last executing test programs: 4.418899003s ago: executing program 0 (id=11): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010301010000020000000000000000000c0002"], 0x20}}, 0x0) 4.181098312s ago: executing program 0 (id=16): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x200000, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@min_batch_time={'min_batch_time', 0x3d, 0xc0}}, {@delalloc}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@nouid32}, {@resgid}, {@grpquota}, {@sysvgroups}]}, 0x1, 0x573, &(0x7f0000001140)="$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") mount(0x0, 0x0, 0x0, 0x4000, 0x0) chdir(&(0x7f0000000400)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3.754821831s ago: executing program 0 (id=19): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x4000, &(0x7f0000000240), 0x1e, 0x4d5, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x2) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r1, 0x0, 0x4000, 0x4000) 3.595077631s ago: executing program 4 (id=22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@x86={0x11, 0x4, 0x1, 0x0, 0xadf4, 0x81, 0x80, 0x3, 0x8, 0x8, 0x7, 0x4, 0x0, 0x383, 0x8, 0x5, 0x4, 0x8, 0x1, '\x00', 0x1, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.29418652s ago: executing program 0 (id=25): unshare(0x62040200) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ac05624200000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000100, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0xff8d, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205000000a9ce56"], 0x0}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bridge\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @ether_spec={@link_local, @remote}, {}, @esp_ip6_spec={@ipv4={'\x00', '\xff\xff', @local}, @private0}, {0x0, @remote}}}}) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x1) ptrace(0x8, 0xffffffffffffffff) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) 2.707344308s ago: executing program 4 (id=30): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001800010327bd7000000000000a600000ff030006"], 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) 2.114058947s ago: executing program 4 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETA(r2, 0x5406, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x4bb5, 0x180) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000071113a0000000000060000ec000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000100)={0x7, 0x3, 0x2, 0x5, "eb0d8b43c51c08f7b35ff746e5b86c1308d394f379ea8b009976d2ab528a3392"}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.577392734s ago: executing program 4 (id=34): mlockall(0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 1.463845864s ago: executing program 4 (id=35): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(r0, 0xffffffffffffffff, 0x0) 1.401326824s ago: executing program 1 (id=36): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000010140)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@bsdgroups}]}, 0x1, 0x562, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000300)) 1.348218644s ago: executing program 3 (id=38): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7ad, &(0x7f0000000f80)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) write$binfmt_aout(r0, &(0x7f0000001740)={{0x10b, 0xbe, 0x20, 0x201, 0xbc, 0x1, 0x38b, 0x9}, "", ['\x00']}, 0x120) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000440)="61aa6ddc23598b", 0x7, 0x9000) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4042, 0x1ff) sendfile(r3, r1, 0x0, 0xfffe83) 1.260079074s ago: executing program 1 (id=39): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xffffff6c, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.164325684s ago: executing program 1 (id=40): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/221, 0xdd}, 0x24778e3d7a4d5eaa) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000001c0)=0x4, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1.114155093s ago: executing program 3 (id=41): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x10d480) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000880)={r5, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d80020000000000000000800", [0xfffffffffffffffd, 0x2]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000040000000000000000000090"], &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000008000000000", @ANYRES32=0x1, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="b17db2eb4837971271aabd68612c71c6030000000000000002fffffffffffff800"/44], 0x50) 1.092109733s ago: executing program 1 (id=42): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001c80)={'#! ', '', [], 0xa, "747cc2f8"}, 0x8) capset(0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 929.046003ms ago: executing program 1 (id=43): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xc, &(0x7f0000000600)={0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d000000000000000000000000fcffffff010053a592215e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00\x00\x00\x00\x00v'], 0x70}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7151, 0x0) r7 = creat(0x0, 0x0) close(r7) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 810.282812ms ago: executing program 4 (id=44): io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x43f2, &(0x7f0000000380)={0x0, 0x0, 0x13090, 0x3, 