last executing test programs: 4.909658376s ago: executing program 0 (id=1): socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000003c0)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x440, 0x6, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], 0x0, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.64945746s ago: executing program 0 (id=6): mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) 4.614894441s ago: executing program 0 (id=8): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20044e, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@jqfmt_vfsold}, {@usrjquota}]}, 0x1, 0x489, &(0x7f0000001680)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x14a) fallocate(r0, 0x20, 0x0, 0x8000) 4.589634121s ago: executing program 4 (id=5): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0xb5, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0xffffdff3, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x800, 0x5, 0x4, 0x7, 0x404, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0x9, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0xc, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x2, 0x8005, 0x3f, 0x8f, 0x6, 0x7, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x8000006, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x3, 0x3, 0x10008000, 0x9, 0x400, 0x80401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x8, 0x9, 0x8, 0x9, 0x6, 0x7, 0x9, 0x1, 0xfe000000, 0xffff, 0x2, 0x3, 0x9, 0x3ff, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x83, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x80ac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x5, 0x1bb31, 0x3, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x8, 0x5, 0x1, 0x101, 0x10000, 0x6, 0x8003, 0xffff, 0x81, 0xff, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0xa71d, 0x6, 0xffffffff, 0x426f, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x3ff, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa23, 0xc, 0x7, 0x1, 0x6c18, 0x0, 0x4, 0x5, 0x2, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000040)='\x00', 0x1, 0x5, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0xedc0, 0x0) r2 = creat(&(0x7f0000000340)='.\x00', 0x82) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000380)) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000640)='./file1\x00', 0x2014850, &(0x7f0000000b80), 0x3, 0x4d5, &(0x7f0000001300)="$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") write$selinux_attr(r0, &(0x7f0000000140)='system_u:object_r:hwdata_t:s0\x00', 0x1e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x600000, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x81}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) renameat2(r3, 0x0, r3, &(0x7f0000000000)='./file1\x00', 0x2) 4.549144632s ago: executing program 2 (id=3): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000580)={'veth1_to_bridge\x00', &(0x7f00000003c0)=@ethtool_rxnfc={0x31, 0x0, 0x0, {0x0, @udp_ip4_spec={@empty, @multicast1}, {0x0, @random="339341c4940f"}, @esp_ip4_spec={@multicast1, @loopback}, {0x0, @local}}}}) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000000e000000720a00ff0000000066000000ffffff80950000000000000018100000", @ANYRES32, @ANYBLOB='\x00\x002\x00\x00\x00\x00\x00\a\x00\x00\x00'], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0xfffffffc, @remote, 0x1}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000900)={[{@data_err_abort}, {@bh}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@noinit_itable}, {@noblock_validity}, {@jqfmt_vfsv1}, {@debug}]}, 0xfb, 0x476, &(0x7f0000000d40)="$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") 4.438244553s ago: executing program 0 (id=9): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x50e, &(0x7f00000000c0)={[{@oldalloc}, {@errors_remount}, {@init_itable}, {@block_validity}, {@prjquota}, {@quota}]}, 0x1, 0x451, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkIUaWhMhRNEYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1szvD/mC3tMu2g+znkwx9b+YN7333zdt9M283gIE1kf2TROyMiN8jYqyebS0wUf9z/dqF+X+uXZhPolp9+6+kVu7vaxfmi6LFeTvyzGQakX6WxP4O9S6fO39qrlJZPJvnp1dOvz+9fO78cydPz51YPLF4Zvbo0SOHZ158Yfb5vsR5b9bWfR8tHdj7+juX35w/dvndn78dKuJvi6NPJlY7+GS12ufqyrWrKZ0Ml9gQ1iUbA1l3jdTG/1gMRaPzxuK1T0ttHLChqrkuhy9WgbtYEmW3AChH8UGf3f8W2+bNPsp39eX6DVAW9/V8qx8ZjjQvM9J2f9tPExFx7OK/X2VbbMxzCACAFt9n859nO83/0nigqdw9+drQeL6Wsjsi7ouIPRFxf0St7IMR8dA6629fJLl5/pNe6SmwNcrmfy/la1ut879i9hfjQ3luVy3+keT4ycriofw1mYyRrVl+ZpU6fnj1ty+6HWue/2VbVn8xF8zbcWV4a+s5C3Mrc7cTc7Orn0TsG+4Uf3JjJSCJiL0Rsa/HOk4+/c2BbsduHf8q+rDOVP064ql6/1+MtvgLyerrk9PborJ4aLq4Km72y6+X3upW/23F3wdZ/2/veP3fiH88aV6vXV5/HZf++LzrPc1UT9d/Y8eW/O+HcysrZ2citiRv1BvdvH+2cW6RL8pn8U8e7Dz+d0fjldgfEdlF/HBEPBIRj+Z991hEPB4RB9viar6//umVJ97rFv+d0P8Lbf0/3lqkrf8biS3RvqdzYujUj9+1/o+N5Nre/47UUpP5nrW8/62lXb1dzQAAAPD/k0bEzkjSqRvp0XRqqv4d/j2xPa0sLa88c3zpgzML9d8IjMdIWjzpGmt6HjqT39YX+dm2/OH8ufGXQ6O1/NT8UmWh7OBhwO24afyntfGf+XOo7NYBG87vtWBwNY3/pMx2AJvP5z8MLuMfBleH8T9aRjuAzdfp8//jEtoBbL628W/ZDwaI+38YXMY/DK7m8e8LADAwlkfj1j+S75TYFr2cJXHXJCK9I5rRn0TS4yhYa2Jn2QGuP1H2OxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB//BcAAP//pgHvrg==") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nouid32}]}, 0x1, 0x461, &(0x7f0000000540)="$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") chdir(&(0x7f0000004340)='./file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f00000000c0)={0x1, 0x0, 0xd, 0x7, 0x7, 0x5, 0x1, 0x0, 0x10, 0x80, 0x889, 0x401, 0x5, 0x2000}) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) 4.425898063s ago: executing program 1 (id=10): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0xb5, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0xffffdff3, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x800, 0x5, 0x4, 0x7, 0x404, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0x9, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0xc, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x2, 0x8005, 0x3f, 0x8f, 0x6, 0x7, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x8000006, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x3, 0x3, 0x10008000, 0x9, 0x400, 0x80401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x8, 0x9, 0x8, 0x9, 0x6, 0x7, 0x9, 0x1, 0xfe000000, 0xffff, 0x2, 0x3, 0x9, 0x3ff, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x83, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x80ac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x5, 0x1bb31, 0x3, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x8, 0x5, 0x1, 0x101, 0x10000, 0x6, 0x8003, 0xffff, 0x81, 0xff, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0xa71d, 0x6, 0xffffffff, 0x426f, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x3ff, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa23, 0xc, 0x7, 0x1, 0x6c18, 0x0, 0x4, 0x5, 0x2, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000040)='\x00', 0x1, 0x5, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0xedc0, 0x0) r2 = creat(&(0x7f0000000340)='.