last executing test programs: 22m19.170824474s ago: executing program 3 (id=1420): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 22m19.067046818s ago: executing program 3 (id=1422): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000026c0), 0x1, 0x36b, &(0x7f0000000a00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r2, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x78) 22m19.042986519s ago: executing program 3 (id=1424): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x2, &(0x7f0000000000)={0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)={0x800, 0x1e, 0x10, 0x70bd2d, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x7e2, 0x18, 0x0, 0x1, [@nested={0x24, 0x69, 0x0, 0x1, [@typed={0x20, 0x102, 0x0, 0x0, @binary="e721c09744ab0cefe6df6b490b33cdfa3e9481eaa9cc423015e4f173"}]}, @nested={0x1a5, 0xc7, 0x0, 0x1, [@generic="39c15d372b1820a81f757752ddfc4421fde8df55a41abbf939bf54756fa8ff21d5ee6bc7d004bfa5869ccdf63739259765cdbc7fc5b1ea101b45e358674dd575b2d1b2ef9da226d20f5f01b0ff3f3a0008a21b1151fe88486f751cf309d107031b9da8e65db2d02972042385473be6fbb888bfddf8e30dd0061836ff48b4cfbc49b1aebb356c359e93c53e644f10359c8d60f6eb75d4", @generic="dfe79429e12efb8f962baa847b193824e63912c7ffab57e8033dd1c064ec801482e83541d8801965335d1ec28af5481e8e5464a1cc79349f54928f64872051119c2c341e4d1de57cc40c5523a72cd8ec795fade062212743dbf4786884aa7302dddcdb6a2ab1bd93eceb55483a9c43ec38def554faed1ec3f2e7f1aa0b2bbf29ac3c444ada7c56ad19ddcc53ab5d66c5e5c3c17dece9f9f0671f6fcea8131644316d309e8ecd69", @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0xa8}, @generic="05c09fffe6ae52442a7a63c7f2bc711b7009d11a59ff0a02df61ed3d71e092f981b4da402270968903bf901cf224a112549057463f4e5176d8bd26fb0c8b5cb2f2966a09e0a09596", @nested={0x4, 0xe7}]}, @generic="d9d61c9d54bdc61e13151ec94351a865d3a965f2d7ddba6a540f2b7e42352cb05e11f1b29c571be83d54c1909a2da25a621fdb3048c5a9774a9444e7a475e2f00f97554f5bcb93e0b597c1f8f329dff1259d94", @generic="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", @nested={0x4bf, 0x100, 0x0, 0x1, [@nested={0x141, 0x107, 0x0, 0x1, [@typed={0x8, 0x11f, 0x0, 0x0, @u32=0xfe9f}, @nested={0x4}, @typed={0x8, 0x133, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x4b, 0x0, 0x0, @pid}, @nested={0x4, 0x14b}, @generic="1ba74266da7b1f09e024de879d532226ec2aa5055f898cdaf03a4679f4768d32589a50533191b7ae49ee9691619cf4fa3d11ec2bf72c5fbf07932b8829ec0cdf32ecc8ac998831065696b3b21809ada1331f3ce3a1ead84ef1d1ea40ae1ab5036548c35c2ba11cddff25f8a655882a4ec02b", @nested={0x4, 0xc6}, @generic="702c59c712526c6383bfd300d14fa9fe7cb32ed3fb794e3f5d1c0497ecc680639dd342a0245572f7a6ee42722b7fb3650839cd142541c9a1c148039bfb8038419520aa5321678ef46aa6b0a1e5cd5b73f4adde75f04cb718d7be8bd4d9e403bff296b668833a57bf3a9394cd0a841968fdf4b5c3884586a8514d1dbf703a8c182215503a7c4e395ecc9ad06310915cd714798ca0252f241c57e617961492eb89a9d7acdba733a9"]}, @nested={0x1a0, 0x4c, 0x0, 0x1, [@generic="0d8307f6911103005f5191b333e18aadcb393228eb0a6e877e3e6425f073208f3b66e8729057516264486e2d1a2c7f46018b0fc90de87f2674c753b77f54320b79c3354b5175a70692728e6912fe1645ac3a642d3a3a1fca98ae5c514ae7777bdcfc68d6ef871df7e024f1b677d075339e8ec74ab1af9977537a7dbfda0c1027abdec7aed9b6d78ba34be7a516", @nested={0x4, 0x55}, @nested={0x4, 0x6}, @nested={0x4, 0xb8}, @nested={0x4, 0x8b}, @generic="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"]}, @generic="b3dc0e5a36ac9c5502df36232ca458cea35c9b52d34bb415f3e522cbc2fc59518fa7253ae85303ec8386ac30734b9a8cd3c4d5df50e8585bd621053cab4d0548c3680339177395349c1322e2c4254d6c17d2eaa0d97a0b89d74a404a2727e85f8e44e6e59f4858cf564150ecda65db51eec4b7200a6d549ea84d4564d03499589a30839a589d08e764b62975ea502f68df0b63ea1faaa9", @nested={0x12, 0x53, 0x0, 0x1, [@nested={0x4, 0x6a}, @nested={0x4, 0xc6}, @nested={0x4, 0xd8}, @generic="3ed8"]}, @nested={0x12c, 0x126, 0x0, 0x1, [@generic="e38c27c612ce57fd940262d281efd693df0a970a4642bd668179ac54fc245d04c1bef81e8fe6fa289bec72c949788749e8f24a3da83be23161c74d975ffd8dbdf4adff17d2c2b94233544f36965136522a5eeefffc98fc4225d1c039a759", @generic="cc6f95fa8cb994e8c73b6606e4e3ddbf31d82e73d0a231ca9ceb5443ecda67963e2682eee53423977dcc7302b66d8ce9cdac02a7f6ac3328654d0d92fb92ef85e74744057196962ef5abda524139", @nested={0x4, 0x17}, @typed={0x14, 0x107, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x74}, @typed={0x4, 0x57}, @generic="355a275be7fbc0432280c9f157708b98e85301c8c4921867f718927778bb4dece196178e0010fc722719d71b03c42217a9cdd82f249f528417893fa41d1375597986bf761669fe0277c9592472390867443add3350c9ccd6", @nested={0x4, 0x66}]}]}]}]}, 0x800}, 0x1, 0x0, 0x0, 0x4014}, 0x0) fsmount(r2, 0x1, 0x81) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) io_setup(0x7, &(0x7f0000002400)=0x0) io_submit(r6, 0x0, &(0x7f0000000340)) 22m18.871444866s ago: executing program 3 (id=1425): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x110) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000340)='securityfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000480)=""/88, 0x6}, {&(0x7f0000000380)=""/213, 0x10d}], 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4}, &(0x7f0000044000)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x8, 0x20, 0x7fff, 0x0, {{0x9, 0x4, 0x3, 0x0, 0x24, 0x64, 0x0, 0xb8, 0x4, 0x0, @local, @multicast1, {[@noop, @noop, @end, @lsrr={0x83, 0xb, 0x53, [@private=0xa010100, @multicast2]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70600000000000085000000170000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x81) 22m17.935048417s ago: executing program 3 (id=1430): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000008900)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$eJzs3U9rI2UcB/Bf2vTv2qbquroL4oNeFCFue/DkpcguiAWl2gUVhFmbamialCYUIuLWkyfBlyHq0ZsgvoFevHgWBJFePO5BHGmT1aZJu7ptU5HP5zIPzzzfeWYyzMCE+TF7L32+sb7WLK9lrRgpFKK4ORbFuylSjMRodOzEc7d+/OnJN956+9XFpaUbyyndXHxz/sWU0uxT373z0ddPf9+6dOub2W8nYnfu3b3fFn7evbJ7de+Pr6LaTNVmqjdaKUu3G41WdrtWSavV5no5pddrlaxZSdV6s7LVs36t1tjcbKesvjozvblVaTZTVm+n9Uo7tQqptdVO2ftZtZ7K5XKamQ5OY+XLu3meR+T5WIxHnuf5VEzHpXgoZmI2SjEXD8cj8WhcjsfiSjweT8TVg1EXvd8AAAAAAAAAAAAAAAAAAADw/3Kf+v+C+n8AAAAAAAAAAAAAAAAAAAA4f0fr/4sRvv8PAAAAAAAAAAAAAAAAAAAAQ3af7/8fqf9/Xv0/AAAAAAAAAAAAAAAAAAAAnIfJzmI5pcmIjU+3V7ZXOstO/+JaVKMWlbgepfg9Dqr/Ozrtm68s3bieDszFCxt3uvk72yujvfn5sVLMFQbm5zv51JufiOnD+YUoxeXB8y8MzE/Gs8/s5z/p5MtRih/ei0bUYjWi0D36g/zH8ym9/NrSVG/+2v64Y42e82kBAACAs1ROf+l/ft/pDhq4vrOq+3yeuiMLJ/w/cOT5vBjXihd11NzTbH+4ntVqla0HbIwfv53x0225r1GIiCwO98xO/7K8P/mZTfGgjdGhTjp28phTnNMo/gd+zDNo/PrFoZ7JGO7sI91LIqvt3z//WSp28vxcd2zgxThxUur4e0ZhCPclhuPvk37RewIAAAAAAAAAAMC/MfDtv6mI6Hsf8IO+nnuvh/fG+7d8/OyfDeEIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD///ME0UM=") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) 22m17.522232944s ago: executing program 3 (id=1431): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/129, 0x81}], 0x1, 0x2, 0x1) 22m17.072451844s ago: executing program 32 (id=1431): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/129, 0x81}], 0x1, 0x2, 0x1) 18.504648435s ago: executing program 4 (id=10002): futex(&(0x7f0000000000)=0x80000, 0x5, 0x0, 0x0, &(0x7f0000000140)=0x1, 0xc5000002) 18.489532635s ago: executing program 4 (id=10003): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000a80)=[@out_dx={0xaa, 0x28, {0xcdae, 0x6, 0x4}}, @wrmsr={0x1e, 0x20, {0xb8d, 0x3}}, @wrmsr={0x1e, 0x20, {0x926, 0x3}}, @wr_crn={0x46, 0x20, {0x4, 0x8}}, @in_dx={0x82, 0x20, {0x15cb}}, @in_dx={0x82, 0x20, {0x2b56, 0x1}}, @wr_crn={0x46, 0x20, {0x0, 0x5}}, @wr_drn={0x6e, 0x20, {0x0, 0x4}}, @in_dx={0x82, 0x20, {0xce1e, 0x3}}, @code={0xa, 0x51, {"c4618565053e000000b805000000b9adcdbab40f01d941d1e9f0408020050f01f82e66400f3a416f01cc640fc73a3e66440f38820766b81c008ec8c4a2795823"}}, @wrmsr={0x1e, 0x20, {0x96c, 0xf9a3}}, @wr_drn={0x6e, 0x20, {0x7, 0x80000000}}, @out_dx={0xaa, 0x28, {0x40000000000ead1, 0x5, 0x4}}, @out_dx={0xaa, 0x28, {0xe1a0, 0x2, 0x6}}, @cpuid={0x14, 0x18, {0x40, 0x800}}, @in_dx={0x82, 0x20, {0x9504}}, @cpuid={0x14, 0x18, {0x302, 0x4}}, @rdmsr={0x32, 0x18, {0x864}}, @wr_drn={0x6e, 0x20, {0x4, 0xf4}}], 0x2ee}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18.175873479s ago: executing program 4 (id=10021): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 18.13626164s ago: executing program 4 (id=10022): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2925099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x8) 18.113400032s ago: executing program 4 (id=10023): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fc, &(0x7f0000000900)={'bond0\x00'}) 18.022892105s ago: executing program 4 (id=10024): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000b900000000000100010018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000308500000005000000bca900000000000035090100000000009500500000000006b702000000000000739af0ff00000000b5090200a3b00000dbaaf0fff10000002f8900000000000007080000f8ffffffbfa420000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000003608fffff3ffffff8500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.986077497s ago: executing program 33 (id=10024): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000b900000000000100010018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000308500000005000000bca900000000000035090100000000009500500000000006b702000000000000739af0ff00000000b5090200a3b00000dbaaf0fff10000002f8900000000000007080000f8ffffffbfa420000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000003608fffff3ffffff8500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.04566333s ago: executing program 1 (id=10220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "7180bbda"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008880}, 0x100) 5.194220676s ago: executing program 1 (id=10235): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x2, &(0x7f0000000000)={0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)={0x7f0, 0x1e, 0x10, 0x70bd2d, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x7d2, 0x18, 0x0, 0x1, [@nested={0x24, 0x69, 0x0, 0x1, [@typed={0x20, 0x102, 0x0, 0x0, @binary="e721c09744ab0cefe6df6b490b33cdfa3e9481eaa9cc423015e4f173"}]}, @nested={0x1a5, 0xc7, 0x0, 0x1, [@generic="39c15d372b1820a81f757752ddfc4421fde8df55a41abbf939bf54756fa8ff21d5ee6bc7d004bfa5869ccdf63739259765cdbc7fc5b1ea101b45e358674dd575b2d1b2ef9da226d20f5f01b0ff3f3a0008a21b1151fe88486f751cf309d107031b9da8e65db2d02972042385473be6fbb888bfddf8e30dd0061836ff48b4cfbc49b1aebb356c359e93c53e644f10359c8d60f6eb75d4", @generic="dfe79429e12efb8f962baa847b193824e63912c7ffab57e8033dd1c064ec801482e83541d8801965335d1ec28af5481e8e5464a1cc79349f54928f64872051119c2c341e4d1de57cc40c5523a72cd8ec795fade062212743dbf4786884aa7302dddcdb6a2ab1bd93eceb55483a9c43ec38def554faed1ec3f2e7f1aa0b2bbf29ac3c444ada7c56ad19ddcc53ab5d66c5e5c3c17dece9f9f0671f6fcea8131644316d309e8ecd69", @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0xa8}, @generic="05c09fffe6ae52442a7a63c7f2bc711b7009d11a59ff0a02df61ed3d71e092f981b4da402270968903bf901cf224a112549057463f4e5176d8bd26fb0c8b5cb2f2966a09e0a09596", @nested={0x4, 0xe7}]}, @generic="d9d61c9d54bdc61e13151ec94351a865d3a965f2d7ddba6a540f2b7e42352cb05e11f1b29c571be83d54c1909a2da25a621fdb3048c5a9774a9444e7a475e2f00f97554f5bcb93e0b597c1f8f329dff1259d94", @generic="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", @nested={0x4af, 0x100, 0x0, 0x1, [@nested={0x141, 0x107, 0x0, 0x1, [@typed={0x8, 0x11f, 0x0, 0x0, @u32=0xfe9f}, @nested={0x4}, @typed={0x8, 0x133, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x4b, 0x0, 0x0, @pid}, @nested={0x4, 0x14b}, @generic="1ba74266da7b1f09e024de879d532226ec2aa5055f898cdaf03a4679f4768d32589a50533191b7ae49ee9691619cf4fa3d11ec2bf72c5fbf07932b8829ec0cdf32ecc8ac998831065696b3b21809ada1331f3ce3a1ead84ef1d1ea40ae1ab5036548c35c2ba11cddff25f8a655882a4ec02b", @nested={0x4, 0xc6}, @generic="702c59c712526c6383bfd300d14fa9fe7cb32ed3fb794e3f5d1c0497ecc680639dd342a0245572f7a6ee42722b7fb3650839cd142541c9a1c148039bfb8038419520aa5321678ef46aa6b0a1e5cd5b73f4adde75f04cb718d7be8bd4d9e403bff296b668833a57bf3a9394cd0a841968fdf4b5c3884586a8514d1dbf703a8c182215503a7c4e395ecc9ad06310915cd714798ca0252f241c57e617961492eb89a9d7acdba733a9"]}, @nested={0x18f, 0x4c, 0x0, 0x1, [@generic="0d8307f6911103005f5191b333e18aadcb393228eb0a6e877e3e6425f073208f3b66e8729057516264486e2d1a2c7f46018b0fc90de87f2674c753b77f54320b79c3354b5175a70692728e6912fe1645ac3a642d3a3a1fca98ae5c514ae7777bdcfc68d6ef871df7e024f1b677d075339e8ec74ab1af9977537a7dbf", @nested={0x4, 0x55}, @nested={0x4, 0x6}, @nested={0x4, 0xb8}, @nested={0x4, 0x8b}, @generic="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"]}, @generic="b3dc0e5a36ac9c5502df36232ca458cea35c9b52d34bb415f3e522cbc2fc59518fa7253ae85303ec8386ac30734b9a8cd3c4d5df50e8585bd621053cab4d0548c3680339177395349c1322e2c4254d6c17d2eaa0d97a0b89d74a404a2727e85f8e44e6e59f4858cf564150ecda65db51eec4b7200a6d549ea84d4564d03499589a30839a589d08e764b62975ea502f68df0b63ea1faaa9", @nested={0x12, 0x53, 0x0, 0x1, [@nested={0x4, 0x6a}, @nested={0x4, 0xc6}, @nested={0x4, 0xd8}, @generic="3ed8"]}, @nested={0x12c, 0x126, 0x0, 0x1, [@generic="e38c27c612ce57fd940262d281efd693df0a970a4642bd668179ac54fc245d04c1bef81e8fe6fa289bec72c949788749e8f24a3da83be23161c74d975ffd8dbdf4adff17d2c2b94233544f36965136522a5eeefffc98fc4225d1c039a759", @generic="cc6f95fa8cb994e8c73b6606e4e3ddbf31d82e73d0a231ca9ceb5443ecda67963e2682eee53423977dcc7302b66d8ce9cdac02a7f6ac3328654d0d92fb92ef85e74744057196962ef5abda524139", @nested={0x4, 0x17}, @typed={0x14, 0x107, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x74}, @typed={0x4, 0x57}, @generic="355a275be7fbc0432280c9f157708b98e85301c8c4921867f718927778bb4dece196178e0010fc722719d71b03c42217a9cdd82f249f528417893fa41d1375597986bf761669fe0277c9592472390867443add3350c9ccd6", @nested={0x4, 0x66}]}]}]}]}, 0x7f0}, 0x1, 0x0, 0x0, 0x4014}, 0x0) fsmount(r2, 0x1, 0x81) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r9, @ANYBLOB="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"], 0x1c8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x3, 0x2, 0x1, 0xc, 0x6, 0xe}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="96bacd8c0edb0f25a51000c018f99bbb050000000000000071116a0000000006851000000200000085000000000000009500000ba7b9166b66b100a50500000000f9cda2fa2708ba498f705b07fd340f079556abe230bad496c1582c8765b35bc7982c5ecd6db734325627588afdde8b347b6805cf4079c4a4051d5189eb416f143a3e9a366489ce1311aaec1a947b0c5c0beb3f68de029e069862bff56042623b842d68b1a5a57abff79080545a74a61a258e5f58ef4e11c9ec19f4faf7735a03b22122cb53f5c45ac453110ffd78"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x7, &(0x7f0000002400)=0x0) io_submit(r11, 0x0, &(0x7f0000000340)) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000001c0)={0x4, 0x7, '\x00', 0x33, 0x9}) 5.115558519s ago: executing program 5 (id=10236): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b1, &(0x7f0000000240)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 4.947357636s ago: executing program 5 (id=10237): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x20e, 0x126, 0x0, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0}, 0x50) 4.423203768s ago: executing program 5 (id=10240): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 2.815120304s ago: executing program 5 (id=10245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "7180bbda"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008880}, 0x100) 2.745943157s ago: executing program 1 (id=10246): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.268079198s ago: executing program 1 (id=10251): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8) sendmmsg$sock(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="74b17a07", 0x4}], 0x1}}], 0x1, 0x20000000) 1.263577849s ago: executing program 6 (id=10252): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000)="051b", 0x2, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x4bd0bdc5}], 0x1, 0x40000003, 0x0) 1.23684933s ago: executing program 6 (id=10253): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0xcc844, &(0x7f0000000180)={0xa, 0x4e23, 0xa19, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)='~', 0x1, 0x40000, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x4}, 0x0, 0x0) 1.23457806s ago: executing program 1 (id=10254): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") fadvise64(0xffffffffffffffff, 0x4, 0x6, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) truncate(&(0x7f0000000080)='./file1\x00', 0xa47b) fsync(r0) 1.146958463s ago: executing program 0 (id=10256): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc864"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1.146581874s ago: executing program 5 (id=10257): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r1, @ANYRES16=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r7, 0x0, &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000140)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[], 0x1, 0x150d, &(0x7f0000000780)="$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") ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(r9, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) 1.102852235s ago: executing program 0 (id=10258): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000023c0)=0x0) 1.087632286s ago: executing program 0 (id=10259): r0 = socket$inet6(0xa, 0x1, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @loopback, 0x7}, 0x1c) shutdown(r0, 0x1) listen(r0, 0xb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x5, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) 1.086964216s ago: executing program 0 (id=10260): unshare(0x400) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24004055, 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0xffffffffffffffff) 1.077991196s ago: executing program 0 (id=10261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) clock_getres(0x8, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800090300000000000000000a0000000000000004000b000800010001000000ecf5c856ac6f47717b582b98e71e771ea8726408acffaae5cdcafa25d7e200be2a17ec504fd4cbcc4febb9cf81f133d1b24f6ebce7bc4fdabff581c2ebd13fef1feeeacfa087e5d44fbb0325ee0b4e7ce7d7c41dc6eaaa703518fa"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000010000305000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006d616373656300001c000280050007000000000005000a0000000000050009000000000008000500", @ANYRES32=r8], 