0x2ef}, &(0x7f0000000100), &(0x7f0000000080)) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)={0x77359400}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r2, 0x0, 0x0, 0x40010002, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 675.807662ms ago: executing program 2 (id=45): mkdirat(0xffffffffffffff9c, 0x0, 0x190) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) timer_delete(0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200800, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x3, 0x10001}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) add_key(&(0x7f0000000140)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x0) 454.189601ms ago: executing program 2 (id=46): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 371.000291ms ago: executing program 2 (id=47): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001200)={{0x0, 0x989680}}, &(0x7f0000001240)) 321.155351ms ago: executing program 2 (id=48): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113f00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f00000000c0)={r3, r3, 0x206, 0x0, 0x0, 0x70, 0xfe, 0x1, 0x3, 0x7, 0x2, 0xfffffff4, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4044010}, 0x4040) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40) 251.399731ms ago: executing program 0 (id=49): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETSEL(r2, 0x541c, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r4]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1/../file0/file0\x00', 0x0, 0x0) stat(&(0x7f0000000000)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r3, &(0x7f0000008840)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000100)='./file0/file1/../file0/file0\x00', &(0x7f00000001c0)) close_range(r0, 0xffffffffffffffff, 0x204000000000000) 219.94708ms ago: executing program 3 (id=50): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)={0x6}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x6}) 192.64058ms ago: executing program 2 (id=51): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="98000000", @ANYRES16=r0, @ANYBLOB="010029bd7000000000001400000008000300", @ANYRES32=r2], 0x98}}, 0x0) 173.875701ms ago: executing program 2 (id=52): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x10) getgroups(0x1, &(0x7f0000000100)=[0xee00]) 131.51817ms ago: executing program 3 (id=53): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x1e) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 69.29209ms ago: executing program 3 (id=54): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1}, 0x0, &(0x7f0000000700)}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') read(r0, &(0x7f00000001c0)=""/210, 0xd2) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/258, 0x102}], 0x1, 0xa3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000d80), &(0x7f0000000dc0)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x4, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x7fff, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x4255212b2d8fb88c, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000cc0)={0x5, 0xf, 0xffffffff, 0x8}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f0000000e40)=[0xffffffffffffffff, r1, r2, r3], 0x0, 0x10, 0x5, @void, @value}, 0x94) 67.09115ms ago: executing program 0 (id=55): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 65.92342ms ago: executing program 1 (id=56): openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x10000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r4, 0x0, 0x0, 0x4}, 0x20) syz_emit_ethernet(0x9c, &(0x7f0000000200)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x66, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x8, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac1"}, {0x0, 0x1, "000000000400"}, {0x5, 0x0, "000000001b"}]}}}}}}, 0x0) r5 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = creat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000940)) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$binfmt_script(r6, &(0x7f0000001040)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [], 0xa, "2c84d1524643ec09de1df4b8bfb5547048fbda9d9185f5009b5a083161e4a742d210ad2421fb62e2f75efb8cffbd6780c0675f1bbf37ccc988832d81c515b79924612eddeff7ac017549c2a5999111fde2df8336dbd66803fba2b364"}, 0x15e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) 0s ago: executing program 3 (id=57): syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000d80)={0x2, 0x3fa2, @start={0x0, 0x1, "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", "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"}, [0x0, 0x2, 0x5, 0x84, 0x3, 0x44, 0xf7, 0x4, 0x66f, 0x2, 0x0, 0xed95, 0xe3, 0x9aa, 0x8, 0x8000000000000001, 0x4, 0x9, 0x80000000, 0x8, 0x8, 0x10, 0xffff, 0x66e, 0x1, 0x5, 0xbf9a, 0x2, 0x1ff, 0x4, 0x14fb, 0x0, 0xb7, 0x2, 0x67, 0x8, 0x6, 0x9, 0x2, 0x2, 0x1a00000, 0x101, 0xe, 0x4, 0x8, 0x8000, 0xfffffffffffffffd, 0xff, 0x9, 0x1, 0x5, 0x0, 0x800, 0xfffffffffffff800, 0x60000, 0xfffffffffffffe00, 0x7, 0xdc, 0x5b9d0dab, 0x2, 0x6, 0x40, 0x9, 0x4]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000002c0)={[{@mb_optimize_scan}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@auto_da_alloc}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000360002000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) creat(&(0x7f0000000140)='./file2\x00', 0x1ad) unlink(&(0x7f0000000180)='./file1\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.15' (ED25519) to the list of known hosts. [ 