZjKyjzB+Pna/FP6s/5ZSpAy7/LyQWX48v1J8IT8Cwk/WpNxhhjjDHGGGPsF30ufv2Tdd156Tc+f+/6PEFdzskBl+N/cn3+wOL/aPWMMcYYY4wxxhj7V+x6ouvTjyclterwXJd/d6by/yiLZ/5jM1n9/BPp3l9OVwDwJ+sB+K8fhE3/lW2lXHzp/OOipWd9AP87ngl/xcyVfV9ijDHGGGOM/fV+ffV4mbpSBTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY9nQf+v/0jHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPZ2f8LAAD//xjHB2E=") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xa0, &(0x7f0000002800)={[{@data_ordered}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000001880)="$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") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000004dc0)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000004e00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000004e40)='./file1\x00', 0x4) 27.933897149s ago: executing program 3 (id=407): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 27.907320741s ago: executing program 3 (id=409): r0 = userfaultfd(0x801) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 27.680652614s ago: executing program 3 (id=415): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$key(0xf, 0x3, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000900)={r2, 0xffffffffffffffff, 0xfff8, 0x0, 0x0, 0x0, 0xea, 0x9, 0xfff7, 0x3, 0x0, 0x5ef, 'syz0\x00'}) 27.595147413s ago: executing program 34 (id=415): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$key(0xf, 0x3, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000900)={r2, 0xffffffffffffffff, 0xfff8, 0x0, 0x0, 0x0, 0xea, 0x9, 0xfff7, 0x3, 0x0, 0x5ef, 'syz0\x00'}) 2.327861084s ago: executing program 1 (id=949): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0xa, 0xa, 0x801, 0x0, 0x0, {0xf, 0x0, 0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004000) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 2.327648514s ago: executing program 1 (id=951): syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f00000004c0)='./file1\x00', 0x0, &(0x7f0000000500)={[{@usrquota}, {@acl}]}, 0x1, 0x4bc, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000001980)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) 2.226215395s ago: executing program 1 (id=955): mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe53a8000) r0 = openat(0xffffffffffffff9c, &(0x7f0000019280)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write$rnull_attr(r0, &(0x7f0000019340)='off', 0x3) 2.032607504s ago: executing program 1 (id=960): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 1.833062884s ago: executing program 5 (id=972): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$pokeuser(0x6, r0, 0x388, 0x12e) ptrace$pokeuser(0x6, r0, 0x388, 0xafffffd) 1.788881939s ago: executing program 5 (id=975): open(&(0x7f0000000180)='./bus\x00', 0x62842, 0xab) setrlimit(0x1, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x109480, 0x18a) copy_file_range(r1, 0x0, r0, 0x0, 0x3df1, 0x0) 1.736204504s ago: executing program 5 (id=978): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 1.320256886s ago: executing program 7 (id=996): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='+=', 0x2) 1.320072106s ago: executing program 7 (id=997): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x89901) syz_mount_image$vfat(&(0x7f00000011c0), &(0x7f0000001200)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f0000001240)) renameat2(0xffffffffffffff9c, &(0x7f0000001280)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', 0x4) move_mount(r0, &(0x7f0000001300)='.\x00', 0xffffffffffffff9c, &(0x7f0000001340)='./file0\x00', 0x0) 1.319927866s ago: executing program 7 (id=998): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$ext4(&(0x7f0000001640)='ext3\x00', &(0x7f0000001680)='./file0\x00', 0x4000000, &(0x7f0000001700)={[{@noload}, {@errors_continue}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f00000033c0)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x0, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000007c0)={0x897, 0xfffffffffffffc07, 0x3, 0xa, 0xc, 0xfffb}) 1.221998377s ago: executing program 7 (id=999): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ppoll(&(0x7f0000000100)=[{r1, 0x38}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 872.242792ms ago: executing program 5 (id=1001): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x1003, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="c9f7b986f2ca3a0800e370723eae", 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 860.441973ms ago: executing program 5 (id=1002): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='maps\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6}]}) socket$inet(0x2, 0x4, 0x2) close_range(r0, 0xffffffffffffffff, 0x3e00000000000000) 711.691698ms ago: executing program 6 (id=1006): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x1, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000c40)={{{@in6=@mcast1, @in=@local, 0x3, 0x8, 0x4e24, 0x10, 0x2}, {0x0, 0x0, 0x2000000, 0x2, 0x800, 0x2000000, 0x1, 0x400}, {0x1ff, 0xfffffffffffffff9, 0x4, 0xbfffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0xffffffff, 0x32}, 0xa, @in=@loopback, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x9}}, 0xe8) connect$inet6(r1, &(0x7f0000000d40)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 687.146531ms ago: executing program 6 (id=1008): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000800)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f00000009c0)=@generic={&(0x7f0000000dc0)='./file0\x00', r3}, 0x18) 644.408285ms ago: executing program 6 (id=1010): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x34, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@newtfilter={0x3c, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1}}]}}]}, 0x3c}}, 0x0) nanosleep(&(0x7f0000000900)={0x0, 0x1dcd6500}, 0x0) 644.279365ms ago: executing program 4 (id=1012): syz_mount_image$erofs(&(0x7f0000000700), &(0x7f0000000500)='./file3\x00', 0x808, &(0x7f0000000080)=ANY=[], 0x1, 0x1c3, &(0x7f00000009c0)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 588.248581ms ago: executing program 4 (id=1013): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="150000001000000008"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x8, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000900)='GPL\x00'}, 0x77) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r0, @ANYRES32=r2], 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r1}, &(0x7f0000000a40), &(0x7f0000000a80)}, 0x20) 587.750321ms ago: executing program 4 (id=1014): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000003740)=@newtfilter={0x8ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x878, 0x2, [@TCA_U32_POLICE={0x848, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0x8, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x4, 0x0, 0x9, 0x4bb, 0x5, 0x80000001, 0x2, 0xe0, 0xf9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x2, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x4, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x200, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0xff, 0xe9, 0x2a, 0x3, 0x891, 0x7, 0x1, 0x12, 0x6, 0x9, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0xffffffff, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x9, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xa, 0x9, 0x7, 0x0, 0x80e, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ac, 0xb, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x3, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x7, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74db, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x10000005, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x800004, 0x5, 0x20000000, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x4, 0x5, 0x7, 0x4, 0x3, 0x400, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x84f, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x2, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x800001, 0xfff7fffb, 0x8001, 0xff, 0x0, 0xfff, 0x82, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x8, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0xffffffff, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x806, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x7, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x7, 0x9, 0x200004, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x1, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x27e, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x1, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0xdd, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x7, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8, 0x3, 0x80000001}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) 587.602051ms ago: executing program 4 (id=1015): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x6) 584.260971ms ago: executing program 4 (id=1016): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x0, 0x2, 0x0, 0x7}}, {0x3, 0x1, 0x0, 0x0, @msi={0x1, 0x7, 0xb, 0x5}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 543.849315ms ago: executing program 4 (id=1017): pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r1, 0x0, 0xffff, 0x2) 332.230687ms ago: executing program 7 (id=1018): syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f00000000c0)='./file1\x00', 0x1000000, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c7574000400002c752c696f63686172736574502ddf33d000db8ca41682303d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e", @ANYRES16], 0xfe, 0x19c, &(0x7f0000000200)="$eJzs281qE1EYBuA3tdW2LtKFK3Ex4MZVaHsFFqkgBgSlCwVBsQ1IRwIWArqw2bnwJrwct3olLrsQRppp7Q+piNoMJM+zyQfnvMl3DiSZMzAvbr3Z3e7v9Z73vmSx1crc3arKQSsrmcuxYQCAaXJQVfleVVV1bZilz6mqqumOAIDL5v8fAGbPk6fPHm50u5uPi2IxKT8OtgZb9Ws9vtHL65TZyWra+ZHDC4QjdX3/QXdztRhZyady/yi/P9i6cja/lnZWxufX6nxxNr+Q5dP59bRzY3x+fWz+au7cPpXvpJ1vr9JPme0cZk/yH9aK4t6j7rn89dE8AAAAmAad4pex5/dO56LxOr/R+uP7A+fO1/O5Od/s2gFgVu29e7/7six33jZWJBn+Zs7X5brRyTVW/GX8eEub3Mx/K5by/995Ic2va3qK/txlf8RiklHR4I8SMBEn3/6mOwEAAAAAAAAAAAAAAC4yiUeXml4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALPnZwAAAP//RL2Oaw==") syz_mount_image$ext4(&(0x7f0000000cc0)='ext4\x00', &(0x7f0000000d00)='./file0\x00', 0x0, &(0x7f0000000d40)={[{@bsdgroups}, {@errors_remount}, {@nombcache}, {@noload}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0xff, 0x460, &(0x7f0000000dc0)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_mount_image$fuse(0x0, &(0x7f000001b200)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f000001b240)='./file0\x00', &(0x7f000001b280), 0x0, &(0x7f000001b2c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 332.076716ms ago: executing program 7 (id=1019): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x21081e, &(0x7f00000008c0)={[{@block_validity}, {@nogrpid}, {@quota}]}, 0x1, 0x526, &(0x7f0000000900)="$eJzs3c9vG1kdAPCvnTi/mt1klz0Agt2wu1BQVedH2WjZAywnhNBKiJW4gNQNiRtFseModpYmVCI9c0WiEic4cOAP4Fxx4M4FwY1LOVQqEIEaEAejGY9TN7XTtEntbPz5SKP58cbzfS/pvFd/Hc8LYGDNRMReRIxExEcRMZUdz2VLvN9ckvMe7t9aPti/tZyLRuPDf+TS8uRYtL0mcSm75lhEfO9bET/KPRm3trO7vlQul7ay/dl6ZXO2trN7da2ytFpaLW0sLCzOL869e+2dhSdeu9dIPXNb36iMZFufv/fHva/8JKnWZHak1Y7xZ77q8ZpNLxzGSQxHxHfOOE6/DGXtGel3RXgu+Yh4NSLeTO//qRhKf5sAwEXWaExFY6p9HwC46PJpDiyXL2a5gMnI54vFZg7vtZjIl6u1+pUb1e2NlWaubDoK+Rtr5dJcliucjkIu2Z9PtyOms+v+tJkaOiy/FhGvRMTPR8fT/eJytbzSx//3AMAgu3Rk/P/3aHP8BwAuuLGI3/y++b6931UBAHpkrN8VAAB6zvgPAIPH+A8Ag6c5/p/1oy8AgPPsa/2uAADQc/L/ADBQvvvBB8nSOMief73y8c72evXjqyul2nqxsr1cXK5ubRZXq9XV9Jk9laddr1ytbn7/fmzfnP76Zq0+W9vZvV6pbm/Ur6fP9b5eKqRn7fWgZQBAN6+8cfcvuWREfm88XaJtLodCX2sGvGj5flcA6JuhflcA6BuzfcHgOsV7fOkBuCA6TNH7mLFOXxDywFD4RLv8mSP5///K/8OgaMv/+ytgGDDy/zC45P9hcDUauZPO+R8nPREAON/k+IEun/+/mq1/m3048MOVo2fcOdHlfbYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAhdSa/7eYzQU+Gfl8sRjxUkRMRyF3Y61cmouIlyPiz6OF0WR/vs91BgBOK38/l83/dXnq7cnHil6/dLg5EhE//uWHv7i5VK9v/SliJPfP0dbx+p3s+MIxYRovrgUAwPFa43S6bnsj/3D/1nJr6WV9HnyzOTtoEvdgfyQODuMPx3C6HotCREz8K5ftN+XachensXc7Ij7dqf25mExzIM2pS4/GT2K/1NP4+cfi59Oy5jr5WXzqDOoCg+Zu0v+83+n+y8dMuu58/4+lPdTpZf1fcqnlg7QPfBS/1f8Nden/Zh7tjh8b46t/+Ha30x7cjvjscEQr9kFb/9OKn+sS/+0TtvGvn3v9zW5ljV9FXI7O8dtjzdYrm7O1nd2ra5Wl1dJqaWNhYXF+ce7da+8szKY56tnuo8Hf37vycreypP0TXeKPPaX9Xzxh+3/9v49+8IVj4n/5rU7x8/HaMfGTMfFLJ4y/NPG7rvNvJ/FXurT/ab//KyeMf+9vu09MGw4A9E9tZ3d9qVwubdmwcf43kn+yLzbEzHO//Bu9+iGMROein73VvKePFDUazY3b8UyxuvUYZ5F1A86Dw5s+Iv7T78oAAAAAAAAAAAAAAAAd9eIbS/1uIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfX/wMAAP//B0flCg==") pipe2$9p(&(0x7f00000026c0)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000002640)='./file1\x00', &(0x7f0000002680), 0x10000, &(0x7f0000003f40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 161.364994ms ago: executing program 6 (id=1020): unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') fchdir(r0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 149.962125ms ago: executing program 6 (id=1021): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000100)) 32.224607ms ago: executing program 6 (id=1022): timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {r1, r2/1000+10000}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13.818469ms ago: executing program 5 (id=1023): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) read$hiddev(r0, &(0x7f0000000200)=""/102, 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x822b01) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000003c0)={{0x2, 0x200, 0xfffffe01, 0xffffffff, 0xfffffffc, 0xa80}, 0x13, [0x8, 0x0, 0x9, 0x40, 0x80000001, 0x4, 0x4, 0x5, 0x3, 0x9, 0x8000, 0x3, 0x9, 0x22, 0x5, 0x9, 0x10001, 0xc7, 0x1, 0xa7b, 0x5, 0x3, 0x6, 0x8000, 0x80, 0x2, 0x6ad, 0x4, 0x8, 0x8, 0xffff, 0x5, 0x2, 0x2, 0xe, 0x70e, 0x10000, 0x36c3, 0x1, 0x7c, 0x9, 0x7, 0x6, 0x3, 0xdf, 0xfd, 0x3, 0x9, 0x5, 0xea96, 0x7, 0xffff, 0x81, 0xceb5, 0x0, 0x2, 0xdd15, 0x9, 0x1, 0x7fffffff, 0x10, 0x3, 0x8, 0x4, 0xc595, 0x81, 0x9, 0x5, 0x9, 0xfffffffa, 0x80000000, 0x8, 0xde5, 0x2, 0x274b, 0xf, 0xc, 0x3, 0x7, 0x6, 0x0, 0x2, 0x8, 0x800, 0x20b2, 0xb3e, 0xff, 0x7, 0x4ecf, 0x9c, 0x10001, 0x1ff, 0xc, 0xff, 0x10000, 0x80000000, 0x9, 0x6, 0x1, 0xcf, 0x1000, 0x400, 0x0, 0x54c00000, 0xb, 0x6, 0x1, 0x3, 0xffffe913, 0x6, 0x2, 0xfff, 0xff, 0x2, 0x80000001, 0xfffffffb, 0x6, 0x9, 0x2, 0xa, 0x4, 0x6, 0x5, 0x80000000, 0x2, 0x3ff, 0xffffffff, 0x5, 0x8, 0x2, 0xffffffff, 0x7, 0x4, 0x9, 0x83df, 0x1b38, 0x4385, 0x6, 0x7, 0x0, 0x9, 0xf2, 0x3, 0x1839, 0x9, 0x66, 0x7ff, 0x6, 0x3, 0x6, 0x6, 0x101, 0x6, 0xff, 0xfc59, 0x80000001, 0x2a, 0x8001, 0x4, 0x8001, 0x1, 0x5, 0x9, 0x3, 0x7, 0xfffffff8, 0x6, 0x7, 0x2, 0x8, 0x3, 0x9, 0x10000, 0x8, 0xd, 0x9, 0x6, 0xa, 0x7, 0x8, 0x8000, 0xfff, 0xfffff5cf, 0x1, 0x1, 0xfff, 0x4, 0x7fffffff, 0xff, 0xe65, 0x4, 0x9d9, 0x7fff, 0x8, 0x2, 0x4000000, 0x4, 0x7f0, 0x10, 0x8, 0x6, 0x4, 0xcb1, 0x7, 0x8, 0x5, 0x3, 0x0, 0x454, 0x6, 0x24000000, 0x6, 0x6, 0x9, 0x1, 0x9, 0x9, 0x7fff, 0x7, 0x3a, 0xfffffffb, 0x0, 0xfff, 0xb, 0x10, 0x5, 0x6, 0x9, 0x0, 0x0, 0xb7, 0x5, 0x4, 0x0, 0x2, 0x7, 0x8, 0x2, 0xffffffff, 0x0, 0x63eb, 0xb509, 0x7d, 0x8, 0x7, 0x2, 0x4, 0x8, 0x8, 0x5, 0x9f, 0x8000, 0x8, 0xfffff801, 0x4, 0x3, 0x7ff, 0x10001, 0x200, 0x100000, 0x3ff, 0x10, 0x1ff, 0x6, 0x3, 0x0, 0x2, 0x9eb, 0x2, 0xbc72, 0x6, 0xc097, 0x5, 0x3, 0x6, 0x504, 0x10000, 0xfffffff9, 0x10000, 0x9, 0x6, 0x7, 0x2, 0x7, 0x9, 0x2, 0x8, 0x4f, 0x7fffffff, 0x3ff, 0xa, 0x7, 0x3, 0x3, 0x6, 0x3, 0x3, 0x7fffffff, 0x9, 0x2, 0x7, 0xfffffffb, 0x4, 0x7, 0x81, 0x4, 0x2f, 0xffffffff, 0xe6, 0x5, 0x0, 0x1, 0x5, 0x4, 0x7, 0xfffff120, 0x45, 0x5, 0xa8e7, 0x2, 0x0, 0x6c9b825f, 0x9, 0xa273, 0x5d00000, 0x5, 0x1, 0x8, 0x3, 0x1, 0xffffffff, 0x8, 0x7fff, 0xe, 0x4, 0x101, 0x3, 0xffff, 0xaf5a, 0x1, 0x80000001, 0x3, 0x81, 0x4, 0xfffffffe, 0x6, 0x0, 0x9, 0x4fee, 0x8, 0x5e, 0x977, 0x0, 0x8a, 0xffff3146, 0x28d0ac71, 0x8, 0x80000000, 0x1, 0x4, 0x5, 0xfffff40f, 0x10, 0x8, 0x0, 0x91c, 0x7ccc427d, 0x3b8, 0x0, 0x5, 0x8001, 0xfffffffd, 0x40100, 0x8, 0x9, 0x353d, 0x2, 0x7, 0xfffffffb, 0x9c2d, 0x8, 0x68, 0x6, 0x200, 0x1, 0x4, 0x5, 0x45b9, 0x3d44a06, 0xfffffff9, 0x7, 0xb5e1, 0x1, 0x7, 0x1, 0xb, 0x80000000, 0x9, 0xb1d, 0x9, 0x5c, 0x5, 0x9, 0x7, 0x200, 0x1a4, 0xfffffff7, 0x6, 0x0, 0x8, 0xda0, 0xf46, 0x2, 0x6, 0x769a, 0x0, 0x1, 0x0, 0x7b, 0x7, 0x2000, 0x8, 0x7, 0x1, 0x8, 0x934a, 0x1, 0x7fffffff, 0xffff0001, 0xffff, 0x6, 0x10000, 0x2, 0x5, 0x7, 0x6, 0x4, 0x1, 0x9d4, 0x5, 0x6, 0x2, 0x2, 0x1, 0x0, 0xeaa, 0x0, 0x0, 0x6, 0x3, 0x5, 0xe8, 0x5, 0x40, 0x0, 0x7, 0x6, 0x9, 0x10001, 0x2, 0x0, 0x2, 0x6, 0xffffff81, 0x72b, 0x7, 0x5, 0x3, 0x2, 0xefe0, 0x3, 0x3, 0x8f, 0x80000, 0x40000000, 0x8, 0x80000000, 0x8, 0x3ff, 0x3068, 0x1, 0x3, 0xffffff12, 0x6, 0xfffffff5, 0xffffffff, 0x6, 0x9, 0x1711, 0x3, 0x330a2da5, 0xc54e, 0x89e, 0x7fff, 0xc1, 0x7fffffff, 0x2, 0x3, 0x1, 0x0, 0x1, 0x5, 0x7f, 0x800, 0xb, 0xfffffe00, 0x9, 0x5, 0x8, 0xffff, 0xd, 0xfffffffb, 0x9, 0xffffff81, 0x8d, 0xffffffff, 0x2, 0x5, 0x4, 0x6, 0x2, 0x88, 0x8, 0x7, 0xfffffff8, 0x4b8, 0xe29, 0x6, 0x2, 0x8, 0xc00, 0x0, 0x10, 0x10, 0x0, 0x11, 0x7, 0xffff, 0x7fffffff, 0x25, 0x40e1, 0x2, 0x2, 0x6, 0x6, 0xa, 0x10001, 0x1ef9, 0x0, 0x2, 0x4, 0x3, 0x101, 0x1, 0x1, 0x7a, 0xffffffff, 0x4, 0x1, 0x200000, 0x9, 0x2, 0xb1c2, 0x6, 0x3, 0x7, 0x5, 0x5, 0x0, 0x8, 0xa, 0x80000000, 0x8, 0xffff, 0x9, 0x1, 0x8, 0xf63d, 0x7, 0x2e7d, 0x1, 0x6, 0x3ff, 0xb, 0x10, 0x0, 0x5, 0x9, 0x0, 0x4, 0x17, 0x8, 0xd71, 0x8, 0x4, 0xd646, 0x100000, 0x7, 0x1, 0x6, 0x9, 0x6, 0x9, 0xb, 0x3, 0xfffffffc, 0x6, 0x2, 0x76, 0x80000001, 0x9, 0xae, 0xffffff81, 0x7f, 0x5, 0x8, 0x6, 0xfffffff7, 0xfe1f, 0x2, 0xd973, 0x8a, 0xd360, 0x9, 0x7, 0x6, 0xffff, 0x9, 0x80000000, 0x9, 0x0, 0x2, 0xb, 0x5, 0x7, 0x1c, 0xb, 0x2, 0xeb, 0x4, 0xfff, 0x2, 0xa000000, 0xb0, 0x3b, 0x0, 0x2, 0x6, 0x6, 0x5, 0x6, 0x4e, 0x1, 0x1000000, 0x8001, 0x0, 0x3, 0x8, 0x8, 0x4, 0x2, 0x0, 0x7, 0x5, 0x4, 0x5, 0x1ff, 0x7, 0x0, 0x10, 0x4, 0x1, 0x2, 0x5, 0x3, 0x80000000, 0x32, 0x0, 0x2, 0x8, 0x2, 0x13, 0x4, 0x5, 0x9, 0x3, 0x0, 0xc, 0x3011, 0x4, 0xcae, 0x10001, 0x7, 0x7, 0x8, 0x7f, 0x10, 0x6, 0x3ff, 0x1, 0x9, 0x4, 0x15, 0x4, 0x3, 0x78, 0x80000000, 0x2f, 0xff, 0x1600000, 0xf, 0x1ff, 0xffffffff, 0x7, 0x7, 0x8, 0x2, 0x6, 0x9, 0x4, 0xff, 0x8f, 0x1, 0x8, 0x0, 0x9, 0xb, 0x1, 0xe, 0x1, 0x5, 0x7, 0x7, 0x2, 0x1, 0x3, 0x80000000, 0x3ff, 0xfffffffb, 0x80, 0x6, 0x100, 0x6, 0xfffffffd, 0x3, 0xe, 0xfffffff7, 0x4, 0x2, 0x968, 0x7fffffff, 0x1ff, 0xfffffffa, 0x2, 0x6, 0x7, 0x5, 0x3, 0xffff, 0xef6d, 0x7, 0x3dc8, 0x7, 0x7, 0x2, 0x4145, 0x0, 0x10000000, 0x0, 0xfffffff7, 0x6, 0x59, 0x8, 0x3, 0x80000001, 0x1, 0x6, 0x2, 0x8, 0x7fff, 0x1, 0x2, 0x88, 0x5, 0x8, 0x401, 0x6, 0x2ee, 0xe, 0x1ff, 0x2, 0x4, 0x7, 0x7, 0x800, 0x3, 0x3, 0x2, 0x7, 0x9, 0x58, 0x8, 0xffffff4e, 0x1, 0x1, 0x6, 0x3, 0xcc35, 0x3, 0xd, 0xb, 0x9, 0x1, 0x8, 0x100, 0xe, 0x2000, 0x4, 0x6, 0x200, 0x1, 0x5, 0x2, 0x0, 0x6, 0x5, 0xffffff81, 0x1, 0xae, 0x2, 0x8, 0x7fffffff, 0xf, 0x9, 0x10, 0x2, 0x9, 0xa7, 0xfffff558, 0xed03, 0xcda6, 0x5, 0x3, 0x401, 0x3ff, 0x80f, 0x10001, 0x1, 0x5, 0x6, 0x1000, 0x0, 0x8001, 0x0, 0xfffff000, 0xf, 0xcf, 0x1, 0x3, 0x3, 0x3000, 0x0, 0x2, 0xefe5, 0x8, 0xc67e, 0x4, 0x6fe2, 0x382, 0x3, 0x9, 0x7, 0x16, 0x7fff, 0x2, 0x9, 0xdb0, 0x3, 0x3, 0x8000, 0xd, 0x9, 0xb38, 0x3, 0xd01, 0x6, 0x8, 0x39d, 0x7fffffff, 0x80000001, 0x7, 0x1, 0x7, 0xfffffff7, 0xabd0, 0x7, 0xfffffff7, 0x6, 0x1, 0x8, 0x3ff, 0x3, 0x3, 0x1ff, 0x21, 0xfffffffa, 0x3, 0x2, 0x9, 0xffff, 0x6, 0x7, 0x3, 0x3, 0x9, 0x4, 0x2, 0x84c4, 0x400, 0x9, 0x81, 0x1, 0x9, 0x3, 0x10001, 0x8, 0x5, 0x9, 0x7, 0x1ff, 0x2, 0x2, 0xf, 0x0, 0x2632, 0x7363, 0x7ff, 0x3, 0x8, 0xc, 0x2, 0x2, 0x3, 0x3, 0xd, 0xfffffff8, 0xffff8001, 0x9, 0x3, 0xf, 0xf329, 0x101, 0x0, 0x8001, 0xfffffff9, 0x1, 0x4, 0x80, 0xc8, 0x7f, 0x9, 0x7, 0x5e074157, 0x1, 0x9, 0x5, 0x4, 0x8, 0xb0, 0x3, 0x1000, 0x1, 0x91e, 0x3, 0x9, 0x4, 0x2cae, 0x8831, 0x9, 0x100, 0x1, 0x10000, 0x80000001, 