0x5c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x400c4}, 0x8808) 319.058758ms ago: executing program 1 (id=10262): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 318.556218ms ago: executing program 2 (id=10263): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 318.242377ms ago: executing program 6 (id=10264): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14010, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x480a8, &(0x7f0000000380)=ANY=[], 0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 285.571099ms ago: executing program 2 (id=10265): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 285.449879ms ago: executing program 6 (id=10266): r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r0, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f00000003c0)=""/209, 0xd1}], 0x1, 0x7fff, 0x5) 268.35509ms ago: executing program 2 (id=10267): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 248.85497ms ago: executing program 6 (id=10268): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 248.378731ms ago: executing program 2 (id=10269): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x58}, 0x10) 175.771683ms ago: executing program 6 (id=10270): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000180)=0x80000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', 0x0, 0x2200892, 0x0) r5 = syz_io_uring_setup(0x512b, &(0x7f0000000180)={0x0, 0x6f04, 0x130c8, 0x1, 0x2a4}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x90000008}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x5, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) getsockname$packet(r7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESHEX=r4], 0x38}, 0x1, 0x0, 0x0, 0x20000885}, 0x801) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x4000, 0x80000, 0x124}, &(0x7f0000002280), &(0x7f0000002240)) 175.054373ms ago: executing program 0 (id=10271): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) writev(r0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000040)="58cc", 0x2}], 0x2) 172.370063ms ago: executing program 2 (id=10272): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x9, @mcast1, 0x4}, 0x1c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x5875, @mcast1, 0x3}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/udplite6\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/131, 0x83}], 0x1, 0x1a3, 0x7) 169.375773ms ago: executing program 5 (id=10273): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r2, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000004, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x969, {0x0, 0x0, 0x0, 0x7, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x2, 0x1000, 0x200000, 0x0, 0x0, 0x6000}}, {0x0, 0x7fff, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=10274): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) kernel console output (not intermixed with test programs): 1500.103492][T28365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8590'. [ 1500.234832][T28349] F2FS-fs (loop4): invalid crc value [ 1500.252644][T28349] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1500.289317][T28349] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1500.304397][ T28] audit: type=1400 audit(1763762859.786:4260): avc: denied { create } for pid=28346 comm="syz.4.8587" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1500.331836][ T28] audit: type=1400 audit(1763762859.816:4261): avc: denied { create } for pid=28346 comm="syz.4.8587" name=2E02 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1500.352605][ T28] audit: type=1400 audit(1763762859.816:4262): avc: denied { remove_name } for pid=28346 comm="syz.4.8587" name="file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1500.356430][T21295] syz-executor: attempt to access beyond end of device [ 1500.356430][T21295] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1500.376951][ T28] audit: type=1400 audit(1763762859.816:4263): avc: denied { rmdir } for pid=28346 comm="syz.4.8587" name="file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1500.485213][T28380] loop4: detected capacity change from 0 to 128 [ 1500.536013][T28378] loop2: detected capacity change from 0 to 256 [ 1500.542824][T28378] FAT-fs (loop2): Unrecognized mount option "check=relaxdd" or missing value [ 1500.691796][T28399] device pim6reg1 entered promiscuous mode [ 1500.963446][T28434] device pim6reg1 entered promiscuous mode [ 1501.471383][T28456] loop2: detected capacity change from 0 to 256 [ 1501.491080][T28456] FAT-fs (loop2): Directory bread(block 64) failed [ 1501.497791][T28456] FAT-fs (loop2): Directory bread(block 65) failed [ 1501.506241][T28456] FAT-fs (loop2): Directory bread(block 66) failed [ 1501.513055][T28456] FAT-fs (loop2): Directory bread(block 67) failed [ 1501.519825][T28456] FAT-fs (loop2): Directory bread(block 68) failed [ 1501.526585][T28456] FAT-fs (loop2): Directory bread(block 69) failed [ 1501.533441][T28456] FAT-fs (loop2): Directory bread(block 70) failed [ 1501.540582][T28456] FAT-fs (loop2): Directory bread(block 71) failed [ 1501.547346][T28456] FAT-fs (loop2): Directory bread(block 72) failed [ 1501.554096][T28456] FAT-fs (loop2): Directory bread(block 73) failed [ 1501.622444][T28460] device pim6reg1 entered promiscuous mode [ 1501.730784][T28468] loop2: detected capacity change from 0 to 256 [ 1501.747857][T28468] exfat: Unknown parameter 'zero_size_dir' [ 1501.868100][T28486] loop2: detected capacity change from 0 to 256 [ 1501.881507][T28486] exfat: Unknown parameter 'zero_size_dir' [ 1501.903275][T28490] device pim6reg1 entered promiscuous mode [ 1501.996711][T28464] loop4: detected capacity change from 0 to 40427 [ 1502.013733][T28464] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 1502.021395][T28464] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1502.034939][T28464] F2FS-fs (loop4): invalid crc value [ 1502.053954][T28464] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1502.097019][T28464] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1502.104534][T28464] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1502.131487][ T28] audit: type=1400 audit(1763762861.616:4264): avc: denied { write } for pid=28463 comm="syz.4.8638" path="/476/file1/file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1502.159937][T28464] syz.4.8638: attempt to access beyond end of device [ 1502.159937][T28464] loop4: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 1502.176147][T28464] syz.4.8638: attempt to access beyond end of device [ 1502.176147][T28464] loop4: rw=2049, sector=77848, nr_sectors = 8 limit=40427 [ 1502.190727][T28464] syz.4.8638: attempt to access beyond end of device [ 1502.190727][T28464] loop4: rw=2049, sector=77864, nr_sectors = 24 limit=40427 [ 1502.209232][T28464] syz.4.8638: attempt to access beyond end of device [ 1502.209232][T28464] loop4: rw=2049, sector=77920, nr_sectors = 8 limit=40427 [ 1502.225981][T28464] syz.4.8638: attempt to access beyond end of device [ 1502.225981][T28464] loop4: rw=2049, sector=77952, nr_sectors = 16 limit=40427 [ 1502.240398][T28521] syz.4.8638: attempt to access beyond end of device [ 1502.240398][T28521] loop4: rw=2049, sector=78000, nr_sectors = 8 limit=40427 [ 1502.254654][T28464] syz.4.8638: attempt to access beyond end of device [ 1502.254654][T28464] loop4: rw=2049, sector=78040, nr_sectors = 32 limit=40427 [ 1502.269017][T28521] syz.4.8638: attempt to access beyond end of device [ 1502.269017][T28521] loop4: rw=2049, sector=78096, nr_sectors = 8 limit=40427 [ 1502.283113][T28464] syz.4.8638: attempt to access beyond end of device [ 1502.283113][T28464] loop4: rw=2049, sector=78104, nr_sectors = 8 limit=40427 [ 1502.328976][T28526] device pim6reg1 entered promiscuous mode [ 1502.925077][T28555] device pim6reg1 entered promiscuous mode [ 1502.944108][T28516] loop2: detected capacity change from 0 to 131072 [ 1502.964211][T28516] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 150994945) [ 1502.973688][T28516] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1502.982588][T28516] F2FS-fs (loop2): invalid crc value [ 1503.020166][T28516] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1503.106022][T24904] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1503.156708][T28576] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1503.358083][T28516] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1503.363896][T28579] loop1: detected capacity change from 0 to 256 [ 1503.365467][T28516] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1503.390349][T28579] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1503.423026][ T28] audit: type=1400 audit(1763762862.906:4265): avc: denied { write } for pid=28578 comm="syz.1.8688" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1503.445136][ T28] audit: type=1400 audit(1763762862.906:4266): avc: denied { add_name } for pid=28578 comm="syz.1.8688" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1503.465999][ T28] audit: type=1400 audit(1763762862.906:4267): avc: denied { associate } for pid=28578 comm="syz.1.8688" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1503.501700][T28581] loop1: detected capacity change from 0 to 1024 [ 1503.511365][T24904] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.523665][T24904] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1503.531345][T28581] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1503.553239][T24904] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1503.562591][T24904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1503.571278][T24904] usb 5-1: SerialNumber: syz [ 1503.583645][T21730] EXT4-fs (loop1): unmounting filesystem. [ 1503.835680][T28605] device pim6reg1 entered promiscuous mode [ 1504.038426][T28638] device pim6reg1 entered promiscuous mode [ 1504.138605][T28641] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1504.411928][T28664] device pim6reg1 entered promiscuous mode [ 1504.757192][T28693] device pim6reg1 entered promiscuous mode [ 1505.137418][T28704] loop5: detected capacity change from 0 to 512 [ 1505.144004][T28704] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1505.293852][T28720] device pim6reg1 entered promiscuous mode [ 1505.510723][T24904] usb 5-1: 0:2 : does not exist [ 1505.515889][T24904] usb 5-1: unit 5: unexpected type 0x09 [ 1505.523114][T24904] usb 5-1: USB disconnect, device number 92 [ 1505.624611][T28745] device pim6reg1 entered promiscuous mode [ 1505.760993][ T366] udevd[366]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1505.985627][T28768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8771'. [ 1506.773788][T28790] loop1: detected capacity change from 0 to 512 [ 1506.785214][T28790] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1506.845247][T28790] EXT4-fs (loop1): 1 truncate cleaned up [ 1506.851182][T28790] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1506.867262][T28798] device pim6reg1 entered promiscuous mode [ 1506.867738][T28790] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.8783: bg 0: block 4: invalid block bitmap [ 1506.898517][T21730] EXT4-fs (loop1): unmounting filesystem. [ 1507.019003][T28825] loop1: detected capacity change from 0 to 1024 [ 1507.036260][T28825] EXT4-fs: Ignoring removed nobh option [ 1507.042028][T28825] EXT4-fs: Ignoring removed bh option [ 1507.047655][T28825] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1507.061798][T28825] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1507.080606][T28825] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.8799: Allocating blocks 497-513 which overlap fs metadata [ 1507.100312][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1507.100325][ T28] audit: type=1400 audit(1763762866.586:4274): avc: denied { ioctl } for pid=28824 comm="syz.1.8799" path="/538/file1/file1" dev="loop1" ino=15 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1507.120165][T28832] loop4: detected capacity change from 0 to 1024 [ 1507.136739][T28825] EXT4-fs (loop1): pa ffff888133478b28: logic 128, phys. 273, len 15 [ 1507.145354][T28825] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 1507.151085][T28832] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1507.166597][T28832] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1507.167413][T21730] EXT4-fs (loop1): unmounting filesystem. [ 1507.176982][T28832] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1507.196456][ T28] audit: type=1400 audit(1763762866.676:4275): avc: denied { setattr } for pid=28831 comm="syz.4.8801" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1507.212051][T28835] loop1: detected capacity change from 0 to 256 [ 1507.226009][T28835] exfat: Unknown parameter 'zero_size_dir' [ 1507.233006][T21295] EXT4-fs (loop4): unmounting filesystem. [ 1507.272757][ T366] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1507.290662][T28843] device pim6reg1 entered promiscuous mode [ 1507.504223][T28856] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1507.514395][T28856] device wg2 left promiscuous mode [ 1507.856691][T28860] loop2: detected capacity change from 0 to 40427 [ 1507.883723][T28860] F2FS-fs (loop2): invalid crc value [ 1507.900746][T28860] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1507.968108][T28860] F2FS-fs (loop2): Start checkpoint disabled! [ 1507.972733][T28866] loop1: detected capacity change from 0 to 40427 [ 1507.980174][T28860] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1507.997129][T28866] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 1508.016081][ T28] audit: type=1400 audit(1763762867.496:4276): avc: denied { ioctl } for pid=28859 comm="syz.2.8813" path="/557/file0/file0" dev="loop2" ino=10 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1508.060025][T28866] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1508.072509][T28866] F2FS-fs (loop1): invalid crc value [ 1508.078112][T15388] bio_check_eod: 12 callbacks suppressed [ 1508.078126][T15388] kworker/u4:1: attempt to access beyond end of device [ 1508.078126][T15388] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1508.087741][T28866] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1508.108101][T28874] loop5: detected capacity change from 0 to 40427 [ 1508.124875][T28874] F2FS-fs (loop5): heap/no_heap options were deprecated [ 1508.144259][T28874] F2FS-fs (loop5): fault_injection options not supported [ 1508.166058][T28874] F2FS-fs (loop5): fault_type options not supported [ 1508.221563][T28874] F2FS-fs (loop5): invalid crc value [ 1508.248855][T28874] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1508.267114][T28866] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1508.294360][T28866] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1508.300069][T28874] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1508.340149][ T28] audit: type=1400 audit(1763762867.806:4277): avc: denied { create } for pid=28873 comm="syz.5.8820" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 1508.389479][T25641] syz-executor: attempt to access beyond end of device [ 1508.389479][T25641] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1508.389761][ T28] audit: type=1400 audit(1763762867.806:4278): avc: denied { read write } for pid=28873 comm="syz.5.8820" name="bus" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 1508.428389][ T28] audit: type=1400 audit(1763762867.806:4279): avc: denied { open } for pid=28873 comm="syz.5.8820" path="/199/file0/bus" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 1508.595405][T28912] loop5: detected capacity change from 0 to 512 [ 1508.623255][T28912] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1508.700224][ T366] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1508.787522][T28919] loop2: detected capacity change from 0 to 256 [ 1508.834127][T28918] fuse: Unknown parameter '0x0000000000000007' [ 1509.380795][T28925] loop4: detected capacity change from 0 to 2048 [ 1509.542875][T28925] loop4: p1 < > p3 p4 [ 1509.603511][T28925] loop4: p3 size 54016 extends beyond EOD, truncated [ 1509.628432][T28925] loop4: p4 start 4294967295 is beyond EOD, truncated [ 1509.724168][T28933] loop5: detected capacity change from 0 to 40427 [ 1509.824653][ T28] audit: type=1400 audit(1763762869.306:4280): avc: denied { read write } for pid=28924 comm="syz.4.8837" name="loop4p3" dev="devtmpfs" ino=5387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1510.160122][T28933] F2FS-fs (loop5): heap/no_heap options were deprecated [ 1510.233527][ T28] audit: type=1400 audit(1763762869.326:4281): avc: denied { open } for pid=28924 comm="syz.4.8837" path="/dev/loop4p3" dev="devtmpfs" ino=5387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1510.246496][ T613] udevd[613]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1510.314224][T28933] F2FS-fs (loop5): fault_injection options not supported [ 1510.345784][ T366] udevd[366]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1510.372000][T28933] F2FS-fs (loop5): fault_type options not supported [ 1510.502454][ T366] udevd[366]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1510.521982][T28933] F2FS-fs (loop5): invalid crc value [ 1510.528649][T28933] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1510.541106][ T336] udevd[336]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1510.654783][T28933] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1510.703686][T25641] syz-executor: attempt to access beyond end of device [ 1510.703686][T25641] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1510.881511][T28977] loop2: detected capacity change from 0 to 256 [ 1511.020017][T22347] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1511.287966][T28986] device pim6reg1 entered promiscuous mode [ 