19.989296][ T28] audit: type=1400 audit(1737269410.698:66): avc: denied { mounton } for pid=280 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.990340][ T280] cgroup: Unknown subsys name 'net' [ 20.011764][ T28] audit: type=1400 audit(1737269410.698:67): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.038676][ T28] audit: type=1400 audit(1737269410.718:68): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.038825][ T280] cgroup: Unknown subsys name 'devices' [ 20.179167][ T280] cgroup: Unknown subsys name 'hugetlb' [ 20.184563][ T280] cgroup: Unknown subsys name 'rlimit' [ 20.286840][ T28] audit: type=1400 audit(1737269410.988:69): avc: denied { setattr } for pid=280 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.310097][ T28] audit: type=1400 audit(1737269410.988:70): avc: denied { mounton } for pid=280 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.334614][ T28] audit: type=1400 audit(1737269410.988:71): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.341981][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.366615][ T28] audit: type=1400 audit(1737269411.068:72): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.382117][ T280] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.392025][ T28] audit: type=1400 audit(1737269411.068:73): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.425863][ T28] audit: type=1400 audit(1737269411.088:74): avc: denied { read } for pid=280 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.451417][ T28] audit: type=1400 audit(1737269411.088:75): avc: denied { open } for pid=280 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.079763][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.086602][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.094031][ T291] device bridge_slave_0 entered promiscuous mode [ 22.102248][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.109201][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.116186][ T291] device bridge_slave_1 entered promiscuous mode [ 22.153753][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.161163][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.168394][ T292] device bridge_slave_0 entered promiscuous mode [ 22.185026][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.191918][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.199086][ T292] device bridge_slave_1 entered promiscuous mode [ 22.236601][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.243522][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.250741][ T295] device bridge_slave_0 entered promiscuous mode [ 22.267453][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.274388][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.281651][ T295] device bridge_slave_1 entered promiscuous mode [ 22.301225][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.308103][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.315318][ T293] device bridge_slave_0 entered promiscuous mode [ 22.322101][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.329100][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.336148][ T293] device bridge_slave_1 entered promiscuous mode [ 22.370607][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.377512][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.384764][ T294] device bridge_slave_0 entered promiscuous mode [ 22.408689][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.415536][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.422788][ T294] device bridge_slave_1 entered promiscuous mode [ 22.533622][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.540494][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.547615][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.554360][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.603319][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.610193][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.617326][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.624156][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.634533][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.641413][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.648525][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.655378][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.664476][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.671336][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.678434][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.685203][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.702207][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.709065][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.716148][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.722965][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.756683][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.764093][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.771421][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.778671][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.785602][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.792715][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.799666][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.806676][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.813721][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.820744][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.828248][