0x8000, 0x10, 0x7fffffff, 0x7, 0x6, 0xfffffffe, 0x5, 0xed, 0x80000001, 0x7f, 0xfe67, 0xef, 0xa, 0x6, 0x6d, 0x0, 0x9, 0x4, 0x9, 0x5, 0x4, 0x6, 0x7, 0x4, 0x2, 0x101, 0x9, 0x8001, 0xa, 0x6, 0x1, 0x9, 0x81, 0x5, 0xd7a9, 0x7, 0x2, 0xfffffffd, 0x9, 0x9, 0x2]}) write$char_usb(r1, &(0x7f00000002c0)="e2", 0x1068) 12.691099ms ago: executing program 1 (id=1024): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) mount$bpf(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x18728b6, &(0x7f0000000340)={[{@gid={'gid', 0x3d, r1}}]}) 0s ago: executing program 1 (id=1025): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000002c0)={[{@discard}, {@fmask={'fmask', 0x3d, 0x1}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@discard}, {@namecase}, {@errors_remount}, {@namecase}, {@umask={'umask', 0x3d, 0x81}}, {@errors_continue}, {@namecase}]}, 0x1, 0x1535, &(0x7f0000000380)="$eJzs3AucjdX6OPDnWWu9Y0jaTXIZ1lrPy04uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v57M/s55Z+1nvs+aZvfe739l802VojUY1qzYgIvhD8OKXBACIBYCBAHANAAQAUDaubFzGfHaJCX/sIOzP9VDyla6AXUnc/6yN+5+1cf+zNu5/1sb9z9q4/1kb9z9r4/4zlpVtnp7/Wr5l3Rtf/8/K+PX/v0h6ybFfrC15fVeAmH81hfv//z/8A7nc//9awb9yJ+5/1sb9z6pir3QB7H8BfvxnBdn+4Qz3P2vj/jOWlf3yWnAsXPnr0X/1DSL/yb+B+F4Xf8pXfp//cP+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxthf4Iy/TAFA5vhK18UYY4wxxhhjjLE/j892pStgjDHGGGOMMcbYfx6CAAkKAoiBbBAL2SEHCICYzPlrIQ6ug9xwPeSBvJAP8kM8FICCoMGABYIQCkFhiMINUARuhKJQDIpDCXBQEkrBTVAaboYycAuUhVuhHNwG5aECVIRKcDtUhjugCtwJVeEuqAbVoQbUhLuhFtwDteFeqAP3QV24H+rBA1AfHoQG8BA0hIehETwCjeFRaAJNoRk0hxb/o/wXoAe8CD2hFyRAb+gDL0Ff6Af9YQAMhJdhELwCg+FVSIQhMBReg2HwOgyHN2AEjIRR8CaMhrdgDIyFcTAekmACTIS3YRK8A5NhCkyFaZAM02EGvAszYRbMhvdgDrwPc2EezIcFkAIfwEJYBKnwISyGjyANlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB+yEj2EXfAK7YQ/shU9hH3z2b+af/rv8rggIKFCgQoUxGIOxGIs5MAfmxJyYC3NhBCMYh3GYG3NjHsyD+TAfxmM8FsSCaNAgIWEhLIRRjGIRLIJFsSgWx+Lo0GEpLIWl8WYsg2WwLJbFclgOy2MFrICVsBJWxspYBatgVayK1bAa1sAaeDfejb2xNtbGOlgH62LdzMtT2AAbYENsiI2wETbGxtgEm2AzbIYtsAW2xJbYClthG2yDbbEttsN22B7bYwfsgB2xI3bCTtgZO2MX7IJdsRt2S38hG+CL+CL2wmqiN/bBPtgXE7P1xwE4AF/GQfgKvoKvYiIOwaH4Gr6Gr+NwPIUjLozEUTgKK4u3cAyORRLjMQmTcCJOxEk4CSfjFJyC0zAZp+MMnIEzcRbOwvdwDr6P7+M8nIcLMAVTcCEuwlRMxcV4GtNwCS7FZbgcV+ByXIWrcRWuxXW4FjfgBtyEm3ALbsFtuA134A78GBUAfoJ7cA8m4j7ch/txPx7AA3gQD2I6puMhPISH8TAewSN4FI/iMTyOJ/A4nsSTeApP4xk8g+fwHJ7H5+K/avhxsTWJIDIooUSMiBGxIlbkEDlETpFT5BK5RERERJyIE7lFbpFH5BH5RD4RL+JFQVFQGGEEiTDjmUJERVQUEUVEUVFUFBfFhRNOlBKlRGlRWpQRZURZcasoJ24T5UUF0dpVEpVEZdHGVRF3iqqiqqgmqosaoqaoKWqJWqK2qC3qiDqirqgr6okHRH3RG/vjQyKjM43EEGwshmIT0VTIS89QLcVwbCVaizbiCTESR2A70dK1F0+LDmIMdhR/E2PxWdFZjMcu4nnRVXQT3cULoodo5XqKXmIy9hZ9xDTsK/qJ/mKAmInVxXs4J3sN8apIFEPEUPGaWICvi+HiKjFCjBSjxJtitHhLjBFjxTgxXiSJCWKieFtMEu+IyWKKmCqmiWQxXcwQ74qZYpaYLd4Tc8T7Yq6YJ+aLBSJFfCAWikUiVXwoFouPRJpYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdoqPxS7xidgt9oi94lOxT3wm9ovPxQHxhTgovhTp4itxSHwtDotvxBHxrTgqvhPHxHFxQnwvToofxClxWpwRZ8U58aM4L34SF4QXIFEKKaWSgYyR2WSszC5zyKtkThlkPv/LOHmdzC2vl3lkXplP5pfxsoAsKLU00kqSoSwkC8uovEEWkTfKorKYLC5LSCdLylLyJlla3izLyFtkWXmrLCdvk+VlBVlRVpK3y8ryDgmRi8eoJqvLGrKmvFsmwD2ytrxX1pH3ybryfllPPiDrywdlA/mQbCgflo3kI7KxfFQ2kU1lM9lctpCPyZbycdlKtpZt5BOyrXxStpNPyfbyadlB+ku/Is/KzvI52UU+L7vKbrK7/ElekF72lL0k9AbZR74k+8p+sr8cIAfKl+Ug+YocLF+ViXKIHCpfk8Pk63K4fEOOkCPlKPmmHC3fkmPkWDlOjpdJcoKcKN+Wk+Q7crKcIqfKaTJZTpf9L600W8p/mv/27+QP/vnom+RmuUVuldvkdrlD7pQfy11yl9wtd8u9cq/cJ/fJ/XK/PCAPyIPyoEyX6fKQPCQPy8PyiDwij8qj8pg8Ls/K7+VJ+YM8JU/L0/KsPCfPyfOXfgagUAkllVKBilHZVKzKrnKoq1ROdbXKpa5REXWtilPXqdzqepVH5VX5VH4Vrwqogkoro6wiFapCqrCKqhvw0i+MKq5KKKdKqlLqpn8nXxVRN6qiqtiv8jPrS/gH9bVQLVRL1VK1Uq1UG9VGtVVtVTvVTrVX7VUH1UF1VB1VJ9VJdVadVRfVRXVVXVV31V31UD1UT9VTJagE1Ue9pPqqfqq/GqAGqpdFxh4Gq8EqUSWqoWqoGqaGqeFquBqhRqhRapQarUarMWqMGqfGqSSVpCaqiWqSmqQmq8lqqpqqklWymqFmqJlqppqtZqs5ao6aq+aq+Wq+SlEpaqFaqFJVqlqsFqs0tUQtUcvUMrVCrVCr1Cq1Rq1R69Q6tUFtUGlqs9qstqqtarvarnaqnWqX2qV2q91qr9qr9ql9ar/arw6oA+qgOqjSVbo6pA6pw+qwOqKOqKPqqDqmjqkT6oQ6qU6qU+qUOqPOqHPqnDqvzqsL6kLGaV8gAhGoQAUxQUwQG8QGOYIcQc4gZ5AryBVEgkgQF8QFuYPrgzxB3iBfkD+IDwoEBQMdmMAG4lLTo8ENQZHgxqBoUCwoHpQIXFAyKBXcFJQObg7KBLcEZYNbg3LBbUH5oEJQMagU3B5UDu4IqgR3BlWDu4JqQfWgRlAzuDuoFdwT1A7uDeoE9wV1g/uDesEDQf3gwaBB8FDQMHg4aBQ8EjQOHg2aBE2DZkHzoMWfur73p/I+7nrqXjpB99Z99Eu6r+6n++sBeqB+WQ/Sr+jB+lWdqIfoofo1PUy/rofrN/QIPVKP0m/q0fotPUaP1eP0eJ2kJ+iJ+m09Sb+jJ+speqqeppP1dD1Dv6tn6ll6tn5Pz9Hv67l6np6vF+gU/YFeqBfpVP2hXqw/0ml6iV6ql+nleoVeqVfp1XqNXqvX6fV6g96oN+nNeoveqrfp7XqH3qk/1rv0J3q33qP36k/1Pv2Z3q8/1wf0F/qg/lKn66/0If21Pqy/0Uf0t/qo/k4f08d1Gf29Pql/0Kf0aX1Gn9Xn9I/6vP5JX9A+4+Q+4+XdKKNMjIkxsSbW5DA5TE6T0+QyuUzEREyciTO5TW6Tx+Qx+Uw+E2/iTUFT0GQgQ6aQKWSiJmqKmCKmqClqipvixhlnSplSprQpbcqYMqasKWvKmXKmvClvKpqK5nZzu7nD3GHuNHeau8xdprqpbmqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqZZqaFaWFampamlWll2pg2pq1pa9qZdqa9aW86mA6mo+loOplOprPpbLqYLqar6Wq6m+6mh+lhepqeJsEkmD6mj+lr+pr+pr8ZaAaaQWaQGWwGm0STaIaaoWaYGWaGm+FmhBlpRmWcqJq3zBgz1owz402SSTITzUQzyUwyk81kM9VMNckm2cwwM8xMM9PMNrPNHDPHzDVzzXwz36SYFLPQLDSpJtUsNotNmkkzS81Ss9wsNyvNSrParDZrzVqzHtabjWaj2Ww2m61mq9lutpudZqfZZXaZ3Wa32Wv2mn1mn9lv9psD5oA5aA6adJNuDplD5rA5bI6YI+aoOWqOmWPmhDlhTpqT5pQ5Zc6YM+acyXvp9dKbWJvd5rBX2Zz2apvLXmP/Ps5n89t4W8AWtNrmsXl/FRtrbVFbzBa3JayzJW0pe9Nv4vK2gq1oK9nbbWV7h63ym7iWvcfWtvfaOvY+W9Pe/au4rr3f1rOP2PqIALapbWib20b2EdvYPmqb2Ka2mW1u29onbTv7lG1vn7Yd7DO/iRfaRXa1XWPX2nV2t91jz9iz9rD9xp6zP9qetpcdaF+2g+wrdrB91SbaIb+JR9k37Wj7lh1jx9pxdvxv4ql2mk220+0M+66daWf9Jk6xH9g5NtXOtfPsfLvg5zijplT7oV1sP7JpNoCldpldblfYlXbV/611md1gN9pNdpf9xG612+x2u8PuzDwRtnvsXvup3Wc/s4fs1/aA/cIetEdsuv3q5zhjf0fst/ao/c4es8ftCfu9PWl/UJnZGXv/3v5kL1hvgZCAJCkKKIayUSxlpxx0FeWkqykXXUMRupbi6DrKTddTHspL+Sg/xVMBKkiaDFkiCqkQFaYo3UCZ5RWnEuSoJJWim6g03Uxl6BYqS7dSObqNylMFqkiV6HaqTHdQFbqTqtJdVI2qUw2qSXdTLbqHatO9VIfuo7p0P9WjB6g+PUgN6CFqSA9TI3qEGtOj1ISaUjNqTi3oMWpJj1Mrak1t6AlqS09SO3qK2tPT1IGeoY70N+pEz1Jneo660PPUlbpRd3qBetCL1JN6UQL1pj70EvWlftSfBtBAepkG0Ss0mF6lRBpCQ+k1Gkav03B6g0bQSBpFb9JoeovG0FgaR+MpiSbQRHqbJtE7NJmm0FSaRsk0nWbQuzSTZtFseo/m0Ps0l+bRfFpAKfQBLaRFlEof0mL6iNJoCS2lZbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ120E76mHbRJ7Sb9tBe+pT20We0nz6nA/QFHaQvKZ2+okP0NR2mb+gIfet70Xd0jI7TCfqeTtIPdIpO0xk6S+foRzpPP9EF8gQhhiKUoQqDMCbMFsaG2cMc4VVhzvDqMFd4TRgJrw3jwuvC3OH1YZ4wb5gvzB/GhwXCgqEOTWhDCsOwUFg4jIY3hEXCG8OiYbGweFgidGHJsFR4U1g6vDksE94Slg1vDcuFt4XlwwrhI/dVCm8PK4d3hFXCO8Oq4V1htbB6WCOsGd4d1grvCWuH94Z1wvvCMuH9Yb3wgbB++GDYIHwobBg+HDYKHwkbh4+GTcKmYbOwedgifCxsGT4etgpbh23Cq8K24ZNhu/CpsH34dNghfObn+fsXZc4/8Zv5hLB32Cd8KXwp9P5eOT+6IJoS/SC6MLoomhr9MLo4+lE0LbokujS6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kep9zWzg0AknnXKBi3HZXKzL7nK4q1xOd7XL5a5xEXeti3PXudzuepfH5XX5XH4X7wq4gk4746wjF7pCrrCLuhtcEXejK+qKueKuhHOupCvlmrsWroVr6R53rVxr18Y94Z5wT7on3VPuKfe06+CecR3d31wn96zr7J5zz7nnXVfXzXV3L7gebkKui4/JBNfH9XF9XV/X3/V3A91AN8gNcoPdYJfoEt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NckktyE91EN8lNcpPdZDfVTXXJLtnNcDPcTDfTVZ518Shz3Vw33813KS7FLXQZ54ypbrFb7NJcmlvqlrrlbrlb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+l2ul1ul9vtr7m4qNvn9rv97oA74A66L126+8odcl+7w+4bd8R9646679wxd9ydcN+7k+4Hd8qddmfcWXfO/ejOu5/cBeddUmRCZGLk7cikyDuRyZEpkamRaZHkyPTIjMi7kZmRWZHZkfcicyLvR+ZG5kXmRxZEUiIfRBZGFkVSIx9GFkc+iqRFlkSWRpZFlkdWRLwvsDX0hXxhH/U3+CL+Rl/UF/PFfQnvfElfyt/kS1+sO837W305f5sv7yv4iv5R38Q39c18c9/CP+Zb+sd9K9/at/FP+Lb+Sd/OP+Xb+6d9B/+M7+j/5jv5Z31n/5zv4p/3XX03392/4Hv4F31P38sn+N6+j3/J9/X9fH8/wA/0L/tB/hU/2L/qE/0QP9S/5of51/1w/4Yf4Uf6UTFv+tGZb5FhvE/yE/xE/7af5N/xk/0UP9VP88l+up/h3/Uz/Sw/27/n5/j3/Vw/z8/3C3yK/8Av9It8qv/QL/Yf+TS/JPOisV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/ntfoff6T/2u/wnfrff4/f6T/0+/5nf7z/3B/wX/qD/0qf7r/wh/7U/7L/xR/y3/qj/zh/zx/0J/70/6X/wp/xpf8af9ef8j/68/8lf4H+zxhhjjDH2L5lweSh+PXPxcn7v38kRv7hzHwC4elv+9F/OZ5xRrs9zcdxPxMdmfH26V5eHMm/VqiUkJFy6b5qEoPA8gMy/BGX4+aMHl+Il0AaehPbQGkr/bv39RLdz9E/Wj94KkOMXORkFZcaX1/8cABN+s99+4rEnRi0sF56J+3+sPw+gaOHLOdnhcrwE2vx8faU1lPkH9edt+U/qz/5FEkCrX+TkhMvx5fpLwePwDLT/1T0ZY4wxxhhjjLGL+omKnTLff2Z+4vP33p/Hq8s52eBy/M/enzPGGGOMMcYYY+zKe7Zb96cea9++dad/f1Dlf5T1Lw8aw39qZR787sB7gMzvKAD4gwsCZAzkX7mLLX/JsRIvPXT+fmr5WR/A/45W/hmDK/zExBhjjDHGGPvTXT7p//X31ZUqiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4L+iv9O7ErvkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvS/k8AAAD///P/+v8=") syz_mount_image$exfat(0x0, &(0x7f0000002040)='./bus\x00', 0x38c180a, 0x0, 0x0, 0x0, &(0x7f0000002080)) syz_mount_image$vfat(&(0x7f00000020c0), &(0x7f0000002100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000002200)) rename(&(0x7f0000002240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002340)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./my_debugfs/usb/devices\x00', 0x84502, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. [ 22.828584][ T28] audit: type=1400 audit(1794012843.737:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.832664][ T279] cgroup: Unknown subsys name 'net' [ 22.851289][ T28] audit: type=1400 audit(1794012843.737:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.878656][ T28] audit: type=1400 audit(1794012843.767:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.878993][ T279] cgroup: Unknown subsys name 'devices' [ 23.019524][ T279] cgroup: Unknown subsys name 'hugetlb' [ 23.025186][ T279] cgroup: Unknown subsys name 'rlimit' [ 23.130734][ T28] audit: type=1400 audit(1794012844.037:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.153986][ T28] audit: type=1400 audit(1794012844.037:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.179028][ T28] audit: type=1400 audit(1794012844.037:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.211273][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.220411][ T28] audit: type=1400 audit(1794012844.127:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.245984][ T28] audit: type=1400 audit(1794012844.127:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.278864][ T28] audit: type=1400 audit(1794012844.187:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.280369][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.304826][ T28] audit: type=1400 audit(1794012844.187:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.086480][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.093622][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.101302][ T287] device bridge_slave_0 entered promiscuous mode [ 24.111389][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.118559][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.126041][ T287] device bridge_slave_1 entered promiscuous mode [ 24.155815][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.162969][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.170509][ T288] device bridge_slave_0 entered promiscuous mode [ 24.179425][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.186491][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.194034][ T288] device bridge_slave_1 entered promiscuous mode [ 24.273987][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.281515][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.289175][ T289] device bridge_slave_0 entered promiscuous mode [ 24.319689][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.326913][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.334449][ T289] device bridge_slave_1 entered promiscuous mode [ 24.368102][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.375190][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.382749][ T291] device bridge_slave_0 entered promiscuous mode [ 24.392889][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.400116][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.407669][ T291] device bridge_slave_1 entered promiscuous mode [ 24.475937][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.483047][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.490629][ T290] device bridge_slave_0 entered promiscuous mode [ 24.500591][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.507728][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.515202][ T290] device bridge_slave_1 entered promiscuous mode [ 24.593978][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.601133][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.608476][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.615550][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.633454][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.640644][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.648044][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.655087][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.681391][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.688495][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.695799][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.702881][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.768431][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.775520][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.782866][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.789929][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.803010][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.810244][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.817560][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.824598][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.833799][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.841169][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.848569][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.855810][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.863410][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.871340][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.878868][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.887103][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.894691][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.902227][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.909696][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.939369][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.948006][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.956214][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.963320][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.970747][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.979227][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.986296][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.993962][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.002255][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.009438][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.016800][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.025112][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.032161][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.039630][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.047154][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.054705][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.062935][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.070002][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.077535][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.085716][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.092807][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.115824][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.124056][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.132379][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.142353][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.150464][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.158505][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.184318][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.192652][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.200797][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.209413][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.218206][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.225670][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.233665][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.242112][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.250367][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.257445][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.265205][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.273901][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.282608][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.289819][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.297485][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.305643][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.332209][ T288] device veth0_vlan entered promiscuous mode [ 25.339113][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.348462][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.358220][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.366588][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.375121][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.383294][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.391564][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.399105][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.413388][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.421526][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.430045][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.438031][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.446435][ T289] device veth0_vlan entered promiscuous mode [ 25.468754][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.476320][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.483880][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.493144][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.501550][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.508760][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.516206][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.524737][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.533067][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.540333][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.547970][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.556396][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.564995][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.573048][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.581429][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.589078][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.604825][ T288] device veth1_macvtap entered promiscuous mode [ 25.615137][ T287] device veth0_vlan entered promiscuous mode [ 25.621973][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.630298][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.638575][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.646754][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.655203][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.663112][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.676303][ T289] device veth1_macvtap entered promiscuous mode [ 25.693533][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.702184][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.711113][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.719963][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.728686][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.736960][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.756033][ T291] device veth0_vlan entered promiscuous mode [ 25.775689][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.784554][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 