1511.362102][T22347] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.376428][T22347] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1511.408672][T22347] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1511.421951][T22347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1511.451229][T22347] usb 5-1: SerialNumber: syz [ 1511.463348][ T28] audit: type=1400 audit(1763762870.946:4282): avc: denied { create } for pid=28993 comm="syz.0.8864" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1511.514422][ T28] audit: type=1400 audit(1763762870.976:4283): avc: denied { write } for pid=28993 comm="syz.0.8864" name="file0" dev="tmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1512.379211][T29014] loop1: detected capacity change from 0 to 256 [ 1512.385880][T29014] exfat: Deprecated parameter 'utf8' [ 1512.397083][T29014] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 1512.440064][ T6] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 1512.463470][T29018] device pim6reg1 entered promiscuous mode [ 1512.621185][ T6] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1512.629347][ T6] usb 3-1: config 0 has no interface number 0 [ 1512.635943][ T6] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1512.650589][ T6] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1512.651521][T29036] loop5: detected capacity change from 0 to 1024 [ 1512.659721][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.674296][ T6] usb 3-1: Product: syz [ 1512.678668][ T6] usb 3-1: Manufacturer: syz [ 1512.683432][ T6] usb 3-1: SerialNumber: syz [ 1512.688677][ T6] usb 3-1: config 0 descriptor?? [ 1512.692032][T29036] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1512.726411][T25641] EXT4-fs (loop5): unmounting filesystem. [ 1512.878514][T29050] device pim6reg1 entered promiscuous mode [ 1513.041588][T29064] overlayfs: empty lowerdir [ 1513.095885][ T6] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1513.106163][ T6] CoreChips: probe of 3-1:0.41 failed with error -71 [ 1513.114274][ T6] usb 3-1: USB disconnect, device number 80 [ 1513.328164][T29087] loop5: detected capacity change from 0 to 40427 [ 1513.339149][T29087] F2FS-fs (loop5): invalid crc value [ 1513.346286][T29087] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1513.383735][T29087] F2FS-fs (loop5): Start checkpoint disabled! [ 1513.391428][T29087] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1513.413349][T22347] usb 5-1: 0:2 : does not exist [ 1513.418556][T22347] usb 5-1: unit 5: unexpected type 0x09 [ 1513.429804][T22347] usb 5-1: USB disconnect, device number 93 [ 1513.452451][T29087] F2FS-fs (loop5): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 1513.487998][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1513.488014][ T28] audit: type=1400 audit(1763762872.966:4286): avc: denied { link } for pid=29086 comm="syz.5.8906" name="file0" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1513.516469][T15388] kworker/u4:1: attempt to access beyond end of device [ 1513.516469][T15388] loop5: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 1513.630444][ T366] udevd[366]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1513.646639][T29100] fuse: Unknown parameter '0x0000000000000007' [ 1513.713187][T29108] loop2: detected capacity change from 0 to 256 [ 1513.731176][T29108] FAT-fs (loop2): Directory bread(block 64) failed [ 1513.737778][T29108] FAT-fs (loop2): Directory bread(block 65) failed [ 1513.745628][T29108] FAT-fs (loop2): Directory bread(block 66) failed [ 1513.752260][T29108] FAT-fs (loop2): Directory bread(block 67) failed [ 1513.758935][T29108] FAT-fs (loop2): Directory bread(block 68) failed [ 1513.765713][T29108] FAT-fs (loop2): Directory bread(block 69) failed [ 1513.772583][T29108] FAT-fs (loop2): Directory bread(block 70) failed [ 1513.784172][T29108] FAT-fs (loop2): Directory bread(block 71) failed [ 1513.793222][T29108] FAT-fs (loop2): Directory bread(block 72) failed [ 1513.800261][T29108] FAT-fs (loop2): Directory bread(block 73) failed [ 1513.828238][T29097] loop5: detected capacity change from 0 to 40427 [ 1513.874810][T29097] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1513.928088][T29097] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1513.954113][T29124] loop2: detected capacity change from 0 to 256 [ 1513.961287][T29097] F2FS-fs (loop5): Inconsistent error blkaddr:5633, sit bitmap:0 [ 1513.969044][T29097] CPU: 1 PID: 29097 Comm: syz.5.8908 Not tainted syzkaller #0 [ 1513.976502][T29097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1513.986582][T29097] Call Trace: [ 1513.989867][T29097] [ 1513.992805][T29097] __dump_stack+0x21/0x24 [ 1513.997168][T29097] dump_stack_lvl+0xee/0x150 [ 1514.001773][T29097] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1514.006813][T29097] ? __cfi_f2fs_get_dnode_of_data+0x10/0x10 [ 1514.012727][T29097] dump_stack+0x15/0x24 [ 1514.016894][T29097] __f2fs_is_valid_blkaddr+0xce6/0x1460 [ 1514.022458][T29097] f2fs_is_valid_blkaddr+0x23/0x30 [ 1514.027573][T29097] f2fs_map_blocks+0xc93/0x3a50 [ 1514.032429][T29097] ? __cfi_f2fs_map_blocks+0x10/0x10 [ 1514.037714][T29097] ? __alloc_pages+0x1c3/0x450 [ 1514.042478][T29097] ? __folio_alloc+0x12/0x40 [ 1514.047056][T29097] ? xas_start+0x317/0x3e0 [ 1514.051460][T29097] ? xas_load+0x39e/0x3b0 [ 1514.055780][T29097] ? xa_load+0xad/0xd0 [ 1514.059837][T29097] f2fs_mpage_readpages+0xa3a/0x1b70 [ 1514.065112][T29097] ? cgroup_rstat_updated+0xf5/0x370 [ 1514.070385][T29097] ? dquot_release_reservation_block+0xa0/0xa0 [ 1514.076530][T29097] ? cgroup_rstat_updated+0xf5/0x370 [ 1514.081811][T29097] ? xas_nomem+0x6b/0x1f0 [ 1514.086135][T29097] f2fs_readahead+0xfc/0x240 [ 1514.090710][T29097] ? __cfi_f2fs_readahead+0x10/0x10 [ 1514.095893][T29097] read_pages+0x1b0/0xdd0 [ 1514.100211][T29097] ? __cfi___filemap_add_folio+0x10/0x10 [ 1514.105836][T29097] ? page_cache_ra_unbounded+0x720/0x720 [ 1514.111460][T29097] ? folio_add_lru+0x260/0x390 [ 1514.116212][T29097] ? filemap_add_folio+0x105/0x150 [ 1514.121317][T29097] page_cache_ra_unbounded+0x5d1/0x720 [ 1514.126767][T29097] ? __cfi_page_cache_ra_unbounded+0x10/0x10 [ 1514.132736][T29097] ? __switch_to+0x51f/0xe30 [ 1514.137312][T29097] page_cache_ra_order+0x36a/0xb70 [ 1514.142413][T29097] ? __this_cpu_preempt_check+0x13/0x20 [ 1514.147940][T29097] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 1514.154604][T29097] ? finish_task_switch+0x16b/0x7b0 [ 1514.159793][T29097] ? __switch_to_asm+0x3a/0x60 [ 1514.164541][T29097] ? __schedule+0xb8f/0x14e0 [ 1514.169118][T29097] ? __cfi_page_cache_ra_order+0x10/0x10 [ 1514.174739][T29097] ondemand_readahead+0x817/0xdb0 [ 1514.179751][T29097] ? __kasan_check_read+0x11/0x20 [ 1514.184756][T29097] ? page_cache_sync_ra+0x490/0x490 [ 1514.189943][T29097] page_cache_sync_ra+0x41b/0x490 [ 1514.194961][T29097] f2fs_readdir+0x444/0x940 [ 1514.199459][T29097] ? __cfi_f2fs_readdir+0x10/0x10 [ 1514.204470][T29097] ? down_read_killable+0xb6/0x100 [ 1514.209745][T29097] ? __cfi_down_read_killable+0x10/0x10 [ 1514.215278][T29097] ? fsnotify_perm+0x269/0x5b0 [ 1514.220027][T29097] ? security_file_permission+0x94/0xb0 [ 1514.225562][T29097] iterate_dir+0x271/0x610 [ 1514.229962][T29097] ? __cfi_f2fs_readdir+0x10/0x10 [ 1514.235065][T29097] __se_sys_getdents+0xe5/0x240 [ 1514.239901][T29097] ? __x64_sys_getdents+0x90/0x90 [ 1514.244907][T29097] ? xfd_validate_state+0x70/0x150 [ 1514.250003][T29097] ? __cfi_filldir+0x10/0x10 [ 1514.254579][T29097] ? fpregs_restore_userregs+0x128/0x260 [ 1514.260195][T29097] __x64_sys_getdents+0x7b/0x90 [ 1514.265029][T29097] x64_sys_call+0x212/0x9a0 [ 1514.269520][T29097] do_syscall_64+0x4c/0xa0 [ 1514.273922][T29097] ? clear_bhb_loop+0x30/0x80 [ 1514.278592][T29097] ? clear_bhb_loop+0x30/0x80 [ 1514.283262][T29097] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1514.289191][T29097] RIP: 0033:0x7fcc2db8f749 [ 1514.293595][T29097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1514.313200][T29097] RSP: 002b:00007fcc2e9dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 1514.321601][T29097] RAX: ffffffffffffffda RBX: 00007fcc2dde5fa0 RCX: 00007fcc2db8f749 [ 1514.329561][T29097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1514.337511][T29097] RBP: 00007fcc2dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1514.345466][T29097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1514.353417][T29097] R13: 00007fcc2dde6038 R14: 00007fcc2dde5fa0 R15: 00007ffd6b7de0d8 [ 1514.361376][T29097] [ 1514.371162][T29097] F2FS-fs (loop5): Inconsistent error blkaddr:5633, sit bitmap:0 [ 1514.379114][T29097] CPU: 0 PID: 29097 Comm: syz.5.8908 Not tainted syzkaller #0 [ 1514.386579][T29097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1514.396634][T29097] Call Trace: [ 1514.399951][T29097] [ 1514.402876][T29097] __dump_stack+0x21/0x24 [ 1514.407194][T29097] dump_stack_lvl+0xee/0x150 [ 1514.411766][T29097] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1514.416774][T29097] ? __cfi_f2fs_get_dnode_of_data+0x10/0x10 [ 1514.422653][T29097] dump_stack+0x15/0x24 [ 1514.426790][T29097] __f2fs_is_valid_blkaddr+0xce6/0x1460 [ 1514.432319][T29097] f2fs_is_valid_blkaddr+0x23/0x30 [ 1514.437414][T29097] f2fs_get_read_data_page+0x4e2/0x840 [ 1514.442852][T29097] ? __cfi_f2fs_get_read_data_page+0x10/0x10 [ 1514.448817][T29097] ? __kasan_check_read+0x11/0x20 [ 1514.453825][T29097] f2fs_find_data_page+0x198/0x3a0 [ 1514.458915][T29097] f2fs_readdir+0x457/0x940 [ 1514.463407][T29097] ? __cfi_f2fs_readdir+0x10/0x10 [ 1514.468418][T29097] ? down_read_killable+0xb6/0x100 [ 1514.473517][T29097] ? __cfi_down_read_killable+0x10/0x10 [ 1514.479047][T29097] ? fsnotify_perm+0x269/0x5b0 [ 1514.483797][T29097] ? security_file_permission+0x94/0xb0 [ 1514.489338][T29097] iterate_dir+0x271/0x610 [ 1514.493777][T29097] ? __cfi_f2fs_readdir+0x10/0x10 [ 1514.498800][T29097] __se_sys_getdents+0xe5/0x240 [ 1514.503649][T29097] ? __x64_sys_getdents+0x90/0x90 [ 1514.508659][T29097] ? xfd_validate_state+0x70/0x150 [ 1514.513767][T29097] ? __cfi_filldir+0x10/0x10 [ 1514.518344][T29097] ? fpregs_restore_userregs+0x128/0x260 [ 1514.523963][T29097] __x64_sys_getdents+0x7b/0x90 [ 1514.528799][T29097] x64_sys_call+0x212/0x9a0 [ 1514.533287][T29097] do_syscall_64+0x4c/0xa0 [ 1514.537683][T29097] ? clear_bhb_loop+0x30/0x80 [ 1514.542349][T29097] ? clear_bhb_loop+0x30/0x80 [ 1514.547012][T29097] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1514.552892][T29097] RIP: 0033:0x7fcc2db8f749 [ 1514.557292][T29097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1514.576880][T29097] RSP: 002b:00007fcc2e9dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 1514.585275][T29097] RAX: ffffffffffffffda RBX: 00007fcc2dde5fa0 RCX: 00007fcc2db8f749 [ 1514.593227][T29097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1514.601176][T29097] RBP: 00007fcc2dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1514.609127][T29097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1514.617078][T29097] R13: 00007fcc2dde6038 R14: 00007fcc2dde5fa0 R15: 00007ffd6b7de0d8 [ 1514.625037][T29097] [ 1514.644728][T29124] FAT-fs (loop2): Directory bread(block 64) failed [ 1514.657233][T29124] FAT-fs (loop2): Directory bread(block 65) failed [ 1514.664193][T25641] syz-executor: attempt to access beyond end of device [ 1514.664193][T25641] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1514.665120][T29124] FAT-fs (loop2): Directory bread(block 66) failed [ 1514.686196][T29124] FAT-fs (loop2): Directory bread(block 67) failed [ 1514.692799][T29124] FAT-fs (loop2): Directory bread(block 68) failed [ 1514.694080][T29117] loop1: detected capacity change from 0 to 40427 [ 1514.706834][T29117] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(32256) [ 1514.720705][T29117] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1514.740039][T29117] F2FS-fs (loop1): fault_injection options not supported [ 1514.752844][T29117] F2FS-fs (loop1): fault_type options not supported [ 1514.755194][T29124] FAT-fs (loop2): Directory bread(block 69) failed [ 1514.770375][T29124] FAT-fs (loop2): Directory bread(block 70) failed [ 1514.780194][T29124] FAT-fs (loop2): Directory bread(block 71) failed [ 1514.786754][T29124] FAT-fs (loop2): Directory bread(block 72) failed [ 1514.793670][T29117] F2FS-fs (loop1): invalid crc value [ 1514.799665][T29124] FAT-fs (loop2): Directory bread(block 73) failed [ 1514.826595][T29117] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1514.920268][T29117] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1514.927394][T29117] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1515.212549][ T28] audit: type=1400 audit(1763762874.696:4287): avc: denied { read } for pid=29116 comm="syz.1.8919" name=2E02 dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1515.235436][T29117] syz.1.8919: attempt to access beyond end of device [ 1515.235436][T29117] loop1: rw=2049, sector=45096, nr_sectors = 136 limit=40427 [ 1515.319515][T29151] loop4: detected capacity change from 0 to 40427 [ 1515.329997][T29151] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1515.337734][T29151] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1515.347244][T29151] F2FS-fs (loop4): invalid crc value [ 1515.376145][T21730] syz-executor: attempt to access beyond end of device [ 1515.376145][T21730] loop1: rw=2049, sector=45232, nr_sectors = 24 limit=40427 [ 1515.408092][T29151] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1515.617933][T29163] loop2: detected capacity change from 0 to 512 [ 1515.660902][T29151] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1515.668021][T29151] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1515.683583][T29163] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1515.805427][T29145] binfmt_misc: register: failed to install interpreter file ./file0 [ 1516.296437][T29175] loop1: detected capacity change from 0 to 40427 [ 1516.306464][T29175] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1516.314252][T29175] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1516.323471][T29175] F2FS-fs (loop1): invalid crc value [ 1516.347690][T29175] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1516.381747][T29175] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1516.388808][T29175] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1516.667678][T29198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8944'. [ 1517.007922][T29211] device pim6reg1 entered promiscuous mode [ 1517.185354][T29217] loop2: detected capacity change from 0 to 40427 [ 1517.222280][T29217] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1517.230136][T29217] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1517.258119][T29217] F2FS-fs (loop2): invalid crc value [ 1517.389503][T29217] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1517.450110][T29217] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1517.457223][T29217] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1517.595077][ T28] audit: type=1400 audit(1763762877.076:4288): avc: denied { unlink } for pid=29240 comm="syz.1.8962" name="#164" dev="tmpfs" ino=3062 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1517.642371][ T28] audit: type=1400 audit(1763762877.076:4289): avc: denied { create } for pid=29240 comm="syz.1.8962" name="#168" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1517.705150][ T28] audit: type=1400 audit(1763762877.076:4290): avc: denied { link } for pid=29240 comm="syz.1.8962" name="#168" dev="tmpfs" ino=3066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1517.755701][ T28] audit: type=1400 audit(1763762877.076:4291): avc: denied { rename } for pid=29240 comm="syz.1.8962" name="#169" dev="tmpfs" ino=3066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1517.835840][ T28] audit: type=1400 audit(1763762877.106:4292): avc: denied { unmount } for pid=21730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1517.880415][T29245] device pim6reg1 entered promiscuous mode [ 1518.096319][T29268] loop1: detected capacity change from 0 to 512 [ 1518.821935][ T28] audit: type=1400 audit(1763762878.246:4293): avc: denied { read write } for pid=29272 comm="syz.4.8977" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1518.992644][ T28] audit: type=1400 audit(1763762878.246:4294): avc: denied { open } for pid=29272 comm="syz.4.8977" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1519.040410][T29285] device pim6reg1 entered promiscuous mode [ 1519.073943][T29295] loop2: detected capacity change from 0 to 1024 [ 1519.089328][T29295] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1519.135795][T29295] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1519.171447][T29295] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1519.186180][T29295] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1519.208875][T29295] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1519.238231][T29295] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1519.238231][T29295] [ 1519.247990][T29295] EXT4-fs (loop2): Total free blocks count 0 [ 1519.254075][ T656] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1519.261777][T29295] EXT4-fs (loop2): Free/Dirty block details [ 1519.267760][T29295] EXT4-fs (loop2): free_blocks=20480 [ 1519.278908][T29295] EXT4-fs (loop2): dirty_blocks=48 [ 1519.284252][T29295] EXT4-fs (loop2): Block reservation details [ 1519.290523][T29295] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 1519.307580][T15643] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 4 with error 28 [ 1519.440008][ T656] usb 5-1: device descriptor read/64, error -71 [ 1519.540102][T22347] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1519.741037][T22347] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1519.749239][T22347] usb 2-1: config 0 has no interface number 0 [ 1519.755370][T22347] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1519.763465][T22347] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1519.772604][T22347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.780634][T22347] usb 2-1: Product: syz [ 1519.784808][T22347] usb 2-1: Manufacturer: syz [ 1519.789415][T22347] usb 2-1: SerialNumber: syz [ 1519.796528][T22347] usb 2-1: config 0 descriptor?? [ 1519.860012][ T656] usb 5-1: device descriptor read/64, error -71 [ 1520.130076][ T656] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1520.202927][T22347] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1520.218777][T22347] CoreChips: probe of 2-1:0.41 failed with error -71 [ 1520.231993][T22347] usb 2-1: USB disconnect, device number 70 [ 1520.280060][ T656] usb 5-1: device descriptor read/64, error -71 [ 1520.510084][ T39] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1520.702170][ T656] usb 5-1: device descriptor read/64, error -71 [ 1520.710338][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 1520.719580][ T39] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1520.732209][ T39] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1520.744622][ T39] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1520.754340][ T39] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1520.762774][ T39] usb 3-1: Product: syz [ 1520.767538][ T39] usb 3-1: Manufacturer: syz [ 1520.835990][ T39] hub 3-1:4.0: USB hub found [ 1520.846233][ T656] usb usb5-port1: attempt power cycle [ 1521.015573][ T39] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 1521.417793][T29386] loop4: detected capacity change from 0 to 512 [ 1521.432428][T29386] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1521.472282][T29386] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e11c, mo2=0002] [ 1521.480675][T29386] System zones: 1-12 [ 1521.485281][T29386] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1521.492122][T29386] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.9025: bg 0: block 361: padding at end of block bitmap is not set [ 1521.893935][T29386] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 1521.905055][T29386] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.9025: invalid indirect mapped block 12 (level 1) [ 1521.919758][T29386] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.9025: invalid indirect mapped block 2 (level 2) [ 1521.933636][T29386] EXT4-fs (loop4): 1 truncate cleaned up [ 1521.939326][T29386] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1521.956443][T21295] EXT4-fs (loop4): unmounting filesystem. [ 1522.054558][T29397] loop5: detected capacity change from 0 to 256 [ 1522.062394][T29397] exfat: Unknown parameter 'ÿÿÿÿ' [ 1522.235180][T29399] loop4: detected capacity change from 0 to 512 [ 1522.249683][ T366] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1522.310733][T29399] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.9028: bg 0: block 248: padding at end of block bitmap is not set [ 1522.325473][T29399] Quota error (device loop4): write_blk: dquota write failed [ 1522.335251][T29399] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1522.357016][T29399] EXT4-fs error (device loop4): ext4_acquire_dquot:6803: comm syz.4.9028: Failed to acquire dquot type 1 [ 1522.387609][T29399] EXT4-fs (loop4): 1 truncate cleaned up [ 1522.397819][T29399] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1522.398101][ T28] audit: type=1400 audit(1763762881.886:4295): avc: denied { mount } for pid=29411 comm="syz.5.9034" name="/" dev="ramfs" ino=131798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1522.420051][T29399] ext4 filesystem being mounted at /521/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1522.510585][T21295] EXT4-fs (loop4): unmounting filesystem. [ 1523.536901][ T39] usb 3-1: USB disconnect, device number 81 [ 1523.904337][T29421] loop4: detected capacity change from 0 to 40427 [ 1523.920123][T29421] F2FS-fs (loop4): fault_injection options not supported [ 1523.937568][T29421] F2FS-fs (loop4): invalid crc value [ 1523.944130][T29421] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1524.000023][T29421] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1524.080782][T29421] syz.4.9037: attempt to access beyond end of device [ 1524.080782][T29421] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1524.130143][T21295] syz-executor: attempt to access beyond end of device [ 1524.130143][T21295] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1524.210972][T29449] device pim6reg1 entered promiscuous mode [ 1524.231365][T29447] loop1: detected capacity change from 0 to 40427 [ 1524.245982][T29447] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 1524.261110][T29447] F2FS-fs (loop1): invalid crc value [ 1524.266925][T29451] loop4: detected capacity change from 0 to 1024 [ 1524.276040][T29451] EXT4-fs: Ignoring removed orlov option [ 1524.282825][T29447] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1524.315784][T29447] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1524.353892][T29451] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1524.384603][T29451] EXT4-fs error (device loop4): ext4_check_all_de:666: inode #12: block 7: comm syz.4.9046: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 1524.463197][T29451] EXT4-fs error (device loop4): ext4_check_all_de:666: inode #12: block 7: comm syz.4.9046: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 1524.489441][T21295] EXT4-fs (loop4): unmounting filesystem. [ 1524.501657][T29475] device pim6reg1 entered promiscuous mode [ 1524.508854][T29467] loop2: detected capacity change from 0 to 256 [ 1524.515667][T29467] FAT-fs (loop2): Unrecognized mount option "check=relaxdd" or missing value [ 1524.541358][ T366] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1524.744122][T29487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.755987][T29487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.769510][T29487] device bridge_slave_0 entered promiscuous mode [ 1524.780686][T29487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.787739][T29487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.796708][T29481] loop4: detected capacity change from 0 to 40427 [ 1524.819710][T29487] device bridge_slave_1 entered promiscuous mode [ 1524.820126][T29481] F2FS-fs (loop4): heap/no_heap options were deprecated [ 1524.833285][T29481] F2FS-fs (loop4): fault_injection options not supported [ 1524.843404][T29481] F2FS-fs (loop4): fault_type options not supported [ 1524.851916][T29481] F2FS-fs (loop4): invalid crc value [ 1524.872629][T29481] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1524.926706][T29481] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1524.949341][T21295] syz-executor: attempt to access beyond end of device [ 1524.949341][T21295] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1525.006085][T29487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.013173][T29487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1525.020456][T29487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.027477][T29487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1525.107852][T15643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1525.118693][T15643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.143164][T15643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.152529][T29530] loop4: detected capacity change from 0 to 512 [ 1525.165930][T21119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1525.174317][T21119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.181380][T21119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1525.189279][T21119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1525.197453][T29530] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1525.197945][T21119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.213540][T21119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1525.220889][T29530] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1525.235995][T21119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1525.244037][T21119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1525.252452][T29530] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 1525.263262][T29530] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1525.275803][T29530] System zones: 0-2, 18-18, 34-35 [ 1525.298998][T29530] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1525.311261][T21119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1525.318419][ T28] audit: type=1400 audit(1763762884.796:4296): avc: denied { append } for pid=29529 comm="syz.4.9079" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1525.323185][T21119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1525.357985][T29487] device veth0_vlan entered promiscuous mode [ 1525.368227][T21119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1525.373631][T29530] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 1525.376530][T21119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1525.391871][T29530] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.9079: bg 0: block 353: padding at end of block bitmap is not set [ 1525.420893][T21295] EXT4-fs (loop4): unmounting filesystem. [ 1525.427810][T21119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1525.466157][T21119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1525.478274][T21119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1525.499534][T21119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1525.534261][T29487] device veth1_macvtap entered promiscuous mode [ 1525.587113][T21119] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1525.599195][T21119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1525.612826][T21119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1525.631888][ T8] device bridge_slave_1 left promiscuous mode [ 1525.646322][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.669905][ T8] device bridge_slave_0 left promiscuous mode [ 1525.677650][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.686250][ T8] device veth1_macvtap left promiscuous mode [ 1525.692393][ T8] device veth0_vlan left promiscuous mode [ 1525.776244][T29565] loop4: detected capacity change from 0 to 256 [ 1526.849886][T29563] loop5: detected capacity change from 0 to 40427 [ 1526.858871][T29563] F2FS-fs (loop5): fault_injection options not supported [ 1526.870841][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1526.879806][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1526.888432][T29563] F2FS-fs (loop5): invalid crc value [ 1526.899295][T29563] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1526.962783][T29563] F2FS-fs (loop5): Start checkpoint disabled! [ 1527.009983][T29563] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1527.547051][T15643] kworker/u4:4: attempt to access beyond end of device [ 1527.547051][T15643] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1527.630980][T29584] loop1: detected capacity change from 0 to 40427 [ 1527.640525][T29584] F2FS-fs (loop1): fault_injection options not supported [ 1527.671768][T29598] loop4: detected capacity change from 0 to 256 [ 1527.678433][T29598] FAT-fs (loop4): Unrecognized mount option "check=relaxdd" or missing value [ 1527.700557][T29584] F2FS-fs (loop1): invalid crc value [ 1527.708655][T29584] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1527.715394][ T366] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1527.730112][T29599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.746464][T29599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.761023][T29599] device bridge_slave_0 entered promiscuous mode [ 1527.773282][T29606] device pim6reg1 entered promiscuous mode [ 1527.783935][T29599] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.788911][T29584] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1527.798677][T29599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.816421][T29599] device bridge_slave_1 entered promiscuous mode [ 1527.826167][ T28] audit: type=1400 audit(1763762887.316:4297): avc: denied { setattr } for pid=29583 comm="syz.1.9059" path="/0/file1/file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1527.849524][T29487] syz-executor: attempt to access beyond end of device [ 1527.849524][T29487] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1528.048676][T29625] loop5: detected capacity change from 0 to 512 [ 1528.055147][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1528.062794][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1528.090377][T29625] EXT4-fs (loop5): 1 truncate cleaned up [ 1528.092402][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1528.096219][T29625] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1528.105396][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1528.130407][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1528.137552][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1528.152656][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1528.161231][T25641] EXT4-fs (loop5): unmounting filesystem. [ 1528.178585][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1528.195081][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1528.202178][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1528.218792][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1528.241325][T15643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1528.270830][T15643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1528.355010][T29627] loop1: detected capacity change from 0 to 40427 [ 1528.366217][T29627] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1528.374322][ T8] device bridge_slave_1 left promiscuous mode [ 1528.380411][T29627] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1528.390828][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1528.396044][T29627] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 1528.660224][ T8] device bridge_slave_0 left promiscuous mode [ 1528.666384][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.711087][T29627] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1528.727659][ T8] device veth1_macvtap left promiscuous mode [ 1528.750172][ T8] device veth0_vlan left promiscuous mode [ 1528.760089][T29640] loop5: detected capacity change from 0 to 40427 [ 1528.770207][T29640] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1528.777949][T29640] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1528.786885][T29640] F2FS-fs (loop5): invalid crc value [ 1528.821855][T29627] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1528.829576][T29640] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1528.839133][T29627] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1528.889723][T29640] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1528.896863][T29640] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1528.980416][ T28] audit: type=1400 audit(1763762888.466:4298): avc: denied { rename } for pid=29626 comm="syz.1.9113" name="bus" dev="loop1" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1529.003441][T29638] loop4: detected capacity change from 0 to 40427 [ 1529.010530][T29487] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 1529.010549][T29487] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 1529.025373][T29487] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 1529.028764][T29638] F2FS-fs (loop4): fault_injection options not supported [ 1529.042267][T29487] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 1529.048288][T29638] F2FS-fs (loop4): invalid crc value [ 1529.055900][T29487] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 1529.062309][ T28] audit: type=1400 audit(1763762888.486:4299): avc: denied { mounton } for pid=29626 comm="syz.1.9113" path="/2/file0/file0" dev="loop1" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1529.070362][T29487] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 1529.092808][T29487] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 1529.101250][T29638] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1529.147950][T29638] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1529.149743][T29487] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 1529.155701][T29487] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 1529.163413][T29487] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 1529.180212][T21295] syz-executor: attempt to access beyond end of device [ 1529.180212][T21295] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1529.327621][T15643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1529.336240][T15643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1529.374855][T29661] device pim6reg1 entered promiscuous mode [ 1529.400075][T15643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1529.418426][T15643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1529.445442][T15643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1529.453517][T15643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1529.468116][T29599] device veth0_vlan entered promiscuous mode [ 1529.478166][T15643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1529.483470][T29673] loop5: detected capacity change from 0 to 128 [ 1529.500626][T15643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1529.522786][T29673] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1529.531588][T29673] ext4 filesystem being mounted at /276/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1529.544887][T21119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1529.560445][T21119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1529.573065][T29599] device veth1_macvtap entered promiscuous mode [ 1529.581692][T25641] EXT4-fs (loop5): unmounting filesystem. [ 1529.588455][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1529.600429][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1529.616986][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1529.641835][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1529.660549][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1529.735400][T29679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9128'. [ 1529.751982][ T28] audit: type=1400 audit(1763762889.236:4300): avc: denied { mount } for pid=29694 