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.835427][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.853001][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.860966][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.867808][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.875603][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.883892][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.890742][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.915313][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.922614][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.930097][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.938562][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.945390][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.952693][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.960844][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.967711][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.998601][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.008178][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.015888][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.024373][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.032580][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.039442][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.046669][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.054928][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.061863][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.069182][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.076940][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.084788][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.092933][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.099784][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.107500][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.115419][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.122166][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.129381][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.156020][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.163406][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.171680][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.178533][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.186264][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.194457][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.201317][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.208578][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.216276][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.224441][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.232641][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.240800][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.250761][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.258821][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.276599][ T295] device veth0_vlan entered promiscuous mode [ 23.284872][ T294] device veth0_vlan entered promiscuous mode [ 23.293317][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.301257][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.309353][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.317146][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.325166][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.333451][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.341581][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.349381][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.357174][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.365098][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.373123][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.380454][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.387836][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.394993][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.404819][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.413017][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.427144][ T295] device veth1_macvtap entered promiscuous mode [ 23.436477][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.444725][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.452710][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.460982][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.468861][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.480211][ T291] device veth0_vlan entered promiscuous mode [ 23.489161][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.496942][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.505027][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.512912][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.520968][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.528362][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.535582][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.543090][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.555666][ T292] device veth0_vlan entered promiscuous mode [ 23.562280][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.570449][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.579062][ T294] device veth1_macvtap entered promiscuous mode [ 23.590049][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.598470][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.608756][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.616849][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.627093][ T293] device veth0_vlan entered promiscuous mode [ 23.634678][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.642458][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.656344][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.663805][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.671370][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.679762][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.688902][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.696898][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.705323][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.713470][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.726716][ T292] device veth1_macvtap entered promiscuous mode [ 23.734539][ T291] device veth1_macvtap entered promiscuous mode [ 23.741155][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.748614][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.756574][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.764915][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.776038][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.784288][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.804821][ T293] device veth1_macvtap entered promiscuous mode [ 23.811746][ T294] request_module fs-gadgetfs succeeded, but still no fs? [ 23.827388][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.834987][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.844118][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.852526][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.860760][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.869140][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.877098][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.885381][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.893483][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.918742][ T319] loop0: detected capacity change from 0 to 128 [ 23.925019][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.925741][ T319] ======================================================= [ 23.925741][ T319] WARNING: The mand mount option has been deprecated and [ 23.925741][ T319] and is ignored by this kernel. Remove the mand [ 23.925741][ T319] option from the mount to silence this warning. [ 23.925741][ T319] ======================================================= [ 23.933388][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.975681][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.986501][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.033672][ T322] loop3: detected capacity change from 0 to 512 [ 24.049856][ T326] loop0: detected capacity change from 0 to 128 [ 24.062376][ T322] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 24.078311][ T322] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 24.135204][ T326] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 24.146985][ T322] EXT4-fs (loop3): 1 truncate cleaned up [ 24.154190][ T322] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 24.194601][ T326] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 24.224173][ T322] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.4: corrupted in-inode xattr [ 24.226126][ T337] loop2: detected capacity change from 0 to 8192 [ 24.370978][ T322] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1723: inode #15: comm syz.3.4: unable to update i_inline_off [ 24.480895][ T342] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 24.502719][ T322] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 24.519588][ T322] EXT4-fs error (device loop3): ext4_xattr_ibody_get:603: inode #15: comm syz.3.4: corrupted in-inode xattr [ 24.539221][ T326] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 24.580883][ T294] EXT4-fs (loop3): unmounting filesystem. [ 24.591013][ T295] EXT4-fs (loop0): unmounting filesystem. [ 25.089234][ T352] syz.3.8 (352) used greatest stack depth: 22408 bytes left [ 25.102844][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 25.102867][ T28] audit: type=1400 audit(1737269415.808:135): avc: denied { create } for pid=361 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 25.105629][ T364] loop1: detected capacity change from 0 to 16 [ 25.116658][ T28] audit: type=1400 audit(1737269415.818:136): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 25.139620][ T364] erofs: (device loop1): mounted with root inode @ nid 36. [ 25.161130][ T28] audit: type=1400 audit(1737269415.838:137): avc: denied { write } for pid=361 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 25.331635][ T368] loop0: detected capacity change from 0 to 1024 [ 25.333113][ T369] loop3: detected capacity change from 0 to 512 [ 25.429092][ T368] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 25.515400][ T28] audit: type=1400 audit(1737269416.218:138): avc: denied { create } for pid=365 comm="syz.0.16" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 25.523928][ T369] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.15: casefold flag without casefold feature [ 25.546702][ T28] audit: type=1400 audit(1737269416.218:139): avc: denied { read append open } for pid=365 comm="syz.0.16" path="/4/file1/file0/cpuacct.usage_percpu" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 25.613880][ T28] audit: type=1400 audit(1737269416.308:140): avc: denied { ioctl } for pid=375 