last executing test programs: 5.970680946s ago: executing program 0 (id=231): mmap(&(0x7f0000a2f000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0x0, 0x2, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x4]}, {0x0, @usage, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x101]}, {0x0, @usage, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x0, 0xfffffffffffffffe]}}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c00)={0x1, 0x0, [{0x0, 0xa1, &(0x7f00000007c0)=""/161}]}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x810, &(0x7f0000000dc0)={[{@nodelalloc}, {@jqfmt_vfsv0}], [{@fowner_eq}, {@fowner_eq}, {@hash}, {@appraise}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_eq}, {@smackfsroot}, {@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}]}, 0x1, 0x523, &(0x7f0000000240)="$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") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000780)=[@text32={0x20, &(0x7f0000000c40)="66b817000f00d80f20d835200000000f22d8260fc71d00000000b8a5caa1825766bafc0cec66bad104b808370000ef66baf80cb88673eb8aef66bafc0c66b8003866ef0f20e035080000000f22e0b805000000b9008000000f01d9b8010000000f01c1c4c1f1d4447f3c", 0x6a}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/83, &(0x7f00000001c0)=""/72}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(r5, &(0x7f0000000d00)='io.stat\x00', 0x275a, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1fffff, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) 5.36188095s ago: executing program 0 (id=237): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000001c0)="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", 0x118) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400), 0x8) inotify_init1(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) unshare(0x20000600) r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x40084503, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./control\x00', 0x5000410) 5.023977353s ago: executing program 4 (id=243): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000680)=[{&(0x7f00000002c0)="2614", 0x2}], 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000020000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) mount$incfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x3, "cdff1cb0"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x200) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00000000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='sys_exit\x00', r7}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000), 0x0, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r8) read$hidraw(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xcc}}, 0x0) 4.408274948s ago: executing program 0 (id=248): mkdir(&(0x7f0000000300)='./file0\x00', 0xe0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000540)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000600)={[{@noinit_itable}, {@commit={'commit', 0x3d, 0x4}}, {@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x77}}]}, 0x7, 0x4c6, &(0x7f0000000100)="$eJzs3EFsFFUfAPD/bFtaoHzsx8eHgqiLaGw0tlBQOJgYjCYeNDHiQY9NWwhSqKE1EUJkSQweDYl349GrB6/qzXgy8YpHE0NCDBfA05jZnW23292l3W670v5+ybLvzbzZN2/fvDdv3mMbwJZVyv5JIoYj4lZE7I6IQmOCUvXt/t2rkw/uXp2Mcpqe/ivJDot7WTyX5O8788hIIaLwebK4o87c5SvnJ2Zmpi/l8bH5Cx+PzV2+8tK5CxNnp89OXxw/efL4saMnXhl/efWFapJfVq57Bz6bPbj/rQ9vvjPZX9s+lL/Xl6NbSlFqdioVz3U7sx7bVRdO+tulfG39T4YVy67/rLoGKu1/d/RF28oDNpE0TdPB1rvLaaPry7YAj6wken0GQG/UbvTZ82/t1WwgsG19hh89d+dU9QEoK/f9/BXxdGVjbR5koOH5tptKEfFB+e+vs1es0zwEAEC9H0/VRoIN479ixL66dP/J11CKEfHfiNgTEf+LiL0R8f+opn0sIh5v+Py+iEjb5F9qiC8f/xRur62E7WXjv1fzta3F8V/Ur4IV+/LYrojagHn6SP6djMTA4JlzM9NH2+Tx0xu/fdlqX/34L3tl+dfGgvl53O5vmKCbmpif6LjADe5cjzjQ31j+pD8iWVgJSCJif0QcWMXnFuvC51749uBCZGBpuoeXvyJtuo7WhaWK9JuI56v1X44l9b+YY9J+fXJsKGamj4xlV8GRpnn88uuNd1vl/9Dyf/9H4yFvnvjhdN6y1i6r/x1113/U1m8Xy19MIpKF9dq51edx4/cvWj7TdHr9b0ver4Rrz6WfTszPXzoasS15e/n28cVja/HsPcrV8o8cbt7+9+THZN/EExGRXcRPRsRTUX1CLEV67VBEPBMRh9uU/+fXn/2o8/Kvr6z8U037vyX1v7he3yqQlKupm+zqO3/o1oMWncfK6v94JTSSb2ne/yVLuog2Z7oksNbvDwAAAB4FhYgYrptLGo5CYXS0Oge0N3YUZmbn5l88M/vJxanqbwSKMVCozXRV54MHktr8Z7EuPt4QP5bPG3/Vt70SH52cnZnqacmBnZU2nxRGF/qCavvP/NmdKWbg38xPfmDrelj733dzg04E2HDu/7B11bX/coskZf9TBjanldz/zQXC5tSs/V/r4Bjg0ZJqy7Clrab96ytgc+mP9xbChZ6eCbDR3NNhS1rRj+Q7DqSDzXcNxfLEMdT+A/uis9PY3iSvngSykVVPct/eyVG1v6bQMk0UVveBg9GdOj2z9q/l7L6uX/xpvj7W7Rr8bkPaabNA+35jfHj9+iQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBu+icAAP//KPXcbw==") open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000000)='./file0\x00', 0x2000082, &(0x7f0000000380)={[{@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@uni_xlate}, {@shortname_mixed}, {@shortname_lower}, {@shortname_mixed}]}, 0x25, 0x34f, &(0x7f0000001f80)="$eJzs3T9sG2UUAPDnXhKnESUekCqYDBsSqpogBpgSVUWqyABFFv8WLJryJzaVYmEpDHG8gComEAsSTGwdYOyMGBBiY2ClSKiAWOhWqRGHbJ/tc+xQZ3Boxe83RE/v+9597y6n3CVKvrzeiq1L83H51q2bsbhYiLm1c2txuxClOBFJ9OzFRB8tTM4DAPe422kaf6U9d5/9yVI/8uwHgPtX9/n/5qlhoniE4qsPzKIlAGDGpvz+//mJ2SszawsAmKGx5/9jI8MHfsw/N/idAADg/vXiK68+t74RcbFcXoyof9isNCvxzHB8/XK8HbXYjLOxHPsRvReF3ttC5+OzFzbOny13/FaKSqeiWYmot5qV3pvCetKtL8ZKLEcpq08H9UmnfqVbX46IvVZ3/agXmpX5WMrW/3kpNmM1luOhsfqICxvnV8vZASr1fn0roh2L/ZPo9H8mluPHN+JK1OJSdGqH/e+ulMvn0o2R+ua1YnceAAAAAAAAAAAAAAAAAAAAAADMwpnyQGmw/01abzU/uHhwQmlkf5xKbzjbH6jd2x8oLfZ357maHNwfaHR/nmZlLk78p2cOAAAAAAAAAAAAAAAAAAAA947GzkJUa7XN7cbO+1v5oJXLvPv9V9+ejP7QXFb6TjKsiiw5cpz+xNyRkxgskQ7K02RkThYkEf3Je9Vr1wcd5+cUB2cxVt4JimNDhaynaq126tFfP59U9Xcn2Otmkhi7LKNBIVs/N1R/sJNYjIj9w6oOD1bvMudGmqaHle9+Nl4VhYi5OHIbUwTf3Xzr4Scbp5/qZr7JNn14/Inll258+uUfW9VatHtXplZb2G7sp1McudPr+FCSu38K2XUuTLgTJgftYaa93dipJj/9+fIjH/9wYHIy+f5J85n3Dl/r64OZhV5QiCj1L8K/tTo/4eafHLx2Z3D3Hv0Td/qLter13V9+n7Yq90XCRh0AAAAAAAAAAAAAAAAAAHAscn8rfgRPvzC7jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+A3//38uaI9lpgnutGJ8qLi53Th08ZPHeqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyP/RMAAP//rShzCQ==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='signal_generate\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf8, 0xa1, 0xa4, 0x10, 0xb49, 0x64f, 0xd01e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xd7, 0x62}}]}}]}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000040)=0xe8) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000005c0)={[{@nfs_export_off}, {@upperdir={'upperdir', 0x3d, './file2'}}], [{@uid_gt={'uid>', r5}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@obj_user={'obj_user', 0x3d, 'iocharset'}}, {@dont_appraise}, {@smackfsroot}], 0x2c}) 4.057142361s ago: executing program 1 (id=252): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x1200400, &(0x7f0000000380), 0xfa, 0x54d, &(0x7f0000000980)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1e0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 3.285323161s ago: executing program 1 (id=254): bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x5, 0x664c73c3f0a84749, 0x0, {0x0, 0x2710}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d36e636e9160ea7e"}}, 0x48}}, 0x0) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) 3.076468029s ago: executing program 3 (id=256): prlimit64(0x0, 0xe, 0x0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0xfb36b7c5edb7f4c7, 0x0, 0x1, 0x0, &(0x7f0000000000)) (async) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0xfb36b7c5edb7f4c7, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='nr_Z\n\x00\x00\x00\x00\x00\x00,\x00']) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x62042, 0x0) (async) r1 = open(&(0x7f0000000240)='./bus\x00', 0x62042, 0x0) ftruncate(r1, 0x2007fff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000480), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) io_uring_setup(0x63d9, &(0x7f00000004c0)={0x0, 0x4, 0x0, 0x0, 0x80, 0x0, r0}) (async) r3 = io_uring_setup(0x63d9, &(0x7f00000004c0)={0x0, 0x4, 0x0, 0x0, 0x80, 0x0, r0}) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) fdatasync(0xffffffffffffffff) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r7) (async) dup(r7) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0x8, &(0x7f0000003480)={0x0, 0x0, 0x4, 0x0, 0x0}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0x8, &(0x7f0000003480)={0x0, 0x0, 0x4, 0x0, 0x0}, 0x20) syz_open_dev$MSR(&(0x7f0000000040), 0x5dfad38, 0x0) (async) syz_open_dev$MSR(&(0x7f0000000040), 0x5dfad38, 0x0) 2.154358776s ago: executing program 1 (id=257): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid}, {@version_u}, {@dfltuid}, {@aname={'aname', 0x3d, '%+)%{&!'}}, {@nodevmap}, {@cache_fscache}, {@afid={'afid', 0x3d, 0x2}}], [], 0x6b}}) sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="86b7", 0x2}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)}}], 0x2, 0x4003202) 2.153906625s ago: executing program 3 (id=258): socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./bus/file0\x00', 0x144) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4080, &(0x7f0000000240)={[{@quota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@nombcache}, {}, {@test_dummy_encryption}]}, 0x1, 0xb7e, &(0x7f00000006c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mkdir(&(0x7f00000001c0)='./bus/file0\x00', 0x24) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x200845, &(0x7f0000000bc0)=ANY=[@ANYRES8=r0], 0x1, 0x249, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x4b63, 0x3) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="00e8ff3f00"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) 2.153269316s ago: executing program 1 (id=259): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='ext4_error\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000a00)={[{@inode_readahead_blks}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x400}}, {}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") chdir(&(0x7f0000000000)='./file0\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20100000}, 0x9c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x0) fallocate(r4, 0x0, 0x0, 0x8004) open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) fallocate(r4, 0x48, 0x0, 0x7000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) connect$inet6(r5, &(0x7f0000000980)={0xa, 0x0, 0x6b0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffc}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7fff}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f00000000c0)=""/247, 0xf7) 1.908295835s ago: executing program 4 (id=260): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000340), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) close(r0) sendto$inet(r0, &(0x7f00000001c0)="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", 0x163, 0x8000, 0x0, 0x47) 1.908141305s ago: executing program 4 (id=261): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc0045878, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000071000040"]) 1.854466537s ago: executing program 4 (id=262): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000300)=&(0x7f00000002c0)) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) 1.340029768s ago: executing program 2 (id=265): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {0x0, 0x0, 0x800}]}, @func_proto, @var={0xc, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/154, 0x5d, 0x9a, 0x1, 0x4}, 0x20) ftruncate(0xffffffffffffffff, 0x0) r1 = getpid() sched_setaffinity(r1, 0xffffffffffffffad, &(0x7f0000000080)=0x2000000000401) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r2, &(0x7f000000b800)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000000780)={0x2020}, 0x2020) dup2(r2, r3) r4 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000040)='bpf_lsm_inode_listsecurity\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x3, 0x4, &(0x7f0000000300)=@framed={{0x66, 0xa, 0x0, 0x2, 0x0, 0x61, 0x10, 0x7e, 0x1}, [@call]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x90) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x4e, 0x12, 0x9c023d2d7e91de25, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "0645534e"}]}, 0x54}}, 0x0) 1.29007156s ago: executing program 3 (id=266): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000001d80)=0xe8) statx(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x630, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r1, r2, r3) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001c80)={0x3, 0x0, [{0x0, 0xf9, &(0x7f0000000640)=""/249}, {0x86956090991702cc, 0x91, &(0x7f0000001e80)=""/145}, {0x10000, 0x1000, &(0x7f0000000c80)=""/4096}]}) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000140)={0x1, r6}) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x20000) sendmsg$netlink(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000940)=ANY=[@ANYBLOB="9c0000001200090000000000004c2f00000000000016f2c41efc4ebaf4dc62f5b698f56bfdb7b1f20b32c5c7a34b7eeb68fd3313927e056f39c0cbc7540a3c9e4f1b425f128d7e1d2f6e6dc8a277604a68132bb9828f9ff58fb1174c8b936c329335057ca096357122444ab7d59f9d48ed0eaccff228483fb01e9e3c9888208b6437a830215c918b3723a7701507a0c9b3bc0536242248f4a96fadbed53578efbb11daa9a0f3b71b2dd46db1df58ceca1a4c9dd4f3eb2b29a36c53d334c4608f9d19945f36be213893c1560c75259617de8c0b111ac1ce382126b8e46f8cb83da2e6aaf06a1dc50babf08569a33f159b369194c82f13118b4b024d7e169d69891845f0da98965f055657d90cbc372654bb53e6cdb1e9c108e8f53332f08b2f374bc8d52a1a56b53b7c8fa1935b27"], 0x9c}], 0x1}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="020e000014000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000010003200020100000011000000000000e0000002000000000000000000000000e000000200000000000000000000000005000500000000000a"], 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0xfffffffffffffe92}, 0x90) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r7, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300), ""/16, 0x0, 0x0, 0x0, 0x0, 0xb453990a4568a6db, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0), 0x0, 0x8, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000500), &(0x7f0000000900), 0x8, 0x9e, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0xa, &(0x7f0000000840)=ANY=[@ANYBLOB="95000000000000000d90c0ffffffffff85000000b800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020025937ea0d7c8d4bdfc0d90000000000085000000860000008520000004000000180000006a0000000000000003000000"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0xb3, &(0x7f00000001c0)=""/179, 0x41000, 0x10, '\x00', 0x0, 0x30, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x3, 0x7, 0x2, 0x8}, 0x10, r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xdf9f}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="381a0000", @ANYRES32, @ANYBLOB="000000000000000085100000faffffff2177200000000000"], &(0x7f0000000100)='GPL\x00', 