comm="syz.2.9136" name="/" dev="configfs" ino=14352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1530.053759][ T28] audit: type=1400 audit(1763762889.266:4301): avc: denied { search } for pid=29694 comm="syz.2.9136" name="/" dev="configfs" ino=14352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1530.139131][T29702] loop4: detected capacity change from 0 to 40427 [ 1530.147755][T29702] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1530.155568][T29702] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1530.165677][T29702] F2FS-fs (loop4): invalid crc value [ 1530.199349][T29702] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1530.241191][T29702] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1530.248256][T29702] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1530.690082][ T28] audit: type=1400 audit(1763762890.146:4302): avc: denied { read } for pid=29722 comm="syz.1.9145" name="file2" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1530.814537][ T28] audit: type=1400 audit(1763762890.146:4303): avc: denied { ioctl } for pid=29722 comm="syz.1.9145" path="/5/file2" dev="tmpfs" ino=45 ioctlcmd=0x4c06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1530.858526][T29726] device pim6reg1 entered promiscuous mode [ 1531.384137][T29733] loop2: detected capacity change from 0 to 40427 [ 1531.401466][T29746] device pim6reg1 entered promiscuous mode [ 1531.412169][T29733] F2FS-fs (loop2): heap/no_heap options were deprecated [ 1531.419168][T29733] F2FS-fs (loop2): fault_injection options not supported [ 1531.436602][T29733] F2FS-fs (loop2): fault_type options not supported [ 1531.455039][T29733] F2FS-fs (loop2): invalid crc value [ 1531.471737][T29733] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1531.524472][T29733] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1531.539636][T29755] f2fs_ckpt-7:2: attempt to access beyond end of device [ 1531.539636][T29755] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1531.567852][T29760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9155'. [ 1531.680098][T29769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9160'. [ 1532.311030][T29787] device pim6reg1 entered promiscuous mode [ 1532.374944][T29795] loop1: detected capacity change from 0 to 256 [ 1532.568692][T29811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9178'. [ 1533.049194][T29824] device pim6reg1 entered promiscuous mode [ 1533.051043][T29826] loop2: detected capacity change from 0 to 512 [ 1533.063135][T29826] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1533.075794][T29826] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 1533.084229][T29826] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.9186: invalid indirect mapped block 2683928664 (level 1) [ 1533.098922][T29826] EXT4-fs (loop2): Remounting filesystem read-only [ 1533.105857][T29826] EXT4-fs (loop2): 1 truncate cleaned up [ 1533.111752][T29826] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1533.145678][T29599] EXT4-fs (loop2): unmounting filesystem. [ 1533.278404][T29842] device pim6reg1 entered promiscuous mode [ 1533.711749][T29853] device pim6reg1 entered promiscuous mode [ 1533.915062][T29869] loop2: detected capacity change from 0 to 40427 [ 1533.915216][T29878] loop1: detected capacity change from 0 to 1024 [ 1533.924615][T29869] F2FS-fs (loop2): heap/no_heap options were deprecated [ 1533.930751][T29878] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1533.935314][T29869] F2FS-fs (loop2): fault_injection options not supported [ 1533.948831][T29869] F2FS-fs (loop2): fault_type options not supported [ 1533.956557][T29869] F2FS-fs (loop2): invalid crc value [ 1533.970899][T29869] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1533.973760][T29878] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1534.005564][T29869] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1534.034640][ T28] audit: type=1400 audit(1763762893.516:4304): avc: denied { write } for pid=29876 comm="syz.1.9208" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1534.064852][T29599] syz-executor: attempt to access beyond end of device [ 1534.064852][T29599] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1534.076394][ T28] audit: type=1400 audit(1763762893.546:4305): avc: denied { map } for pid=29876 comm="syz.1.9208" path="/23/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1534.102065][ T28] audit: type=1400 audit(1763762893.546:4306): avc: denied { execute } for pid=29876 comm="syz.1.9208" path="/23/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1534.117908][T29487] EXT4-fs (loop1): unmounting filesystem. [ 1534.278781][T29895] loop1: detected capacity change from 0 to 1024 [ 1534.307337][T29895] EXT4-fs: Ignoring removed oldalloc option [ 1534.313413][T29895] EXT4-fs: Ignoring removed bh option [ 1534.319187][T29895] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1534.341345][T29895] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1534.356410][T29900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9209'. [ 1534.371826][ T28] audit: type=1400 audit(1763762893.856:4307): avc: denied { write } for pid=29894 comm="syz.1.9213" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1534.407036][T29895] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.9213: Allocating blocks 497-513 which overlap fs metadata [ 1534.421371][ T28] audit: type=1400 audit(1763762893.856:4308): avc: denied { add_name } for pid=29894 comm="syz.1.9213" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1534.442226][ T28] audit: type=1400 audit(1763762893.916:4309): avc: denied { create } for pid=29894 comm="syz.1.9213" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1534.490718][T29487] EXT4-fs (loop1): unmounting filesystem. [ 1534.657304][T29920] loop5: detected capacity change from 0 to 256 [ 1534.664027][T29920] FAT-fs (loop5): Unrecognized mount option "check=relaxdd" or missing value [ 1534.690408][T29924] device pim6reg1 entered promiscuous mode [ 1534.720736][ T366] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1534.809787][T29930] loop4: detected capacity change from 0 to 256 [ 1534.820093][T23190] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1534.828879][ T28] audit: type=1400 audit(1763762894.306:4310): avc: denied { map } for pid=29929 comm="syz.4.9228" path=2F3535392FE91F7189591E9233614B2F66696C6531 dev="loop4" ino=1048751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1535.915842][T29949] loop4: detected capacity change from 0 to 128 [ 1535.924082][T29947] device pim6reg1 entered promiscuous mode [ 1535.930157][T23190] usb 2-1: Using ep0 maxpacket: 32 [ 1535.937837][T23190] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1535.950322][T23190] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1535.964209][T29949] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1535.973008][T29949] ext4 filesystem being mounted at /563/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1535.983758][T23190] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1535.992979][T23190] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1536.001450][T23190] usb 2-1: Product: syz [ 1536.005673][T23190] usb 2-1: Manufacturer: syz [ 1536.015115][T29949] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.9235: No space for directory leaf checksum. Please run e2fsck -D. [ 1536.030879][T29949] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.9235: checksumming directory block 0 [ 1536.045646][T23190] hub 2-1:4.0: USB hub found [ 1536.078031][T29949] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.9235: No space for directory leaf checksum. Please run e2fsck -D. [ 1536.114876][T29949] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.9235: checksumming directory block 0 [ 1536.131340][T29949] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.9235: No space for directory leaf checksum. Please run e2fsck -D. [ 1536.156701][T29949] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.9235: checksumming directory block 0 [ 1536.171663][T29949] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.9235: No space for directory leaf checksum. Please run e2fsck -D. [ 1536.196470][T29949] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.9235: checksumming directory block 0 [ 1536.209827][T29963] loop5: detected capacity change from 0 to 128 [ 1536.222596][T29949] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.9235: No space for directory leaf checksum. Please run e2fsck -D. [ 1536.239585][T29963] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1536.248301][T29963] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1536.260784][T29949] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.9235: checksumming directory block 0 [ 1536.260847][T23190] hub 2-1:4.0: 2 ports detected [ 1536.287559][T25641] EXT4-fs (loop5): unmounting filesystem. [ 1536.293639][T29965] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.9235: No space for directory leaf checksum. Please run e2fsck -D. [ 1536.309595][T29965] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.9235: checksumming directory block 0 [ 1536.354559][T29965] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.9235: No space for directory leaf checksum. Please run e2fsck -D. [ 1536.408795][T29965] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.9235: checksumming directory block 0 [ 1536.408844][T29949] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.9235: No space for directory leaf checksum. Please run e2fsck -D. [ 1536.436417][T29949] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.9235: checksumming directory block 0 [ 1536.448932][T29949] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.9235: No space for directory leaf checksum. Please run e2fsck -D. [ 1536.464558][T29949] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.9235: checksumming directory block 0 [ 1536.477495][T29968] loop5: detected capacity change from 0 to 256 [ 1536.484222][T29968] FAT-fs (loop5): Unrecognized mount option "check=relaxdd" or missing value [ 1536.493495][T23190] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 1536.500487][T23190] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 1536.507965][T29965] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.9235: No space for directory leaf checksum. Please run e2fsck -D. [ 1536.526253][T29965] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.9235: checksumming directory block 0 [ 1536.539526][ T1596] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1536.560450][T23190] usb 2-1: USB disconnect, device number 71 [ 1536.579159][T21295] EXT4-fs (loop4): unmounting filesystem. [ 1537.500032][ T28] audit: type=1400 audit(1763762896.926:4311): avc: denied { write } for pid=29988 comm="syz.0.9253" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1537.878143][ T28] audit: type=1400 audit(1763762897.356:4312): avc: denied { execute } for pid=30004 comm="syz.4.9259" dev="tmpfs" ino=5132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1537.943315][ T28] audit: type=1400 audit(1763762897.396:4313): avc: denied { execute_no_trans } for pid=30004 comm="syz.4.9259" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=5132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1538.389604][ T28] audit: type=1400 audit(1763762897.866:4314): avc: denied { name_bind } for pid=30034 comm="syz.5.9272" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1538.411498][ T656] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1538.540274][T30039] loop5: detected capacity change from 0 to 256 [ 1538.547040][T30039] FAT-fs (loop5): Unrecognized mount option "check=relaxdd" or missing value [ 1538.600001][ T656] usb 1-1: Using ep0 maxpacket: 32 [ 1538.606221][ T656] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1538.617396][ T656] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1538.628380][ T656] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1538.637547][ T656] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1538.645929][ T656] usb 1-1: Product: syz [ 1538.650140][ T656] usb 1-1: Manufacturer: syz [ 1538.656039][ T656] hub 1-1:4.0: USB hub found [ 1538.856575][ T656] hub 1-1:4.0: 2 ports detected [ 1538.871360][T30062] loop1: detected capacity change from 0 to 128 [ 1538.882697][T30062] syz.1.9284: attempt to access beyond end of device [ 1538.882697][T30062] loop1: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 1538.896365][T30062] syz.1.9284: attempt to access beyond end of device [ 1538.896365][T30062] loop1: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 1539.165660][ T656] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 1539.172845][ T656] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 1539.210816][ T656] usb 1-1: USB disconnect, device number 84 [ 1539.308225][T30066] loop2: detected capacity change from 0 to 40427 [ 1539.325918][T30066] F2FS-fs (loop2): fault_injection options not supported [ 1539.340538][T30066] F2FS-fs (loop2): invalid crc value [ 1539.352106][T30066] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1539.394639][T30066] F2FS-fs (loop2): Start checkpoint disabled! [ 1539.402036][T30066] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1539.497300][T30092] loop1: detected capacity change from 0 to 2048 [ 1539.512494][T30092] loop1: p1 < > p4 [ 1539.517234][T30092] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1539.766142][ T28] audit: type=1400 audit(1763762899.246:4315): avc: denied { mounton } for pid=30091 comm="syz.1.9296" path="/dev/loop1p1" dev="devtmpfs" ino=5542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1539.802880][T30092] overlayfs: unrecognized mount option "\>ÉûM}øUÒ;˜/}¶úXZ—?ÛίžyTm" or missing value [ 1539.867258][ T28] audit: type=1400 audit(1763762899.276:4316): avc: denied { read write } for pid=30097 comm="syz.4.9299" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1539.898012][ T28] audit: type=1400 audit(1763762899.276:4317): avc: denied { open } for pid=30097 comm="syz.4.9299" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1539.927417][ T28] audit: type=1400 audit(1763762899.286:4318): avc: denied { ioctl } for pid=30097 comm="syz.4.9299" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1539.991005][T15643] kworker/u4:4: attempt to access beyond end of device [ 1539.991005][T15643] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1540.117152][T30117] loop4: detected capacity change from 0 to 256 [ 1540.436596][ T28] audit: type=1400 audit(1763762899.916:4319): avc: denied { append } for pid=30118 comm="syz.5.9307" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1541.318678][T30153] capability: warning: `syz.2.9317' uses deprecated v2 capabilities in a way that may be insecure [ 1541.424941][T30173] loop5: detected capacity change from 0 to 128 [ 1541.548319][T30179] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9323'. [ 1541.701049][T30161] loop2: detected capacity change from 0 to 256 [ 1541.764472][T30161] FAT-fs (loop2): Unrecognized mount option "check=relaxdd" or missing value [ 1541.800972][ T366] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1541.847325][ T28] audit: type=1400 audit(1763762901.326:4320): avc: denied { connect } for pid=30193 comm="syz.1.9333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1542.310473][T22347] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1542.521016][T22347] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1542.526919][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1542.526933][ T28] audit: type=1400 audit(1763762902.006:4322): avc: denied { read } for pid=30247 comm="syz.0.9358" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1542.529117][T22347] usb 2-1: config 0 has no interface number 0 [ 1542.538245][ T28] audit: type=1400 audit(1763762902.026:4323): avc: denied { open } for pid=30247 comm="syz.0.9358" path="/234/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1542.567149][T22347] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1542.597460][T22347] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1542.606614][T22347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.626814][T22347] usb 2-1: Product: syz [ 1542.631097][T22347] usb 2-1: Manufacturer: syz [ 1542.635715][T22347] usb 2-1: SerialNumber: syz [ 1542.652971][T30251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9355'. [ 1542.677992][T30252] loop4: detected capacity change from 0 to 256 [ 1542.687336][T30252] FAT-fs (loop4): Unrecognized mount option "check=relaxdd" or missing value [ 1542.755778][T22347] usb 2-1: config 0 descriptor?? [ 1542.950285][ T28] audit: type=1400 audit(1763762902.436:4324): avc: denied { name_bind } for pid=30277 comm="syz.0.9371" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1542.972367][ T28] audit: type=1400 audit(1763762902.436:4325): avc: denied { node_bind } for pid=30277 comm="syz.0.9371" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1543.158817][T30284] loop5: detected capacity change from 0 to 256 [ 1543.231524][T22347] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1543.631459][T22347] CoreChips: probe of 2-1:0.41 failed with error -71 [ 1543.763978][T22347] usb 2-1: USB disconnect, device number 72 [ 1544.191273][T30316] device pim6reg1 entered promiscuous mode [ 1544.267654][T30322] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9383'. [ 1544.488241][T30312] loop5: detected capacity change from 0 to 256 [ 1544.503410][T30312] FAT-fs (loop5): Unrecognized mount option "check=relaxdd" or missing value [ 1544.566124][T30341] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9398'. [ 1544.598267][T30347] loop1: detected capacity change from 0 to 512 [ 1544.605697][ T28] audit: type=1400 audit(1763762904.096:4326): avc: denied { mounton } for pid=30346 comm="syz.1.9401" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1544.630984][T30347] FAT-fs (loop1): Unrecognized mount option "shortnP+e=mixed" or missing value [ 1544.645566][T30349] loop4: detected capacity change from 0 to 128 [ 1544.661697][T30349] syz.4.9402: attempt to access beyond end of device [ 1544.661697][T30349] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 1544.677337][T30349] syz.4.9402: attempt to access beyond end of device [ 1544.677337][T30349] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 1544.701562][ T366] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1544.722442][T30352] device pim6reg1 entered promiscuous mode [ 1545.000218][ T28] audit: type=1400 audit(1763762904.486:4327): avc: denied { mount } for pid=30377 comm="syz.5.9416" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1545.036977][T30378] loop5: detected capacity change from 0 to 2048 [ 1545.062590][ T28] audit: type=1400 audit(1763762904.506:4328): avc: denied { remount } for pid=30377 comm="syz.5.9416" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1545.094116][T30378] loop5: p1 < > p4 [ 1545.103703][T30378] loop5: p4 size 8388608 extends beyond EOD, truncated [ 1545.127718][T30379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.136118][T30379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1545.141763][ T28] audit: type=1400 audit(1763762904.626:4329): avc: denied { unmount } for pid=25641 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1545.143727][T30379] device bridge_slave_0 entered promiscuous mode [ 1545.170517][T30379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.177602][T30379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1545.185498][T30379] device bridge_slave_1 entered promiscuous mode [ 1545.284129][T30405] loop5: detected capacity change from 0 to 512 [ 1545.308530][T30405] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1545.322477][T30379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.329559][T30379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1545.336895][T30379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.343942][T30379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1545.394319][T21119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1545.405035][T21119] bridge0: port 1(bridge_slave_0) entered disabled state [ 1545.422288][T30412] loop2: detected capacity change from 0 to 256 [ 1545.428959][T30412] FAT-fs (loop2): Unrecognized mount option "check=relaxdd" or missing value [ 1545.439168][T21119] bridge0: port 2(bridge_slave_1) entered disabled state [ 1545.456826][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1545.466844][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.473926][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1545.481978][T30420] device pim6reg1 entered promiscuous mode [ 1545.495781][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1545.504344][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.511435][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1545.531188][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1545.556006][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1545.574493][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1545.599546][T30379] device veth0_vlan entered promiscuous mode [ 1545.606156][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1545.616099][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1545.624528][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1545.769303][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1545.819278][T30379] device veth1_macvtap entered promiscuous mode [ 1545.880189][T15643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1545.893390][T15643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1545.952072][T15388] device bridge_slave_1 left promiscuous mode [ 1545.958252][T15388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1545.965751][T15388] device bridge_slave_0 left promiscuous mode [ 1545.971942][T15388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1545.979765][T15388] device veth1_macvtap left promiscuous mode [ 1545.985972][T15388] device veth0_vlan left promiscuous mode [ 1546.000539][T22347] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1546.018678][T30443] loop4: detected capacity change from 0 to 128 [ 1546.028057][ T28] audit: type=1400 audit(1763762905.506:4330): avc: denied { append } for pid=30442 comm="syz.4.9439" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1546.147833][ T28] audit: type=1400 audit(1763762905.626:4331): avc: denied { mounton } for pid=30452 comm="syz.2.9444" path="/proc/111/task" dev="proc" ino=135940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1546.180356][T30443] loop4: detected capacity change from 128 to 0 [ 1546.208485][T22347] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.227051][T22347] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1546.236388][ T8] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x0000001a (sector = 1) [ 1546.242220][T22347] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1546.256518][T22347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1546.265533][T22347] usb 1-1: SerialNumber: syz [ 1547.573289][T30527] device syzkaller0 entered promiscuous mode [ 1547.583632][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1547.583646][ T28] audit: type=1400 audit(1763762907.056:4333): avc: denied { ioctl } for pid=30526 comm="syz.4.9474" path="socket:[136443]" dev="sockfs" ino=136443 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1547.634084][T30521] loop2: detected capacity change from 0 to 40427 [ 1547.642823][T30521] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1547.650620][T30521] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1547.660471][T30521] F2FS-fs (loop2): invalid crc value [ 1547.676932][T30521] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1547.713123][T30521] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1547.720891][T30521] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1547.802197][T30539] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 1547.892490][T30545] device pim6reg1 entered promiscuous mode [ 1548.033198][T30549] loop1: detected capacity change from 0 to 512 [ 1548.053120][T30549] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1548.088292][T30549] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 1548.096571][T30549] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 1548.119903][T15388] kworker/u4:1: attempt to access beyond end of device [ 1548.119903][T15388] loop1: rw=1, sector=17179852714, nr_sectors = 56 limit=512 [ 1548.533727][T30560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9488'. [ 1548.550470][T22347] usb 1-1: 0:2 : does not exist [ 1548.559535][T22347] usb 1-1: unit 5: unexpected type 0x09 [ 1548.598771][T22347] usb 1-1: USB disconnect, device number 85 [ 1549.523844][T30586] loop2: detected capacity change from 0 to 40427 [ 1549.533008][T30586] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1549.540816][T30586] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1549.549633][T30586] F2FS-fs (loop2): invalid crc value [ 1549.593572][T30586] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1549.627939][T30586] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1549.635073][T30586] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1550.756976][T30616] loop4: detected capacity change from 0 to 16 [ 1550.766282][T30616] erofs: (device loop4): mounted with root inode @ nid 36. [ 1550.825749][T30620] device pim6reg1 entered promiscuous mode [ 1551.101971][T30629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9504'. [ 1551.172356][T23190] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1551.371246][T23190] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.385502][T23190] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1551.404364][T23190] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1551.423597][T23190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1551.442900][T23190] usb 2-1: SerialNumber: syz [ 1552.640490][ T28] audit: type=1400 audit(1763762912.116:4334): avc: denied { remount } for pid=30689 comm="syz.0.9534" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1552.667962][T23190] usb 2-1: 0:2 : does not exist [ 1552.673040][T23190] usb 2-1: unit 5: unexpected type 0x09 [ 1552.718754][T23190] usb 2-1: USB disconnect, device number 73 [ 1552.985360][T30704] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1553.002794][T30706] loop1: detected capacity change from 0 to 256 [ 1553.408102][T30723] loop1: detected capacity change from 0 to 512 [ 1553.414771][T30723] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1553.559372][ T28] audit: type=1400 audit(1763762913.036:4335): avc: denied { remount } for pid=30730 comm="syz.2.9550" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1554.389774][T30745] loop5: detected capacity change from 0 to 256 [ 1554.403726][ T28] audit: type=1400 audit(1763762913.886:4336): avc: denied { mount } for pid=30748 comm="syz.1.9557" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1554.432075][ T28] audit: type=1400 audit(1763762913.886:4337): avc: denied { remount } for pid=30748 comm="syz.1.9557" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1554.452810][ T28] audit: type=1400 audit(1763762913.886:4338): avc: denied { unmount } for pid=29487 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1554.479980][ T28] audit: type=1400 audit(1763762913.886:4339): avc: denied { mounton } for pid=30744 comm="syz.5.9555" path="/370/file1/file0" dev="loop5" ino=1048767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 1554.605973][T30768] loop4: detected capacity change from 0 to 512 [ 1554.720393][T30768] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1555.515058][ T28] audit: type=1400 audit(1763762914.996:4340): avc: denied { write } for pid=30780 comm="syz.5.9569" name="mcfilter6" dev="proc" ino=4026533057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1555.741178][ T28] audit: type=1400 audit(1763762915.226:4341): avc: denied { read } for pid=30799 comm="syz.0.9578" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1555.903118][ T28] audit: type=1400 audit(1763762915.226:4342): avc: denied { open } for pid=30799 comm="syz.0.9578" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1556.314925][T30803] loop2: detected capacity change from 0 to 40427 [ 1556.343554][T30803] F2FS-fs (loop2): fault_injection options not supported [ 1556.376803][T30803] F2FS-fs (loop2): invalid crc value [ 1556.418405][T30803] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1556.453598][T30803] F2FS-fs (loop2): Start checkpoint disabled! [ 1556.462959][T30803] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1556.861128][ T350] kworker/u4:5: attempt to access beyond end of device [ 1556.861128][ T350] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1556.910185][T30862] binfmt_misc: register: failed to install interpreter file ./file0 [ 1556.996880][T30870] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9600'. [ 1557.056799][ T28] audit: type=1400 audit(1763762916.536:4343): avc: denied { create } for pid=30878 comm="syz.2.9609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1557.150654][T30886] fuse: Bad value for 'fd' [ 1557.444515][T30886] loop1: detected capacity change from 0 to 40427 [ 1557.463098][T30886] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1557.471158][T30886] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1557.480925][T30886] F2FS-fs (loop1): invalid crc value [ 1557.536379][T30886] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1557.576915][T30886] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1557.584017][T30886] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1557.768695][T30914] device pim6reg1 entered promiscuous mode [ 1557.985593][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1557.985604][ T28] audit: type=1400 audit(1763762917.466:4346): avc: denied { create } for pid=30930 comm="syz.5.9631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1558.020202][ T28] audit: type=1400 audit(1763762917.496:4347): avc: denied { sys_admin } for pid=30930 comm="syz.5.9631" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1558.328481][T30946] fuse: Bad value for 'fd' [ 1558.564728][T30949] loop5: detected capacity change from 0 to 128 [ 1558.625393][T30946] loop1: detected capacity change from 0 to 40427 [ 1558.629603][T30949] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fff0000) [ 1558.640237][T30946] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1558.647983][T30946] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1558.656826][T30946] F2FS-fs (loop1): invalid crc value [ 1558.662651][T30949] FAT-fs (loop5): Filesystem has been set read-only [ 1558.672828][T30949] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fff0000) [ 1558.711864][T30946] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1558.767279][T30946] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1558.774389][T30946] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1558.808646][ T28] audit: type=1400 audit(1763762918.286:4348): avc: denied { unmount } for pid=30948 comm="syz.5.9636" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1559.139502][T30980] device pim6reg1 entered promiscuous mode [ 1559.504778][T30984] loop2: detected capacity change from 0 to 40427 [ 1559.512247][T30984] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1559.520039][T30984] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1559.531405][T30984] F2FS-fs (loop2): invalid crc value [ 1559.560742][T30984] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1559.589585][T30984] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1559.596723][T30984] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1559.626045][T31001] loop5: detected capacity change from 0 to 512 [ 1559.642742][T31001] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1559.680664][ T366] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1560.131460][T31010] fuse: Bad value for 'fd' [ 1560.795125][T31010] loop2: detected capacity change from 0 to 40427 [ 1560.821011][T31010] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1560.828775][T31010] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1560.837981][T31010] F2FS-fs (loop2): invalid crc value [ 1560.841157][T31018] device pim6reg1 entered promiscuous mode [ 1560.858976][T31010] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1560.935622][T31010] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1560.943123][T31010] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1561.117663][ T28] audit: type=1400 audit(1763762920.596:4349): avc: denied { create } for pid=31038 comm="syz.0.9667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1561.170039][ T28] audit: type=1400 audit(1763762920.626:4350): avc: denied { connect } for pid=31038 comm="syz.0.9667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1561.189902][ T28] audit: type=1400 audit(1763762920.626:4351): avc: denied { write } for pid=31038 comm="syz.0.9667" laddr=fe80::548c:deff:fe2f:4a22 lport=1 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1561.218949][ T28] audit: type=1400 audit(1763762920.636:4352): avc: denied { read } for pid=31038 comm="syz.0.9667" laddr=fe80::548c:deff:fe2f:4a22 lport=1 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1561.553078][T31044] loop1: detected capacity change from 0 to 40427 [ 1561.560377][T31044] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1561.568128][T31044] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1561.577739][T31044] F2FS-fs (loop1): invalid crc value [ 1561.601673][T31044] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1561.650092][T31044] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1561.657241][T31044] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1561.793219][T31060] loop2: detected capacity change from 0 to 8192 [ 1561.808446][ T28] audit: type=1400 audit(1763762921.286:4353): avc: denied { mounton } for pid=31059 comm="syz.2.9673" path="/95/file2/bus" dev="loop2" ino=1048769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 1561.809577][T31060] syz.2.9673: attempt to access beyond end of device [ 1561.809577][T31060] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1561.964286][T29599] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 1561.980037][T29599] FAT-fs (loop2): Filesystem has been set read-only [ 1562.005079][ T28] audit: type=1400 audit(1763762921.486:4354): avc: denied { mounton } for pid=31067 comm="syz.5.9678" path="/394/file0" dev="tmpfs" ino=2092 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1562.298956][ T28] audit: type=1400 audit(1763762921.776:4355): avc: denied { block_suspend } for pid=31089 comm="syz.1.9684" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1562.631740][T31137] loop4: detected capacity change from 0 to 512 [ 1562.640450][T31137] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1562.713404][T31143] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1563.002683][T31152] kvm [31151]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xa200 [ 1563.011214][T31152] kvm [31151]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x2a00 [ 1563.022092][T31152] kvm [31151]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xd200 [ 1563.032690][T31152] kvm [31151]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5a00 [ 1563.041045][T31152] kvm [31151]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xe200 [ 1563.465885][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1563.465899][ T28] audit: type=1400 audit(1763762922.946:4357): avc: denied { bind } for pid=31214 comm="syz.4.9740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1563.498050][ T28] audit: type=1400 audit(1763762922.946:4358): avc: denied { watch } for pid=31215 comm="syz.1.9739" path="/140/file0" dev="tmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1563.521343][ T28] audit: type=1400 audit(1763762922.976:4359): avc: denied { name_bind } for pid=31214 comm="syz.4.9740" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1563.547450][ T28] audit: type=1400 audit(1763762922.976:4360): avc: denied { node_bind } for pid=31214 comm="syz.4.9740" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1563.571191][ T28] audit: type=1400 audit(1763762922.986:4361): avc: denied { read } for pid=31214 comm="syz.4.9740" path="socket:[140110]" dev="sockfs" ino=140110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1563.666415][ T28] audit: type=1400 audit(1763762923.146:4362): avc: denied { bind } for pid=31234 comm="syz.1.9749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1563.697776][ T28] audit: type=1400 audit(1763762923.176:4363): avc: denied { setopt } for pid=31234 comm="syz.1.9749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1563.755375][T31246] loop2: detected capacity change from 0 to 512 [ 1563.778880][T31246] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1563.922022][T31250] loop5: detected capacity change from 0 to 256 [ 1563.929895][T31250] exfat: Unknown parameter 'ÿÿÿÿ' [ 1564.161044][T31263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9759'. [ 1564.223510][T31275] overlayfs: empty lowerdir [ 1564.295349][T31287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9771'. [ 1564.319334][ T28] audit: type=1400 audit(1763762923.796:4364): avc: denied { getopt } for pid=31288 comm="syz.1.9769" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1564.424038][T31300] loop1: detected capacity change from 0 to 256 [ 1564.975167][T31329] loop1: detected capacity change from 0 to 40427 [ 1564.986514][T31329] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1564.994328][T31329] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1565.003193][T31329] F2FS-fs (loop1): invalid crc value [ 1565.046047][T31329] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1565.046983][ T28] audit: type=1400 audit(1763762924.526:4365): avc: denied { nlmsg_write } for pid=31345 comm="syz.5.9793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1565.081832][T31329] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1565.088929][T31329] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1565.136273][T31343] loop4: detected capacity change from 0 to 256 [ 1565.231159][T31363] overlayfs: failed to clone upperpath [ 1565.325625][T31380] loop4: detected capacity change from 0 to 128 [ 1565.628187][T31407] loop1: detected capacity change from 0 to 128 [ 1565.806845][ T28] audit: type=1400 audit(1763762925.256:4366): avc: denied { setopt } for pid=31412 comm="syz.1.9824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1566.155990][T31436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9833'. [ 1566.174654][T31438] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1567.140136][T31502] device syzkaller0 entered promiscuous mode [ 1567.526376][T31495] loop2: detected capacity change from 0 to 40427 [ 1567.536326][T31495] F2FS-fs (loop2): fault_injection options not supported [ 1567.549668][T31495] F2FS-fs (loop2): invalid crc value [ 1567.565854][T31495] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1567.591107][T31495] F2FS-fs (loop2): Start checkpoint disabled! [ 1567.597810][T31495] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1567.973796][T15388] kworker/u4:1: attempt to access beyond end of device [ 1567.973796][T15388] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1568.139605][T31546] loop4: detected capacity change from 0 to 16 [ 1568.163830][T31546] erofs: (device loop4): mounted with root inode @ nid 36. [ 1568.184279][T31540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9872'. [ 1568.316493][T31552] loop2: detected capacity change from 0 to 256 [ 1568.324428][T31552] exfat: Unknown parameter 'ÿÿÿÿ' [ 1568.477297][ T366] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1569.116764][T31566] loop4: detected capacity change from 0 to 40427 [ 1569.126752][T31566] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1569.134631][T31566] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1569.144075][T31566] F2FS-fs (loop4): invalid crc value [ 1569.194340][T31566] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1569.215974][T31578] device pim6reg1 entered promiscuous mode [ 1569.231019][T31566] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1569.238126][T31566] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1569.522354][T31601] loop1: detected capacity change from 0 to 256 [ 1569.530025][T31601] exfat: Unknown parameter 'ÿÿÿÿ' [ 1569.646266][T31604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9896'. [ 1569.801844][T31610] loop5: detected capacity change from 0 to 2048 [ 1569.851166][T31610] loop5: p1 < > p3 p4 < > [ 1569.855604][T31610] loop5: partition table partially beyond EOD, truncated [ 1569.866030][T31618] device pim6reg1 entered promiscuous mode [ 1569.872020][T31610] loop5: p1 start 8388352 is beyond EOD, truncated [ 1569.878531][T31610] loop5: p3 size 16777216 extends beyond EOD, truncated [ 1569.924091][ T1596] udevd[1596]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1569.938129][ T366] udevd[366]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1570.056114][T31626] loop5: detected capacity change from 0 to 256 [ 1570.556559][T31648] device pim6reg1 entered promiscuous mode [ 1570.652840][T31655] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1570.933485][T31672] loop1: detected capacity change from 0 to 256 [ 1570.941282][T31672] exfat: Unknown parameter 'ÿÿÿÿ' [ 1571.114834][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1571.114848][ T28] audit: type=1400 audit(1763762930.596:4370): avc: denied { bind } for pid=31678 comm="syz.5.9929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1571.168658][T31683] device pim6reg1 entered promiscuous mode [ 1571.990029][T11603] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1571.998494][ T28] audit: type=1400 audit(1763762931.476:4371): avc: denied { mounton } for pid=31742 comm="syz.4.9958" path="/111/file0" dev="tmpfs" ino=604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1572.171180][T11603] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1572.179344][T11603] usb 2-1: config 0 has no interface number 0 [ 1572.185471][T11603] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1572.193581][T11603] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1572.202689][T11603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.211084][T11603] usb 2-1: Product: syz [ 1572.215284][T11603] usb 2-1: Manufacturer: syz [ 1572.219913][T11603] usb 2-1: SerialNumber: syz [ 1572.227418][T11603] usb 2-1: config 0 descriptor?? [ 1572.307948][T31749] loop5: detected capacity change from 0 to 512 [ 1572.324082][T31749] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 1572.634254][T11603] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1572.643864][T11603] CoreChips: probe of 2-1:0.41 failed with error -71 [ 1572.653432][T11603] usb 2-1: USB disconnect, device number 74 [ 1574.294603][ T28] audit: type=1400 audit(1763762933.776:4372): avc: denied { mounton } for pid=31799 comm="syz.1.9983" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 1574.316084][ T28] audit: type=1400 audit(1763762933.776:4373): avc: denied { dac_override } for pid=31801 comm="syz.1.9983" capability=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1575.697752][T31850] kvm [31849]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0xbe0000000001 [ 1575.723881][T31850] kvm [31849]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x550000000001 [ 1575.743414][T31850] kvm [31849]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0xb40000000001 [ 1575.754163][T31850] kvm [31849]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0x820000000001 [ 1575.766295][T31850] kvm [31849]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0x320000000001 [ 1575.778153][T31850] kvm [31849]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0x6a0000000001 [ 1576.266596][T31897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.277794][T31897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.289232][T31897] device bridge_slave_0 entered promiscuous mode [ 1576.299129][T31897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.311306][T31897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.323727][T31897] device bridge_slave_1 entered promiscuous mode [ 1576.421679][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1576.431298][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1576.447242][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1576.456083][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1576.464780][T15388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.471846][T15388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1576.479910][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1576.488575][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1576.496937][T15388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.503990][T15388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1576.521266][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1576.529187][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1576.537257][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1576.552364][T31897] device veth0_vlan entered promiscuous mode [ 1576.562724][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1576.571175][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1576.578646][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1576.586345][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1576.602633][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1576.620424][T31897] device veth1_macvtap entered promiscuous mode [ 1576.640847][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1576.658574][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1576.795876][T31927] loop6: detected capacity change from 0 to 128 [ 1576.930098][ T28] audit: type=1400 audit(1763762936.396:4374): avc: denied { create } for pid=31911 comm="syz.5.10028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1577.054009][ T28] audit: type=1400 audit(1763762936.406:4375): avc: denied { ioctl } for pid=31911 comm="syz.5.10028" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x942e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1577.086588][ T28] audit: type=1400 audit(1763762936.406:4376): avc: denied { read write } for pid=31911 comm="syz.5.10028" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1577.111567][ T28] audit: type=1400 audit(1763762936.406:4377): avc: denied { open } for pid=31911 comm="syz.5.10028" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1577.146512][ T28] audit: type=1400 audit(1763762936.406:4378): avc: denied { ioctl } for pid=31911 comm="syz.5.10028" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1577.171791][ T28] audit: type=1400 audit(1763762936.456:4379): avc: denied { read } for pid=31925 comm="syz.2.10034" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1577.195532][ T28] audit: type=1400 audit(1763762936.486:4380): avc: denied { write } for pid=31925 comm="syz.2.10034" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1577.219160][ T28] audit: type=1400 audit(1763762936.536:4381): avc: denied { unmount } for pid=31897 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1577.239357][ T28] audit: type=1400 audit(1763762936.536:4382): avc: denied { read write } for pid=29487 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1577.263972][ T28] audit: type=1400 audit(1763762936.536:4383): avc: denied { open } for pid=29487 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1577.559183][T31970] loop1: detected capacity change from 0 to 256 [ 1577.566957][T31970] exfat: Unknown parameter 'ÿÿÿÿ' [ 1577.730758][ T366] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1578.414829][T31995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10059'. [ 1578.770837][ T505] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1578.961361][ T505] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1579.004537][ T505] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1579.039598][ T505] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1579.087064][T32013] netlink: 180 bytes leftover after parsing attributes in process `syz.2.10067'. [ 1579.089555][ T505] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1579.133383][T32013] netlink: 180 bytes leftover after parsing attributes in process `syz.2.10067'. [ 1579.139402][ T505] usb 7-1: SerialNumber: syz [ 1579.243455][T32014] netlink: 180 bytes leftover after parsing attributes in process `syz.2.10067'. [ 1579.353963][T32018] 8021q: VLANs not supported on ip6_vti0 [ 1579.598214][T32034] loop1: detected capacity change from 0 to 256 [ 1580.609416][T32050] loop1: detected capacity change from 0 to 512 [ 1581.849756][T32068] loop1: detected capacity change from 0 to 40427 [ 1581.855530][T32078] netlink: 'syz.0.10091': attribute type 4 has an invalid length. [ 1581.858973][ T505] usb 7-1: 0:2 : does not exist [ 1581.868900][T32068] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1581.876671][T32068] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1581.885545][T32068] F2FS-fs (loop1): invalid crc value [ 1581.891195][ T505] usb 7-1: unit 5: unexpected type 0x09 [ 1581.899022][ T505] usb 7-1: USB disconnect, device number 2 [ 1581.907672][T32078] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.10091'. [ 1581.936542][T32068] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1581.958335][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 1581.958352][ T28] audit: type=1400 audit(1763762941.436:4443): avc: denied { create } for pid=32083 comm="syz.2.10092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1581.993039][T32068] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1582.000130][T32068] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1582.014973][ T28] audit: type=1400 audit(1763762941.436:4444): avc: denied { write } for pid=32083 comm="syz.2.10092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1582.042470][ T28] audit: type=1400 audit(1763762941.526:4445): avc: denied { create } for pid=32094 comm="syz.0.10097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1582.070688][T32091] device pim6reg1 entered promiscuous mode [ 1582.148387][ T28] audit: type=1400 audit(1763762941.626:4446): avc: denied { create } for pid=32106 comm="syz.2.10103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1582.175948][ T28] audit: type=1400 audit(1763762941.626:4447): avc: denied { write } for pid=32106 comm="syz.2.10103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1582.531238][ T28] audit: type=1400 audit(1763762942.016:4448): avc: denied { read } for pid=32128 comm="syz.2.10111" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1582.571614][ T28] audit: type=1400 audit(1763762942.026:4449): avc: denied { open } for pid=32128 comm="syz.2.10111" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1582.595890][ T28] audit: type=1400 audit(1763762942.046:4450): avc: denied { ioctl } for pid=32128 comm="syz.2.10111" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1582.803706][T32157] loop6: detected capacity change from 0 to 128 [ 1582.894550][ T28] audit: type=1400 audit(1763762942.376:4451): avc: denied { mount } for pid=32174 comm="syz.6.10132" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1583.041771][T32184] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1583.093661][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1583.107452][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1583.128222][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1583.146411][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1583.163391][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1583.177032][T32192] loop5: detected capacity change from 0 to 512 [ 1583.181316][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1583.202892][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1583.210995][T32192] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1583.220330][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1584.004937][ T28] audit: type=1400 audit(1763762943.486:4452): avc: denied { mounton } for pid=32234 comm="syz.2.10157" path="/proc/500/task" dev="proc" ino=145076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1585.340596][T32323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10193'. [ 1586.725122][T32345] kthread_run failed with err -4 [ 1586.752387][T32356] overlayfs: failed to clone upperpath [ 1586.798260][T32362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10210'. [ 1588.422357][T32414] loop2: detected capacity change from 0 to 512 [ 1588.445694][T32414] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1588.944237][T32424] loop5: detected capacity change from 0 to 256 [ 1589.102981][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1589.103012][ T28] audit: type=1400 audit(1763762948.576:4455): avc: denied { read } for pid=32420 comm="syz.1.10235" dev="nsfs" ino=4026532311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1589.538926][ T28] audit: type=1400 audit(1763762948.576:4456): avc: denied { open } for pid=32420 comm="syz.1.10235" path="net:[4026532311]" dev="nsfs" ino=4026532311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1590.252220][T32440] fuse: Bad value for 'fd' [ 1590.937747][T32434] loop2: detected capacity change from 0 to 40427 [ 1591.141396][T32434] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1591.149172][T32434] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1591.158057][T32434] F2FS-fs (loop2): invalid crc value [ 1591.167814][ T28] audit: type=1400 audit(1763762948.576:4457): avc: denied { create } for pid=32420 comm="syz.1.10235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1591.195299][ T28] audit: type=1400 audit(1763762948.576:4458): avc: denied { bind } for pid=32420 comm="syz.1.10235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1591.250723][T32434] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1591.290197][T32434] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1591.297293][T32434] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1592.580387][T32462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10247'. [ 