comm="syz.2.17" path="socket:[14314]" dev="sockfs" ino=14314 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.639695][ T295] EXT4-fs (loop0): unmounting filesystem. [ 25.645573][ T369] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.15: couldn't read orphan inode 15 (err -117) [ 25.657117][ T28] audit: type=1400 audit(1737269416.318:141): avc: denied { read } for pid=377 comm="syz.2.18" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 25.657144][ T28] audit: type=1400 audit(1737269416.318:142): avc: denied { open } for pid=377 comm="syz.2.18" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 25.673143][ T28] audit: type=1400 audit(1737269416.378:143): avc: denied { name_bind } for pid=379 comm="syz.4.20" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 25.727655][ T369] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 25.730851][ T28] audit: type=1400 audit(1737269416.438:144): avc: denied { node_bind } for pid=379 comm="syz.4.20" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 25.767429][ T386] loop0: detected capacity change from 0 to 512 [ 25.784289][ T388] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.820788][ T369] rtc_cmos 00:00: Alarms can be up to one day in the future [ 25.829178][ T386] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 25.832910][ T367] rtc_cmos 00:00: Alarms can be up to one day in the future [ 25.838532][ T386] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.855805][ T294] EXT4-fs (loop3): unmounting filesystem. [ 25.947753][ T386] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 25.962705][ T386] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 25.975057][ T386] EXT4-fs (loop0): This should not happen!! Data will be lost [ 25.975057][ T386] [ 25.984622][ T386] EXT4-fs (loop0): Total free blocks count 0 [ 25.990964][ T386] EXT4-fs (loop0): Free/Dirty block details [ 25.996698][ T386] EXT4-fs (loop0): free_blocks=65280 [ 26.001914][ T386] EXT4-fs (loop0): dirty_blocks=33 [ 26.006761][ T386] EXT4-fs (loop0): Block reservation details [ 26.012683][ T6] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 26.012965][ T386] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 26.069972][ T295] EXT4-fs (loop0): unmounting filesystem. [ 26.198393][ T6] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 26.212090][ T6] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.221775][ T6] usb 2-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 26.230505][ T6] usb 2-1: Product: syz [ 26.263617][ T6] rtc_cmos 00:00: Alarms can be up to one day in the future [ 26.271281][ T6] rtc_cmos 00:00: Alarms can be up to one day in the future [ 26.278948][ T6] rtc_cmos 00:00: Alarms can be up to one day in the future [ 26.286437][ T6] rtc_cmos 00:00: Alarms can be up to one day in the future [ 26.293831][ T6] rtc rtc0: __rtc_set_alarm: err=-22 [ 26.325216][ T403] Zero length message leads to an empty skb [ 26.476548][ T6] usb 2-1: USB disconnect, device number 2 [ 26.487325][ T353] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.580863][ T409] loop2: detected capacity change from 0 to 2048 [ 26.587361][ T409] EXT4-fs: Ignoring removed oldalloc option [ 26.593567][ T409] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 26.608371][ T409] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 26.640921][ T293] EXT4-fs (loop2): unmounting filesystem. [ 26.661779][ T416] netlink: 20 bytes leftover after parsing attributes in process `syz.4.30'. [ 26.668400][ T353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.670588][ T416] IPv6: NLM_F_REPLACE set, but no existing node found! [ 26.681145][ T353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.698095][ T353] usb 1-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 26.707067][ T353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.718810][ T353] usb 1-1: config 0 descriptor?? [ 26.917599][ T39] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 27.075663][ T424] loop3: detected capacity change from 0 to 512 [ 27.088937][ T422] loop1: detected capacity change from 0 to 512 [ 27.116223][ T39] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 27.133480][ T353] hid-generic 0003:05AC:4262.0001: unbalanced delimiter at end of report description [ 27.149460][ T424] EXT4-fs (loop3): orphan cleanup on readonly fs [ 27.155816][ T39] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 27.167107][ T353] hid-generic: probe of 0003:05AC:4262.0001 failed with error -22 [ 27.179998][ T424] EXT4-fs error (device loop3): ext4_find_extent:936: inode #4: comm syz.3.32: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 27.205170][ T422] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.31: Failed to acquire dquot type 0 [ 27.222903][ T422] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.31: bg 0: block 64: padding at end of block bitmap is not set [ 27.237025][ T39] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 27.723817][ T424] EXT4-fs warning (device loop3): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 27.748336][ T39] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 27.762672][ T422] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 27.777682][ T422] EXT4-fs (loop1): 1 truncate cleaned up [ 27.796246][ T424] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 27.803060][ T39] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.822096][ T422] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 