0x3, 0x9f, &(0x7f0000000140)=""/159, 0x40f00, 0x8, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x1, 0x3, 0x2}, 0x10, r10, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000400)=[{0x2, 0x4, 0xb, 0x1}], 0x10, 0x8}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000400), &(0x7f00000005c0)='%+9llu \x00'}, 0x20) 1.28901268s ago: executing program 1 (id=267): bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x5, 0x664c73c3f0a84749, 0x0, {0x0, 0x2710}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d36e636e9160ea7e"}}, 0x48}}, 0x0) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) 1.111880207s ago: executing program 2 (id=268): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xb9, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x2, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000540)=@newqdisc={0x180, 0x24, 0x300, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe6}, {0xfff1, 0x9}, {0x1, 0xfff2}}, [@q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3f}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7fff}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x26}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1ff}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfffa}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8001}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2de6}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xa}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}]}}]}, 0x180}}, 0x0) (async) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000540)=@newqdisc={0x180, 0x24, 0x300, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe6}, {0xfff1, 0x9}, {0x1, 0xfff2}}, [@q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3f}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7fff}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x26}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1ff}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfffa}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8001}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2de6}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xa}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}]}}]}, 0x180}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x57, 0x7, 0x48, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x7, 0xc07a, 0x101}}) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000081}, 0x200040d1) (async) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000081}, 0x200040d1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES32], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1}, 0x48) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000100)) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) 1.003466731s ago: executing program 2 (id=269): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) close(0x3) openat$vcs(0xffffffffffffff9c, &(0x7f000001bc40), 0x121602, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={0x0, 0x0, 0x2000000004000000}) write$UHID_DESTROY(r3, &(0x7f0000000080), 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xff22, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000000), &(0x7f0000000180)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000200), &(0x7f00000002c0)=@udp6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r4, &(0x7f0000000040), &(0x7f0000002100)=""/4096}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r4, &(0x7f0000000100), 0x0}, 0x20) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=fscache,subj_type=*.%%,subj_role=],rootcontext=sysadm_u,fowner=', @ANYRESDEC=0x0, @ANYBLOB=',smackfshat=dont_measure,dont_measure,subj_role=!,euid=', @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB="2c7365e76c6162656c2c6f62d6dc446a5f757365723d892b3ad53a272e40252127be2c73a03d636b66737472616e736d7574653d5d2c6673757569643d61633236393362612d383331652d376134642d666266652d38653063363432322c736d61636b66737472616e736d7574653d2c646f6e745f686173682c66736d616769633d3078303030303030303030303030303030392c646f6e745f61707072616973652c7375626a5f747970653d402f2e7d282f2c736d61636b66737472616e736d757465"]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_read_part_table(0x103c, &(0x7f0000001040)="$eJzszjEOQUEYhdE7iEwlswRqq/i1apVNWILEWjQ2p1BLRK+W95Jz6pubL8zS8X15JdftLrdaJD1pPUmN3A/7bEZy/s5qmWet00ay+vFyevy/HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACm5xMAAP//1hgIrg==") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620a00ff0000009948811705000000007181320086000900"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 803.707739ms ago: executing program 3 (id=270): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x20e, &(0x7f0000000a00)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_script(r0, &(0x7f0000000100), 0x61) recvmmsg(r0, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004780)=""/224, 0x61}], 0x1}}], 0x1, 0x102, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x319000, 0x0) 794.290109ms ago: executing program 0 (id=271): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r4 = fcntl$dupfd(r2, 0x0, r3) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000040)={0x30}, 0x30) sendfile(r0, r1, 0x0, 0xf800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0x2}]}, {0x0, [0x0, 0x5f, 0x61, 0x1e]}}, &(0x7f0000000480)=""/253, 0x2a, 0xfd, 0x1}, 0x20) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x2000) 746.553571ms ago: executing program 4 (id=272): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000340), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) close(r0) sendto$inet(r0, &(0x7f00000001c0)="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", 0x163, 0x8000, 0x0, 0x47) 676.226914ms ago: executing program 4 (id=273): bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x5, 0x664c73c3f0a84749, 0x0, {0x0, 0x2710}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d36e636e9160ea7e"}}, 0x48}}, 0x0) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) 630.966085ms ago: executing program 3 (id=274): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) close(r1) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000001c0), 0x81, 0x79e, &(0x7f00000018c0)="$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") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1081000, 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600016, 0x15) r9 = open(&(0x7f0000000080)='./bus\x00', 0x181102, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x11) ioctl$BLKDISCARD(r9, 0x1277, &(0x7f00000000c0)) sendmmsg$unix(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000000100000002000000f418"], 0x38}}], 0x2, 0x0) 583.028117ms ago: executing program 2 (id=275): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000040)=[0x0, 0xee00]) keyctl$chown(0x18, r0, 0xffffffffffffffff, r1) 500.418611ms ago: executing program 2 (id=276): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x30, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="400100000000000029"], 0x140}}], 0x2, 0x0) 310.814258ms ago: executing program 1 (id=277): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="546fa89d6cacde58072f880933a3a714e59d58950bdb7c94e396400f0ba262c92576d94de8c65b931bf03c4c033f738752d84b12ac77f258ab47716a5ac0b2609dc7d01eb7099ac5da14cd322b67a189060ebe1be402", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) fchdir(0xffffffffffffffff) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="19"], 0x1, 0x177, &(0x7f0000000240)="$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") sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020400000200135756acf3fc1b00c4a23994bd2d3aafd9629123af738439ffef9fca44fc3f44322735930919ef7581b82b64056cbbf9f00eec7d3d0d29127d7815ea45d46dd406906c4a7b9269ded5fead688d5c"], 0x10}}, 0x0) syz_io_uring_setup(0x7c4d, &(0x7f0000000200)={0x0, 0x2888, 0x100, 0x3, 0x1ec}, &(0x7f0000000000), &(0x7f0000000280)) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000180)={0x0}, 0x20) memfd_create(0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) iopl(0x7) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f00000029c0)={0x8, {"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", 0x1000}}, 0xf13) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syz_tun\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r5, &(0x7f0000000440)=ANY=[], 0xfdef) 268.42176ms ago: executing program 2 (id=278): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {0x0, 0x0, 0x800}]}, @func_proto, @var={0xc, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/154, 0x5d, 0x9a, 0x1, 0x4}, 0x20) ftruncate(0xffffffffffffffff, 0x0) r1 = getpid() sched_setaffinity(r1, 0xffffffffffffffad, &(0x7f0000000080)=0x2000000000401) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r2, &(0x7f000000b800)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000000780)={0x2020}, 0x2020) dup2(r2, r3) r4 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000040)='bpf_lsm_inode_listsecurity\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x3, 0x4, &(0x7f0000000300)=@framed={{0x66, 0xa, 0x0, 0x2, 0x0, 0x61, 0x10, 0x7e, 0x1}, [@call]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x90) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x4e, 0x12, 0x9c023d2d7e91de25, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "0645534e"}]}, 0x54}}, 0x0) 112.359516ms ago: executing program 0 (id=279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x7, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x10, 0x0, @val=@tcx={@prog_fd}}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001040)={{r0, 0xffffffffffffffff}, &(0x7f0000000fc0), &(0x7f0000000200)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0xd) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendfile(r5, r4, 0x0, 0x7ffff000) 108.746356ms ago: executing program 3 (id=280): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@dioread_nolock}, {@nojournal_checksum}, {@orlov}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0xe1}}, {@dioread_nolock}, {@grpquota}]}, 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0xce27c, 0x150) fallocate(r0, 0x0, 0x0, 0x1000f4) openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) tkill(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$cgroup_pid(r7, &(0x7f0000000040), 0x12) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x43400) 0s ago: executing program 0 (id=281): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000001d80)=0xe8) statx(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x630, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r1, r2, r3) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001c80)={0x3, 0x0, [{0x0, 0xf9, &(0x7f0000000640)=""/249}, {0x86956090991702cc, 0x91, &(0x7f0000001e80)=""/145}, {0x10000, 0x1000, &(0x7f0000000c80)=""/4096}]}) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000140)={0x1, r6}) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x20000) sendmsg$netlink(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x9c}], 0x1}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) fcntl$setstatus(r8, 0x4, 0xc00) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0xfffffffffffffe92}, 0x90) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r7, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300), ""/16, 0x0, 0x0, 0x0, 0x0, 0xb453990a4568a6db, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0), 0x0, 0x8, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000500), &(0x7f0000000900), 0x8, 0x9e, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0xa, &(0x7f0000000840)=ANY=[@ANYBLOB="95000000000000000d90c0ffffffffff85000000b800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020025937ea0d7c8d4bdfc0d90000000000085000000860000008520000004000000180000006a0000000000000003000000"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0xb3, &(0x7f00000001c0)=""/179, 0x41000, 0x10, '\x00', 0x0, 0x30, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x3, 0x7, 0x2, 0x8}, 0x10, r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xdf9f}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="381a0000", @ANYRES32, @ANYBLOB="000000000000000085100000faffffff2177200000000000"], &(0x7f0000000100)='GPL\x00', 0x3, 0x9f, &(0x7f0000000140)=""/159, 0x40f00, 0x8, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x1, 0x3, 0x2}, 0x10, r10, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000400)=[{0x2, 0x4, 0xb, 0x1}], 0x10, 0x8}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000400), &(0x7f00000005c0)='%+9llu \x00'}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. [ 18.316903][ T23] audit: type=1400 audit(1719742339.009:66): avc: denied { mounton } for pid=339 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.318376][ T339] cgroup1: Unknown subsys name 'net' [ 18.320550][ T23] audit: type=1400 audit(1719742339.019:67): avc: denied { mount } for pid=339 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.321813][ T339] cgroup1: Unknown subsys name 'net_prio' [ 18.325682][ T339] cgroup1: Unknown subsys name 'devices' [ 18.327158][ T23] audit: type=1400 audit(1719742339.019:68): avc: denied { read } for pid=144 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 18.330300][ T23] audit: type=1400 audit(1719742339.029:69): avc: denied { unmount } for pid=339 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.479916][ T339] cgroup1: Unknown subsys name 'hugetlb' [ 18.485526][ T339] cgroup1: Unknown subsys name 'rlimit' [ 18.618688][ T23] audit: type=1400 audit(1719742339.319:70): avc: denied { setattr } for pid=339 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.642412][ T23] audit: type=1400 audit(1719742339.319:71): avc: denied { mounton } for pid=339 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 18.647462][ T340] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 18.667184][ T23] audit: type=1400 audit(1719742339.319:72): avc: denied { mount } for pid=339 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 18.698331][ T23] audit: type=1400 audit(1719742339.369:73): avc: denied { relabelto } for pid=340 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.723564][ T23] audit: type=1400 audit(1719742339.369:74): avc: denied { write } for pid=340 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.723760][ T339] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 18.748872][ T23] audit: type=1400 audit(1719742339.389:75): avc: denied { read } for pid=339 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.106844][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.113788][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.121360][ T347] device bridge_slave_0 entered promiscuous mode [ 19.129848][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.136675][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.144146][ T347] device bridge_slave_1 entered promiscuous mode [ 19.249872][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.256726][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.264296][ T350] device bridge_slave_0 entered promiscuous mode [ 19.278017][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.284859][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.292416][ T350] device bridge_slave_1 entered promiscuous mode [ 19.318165][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.325155][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.332607][ T348] device bridge_slave_0 entered promiscuous mode [ 19.352752][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.359604][ T348] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.367544][ T348] device bridge_slave_1 entered promiscuous mode [ 19.373959][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.380900][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.388087][ T352] device bridge_slave_0 entered promiscuous mode [ 19.394868][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.401899][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.409312][ T352] device bridge_slave_1 entered promiscuous mode [ 19.454594][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.461507][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.468734][ T351] device bridge_slave_0 entered promiscuous mode [ 19.484852][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.491724][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.499232][ T351] device bridge_slave_1 entered promiscuous mode [ 19.589765][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.596596][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.603758][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.610495][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.688080][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.694915][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.702063][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.708825][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.719671][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.726510][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.733662][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.741063][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.750399][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.757257][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.764383][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.771153][ T348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.805421][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.812275][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.819407][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.828697][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.840006][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.846998][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.854058][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.861572][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.868688][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.875767][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.882778][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.889796][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.896717][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.903666][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.911112][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.918411][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.951773][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.959553][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.968151][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.974971][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.982212][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.990300][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.997107][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.038514][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.046707][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.056470][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.063322][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.070822][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.078838][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.085649][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.092955][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.100714][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.108544][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.130865][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.139449][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.148297][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.155525][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.162885][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 20.171452][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.179655][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.186470][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.193818][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.202381][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.210495][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.217330][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.224542][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.232115][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.245836][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 20.254272][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.262406][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.269248][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.277290][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 20.285390][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.293516][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.300364][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.319322][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.327359][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.335202][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.343682][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.351811][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.359965][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.368037][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.374848][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.401249][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.410073][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.418265][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.425884][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.434483][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.442557][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.450612][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.458582][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.466265][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.474531][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.482641][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.490741][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.498853][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.506926][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.515103][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.521954][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.537222][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.545053][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.553123][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.561210][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.587803][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.595947][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.607613][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.615731][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.635440][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.643422][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.651586][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.659844][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.667736][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.675848][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.684079][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.692263][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.700453][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.708558][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.730798][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.738844][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.746903][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.763112][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.771483][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.779919][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.788090][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.828532][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.836719][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.867671][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.875674][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.893100][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.902606][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.917769][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.926011][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.934783][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.942644][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.968606][ T374] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 20.976758][ T374] EXT4-fs (loop1): orphan cleanup on readonly fs [ 20.985043][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.993105][ T374] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 20.993384][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.008011][ T374] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 21.029913][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.038973][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.047867][ T374] EXT4-fs error (device loop1): ext4_orphan_get:1236: inode #16: comm syz.1.2: casefold flag without casefold feature [ 21.060697][ T374] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.2: bg 0: block 40: padding at end of block bitmap is not set [ 21.060976][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.074626][ T374] EXT4-fs error (device loop1) in ext4_free_blocks:5019: Corrupt filesystem [ 21.083196][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.098647][ T388] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 21.103436][ T374] EXT4-fs (loop1): 1 truncate cleaned up [ 21.106665][ T388] EXT4-fs (loop3): Unrecognized mount option "fsuuid=7d07e`3c-0ae3-Y82e-9da3-aSeb086" or missing value [ 21.124350][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.132376][ T374] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc,,errors=continue [ 21.136054][ T381] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 21.143357][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.156164][ T381] ext4 filesystem being mounted at /root/syzkaller.L1mnoX/1/bus supports timestamps until 2038 (0x7fffffff) [ 21.164662][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.183513][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.212580][ T374] EXT4-fs error (device loop1): ext4_xattr_block_get:544: inode #15: comm syz.1.2: corrupted xattr block 19 [ 21.256517][ T399] request_module fs-autofs succeeded, but still no fs? [ 21.259122][ T374] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 21.272552][ T381] EXT4-fs (loop2): Cannot change quota options when quota turned on [ 21.282543][ T381] ext4 filesystem being remounted at /root/syzkaller.L1mnoX/1/bus supports timestamps until 2038 (0x7fffffff) [ 21.292141][ T399] ====================================================== [ 21.292141][ T399] WARNING: the mand mount option is being deprecated and [ 21.292141][ T399] will be removed in v5.15! [ 21.292141][ T399] ====================================================== [ 21.295198][ T401] EXT4-fs error (device loop1): ext4_xattr_block_get:544: inode #15: comm syz.1.2: corrupted xattr block 19 [ 21.334934][ T374] EXT4-fs error (device loop1): ext4_xattr_block_get:544: inode #15: comm syz.1.2: corrupted xattr block 19 [ 21.335677][ T396] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 21.349634][ T374] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 21.365328][ T381] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 21.371350][ T401] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 21.375674][ T381] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 21.382867][ T401] EXT4-fs error (device loop1): ext4_lookup:1814: inode #16: comm syz.1.2: casefold flag without casefold feature [ 21.391611][ T381] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #18: comm syz.2.6: mark inode dirty (error -27) [ 21.415433][ T381] EXT4-fs warning (device loop2): ext4_evict_inode:321: xattr delete (err -27) [ 21.424594][ T374] syz.1.2 (374) used greatest stack depth: 22904 bytes left [ 21.480770][ T410] EXT4-fs error (device loop2): ext4_find_dest_de:2063: inode #12: block 32: comm syz.2.6: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 21.873286][ T370] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 21.887547][ T74] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 22.137194][ T74] usb 5-1: Using ep0 maxpacket: 16 [ 22.147174][ T370] usb 3-1: device descriptor read/64, error 18 [ 22.267376][ T74] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 22.278588][ T74] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 22.287497][ T74] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 22.297585][ T74] usb 5-1: config 0 descriptor?? [ 22.527324][ T124] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 22.684997][ T370] usb 3-1: device descriptor read/64, error 18 [ 22.827267][ T124] usb 4-1: Using ep0 maxpacket: 16 [ 22.849419][ T399] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 22.868219][ T74] hid (null): invalid report_count -170 [ 22.875855][ T74] hid-generic 0003:0158:0100.0001: unknown main item tag 0x1 [ 22.883342][ T74] hid-generic 