1592.823944][ T28] audit: type=1400 audit(1763762952.306:4459): avc: denied { bind } for pid=32474 comm="syz.6.10253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1592.848504][ T28] audit: type=1400 audit(1763762952.336:4460): avc: denied { name_bind } for pid=32474 comm="syz.6.10253" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1592.877864][T32479] loop1: detected capacity change from 0 to 128 [ 1592.885951][ T28] audit: type=1400 audit(1763762952.336:4461): avc: denied { node_bind } for pid=32474 comm="syz.6.10253" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1592.931829][T32479] syz.1.10254: attempt to access beyond end of device [ 1592.931829][T32479] loop1: rw=2049, sector=138, nr_sectors = 84 limit=128 [ 1593.556689][T32497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10261'. [ 1593.578939][T32499] loop5: detected capacity change from 0 to 256 [ 1593.586713][T32499] exfat: Unknown parameter 'ÿÿÿÿ' [ 1593.720837][ T366] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1593.728943][T32501] overlayfs: failed to clone upperpath [ 1593.889619][ T28] audit: type=1400 audit(1763762953.366:4462): avc: denied { write } for pid=32517 comm="syz.2.10272" name="udplite6" dev="proc" ino=4026532562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1694.079901][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1694.086886][ C1] (detected by 1, t=10002 jiffies, g=160477, q=362 ncpus=2) [ 1694.094250][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4295106623-4295096621), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1694.107603][ C1] rcu: rcu_preempt kthread starved for 10002 jiffies! g160477 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1694.118883][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1694.128846][ C1] rcu: RCU grace-period kthread stack dump: [ 1694.134721][ C1] task:rcu_preempt state:R running task stack:28064 pid:14 ppid:2 flags:0x00004000 [ 1694.145496][ C1] Call Trace: [ 1694.148772][ C1] [ 1694.151699][ C1] __schedule+0xb87/0x14e0 [ 1694.156115][ C1] ? __sched_text_start+0x8/0x8 [ 1694.160958][ C1] ? __mod_timer+0x7ae/0xb30 [ 1694.165543][ C1] schedule+0xbd/0x170 [ 1694.169605][ C1] schedule_timeout+0x12c/0x2e0 [ 1694.174445][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 1694.179807][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 1694.185265][ C1] ? __cfi_process_timeout+0x10/0x10 [ 1694.190547][ C1] ? prepare_to_swait_event+0x308/0x320 [ 1694.196091][ C1] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 1694.200936][ C1] ? rcu_gp_init+0xf10/0xf10 [ 1694.205519][ C1] rcu_gp_kthread+0x95/0x370 [ 1694.210100][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 1694.215301][ C1] ? __kasan_check_read+0x11/0x20 [ 1694.220318][ C1] ? __kthread_parkme+0x142/0x180 [ 1694.225333][ C1] kthread+0x281/0x320 [ 1694.229394][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 1694.234581][ C1] ? __cfi_kthread+0x10/0x10 [ 1694.239163][ C1] ret_from_fork+0x1f/0x30 [ 1694.243586][ C1] [ 1694.246607][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1694.252916][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1694.258112][ C0] NMI backtrace for cpu 0 [ 1694.258121][ C0] CPU: 0 PID: 32518 Comm: syz.6.10270 Not tainted syzkaller #0 [ 1694.258135][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1694.258144][ C0] RIP: 0010:irq_work_run_list+0x204/0x2b0 [ 1694.258167][ C0] Code: d5 f1 ff b8 00 02 00 00 49 21 c6 75 13 e8 a4 d0 f1 ff 48 83 c3 18 48 89 df e8 08 ca c3 ff eb 05 e8 91 d0 f1 ff 48 8b 5c 24 18 <48> 85 db 74 46 e8 82 d0 f1 ff e9 d8 fe ff ff 44 89 f1 80 e1 07 80 [ 1694.258180][ C0] RSP: 0018:ffffc90000007ee0 EFLAGS: 00000006 [ 1694.258193][ C0] RAX: ffffffff817e52df RBX: 0000000000000000 RCX: ffff88812c7b9440 [ 1694.258204][ C0] RDX: 0000000000010000 RSI: 0000000000000200 RDI: 0000000000000000 [ 1694.258214][ C0] RBP: ffffc90000007fa0 R08: dffffc0000000000 R09: ffffed103ee0660b [ 1694.258225][ C0] R10: ffffed103ee0660b R11: 1ffff1103ee0660a R12: dffffc0000000000 [ 1694.258236][ C0] R13: 0000000000000020 R14: 0000000000000200 R15: 0000000000000022 [ 1694.258246][ C0] FS: 00007f19d2e786c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1694.258260][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1694.258271][ C0] CR2: ffffffffffffffff CR3: 00000001201b7000 CR4: 00000000003506b0 [ 1694.258285][ C0] DR0: 000000000000a582 DR1: 0000000000000006 DR2: 0000000000000343 [ 1694.258295][ C0] DR3: 000000000000000c DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1694.258304][ C0] Call Trace: [ 1694.258309][ C0] [ 1694.258314][ C0] ? irq_work_run+0xf0/0xf0 [ 1694.258333][ C0] irq_work_run+0x6a/0xf0 [ 1694.258349][ C0] __sysvec_irq_work+0x75/0x1c0 [ 1694.258368][ C0] sysvec_irq_work+0xa1/0xc0 [ 1694.258386][ C0] [ 1694.258390][ C0] [ 1694.258395][ C0] asm_sysvec_irq_work+0x1b/0x20 [ 1694.258414][ C0] RIP: 0010:_raw_spin_unlock_irq+0x48/0x70 [ 1694.258430][ C0] Code: 74 12 48 89 fb 48 c7 c7 00 d3 ed 86 e8 31 4a c0 fc 48 89 df 48 83 3d a6 84 f9 01 00 74 26 e8 93 0c 00 00 90 fb bf 01 00 00 00 53 67 57 fc 65 8b 05 54 1f 0e 7b 85 c0 74 03 5b 5d c3 e8 14 2c [ 1694.258441][ C0] RSP: 0018:ffffc900015cfb90 EFLAGS: 00000246 [ 1694.258453][ C0] RAX: 0000000000000001 RBX: 0000000000000021 RCX: dffffc0000000000 [ 1694.258463][ C0] RDX: ffffc90002821000 RSI: 000000000007ffff RDI: 0000000000000001 [ 1694.258473][ C0] RBP: ffffc900015cfb98 R08: dffffc0000000000 R09: fffff520002b9fc0 [ 1694.258483][ C0] R10: fffff520002b9fc0 R11: 1ffff920002b9fbc R12: dffffc0000000000 [ 1694.258494][ C0] R13: 1ffff11026efb714 R14: 000000001c000004 R15: ffff8881377db8a0 [ 1694.258510][ C0] get_signal+0x12a4/0x1520 [ 1694.258533][ C0] arch_do_signal_or_restart+0xb0/0x1030 [ 1694.258550][ C0] ? __ia32_sys_rt_sigreturn+0x5e7/0x6c0 [ 1694.258569][ C0] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 1694.258593][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 1694.258615][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 1694.258631][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 1694.258646][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 1694.258665][ C0] do_syscall_64+0x58/0xa0 [ 1694.258680][ C0] ? clear_bhb_loop+0x30/0x80 [ 1694.258698][ C0] ? clear_bhb_loop+0x30/0x80 [ 1694.258716][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1694.258734][ C0] RIP: 0033:0x7f19d1e4f6b0 [ 1694.258745][ C0] Code: 48 c1 e8 12 83 e0 01 88 15 42 60 ec 00 88 05 3f 60 ec 00 c3 50 48 8d 35 e9 48 1c 00 48 8d 3d ef 48 1c 00 31 c0 e8 20 f7 ff ff <53> 89 fb 48 83 ec 10 64 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 [ 1694.258757][ C0] RSP: 002b:00007f19d2e77a38 EFLAGS: 00000246 [ 1694.258768][ C0] RAX: 0000000000000000 RBX: 00000000000047a8 RCX: 00007f19d1f8f783 [ 1694.258778][ C0] RDX: 00007f19d2e77a40 RSI: 00007f19d2e77b70 RDI: 000000000000000b [ 1694.258788][ C0] RBP: 00002000000002c0 R08: 00000000ffffffff R09: 0000000010000000 [ 1694.258799][ C0] R10: 0000000000008001 R11: 0000000000000246 R12: ffffffffffffffff [ 1694.258809][ C0] R13: 0000200000002280 R14: 00000000000047a8 R15: 0000200000002240 [ 1694.258822][ C0] [ 1862.420035][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 267s! [ 1862.428979][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 268s! [ 1862.437867][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 267s! [ 1862.446931][ C0] Showing busy workqueues and worker pools: [ 1862.452827][ C0] workqueue events: flags=0x0 [ 1862.457498][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 1862.457539][ C0] pending: free_work, kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 1862.457624][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 1862.457658][ C0] pending: psi_avgs_work, vmstat_shepherd, kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 1862.457763][ C0] workqueue events_long: flags=0x0 [ 1862.502690][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=7/256 refcnt=8 [ 1862.502740][ C0] pending: br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup [ 1862.502881][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 1862.502918][ C0] pending: br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup [ 1862.503031][ C0] workqueue events_unbound: flags=0x2 [ 1862.551412][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/512 refcnt=5 [ 1862.551454][ C0] pending: bpf_map_free_deferred, toggle_allocation_gate, flush_memcg_stats_dwork [ 1862.551517][ C0] workqueue events_power_efficient: flags=0x80 [ 1862.574376][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 1862.574422][ C0] pending: neigh_managed_work, gc_worker, neigh_periodic_work [ 1862.574495][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 1862.574530][ C0] pending: wg_ratelimiter_gc_entries, neigh_managed_work, neigh_periodic_work, check_lifetime [ 1862.574625][ C0] workqueue events_freezable_power_: flags=0x84 [ 1862.614471][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1862.614523][ C0] pending: sync_hw_clock [ 1862.614555][ C0] workqueue mm_percpu_wq: flags=0x8 [ 1862.631948][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1862.631995][ C0] pending: vmstat_update [ 1862.632027][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1862.632062][ C0] pending: vmstat_update [ 1862.632096][ C0] workqueue writeback: flags=0x4a [ 1862.661526][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/256 refcnt=5 [ 1862.661571][ C0] pending: wb_workfn, wb_workfn, wb_workfn [ 1862.661625][ C0] workqueue kblockd: flags=0x18 [ 1862.679784][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=2/256 refcnt=3 [ 1862.679830][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work [ 1862.694589][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 1862.694637][ C0] pending: blk_mq_timeout_work [ 1862.694671][ C0] workqueue dm_bufio_cache: flags=0x8 [ 1862.712919][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1862.712964][ C0] pending: work_fn [ 1862.713000][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 1862.730319][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=3 [ 1862.730362][ C0] pending: addrconf_verify_work [ 1862.730389][ C0] inactive: addrconf_verify_work [ 1862.730410][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=6 [ 1862.730447][ C0] pending: addrconf_verify_work [ 1862.730470][ C0] inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 1862.730539][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1862.777323][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1862.777368][ C0] pending: wg_packet_encrypt_worker [ 1862.777402][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1862.795562][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 1862.795601][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 1862.795649][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1862.817106][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1862.817152][ C0] pending: wg_packet_encrypt_worker [ 1862.817181][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1862.817217][ C0] pending: wg_packet_encrypt_worker [ 1862.817244][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1862.848552][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 1862.848593][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 1862.848640][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1862.870116][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1862.870162][ C0] pending: wg_packet_encrypt_worker [ 1862.870192][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1862.870229][ C0] pending: wg_packet_encrypt_worker [ 1862.870258][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1862.901828][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1862.901869][ C0] pending: wg_packet_encrypt_worker [ 1862.901902][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1862.920057][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1862.920097][ C0] pending: wg_packet_handshake_send_worker [ 1862.920127][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1862.938731][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1862.938772][ C0] pending: wg_packet_encrypt_worker [ 1862.938802][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1862.938839][ C0] pending: wg_packet_encrypt_worker [ 1862.938866][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1862.970165][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1862.970205][ C0] pending: wg_packet_handshake_send_worker [ 1862.970234][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1862.988814][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1862.988855][ C0] pending: wg_packet_encrypt_worker [ 1862.988884][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1862.988921][ C0] pending: wg_packet_encrypt_worker [ 1862.988949][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1863.020255][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1863.020300][ C0] pending: wg_packet_handshake_send_worker [ 1863.020331][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1863.038664][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1863.038700][ C0] pending: wg_packet_handshake_send_worker [ 1863.038729][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1863.057322][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1863.057364][ C0] pending: wg_packet_encrypt_worker [ 1863.057394][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1863.057430][ C0] pending: wg_packet_encrypt_worker [ 1863.057457][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1863.088752][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1863.088792][ C0] pending: wg_packet_handshake_send_worker [ 1863.088822][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1863.107417][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1863.107460][ C0] pending: wg_packet_encrypt_worker [ 1863.107489][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1863.107526][ C0] pending: wg_packet_encrypt_worker [ 1863.107554][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1863.139108][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1863.139149][ C0] pending: wg_packet_encrypt_worker [ 1863.139181][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1863.157339][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1863.157377][ C0] pending: wg_packet_handshake_send_worker [ 1863.157405][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1863.176076][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1863.176118][ C0] pending: wg_packet_encrypt_worker [ 1863.176147][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1863.176183][ C0] pending: wg_packet_encrypt_worker [ 1863.176210][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1863.207501][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1863.207539][ C0] pending: wg_packet_handshake_send_worker [ 1863.207569][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1863.226160][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1863.226200][ C0] pending: wg_packet_encrypt_worker [ 1863.226231][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1863.226266][ C0] pending: wg_packet_encrypt_worker [ 1863.226304][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1863.257596][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1863.257635][ C0] pending: wg_packet_handshake_send_worker [ 1863.257663][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1863.276267][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1863.276316][ C0] pending: wg_packet_encrypt_worker [ 1863.276347][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1863.276381][ C0] pending: wg_packet_encrypt_worker [ 1863.276409][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1863.307793][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1863.307832][ C0] pending: wg_packet_handshake_send_worker [ 1863.307862][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1863.326450][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1863.326493][ C0] pending: wg_packet_encrypt_worker [ 1863.326525][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1863.344713][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1863.344760][ C0] pending: wg_packet_handshake_send_worker [ 1863.344794][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1863.363421][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1863.363469][ C0] pending: wg_packet_encrypt_worker [ 1863.363504][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1863.381671][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1863.381712][ C0] pending: wg_packet_handshake_send_worker [ 1863.381742][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1863.400337][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1863.400379][ C0] pending: wg_packet_encrypt_worker [ 1863.400411][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1863.400446][ C0] pending: wg_packet_encrypt_worker [ 1863.400476][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1863.431767][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1863.431809][ C0] pending: wg_packet_handshake_send_worker [ 1863.431841][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1863.450427][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1863.450471][ C0] pending: wg_packet_encrypt_worker [ 1863.450501][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1863.450551][ C0] pending: wg_packet_encrypt_worker [ 1863.450580][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1863.481920][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1863.481967][ C0] pending: wg_packet_handshake_send_worker [ 1863.481998][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1863.500618][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1863.500667][ C0] pending: wg_packet_encrypt_worker [ 1863.500700][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1863.500738][ C0] pending: wg_packet_encrypt_worker