25.784560][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.785810][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.808935][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.816495][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.825112][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.834020][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.842556][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.855191][ T287] device veth1_macvtap entered promiscuous mode [ 25.870127][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.884694][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.895888][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.916147][ T314] loop0: detected capacity change from 0 to 512 [ 25.929188][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.945340][ T314] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 25.955005][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.975181][ T314] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 25.986852][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.995822][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.004452][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.013377][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.023961][ T314] EXT4-fs (loop0): 1 truncate cleaned up [ 26.031729][ T291] device veth1_macvtap entered promiscuous mode [ 26.043023][ T290] device veth0_vlan entered promiscuous mode [ 26.049713][ T314] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 26.061247][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.090960][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.108137][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.116978][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.130752][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.141139][ T289] EXT4-fs (loop0): unmounting filesystem. [ 26.147954][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.169574][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.185673][ T290] device veth1_macvtap entered promiscuous mode [ 26.203470][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.231948][ T325] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.251562][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.301014][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.337453][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.347621][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.459018][ T340] syz.3.12 (340) used greatest stack depth: 19552 bytes left [ 26.474700][ T350] loop3: detected capacity change from 0 to 256 [ 26.502335][ T350] exfat: Deprecated parameter 'utf8' [ 26.522274][ T350] exfat: Deprecated parameter 'utf8' [ 26.531372][ T350] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 26.623978][ T364] device-mapper: verity: sha512 using implementation "sha512-avx2" [ 26.632319][ T364] device-mapper: table: 252:0: verity: Invalid salt (-EINVAL) [ 26.649079][ T364] device-mapper: ioctl: error adding target to table [ 26.690843][ T361] loop3: detected capacity change from 0 to 4096 [ 26.716335][ T361] EXT4-fs: Invalid commit interval -1, must be smaller than 21474836 [ 26.740140][ T376] program syz.1.25 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 26.791369][ T357] loop0: detected capacity change from 0 to 40427 [ 26.806992][ T357] F2FS-fs (loop0): Corrupted extension count (33554469 + 1 > 64) [ 26.828170][ T333] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 26.847413][ T357] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 26.855939][ T385] loop4: detected capacity change from 0 to 128 [ 26.883964][ T357] F2FS-fs (loop0): invalid crc value [ 26.901079][ T385] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 26.910404][ T385] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 26.942661][ T357] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 26.985376][ T395] loop3: detected capacity change from 0 to 128 [ 26.993141][ T291] EXT4-fs (loop4): unmounting filesystem. [ 27.003990][ T395] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 27.039884][ T394] loop2: detected capacity change from 0 to 2048 [ 27.072689][ T394] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 27.115236][ T357] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30 [ 27.124202][ T357] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 27.129313][ T288] EXT4-fs (loop2): unmounting filesystem. [ 27.192636][ T408] loop3: detected capacity change from 0 to 256 [ 27.222282][ T408] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 27.326535][ T412] loop1: detected capacity change from 0 to 4096 [ 27.354281][ T412] EXT4-fs (loop1): Test dummy encryption mode enabled [ 27.379177][ T412] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 27.408052][ T426] loop2: detected capacity change from 0 to 512 [ 27.442221][ T430] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 27.474401][ T430] syzkaller0: linktype set to 823 [ 27.491434][ T426] EXT4-fs (loop2): 1 orphan inode deleted [ 27.498573][ T287] EXT4-fs (loop1): unmounting filesystem. [ 27.504432][ T426] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 27.513879][ T10] EXT4-fs error (device loop2): ext4_release_dquot:6864: comm kworker/u4:1: Failed to release dquot type 1 [ 27.525998][ T433] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 27.553996][ T426] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.618571][ T439] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 27.636353][ T288] EXT4-fs (loop2): unmounting filesystem. [ 27.664090][ T441] overlayfs: fs on './proc' does not support file handles, falling back to index=off,nfs_export=off. [ 27.694527][ T441] overlayfs: maximum fs stacking depth exceeded [ 27.765242][ T419] F2FS-fs (loop4): invalid crc value [ 27.783873][ T419] F2FS-fs (loop4): Found nat_bits in checkpoint [ 27.849139][ T419] F2FS-fs (loop4): Start checkpoint disabled! [ 27.862265][ T419] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 27.863314][ T461] ======================================================= [ 27.863314][ T461] WARNING: The mand mount option has been deprecated and [ 27.863314][ T461] and is ignored by this kernel. Remove the mand [ 27.863314][ T461] option from the mount to silence this warning. [ 27.863314][ T461] ======================================================= [ 27.907517][ T419] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 27.913000][ T461] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #3: block 1: comm syz.3.58: lblock 1 mapped to illegal pblock 1 (length 1) [ 27.928947][ T28] kauditd_printk_skb: 129 callbacks suppressed [ 27.928964][ T28] audit: type=1400 audit(1794012848.817:202): avc: denied { mount } for pid=418 comm="syz.4.43" name="/" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.958168][ T461] Quota error (device loop3): write_blk: dquota write failed [ 27.970798][ T461] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 27.990465][ T461] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.58: Failed to acquire dquot type 0 [ 28.001674][ T28] audit: type=1400 audit(1794012848.897:203): avc: denied { read write open } for pid=418 comm="syz.4.43" path="/11/file1/file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.026631][ T461] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.58: Freeing blocks not in datazone - block = 0, count = 4096 [ 28.040364][ T28] audit: type=1400 audit(1794012848.897:204): avc: denied { ioctl } for pid=418 comm="syz.4.43" path="/11/file1/file1" dev="loop4" ino=10 ioctlcmd=0xf519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.043823][ T461] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.58: Invalid inode bitmap blk 0 in block_group 0 [ 28.075065][ T28] audit: type=1400 audit(1794012848.957:205): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.078609][ T461] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 28.105689][ T43] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 28.136003][ T43] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 28.144776][ T461] EXT4-fs (loop3): 1 orphan inode deleted [ 28.150864][ T461] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 28.151122][ T10] kworker/u4:1: attempt to access beyond end of device [ 28.151122][ T10] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 28.159967][ T43] EXT4-fs error (device loop3): ext4_release_dquot:6864: comm kworker/u4:2: Failed to release dquot type 0 [ 28.208166][ T465] device batadv_slave_1 entered promiscuous mode [ 28.217573][ T28] audit: type=1400 audit(1794012849.117:206): avc: denied { ioctl } for pid=464 comm="syz.2.60" path="socket:[17541]" dev="sockfs" ino=17541 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.243505][ T464] device batadv_slave_1 left promiscuous mode [ 28.281894][ T290] EXT4-fs (loop3): unmounting filesystem. [ 28.295328][ T469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.63'. [ 28.316802][ T28] audit: type=1400 audit(1794012849.217:207): avc: denied { read } for pid=470 comm="syz.4.59" name="cpu_dma_latency" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 28.340980][ T28] audit: type=1400 audit(1794012849.217:208): avc: denied { open } for pid=470 comm="syz.4.59" path="/12/dev/cpu_dma_latency" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 28.366276][ T472] netlink: 28 bytes leftover after parsing attributes in process `syz.3.62'. [ 28.375383][ T472] netlink: 28 bytes leftover after parsing attributes in process `syz.3.62'. [ 28.628032][ T512] 9pnet: p9_errstr2errno: server reported unknown error 0xffffffffffffffff [ 28.673282][ T514] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.739699][ T524] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 28.758406][ T514] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 28.888433][ T288] EXT4-fs (loop2): unmounting filesystem. [ 29.027059][ T562] zero sized request [ 29.259440][ T585] EXT4-fs: Ignoring removed bh option [ 29.298480][ T585] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.372685][ T288] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /25/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 29.439108][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 29.446133][ T288] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /25/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 29.468594][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 29.475260][ T288] EXT4-fs error (device loop2): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 29.497358][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 29.512737][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 29.547046][ T594] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.568209][ T288] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /25/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 29.590989][ T594] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.599453][ T599] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 29.608978][ T594] device bridge_slave_0 entered promiscuous mode [ 29.615496][ T599] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.634139][ T594] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.641577][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 29.650365][ T594] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.660770][ T599] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.118: bg 0: block 112: padding at end of block bitmap is not set [ 29.675162][ T288] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /25/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 29.678147][ T599] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 67 with max blocks 1 with error 28 [ 29.717810][ T594] device bridge_slave_1 entered promiscuous mode [ 29.767553][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 29.774202][ T288] EXT4-fs error (device loop2): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 29.786555][ T599] EXT4-fs (loop4): This should not happen!! Data will be lost [ 29.786555][ T599] [ 29.821173][ T604] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.118: lblock 0 mapped to illegal pblock 0 (length 6) [ 29.834728][ T599] EXT4-fs (loop4): Total free blocks count 0 [ 29.840870][ T599] EXT4-fs (loop4): Free/Dirty block details [ 29.846921][ T599] EXT4-fs (loop4): free_blocks=0 [ 29.852539][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 29.852543][ T599] EXT4-fs (loop4): dirty_blocks=16 [ 29.852561][ T599] EXT4-fs (loop4): Block reservation details [ 29.867342][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 29.882501][ T599] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 29.905804][ T288] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /25/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 29.905957][ T604] EXT4-fs error (device loop4): ext4_ext_remove_space:2945: inode #15: comm syz.4.118: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 29.957303][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 29.963990][ T288] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /25/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 29.994106][ T594] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.001319][ T594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.008672][ T594] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.015731][ T594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.028099][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 30.036449][ T291] EXT4-fs (loop4): unmounting filesystem. [ 30.039185][ T288] EXT4-fs error (device loop2): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 30.087064][ T288] EXT4-fs (loop2): Remounting filesystem read-only [ 30.113140][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 30.132001][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.142553][ T579] F2FS-fs (loop1): invalid crc value [ 30.153155][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.168139][ T288] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /25/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 30.191208][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.200518][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.215722][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 30.230342][ T579] F2FS-fs (loop1): Found nat_bits in checkpoint [ 30.237623][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.256087][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.263217][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.272404][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 30.286851][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.305574][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.312691][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.323003][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 30.354096][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 30.369957][ T579] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 30.387196][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.395666][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 30.405007][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.438855][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 30.461960][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.464715][ T288] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 30.491334][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.509743][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.546061][ T594] device veth0_vlan entered promiscuous mode [ 30.555634][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.595161][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.615968][ T626] EXT4-fs: Ignoring removed bh option [ 30.627017][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.637212][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.646905][ T594] device veth1_macvtap entered promiscuous mode [ 30.683949][ T626] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 30.721746][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.737675][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.767632][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.795028][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.812981][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.845411][ T290] EXT4-fs (loop3): unmounting filesystem. [ 30.856374][ T308] device bridge_slave_1 left promiscuous mode [ 30.870108][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.889312][ T308] device bridge_slave_0 left promiscuous mode [ 30.908628][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.929320][ T308] device veth1_macvtap left promiscuous mode [ 30.935450][ T308] device veth0_vlan left promiscuous mode [ 30.984113][ T643] set_capacity_and_notify: 10 callbacks suppressed [ 30.984134][ T643] loop3: detected capacity change from 0 to 16 [ 31.011216][ T643] erofs: (device loop3): mounted with root inode @ nid 36. [ 31.039687][ T643] erofs: (device loop3): z_erofs_readahead: readahead error at page 155 @ nid 36 [ 31.058963][ T643] erofs: (device loop3): z_erofs_readahead: readahead error at page 154 @ nid 36 [ 31.071539][ T643] erofs: (device loop3): z_erofs_readahead: readahead error at page 153 @ nid 36 [ 31.081210][ T643] erofs: (device loop3): z_erofs_readahead: readahead error at page 152 @ nid 36 [ 31.091978][ T643] erofs: (device loop3): z_erofs_readahead: readahead error at page 139 @ nid 36 [ 31.101352][ T643] erofs: (device loop3): z_erofs_readahead: readahead error at page 138 @ nid 36 [ 31.110762][ T643] erofs: (device loop3): z_erofs_readahead: readahead error at page 137 @ nid 36 [ 31.120142][ T643] erofs: (device loop3): z_erofs_readahead: readahead error at page 136 @ nid 36 [ 31.130153][ T643] erofs: (device loop3): z_erofs_readahead: readahead error at page 128 @ nid 36 [ 31.139660][ T643] erofs: (device loop3): z_erofs_readahead: readahead error at page 120 @ nid 36 [ 31.150378][ T636] netlink: 'syz.4.130': attribute type 4 has an invalid length. [ 31.153166][ T643] erofs: (device loop3): z_erofs_readahead: readahead error at page 99 @ nid 36 [ 31.167337][ T643] erofs: (device loop3): z_erofs_readahead: readahead error at page 98 @ nid 36 [ 31.183667][ T643] erofs: (device loop3): z_erofs_readahead: readahead error at page 97 @ nid 36 [ 31.220247][ T643] erofs: (device loop3): z_erofs_readahead: readahead error at page 96 @ nid 36 [ 31.240682][ T643] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 31.253317][ T643] erofs: (device loop3): z_erofs_readahead: readahead error at page 91 @ nid 36 [ 31.808859][ T643] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 31.824217][ T643] erofs: (device loop3): z_erofs_readahead: readahead error at page 90 @ nid 36 [ 31.833907][ T643] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 31.847422][ T643] erofs: (device loop3): z_erofs_readahead: readahead error at page 89 @ nid 36 [ 31.877421][ T643] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 31.899053][ T643] erofs: (device loop3): z_erofs_readahead: readahead error at page 88 @ nid 36 [ 31.908506][ T643] syz.3.132: attempt to access beyond end of device [ 31.908506][ T643] loop3: rw=524288, sector=13478624032, nr_sectors = 32 limit=16 [ 31.935521][ T645] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.939288][ T643] syz.3.132: attempt to access beyond end of device [ 31.939288][ T643] loop3: rw=524288, sector=13478624040, nr_sectors = 32 limit=16 [ 31.957127][ T643] syz.3.132: attempt to access beyond end of device [ 31.957127][ T643] loop3: rw=524288, sector=14550773768, nr_sectors = 32 limit=16 [ 31.971796][ T643] syz.3.132: attempt to access beyond end of device [ 31.971796][ T643] loop3: rw=524288, sector=13716630376, nr_sectors = 32 limit=16 [ 31.977992][ T645] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.986818][ T643] syz.3.132: attempt to access beyond end of device [ 31.986818][ T643] loop3: rw=524288, sector=13716630384, nr_sectors = 32 limit=16 [ 32.008023][ T643] syz.3.132: attempt to access beyond end of device [ 32.008023][ T643] loop3: rw=524288, sector=790384, nr_sectors = 32 limit=16 [ 32.018558][ T645] device bridge_slave_0 entered promiscuous mode [ 32.026622][ T665] loop4: detected capacity change from 0 to 256 [ 32.028786][ T643] syz.3.132: attempt to access beyond end of device [ 32.028786][ T643] loop3: rw=524288, sector=790392, nr_sectors = 32 limit=16 [ 32.056735][ T665] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 32.073574][ T645] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.080859][ T643] syz.3.132: attempt to access beyond end of device [ 32.080859][ T643] loop3: rw=524288, sector=72, nr_sectors = 32 limit=16 [ 32.095371][ T645] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.104558][ T645] device bridge_slave_1 entered promiscuous mode [ 32.111250][ T643] syz.3.132: attempt to access beyond end of device [ 32.111250][ T643] loop3: rw=524288, sector=80, nr_sectors = 32 limit=16 [ 32.186285][ T669] loop3: detected capacity change from 0 to 256 [ 32.263750][ T645] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.270882][ T645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.278209][ T645] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.285259][ T645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.306024][ T660] loop1: detected capacity change from 0 to 40427 [ 32.306644][ T675] loop4: detected capacity change from 0 to 8192 [ 32.324075][ T660] F2FS-fs (loop1): invalid crc value [ 32.335887][ T660] F2FS-fs (loop1): Found nat_bits in checkpoint [ 32.417433][ T19] input: syz0 as /devices/virtual/misc/uhid/0005:0B05:8502.0001/input/input4 [ 32.427308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.435327][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.444144][ T660] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 32.446676][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.468896][ T19] hid-generic 0005:0B05:8502.0001: input,hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 32.512631][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.525504][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.534259][ T687] fido_id[687]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 32.558984][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.583153][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.599502][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.608123][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.616742][ T645] device veth0_vlan entered promiscuous mode [ 32.623420][ T695] device batadv_slave_1 entered promiscuous mode [ 32.644813][ T692] device batadv_slave_1 left promiscuous mode [ 32.658014][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.677128][ T645] device veth1_macvtap entered promiscuous mode [ 32.711756][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.734057][ T308] device bridge_slave_1 left promiscuous mode [ 32.742482][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.788640][ T308] device bridge_slave_0 left promiscuous mode [ 32.794844][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.909207][ T308] device veth1_macvtap left promiscuous mode [ 32.925630][ T308] device veth0_vlan left promiscuous mode [ 32.979071][ T711] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004 [ 33.040225][ T717] loop4: detected capacity change from 0 to 1024 [ 33.049178][ T717] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.110170][ T717] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 33.122891][ T717] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.123521][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.142196][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 33.142219][ T28] audit: type=1400 audit(1794012854.047:275): avc: denied { append } for pid=716 comm="syz.4.162" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.175708][ T713] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 33.185481][ T717] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.162: bg 0: block 112: padding at end of block bitmap is not set [ 33.200075][ T28] audit: type=1400 audit(1794012854.087:276): avc: denied { mounton } for pid=645 comm="syz-executor" path="/root/syzkaller.jfta4J/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.226752][ T717] EXT4-fs (loop4): Remounting filesystem read-only [ 33.241616][ T726] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.162: Freeing blocks not in datazone - block = 0, count = 16 [ 33.297448][ T726] EXT4-fs (loop4): Remounting filesystem read-only [ 33.334058][ T28] audit: type=1400 audit(1794012854.237:277): avc: denied { bind } for pid=736 comm="syz.6.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.354854][ T291] EXT4-fs (loop4): unmounting filesystem. [ 33.399452][ T734] loop5: detected capacity change from 0 to 8192 [ 33.431008][ T734] bio_check_eod: 9 callbacks suppressed [ 33.431027][ T734] syz.5.165: attempt to access beyond end of device [ 33.431027][ T734] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 33.451615][ T734] Buffer I/O error on dev loop5, logical block 57847, async page read [ 33.471750][ T734] syz.5.165: attempt to access beyond end of device [ 33.471750][ T734] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 33.488165][ T734] Buffer I/O error on dev loop5, logical block 57847, async page read [ 33.497790][ T749] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 33.512173][ T749] FAT-fs (loop5): Filesystem has been set read-only [ 33.553192][ T756] loop3: detected capacity change from 0 to 1024 [ 33.590192][ T756] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 33.610652][ T308] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 33.638757][ T308] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 33.651365][ T308] EXT4-fs (loop3): This should not happen!! Data will be lost [ 33.651365][ T308] [ 33.664084][ T308] EXT4-fs (loop3): Total free blocks count 0 [ 33.671844][ T308] EXT4-fs (loop3): Free/Dirty block details [ 33.678015][ T308] EXT4-fs (loop3): free_blocks=68451041280 [ 33.684000][ T308] EXT4-fs (loop3): dirty_blocks=32 [ 33.689857][ T308] EXT4-fs (loop3): Block reservation details [ 33.695937][ T308] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 33.702295][ T308] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 287 with max blocks 1 with error 28 [ 33.731893][ T28] audit: type=1400 audit(1794012854.637:278): avc: denied { read write } for pid=771 comm="syz.3.178" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.756194][ T775] FAULT_INJECTION: forcing a failure. [ 33.756194][ T775] name failslab, interval 1, probability 0, space 0, times 1 [ 33.770168][ T775] CPU: 1 PID: 775 Comm: syz.5.182 Not tainted syzkaller #0 [ 33.777423][ T775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 33.779610][ T28] audit: type=1400 audit(1794012854.637:279): avc: denied { open } for pid=771 comm="syz.3.178" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.787515][ T775] Call Trace: [ 33.787524][ T775] [ 33.787531][ T775] __dump_stack+0x21/0x24 [ 33.787557][ T775] dump_stack_lvl+0x110/0x170 [ 33.811098][ T28] audit: type=1400 audit(1794012854.637:280): avc: denied { ioctl } for pid=771 comm="syz.3.178" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.814010][ T775] ? __cfi_dump_stack_lvl+0x8/0x8 [ 33.855749][ T775] dump_stack+0x15/0x24 [ 33.859922][ T775] should_fail_ex+0x3bf/0x510 [ 33.864612][ T775] __should_failslab+0xac/0xf0 [ 33.869389][ T775] should_failslab+0x9/0x20 [ 33.873912][ T775] __kmem_cache_alloc_node+0x3d/0x2d0 [ 33.879312][ T775] ? copy_net_ns+0x10f/0x5c0 [ 33.883912][ T775] ? copy_net_ns+0x10f/0x5c0 [ 33.888506][ T775] __kmalloc+0xa4/0x1e0 [ 33.892683][ T775] copy_net_ns+0x10f/0x5c0 [ 33.897107][ T775] ? __kasan_check_write+0x14/0x20 [ 33.902276][ T775] ? copy_cgroup_ns+0x91/0x4c0 [ 33.907057][ T775] create_new_namespaces+0x3a8/0x660 [ 33.912398][ T775] unshare_nsproxy_namespaces+0x120/0x170 [ 33.918134][ T775] ksys_unshare+0x4d5/0x850 [ 33.922658][ T775] ? __cfi_ksys_unshare+0x10/0x10 [ 33.927703][ T775] ? fpregs_restore_userregs+0x128/0x260 [ 33.933384][ T775] __x64_sys_unshare+0x38/0x40 [ 33.938183][ T775] x64_sys_call+0x767/0x9a0 [ 33.942731][ T775] do_syscall_64+0x4c/0xa0 [ 33.947168][ T775] ? clear_bhb_loop+0x30/0x80 [ 33.951869][ T775] ? clear_bhb_loop+0x30/0x80 [ 33.956562][ T775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.962478][ T775] RIP: 0033:0x7fd97479fb19 [ 33.966912][ T775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.986706][ T775] RSP: 002b:00007fd975607028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 33.995152][ T775] RAX: ffffffffffffffda RBX: 00007fd974a25fa0 RCX: 00007fd97479fb19 [ 34.003144][ T775] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 34.011136][ T775] RBP: 00007fd974837b70 R08: 0000000000000000 R09: 0000000000000000 [ 34.019129][ T775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.027118][ T775] R13: 00007fd974a26038 R14: 00007fd974a25fa0 R15: 00007ffe0281db18 [ 34.035114][ T775] [ 34.094576][ T787] loop1: detected capacity change from 0 to 512 [ 34.109938][ T787] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 34.119042][ T787] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.133383][ T28] audit: type=1400 audit(1794012855.047:281): avc: denied { append } for pid=785 comm="syz.1.186" path="/31/file1/cgroup.events" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.156996][ T28] audit: type=1400 audit(1794012855.047:282): avc: denied { setattr } for pid=785 comm="syz.1.186" name="cgroup.events" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.180980][ T287] EXT4-fs (loop1): unmounting filesystem. [ 34.217326][ T309] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 34.225062][ T795] overlayfs: failed to resolve './cgroup': -2 [ 34.243366][ T799] loop4: detected capacity change from 0 to 128 [ 34.284209][ T28] audit: type=1400 audit(1794012855.187:283): avc: denied { mount } for pid=802 comm="syz.6.194" name="/" dev="configfs" ino=13119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 34.328493][ T28] audit: type=1400 audit(1794012855.187:284): avc: denied { create } for pid=801 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.380288][ T803] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 34.412204][ T594] EXT4-fs (loop5): unmounting filesystem. [ 34.427384][ T309] usb 4-1: Using ep0 maxpacket: 32 [ 34.435188][ T309] usb 4-1: unable to get BOS descriptor or descriptor too short [ 34.444049][ T822] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.465749][ T309] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 34.475908][ T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.484808][ T309] usb 4-1: Product: syz [ 34.485587][ T822] EXT4-fs (loop1): 1 truncate cleaned up [ 34.495774][ T309] usb 4-1: Manufacturer: syz [ 34.502215][ T309] usb 4-1: SerialNumber: syz [ 34.508465][ T822] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 34.538240][ T287] EXT4-fs (loop1): unmounting filesystem. [ 34.552414][ T826] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 34.570438][ T826] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.597802][ T835] syz.1.205: attempt to access beyond end of device [ 34.597802][ T835] loop1: rw=0, sector=17179852706, nr_sectors = 16 limit=512 [ 34.623132][ T826] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #2: comm syz.5.202: corrupted inode contents [ 34.649057][ T826] EXT4-fs (loop5): Remounting filesystem read-only [ 34.666511][ T826] EXT4-fs error (device loop5): ext4_dirty_inode:6158: inode #2: comm syz.5.202: mark_inode_dirty error [ 34.684715][ T826] EXT4-fs (loop5): Remounting filesystem read-only [ 34.705464][ T826] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #2: comm syz.5.202: corrupted inode contents [ 34.719170][ T826] EXT4-fs (loop5): Remounting filesystem read-only [ 34.729323][ T839] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #2: comm syz.5.202: corrupted inode contents [ 34.748803][ T839] EXT4-fs (loop5): Remounting filesystem read-only [ 34.755791][ T839] EXT4-fs error (device loop5): ext4_dirty_inode:6158: inode #2: comm syz.5.202: mark_inode_dirty error [ 34.768874][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 34.776985][ T839] EXT4-fs (loop5): Remounting filesystem read-only [ 34.778441][ T845] input: syz0 as /devices/virtual/input/input5 [ 34.791775][ T841] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 34.799631][ T839] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #2: comm syz.5.202: corrupted inode contents [ 34.814405][ T839] EXT4-fs (loop5): Remounting filesystem read-only [ 34.822171][ T839] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.202: mark_inode_dirty error [ 34.834023][ T839] EXT4-fs (loop5): Remounting filesystem read-only [ 34.840988][ T839] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #2: comm syz.5.202: corrupted inode contents [ 34.853177][ T839] EXT4-fs (loop5): Remounting filesystem read-only [ 34.860508][ T839] EXT4-fs error (device loop5): ext4_dirty_inode:6158: inode #2: comm syz.5.202: mark_inode_dirty error [ 34.871866][ T624] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 34.881927][ T839] EXT4-fs (loop5): Remounting filesystem read-only [ 34.891164][ T826] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #2: comm syz.5.202: corrupted inode contents [ 34.899090][ T624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.921125][ T624] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 34.929766][ T624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.947658][ T624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.956406][ T624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.965076][ T624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.973630][ T624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.004861][ T857] FAULT_INJECTION: forcing a failure. [ 35.004861][ T857] name failslab, interval 1, probability 0, space 0, times 0 [ 35.017734][ T857] CPU: 0 PID: 857 Comm: syz.5.213 Not tainted syzkaller #0 [ 35.024986][ T857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 35.035088][ T857] Call Trace: [ 35.038711][ T857] [ 35.041676][ T857] __dump_stack+0x21/0x24 [ 35.046078][ T857] dump_stack_lvl+0x110/0x170 [ 35.050796][ T857] ? __cfi_dump_stack_lvl+0x8/0x8 [ 35.055876][ T857] dump_stack+0x15/0x24 [ 35.060070][ T857] should_fail_ex+0x3bf/0x510 [ 35.064794][ T857] __should_failslab+0xac/0xf0 [ 35.069601][ T857] should_failslab+0x9/0x20 [ 35.074157][ T857] slab_pre_alloc_hook+0x30/0x1d0 [ 35.079240][ T857] ? __kasan_check_write+0x14/0x20 [ 35.084383][ T857] kmem_cache_alloc_lru+0x49/0x280 [ 35.089525][ T857] ? proc_alloc_inode+0x2a/0xc0 [ 35.094413][ T857] proc_alloc_inode+0x2a/0xc0 [ 35.099126][ T857] ? __cfi_proc_alloc_inode+0x10/0x10 [ 35.104534][ T857] new_inode_pseudo+0x70/0x1f0 [ 35.109341][ T857] new_inode+0x28/0x1e0 [ 35.113536][ T857] proc_pid_make_inode+0x24/0x1c0 [ 35.118606][ T857] proc_pident_instantiate+0x69/0x2b0 [ 35.124011][ T857] proc_pident_lookup+0x1c7/0x270 [ 35.129069][ T857] proc_tgid_base_lookup+0x2b/0x30 [ 35.134201][ T857] __lookup_slow+0x2d5/0x410 [ 35.138875][ T857] ? lookup_one_len+0x2e0/0x2e0 [ 35.143759][ T857] ? down_read+0xa6/0xf0 [ 35.147647][ T309] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 35.148031][ T857] lookup_slow+0x57/0x70 [ 35.159243][ T857] walk_component+0x2f5/0x430 [ 35.163963][ T857] link_path_walk+0x6b1/0xeb0 [ 35.168689][ T857] ? handle_lookup_down+0x130/0x130 [ 35.173934][ T857] path_lookupat+0x8d/0x430 [ 35.175706][ T309] usb 4-1: USB disconnect, device number 2 [ 35.178601][ T857] filename_lookup+0x229/0x580 [ 35.178633][ T857] ? __cfi_filename_lookup+0x10/0x10 [ 35.194631][ T857] ? __cfi_proc_put_link+0x10/0x10 [ 35.199798][ T857] ? __cfi_kfree_link+0x10/0x10 [ 35.204683][ T857] ? strncpy_from_user+0x172/0x2c0 [ 35.209810][ T857] ? getname_flags+0x205/0x510 [ 35.214590][ T857] user_path_at_empty+0x46/0x1c0 [ 35.219574][ T857] path_setxattr+0xb3/0x290 [ 35.224099][ T857] ? simple_xattr_list_add+0x120/0x120 [ 35.229595][ T857] ? __kasan_check_write+0x14/0x20 [ 35.234725][ T857] ? fpregs_restore_userregs+0x128/0x260 [ 35.240373][ T857] __x64_sys_setxattr+0xc5/0xe0 [ 35.245356][ T857] x64_sys_call+0x633/0x9a0 [ 35.249881][ T857] do_syscall_64+0x4c/0xa0 [ 35.254353][ T857] ? clear_bhb_loop+0x30/0x80 [ 35.259073][ T857] ? clear_bhb_loop+0x30/0x80 [ 35.263811][ T857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 35.269741][ T857] RIP: 0033:0x7fd97479fb19 [ 35.274165][ T857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.293782][ T857] RSP: 002b:00007fd975607028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 35.302271][ T857] RAX: ffffffffffffffda RBX: 00007fd974a25fa0 RCX: 00007fd97479fb19 [ 35.310284][ T857] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 35.318487][ T857] RBP: 00007fd974837b70 R08: 0000000000000001 R09: 0000000000000000 [ 35.326510][ T857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.334491][ T857] R13: 00007fd974a26038 R14: 00007fd974a25fa0 R15: 00007ffe0281db18 [ 35.342503][ T857] [ 35.389500][ T864] exfat: Deprecated parameter 'utf8' [ 35.394974][ T864] exfat: Deprecated parameter 'namecase' [ 35.402041][ T864] exfat: Deprecated parameter 'namecase' [ 35.407866][ T864] exfat: Deprecated parameter 'namecase' [ 35.426748][ T864] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 35.490817][ T870] FAULT_INJECTION: forcing a failure. [ 35.490817][ T870] name failslab, interval 1, probability 0, space 0, times 0 [ 35.506624][ T870] CPU: 0 PID: 870 Comm: syz.5.219 Not tainted syzkaller #0 [ 35.513897][ T870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 35.524253][ T870] Call Trace: [ 35.527573][ T870] [ 35.530536][ T870] __dump_stack+0x21/0x24 [ 35.534947][ T870] dump_stack_lvl+0x110/0x170 [ 35.539675][ T870] ? __cfi_dump_stack_lvl+0x8/0x8 [ 35.544750][ T870] dump_stack+0x15/0x24 [ 35.548956][ T870] should_fail_ex+0x3bf/0x510 [ 35.553689][ T870] ? __alloc_file+0x28/0x2a0 [ 35.558328][ T870] __should_failslab+0xac/0xf0 [ 35.563189][ T870] should_failslab+0x9/0x20 [ 35.567743][ T870] kmem_cache_alloc+0x3b/0x320 [ 35.572564][ T870] ? __cfi__raw_spin_lock+0x10/0x10 [ 35.577813][ T870] __alloc_file+0x28/0x2a0 [ 35.582287][ T870] alloc_empty_file+0x97/0x180 [ 35.587105][ T870] alloc_file+0x59/0x600 [ 35.591397][ T870] ? _raw_spin_unlock+0x4c/0x70 [ 35.596388][ T870] alloc_file_pseudo+0x180/0x200 [ 35.601391][ T870] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 35.606902][ T870] ? _raw_spin_unlock+0x4c/0x70 [ 35.611807][ T870] ? alloc_fd+0x4c1/0x570 [ 35.616184][ T870] sock_alloc_file+0xba/0x270 [ 35.620915][ T870] __sys_socket+0x138/0x1a0 [ 35.625468][ T870] __x64_sys_socket+0x7a/0x90 [ 35.629142][ T875] EXT4-fs: Ignoring removed oldalloc option [ 35.630197][ T870] x64_sys_call+0x449/0x9a0 [ 35.640926][ T870] do_syscall_64+0x4c/0xa0 [ 35.645422][ T870] ? clear_bhb_loop+0x30/0x80 [ 35.650147][ T870] ? clear_bhb_loop+0x30/0x80 [ 35.654880][ T870] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 35.660824][ T870] RIP: 0033:0x7fd97479fb19 [ 35.665278][ T870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.685228][ T870] RSP: 002b:00007fd975607028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 35.693686][ T870] RAX: ffffffffffffffda RBX: 00007fd974a25fa0 RCX: 00007fd97479fb19 [ 35.701718][ T870] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 35.709738][ T870] RBP: 00007fd974837b70 R08: 0000000000000000 R09: 0000000000000000 [ 35.717811][ T870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.725866][ T870] R13: 00007fd974a26038 R14: 00007fd974a25fa0 R15: 00007ffe0281db18 [ 35.733909][ T870] [ 35.769758][ T875] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 35.804068][ T645] EXT4-fs (loop6): unmounting filesystem. [ 35.875811][ T891] input: syz0 as /devices/virtual/input/input6 [ 35.899019][ T894] EXT4-fs: Ignoring removed nobh option [ 35.957121][ T894] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 35.976432][ T894] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.010000][ T905] ip_tables: iptables: counters copy to user failed while replacing table [ 36.020359][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 36.077689][ T291] EXT4-fs (loop4): unmounting filesystem. [ 36.120524][ T885] set_capacity_and_notify: 7 callbacks suppressed [ 36.120545][ T885] loop5: detected capacity change from 0 to 40427 [ 36.176035][ T885] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 36.195418][ T885] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 36.239733][ T923] loop6: detected capacity change from 0 to 1024 [ 36.251363][ T885] F2FS-fs (loop5): Found nat_bits in checkpoint [ 36.257924][ T923] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 36.313782][ T923] EXT4-fs error (device loop6): ext4_get_journal_inode:5749: inode #32: comm syz.6.239: iget: special inode unallocated [ 36.329761][ T923] EXT4-fs (loop6): no journal found [ 36.335042][ T923] EXT4-fs (loop6): can't get journal size [ 36.363169][ T923] EXT4-fs (loop6): filesystem is read-only [ 36.369419][ T923] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 36.382404][ T923] EXT4-fs (loop6): shut down requested (2) [ 36.403279][ T938] loop1: detected capacity change from 0 to 512 [ 36.420139][ T885] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 36.431210][ T938] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.244: inode has both inline data and extents flags [ 36.450983][ T645] EXT4-fs (loop6): unmounting filesystem. [ 36.460361][ T885] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 36.521118][ T938] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.244: couldn't read orphan inode 15 (err -117) [ 36.543310][ T938] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 36.559730][ T885] syz.5.223: attempt to access beyond end of device [ 36.559730][ T885] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 36.613227][ T951] syz.5.223: attempt to access beyond end of device [ 36.613227][ T951] loop5: rw=2049, sector=77824, nr_sectors = 16 limit=40427 [ 36.641551][ T287] EXT4-fs (loop1): unmounting filesystem. [ 36.661353][ T594] syz-executor: attempt to access beyond end of device [ 36.661353][ T594] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 36.792028][ T964] loop6: detected capacity change from 0 to 2048 [ 36.809084][ T964] EXT4-fs: Ignoring removed oldalloc option [ 36.864191][ T964] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 36.893736][ T645] EXT4-fs (loop6): unmounting filesystem. [ 37.091098][ T1006] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 37.216358][ T1024] loop1: detected capacity change from 0 to 256 [ 37.255638][ T1028] loop3: detected capacity change from 0 to 1024 [ 37.266079][ T1024] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 37.299059][ T1024] FAT-fs (loop1): Filesystem has been set read-only [ 37.306831][ T1024] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 37.318423][ T1034] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 37.335630][ T1028] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 37.352544][ T1028] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.367192][ T1027] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.284: lblock 0 mapped to illegal pblock 0 (length 1) [ 37.381175][ T1027] EXT4-fs (loop3): Remounting filesystem read-only [ 37.387986][ T1027] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: comm syz.3.284: lblock 0 mapped to illegal pblock 0 (length 1) [ 37.401804][ T1027] EXT4-fs (loop3): Remounting filesystem read-only [ 37.416843][ T1027] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: comm syz.3.284: lblock 0 mapped to illegal pblock 0 (length 1) [ 37.430631][ T1027] EXT4-fs (loop3): Remounting filesystem read-only [ 37.437701][ T1027] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: comm syz.3.284: lblock 0 mapped to illegal pblock 0 (length 1) [ 37.451455][ T1027] EXT4-fs (loop3): Remounting filesystem read-only [ 37.458604][ T1028] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.284: Freeing blocks not in datazone - block = 0, count = 1 [ 37.472333][ T1028] EXT4-fs (loop3): Remounting filesystem read-only [ 37.488013][ T290] EXT4-fs (loop3): unmounting filesystem. [ 37.592372][ T1051] loop3: detected capacity change from 0 to 512 [ 37.618516][ T1051] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 37.639608][ T1051] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.676327][ T1051] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 37.761204][ T290] EXT4-fs (loop3): unmounting filesystem. [ 39.447234][ C0] sched: RT throttling activated [ 39.447234][ C1] sched: RT throttling activated [ 40.473581][ T1070] loop5: detected capacity change from 0 to 128 [ 40.574650][ T1072] loop6: detected capacity change from 0 to 8192 [ 40.600635][ T1085] loop5: detected capacity change from 0 to 12639 [ 40.679771][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 40.679787][ T28] audit: type=1400 audit(1794012861.587:317): avc: denied { connect } for pid=1090 comm="syz.3.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.713338][ T1094] bridge0: port 3(syz_tun) entered blocking state [ 40.734270][ T1094] bridge0: port 3(syz_tun) entered disabled state [ 40.747798][ T1094] device syz_tun entered promiscuous mode [ 40.763843][ T1094] bridge0: port 3(syz_tun) entered blocking state [ 40.770358][ T1094] bridge0: port 3(syz_tun) entered forwarding state [ 40.892844][ T1104] FAT-fs (loop6): error, clusters badly computed (4 != 3) [ 40.907247][ T1104] FAT-fs (loop6): Filesystem has been set read-only [ 40.941762][ T28] audit: type=1400 audit(1794012861.847:318): avc: denied { create } for pid=1107 comm="syz.4.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 41.007300][ T28] audit: type=1400 audit(1794012861.847:319): avc: denied { write } for pid=1107 comm="syz.4.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 41.060370][ T1081] F2FS-fs (loop1): invalid crc value [ 41.075750][ T28] audit: type=1400 audit(1794012861.927:320): avc: denied { name_bind } for pid=1111 comm="syz.4.319" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 41.116425][ T1081] F2FS-fs (loop1): Found nat_bits in checkpoint [ 41.138081][ T1122] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 41.153986][ T1122] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 41.170642][ T1122] System zones: 0-1, 15-15, 18-18, 34-34 [ 41.177012][ T1122] EXT4-fs (loop6): orphan cleanup on readonly fs [ 41.183590][ T1122] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 41.193118][ T1122] EXT4-fs warning (device loop6): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 41.203744][ T1081] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 41.208010][ T1122] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 41.223425][ T1122] EXT4-fs (loop6): 1 truncate cleaned up [ 41.247272][ T1122] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 41.256908][ T1137] set_capacity_and_notify: 4 callbacks suppressed [ 41.256925][ T1137] loop5: detected capacity change from 0 to 16 [ 41.270402][ T1081] syz.1.302: attempt to access beyond end of device [ 41.270402][ T1081] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 41.298548][ T1137] erofs: (device loop5): mounted with root inode @ nid 36. [ 41.318883][ T1122] fscrypt (loop6, inode 16): Error -61 getting encryption context [ 41.331029][ T1122] fscrypt (loop6, inode 16): Error -61 getting encryption context [ 41.332780][ T28] audit: type=1400 audit(1794012862.237:321): avc: denied { read } for pid=1120 comm="syz.6.322" name="file2" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 41.346377][ T1137] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 41.373315][ T1122] fscrypt (loop6, inode 16): Error -61 getting encryption context [ 41.393090][ T645] EXT4-fs (loop6): unmounting filesystem. [ 41.409894][ T28] audit: type=1400 audit(1794012862.257:322): avc: denied { execute } for pid=1136 comm="syz.5.327" path="/41/file1/file2" dev="loop5" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.438260][ T1137] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 41.459384][ T1137] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 41.481286][ T28] audit: type=1400 audit(1794012862.387:323): avc: denied { read write } for pid=1144 comm="syz.3.331" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 41.506281][ T1137] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 41.532794][ T1137] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 41.548799][ T1147] bridge0: port 3(syz_tun) entered blocking state [ 41.555412][ T28] audit: type=1400 audit(1794012862.417:324): avc: denied { open } for pid=1144 comm="syz.3.331" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 41.579806][ T1137] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 41.591283][ T1147] bridge0: port 3(syz_tun) entered disabled state [ 41.601534][ T1147] device syz_tun entered promiscuous mode [ 41.607730][ T1147] bridge0: port 3(syz_tun) entered blocking state [ 41.614220][ T1147] bridge0: port 3(syz_tun) entered forwarding state [ 41.629046][ T28] audit: type=1400 audit(1794012862.427:325): avc: denied { ioctl } for pid=1144 comm="syz.3.331" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 41.723157][ T1156] loop1: detected capacity change from 0 to 512 [ 41.753048][ T1156] EXT4-fs (loop1): Test dummy encryption mode enabled [ 41.763082][ T1158] serio: Serial port ptm0 [ 41.800903][ T1156] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.329: inode has both inline data and extents flags [ 41.817667][ T1156] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.329: couldn't read orphan inode 15 (err -117) [ 41.836138][ T1167] loop3: detected capacity change from 0 to 1024 [ 41.847029][ T1156] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 41.870189][ T1167] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #3: block 1: comm syz.3.339: lblock 1 mapped to illegal pblock 1 (length 1) [ 41.913031][ T1167] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.339: Failed to acquire dquot type 0 [ 41.918002][ T1156] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 41.947493][ T1167] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.339: Freeing blocks not in datazone - block = 0, count = 4096 [ 41.965325][ T1167] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.339: Invalid inode bitmap blk 0 in block_group 0 [ 41.981439][ T624] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 41.988021][ T1167] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 42.007449][ T1167] EXT4-fs (loop3): 1 orphan inode deleted [ 42.008675][ T1150] loop4: detected capacity change from 0 to 40427 [ 42.013237][ T1167] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 42.028934][ T1150] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 42.037093][ T624] EXT4-fs error (device loop3): ext4_release_dquot:6864: comm kworker/u4:5: Failed to release dquot type 0 [ 42.049328][ T1150] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 42.067537][ T1150] F2FS-fs (loop4): invalid crc value [ 42.075518][ T1150] F2FS-fs (loop4): Found nat_bits in checkpoint [ 42.093948][ T287] EXT4-fs (loop1): unmounting filesystem. [ 42.127733][ T624] bridge0: port 3(syz_tun) entered disabled state [ 42.145286][ T1176] xt_hashlimit: size too large, truncated to 1048576 [ 42.162237][ T1167] EXT4-fs (loop3): shut down requested (0) [ 42.217902][ T290] EXT4-fs (loop3): unmounting filesystem. [ 42.290979][ T1150] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 42.298957][ T1150] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 42.397588][ T1150] syz.4.333: attempt to access beyond end of device [ 42.397588][ T1150] loop4: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 42.414391][ T1150] syz.4.333: attempt to access beyond end of device [ 42.414391][ T1150] loop4: rw=2049, sector=77848, nr_sectors = 8 limit=40427 [ 42.431099][ T1150] syz.4.333: attempt to access beyond end of device [ 42.431099][ T1150] loop4: rw=2049, sector=77880, nr_sectors = 32 limit=40427 [ 42.446659][ T1150] syz.4.333: attempt to access beyond end of device [ 42.446659][ T1150] loop4: rw=2049, sector=77920, nr_sectors = 8 limit=40427 [ 42.468042][ T1150] syz.4.333: attempt to access beyond end of device [ 42.468042][ T1150] loop4: rw=2049, sector=77944, nr_sectors = 32 limit=40427 [ 42.482394][ T1150] syz.4.333: attempt to access beyond end of device [ 42.482394][ T1150] loop4: rw=2049, sector=78000, nr_sectors = 24 limit=40427 [ 42.496801][ T1150] syz.4.333: attempt to access beyond end of device [ 42.496801][ T1150] loop4: rw=2049, sector=78056, nr_sectors = 32 limit=40427 [ 42.525158][ T1150] syz.4.333: attempt to access beyond end of device [ 42.525158][ T1150] loop4: rw=2049, sector=78104, nr_sectors = 16 limit=40427 [ 42.555110][ T1150] syz.4.333: attempt to access beyond end of device [ 42.555110][ T1150] loop4: rw=2049, sector=78152, nr_sectors = 32 limit=40427 [ 42.733588][ T1208] x86/PAT: syz.1.354:1208 freeing invalid memtype [mem 0xfe408000-0xfe408fff] [ 42.763860][ T1208] x86/PAT: syz.1.354:1208 freeing invalid memtype [mem 0xfe000000-0xfe407fff] [ 42.910071][ T1222] loop6: detected capacity change from 0 to 256 [ 42.912601][ T1216] serio: Serial port ptm0 [ 42.940824][ T1204] loop3: detected capacity change from 0 to 40427 [ 42.957296][ T1204] F2FS-fs (loop3): invalid crc value [ 42.961926][ T1222] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 42.992821][ T1204] F2FS-fs (loop3): Found nat_bits in checkpoint [ 43.091049][ T1204] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 43.145936][ T1254] netlink: 4 bytes leftover after parsing attributes in process `syz.6.374'. [ 43.166422][ T1250] loop5: detected capacity change from 0 to 8192 [ 43.497158][ T1256] loop4: detected capacity change from 0 to 40427 [ 43.511355][ T1256] F2FS-fs (loop4): invalid crc value [ 43.533120][ T1256] F2FS-fs (loop4): Found nat_bits in checkpoint [ 45.479191][ T1256] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 46.422675][ T1308] loop6: detected capacity change from 0 to 8 [ 46.429269][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 46.429284][ T28] audit: type=1400 audit(1794012867.327:337): avc: denied { sqpoll } for pid=1303 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 46.513829][ T1308] loop6: detected capacity change from 8 to 0 [ 46.536391][ T1317] FAULT_INJECTION: forcing a failure. [ 46.536391][ T1317] name failslab, interval 1, probability 0, space 0, times 0 [ 46.553089][ T1312] loop5: detected capacity change from 0 to 512 [ 46.566304][ T1312] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.581540][ T1317] CPU: 0 PID: 1317 Comm: syz.1.397 Not tainted syzkaller #0 [ 46.588891][ T1317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 46.598981][ T1317] Call Trace: [ 46.602388][ T1317] [ 46.605384][ T1317] __dump_stack+0x21/0x24 [ 46.609800][ T1317] dump_stack_lvl+0x110/0x170 [ 46.614516][ T1317] ? __cfi_dump_stack_lvl+0x8/0x8 [ 46.619585][ T1317] ? kasan_set_track+0x60/0x70 [ 46.624437][ T1317] ? kasan_set_track+0x4b/0x70 [ 46.629243][ T1317] ? kasan_save_alloc_info+0x1f/0x30 [ 46.634570][ T1317] ? __kasan_kmalloc+0x95/0xb0 [ 46.639381][ T1317] dump_stack+0x15/0x24 [ 46.643575][ T1317] should_fail_ex+0x3bf/0x510 [ 46.648305][ T1317] __should_failslab+0xac/0xf0 [ 46.653128][ T1317] should_failslab+0x9/0x20 [ 46.657675][ T1317] kmem_cache_alloc_node+0x42/0x330 [ 46.662937][ T1317] ? alloc_vmap_area+0x184/0x18c0 [ 46.668095][ T1317] alloc_vmap_area+0x184/0x18c0 [ 46.672991][ T1317] ? vm_map_ram+0x930/0x930 [ 46.677537][ T1317] ? __kasan_kmalloc+0x95/0xb0 [ 46.682361][ T1317] ? kmalloc_node_trace+0x3d/0xb0 [ 46.687430][ T1317] __get_vm_area_node+0x160/0x360 [ 46.692502][ T1317] __vmalloc_node_range+0x326/0x1440 [ 46.697830][ T1317] ? write_ldt+0x354/0x5c0 [ 46.702395][ T1317] ? __cfi___vmalloc_node_range+0x10/0x10 [ 46.708167][ T1317] ? kasan_save_alloc_info+0x1f/0x30 [ 46.708969][ T1321] loop4: detected capacity change from 0 to 512 [ 46.713489][ T1317] ? write_ldt+0x354/0x5c0 [ 46.713519][ T1317] __vmalloc+0x79/0x90 [ 46.728314][ T1317] ? write_ldt+0x354/0x5c0 [ 46.732782][ T1317] write_ldt+0x354/0x5c0 [ 46.737337][ T1317] ? __ia32_sys_modify_ldt+0x80/0x80 [ 46.742674][ T1317] ? xfd_validate_state+0x70/0x150 [ 46.743103][ T1321] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.747859][ T1317] __se_sys_modify_ldt+0x1d1/0x210 [ 46.747893][ T1317] __x64_sys_modify_ldt+0x76/0x80 [ 46.764497][ T1317] x64_sys_call+0x17f/0x9a0 [ 46.769060][ T1317] do_syscall_64+0x4c/0xa0 [ 46.773527][ T1317] ? clear_bhb_loop+0x30/0x80 [ 46.778260][ T1317] ? clear_bhb_loop+0x30/0x80 [ 46.782983][ T1317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 46.784400][ T28] audit: type=1400 audit(1794012867.647:338): avc: denied { append } for pid=1322 comm="syz.6.402" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 46.788925][ T1317] RIP: 0033:0x7fd7d779fb19 [ 46.788947][ T1317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.788964][ T1317] RSP: 002b:00007fd7d86bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 46.788987][ T1317] RAX: ffffffffffffffda RBX: 00007fd7d7a25fa0 RCX: 00007fd7d779fb19 [ 46.789004][ T1317] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000001 [ 46.789017][ T1317] RBP: 00007fd7d7837b70 R08: 0000000000000000 R09: 0000000000000000 [ 46.789031][ T1317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.789044][ T1317] R13: 00007fd7d7a26038 R14: 00007fd7d7a25fa0 R15: 00007ffc87190488 [ 46.789063][ T1317] [ 46.889727][ T1317] syz.1.397: vmalloc error: size 65536, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 46.894657][ T1321] EXT4-fs error (device loop4): ext4_iget_extra_inode:4765: inode #15: comm syz.4.401: corrupted in-inode xattr [ 46.906688][ T1317] CPU: 1 PID: 1317 Comm: syz.1.397 Not tainted syzkaller #0 [ 46.925096][ T1317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 46.935315][ T1317] Call Trace: [ 46.938639][ T1317] [ 46.941627][ T1317] __dump_stack+0x21/0x24 [ 46.946006][ T1317] dump_stack_lvl+0x110/0x170 [ 46.950730][ T1317] ? __cfi_dump_stack_lvl+0x8/0x8 [ 46.955937][ T1317] ? pr_cont_kernfs_name+0x133/0x160 [ 46.961268][ T1317] dump_stack+0x15/0x24 [ 46.965480][ T1317] warn_alloc+0x1dc/0x200 [ 46.969987][ T1317] ? __cfi_warn_alloc+0x10/0x10 [ 46.974894][ T1317] ? __get_vm_area_node+0x175/0x360 [ 46.980400][ T1317] __vmalloc_node_range+0x34b/0x1440 [ 46.985747][ T1317] ? __cfi___vmalloc_node_range+0x10/0x10 [ 46.991521][ T1317] ? kasan_save_alloc_info+0x1f/0x30 [ 46.996847][ T1317] ? write_ldt+0x354/0x5c0 [ 47.001312][ T1317] __vmalloc+0x79/0x90 [ 47.004898][ T1321] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.401: couldn't read orphan inode 15 (err -117) [ 47.005418][ T1317] ? write_ldt+0x354/0x5c0 [ 47.021674][ T1317] write_ldt+0x354/0x5c0 [ 47.025973][ T1317] ? __ia32_sys_modify_ldt+0x80/0x80 [ 47.031387][ T1317] ? xfd_validate_state+0x70/0x150 [ 47.036556][ T1317] __se_sys_modify_ldt+0x1d1/0x210 [ 47.041719][ T1317] __x64_sys_modify_ldt+0x76/0x80 [ 47.046837][ T1317] x64_sys_call+0x17f/0x9a0 [ 47.051389][ T1317] do_syscall_64+0x4c/0xa0 [ 47.055844][ T1317] ? clear_bhb_loop+0x30/0x80 [ 47.058774][ T1321] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 47.060570][ T1317] ? clear_bhb_loop+0x30/0x80 [ 47.074228][ T1317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 47.080176][ T1317] RIP: 0033:0x7fd7d779fb19 [ 47.084624][ T1317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.104351][ T1317] RSP: 002b:00007fd7d86bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 47.112812][ T1317] RAX: ffffffffffffffda RBX: 00007fd7d7a25fa0 RCX: 00007fd7d779fb19 [ 47.120828][ T1317] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000001 [ 47.128837][ T1317] RBP: 00007fd7d7837b70 R08: 0000000000000000 R09: 0000000000000000 [ 47.136888][ T1317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.144903][ T1317] R13: 00007fd7d7a26038 R14: 00007fd7d7a25fa0 R15: 00007ffc87190488 [ 47.152920][ T1317] [ 47.156149][ T1317] Mem-Info: [ 47.161333][ T1317] active_anon:8539 inactive_anon:3 isolated_anon:0 [ 47.161333][ T1317] active_file:5811 inactive_file:2556 isolated_file:0 [ 47.161333][ T1317] unevictable:0 dirty:452 writeback:0 [ 47.161333][ T1317] slab_reclaimable:9026 slab_unreclaimable:73564 [ 47.161333][ T1317] mapped:30766 shmem:1691 pagetables:661 [ 47.161333][ T1317] sec_pagetables:0 bounce:0 [ 47.161333][ T1317] kernel_misc_reclaimable:0 [ 47.161333][ T1317] free:1529525 free_pcp:7519 free_cma:0 [ 47.207499][ T1317] Node 0 active_anon:34856kB inactive_anon:12kB active_file:23244kB inactive_file:10224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123864kB dirty:1808kB writeback:0kB shmem:7364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4328kB pagetables:2544kB sec_pagetables:0kB all_unreclaimable? no [ 47.241003][ T291] EXT4-fs (loop4): unmounting filesystem. [ 47.269194][ T1334] loop3: detected capacity change from 0 to 256 [ 47.277073][ T1335] loop4: detected capacity change from 0 to 512 [ 47.277707][ T1317] DMA32 free:2966484kB boost:0kB min:31276kB low:39092kB high:46908kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2971856kB mlocked:0kB bounce:0kB free_pcp:5372kB local_pcp:0kB free_cma:0kB [ 47.285126][ T1317] lowmem_reserve[]: [ 47.324143][ T1334] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d) [ 47.335032][ T1317] 0 3932 3932 3932 [ 47.398083][ T28] audit: type=1400 audit(1794012868.307:339): avc: denied { remove_name } for pid=1332 comm="syz.3.406" name="file0" dev="loop3" ino=1048703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.467038][ T28] audit: type=1400 audit(1794012868.307:340): avc: denied { rename } for pid=1332 comm="syz.3.406" name="file0" dev="loop3" ino=1048703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.490696][ T1339] loop4: detected capacity change from 0 to 16 [ 47.503420][ T28] audit: type=1400 audit(1794012868.347:341): avc: denied { mounton } for pid=1336 comm="syz.3.407" path="/80/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 47.527654][ T362] bridge0: port 3(syz_tun) entered disabled state [ 47.534702][ T1339] erofs: (device loop4): mounted with root inode @ nid 36. [ 47.543392][ T1317] Normal free:3136776kB boost:0kB min:42448kB low:53060kB high:63672kB reserved_highatomic:0KB active_anon:39220kB inactive_anon:12kB active_file:23244kB inactive_file:10224kB unevictable:0kB writepending:1808kB present:5242880kB managed:4026400kB mlocked:0kB bounce:0kB free_pcp:33900kB local_pcp:24272kB free_cma:0kB [ 47.574258][ T362] device syz_tun left promiscuous mode [ 47.590116][ T362] bridge0: port 3(syz_tun) entered disabled state [ 47.617341][ T1317] lowmem_reserve[]: 0 0 0 0 [ 47.622112][ T1317] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 2*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2966484kB [ 47.648258][ T1345] Zero length message leads to an empty skb [ 47.654625][ T1317] Normal: 856*4kB (UME) 188*8kB (UME) 154*16kB (UM) 167*32kB (UM) 58*64kB (UME) 39*128kB (UME) 30*256kB (ME) 24*512kB (UME) 12*1024kB (ME) 7*2048kB (UME) 751*4096kB (UM) = 3144128kB [ 47.673069][ T1317] 8536 total pagecache pages [ 47.691190][ T1317] 3 pages in swap cache [ 47.695410][ T1317] Free swap = 124444kB [ 47.709294][ T1317] Total swap = 124996kB [ 47.718204][ T1317] 2097051 pages RAM [ 47.722177][ T1317] 0 pages HighMem/MovableOnly [ 47.726912][ T1317] 347487 pages reserved [ 47.736105][ T1317] 0 pages cma reserved [ 47.777771][ T1355] loop4: detected capacity change from 0 to 256 [ 47.815106][ T1360] capability: warning: `syz.1.420' uses deprecated v2 capabilities in a way that may be insecure [ 47.841665][ T28] audit: type=1400 audit(1794012868.747:342): avc: denied { mount } for pid=1361 comm="syz.5.421" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 47.868089][ T1360] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 47.909209][ T1370] af_packet: tpacket_rcv: packet too big, clamped from 50 to 4294967286. macoff=82 [ 48.027873][ T1380] mmap: syz.1.426 (1380) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.092404][ T1375] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.101813][ T1389] loop6: detected capacity change from 0 to 256 [ 48.130192][ T1375] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.138312][ T1375] device bridge_slave_0 entered promiscuous mode [ 48.145549][ T1375] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.155431][ T1375] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.165310][ T1393] loop6: detected capacity change from 0 to 512 [ 48.172180][ T1375] device bridge_slave_1 entered promiscuous mode [ 48.235962][ T1372] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 48.236354][ T1393] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 48.254081][ T1372] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 48.262443][ T1372] F2FS-fs (loop4): Image doesn't support compression [ 48.269824][ T1372] F2FS-fs (loop4): Image doesn't support compression [ 48.281471][ T1372] F2FS-fs (loop4): invalid crc value [ 48.287108][ T1393] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.289345][ T1372] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 48.335378][ T28] audit: type=1400 audit(1794012869.237:343): avc: denied { bind } for pid=1390 comm="syz.6.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.364425][ T645] EXT4-fs (loop6): unmounting filesystem. [ 48.410918][ T1399] sd 0:0:1:0: PR command failed: 1026 [ 48.416391][ T1399] sd 0:0:1:0: Sense Key : 0x5 [current] [ 48.442399][ T1399] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 48.462547][ T1372] F2FS-fs (loop4): Start checkpoint disabled! [ 48.469727][ T1375] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.476825][ T1375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.484295][ T1375] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.491382][ T1375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.507624][ T1372] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 48.525355][ T1372] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 48.532726][ T1372] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 48.599314][ T28] audit: type=1400 audit(1794012869.507:344): avc: denied { listen } for pid=1401 comm="syz.6.433" path=2F36302FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 48.633034][ T525] bio_check_eod: 50 callbacks suppressed [ 48.633051][ T525] kworker/u4:4: attempt to access beyond end of device [ 48.633051][ T525] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 48.687124][ T1325] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.696487][ T1325] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.724093][ T1325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.743443][ T1325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.765950][ T1325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.774946][ T1411] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 48.805737][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.812904][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.823791][ T28] audit: type=1400 audit(1794012869.727:345): avc: denied { mounton } for pid=1417 comm="syz.4.435" path="/proc/210/cgroup" dev="proc" ino=22097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 48.853440][ T1325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.861844][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.868968][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.883243][ T645] EXT4-fs (loop6): unmounting filesystem. [ 48.904505][ T28] audit: type=1400 audit(1794012869.797:346): avc: denied { ioctl } for pid=1415 comm="syz.5.438" path="socket:[21217]" dev="sockfs" ino=21217 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.930499][ T1325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.946878][ T1325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.955414][ T1325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.964117][ T1325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.973021][ T1325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.981715][ T1325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.995936][ T1426] FAT-fs (loop4): Unrecognized mount option "iλ(lt [ 50.481996][ T1512] __dump_stack+0x21/0x24 [ 50.486368][ T1512] dump_stack_lvl+0x110/0x170 [ 50.491169][ T1512] ? __cfi_dump_stack_lvl+0x8/0x8 [ 50.496233][ T1512] dump_stack+0x15/0x24 [ 50.500421][ T1512] should_fail_ex+0x3bf/0x510 [ 50.505135][ T1512] __should_failslab+0xac/0xf0 [ 50.509944][ T1512] should_failslab+0x9/0x20 [ 50.514510][ T1512] __kmem_cache_alloc_node+0x3d/0x2d0 [ 50.519930][ T1512] ? security_prepare_creds+0x4e/0x150 [ 50.525433][ T1512] ? security_prepare_creds+0x4e/0x150 [ 50.530928][ T1512] __kmalloc+0xa4/0x1e0 [ 50.535162][ T1512] security_prepare_creds+0x4e/0x150 [ 50.540500][ T1512] prepare_creds+0x428/0x610 [ 50.545144][ T1512] join_session_keyring+0x1b/0x430 [ 50.550315][ T1512] ? lookup_user_key+0x522/0x1150 [ 50.555426][ T1512] lookup_user_key+0x529/0x1150 [ 50.556257][ T1507] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 50.560324][ T1512] ? __cfi_lookup_user_key+0x10/0x10 [ 50.560357][ T1512] ? do_futex+0x2e2/0x430 [ 50.571564][ T1507] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.574257][ T1512] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 50.595313][ T1512] __se_sys_add_key+0x311/0x410 [ 50.600217][ T1512] ? __x64_sys_add_key+0xd0/0xd0 [ 50.605197][ T1512] ? xfd_validate_state+0x70/0x150 [ 50.610351][ T1512] ? __kasan_check_write+0x14/0x20 [ 50.615499][ T1512] ? fpregs_restore_userregs+0x128/0x260 [ 50.621178][ T1512] __x64_sys_add_key+0xbf/0xd0 [ 50.624854][ C0] hid-thrustmaster 0003:044F:B65D.0002: URB to get model id failed with error -71 [ 50.625980][ T1512] x64_sys_call+0x6aa/0x9a0 [ 50.639804][ T1512] do_syscall_64+0x4c/0xa0 [ 50.644268][ T1512] ? clear_bhb_loop+0x30/0x80 [ 50.646079][ T19] usb 7-1: USB disconnect, device number 2 [ 50.649016][ T1512] ? clear_bhb_loop+0x30/0x80 [ 50.649051][ T1512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 50.649080][ T1512] RIP: 0033:0x7fa42659fb19 [ 50.649099][ T1512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.649119][ T1512] RSP: 002b:00007fa4274bc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 50.698037][ T1512] RAX: ffffffffffffffda RBX: 00007fa426825fa0 RCX: 00007fa42659fb19 [ 50.706225][ T1512] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 50.714329][ T1512] RBP: 00007fa426637b70 R08: fffffffffffffffd R09: 0000000000000000 [ 50.722347][ T1512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.730384][ T1512] R13: 00007fa426826038 R14: 00007fa426825fa0 R15: 00007ffe0c837438 [ 50.738404][ T1512] [ 50.756755][ T1507] EXT4-fs (loop5): shut down requested (0) [ 50.763925][ T1507] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 50.784618][ T594] EXT4-fs (loop5): unmounting filesystem. [ 50.839784][ T1519] erofs: (device loop7): mounted with root inode @ nid 36. [ 50.879322][ T1527] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 50.889710][ T1527] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.894685][ T8] tipc: Subscription rejected, illegal request [ 50.933918][ T1375] EXT4-fs (loop7): unmounting filesystem. [ 51.034356][ T1550] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.041305][ T1550] EXT4-fs: Ignoring removed orlov option [ 51.064694][ T1550] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 51.074985][ T1550] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.097621][ T1555] EXT4-fs: Ignoring removed orlov option [ 51.105596][ T1555] EXT4-fs (loop5): Test dummy encryption mode enabled [ 51.114434][ T1375] EXT4-fs (loop7): unmounting filesystem. [ 51.121607][ T1555] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 51.135165][ T1555] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 51.191288][ T594] EXT4-fs (loop5): unmounting filesystem. [ 51.217909][ T1572] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 3f00 [ 51.265965][ T1575] input: syz1 as /devices/virtual/input/input7 [ 51.284725][ T1575] input: failed to attach handler leds to device input7, error: -6 [ 51.319767][ T383] udevd[383]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 51.382677][ T1583] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.393545][ T1583] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.414522][ T1587] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 51.424161][ T1587] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.437090][ T1594] device veth0 entered promiscuous mode [ 51.498351][ T1583] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 51.509606][ T287] EXT4-fs (loop1): unmounting filesystem. [ 51.517621][ T1583] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.532598][ T1594] device veth0 left promiscuous mode [ 51.542343][ T1566] set_capacity_and_notify: 14 callbacks suppressed [ 51.542361][ T1566] loop4: detected capacity change from 0 to 40427 [ 51.544226][ T1583] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.505: bg 0: block 112: padding at end of block bitmap is not set [ 51.563136][ T1597] loop5: detected capacity change from 0 to 4096 [ 51.579167][ T1566] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 51.585816][ T1566] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 51.600376][ T1597] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 51.622194][ T1583] EXT4-fs (loop7): Remounting filesystem read-only [ 51.638824][ T1566] F2FS-fs (loop4): Found nat_bits in checkpoint [ 51.654927][ T594] EXT4-fs (loop5): unmounting filesystem. [ 51.681188][ T1375] EXT4-fs (loop7): unmounting filesystem. [ 51.692476][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 51.692493][ T28] audit: type=1400 audit(1794012872.597:354): avc: denied { connect } for pid=1606 comm="syz.6.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.759501][ T28] audit: type=1400 audit(1794012872.667:355): avc: denied { execute } for pid=1610 comm="syz.6.516" path="/71/file0" dev="tmpfs" ino=398 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.091506][ T1566] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 53.104283][ T1566] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 53.459469][ T1566] syz.4.498: attempt to access beyond end of device [ 53.459469][ T1566] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 53.487956][ T1566] syz.4.498: attempt to access beyond end of device [ 53.487956][ T1566] loop4: rw=2049, sector=77824, nr_sectors = 16 limit=40427 [ 53.516571][ T291] syz-executor: attempt to access beyond end of device [ 53.516571][ T291] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 53.560296][ T28] audit: type=1400 audit(1794012874.467:356): avc: denied { write } for pid=1629 comm="syz.7.525" name="stat" dev="proc" ino=4026532383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 53.606982][ T1632] loop6: detected capacity change from 0 to 128 [ 53.635222][ T1635] netlink: 68 bytes leftover after parsing attributes in process `syz.7.527'. [ 53.660242][ T28] audit: type=1400 audit(1794012874.487:357): avc: denied { add_name } for pid=1629 comm="syz.7.525" name="rt_cache" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 53.682433][ T1637] loop7: detected capacity change from 0 to 512 [ 53.710683][ T1637] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 53.739406][ T28] audit: type=1400 audit(1794012874.487:358): avc: denied { create } for pid=1629 comm="syz.7.525" name="rt_cache" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:proc_net_t tclass=file permissive=1 [ 53.784347][ T1637] EXT4-fs error (device loop7): ext4_orphan_get:1431: comm syz.7.528: bad orphan inode 131083 [ 53.804052][ T1637] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 53.819287][ T1643] device vlan0 entered promiscuous mode [ 53.827122][ T28] audit: type=1400 audit(1794012874.487:359): avc: denied { associate } for pid=1629 comm="syz.7.525" name="rt_cache" scontext=root:object_r:proc_net_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 53.853905][ T1643] device eth0 entered promiscuous mode [ 53.883198][ T28] audit: type=1400 audit(1794012874.487:360): avc: denied { write } for pid=1629 comm="syz.7.525" name="rt_cache" dev="proc" ino=4026532399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 53.907789][ T1375] EXT4-fs (loop7): unmounting filesystem. [ 53.914717][ T28] audit: type=1400 audit(1794012874.717:361): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 53.959972][ T28] audit: type=1400 audit(1794012874.867:362): avc: denied { create } for pid=1650 comm="syz.7.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.995525][ T28] audit: type=1400 audit(1794012874.897:363): avc: denied { bind } for pid=1650 comm="syz.7.