0003:0158:0100.0001: unexpected long global item [ 22.890999][ T74] hid-generic: probe of 0003:0158:0100.0001 failed with error -22 [ 22.947266][ T124] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 22.956082][ T124] usb 4-1: config 0 has no interface number 0 [ 22.962004][ T124] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 22.967256][ T370] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 22.971773][ T124] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 22.987843][ T124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 22.996339][ T124] usb 4-1: config 0 descriptor?? [ 23.017241][ T428] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 23.071569][ T5] usb 5-1: USB disconnect, device number 2 [ 23.127260][ T353] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.255723][ T428] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 23.265208][ T370] usb 3-1: device descriptor read/64, error 18 [ 23.267345][ T428] EXT4-fs (loop3): invalid journal inode [ 23.276614][ T428] EXT4-fs (loop3): can't get journal size [ 23.282954][ T428] EXT4-fs error (device loop3): ext4_protect_reserved_inode:211: comm syz.3.16: blocks 48-48 from inode 2 overlap system zone [ 23.296519][ T428] EXT4-fs (loop3): failed to initialize system zone (-117) [ 23.304099][ T428] EXT4-fs (loop3): mount failed [ 23.397333][ T124] usb 4-1: string descriptor 0 read error: -71 [ 23.405031][ T124] usb 4-1: invalid MIDI in EP 0 [ 23.410115][ T124] snd-usb-audio: probe of 4-1:0.2 failed with error -22 [ 23.418044][ T124] usb 4-1: USB disconnect, device number 2 [ 23.497254][ T353] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 23.506828][ T353] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 23.617732][ T350] syz-executor (350) used greatest stack depth: 20760 bytes left [ 23.657169][ T447] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.664491][ T370] usb 3-1: device descriptor read/64, error 18 [ 23.672533][ T353] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 23.682228][ T353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.690101][ T353] usb 1-1: Product: syz [ 23.694073][ T353] usb 1-1: Manufacturer: syz [ 23.698584][ T353] usb 1-1: SerialNumber: syz [ 23.706088][ T353] usb 1-1: config 0 descriptor?? [ 23.727259][ T443] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 23.733942][ T443] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 23.743143][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.750630][ T452] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.757956][ T452] device bridge_slave_0 entered promiscuous mode [ 23.766276][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.773141][ T452] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.780636][ T452] device bridge_slave_1 entered promiscuous mode [ 23.797421][ T370] usb usb3-port1: attempt power cycle [ 23.826575][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.833446][ T452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.840550][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.847306][ T452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.870826][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.879443][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.886452][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.902191][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.910754][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.917608][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.927216][ T447] usb 2-1: device descriptor read/64, error 18 [ 23.949448][ T443] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 23.956145][ T443] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 23.979188][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.988545][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.995475][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.002871][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.047544][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.055824][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.063565][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.083955][ T23] kauditd_printk_skb: 45 callbacks suppressed [ 24.083963][ T23] audit: type=1400 audit(1719742344.779:120): avc: denied { create } for pid=460 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 24.110522][ T23] audit: type=1400 audit(1719742344.779:121): avc: denied { connect } for pid=460 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 24.129782][ T23] audit: type=1400 audit(1719742344.779:122): avc: denied { create } for pid=460 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 24.150298][ T23] audit: type=1400 audit(1719742344.779:123): avc: denied { write } for pid=460 comm="syz.3.27" path="socket:[12509]" dev="sockfs" ino=12509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 24.177448][ T23] audit: type=1400 audit(1719742344.779:124): avc: denied { nlmsg_read } for pid=460 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 24.289994][ T23] audit: type=1400 audit(1719742344.979:125): avc: denied { create } for pid=463 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 24.307138][ C0] Adjusting tsc more than 11% (8578431 vs 8464051) [ 24.628131][ T353] Error reading MAC address [ 24.680593][ T447] usb 2-1: device descriptor read/64, error 18 [ 24.706158][ T23] audit: type=1400 audit(1719742344.979:126): avc: denied { bind } for pid=463 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 24.726157][ T23] audit: type=1326 audit(1719742344.989:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=463 comm="syz.3.28" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f917c96bb99 code=0x0 [ 24.757293][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.765764][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.783265][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.791656][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.812134][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.820385][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.856114][ T474] Zero length message leads to an empty skb [ 24.877823][ T421] device bridge_slave_1 left promiscuous mode [ 24.883776][ T421] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.898660][ T421] device bridge_slave_0 left promiscuous mode [ 24.918322][ T467] 9pnet: Insufficient options for proto=fd [ 24.972097][ T447] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 24.973430][ T421] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.265703][ T23] audit: type=1400 audit(1719742346.087:128): avc: denied { read } for pid=487 comm="syz.2.32" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 25.274677][ T488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.32'. [ 25.293341][ T445] usb 1-1: USB disconnect, device number 2 [ 25.324450][ T23] audit: type=1400 audit(1719742346.087:129): avc: denied { open } for pid=487 comm="syz.2.32" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 25.348655][ T493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36'. [ 25.388258][ T447] usb 2-1: device descriptor read/64, error 18 [ 25.425111][ T500] 9pnet: Insufficient options for proto=fd [ 25.570455][ T514] netlink: 124 bytes leftover after parsing attributes in process `syz.3.42'. [ 25.585605][ T509] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 25.624310][ T352] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /root/syzkaller.L1mnoX/6/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 25.656798][ T352] EXT4-fs error (device loop2): ext4_empty_dir:3002: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 25.676002][ T352] EXT4-fs warning (device loop2): ext4_empty_dir:3004: inode #11: comm syz-executor: directory missing '.' [ 25.745156][ T447] usb 2-1: device descriptor read/64, error 18 [ 25.955003][ T74] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.016129][ T447] usb usb2-port1: attempt power cycle [ 26.049608][ T525] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 26.078485][ T525] ext4 filesystem being mounted at /root/syzkaller.YiPPIG/2/bus supports timestamps until 2038 (0x7fffffff) [ 26.118113][ T445] hid (null): unknown global tag 0xe [ 26.128462][ T445] hid-generic 0000:0000:0000.0002: unknown main item tag 0xd [ 26.148585][ T445] hid-generic 0000:0000:0000.0002: unknown main item tag 0xd [ 26.155788][ T445] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 26.183488][ T445] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7 [ 26.194776][ T74] usb 4-1: Invalid ep0 maxpacket: 512 [ 26.198324][ T445] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 26.220808][ T445] hid-generic 0000:0000:0000.0002: unknown global tag 0xe [ 26.245267][ T445] hid-generic 0000:0000:0000.0002: item 0 1 1 14 parsing failed [ 26.280655][ T445] hid-generic: probe of 0000:0000:0000.0002 failed with error -22 [ 26.292444][ T534] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.307261][ T534] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.314844][ T534] device bridge_slave_0 entered promiscuous mode [ 26.326581][ T534] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.333458][ T534] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.340636][ T74] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 26.358788][ T534] device bridge_slave_1 entered promiscuous mode [ 26.428468][ T551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.50'. [ 26.438739][ T551] binder: 549:551 ioctl 8933 20000000 returned -22 [ 26.803254][ T7] device bridge_slave_1 left promiscuous mode [ 26.809427][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.817866][ T7] device bridge_slave_0 left promiscuous mode [ 26.820906][ T74] usb 4-1: Invalid ep0 maxpacket: 512 [ 26.824427][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.831149][ T74] usb usb4-port1: attempt power cycle [ 26.931199][ T567] netlink: 124 bytes leftover after parsing attributes in process `syz.0.54'. [ 26.961415][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.968793][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.996854][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.016179][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.025552][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.032424][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.052996][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.068567][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.082770][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.089646][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.114457][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.121900][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.129727][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.263641][ T74] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 27.281328][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.290214][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.306626][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.314996][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.334439][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.343963][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.358841][ T74] usb 4-1: Invalid ep0 maxpacket: 512 [ 27.377708][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.391062][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.458489][ T582] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.476472][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.486408][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.529475][ T74] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 27.581840][ T582] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 27.615094][ T74] usb 4-1: Invalid ep0 maxpacket: 512 [ 27.621009][ T74] usb usb4-port1: unable to enumerate USB device [ 27.742653][ T591] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.749754][ T591] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.760535][ T591] device bridge_slave_0 entered promiscuous mode [ 27.769350][ T591] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.776419][ T591] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.784402][ T591] device bridge_slave_1 entered promiscuous mode [ 27.820958][ T607] netlink: 124 bytes leftover after parsing attributes in process `syz.0.65'. [ 27.877618][ T591] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.884508][ T591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.891609][ T591] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.898363][ T591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.970909][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.978763][ T447] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.986123][ T447] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.995802][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.003752][ T447] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.010610][ T447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.020606][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.028951][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.035827][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.053934][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.064971][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.098805][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.162517][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.225674][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.260598][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.268941][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.277482][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.285663][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.066932][ T23] kauditd_printk_skb: 45 callbacks suppressed [ 29.066942][ T23] audit: type=1400 audit(1719742350.123:175): avc: denied { ioctl } for pid=627 comm="syz.4.70" path="socket:[13695]" dev="sockfs" ino=13695 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.118587][ T628] EXT4-fs warning (device sda1): ext4_ioctl:888: Setting inode version is not supported with metadata_csum enabled. [ 29.132641][ T23] audit: type=1400 audit(1719742350.164:176): avc: denied { bind } for pid=627 comm="syz.4.