\x00', 0x82) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000380)) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000640)='./file1\x00', 0x2014850, &(0x7f0000000b80), 0x3, 0x4d5, &(0x7f0000001300)="$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") write$selinux_attr(r0, &(0x7f0000000140)='system_u:object_r:hwdata_t:s0\x00', 0x1e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x81}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2) 4.400184074s ago: executing program 2 (id=11): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x50e, &(0x7f00000000c0)={[{@oldalloc}, {@errors_remount}, {@init_itable}, {@block_validity}, {@prjquota}, {@quota}]}, 0x1, 0x451, &(0x7f0000000780)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nouid32}]}, 0x1, 0x461, &(0x7f0000000540)="$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") chdir(&(0x7f0000004340)='./file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f00000000c0)={0x1, 0x0, 0xd, 0x7, 0x7, 0x5, 0x1, 0x0, 0x10, 0x80, 0x889, 0x401, 0x5, 0x2000}) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="18000000010005", 0x7) getdents64(r3, 0x0, 0x0) 3.667119145s ago: executing program 4 (id=12): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x50e, &(0x7f00000000c0)={[{@oldalloc}, {@errors_remount}, {@init_itable}, {@block_validity}, {@prjquota}, {@quota}]}, 0x1, 0x451, &(0x7f0000000780)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nouid32}]}, 0x1, 0x461, &(0x7f0000000540)="$eJzs3U9sFGUfB/DvbrslAd638OZVEf9VUCmi1LYmSIKJRDnJxWDiuaGFEAs1tCZCiNHEgzcvJp49KDePHDwZD3jUBC/e1JMxEkMkntSa2e7Qbdkt3dB2q/v5JLP7zM6wz2/m4ffM7MOTIUDPGipeKsn2JN8mGVxYXbrD0MLbzRuXTv5+49LJSubnT/xaqe/3241LJ8tdyz+3rXipJsPVpPpeJQ+0qHf2wsXXJ6anp8431kfmzr4xMnvh4tNnzk6cnjo9dW700OHnxkcPjY2Pr9mxvnz57RPbXnnh2AeT136ZufzD50W82xvbmo9jrQxlaOm5bPLEWlfWZfc0lSv9XQyEjvQlKZqrVs//wfRlsfEG89X3XQ0OWFfzhS1tN78zD/yLVdLtCIDuKC/0xe/fcll6C3BsXe8/6K7rRxd+ABbtfrOxLGzpT7WxT23Z7/u1NJTkyJVjnxVL1mkcBgAAAKCXfXE0yVOtxv+qubdpv6J8X5JdSe5Psjupz+t5MMlDSR5O8kg5n6gDy/dfPv5TaTeBhjVx/WhypDG3a+n4Xzn6lx19jbX/FCupVU6dmZ56Jsl/kwyntqVYH12hjqtf//VNu23N43/FUtRfjgU24vi5f9m/T09OzE3czTGz6Pq7ye7+Vu1fuTUTqEjBR5Ps6eSLa4vFH/fsP91utzu3P+tp/uNkX8v8b3S81w7X31aYnzlS7w9Gyl7hdu+Pjr3Urv4W7V9UrP03SJH/W1dq/2RHpXm+7mzndVzddeX5dts67/+/+6To/wcqr9YDHGh8+tbE3Nz50WSgcvz2z8c6j/mfrf1NU3k+yvNVtP/w3tbX//81fdveJI8lebwxd3lf/dqf7E/yZJIDK0Tz54uHXkvzHUUT/X93Fe0/2TL/b00NWJb/nReO7PzoeLv6V5f/z9b/Qg83PnH/d2erbaBuxwkAAAAAAADA2qjWn4FXqR68Va5WDx5ceIbf/7O1Oj0zO3fg1Myb5yYXnpW3I7VqOdNrsGk+6Gi9vLg+tmx9PMnOJB/2/dF48sDM9GS3Dx563LY2+V/4qa/b0QHrzvNaoXetIv9rGxEHsPFc/6F3yX/oXfIfepf8h94l/6F3yX/oXavP/4F1jQPYeK7/0JPu5rl+m63Qn00RRstCOX+qS2GU/yX/Jjkbm7Pw6ZfJBtTVl2SzHPIKhW72SgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACbx98BAAD//5IX2eo=") chdir(&(0x7f0000004340)='./file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f00000000c0)={0x1, 0x0, 0xd, 0x7, 0x7, 0x5, 0x1, 0x0, 0x10, 0x80, 0x889, 0x401, 0x5, 0x2000}) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) getdents64(0xffffffffffffffff, 0x0, 0x0) 3.522639227s ago: executing program 1 (id=14): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0xb5, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0xffffdff3, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x800, 0x5, 0x4, 0x7, 0x404, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0x9, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0xc, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x2, 0x8005, 0x3f, 0x8f, 0x6, 0x7, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x8000006, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x3, 0x3, 0x10008000, 0x9, 0x400, 0x80401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x8, 0x9, 0x8, 0x9, 0x6, 0x7, 0x9, 0x1, 0xfe000000, 0xffff, 0x2, 0x3, 0x9, 0x3ff, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x83, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x80ac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x5, 0x1bb31, 0x3, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x8, 0x5, 0x1, 0x101, 0x10000, 0x6, 0x8003, 0xffff, 0x81, 0xff, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0xa71d, 0x6, 0xffffffff, 0x426f, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x3ff, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa23, 0xc, 0x7, 0x1, 0x6c18, 0x0, 0x4, 0x5, 0x2, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000040)='\x00', 0x1, 0x5, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0xedc0, 0x0) r2 = creat(&(0x7f0000000340)='.\x00', 0x82) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000380)) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000640)='./file1\x00', 0x2014850, &(0x7f0000000b80), 0x3, 0x4d5, &(0x7f0000001300)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x81}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2) 3.34767826s ago: executing program 1 (id=15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, 0x0) 3.253833481s ago: executing program 1 (id=16): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x840, &(0x7f0000000540), 0x5, 0x1535, &(0x7f00000008c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) 3.193144692s ago: executing program 1 (id=17): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000140)={0x20, 0x1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.979874765s ago: executing program 1 (id=18): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.921479156s ago: executing program 32 (id=18): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.149012348s ago: executing program 5 (id=19): statx(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x10, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@sysvgroups}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@resgid={'resgid', 0x3d, r0}}, {@nojournal_checksum}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_clone(0x10202000, &(0x7f0000000040)="f5e9834571f12b5abd655cee12de94a615058ec64e58d1767505ac39e29104aac8c106fc7381db37a8e1aafb4bf5fd40b244cb61d0", 0x35, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000980)="b9b818730a6dd5e1005ec95eb1bc70648f6da3") syz_open_procfs(r5, &(0x7f00000009c0)='net/nf_conntrack\x00') writev(r1, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000004c0)='\n', 0x1}], 0x2) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x3f2, 0x200, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004011}, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000380)=ANY=[], 0xff27, 0x0) chdir(&(0x7f0000000300)='./file0\x00') symlink(&(0x7f0000001180)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f00000024c0)='./file0/file0\x00', &(0x7f0000002500)='./file1\x00') ioctl$HCIINQUIRY(r1, 0x800448f0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(r5, 0x0, &(0x7f0000000a00)={0x0, 0xeb}, 0x0) creat(&(0x7f0000000380)='./file0\x00', 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) 1.962104151s ago: executing program 3 (id=20): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb96, &(0x7f0000002c00)="$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") ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.905696692s ago: executing program 3 (id=21): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000580)={'veth1_to_bridge\x00', &(0x7f00000003c0)=@ethtool_rxnfc={0x31, 0x0, 0x0, {0x0, @udp_ip4_spec={@empty, @multicast1}, {0x0, @random="339341c4940f"}, @esp_ip4_spec={@multicast1, @loopback}, {0x0, @local}}}}) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000000e000000720a00ff0000000066000000ffffff80950000000000000018100000", @ANYRES32, @ANYBLOB='\x00\x002\x00\x00\x00\x00\x00\a\x00\x00\x00'], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0xfffffffc, @remote, 0x1}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000900)={[{@data_err_abort}, {@bh}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@noinit_itable}, {@noblock_validity}, {@jqfmt_vfsv1}, {@debug}]}, 0xfb, 0x476, &(0x7f0000000d40)="$eJzs3D9sG9UfAPDvXZz29+u/hFL+tBQIFETFn6RNC3RgACQkhiIhwVBGk6ZVqdugJki0imiKqrIgQSV2hMSCxMzAxISACYmFAXZUqUJZKExGZ5+Nk9iJkzi1U38+0sXv2c9+73u+d/fuXs4B9K2R7E8SsSMifouIoYhIFxcYqT7cmp+d+Ht+diKJcvmNP5PsbfHX/OxErWiSP26vZgrZQ3o1iReb1Dt98dLZYqk0eSHPj82ce3ds+uKlZ86cK56ePD15fvzYsaNHDj//3PizHYnzrqyt+z6Y2r/31beuvzZx4vrbP36dNDS6MY7OGIy5hnWy2OOdrazrdjakk8KyRdMNbwxt2xpR6aiDlf4/FANXd9VfG4pXPuxq44ANVS6Xy+OtX54rA3ewJLrdAqA7agf67Py3ttymoUdPuPlS9QQoi/tWvlRfKdRPVAcXnd920mxEnJj75/NsiQ25DgEAsNB32fjn6WbjvzTubSi3K58bGs7nUnZHxN0RsSci7omolL0vIu5fZf0ji/JLxz/pjcbc8Co/fyXZ+O+FfG5r4fivPk0xPJDndlbqH0xOnSlNHsrXycEY3JrlDzf99CQqk0Dxyyet6h9pGP9lS1Z/bSyYt+NGYevC95wszhTXHXju5pVC7Cs0iz+fwMvnsPZGxL411nHmya/2L3xmoJ5aOf5lLD/P1JbyFxFPVL//uVgUf02y/Pzk2P+iNHlorLZVLPXTz9deb1X/uuLvgJtXIrY13f7r8Q8njfO100s+YstKdVz7/aOW5zRr3f63JG8uqPz94szMhcMRW5LjS59vuMBdy9fKZ/EfPNC8/++O/9bEAxGRbcQPRsRDEfFw3vZHIuLRiDiwTPw/vPzYO2uPf2Nl8R9f1fe/+sTA2e+/bVV/e9//0UrqYP5MO/u/dhu4nnUHAAAAm0UaETsiSUfr6TQdHa3+D/+e2JaWpqZnnjo19d75k9V7BIZjMK1d6RrK85Ff/xxuuD46Xpk1j7ic54/k140/G/h/JT86MVU62e3goc9tb9H/M38MdLt1wIbrwDwasEnp/9C/1t7/7Tlgs1uhF/vBBriDOYpD/2rW/y93oR3A7ef4D/2r3v8/baNww+1ei2/eBDYfx3/oX/o/9KX13NffE4n4MmL5MkmvNHVViY97oxmtE5H2RDPWnCj2RjNWkSi0/asWF8uXi6XSr9+sp9Ju75kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6498AAAD//3Kx50g=") 1.492966518s ago: executing program 3 (id=22): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x2, &(0x7f00000006c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 559.973902ms ago: executing program 5 (id=23): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ftruncate(r0, 0x8800000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) readv(r1, &(0x7f00000018c0)=[{&(0x7f0000001700)=""/221, 0xdd}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4020000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r0, 0x0, 0x578410eb) sendfile(r3, r0, 0x0, 0x100000000) 303.547296ms ago: executing program 0 (id=24): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000040)='\x00', 0x1, 0x5, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 302.757466ms ago: executing program 3 (id=25): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2040000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x8, 0x1, 0x1, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 289.909636ms ago: executing program 2 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x88101) mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) 271.745596ms ago: executing program 3 (id=27): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) lstat(&(0x7f00000040c0)='./file1\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001240)='net/igmp6\x00') preadv(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x15f, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r3, 0x0, 0x800000009) 225.425877ms ago: executing program 4 (id=28): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x840, &(0x7f0000000540), 0x5, 0x1535, &(0x7f00000008c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) 224.900417ms ago: executing program 2 (id=29): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000040)='\x00', 0x1, 0x5, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 0s ago: executing program 3 (id=30): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000140)={0x20, 0x1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.31' (ED25519) to the list of known hosts. [ 21.569048][ T28] audit: type=1400 audit(1743531669.599:66): avc: denied { mounton } for pid=280 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.570424][ T280] cgroup: Unknown subsys name 'net' [ 21.591558][ T28] audit: type=1400 audit(1743531669.599:67): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.618894][ T28] audit: type=1400 audit(1743531669.639:68): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.619115][ T280] cgroup: Unknown subsys name 'devices' [ 21.767722][ T280] cgroup: Unknown subsys name 'hugetlb' [ 21.773594][ T280] cgroup: Unknown subsys name 'rlimit' [ 21.878321][ T28] audit: type=1400 audit(1743531669.909:69): avc: denied { setattr } for pid=280 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.903412][ T28] audit: type=1400 audit(1743531669.909:70): avc: denied { mounton } for pid=280 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.913546][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.930752][ T28] audit: type=1400 audit(1743531669.909:71): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.963735][ T28] audit: type=1400 audit(1743531669.979:72): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.989446][ T28] audit: type=1400 audit(1743531669.979:73): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.020094][ T28] audit: type=1400 audit(1743531670.049:74): avc: denied { read } for pid=280 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.045857][ T28] audit: type=1400 audit(1743531670.049:75): avc: denied { open } for pid=280 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.046157][ T280] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.956001][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.962878][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.970337][ T290] device bridge_slave_0 entered promiscuous mode [ 22.983131][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.990171][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.997749][ T292] device bridge_slave_0 entered promiscuous mode [ 23.014934][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.021848][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.029207][ T290] device bridge_slave_1 entered promiscuous mode [ 23.044022][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.051602][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.059542][ T292] device bridge_slave_1 entered promiscuous mode [ 23.088224][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.095653][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.103215][ T291] device bridge_slave_0 entered promiscuous mode [ 23.124785][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.134228][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.141529][ T291] device bridge_slave_1 entered promiscuous mode [ 23.190568][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.197567][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.205043][ T294] device bridge_slave_0 entered promiscuous mode [ 23.227524][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.234648][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.241945][ T294] device bridge_slave_1 entered promiscuous mode [ 23.259412][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.266439][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.273789][ T293] device bridge_slave_0 entered promiscuous mode [ 23.294626][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.301496][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.309055][ T293] device bridge_slave_1 entered promiscuous mode [ 23.495345][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.504895][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.512633][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.520147][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.544546][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.551417][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.558602][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.565588][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.575168][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.582236][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.590941][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.597904][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.607989][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.615112][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.622452][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.629727][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.669742][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.676688][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.688002][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.694968][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.731995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.739728][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.747360][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.755661][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.762751][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.770107][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.778074][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.785528][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.792578][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.799910][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.807138][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.825187][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.834297][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.841427][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.849100][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.857323][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.864204][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.871358][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.879483][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.887431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.895690][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.902677][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.918645][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.935912][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.945388][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.952375][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.960038][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.968746][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.975791][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.999347][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.007813][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.016352][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.026212][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.035533][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.047037][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.057197][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.066287][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.074909][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.082052][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.089689][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.098393][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.106952][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.113967][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.121517][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.130391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.140489][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.148430][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.156446][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.164794][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.173283][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.193494][ T292] device veth0_vlan entered promiscuous mode [ 24.207724][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.225103][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.235841][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.244715][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.253539][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.262251][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.270465][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.278786][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.287216][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.295504][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.303607][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.311452][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.342821][ T294] device veth0_vlan entered promiscuous mode [ 24.351005][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.362731][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.371082][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.378989][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.386871][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.394979][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.402935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.411233][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.419337][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.427982][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.436365][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.443214][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.450504][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.458759][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.467093][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.473927][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.485039][ T292] device