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 54.212781][ T1605] loop1: detected capacity change from 0 to 131072 [ 54.223613][ T1647] loop4: detected capacity change from 0 to 40427 [ 54.238204][ T1605] F2FS-fs (loop1): invalid crc value [ 54.261265][ T1647] F2FS-fs (loop4): invalid crc value [ 54.272200][ T1605] F2FS-fs (loop1): Found nat_bits in checkpoint [ 54.292251][ T1647] F2FS-fs (loop4): Found nat_bits in checkpoint [ 54.367323][ T1605] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 54.401936][ T1647] F2FS-fs (loop4): Start checkpoint disabled! [ 54.418237][ T1647] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 54.436277][ T1647] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 54.453885][ T1673] loop5: detected capacity change from 0 to 512 [ 54.492300][ T1673] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 54.545674][ T308] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 54.604320][ T8] kworker/u4:0: attempt to access beyond end of device [ 54.604320][ T8] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 55.004689][ T1693] loop6: detected capacity change from 0 to 256 [ 55.026397][ T1693] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 55.037573][ T1695] device veth2 entered promiscuous mode [ 55.046206][ T1697] loop5: detected capacity change from 0 to 256 [ 55.076910][ T1697] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.113607][ T1697] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 55.151011][ T1697] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 55.226512][ T1708] loop5: detected capacity change from 0 to 2048 [ 55.277946][ T1708] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 55.289776][ T1708] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.315576][ T1714] EXT4-fs: Ignoring removed orlov option [ 55.326814][ T1708] fs-verity: sha512 using implementation "sha512-avx2" [ 55.353146][ T1714] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 55.373205][ T594] EXT4-fs (loop5): unmounting filesystem. [ 55.391959][ T1714] EXT4-fs (loop7): Online resizing not supported with bigalloc [ 55.417046][ T1375] EXT4-fs (loop7): unmounting filesystem. [ 55.430594][ T1721] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 55.483130][ T1723] EXT4-fs: Ignoring removed oldalloc option [ 55.495810][ T1723] EXT4-fs (loop5): Test dummy encryption mode enabled [ 55.512947][ T1723] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 55.528067][ T1729] device veth2 entered promiscuous mode [ 55.535408][ T1723] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.559: bad orphan inode 131083 [ 55.548852][ T1723] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 55.571594][ T1723] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz.5.559: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 55.673390][ T594] EXT4-fs (loop5): unmounting filesystem. [ 55.805012][ T1744] process 'syz.5.568' launched './file0' with NULL argv: empty string added [ 55.843503][ T1744] Invalid argument reading file caps for ./file0 [ 55.953700][ T1692] F2FS-fs (loop1): Test dummy encryption mode enabled [ 55.981067][ T1692] F2FS-fs (loop1): invalid crc value [ 56.016744][ T1692] F2FS-fs (loop1): Found nat_bits in checkpoint [ 56.091299][ T1753] pimreg1: tun_chr_ioctl cmd 1074025677 [ 56.105934][ T1753] pimreg1: linktype set to 773 [ 56.111116][ T1692] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 56.125193][ T1753] pimreg1: tun_chr_ioctl cmd 1074025680 [ 56.195302][ T1692] syz.1.548 (pid 1692) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 56.324851][ T1765] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 56.337478][ T1765] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.404410][ T594] EXT4-fs (loop5): unmounting filesystem. [ 56.492596][ T1771] erofs: (device loop5): mounted with root inode @ nid 36. [ 56.501985][ T1771] erofs: (device loop5): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 56.511938][ T1771] syz.5.580: attempt to access beyond end of device [ 56.511938][ T1771] loop5: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 56.517580][ T24] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 56.602108][ T1783] set_capacity_and_notify: 6 callbacks suppressed [ 56.602127][ T1783] loop6: detected capacity change from 0 to 512 [ 56.617672][ T1783] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 56.651919][ T1790] loop2: detected capacity change from 0 to 7 [ 56.697632][ T1794] input: syz0 as /devices/virtual/input/input8 [ 56.705801][ T1794] input: failed to attach handler leds to device input8, error: -6 [ 56.748466][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.765694][ T24] usb 8-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 56.776759][ T24] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 56.787926][ T24] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 191, setting to 64 [ 56.799612][ T24] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 56.813827][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 56.820740][ T24] usb 8-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 56.829968][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.838835][ T24] usb 8-1: config 0 descriptor?? [ 56.844329][ T1761] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 57.002985][ T1815] syz.4.598 uses obsolete (PF_INET,SOCK_PACKET) [ 57.025608][ T1817] loop4: detected capacity change from 0 to 512 [ 57.080660][ T1825] tipc: Started in network mode [ 57.085791][ T1825] tipc: Node identity ac14140f, cluster identity 4711 [ 57.093060][ T1825] tipc: New replicast peer: 255.255.255.255 [ 57.099980][ T1825] tipc: Enabled bearer , priority 10 [ 57.109910][ T1825] loop4: detected capacity change from 0 to 512 [ 57.119820][ T309] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 57.128816][ T1825] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 57.137603][ T1825] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.144308][ T1825] EXT4-fs error (device loop4): ext4_quota_enable:7036: inode #15: comm syz.4.603: iget: bad i_size value: 360287970189639690 [ 57.157828][ T1825] EXT4-fs error (device loop4): ext4_quota_enable:7039: comm syz.4.603: Bad quota inode: 15, type: 2 [ 57.169651][ T1825] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 57.185012][ T1825] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 57.191846][ T1825] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 57.211999][ T291] EXT4-fs (loop4): unmounting filesystem. [ 57.227822][ T1829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.604'. [ 57.254573][ T24] logitech 0003:046D:C298.0003: unknown main item tag 0x2 [ 57.262375][ T24] logitech 0003:046D:C298.0003: unknown main item tag 0x0 [ 57.269723][ T24] logitech 0003:046D:C298.0003: unknown main item tag 0x0 [ 57.278447][ T24] input: HID 046d:c298 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:046D:C298.0003/input/input9 [ 57.319292][ T309] usb 7-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 57.328862][ T309] usb 7-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 57.337152][ T309] usb 7-1: Product: syz [ 57.342587][ T309] usb 7-1: config 0 descriptor?? [ 57.348804][ T309] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 57.356743][ T309] usb 7-1: Detected FT232H [ 57.365641][ T24] logitech 0003:046D:C298.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c298] on usb-dummy_hcd.7-1/input0 [ 57.377943][ T24] logitech 0003:046D:C298.0003: implement() called with too large value 245 (n: 0)! (kworker/1:0) [ 57.388836][ T24] logitech 0003:046D:C298.0003: implement() called with too large value 248 (n: 0)! (kworker/1:0) [ 57.399467][ T24] logitech 0003:046D:C298.0003: implement() called with too large value 3 (n: 0)! (kworker/1:0) [ 57.409948][ T24] logitech 0003:046D:C298.0003: implement() called with too large value 129 (n: 0)! (kworker/1:0) [ 57.420573][ T24] logitech 0003:046D:C298.0003: implement() called with too large value 11 (n: 0)! (kworker/1:0) [ 57.431279][ T24] logitech 0003:046D:C298.0003: Force feedback support for Logitech Gaming Wheels [ 57.474544][ T1846] loop1: detected capacity change from 0 to 512 [ 57.482388][ T1846] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.515133][ T1846] EXT4-fs (loop1): 1 truncate cleaned up [ 57.516377][ T24] usb 8-1: USB disconnect, device number 2 [ 57.525046][ T1846] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 57.552726][ T309] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 57.561754][ T287] EXT4-fs (loop1): unmounting filesystem. [ 57.944155][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 57.944193][ T28] audit: type=1400 audit(1794012878.847:377): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 57.971914][ T309] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 58.073799][ T1881] loop7: detected capacity change from 0 to 4096 [ 58.176829][ T309] usb 7-1: USB disconnect, device number 3 [ 58.185552][ T309] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 58.204316][ T309] ftdi_sio 7-1:0.0: device disconnected [ 58.218085][ T6] tipc: Node number set to 2886997007 [ 58.230221][ T1877] loop1: detected capacity change from 0 to 40427 [ 58.249588][ T1877] F2FS-fs (loop1): invalid crc value [ 58.275248][ T1877] F2FS-fs (loop1): Found nat_bits in checkpoint [ 58.348923][ T1877] F2FS-fs (loop1): Start checkpoint disabled! [ 58.359672][ T1877] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 58.374575][ T1877] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 58.427982][ T1877] syz.1.621: attempt to access beyond end of device [ 58.427982][ T1877] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 58.451669][ T28] audit: type=1400 audit(1794012879.357:378): avc: denied { map } for pid=1874 comm="syz.1.621" path="/108/file0/file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.612121][ T308] kworker/u4:3: attempt to access beyond end of device [ 58.612121][ T308] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 58.802821][ T1916] loop1: detected capacity change from 0 to 4096 [ 58.925820][ T28] audit: type=1400 audit(1794012879.827:379): avc: denied { write } for pid=1930 comm="syz.7.642" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.944776][ T1935] netlink: 'syz.1.641': attribute type 32 has an invalid length. [ 58.968263][ T28] audit: type=1400 audit(1794012879.867:380): avc: denied { open } for pid=1930 comm="syz.7.642" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.472393][ T28] audit: type=1400 audit(1794012879.867:381): avc: denied { ioctl } for pid=1930 comm="syz.7.642" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.590367][ T1959] loop5: detected capacity change from 0 to 2048 [ 61.611348][ T1958] loop4: detected capacity change from 0 to 4096 [ 61.618137][ T1959] EXT4-fs: Ignoring removed i_version option [ 61.660906][ T1959] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.689151][ T28] audit: type=1400 audit(1794012882.597:382): avc: denied { mounton } for pid=1955 comm="syz.5.663" path="/131/file1/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.689268][ T1959] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 61.765099][ T28] audit: type=1400 audit(1794012882.667:383): avc: denied { unlink } for pid=594 comm="syz-executor" name="file1" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 61.809625][ T28] audit: type=1400 audit(1794012882.687:384): avc: denied { rmdir } for pid=594 comm="syz-executor" name="work" dev="loop5" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.940277][ T28] audit: type=1400 audit(1794012882.847:385): avc: denied { connect } for pid=1981 comm="syz.5.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.014692][ T2004] ip_tables: iptables: counters copy to user failed while replacing table [ 62.065058][ T2010] netlink: 8 bytes leftover after parsing attributes in process `syz.7.674'. [ 62.096796][ T2016] loop7: detected capacity change from 0 to 2048 [ 62.122913][ T2015] loop1: detected capacity change from 0 to 4096 [ 62.134301][ T2022] netlink: 'syz.5.679': attribute type 2 has an invalid length. [ 62.134625][ T2016] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.174693][ T2022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.679'. [ 62.192264][ T28] audit: type=1400 audit(1794012883.097:386): avc: denied { setattr } for pid=2013 comm="syz.7.677" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.290662][ T2037] loop7: detected capacity change from 0 to 256 [ 62.298333][ T2037] exfat: Deprecated parameter 'utf8' [ 62.303810][ T2037] exfat: Deprecated parameter 'namecase' [ 62.321425][ T2037] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 62.536220][ T2047] loop5: detected capacity change from 0 to 40427 [ 62.551954][ T2047] F2FS-fs (loop5): invalid crc value [ 62.572694][ T2047] F2FS-fs (loop5): Found nat_bits in checkpoint [ 62.617321][ T2068] input: syz1 as /devices/virtual/input/input10 [ 62.659401][ T2047] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 62.769915][ T2064] f2fs_ckpt-7:5: attempt to access beyond end of device [ 62.769915][ T2064] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 63.119346][ T2083] loop1: detected capacity change from 0 to 131072 [ 63.128433][ T2083] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24) [ 63.136341][ T2083] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 63.145045][ T2083] F2FS-fs (loop1): invalid crc value [ 63.164160][ T2083] F2FS-fs (loop1): Found nat_bits in checkpoint [ 63.199590][ T2083] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 63.211636][ T2083] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 63.219512][ T2083] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 63.258393][ T287] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=ffffff00, run fsck to fix. [ 63.268585][ T287] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 63.277757][ T287] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 63.286733][ T287] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 63.295910][ T287] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 63.295989][ T2105] loop7: detected capacity change from 0 to 512 [ 63.306176][ T287] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 63.321426][ T287] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 63.330656][ T2105] EXT4-fs (loop7): Test dummy encryption mode enabled [ 63.330678][ T287] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 63.346920][ T287] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 63.356086][ T287] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 63.356111][ T2105] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.714: inode has both inline data and extents flags [ 63.365937][ T287] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 63.379441][ T2105] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.714: couldn't read orphan inode 15 (err -117) [ 63.388015][ T287] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 63.407989][ T287] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 63.410040][ T2105] EXT4-fs (loop7): shut down requested (0) [ 63.417162][ T287] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 63.431694][ T287] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 63.441978][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 63.441993][ T28] audit: type=1400 audit(1794012884.347:390): avc: denied { create } for pid=2104 comm="syz.7.714" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 63.629486][ T2114] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(9) [ 63.711182][ T2128] input: syz1 as /devices/virtual/input/input11 [ 63.764306][ T28] audit: type=1400 audit(1794012884.667:391): avc: denied { create } for pid=2138 comm="syz.1.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 63.842106][ T28] audit: type=1400 audit(1794012884.747:392): avc: denied { ioctl } for pid=2151 comm="syz.6.734" path="socket:[24971]" dev="sockfs" ino=24971 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.910770][ T28] audit: type=1400 audit(1794012884.817:393): avc: denied { watch watch_reads } for pid=2162 comm="syz.4.738" path="/144/file0" dev="tmpfs" ino=801 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.954393][ T28] audit: type=1400 audit(1794012884.847:394): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 64.114440][ T2192] binder: 2191:2192 ioctl c0306201 0 returned -14 [ 64.269161][ T2196] loop4: detected capacity change from 0 to 40427 [ 64.276313][ T2196] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 64.283029][ T2196] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 64.291954][ T2196] F2FS-fs (loop4): invalid crc value [ 64.298928][ T2196] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 64.360579][ T2196] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 64.368331][ T2196] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 64.389195][ T291] syz-executor: attempt to access beyond end of device [ 64.389195][ T291] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 64.513146][ T2228] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 64.522096][ T2227] loop1: detected capacity change from 0 to 128 [ 64.614723][ T2240] FAULT_INJECTION: forcing a failure. [ 64.614723][ T2240] name failslab, interval 1, probability 0, space 0, times 0 [ 64.629045][ T2240] CPU: 0 PID: 2240 Comm: syz.4.772 Not tainted syzkaller #0 [ 64.636429][ T2240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 64.646649][ T2240] Call Trace: [ 64.649962][ T2240] [ 64.652926][ T2240] __dump_stack+0x21/0x24 [ 64.657301][ T2240] dump_stack_lvl+0x110/0x170 [ 64.662015][ T2240] ? __cfi_dump_stack_lvl+0x8/0x8 [ 64.667081][ T2240] dump_stack+0x15/0x24 [ 64.671269][ T2240] should_fail_ex+0x3bf/0x510 [ 64.675985][ T2240] __should_failslab+0xac/0xf0 [ 64.680803][ T2240] should_failslab+0x9/0x20 [ 64.685342][ T2240] slab_pre_alloc_hook+0x30/0x1d0 [ 64.690446][ T2240] kmem_cache_alloc_lru+0x49/0x280 [ 64.695602][ T2240] ? __d_alloc+0x34/0x6d0 [ 64.699974][ T2240] ? __cfi_get_random_u32+0x10/0x10 [ 64.705210][ T2240] __d_alloc+0x34/0x6d0 [ 64.709403][ T2240] ? current_time+0x19b/0x2c0 [ 64.714293][ T2240] d_alloc_pseudo+0x1d/0x70 [ 64.718910][ T2240] alloc_file_pseudo+0xe0/0x200 [ 64.723808][ T2240] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 64.729302][ T2240] ? shmem_get_inode+0x7f3/0xba0 [ 64.734292][ T2240] ? __kasan_check_write+0x14/0x20 [ 64.739454][ T2240] ? clear_nlink+0x8a/0xe0 [ 64.743907][ T2240] __shmem_file_setup+0x1df/0x2b0 [ 64.749060][ T2240] shmem_file_setup+0x2f/0x40 [ 64.753774][ T2240] __se_sys_memfd_create+0x1de/0x3c0 [ 64.759105][ T2240] __x64_sys_memfd_create+0x5b/0x70 [ 64.764347][ T2240] x64_sys_call+0x235/0x9a0 [ 64.768914][ T2240] do_syscall_64+0x4c/0xa0 [ 64.773361][ T2240] ? clear_bhb_loop+0x30/0x80 [ 64.778097][ T2240] ? clear_bhb_loop+0x30/0x80 [ 64.782807][ T2240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.788740][ T2240] RIP: 0033:0x7fa42659fb19 [ 64.793190][ T2240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.812912][ T2240] RSP: 002b:00007fa4274bbe08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 64.821361][ T2240] RAX: ffffffffffffffda RBX: 000000000000029b RCX: 00007fa42659fb19 [ 64.829351][ T2240] RDX: 00007fa4274bbee0 RSI: 0000000000000000 RDI: 00007fa426637d63 [ 64.837346][ T2240] RBP: 0000200000000180 R08: 00000000ffffffff R09: 0000000000000000 [ 64.845344][ T2240] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000040 [ 64.853336][ T2240] R13: 00007fa4274bbee0 R14: 00007fa4274bbea0 R15: 0000200000000080 [ 64.861342][ T2240] [ 64.897773][ T28] audit: type=1400 audit(1794012885.807:395): avc: denied { nlmsg_write } for pid=2247 comm="syz.5.