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.181367][ T23] audit: type=1400 audit(1719742350.226:177): avc: denied { append } for pid=634 comm="syz.0.73" name="hwrng" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 29.345003][ T23] audit: type=1400 audit(1719742350.236:178): avc: denied { write } for pid=637 comm="syz.2.72" laddr=172.20.20.10 lport=250 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.376225][ T23] audit: type=1400 audit(1719742350.308:179): avc: denied { getopt } for pid=637 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.477891][ T23] audit: type=1400 audit(1719742350.432:180): avc: denied { write } for pid=646 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.521781][ T351] syz-executor (351) used greatest stack depth: 20120 bytes left [ 29.665082][ T23] audit: type=1326 audit(1719742350.668:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=652 comm="syz.0.79" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad35ba5b99 code=0x0 [ 29.782564][ T353] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 29.869801][ T660] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.879416][ T647] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 29.896174][ T660] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.905485][ T647] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 29.918475][ T660] device bridge_slave_0 entered promiscuous mode [ 29.928449][ T647] F2FS-fs (loop2): invalid crc value [ 29.933595][ T23] audit: type=1400 audit(1719742351.008:182): avc: denied { append } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=922 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.959009][ T660] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.966065][ T660] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.973308][ T23] audit: type=1400 audit(1719742351.008:183): avc: denied { open } for pid=144 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=922 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.996730][ T660] device bridge_slave_1 entered promiscuous mode [ 30.008013][ T23] audit: type=1400 audit(1719742351.008:184): avc: denied { getattr } for pid=144 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=922 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 30.030720][ T7] device bridge_slave_1 left promiscuous mode [ 30.037964][ T647] F2FS-fs (loop2): Found nat_bits in checkpoint [ 30.044144][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.058435][ T7] device bridge_slave_0 left promiscuous mode [ 30.070650][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.119501][ T647] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 30.131903][ T647] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 30.183989][ T647] attempt to access beyond end of device [ 30.183989][ T647] loop2: rw=2049, want=45104, limit=40427 [ 30.219134][ T654] 9pnet: Insufficient options for proto=fd [ 30.264020][ T353] usb 2-1: not running at top speed; connect to a high speed hub [ 30.398114][ T353] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid maxpacket 943, setting to 64 [ 30.409745][ T353] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 30.423247][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.444563][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.492056][ T353] usb 2-1: config 1 interface 0 has no altsetting 0 [ 30.530037][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.545774][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.720907][ T353] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 30.750560][ T353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.776784][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.776872][ T353] usb 2-1: Product: syz [ 30.783846][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.798875][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.822982][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.831990][ T353] usb 2-1: Manufacturer: 鬒ꕛ⸲鱟蹞뱌吰൹뫽楀걹입䠌䬁泝ಳ㭔輳唷墸樧ꑑ⽝╏뛮㚙腒悊ꛎ味럅ᴿ穆輀홈㯀葓잂忐ࡆ逳玆롲唬ﴤ耨๊鿱꡼岲妗晶䢶Ẃ纱匁䤋⩬৛罗먲᷵뾴⟕꟔剻折绁ⷅ㘚ɶꕺ킭隮愗퉢눖佧Ὅ腾꛿ੑ䞹㭨㚨Ê⛦梀뾨ࡑ柞到廫⼽⩖뻍 [ 30.847285][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.870720][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.938106][ T353] usb 2-1: SerialNumber: syz [ 30.946159][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 30.956798][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.983214][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.985255][ T649] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 31.032394][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.059795][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.100233][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.126813][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.137101][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.164016][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.174269][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.268368][ T591] attempt to access beyond end of device [ 31.268368][ T591] loop2: rw=2049, want=45112, limit=40427 [ 31.571906][ T353] usb 2-1: USB disconnect, device number 5 [ 31.875432][ T707] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,dioread_lock,,errors=continue [ 31.888308][ T707] ext4 filesystem being mounted at /root/syzkaller.qzTIsx/25/file1 supports timestamps until 2038 (0x7fffffff) [ 31.919921][ T13] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 31.957991][ T716] [ 31.960586][ T716] ********************************************************** [ 31.967863][ T716] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 31.975062][ T716] ** ** [ 31.982527][ T716] ** trace_printk() being used. Allocating extra memory. ** [ 31.989787][ T716] ** ** [ 31.997088][ T716] ** This means that this is a DEBUG kernel and it is ** [ 32.004405][ T716] ** unsafe for production use. ** [ 32.016340][ T716] ** ** [ 32.025450][ T716] ** If you see this message and you are not debugging ** [ 32.032930][ T716] ** the kernel, report this immediately to your vendor! ** [ 32.041531][ T716] ** ** [ 32.048805][ T716] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 32.056079][ T716] ********************************************************** [ 32.265501][ T13] usb 5-1: no configurations [ 32.277035][ T13] usb 5-1: can't read configurations, error -22 [ 32.355106][ T721] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 32.424848][ T7] device bridge_slave_1 left promiscuous mode [ 32.438119][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.467509][ T7] device bridge_slave_0 left promiscuous mode [ 32.481419][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.489182][ T738] input: syz1 as /devices/virtual/input/input4 [ 32.522208][ T13] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 32.613191][ T743] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 32.626501][ T743] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 32.791317][ T757] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 32.829257][ T13] usb 5-1: no configurations [ 32.837967][ T13] usb 5-1: can't read configurations, error -22 [ 32.867449][ T762] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.879098][ T13] usb usb5-port1: attempt power cycle [ 32.894719][ T762] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.943969][ T762] device bridge_slave_0 entered promiscuous mode [ 32.957876][ T767] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,quota,,errors=continue [ 32.985875][ T762] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.992946][ T762] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.008090][ T762] device bridge_slave_1 entered promiscuous mode [ 33.075707][ T767] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Out of memory [ 33.105647][ T762] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.112497][ T762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.119643][ T762] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.126399][ T762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.162498][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.170568][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.190572][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.215446][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.229993][ T507] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.236871][ T507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.244069][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.252219][ T507] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.259059][ T507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.280431][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.290773][ T773] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 33.291355][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.298948][ T13] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 33.315433][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.317293][ T773] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 33.338281][ T773] F2FS-fs (loop0): invalid crc value [ 33.346139][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.354481][ T773] F2FS-fs (loop0): Found nat_bits in checkpoint [ 33.364205][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.387258][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.409061][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.432846][ T13] usb 5-1: no configurations [ 33.447525][ T13] usb 5-1: can't read configurations, error -22 [ 33.460456][ T773] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 33.469607][ T773] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 33.559960][ T7] device bridge_slave_1 left promiscuous mode [ 33.566829][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.579589][ T7] device bridge_slave_0 left promiscuous mode [ 33.585610][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.610971][ T13] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 33.624882][ T786] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 33.633132][ T786] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 33.656138][ T786] F2FS-fs (loop1): Found nat_bits in checkpoint [ 33.689602][ T591] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 33.696735][ T786] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 33.712717][ T786] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 33.731065][ T591] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Out of memory [ 33.769452][ T13] usb 5-1: no configurations [ 33.773900][ T13] usb 5-1: can't read configurations, error -22 [ 33.780653][ T13] usb usb5-port1: unable to enumerate USB device [ 33.876402][ T791] F2FS-fs (loop3): Found nat_bits in checkpoint [ 33.902248][ T791] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 33.908881][ T791] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 34.310236][ T762] attempt to access beyond end of device [ 34.310236][ T762] loop3: rw=2049, want=45104, limit=40427 [ 34.329098][ T810] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.336567][ T809] overlayfs: failed to resolve './file0': -2 [ 34.347423][ T810] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.354990][ T810] device bridge_slave_0 entered promiscuous mode [ 34.359523][ T23] kauditd_printk_skb: 17 callbacks suppressed [ 34.359531][ T23] audit: type=1400 audit(1719742355.502:202): avc: denied { unmount } for pid=348 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 34.375725][ T810] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.393927][ T810] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.402001][ T810] device bridge_slave_1 entered promiscuous mode [ 34.419902][ T23] audit: type=1400 audit(1719742355.562:203): avc: denied { read } for pid=816 comm="syz.0.113" path="socket:[14857]" dev="sockfs" ino=14857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.571304][ T810] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.578177][ T810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.585322][ T810] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.592138][ T810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.227361][ T471] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.239767][ T471] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.261771][ T829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.118'. [ 35.289549][ T23] audit: type=1400 audit(1719742356.447:204): avc: denied { mounton } for pid=831 comm="syz.0.119" path="/proc/831/task" dev="proc" ino=15446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 35.328945][ T23] audit: type=1400 audit(1719742356.447:205): avc: denied { mount } for pid=831 comm="syz.0.119" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 35.351002][ T23] audit: type=1400 audit(1719742356.447:206): avc: denied { block_suspend } for pid=831 comm="syz.0.119" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 35.373838][ T23] audit: type=1400 audit(1719742356.447:207): avc: denied { write } for pid=831 comm="syz.0.119" name="task" dev="proc" ino=15446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 35.400294][ T23] audit: type=1400 audit(1719742356.447:208): avc: denied { add_name } for pid=831 comm="syz.0.119" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 35.425676][ T23] audit: type=1400 audit(1719742356.447:209): avc: denied { create } for pid=831 comm="syz.0.119" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 35.445966][ T23] audit: type=1400 audit(1719742356.447:210): avc: denied { associate } for pid=831 comm="syz.0.119" name="cpu.stat" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 35.467464][ T829] netlink: 20 bytes leftover after parsing attributes in process `syz.4.118'. [ 35.495453][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.506866][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.523673][ T872] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 35.536615][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.546180][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.559392][ T445] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.566233][ T445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.574555][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.582912][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.597871][ T445] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.604701][ T445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.617554][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.625589][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.652008][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.660008][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.677858][ T23] audit: type=1400 audit(1719742356.829:211): avc: denied { mounton } for pid=868 comm="syz.1.127" path="/root/syzkaller.P0qctm/26/file1/bus" dev="loop1" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 35.941377][ T347] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 36.065625][ T347] FAT-fs (loop1): Filesystem has been set read-only [ 36.072163][ T347] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 36.592367][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.601361][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.620752][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.640134][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.683164][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.691691][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.709073][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.718348][ T895] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 36.732004][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.755458][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.783999][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.886072][ T7] device bridge_slave_1 left promiscuous mode [ 36.892040][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.902577][ T7] device bridge_slave_0 left promiscuous mode [ 36.908574][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.947566][ T894] F2FS-fs (loop4): SIT is corrupted node# 0 vs 7 [ 36.954173][ T894] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 37.037189][ T902] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.044344][ T902] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.053416][ T902] device bridge_slave_0 entered promiscuous mode [ 37.066983][ T902] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.074074][ T902] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.081841][ T902] device bridge_slave_1 entered promiscuous mode [ 37.109532][ T901] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.117259][ T901] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.124617][ T901] device bridge_slave_0 entered promiscuous mode [ 37.134371][ T901] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.141236][ T901] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.148571][ T901] device bridge_slave_1 entered promiscuous mode [ 37.256600][ T902] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.263484][ T902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.270581][ T902] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.277369][ T902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.299036][ T901] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.305903][ T901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.313013][ T901] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.319766][ T901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.382183][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.389565][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.403083][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.410982][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.418387][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.454503][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.462546][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.469361][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.477013][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.485613][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.492463][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.532066][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.540102][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.548531][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.570295][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.578411][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.586824][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.594739][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.602470][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.610692][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.618662][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.626763][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.634880][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.642950][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.660408][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.668693][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.677043][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.683891][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.691243][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.699350][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.707369][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.714196][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.768159][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.845449][ T928] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.853842][ T928] device bridge_slave_0 entered promiscuous mode [ 37.861113][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.867947][ T928] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.875944][ T928] device bridge_slave_1 entered promiscuous mode [ 37.910914][ T926] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.918023][ T926] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.926275][ T926] device bridge_slave_0 entered promiscuous mode [ 37.959447][ T926] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.966370][ T926] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.976946][ T926] device bridge_slave_1 entered promiscuous mode [ 37.986539][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.996709][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.211750][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.219890][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.228525][ T124] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 38.262469][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.271165][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.302475][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.311244][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.366746][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.375636][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.405586][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.414018][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.440628][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.448890][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.457051][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.468897][ T124] usb 3-1: Using ep0 maxpacket: 16 [ 38.477688][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.489222][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.496087][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.504325][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.517033][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.525835][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.532698][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.548766][ T945] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.562452][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.571184][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.579149][ T945] EXT4-fs error (device loop1): __ext4_iget:5217: inode #15: block 1627517706: comm syz.1.146: invalid block [ 38.579678][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.590622][ T124] usb 3-1: config 0 has an invalid interface number: 144 but max is 3 [ 38.590632][ T124] usb 3-1: config 0 has an invalid interface number: 187 but max is 3 [ 38.590645][ T124] usb 3-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 38.590654][ T124] usb 3-1: config 0 has no interface number 1 [ 38.590662][ T124] usb 3-1: config 0 has no interface number 2 [ 38.590896][ T124] usb 3-1: config 0 interface 187 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 38.599067][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.617982][ T124] usb 3-1: config 0 interface 187 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 38.663911][ T124] usb 3-1: config 0 interface 187 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 38.667611][ T945] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz.1.146: couldn't read orphan inode 15 (err -117) [ 38.674526][ T124] usb 3-1: config 0 interface 187 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 38.698115][ T945] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 38.707308][ T124] usb 3-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 38.728228][ T945] overlayfs: missing 'workdir' [ 38.744226][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.753731][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.778454][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.786288][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.796327][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.804907][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.812760][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.821870][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.830105][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.836942][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.844377][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.852721][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.861055][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.867919][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.868950][ T952] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold, [ 38.875107][ T124] usb 3-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 38.907384][ T124] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.915398][ T124] usb 3-1: Product: syz [ 38.919979][ T124] usb 3-1: Manufacturer: syz [ 38.924382][ T124] usb 3-1: SerialNumber: syz [ 38.930047][ T124] usb 3-1: config 0 descriptor?? [ 38.939808][ T951] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.149: bg 0: block 234: padding at end of block bitmap is not set [ 38.954012][ T951] EXT4-fs (loop1): Remounting filesystem read-only [ 38.964313][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.977759][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.985698][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.993516][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.001353][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.009413][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.017392][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.061794][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.071154][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.079750][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.088030][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.096174][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.104322][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.112166][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.120441][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.132803][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.141271][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.164241][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.173789][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.190690][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.199574][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.275465][ T940] netlink: 'syz.2.148': attribute type 21 has an invalid length. [ 39.492238][ T23] kauditd_printk_skb: 4 callbacks suppressed [ 39.506261][ T23] audit: type=1400 audit(1719742360.580:216): avc: denied { write } for pid=963 comm="syz.4.154" name="anycast6" dev="proc" ino=4026532607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 39.809487][ T13] usb 3-1: USB disconnect, device number 5 [ 39.817345][ T7] device bridge_slave_1 left promiscuous mode [ 39.827397][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.840875][ T7] device bridge_slave_0 left promiscuous mode [ 39.852136][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.865900][ T7] device bridge_slave_1 left promiscuous mode [ 39.877004][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.891213][ T7] device bridge_slave_0 left promiscuous mode [ 39.902546][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.916134][ T7] device bridge_slave_1 left promiscuous mode [ 39.931292][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.939630][ T7] device bridge_slave_0 left promiscuous mode [ 39.945720][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.953129][ T7] device bridge_slave_1 left promiscuous mode [ 39.959450][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.966926][ T7] device bridge_slave_0 left promiscuous mode [ 39.972959][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.055737][ T74] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 40.196402][ T983] EXT4-fs error (device loop3): ext4_quota_enable:6052: comm syz.3.155: Bad quota inum: 2, type: 2 [ 40.207464][ T983] EXT4-fs warning (device loop3): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 40.223252][ T983] EXT4-fs (loop3): mount failed [ 40.295043][ T74] usb 2-1: Using ep0 maxpacket: 8 [ 40.364560][ T23] audit: type=1400 audit(1719742361.522:217): avc: denied { write } for pid=991 comm="syz.2.158" name="uinput" dev="devtmpfs" ino=886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.378802][ T992] input: syz0 as /devices/virtual/input/input5 [ 40.414847][ T74] usb 2-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 40.415510][ T1001] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 40.423698][ T74] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.431801][ T74] usb 2-1: config 0 descriptor?? [ 40.440500][ T23] audit: type=1400 audit(1719742361.582:218): avc: denied { create } for pid=991 comm="syz.2.