27.833177][ T424] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 27.844234][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 27.857006][ T422] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.876712][ T39] usb 3-1: SerialNumber: syz [ 27.884578][ T424] EXT4-fs error (device loop3): ext4_lookup:1855: inode #2: comm syz.3.32: 'file0' linked to parent dir [ 27.903150][ T414] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 27.917097][ T414] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 27.943972][ T39] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 27.962941][ T291] EXT4-fs (loop1): unmounting filesystem. [ 27.973506][ T294] EXT4-fs (loop3): unmounting filesystem. [ 28.018595][ T441] loop1: detected capacity change from 0 to 1024 [ 28.037974][ T443] loop3: detected capacity change from 0 to 2048 [ 28.038701][ T441] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.058953][ T441] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 28.066324][ T443] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 28.093397][ T443] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 28.107993][ T443] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 28.108953][ T291] EXT4-fs (loop1): unmounting filesystem. [ 28.120140][ T443] EXT4-fs (loop3): This should not happen!! Data will be lost [ 28.120140][ T443] [ 28.135126][ T443] EXT4-fs (loop3): Total free blocks count 0 [ 28.141431][ T443] EXT4-fs (loop3): Free/Dirty block details [ 28.149105][ T443] EXT4-fs (loop3): free_blocks=66060288 [ 28.154612][ T443] EXT4-fs (loop3): dirty_blocks=16 [ 28.156541][ T39] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 28.159876][ T443] EXT4-fs (loop3): Block reservation details [ 28.173160][ T443] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 28.177333][ T39] usb 3-1: USB disconnect, device number 2 [ 28.223585][ T443] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1 with error 28 [ 28.299164][ T455] loop1: detected capacity change from 0 to 2048 [ 28.318599][ T455] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 28.344371][ T455] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.42: bg 0: block 234: padding at end of block bitmap is not set [ 28.417383][ T455] EXT4-fs (loop1): Remounting filesystem read-only [ 28.434176][ T291] EXT4-fs (loop1): unmounting filesystem. [ 28.527440][ T465] support for cryptoloop has been removed. Use dm-crypt instead. [ 28.566415][ T462] blackhole_netdev_xmit(): Dropping skb. [ 28.572066][ T462] blackhole_netdev_xmit(): Dropping skb. [ 28.577649][ T462] blackhole_netdev_xmit(): Dropping skb. [ 28.583255][ T462] blackhole_netdev_xmit(): Dropping skb. [ 28.588848][ T462] blackhole_netdev_xmit(): Dropping skb. [ 28.594372][ T462] blackhole_netdev_xmit(): Dropping skb. [ 28.599863][ T462] blackhole_netdev_xmit(): Dropping skb. [ 28.605317][ T462] blackhole_netdev_xmit(): Dropping skb. [ 28.610770][ T462] blackhole_netdev_xmit(): Dropping skb. [ 28.616247][ T462] blackhole_netdev_xmit(): Dropping skb. [ 29.109551][ T6] usb 1-1: USB disconnect, device number 2 [ 29.175567][ T491] netlink: 124 bytes leftover after parsing attributes in process `syz.2.51'. [ 29.325576][ T508] loop3: detected capacity change from 0 to 512 [ 29.343308][ T508] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 29.358645][ T508] EXT4-fs (loop3): 1 truncate cleaned up [ 29.364281][ T508] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 29.379867][ T508] ================================================================== [ 29.387754][ T508] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x909/0x1fa0 [ 29.395300][ T508] Read of size 18446744073709551572 at addr ffff888116fe1850 by task syz.3.57/508 [ 29.404327][ T508] [ 29.406498][ T508] CPU: 1 PID: 508 Comm: syz.3.57 Not tainted 6.1.118-syzkaller-00021-gd12538e9da37 #0 [ 29.415868][ T508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 29.425776][ T508] Call Trace: [ 29.428905][ T508] [ 29.431671][ T508] dump_stack_lvl+0x151/0x1b7 [ 29.436183][ T508] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 29.441473][ T508] ? _printk+0xd1/0x111 [ 29.445471][ T508] ? __virt_addr_valid+0x242/0x2f0 [ 29.450434][ T508] print_report+0x158/0x4e0 [ 29.454839][ T508] ? __virt_addr_valid+0x242/0x2f0 [ 29.459795][ T508] ? kasan_complete_mode_report_info+0x57/0x1b0 [ 29.465858][ T508] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 29.471157][ T508] kasan_report+0x13c/0x170 [ 29.475493][ T508] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 29.480788][ T508] kasan_check_range+0x294/0x2a0 [ 29.485563][ T508] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 29.490858][ T508] memmove+0x2d/0x70 [ 29.494589][ T508] ext4_xattr_set_entry+0x909/0x1fa0 [ 29.499710][ T508] ? ext4_xattr_inode_lookup_create+0x1a60/0x1a60 [ 29.505957][ T508] ? memcpy+0x56/0x70 [ 29.509777][ T508] ext4_xattr_block_set+0x99c/0x37f0 [ 29.514897][ T508] ? __getblk_gfp+0x3d/0x7d0 [ 29.519322][ T508] ? ext4_xattr_block_find+0x320/0x320 [ 29.524616][ T508] ? xattr_find_entry+0x23c/0x300 [ 29.529480][ T508] ? ext4_xattr_block_find+0x2ac/0x320 [ 29.534772][ T508] ext4_expand_extra_isize_ea+0x10eb/0x1c40 [ 29.540505][ T508] ? ext4_xattr_set+0x3d0/0x3d0 [ 29.545200][ T508] ? rwsem_write_trylock+0x153/0x340 [ 29.550309][ T508] ? dquot_initialize_needed+0x13d/0x370 [ 29.555776][ T508] __ext4_expand_extra_isize+0x31a/0x420 [ 29.561244][ T508] __ext4_mark_inode_dirty+0x4bb/0x7d0 [ 29.566539][ T508] ? sb_end_intwrite+0x130/0x130 [ 29.571313][ T508] ? current_time+0x1ba/0x300 [ 29.575823][ T508] ? atime_needs_update+0x810/0x810 [ 29.580858][ T508] ? __kasan_check_write+0x14/0x20 [ 29.585803][ T508] ? drop_nlink+0xa9/0x110 [ 29.590059][ T508] __ext4_unlink+0x6ed/0xba0 [ 29.594485][ T508] ? __ext4_read_dirblock+0x8e0/0x8e0 [ 29.599692][ T508] ? rwsem_mark_wake+0x770/0x770 [ 29.604468][ T508] ext4_unlink+0x142/0x3f0 [ 29.608720][ T508] vfs_unlink+0x38c/0x630 [ 29.612884][ T508] do_unlinkat+0x483/0x920 [ 29.617137][ T508] ? fsnotify_link_count+0x100/0x100 [ 29.622258][ T508] ? strncpy_from_user+0x169/0x2b0 [ 29.627204][ T508] ? getname_flags+0x1fd/0x520 [ 29.631805][ T508] __x64_sys_unlink+0x49/0x50 [ 29.636354][ T508] x64_sys_call+0x289/0x9a0 [ 29.640657][ T508] do_syscall_64+0x3b/0xb0 [ 29.644908][ T508] ? clear_bhb_loop+0x55/0xb0 [ 29.649426][ T508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 29.655151][ T508] RIP: 0033:0x7fefda985d29 [ 29.659404][ T508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.678848][ T508] RSP: 002b:00007fefdb7f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 29.687089][ T508] RAX: ffffffffffffffda RBX: 00007fefdab75fa0 RCX: 00007fefda985d29 [ 29.694900][ T508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 29.702714][ T508] RBP: 00007fefdaa01b08 R08: 0000000000000000 R09: 0000000000000000 [ 29.710522][ T508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.718336][ T508] R13: 0000000000000000 R14: 00007fefdab75fa0 R15: 00007fff158464a8 [ 29.726149][ T508] [ 29.729009][ T508] [ 29.731178][ T508] Allocated by task 508: [ 29.735264][ T508] kasan_set_track+0x4b/0x70 [ 29.739684][ T508] kasan_save_alloc_info+0x1f/0x30 [ 29.744631][ T508] __kasan_kmalloc+0x9c/0xb0 [ 29.749061][ T508] __kmalloc_node_track_caller+0xb3/0x1e0 [ 29.754613][ T508] kmemdup+0x29/0x60 [ 29.758346][ T508] ext4_xattr_block_set+0x80f/0x37f0 [ 29.763465][ T508] ext4_expand_extra_isize_ea+0x10eb/0x1c40 [ 29.769194][ T508] __ext4_expand_extra_isize+0x31a/0x420 [ 29.774665][ T508] __ext4_mark_inode_dirty+0x4bb/0x7d0 [ 29.779955][ T508] __ext4_unlink+0x6ed/0xba0 [ 29.784385][ T508] ext4_unlink+0x142/0x3f0 [ 29.788635][ T508] vfs_unlink+0x38c/0x630 [ 29.793060][ T508] do_unlinkat+0x483/0x920 [ 29.797313][ T508] __x64_sys_unlink+0x49/0x50 [ 29.801829][ T508] x64_sys_call+0x289/0x9a0 [ 29.806167][ T508] do_syscall_64+0x3b/0xb0 [ 29.810421][ T508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 29.816148][ T508] [ 29.818319][ T508] The buggy address belongs to the object at ffff888116fe1800 [ 29.818319][ T508] which belongs to the cache kmalloc-1k of size 1024 [ 29.832390][ T508] The buggy address is located 80 bytes inside of [ 29.832390][ T508] 1024-byte region [ffff888116fe1800, ffff888116fe1c00) [ 29.845517][ T508] [ 29.847654][ T508] The buggy address belongs to the physical page: [ 29.853905][ T508] page:ffffea00045bf800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888116fe6000 pfn:0x116fe0 [ 29.865272][ T508] head:ffffea00045bf800 order:3 compound_mapcount:0 compound_pincount:0 [ 29.873433][ T508] flags: 0x4000000000010200(slab|head|zone=1) [ 29.879338][ T508] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043080 [ 29.888106][ T508] raw: ffff888116fe6000 000000008010000f 00000001ffffffff 0000000000000000 [ 29.896520][ T508] page dumped because: kasan: bad access detected [ 29.903299][ T508] page_owner tracks the page as allocated [ 29.908841][ T508] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 116, tgid 116 (udevadm), ts 4392278595, free_ts 0 [ 29.929848][ T508] post_alloc_hook+0x213/0x220 [ 29.934445][ T508] prep_new_page+0x1b/0x110 [ 29.938783][ T508] get_page_from_freelist+0x2f41/0x2fc0 [ 29.944166][ T508] __alloc_pages+0x234/0x610 [ 29.948590][ T508] alloc_slab_page+0x6c/0xf0 [ 29.953024][ T508] new_slab+0x90/0x3e0 [ 29.956921][ T508] ___slab_alloc+0x6f9/0xb80 [ 29.961349][ T508] __slab_alloc+0x5d/0xa0 [ 29.965516][ T508] __kmem_cache_alloc_node+0x207/0x2a0 [ 29.970808][ T508] __kmalloc_node_track_caller+0xa2/0x1e0 [ 29.976374][ T508] __alloc_skb+0x125/0x2d0 [ 29.980618][ T508] alloc_uevent_skb+0x80/0x230 [ 29.985218][ T508] kobject_uevent_net_broadcast+0x311/0x590 [ 29.990947][ T508] kobject_uevent_env+0x53c/0x720 [ 29.995807][ T508] kobject_synth_uevent+0x4eb/0xae0 [ 30.000841][ T508] uevent_store+0x25/0x60 [ 30.005007][ T508] page_owner free stack trace missing [ 30.010217][ T508] [ 30.012382][ T508] Memory state around the buggy address: [ 30.017855][ T508] ffff888116fe1700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 30.025756][ T508] ffff888116fe1780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 30.033657][ T508] >ffff888116fe1800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 30.041547][ T508] ^ [ 30.048058][ T508] ffff888116fe1880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 30.055956][ T508] ffff888116fe1900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 30.063851][ T508] ================================================================== [ 30.132097][ T513] loop1: detected capacity change from 0 to 128 [ 30.295730][ T513] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 30.305277][ T513] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.520280][ T508] Disabling lock debugging due to kernel taint [ 30.554091][ T294] EXT4-fs (loop3): unmounting filesystem. [ 30.731461][ T291] EXT4-fs (loop1): unmounting filesystem.