veth1_macvtap entered promiscuous mode [ 24.500096][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.508694][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.516817][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.525154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.533291][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.541545][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.554634][ T291] device veth0_vlan entered promiscuous mode [ 24.567093][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.575128][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.583116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.591305][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.600219][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.608689][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.623030][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.630471][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.638059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.646607][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.661317][ T294] device veth1_macvtap entered promiscuous mode [ 24.678033][ T291] device veth1_macvtap entered promiscuous mode [ 24.686202][ T290] device veth0_vlan entered promiscuous mode [ 24.695142][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.703276][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.711557][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.719754][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.741869][ T290] device veth1_macvtap entered promiscuous mode [ 24.752060][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.760608][ T292] request_module fs-gadgetfs succeeded, but still no fs? [ 24.768664][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.776774][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.784690][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.793071][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.801732][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.810108][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.818360][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.826658][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.834936][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.847859][ T293] device veth0_vlan entered promiscuous mode [ 24.854722][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.900300][ T293] device veth1_macvtap entered promiscuous mode [ 24.908746][ T319] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.920174][ T321] loop3: detected capacity change from 0 to 512 [ 24.924922][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.939486][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.947324][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.954961][ T321] EXT4-fs: Ignoring removed oldalloc option [ 24.962046][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.965734][ T321] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 24.971418][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.991856][ T321] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 25.002371][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.012881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.015978][ T321] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 25.021819][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.034056][ T321] EXT4-fs (loop3): 1 truncate cleaned up [ 25.042766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.047801][ T321] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 25.091407][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.117873][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.144638][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.153853][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.167579][ T291] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 25.186693][ T337] loop0: detected capacity change from 0 to 512 [ 25.216999][ T337] ======================================================= [ 25.216999][ T337] WARNING: The mand mount option has been deprecated and [ 25.216999][ T337] and is ignored by this kernel. Remove the mand [ 25.216999][ T337] option from the mount to silence this warning. [ 25.216999][ T337] ======================================================= [ 25.253495][ T291] EXT4-fs (loop3): unmounting filesystem. [ 25.263505][ T341] loop2: detected capacity change from 0 to 512 [ 25.263617][ T337] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 25.272291][ T341] EXT4-fs: Ignoring removed bh option [ 25.288563][ T341] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1800c018, mo2=0002] [ 25.296375][ T337] EXT4-fs (loop0): 1 truncate cleaned up [ 25.296401][ T337] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 25.311700][ T341] EXT4-fs (loop2): 1 truncate cleaned up [ 25.321160][ T341] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 25.342054][ T347] loop4: detected capacity change from 0 to 512 [ 25.355217][ T292] EXT4-fs (loop0): unmounting filesystem. [ 25.363846][ T346] loop3: detected capacity change from 0 to 512 [ 25.370644][ T293] EXT4-fs (loop2): unmounting filesystem. [ 25.378430][ T347] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 25.389130][ T346] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.7: inode #1: comm syz.3.7: iget: illegal inode # [ 25.414688][ T346] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.7: error while reading EA inode 1 err=-117 [ 25.432430][ T353] loop2: detected capacity change from 0 to 512 [ 25.433773][ T354] loop0: detected capacity change from 0 to 512 [ 25.438994][ T346] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.7: inode #1: comm syz.3.7: iget: illegal inode # [ 25.448741][ T354] EXT4-fs: Ignoring removed oldalloc option [ 25.460523][ T353] EXT4-fs: Ignoring removed oldalloc option [ 25.470501][ T354] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 25.470564][ T346] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.7: error while reading EA inode 1 err=-117 [ 25.480921][ T353] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 25.514698][ T346] EXT4-fs (loop3): 1 orphan inode deleted [ 25.533154][ T346] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 25.549700][ T357] loop1: detected capacity change from 0 to 512 [ 25.572756][ T357] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 25.575276][ T353] loop2: detected capacity change from 0 to 512 [ 25.618331][ T353] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 25.681019][ T353] EXT4-fs error (device loop2): ext4_lookup:1858: inode #14: comm syz.2.11: unexpected EA_INODE flag [ 25.946895][ T363] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.7: invalid indirect mapped block 234881024 (level 0) [ 25.961647][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.129788][ T367] loop4: detected capacity change from 0 to 512 [ 26.136701][ T367] EXT4-fs: Ignoring removed oldalloc option [ 26.143183][ T367] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 26.192662][ T367] loop4: detected capacity change from 0 to 512 [ 26.232838][ T367] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 26.245175][ T291] EXT4-fs (loop3): unmounting filesystem. [ 26.254344][ T303] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.271054][ T367] EXT4-fs error (device loop4): ext4_lookup:1858: inode #14: comm syz.4.12: unexpected EA_INODE flag [ 26.287184][ T373] loop1: detected capacity change from 0 to 512 [ 26.294088][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.294204][ T373] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 26.310436][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.324517][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 26.337548][ T39] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 26.347112][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.357938][ T39] usb 1-1: config 0 descriptor?? [ 26.445396][ T303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.456322][ T303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.466966][ T303] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 26.479769][ T303] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 26.489186][ T303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.497820][ T303] usb 3-1: config 0 descriptor?? [ 26.532497][ T378] loop1: detected capacity change from 0 to 256 [ 26.542746][ T378] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x780881e4, utbl_chksum : 0xe619d30d) [ 26.544208][ T317] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.574273][ T297] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.583211][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 26.583226][ T28] audit: type=1400 audit(1743531674.609:144): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 26.611621][ T28] audit: type=1400 audit(1743531674.639:145): avc: denied { write } for pid=290 comm="syz-executor" name="file0" dev="loop1" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.634234][ T28] audit: type=1400 audit(1743531674.639:146): avc: denied { remove_name } for pid=290 comm="syz-executor" name="file0" dev="loop1" ino=1048601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.658457][ T28] audit: type=1400 audit(1743531674.639:147): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="loop1" ino=1048601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.681763][ T28] audit: type=1400 audit(1743531674.639:148): avc: denied { rmdir } for pid=290 comm="syz-executor" name="file0" dev="loop1" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.753683][ T290] syz-executor (290) used greatest stack depth: 21488 bytes left [ 26.765824][ T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.777423][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.779635][ T39] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 26.788421][ T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.806365][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.810403][ T39] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 26.816049][ T297] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 26.849087][ T317] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 26.858299][ T317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.866787][ T297] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 26.876202][ T317] usb 4-1: config 0 descriptor?? [ 26.887645][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.896711][ T297] usb 5-1: config 0 descriptor?? [ 26.906899][ T303] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 26.921038][ T303] plantronics 0003:047F:FFFF.0002: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 27.019201][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.026554][ T381] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.033960][ T381] device bridge_slave_0 entered promiscuous mode [ 27.041384][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.048784][ T381] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.056829][ T381] device bridge_slave_1 entered promiscuous mode [ 27.133165][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.140323][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.147468][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.154450][ T381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.188569][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.196648][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.205336][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.213206][ T387] EXT4-fs (loop2): shut down requested (1) [ 27.222657][ T28] audit: type=1400 audit(1743531675.259:149): avc: denied { bind } for pid=352 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.224972][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.242568][ T28] audit: type=1400 audit(1743531675.259:150): avc: denied { write } for pid=352 comm="syz.2.11" path="socket:[16763]" dev="sockfs" ino=16763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.251164][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.280876][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.289268][ T317] usbhid 4-1:0.0: can't add hid device: -71 [ 27.297575][ T317] usbhid: probe of 4-1:0.0 failed with error -71 [ 27.305323][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.314014][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.316749][ T297] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 27.320961][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.330270][ T317] usb 4-1: USB disconnect, device number 2 [ 27.344938][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.352895][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.372547][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.388225][ T381] device veth0_vlan entered promiscuous mode [ 27.395975][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.407256][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.418473][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.436704][ T328] device bridge_slave_1 left promiscuous mode [ 27.442897][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.450444][ T328] device bridge_slave_0 left promiscuous mode [ 27.456518][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.464661][ T328] device veth1_macvtap left promiscuous mode [ 27.470624][ T328] device veth0_vlan left promiscuous mode [ 27.563647][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.573389][ T381] device veth1_macvtap entered promiscuous mode [ 27.584601][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.595256][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.615280][ T388] EXT4-fs (loop4): shut down requested (1) [ 27.638396][ T390] loop5: detected capacity change from 0 to 512 [ 27.648906][ T390] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.19: inode #1: comm syz.5.19: iget: illegal inode # [ 27.662736][ T390] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.19: error while reading EA inode 1 err=-117 [ 27.675097][ T390] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.19: inode #1: comm syz.5.19: iget: illegal inode # [ 27.688201][ T390] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.19: error while reading EA inode 1 err=-117 [ 27.700881][ T390] EXT4-fs (loop5): 1 orphan inode deleted [ 27.706802][ T390] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 27.839052][ T394] loop3: detected capacity change from 0 to 4096 [ 27.849693][ T394] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 27.870851][ T291] EXT4-fs (loop3): unmounting filesystem. [ 27.973766][ T396] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.19: invalid indirect mapped block 234881024 (level 0) [ 28.147945][ T400] loop3: detected capacity change from 0 to 512 [ 28.199710][ T400] EXT4-fs: Ignoring removed bh option [ 28.202440][ C0] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1 [ 28.208860][ T400] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1800c018, mo2=0002] [ 28.221848][ T400] EXT4-fs (loop3): 1 truncate cleaned up [ 28.227716][ T400] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 28.247231][ T297] plantronics 0003:047F:FFFF.0003: hiddev98,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 28.250146][ T39] usb 3-1: USB disconnect, device number 2 [ 28.261474][ T297] usb 5-1: USB disconnect, device number 2 [ 28.283449][ T291] EXT4-fs (loop3): unmounting filesystem. [ 29.217274][ T381] EXT4-fs (loop5): unmounting filesystem. [ 29.233966][ T28] audit: type=1400 audit(1743531677.259:151): avc: denied { read write } for pid=410 comm="syz.5.23" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.239638][ T411] input: syz0 as /devices/virtual/input/input4 [ 29.261896][ T28] audit: type=1400 audit(1743531677.259:152): avc: denied { open } for pid=410 comm="syz.5.23" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.286647][ T28] audit: type=1400 audit(1743531677.269:153): avc: denied { ioctl } for pid=410 comm="syz.5.23" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.495040][ T293] EXT4-fs (loop2): unmounting filesystem. [ 29.537069][ T419] loop3: detected capacity change from 0 to 512 [ 29.543414][ T419] EXT4-fs: Ignoring removed oldalloc option [ 29.551390][ T294] EXT4-fs (loop4): unmounting filesystem. [ 29.557745][ T293] ------------[ cut here ]------------ [ 29.563124][ T293] WARNING: CPU: 1 PID: 293 at fs/inode.c:332 drop_nlink+0xc1/0x110 [ 29.564724][ T419] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 29.571022][ T293] Modules linked in: [ 29.584423][ T293] CPU: 1 PID: 293 Comm: syz-executor Not tainted 6.1.129-syzkaller-00054-g3e6e324f5b47 #0 [ 29.594240][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 29.604104][ T293] RIP: 0010:drop_nlink+0xc1/0x110 [ 29.609038][ T293] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 57 d0 ef ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 2f 21 a8 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 29.618064][ T424] loop4: detected capacity change from 0 to 256 [ 29.628575][ T293] RSP: 0000:ffffc90000ef7bf0 EFLAGS: 00010293 [ 29.640449][ T293] RAX: ffffffff81cd7661 RBX: 0000000000000000 RCX: ffff88810e040000 [ 29.648451][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.650507][ T424] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x780881e4, utbl_chksum : 0xe619d30d) [ 29.656396][ T293] RBP: ffffc90000ef7c18 R08: ffffffff81cd75e4 R09: 0000000000000003 [ 29.676112][ T293] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 [ 29.683868][ T293] R13: 1ffff11026cfe184 R14: ffff8881367f0bd8 R15: ffff8881367f0c20 [ 29.687645][ T419] EXT4-fs (loop3): 1 truncate cleaned up [ 29.691805][ T293] FS: 000055558798e500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 29.698347][ T419] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 29.706020][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.706042][ T293] CR2: 00005555879b14e8 CR3: 000000012e7f3000 CR4: 00000000003506a0 [ 29.730347][ T293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.738161][ T293] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.746055][ T293] Call Trace: [ 29.749148][ T293] [ 29.751923][ T293] ? show_regs+0x58/0x60 [ 29.756046][ T293] ? __warn+0x160/0x3d0 [ 29.760017][ T293] ? drop_nlink+0xc1/0x110 [ 29.764344][ T293] ? report_bug+0x4d5/0x7d0 [ 29.768592][ T293] ? drop_nlink+0xc1/0x110 [ 29.772836][ T293] ? handle_bug+0x41/0x70 [ 29.777347][ T293] ? exc_invalid_op+0x1b/0x50 [ 29.781932][ T293] ? asm_exc_invalid_op+0x1b/0x20 [ 29.786773][ T293] ? drop_nlink+0x44/0x110 [ 29.791031][ T293] ? drop_nlink+0xc1/0x110 [ 29.795346][ T293] ? drop_nlink+0xc1/0x110 [ 29.799584][ T293] shmem_rmdir+0x59/0x90 [ 29.803650][ T293] vfs_rmdir+0x398/0x500 [ 29.807890][ T293] incfs_kill_sb+0x113/0x230 [ 29.812277][ T293] deactivate_locked_super+0xad/0x110 [ 29.817538][ T293] deactivate_super+0xbe/0xf0 [ 29.821999][ T293] cleanup_mnt+0x485/0x510 [ 29.826378][ T293] ? user_path_at_empty+0x14e/0x1a0 [ 29.831440][ T293] __cleanup_mnt+0x19/0x20 [ 29.835730][ T293] task_work_run+0x24d/0x2e0 [ 29.840111][ T293] ? task_work_cancel+0x2e0/0x2e0 [ 29.844996][ T293] ? __x64_sys_umount+0x122/0x170 [ 29.849826][ T293] exit_to_user_mode_loop+0x94/0xa0 [ 29.855015][ T293] exit_to_user_mode_prepare+0x5a/0xa0 [ 29.860238][ T293] syscall_exit_to_user_mode+0x26/0x130 [ 29.865650][ T293] do_syscall_64+0x47/0xb0 [ 29.869978][ T293] ? clear_bhb_loop+0x55/0xb0 [ 29.874524][ T293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 29.880202][ T293] RIP: 0033:0x7f6d5798e497 [ 29.884499][ T293] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 29.904034][ T293] RSP: 002b:00007ffc354968d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 29.912296][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6d5798e497 [ 29.920083][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc35496990 [ 29.927918][ T293] RBP: 00007ffc35496990 R08: 0000000000000000 R09: 0000000000000000 [ 29.935870][ T293] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc35497a20 [ 29.943667][ T293] R13: 00007f6d57a0e08c R14: 0000000000007344 R15: 00007ffc35497a60 [ 29.951523][ T293] [ 29.954377][ T293] ---[ end trace 0000000000000000 ]--- [ 29.959750][ T293] ================================================================== [ 29.960519][ T303] usb 1-1: USB disconnect, device number 2 [ 29.967717][ T293] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 29.967751][ T293] Write of size 4 at addr 0000000000000170 by task syz-executor/293 [ 29.967767][ T293] [ 29.967785][ T293] CPU: 0 PID: 293 Comm: syz-executor Tainted: G W 6.1.129-syzkaller-00054-g3e6e324f5b47 #0 [ 30.000703][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 30.010683][ T293] Call Trace: [ 30.013804][ T293] [ 30.016580][ T293] dump_stack_lvl+0x151/0x1b7 [ 30.021342][ T293] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 30.026631][ T293] ? _printk+0xd1/0x111 [ 30.030621][ T293] print_report+0xe1/0x4e0 [ 30.034881][ T293] ? __virt_addr_valid+0x59/0x2f0 [ 30.039767][ T293] ? kasan_addr_to_slab+0xd/0x80 [ 30.044513][ T293] ? ihold+0x20/0x60 [ 30.048246][ T293] kasan_report+0x13c/0x170 [ 30.052587][ T293] ? ihold+0x20/0x60 [ 30.056313][ T293] kasan_check_range+0x294/0x2a0 [ 30.061087][ T293] __kasan_check_write+0x14/0x20 [ 30.065862][ T293] ihold+0x20/0x60 [ 30.069419][ T293] vfs_rmdir+0x268/0x500 [ 30.073501][ T293] incfs_kill_sb+0x113/0x230 [ 30.077934][ T293] deactivate_locked_super+0xad/0x110 [ 30.083231][ T293] deactivate_super+0xbe/0xf0 [ 30.087731][ T293] cleanup_mnt+0x485/0x510 [ 30.091982][ T293] ? user_path_at_empty+0x14e/0x1a0 [ 30.097051][ T293] __cleanup_mnt+0x19/0x20 [ 30.101279][ T293] task_work_run+0x24d/0x2e0 [ 30.105783][ T293] ? task_work_cancel+0x2e0/0x2e0 [ 30.110644][ T293] ? __x64_sys_umount+0x122/0x170 [ 30.115509][ T293] exit_to_user_mode_loop+0x94/0xa0 [ 30.120540][ T293] exit_to_user_mode_prepare+0x5a/0xa0 [ 30.125835][ T293] syscall_exit_to_user_mode+0x26/0x130 [ 30.131213][ T293] do_syscall_64+0x47/0xb0 [ 30.135467][ T293] ? clear_bhb_loop+0x55/0xb0 [ 30.139988][ T293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.145707][ T293] RIP: 0033:0x7f6d5798e497 [ 30.150046][ T293] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 30.169490][ T293] RSP: 002b:00007ffc354968d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 30.177737][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6d5798e497 [ 30.185608][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc35496990 [ 30.193359][ T293] RBP: 00007ffc35496990 R08: 0000000000000000 R09: 0000000000000000 [ 30.201381][ T293] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc35497a20 [ 30.209192][ T293] R13: 00007f6d57a0e08c R14: 0000000000007344 R15: 00007ffc35497a60 [ 30.217207][ T293] [ 30.220055][ T293] ================================================================== [ 30.237982][ T291] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 30.256213][ T293] Disabling lock debugging due to kernel taint [ 30.263101][ T291] EXT4-fs (loop3): unmounting filesystem. [ 30.268818][ T293] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 30.276442][ T293] #PF: supervisor write access in kernel mode [ 30.282337][ T293] #PF: error_code(0x0002) - not-present page [ 30.288157][ T293] PGD 131b34067 P4D 131b34067 PUD 0 [ 30.293278][ T293] Oops: 0002 [#1] PREEMPT SMP KASAN [ 30.298313][ T293] CPU: 1 PID: 293 Comm: syz-executor Tainted: G B W 6.1.129-syzkaller-00054-g3e6e324f5b47 #0 [ 30.309506][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 30.319513][ T293] RIP: 0010:ihold+0x25/0x60 [ 30.323853][ T293] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 01 19 a8 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 00 c8 ef ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 84 1c a8 [ 30.343387][ T293] RSP: 0018:ffffc90000ef7c30 EFLAGS: 00010246 [ 30.349290][ T293] RAX: ffff88810e040000 RBX: 0000000000000001 RCX: ffff88810e040000 [ 30.357109][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.364905][ T293] RBP: ffffc90000ef7c40 R08: ffffffff8144b443 R09: fffffbfff0f6e8fd [ 30.372726][ T293] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11026cd6271 [ 30.380629][ T293] R13: ffff8881103ae440 R14: 0000000000000000 R15: 1ffff11022075c8e [ 30.388451][ T293] FS: 000055558798e500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.397290][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.403744][ T293] CR2: 0000000000000170 CR3: 000000012e7f3000 CR4: 00000000003506a0 [ 30.411672][ T293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.419442][ T293] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.427433][ T293] Call Trace: [ 30.430546][ T293] [ 30.433339][ T293] ? __die_body+0x62/0xb0 [ 30.437488][ T293] ? __die+0x7e/0x90 [ 30.441308][ T293] ? page_fault_oops+0x7f9/0xa90 [ 30.446166][ T293] ? vprintk_default+0x26/0x30 [ 30.450767][ T293] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 30.456149][ T293] ? add_taint+0x44/0xe0 [ 30.460313][ T293] ? panic+0x667/0x667 [ 30.464255][ T293] ? exc_page_fault+0x529/0x6d0 [ 30.468997][ T293] ? asm_exc_page_fault+0x27/0x30 [ 30.473852][ T293] ? add_taint+0x93/0xe0 [ 30.477936][ T293] ? ihold+0x25/0x60 [ 30.481669][ T293] vfs_rmdir+0x268/0x500 [ 30.485752][ T293] incfs_kill_sb+0x113/0x230 [ 30.490182][ T293] deactivate_locked_super+0xad/0x110 [ 30.495389][ T293] deactivate_super+0xbe/0xf0 [ 30.499890][ T293] cleanup_mnt+0x485/0x510 [ 30.504148][ T293] ? user_path_at_empty+0x14e/0x1a0 [ 30.509385][ T293] __cleanup_mnt+0x19/0x20 [ 30.513639][ T293] task_work_run+0x24d/0x2e0 [ 30.518066][ T293] ? task_work_cancel+0x2e0/0x2e0 [ 30.522945][ T293] ? __x64_sys_umount+0x122/0x170 [ 30.527793][ T293] exit_to_user_mode_loop+0x94/0xa0 [ 30.532922][ T293] exit_to_user_mode_prepare+0x5a/0xa0 [ 30.538218][ T293] syscall_exit_to_user_mode+0x26/0x130 [ 30.543589][ T293] do_syscall_64+0x47/0xb0 [ 30.547842][ T293] ? clear_bhb_loop+0x55/0xb0 [ 30.552443][ T293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.558178][ T293] RIP: 0033:0x7f6d5798e497 [ 30.562510][ T293] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 30.581973][ T293] RSP: 002b:00007ffc354968d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 30.590200][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6d5798e497 [ 30.598016][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc35496990 [ 30.605824][ T293] RBP: 00007ffc35496990 R08: 0000000000000000 R09: 0000000000000000 [ 30.613642][ T293] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc35497a20 [ 30.621535][ T293] R13: 00007f6d57a0e08c R14: 0000000000007344 R15: 00007ffc35497a60 [ 30.629433][ T293] [ 30.632289][ T293] Modules linked in: [ 30.636043][ T293] CR2: 0000000000000170 [ 30.640018][ T293] ---[ end trace 0000000000000000 ]--- [ 30.645744][ T293] RIP: 0010:ihold+0x25/0x60 [ 30.650176][ T293] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 01 19 a8 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 00 c8 ef ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 84 1c a8 [ 30.669791][ T293] RSP: 0018:ffffc90000ef7c30 EFLAGS: 00010246 [ 30.675866][ T293] RAX: ffff88810e040000 RBX: 0000000000000001 RCX: ffff88810e040000 [ 30.683675][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.691496][ T293] RBP: ffffc90000ef7c40 R08: ffffffff8144b443 R09: fffffbfff0f6e8fd [ 30.699302][ T293] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11026cd6271 [ 30.707110][ T293] R13: ffff8881103ae440 R14: 0000000000000000 R15: 1ffff11022075c8e [ 30.714926][ T293] FS: 000055558798e500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.723689][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.730113][ T293] CR2: 0000000000000170 CR3: 000000012e7f3000 CR4: 00000000003506a0 [ 30.738012][ T293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.745817][ T293] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.753632][ T293] Kernel panic - not syncing: Fatal exception [ 30.759864][ T293] Kernel Offset: disabled [ 30.763994][ T293] Rebooting in 86400 seconds..