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.476029][ T74] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 40.596763][ T1006] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 40.605970][ T1006] ext4 filesystem being mounted at /root/syzkaller.6k3OYn/5/file1 supports timestamps until 2038 (0x7fffffff) [ 40.620032][ T23] audit: type=1400 audit(1719742361.782:219): avc: denied { read } for pid=1005 comm="syz.2.161" name="msr" dev="devtmpfs" ino=9174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 40.642865][ T23] audit: type=1400 audit(1719742361.782:220): avc: denied { open } for pid=1005 comm="syz.2.161" path="/dev/cpu/0/msr" dev="devtmpfs" ino=9174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 40.658596][ T1012] fuse: Bad value for 'fd' [ 40.684515][ T74] usb 2-1: Detected FT232BM [ 40.703807][ T23] audit: type=1400 audit(1719742361.832:221): avc: denied { link } for pid=1005 comm="syz.2.161" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.944324][ T23] audit: type=1400 audit(1719742362.052:222): avc: denied { connect } for pid=976 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.153931][ T471] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 41.164180][ T74] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 41.179192][ T74] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 41.191663][ T74] usb 2-1: USB disconnect, device number 6 [ 41.198278][ T74] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 41.212517][ T74] ftdi_sio 2-1:0.0: device disconnected [ 41.423993][ T471] usb 3-1: Using ep0 maxpacket: 8 [ 41.459732][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.466838][ T1036] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.474204][ T1036] device bridge_slave_0 entered promiscuous mode [ 41.480959][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.488036][ T1036] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.495600][ T1036] device bridge_slave_1 entered promiscuous mode [ 41.543686][ T471] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.556446][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.563292][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.570444][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.577275][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.585071][ T471] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 41.594936][ T471] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.605542][ T471] usb 3-1: config 0 descriptor?? [ 41.611760][ T23] audit: type=1400 audit(1719742362.773:223): avc: denied { remove_name } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=922 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.634716][ T23] audit: type=1400 audit(1719742362.773:224): avc: denied { rename } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=922 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.658695][ T471] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 41.675229][ T23] audit: type=1400 audit(1719742362.773:225): avc: denied { create } for pid=144 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.675832][ T471] uvcvideo: No valid video chain found. [ 41.721566][ T1031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.729423][ T1031] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.736844][ T1031] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.752053][ T1031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.760467][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.767329][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.778816][ T1031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.786931][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.793877][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.811377][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.819458][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.837288][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.839583][ T1047] F2FS-fs (loop4): invalid crc value [ 41.867745][ T1047] F2FS-fs (loop4): Found nat_bits in checkpoint [ 41.870549][ T1031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.897753][ T471] usb 3-1: USB disconnect, device number 6 [ 41.914250][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.935476][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.029443][ T1031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.032461][ T1067] capability: warning: `syz.3.174' uses 32-bit capabilities (legacy support in use) [ 42.038995][ T1047] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 42.076272][ T928] attempt to access beyond end of device [ 42.076272][ T928] loop4: rw=2049, want=45104, limit=40427 [ 42.193636][ T7] device bridge_slave_1 left promiscuous mode [ 42.200100][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.208655][ T7] device bridge_slave_0 left promiscuous mode [ 42.215674][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.283005][ T369] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 42.532908][ T369] usb 1-1: Using ep0 maxpacket: 16 [ 42.872640][ T369] usb 1-1: config 0 has an invalid interface number: 144 but max is 3 [ 42.880622][ T369] usb 1-1: config 0 has an invalid interface number: 187 but max is 3 [ 42.897055][ T369] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 42.906161][ T369] usb 1-1: config 0 has no interface number 1 [ 42.912038][ T369] usb 1-1: config 0 has no interface number 2 [ 42.928602][ T369] usb 1-1: config 0 interface 187 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 42.950410][ T369] usb 1-1: config 0 interface 187 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 42.971162][ T369] usb 1-1: config 0 interface 187 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 42.991857][ T369] usb 1-1: config 0 interface 187 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 43.012484][ T369] usb 1-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 43.087653][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.101993][ T1085] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.115590][ T1085] device bridge_slave_0 entered promiscuous mode [ 43.132841][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.146872][ T1085] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.160540][ T1085] device bridge_slave_1 entered promiscuous mode [ 43.172493][ T369] usb 1-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 43.191491][ T369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.201570][ T369] usb 1-1: Product: syz [ 43.211652][ T369] usb 1-1: Manufacturer: syz [ 43.218678][ T369] usb 1-1: SerialNumber: syz [ 43.233297][ T369] usb 1-1: config 0 descriptor?? [ 43.295456][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.302314][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.309491][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.316341][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.335879][ T1087] F2FS-fs (loop1): invalid crc value [ 43.353918][ T1087] F2FS-fs (loop1): Found nat_bits in checkpoint [ 43.429081][ T1087] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 43.439312][ T1031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.447597][ T1031] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.458304][ T1031] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.473902][ T1031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.486120][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.492980][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.500658][ T1031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.508711][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.515570][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.526819][ T7] device bridge_slave_1 left promiscuous mode [ 43.537769][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.545979][ T1101] FAT-fs (loop2): Directory bread(block 64) failed [ 43.577605][ T7] device bridge_slave_0 left promiscuous mode [ 43.583553][ T1101] FAT-fs (loop2): Directory bread(block 65) failed [ 43.589967][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.597011][ T1101] FAT-fs (loop2): Directory bread(block 66) failed [ 43.613485][ T1101] FAT-fs (loop2): Directory bread(block 67) failed [ 43.633711][ T1101] FAT-fs (loop2): Directory bread(block 68) failed [ 43.640068][ T1101] FAT-fs (loop2): Directory bread(block 69) failed [ 43.666738][ T1101] FAT-fs (loop2): Directory bread(block 70) failed [ 43.722220][ T1101] FAT-fs (loop2): Directory bread(block 71) failed [ 43.753052][ T1101] FAT-fs (loop2): Directory bread(block 72) failed [ 43.759695][ T1101] FAT-fs (loop2): Directory bread(block 73) failed [ 43.877923][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.886207][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.899542][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.912712][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.918659][ T1101] attempt to access beyond end of device [ 43.918659][ T1101] loop2: rw=2049, want=1480, limit=256 [ 43.920664][ T1065] netlink: 'syz.0.168': attribute type 21 has an invalid length. [ 43.952251][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.960484][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.999965][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.008063][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.025923][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.034786][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.043170][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.051495][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.086922][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.106953][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.168014][ T369] usb 1-1: USB disconnect, device number 3 [ 44.684050][ T1128] netlink: 'syz.3.187': attribute type 4 has an invalid length. [ 47.122633][ T902] attempt to access beyond end of device [ 47.122633][ T902] loop1: rw=2049, want=45104, limit=40427 [ 47.272824][ T1128] syz.3.187 (1128) used greatest stack depth: 19640 bytes left [ 47.455198][ T23] kauditd_printk_skb: 12 callbacks suppressed [ 47.455209][ T23] audit: type=1400 audit(1719742368.626:238): avc: denied { ioctl } for pid=1154 comm="syz.2.195" path="pid:[4026532298]" dev="nsfs" ino=4026532298 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.530121][ T23] audit: type=1400 audit(1719742368.696:239): avc: denied { getopt } for pid=1165 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.601576][ T1169] 9pnet: Insufficient options for proto=fd [ 47.891791][ T23] audit: type=1400 audit(1719742369.066:240): avc: denied { create } for pid=1176 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 48.160931][ T471] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 48.168455][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.175333][ T1183] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.182763][ T1183] device bridge_slave_0 entered promiscuous mode [ 48.189738][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.196692][ T1183] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.204217][ T1183] device bridge_slave_1 entered promiscuous mode [ 48.291633][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.298865][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.307885][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.316095][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.324172][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.331033][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.338484][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.348622][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.356791][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.366250][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.373102][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.504791][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.600905][ T23] audit: type=1400 audit(1719742369.706:241): avc: denied { create } for pid=1198 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 48.706557][ T471] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.706569][ T471] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.725832][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.753854][ T1203] mmap: syz.4.211 (1203): VmData 29470720 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 48.758687][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.781089][ T471] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 48.789933][ T471] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 48.793906][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.822428][ T471] usb 3-1: SerialNumber: syz [ 48.825465][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.849034][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.869735][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.879433][ T1211] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 48.881811][ T1208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.212'. [ 48.911546][ T527] device bridge_slave_1 left promiscuous mode [ 48.917760][ T527] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.926578][ T1211] erofs: (device loop3): vle_extent_lookback: bogus lookback distance @ nid 36 [ 48.935452][ T527] device bridge_slave_0 left promiscuous mode [ 48.950042][ T1211] erofs: (device loop3): z_erofs_vle_normalaccess_readpage: failed to read, err [-117] [ 48.953084][ T527] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.054174][ T1214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.206'. [ 49.112112][ T471] usb 3-1: 0:2 : does not exist [ 49.123295][ T471] usb 3-1: USB disconnect, device number 7 [ 49.159907][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.200924][ T369] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 49.291948][ T1224] FAT-fs (loop3): Unrecognized mount option "shora2=" or missing value [ 49.307147][ T23] audit: type=1400 audit(1719742370.476:242): avc: denied { read } for pid=1226 comm="syz.0.216" name="ppp" dev="devtmpfs" ino=854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.329538][ T23] audit: type=1400 audit(1719742370.486:243): avc: denied { open } for pid=1226 comm="syz.0.216" path="/dev/ppp" dev="devtmpfs" ino=854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.352423][ T23] audit: type=1400 audit(1719742370.486:244): avc: denied { ioctl } for pid=1226 comm="syz.0.216" path="/dev/ppp" dev="devtmpfs" ino=854 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.470831][ T369] usb 5-1: Using ep0 maxpacket: 16 [ 49.496415][ T1219] F2FS-fs (loop1): Found nat_bits in checkpoint [ 49.531662][ T1219] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 49.553686][ T1214] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1214 comm=syz.1.206 [ 49.566252][ T23] audit: type=1400 audit(1719742370.736:245): avc: denied { read } for pid=1213 comm="syz.1.