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 64.924042][ T2251] netlink: 104 bytes leftover after parsing attributes in process `syz.6.774'. [ 64.935245][ T2253] loop4: detected capacity change from 0 to 128 [ 64.962095][ T2258] caif0: tun_chr_ioctl cmd 1074025672 [ 64.993463][ T2258] caif0: ignored: set checksum disabled [ 65.058322][ T2262] EXT4-fs mount: 14 callbacks suppressed [ 65.058343][ T2262] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 65.098295][ T2269] raw_sendmsg: syz.7.784 forgot to set AF_INET. Fix it! [ 65.118660][ T28] audit: type=1400 audit(1794012886.027:396): avc: denied { mounton } for pid=2259 comm="syz.6.780" path="/109/file0/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.156420][ T645] EXT4-fs (loop6): unmounting filesystem. [ 65.354302][ T2300] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 65.368213][ T2300] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.416964][ T2300] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.797: corrupted inode contents [ 65.447525][ T525] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 65.455625][ T2300] EXT4-fs (loop1): Remounting filesystem read-only [ 65.460735][ T525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.466118][ T2300] EXT4-fs error (device loop1): ext4_dirty_inode:6158: inode #2: comm syz.1.797: mark_inode_dirty error [ 65.484109][ T2300] EXT4-fs (loop1): Remounting filesystem read-only [ 65.484832][ T525] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 65.491425][ T2300] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.797: corrupted inode contents [ 65.511393][ T2300] EXT4-fs (loop1): Remounting filesystem read-only [ 65.512153][ T525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.528145][ T2311] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.797: corrupted inode contents [ 65.540944][ T525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.549141][ T2311] EXT4-fs (loop1): Remounting filesystem read-only [ 65.556132][ T525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.564416][ T2311] EXT4-fs error (device loop1): ext4_setattr:5540: inode #2: comm syz.1.797: mark_inode_dirty error [ 65.576388][ T525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.585217][ T525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.594442][ T2311] EXT4-fs (loop1): Remounting filesystem read-only [ 65.632278][ T28] audit: type=1400 audit(1794012886.537:397): avc: denied { write } for pid=2314 comm="syz.7.802" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 65.655679][ T287] EXT4-fs (loop1): unmounting filesystem. [ 65.731307][ T28] audit: type=1400 audit(1794012886.637:398): avc: denied { append } for pid=2324 comm="syz.1.807" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 65.765819][ T2327] mtrr: base(0x2000) is not aligned on a size(0x0000) boundary [ 65.771747][ T2325] input: syz0 as /devices/virtual/input/input12 [ 66.107316][ T24] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 66.147942][ T2353] FAULT_INJECTION: forcing a failure. [ 66.147942][ T2353] name failslab, interval 1, probability 0, space 0, times 0 [ 66.160783][ T2353] CPU: 1 PID: 2353 Comm: syz.1.820 Not tainted syzkaller #0 [ 66.168120][ T2353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 66.178248][ T2353] Call Trace: [ 66.181559][ T2353] [ 66.184517][ T2353] __dump_stack+0x21/0x24 [ 66.188879][ T2353] dump_stack_lvl+0x110/0x170 [ 66.193586][ T2353] ? __cfi_dump_stack_lvl+0x8/0x8 [ 66.198640][ T2353] dump_stack+0x15/0x24 [ 66.202849][ T2353] should_fail_ex+0x3bf/0x510 [ 66.207563][ T2353] __should_failslab+0xac/0xf0 [ 66.212368][ T2353] should_failslab+0x9/0x20 [ 66.216900][ T2353] __kmem_cache_alloc_node+0x3d/0x2d0 [ 66.222322][ T2353] ? call_usermodehelper_setup+0x8e/0x210 [ 66.228089][ T2353] ? call_usermodehelper_setup+0x8e/0x210 [ 66.233854][ T2353] kmalloc_trace+0x29/0xb0 [ 66.238303][ T2353] call_usermodehelper_setup+0x8e/0x210 [ 66.243907][ T2353] ? __cfi_free_modprobe_argv+0x10/0x10 [ 66.249509][ T2353] __request_module+0x391/0x910 [ 66.254416][ T2353] ? __cfi___request_module+0x10/0x10 [ 66.260207][ T2353] ? kasan_save_alloc_info+0x1f/0x30 [ 66.265532][ T2353] ? __kasan_slab_alloc+0x72/0x80 [ 66.270614][ T2353] ? security_inode_alloc+0x33/0x120 [ 66.275950][ T2353] ? __kasan_check_write+0x14/0x20 [ 66.281102][ T2353] ? _raw_spin_lock+0x94/0xf0 [ 66.285812][ T2353] ? __cfi__raw_spin_lock+0x10/0x10 [ 66.291044][ T2353] inet_create+0x348/0xef0 [ 66.295498][ T2353] __sock_create+0x39e/0x7c0 [ 66.300138][ T2353] __sys_socket+0xcd/0x1a0 [ 66.304624][ T2353] __x64_sys_socket+0x7a/0x90 [ 66.309340][ T2353] x64_sys_call+0x449/0x9a0 [ 66.313887][ T2353] do_syscall_64+0x4c/0xa0 [ 66.318336][ T2353] ? clear_bhb_loop+0x30/0x80 [ 66.323064][ T2353] ? clear_bhb_loop+0x30/0x80 [ 66.327774][ T2353] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.333790][ T2353] RIP: 0033:0x7fd7d779fb19 [ 66.338239][ T2353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.357878][ T2353] RSP: 002b:00007fd7d86bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 66.366339][ T2353] RAX: ffffffffffffffda RBX: 00007fd7d7a25fa0 RCX: 00007fd7d779fb19 [ 66.374374][ T2353] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000002 [ 66.382401][ T2353] RBP: 00007fd7d7837b70 R08: 0000000000000000 R09: 0000000000000000 [ 66.390409][ T2353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.398407][ T2353] R13: 00007fd7d7a26038 R14: 00007fd7d7a25fa0 R15: 00007ffc87190488 [ 66.406535][ T2353] [ 66.449310][ T2355] kvm: apic: phys broadcast and lowest prio [ 66.470349][ T2358] syz.1.822: attempt to access beyond end of device [ 66.470349][ T2358] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 66.528153][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.539872][ T24] usb 7-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 66.551055][ T24] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 66.562815][ T24] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 191, setting to 64 [ 66.574073][ T24] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 66.602878][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 66.614242][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 66.624646][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.651133][ T24] usb 7-1: config 0 descriptor?? [ 66.660197][ T2335] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 66.696372][ T2371] set_capacity_and_notify: 4 callbacks suppressed [ 66.696395][ T2371] loop1: detected capacity change from 0 to 512 [ 66.738993][ T2373] loop7: detected capacity change from 0 to 2048 [ 66.763250][ T2371] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.828: bad orphan inode 15 [ 66.774859][ T2373] loop7: p1 < > p4 [ 66.778870][ T2371] ext4_test_bit(bit=14, block=5) = 0 [ 66.782795][ T2373] loop7: p4 size 8388608 extends beyond EOD, truncated [ 66.786691][ T2371] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 66.817429][ T28] audit: type=1400 audit(1794012887.717:399): avc: denied { read write } for pid=2372 comm="syz.7.829" name="loop7p1" dev="devtmpfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.847704][ T287] EXT4-fs (loop1): unmounting filesystem. [ 67.075088][ T24] logitech 0003:046D:C298.0004: unknown main item tag 0x2 [ 67.093688][ T24] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 67.117519][ T24] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 67.148441][ T24] input: HID 046d:c298 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:046D:C298.0004/input/input13 [ 67.159958][ T301] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 67.263021][ T24] logitech 0003:046D:C298.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c298] on usb-dummy_hcd.6-1/input0 [ 68.457851][ T24] logitech 0003:046D:C298.0004: implement() called with too large value 245 (n: 0)! (kworker/1:0) [ 68.468667][ T24] logitech 0003:046D:C298.0004: implement() called with too large value 248 (n: 0)! (kworker/1:0) [ 68.479297][ T24] logitech 0003:046D:C298.0004: implement() called with too large value 3 (n: 0)! (kworker/1:0) [ 68.489766][ T24] logitech 0003:046D:C298.0004: implement() called with too large value 129 (n: 0)! (kworker/1:0) [ 68.500391][ T24] logitech 0003:046D:C298.0004: implement() called with too large value 11 (n: 0)! (kworker/1:0) [ 68.531608][ T24] logitech 0003:046D:C298.0004: Force feedback support for Logitech Gaming Wheels [ 68.532626][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 68.532654][ T28] audit: type=1400 audit(1794012889.437:402): avc: denied { write } for pid=19 comm="kworker/0:1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26376 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 68.577869][ T24] usb 7-1: USB disconnect, device number 4 [ 68.632417][ T2424] loop7: detected capacity change from 0 to 256 [ 68.665736][ T28] audit: type=1400 audit(1794012889.567:403): avc: denied { watch } for pid=2423 comm="syz.7.852" path="/107/file0/file0" dev="loop7" ino=1048738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 68.727357][ T28] audit: type=1400 audit(1794012889.627:404): avc: denied { create } for pid=2430 comm="syz.4.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 68.767452][ T2436] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 68.774743][ T2436] IPv6: NLM_F_CREATE should be set when creating new route [ 68.782212][ T28] audit: type=1400 audit(1794012889.637:405): avc: denied { sys_admin } for pid=2430 comm="syz.4.854" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 68.817810][ T28] audit: type=1400 audit(1794012889.647:406): avc: denied { sys_nice } for pid=2430 comm="syz.4.854" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 69.022486][ T2459] device-mapper: ioctl: Invalid ioctl structure: name syzg1, dev 100000200 [ 69.051797][ T301] usb 6-1: too many configurations: 181, using maximum allowed: 8 [ 69.068230][ T301] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 69.079900][ T2466] FAULT_INJECTION: forcing a failure. [ 69.079900][ T2466] name failslab, interval 1, probability 0, space 0, times 0 [ 69.094099][ T301] usb 6-1: can't read configurations, error -71 [ 69.101066][ T2466] CPU: 1 PID: 2466 Comm: syz.6.868 Not tainted syzkaller #0 [ 69.108393][ T2466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 69.118484][ T2466] Call Trace: [ 69.121817][ T2466] [ 69.124780][ T2466] __dump_stack+0x21/0x24 [ 69.129148][ T2466] dump_stack_lvl+0x110/0x170 [ 69.129519][ T2392] loop1: detected capacity change from 0 to 131072 [ 69.133858][ T2466] ? __cfi_dump_stack_lvl+0x8/0x8 [ 69.145405][ T2466] dump_stack+0x15/0x24 [ 69.149598][ T2466] should_fail_ex+0x3bf/0x510 [ 69.154315][ T2466] __should_failslab+0xac/0xf0 [ 69.159124][ T2466] should_failslab+0x9/0x20 [ 69.162558][ T2392] F2FS-fs (loop1): invalid crc value [ 69.163658][ T2466] __kmem_cache_alloc_node+0x3d/0x2d0 [ 69.174327][ T2466] ? selinux_key_alloc+0x56/0x190 [ 69.179404][ T2466] ? selinux_key_alloc+0x56/0x190 [ 69.184472][ T2466] kmalloc_trace+0x29/0xb0 [ 69.189059][ T2466] selinux_key_alloc+0x56/0x190 [ 69.193961][ T2466] security_key_alloc+0x85/0xc0 [ 69.198872][ T2466] key_alloc+0x73e/0xf00 [ 69.203158][ T2466] keyring_alloc+0x47/0xb0 [ 69.207614][ T2466] join_session_keyring+0x11d/0x430 [ 69.212853][ T2466] ? lookup_user_key+0x522/0x1150 [ 69.217931][ T2466] lookup_user_key+0x529/0x1150 [ 69.222831][ T2466] ? __cfi_lookup_user_key+0x10/0x10 [ 69.228169][ T2466] ? do_futex+0x2bf/0x430 [ 69.232539][ T2466] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 69.238747][ T2466] __se_sys_add_key+0x311/0x410 [ 69.243649][ T2466] ? __x64_sys_add_key+0xd0/0xd0 [ 69.246576][ T2472] loop5: detected capacity change from 0 to 256 [ 69.248623][ T2466] ? xfd_validate_state+0x70/0x150 [ 69.248661][ T2466] ? __kasan_check_write+0x14/0x20 [ 69.265169][ T2466] ? fpregs_restore_userregs+0x128/0x260 [ 69.270833][ T2466] __x64_sys_add_key+0xbf/0xd0 [ 69.275623][ T2466] x64_sys_call+0x6aa/0x9a0 [ 69.280154][ T2466] do_syscall_64+0x4c/0xa0 [ 69.284597][ T2466] ? clear_bhb_loop+0x30/0x80 [ 69.289290][ T2466] ? clear_bhb_loop+0x30/0x80 [ 69.294076][ T2466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.299988][ T2466] RIP: 0033:0x7fc10c39fb19 [ 69.304420][ T2466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.324042][ T2466] RSP: 002b:00007fc10d288028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 69.332481][ T2466] RAX: ffffffffffffffda RBX: 00007fc10c625fa0 RCX: 00007fc10c39fb19 [ 69.340476][ T2466] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 69.348464][ T2466] RBP: 00007fc10c437b70 R08: fffffffffffffffd R09: 0000000000000000 [ 69.356448][ T2466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.364459][ T2466] R13: 00007fc10c626038 R14: 00007fc10c625fa0 R15: 00007ffd0e17f768 [ 69.372451][ T2466] [ 69.387423][ T2472] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.407622][ T2392] F2FS-fs (loop1): Found nat_bits in checkpoint [ 69.482731][ T2392] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 69.534736][ T2483] netlink: 12 bytes leftover after parsing attributes in process `syz.6.875'. [ 69.559735][ T2483] device vlan0 entered promiscuous mode [ 69.565834][ T2472] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 69.574018][ T2472] FAT-fs (loop5): Filesystem has been set read-only [ 69.586232][ T2472] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 69.613537][ T28] audit: type=1400 audit(1794012890.520:407): avc: denied { mounton } for pid=2484 comm="syz.7.877" path="/121/file0" dev="tmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.742150][ T2496] loop4: detected capacity change from 0 to 4096 [ 69.761374][ T2496] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.769221][ T2496] EXT4-fs (loop4): Test dummy encryption mode enabled [ 69.784280][ T2496] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a80ec1a8, mo2=0003] [ 69.801600][ T2496] System zones: 0-5 [ 69.816593][ T2496] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 69.840941][ T2496] fscrypt: AES-256-XTS using blk-crypto-fallback [ 69.968840][ T291] EXT4-fs (loop4): unmounting filesystem. [ 69.997518][ T6] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 70.072487][ T2510] loop4: detected capacity change from 0 to 256 [ 70.090477][ T28] audit: type=1400 audit(1794012891.000:408): avc: denied { watch_reads } for pid=2509 comm="syz.4.886" path="/170/file0/file0" dev="loop4" ino=1048740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 70.197287][ T19] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 70.206058][ T6] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.217626][ T6] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.230754][ T6] usb 8-1: config 0 interface 0 has no altsetting 0 [ 70.237567][ T6] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 70.246763][ T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.259489][ T6] usb 8-1: config 0 descriptor?? [ 70.388401][ T19] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.398613][ T19] usb 2-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 70.409501][ T19] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 70.420640][ T19] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 191, setting to 64 [ 70.431501][ T19] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 70.444611][ T19] usb 2-1: config 0 interface 0 has no altsetting 0 [ 70.451327][ T19] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 70.460510][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.473554][ T19] usb 2-1: config 0 descriptor?? [ 70.478912][ T2505] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 70.675422][ T6] hid-thrustmaster 0003:044F:B65D.0005: hiddev96,hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.7-1/input0 [ 70.691181][ T6] hid-thrustmaster 0003:044F:B65D.0005: Wrong number of endpoints? [ 70.810291][ T28] audit: type=1400 audit(1794012891.720:409): avc: denied { getopt } for pid=2540 comm="syz.6.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 70.862986][ T2551] loop5: detected capacity change from 0 to 512 [ 70.865369][ T2550] loop6: detected capacity change from 0 to 1024 [ 70.888249][ C0] hid-thrustmaster 0003:044F:B65D.0005: URB to get model id failed with error -71 [ 70.888524][ T301] usb 8-1: USB disconnect, device number 3 [ 70.903756][ T19] logitech 0003:046D:C298.0006: unknown main item tag 0x2 [ 70.918237][ T19] logitech 0003:046D:C298.0006: unknown main item tag 0x0 [ 70.919076][ T2550] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 70.928410][ T19] logitech 0003:046D:C298.0006: unknown main item tag 0x0 [ 70.941772][ T2550] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.950940][ T19] input: HID 046d:c298 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046D:C298.0006/input/input14 [ 70.967158][ T2551] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 70.975857][ T28] audit: type=1400 audit(1794012891.880:410): avc: denied { lock } for pid=2548 comm="syz.6.902" path="/129/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.000001][ T2548] EXT4-fs error (device loop6): ext4_free_blocks:6220: comm syz.6.902: Freeing blocks not in datazone - block = 0, count = 16 [ 71.013757][ T2548] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.902: bg 0: block 112: padding at end of block bitmap is not set [ 71.028259][ T2548] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 71.040776][ T19] logitech 0003:046D:C298.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c298] on usb-dummy_hcd.1-1/input0 [ 71.053072][ T19] logitech 0003:046D:C298.0006: implement() called with too large value 245 (n: 0)! (kworker/0:1) [ 71.063987][ T19] logitech 0003:046D:C298.0006: implement() called with too large value 248 (n: 0)! (kworker/0:1) [ 71.065555][ T645] EXT4-fs (loop6): unmounting filesystem. [ 71.074618][ T19] logitech 0003:046D:C298.0006: implement() called with too large value 3 (n: 0)! (kworker/0:1) [ 71.074659][ T19] logitech 0003:046D:C298.0006: implement() called with too large value 129 (n: 0)! (kworker/0:1) [ 71.074683][ T19] logitech 0003:046D:C298.0006: implement() called with too large value 11 (n: 0)! (kworker/0:1) [ 71.075872][ T19] logitech 0003:046D:C298.0006: Force feedback support for Logitech Gaming Wheels [ 71.123024][ T594] EXT4-fs (loop5): unmounting filesystem. [ 71.148359][ T19] usb 2-1: USB disconnect, device number 2 [ 71.196943][ T2562] fido_id[2562]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 71.300881][ T2580] loop6: detected capacity change from 0 to 256 [ 71.321932][ T2580] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 71.368515][ T2585] sd 0:0:1:0: PR command failed: 1026 [ 71.374154][ T2585] sd 0:0:1:0: Sense Key : 0x5 [current] [ 71.381465][ T2585] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 71.460288][ T28] audit: type=1400 audit(1794012892.370:411): avc: denied { watch watch_reads } for pid=2598 comm="syz.7.924" path="/124/file1" dev="tmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.505558][ T2597] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 71.515776][ T2597] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.546231][ T645] EXT4-fs (loop6): unmounting filesystem. [ 71.554010][ T2610] EXT4-fs: Ignoring removed oldalloc option [ 71.586756][ T2610] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 71.595010][ T2617] futex_wake_op: syz.4.929 tries to shift op by -1; fix this program [ 71.644507][ T2610] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 71.666492][ T2610] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 71.695059][ T2625] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.706308][ T2610] EXT4-fs (loop7): This should not happen!! Data will be lost [ 71.706308][ T2610] [ 71.734134][ T2610] EXT4-fs (loop7): Total free blocks count 0 [ 71.740836][ T2610] EXT4-fs (loop7): Free/Dirty block details [ 71.748162][ T2625] EXT4-fs (loop4): 1 truncate cleaned up [ 71.753957][ T2625] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 71.764525][ T2610] EXT4-fs (loop7): free_blocks=4096 [ 71.771955][ T2610] EXT4-fs (loop7): dirty_blocks=848 [ 71.779434][ T2610] EXT4-fs (loop7): Block reservation details [ 71.791391][ T2610] EXT4-fs (loop7): i_reserved_data_blocks=53 [ 71.798288][ T291] EXT4-fs (loop4): unmounting filesystem. [ 71.806702][ T2609] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 832 with error 28 [ 72.835665][ T2641] netlink: 'syz.7.938': attribute type 2 has an invalid length. [ 72.850196][ T24] kernel write not supported for file bpf-prog (pid: 24 comm: kworker/1:0) [ 72.886622][ T2645] dyndbg: bad flag-op , at start of [ 72.892881][ T2645] dyndbg: flags parse failed [ 72.896525][ T2647] tun0: tun_chr_ioctl cmd 1074025681 [ 72.907162][ T2647] tun0: tun_chr_ioctl cmd 1074812118 [ 72.908550][ T2645] dyndbg: bad flag-op 7, at start of 7N[ [ 72.927265][ T2645] dyndbg: flags parse failed [ 73.042298][ T2667] set_capacity_and_notify: 5 callbacks suppressed [ 73.042320][ T2667] loop1: detected capacity change from 0 to 512 [ 73.093597][ T2667] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 73.102741][ T2667] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.134461][ T287] EXT4-fs (loop1): unmounting filesystem. [ 73.216823][ T2681] xt_hashlimit: size too large, truncated to 1048576 [ 73.237191][ T2678] printk: console [ttyS0] disabled