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 49.590864][ T369] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.592450][ T1183] attempt to access beyond end of device [ 49.592450][ T1183] loop1: rw=2049, want=45112, limit=40427 [ 49.602223][ T369] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.622954][ T369] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 49.636403][ T369] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 49.642930][ T23] audit: type=1400 audit(1719742370.806:246): avc: denied { connect } for pid=1237 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.645696][ T369] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.676245][ T369] usb 5-1: config 0 descriptor?? [ 49.700883][ T507] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 49.907133][ T1241] 9pnet: Insufficient options for proto=fd [ 49.994660][ T507] usb 4-1: Using ep0 maxpacket: 16 [ 50.110814][ T507] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.125093][ T507] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 50.145239][ T507] usb 4-1: config 1 has no interface number 1 [ 50.156475][ T507] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 50.170389][ T507] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 50.189533][ T369] microsoft 0003:045E:07DA.0003: unbalanced collection at end of report description [ 50.200665][ T369] microsoft 0003:045E:07DA.0003: parse failed [ 50.201812][ T1238] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (0) [ 50.208830][ T1238] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 50.217548][ T369] microsoft: probe of 0003:045E:07DA.0003 failed with error -22 [ 50.245555][ T1238] F2FS-fs (loop2): invalid crc value [ 50.252912][ T1238] F2FS-fs (loop2): Found nat_bits in checkpoint [ 50.290981][ T1238] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 50.298310][ T1238] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 50.310652][ T1238] capability: warning: `syz.2.219' uses deprecated v2 capabilities in a way that may be insecure [ 50.310975][ T23] audit: type=1400 audit(1719742371.476:247): avc: denied { create } for pid=1237 comm="syz.2.219" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.390958][ T507] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 50.406179][ T507] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.414471][ T507] usb 4-1: Product: syz [ 50.418647][ T507] usb 4-1: Manufacturer: syz [ 50.423780][ T507] usb 4-1: SerialNumber: syz [ 50.459208][ T369] usb 5-1: USB disconnect, device number 7 [ 50.782422][ T507] usb 4-1: USB disconnect, device number 7 [ 51.021224][ T1283] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 51.419415][ T1302] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 51.434210][ T1302] EXT4-fs (loop0): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 51.469796][ T1313] 9pnet: Insufficient options for proto=fd [ 51.626163][ T1314] EXT4-fs (loop3): Ignoring removed orlov option [ 51.845691][ T1314] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,nojournal_checksum,orlov,init_itable,journal_dev=0x00000000000000e1,dioread_nolock,grpquota,,errors=continue [ 52.777627][ T1356] EXT4-fs (loop3): Ignoring removed nobh option [ 52.786519][ T1359] 9pnet: Insufficient options for proto=fd [ 52.790743][ T1356] EXT4-fs (loop3): Mount option "nodelalloc" incompatible with ext2 [ 52.882633][ T1024] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 52.980884][ T1368] EXT4-fs (loop0): can't mount with commit=4, fs mounted w/o journal [ 53.190579][ T1024] usb 5-1: Using ep0 maxpacket: 16 [ 53.690575][ T124] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 53.865698][ T23] kauditd_printk_skb: 5 callbacks suppressed [ 53.865707][ T23] audit: type=1400 audit(1719742375.036:253): avc: denied { mount } for pid=1383 comm="syz.3.253" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 53.880691][ T1024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.901861][ T1381] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 53.904545][ T1024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.922863][ T1024] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 53.922889][ T1024] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 53.922901][ T1024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.934690][ T23] audit: type=1400 audit(1719742375.106:254): avc: denied { mounton } for pid=1380 comm="syz.1.252" path="/root/syzkaller.ythDZG/7/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 53.939895][ T1024] usb 5-1: config 0 descriptor?? [ 53.945691][ T124] usb 3-1: Using ep0 maxpacket: 16 [ 53.957842][ T23] audit: type=1400 audit(1719742375.106:255): avc: denied { write } for pid=1380 comm="syz.1.252" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 53.988732][ T1183] EXT4-fs error (device loop1): ext4_empty_dir:2990: inode #11: comm syz-executor: invalid size [ 54.008642][ T23] audit: type=1400 audit(1719742375.106:256): avc: denied { add_name } for pid=1380 comm="syz.1.252" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 54.018746][ T1183] EXT4-fs warning (device loop1): ext4_rmdir:3274: inode #11: comm syz-executor: empty directory 'file1' has too many links (0) [ 54.041489][ T23] audit: type=1400 audit(1719742375.106:257): avc: denied { setattr } for pid=1380 comm="syz.1.252" name="work" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 54.073125][ T23] audit: type=1400 audit(1719742375.146:258): avc: denied { rename } for pid=1380 comm="syz.1.252" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.095347][ T23] audit: type=1400 audit(1719742375.146:259): avc: denied { read open } for pid=1380 comm="syz.1.252" path="/file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.117645][ T353] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 54.117904][ T23] audit: type=1400 audit(1719742375.146:260): avc: denied { write } for pid=1380 comm="syz.1.252" path=2F202864656C6574656429 dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.148623][ T23] audit: type=1400 audit(1719742375.156:261): avc: denied { setattr } for pid=1380 comm="syz.1.252" name="#21" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.170482][ T124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 54.170913][ T23] audit: type=1400 audit(1719742375.156:262): avc: denied { link } for pid=1380 comm="syz.1.252" name="#21" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.202810][ T124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 54.212597][ T124] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 54.221476][ T124] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.230312][ T124] usb 3-1: config 0 descriptor?? [ 54.233909][ T1389] netlink: 124 bytes leftover after parsing attributes in process `syz.3.255'. [ 54.312325][ T1395] tmpfs: Unknown parameter 'nr_Z [ 54.312325][ T1395] ' [ 54.529568][ T353] usb 1-1: Using ep0 maxpacket: 16 [ 54.606891][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 54.665834][ T1024] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 54.674162][ T1024] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 54.685408][ T1024] microsoft 0003:045E:07DA.0004: no inputs found [ 54.691611][ T1024] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 54.790777][ T1024] usb 5-1: USB disconnect, device number 8 [ 54.970630][ T353] usb 1-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d0.1e [ 54.979538][ T353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.987378][ T353] usb 1-1: Product: syz [ 54.991352][ T353] usb 1-1: Manufacturer: syz [ 54.995706][ T353] usb 1-1: SerialNumber: syz [ 55.001356][ T353] usb 1-1: config 0 descriptor?? [ 55.160433][ T1406] 9pnet: Insufficient options for proto=fd [ 55.223027][ T1408] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 55.227841][ T1405] EXT4-fs (loop3): Test dummy encryption mode enabled [ 55.238887][ T1405] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000006,nombcache,bsddf,test_dummy_encryption,,errors=continue [ 55.271270][ T1408] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,jqfmt=vfsold,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,max_dir_size_kb=0x0000000000000400,bsddf,,errors=continue [ 55.301936][ T1405] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 55.386619][ T1418] EXT4-fs error (device loop1): ext4_find_dest_de:2063: inode #12: block 5: comm syz.1.259: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=56 fake=0 [ 55.409544][ T1418] EXT4-fs error (device loop1): ext4_find_dest_de:2063: inode #12: block 5: comm syz.1.259: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=56 fake=0 [ 55.429709][ T1418] EXT4-fs error (device loop1): ext4_find_dest_de:2063: inode #12: block 5: comm syz.1.259: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=56 fake=0 [ 55.455109][ T1424] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 55.507704][ T1418] EXT4-fs error (device loop1): ext4_read_inline_dir:1594: inode #12: block 5: comm syz.1.259: path /root/syzkaller.ythDZG/10/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 55.990570][ T124] usbhid 3-1:0.0: can't add hid device: -71 [ 56.032407][ T124] usbhid: probe of 3-1:0.0 failed with error -71 [ 56.039871][ T124] usb 3-1: USB disconnect, device number 8 [ 56.239255][ T1448] netlink: 124 bytes leftover after parsing attributes in process `syz.3.266'. [ 56.523772][ T1024] usb 1-1: USB disconnect, device number 4 [ 56.599075][ T1456] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 56.651613][ T1456] erofs: (device loop3): vle_extent_lookback: bogus lookback distance @ nid 36 [ 56.664770][ T1453] loop2: p1 p2 p3 [ 56.676670][ T1456] erofs: (device loop3): z_erofs_vle_normalaccess_readpage: failed to read, err [-117] [ 56.748898][ T162] loop2: p1 p2 p3 [ 57.062145][ T1470] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 57.100527][ T1477] erofs: (device loop1): erofs_parse_options: Unrecognized mount option "" or missing value [ 57.117734][ T346] udevd[346]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 57.132115][ T378] udevd[378]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 57.143252][ T1215] udevd[1215]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 57.215818][ T926] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 57.235465][ T926] EXT4-fs error (device loop3): __ext4_get_inode_loc:4710: comm syz-executor: Invalid inode table block 4 in block_group 0 [ 57.258840][ T1215] udevd[1215]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 57.259744][ T1483] udevd[1483]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 57.269815][ T1484] udevd[1484]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 57.287686][ T926] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 57.305904][ T527] EXT4-fs error (device loop3): __ext4_get_inode_loc:4710: comm kworker/u4:4: Invalid inode table block 4 in block_group 0 [ 57.332662][ T1491] netlink: 124 bytes leftover after parsing attributes in process `syz.0.281'. [ 57.342147][ T1479] ------------[ cut here ]------------ [ 57.347404][ T1479] kernel BUG at fs/buffer.c:3027! [ 57.352973][ T1479] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 57.358846][ T1479] CPU: 1 PID: 1479 Comm: kmmpd-loop3 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 57.368558][ T1479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 57.378476][ T1479] RIP: 0010:submit_bh_wbc+0x831/0x850 [ 57.383660][ T1479] Code: 10 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 48 8b 7c 24 10 e8 00 8d ea ff e9 05 fe ff ff e8 e6 a7 ba ff 0f 0b e8 df a7 ba ff <0f> 0b e8 d8 a7 ba ff 0f 0b e8 d1 a7 ba ff 0f 0b e8 ca a7 ba ff 0f [ 57.403339][ T1479] RSP: 0018:ffff8881e9c67bf0 EFLAGS: 00010293 [ 57.409261][ T1479] RAX: ffffffff81a99121 RBX: 0000000000000000 RCX: ffff8881ed691f80 [ 57.417169][ T1479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.424974][ T1479] RBP: 0000000000003800 R08: ffffffff81a98994 R09: ffffed103a747f12 [ 57.432788][ T1479] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 57.440724][ T1479] R13: ffff8881d3a3f888 R14: 0000000000000001 R15: 0000000000000000 [ 57.448541][ T1479] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 57.457297][ T1479] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.463718][ T1479] CR2: 00007f2ee7d623d4 CR3: 00000001ed50b000 CR4: 00000000003406a0 [ 57.471534][ T1479] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.479345][ T1479] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.487152][ T1479] Call Trace: [ 57.490291][ T1479] ? __die+0xb4/0x100 [ 57.494122][ T1479] ? die+0x26/0x50 [ 57.497667][ T1479] ? do_trap+0x1e7/0x340 [ 57.501739][ T1479] ? submit_bh_wbc+0x831/0x850 [ 57.506339][ T1479] ? submit_bh_wbc+0x831/0x850 [ 57.510948][ T1479] ? do_invalid_op+0xfb/0x110 [ 57.515469][ T1479] ? submit_bh_wbc+0x831/0x850 [ 57.520062][ T1479] ? invalid_op+0x1e/0x30 [ 57.524226][ T1479] ? submit_bh_wbc+0xa4/0x850 [ 57.528733][ T1479] ? submit_bh_wbc+0x831/0x850 [ 57.533329][ T1479] ? submit_bh_wbc+0x831/0x850 [ 57.537935][ T1479] ? debug_smp_processor_id+0x20/0x20 [ 57.543138][ T1479] ? bit_waitqueue+0x30/0x30 [ 57.547562][ T1479] submit_bh+0x21/0x30 [ 57.551471][ T1479] write_mmp_block+0x3ff/0x5b0 [ 57.556070][ T1479] ? console_conditional_schedule+0x10/0x10 [ 57.561797][ T1479] ? check_preemption_disabled+0x9f/0x320 [ 57.567356][ T1479] ? read_mmp_block+0x8a0/0x8a0 [ 57.572038][ T1479] ? find_next_bit+0x7b/0x100 [ 57.576552][ T1479] kmmpd+0x7de/0xa10 [ 57.580285][ T1479] ? write_mmp_block+0x5b0/0x5b0 [ 57.585060][ T1479] ? __wake_up_locked+0xb7/0x110 [ 57.589835][ T1479] ? __kthread_parkme+0xb0/0x1b0 [ 57.594633][ T1479] kthread+0x2da/0x360 [ 57.598512][ T1479] ? write_mmp_block+0x5b0/0x5b0 [ 57.603283][ T1479] ? kthread_blkcg+0xd0/0xd0 [ 57.607713][ T1479] ret_from_fork+0x1f/0x30 [ 57.611969][ T1479] Modules linked in: [ 57.616266][ T1479] ---[ end trace 48339ffe31944f82 ]--- [ 57.621585][ T1479] RIP: 0010:submit_bh_wbc+0x831/0x850 [ 57.650667][ T1479] Code: 10 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 48 8b 7c 24 10 e8 00 8d ea ff e9 05 fe ff ff e8 e6 a7 ba ff 0f 0b e8 df a7 ba ff <0f> 0b e8 d8 a7 ba ff 0f 0b e8 d1 a7 ba ff 0f 0b e8 ca a7 ba ff 0f [ 57.670407][ T1479] RSP: 0018:ffff8881e9c67bf0 EFLAGS: 00010293 [ 57.676529][ T1479] RAX: ffffffff81a99121 RBX: 0000000000000000 RCX: ffff8881ed691f80 [ 57.684350][ T1479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.692796][ T1479] RBP: 0000000000003800 R08: ffffffff81a98994 R09: ffffed103a747f12 [ 57.700596][ T1479] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 57.708376][ T1479] R13: ffff8881d3a3f888 R14: 0000000000000001 R15: 0000000000000000 [ 57.716214][ T1479] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 57.724970][ T1479] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.731407][ T1479] CR2: 00007fffc14f9ff8 CR3: 00000001ed50b000 CR4: 00000000003406b0 [ 57.739280][ T1479] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.747122][ T1479] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.754912][ T1479] Kernel panic - not syncing: Fatal exception [ 57.760978][ T1479] Kernel Offset: disabled [ 57.765104][ T1479] Rebooting in 86400 seconds..