last executing test programs: 23.955918463s ago: executing program 4 (id=4348): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r4, &(0x7f0000003a40)=[{{&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000640)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="200000000000000000a0195b1edd8e0068afd00e0000010000200deb77ccf3275c62dd4fe3aa02e570954d333d9e3e8e5b1aafbb9c7117e8f1a10e16c86db0681658449d48da0e97449adedd62b8160100000000000010fe6d1900c60a43fca4f14abaf31c1a5f91"], 0x20}}], 0x2, 0x0) r5 = io_uring_setup(0x17ba, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, 0x0, 0x2) listen(0xffffffffffffffff, 0x0) unshare(0x2000400) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="3a4be99f9f727e8d0262285f8311dc64a122b0328932c72b2382283dcb1539cb6d4840c2d90f6bb77b5e93c4b5", @ANYRES64], 0x1, 0x5524, &(0x7f0000007200)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) readahead(r6, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='nilfs2_segment_usage_allocated\x00', r7}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r8, 0x8918, &(0x7f0000000080)={'veth0_to_batadv\x00', {0x2, 0x0, @private=0xfffffffc}}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 19.051088061s ago: executing program 4 (id=4359): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xc102, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000100)=[{r0, 0x8011}, {r6, 0x9}, {r7, 0xc200}, {0xffffffffffffffff, 0x401}], 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r9, 0x400455c8, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 16.674652879s ago: executing program 1 (id=4363): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="02200000000000002c00128009000100626f6e64000000001c00028010000880e0000002ac141419ac14141005000100fe000000110022002ae94f947c11663592f79418b0000000"], 0x60}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'ip6gretap0\x00', {0x1}, 0x1ff}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@newtfilter={0x2c, 0x2c, 0x20, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0xa}, {0xfff1}, {0x0, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x400}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) truncate(&(0x7f0000000080)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, 0x10) sendmmsg$unix(r6, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) 16.674124989s ago: executing program 4 (id=4364): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0xe) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x3e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r8}, 0x10) setitimer(0x1, 0x0, &(0x7f0000000240)) 14.580468646s ago: executing program 4 (id=4369): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f00000002c0), 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[], 0x50}, 0x1, 0xba01}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 13.525248195s ago: executing program 2 (id=4372): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00'}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f0000000400), 0x4003) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000f2850000008200000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x0, 0x7fe2, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) 13.089216058s ago: executing program 2 (id=4373): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = syz_io_uring_setup(0x51c4, &(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x1300000000000000, &(0x7f00000024c0), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) vmsplice(r0, &(0x7f0000002200)=[{&(0x7f0000000340)="bb6786a8370267", 0x7}, {&(0x7f0000000f80)="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", 0xff8}, {&(0x7f0000000680)}, {&(0x7f0000000380)="6a2d55a69b081c2f1e089f689d76452d38c3f4d2bc4a6bb4dbf29f0f9df50ca0ae252e23493728ad2571e9aef5f5fb3e729f134d4cc083b38afb6dab4b586205c4a97b3dc2de21d815bfdaa013c7ef8d0151056546e0d6210034069d87c3ffc334e41ea157b3b0d7808d67bace505daa97a88ed4", 0x74}, {&(0x7f00000004c0)="988953ae9fa15c7e69f8f8967e", 0xd}, {&(0x7f0000001f80)="e4f3df9d00a1d33d95004a297ef42ff85620b8c22a4f40e9d8bf667bda87e210f5c04680467bfb45f73e8e0bff125f5b30df4d8bfc0c55d5da1ab3c7eef15d991d0f1aed43900a3d9d2e24cba48fa8b0353b86991aeb32c40ae24ecf52e4611e8c5567e32c74a1d4d565c337926edbb1c418f3c17546fb118ac35c261452e4bdca8ad7fc97d6098a287e9f1d1e6100b9efde3ec66c086ec5d5a169bb4eb82d18a5b145eae9da887bef6c0cb8ed54ca7dd846a077e874007f6c92a5ae32098455", 0xc0}, {&(0x7f0000000500)="4be3bce97daebbecacab321e73a4f4ebb0a206ee93563eb192c6dcfadf50836a499ce93612402e9b319614c521286b00e31f", 0x32}, {&(0x7f0000002080)="551c86eee23a54165bd61d2a0acaf56bd91c5ffd1dcb3c3ab85e7548eae1ee093240bada7a8f487e0823d0ffbd6dfdd7da7b8419eba2121facfecc8c33b06a85f74cf10474d4482e41528dae0d205719b0988bf0eadab55f1870cb57153c858e232bc208d37d58a4c56fd237a5eb7cadff9937f138ffbb80f024e7442868788459c6f9ef09a60784c47832f067b6bff18fd38bded9c499b6e69e2c0314d398ea188e792094d9563b2be1e5", 0xab}, {&(0x7f0000002140)="8a344ccaf56dad452c1550e7069b4613f0912f9d75320e4ca94fb18e5f579ad7a06a319f61255b33eba0d3fa08eb0cc7e6e49ad21d1bcc689aef2a22411a3cdf17c1651dc14aa52ba9e6700d456473d41f50734656ef6634f05b8de4704892f535f3a8ee1640f19d1fd5e15feee897c28dcd367eaa33f70809bb20e0936fc36f8c315a1b5fe52a8da93813a1300afbaf17951a2c842c66cd4ca0280b9da8631c75d8ae75dc330acbfb1e71a1edbe57ba83d520f03504345448682277cdffb0", 0xbf}], 0x9, 0xb) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'wg2\x00'}) getresgid(0x0, &(0x7f0000002400), 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x0, 0x7ad, &(0x7f00000007c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) 11.987771011s ago: executing program 3 (id=4375): socket$inet(0x2, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x4) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x31}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x0, 0x0) dup(r0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 11.987124441s ago: executing program 1 (id=4376): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/HHPz/1Z+hGRFBQPeVNRRzcrgMdoRENjHJhCcExz2rstI2dsZqEWxB400U3/buuIEIQoosgELvoKpTwrovuvPMiu0oiOjGnudnUMnWS79fF9rDn+zl8z58dtu9g08fvXouGHSNspqS6oUqq2yUns1XilWpZkJMj10fe7zt34eLpQDDYcVa1M9Dt86tq84HR3pvDh8ZSO86/bH5dL+PeS9Mz/qnx3eN7pr93X404GnE0Fk+pqX3xeMrssy3tv+9EDdUztmU6lkZijpUs6YfteCKRUTPW39SYSFqOo2Yso1Ero6m4ppIZNa+YkZgahqFNjYKVDacfBZbvhp7Puq7MpN65bn1OXNfNv9iwidNDhc2df9ctOv93Kj0lbKKim3qDiD2UDqVDhedCPxCWiNhiSat45JvkrxH38Yg7d6nkH2/4R4KTR9++UVWvDNrZ+Xw2HaopzfvEI95CpqBQd54Kdvi0oDT/nzQW5/3ikV3l8/6y+To53FKUN8Qjk5clLrZMjB78MtU19GAhP+hTPdEVXJL/X/oXD9OzzxU6PwAAAAAAAAAArIWhP5VdvzfyA24PqGrTkn4hX+73gaXr861l1+drZW9tZfcdAAAAAIDtwskMRE3btpJ/WeS/yq/Hdv694smt3x+8v3PlMS1tNRPtH3KJrbBff1B87dkS0ygtZH71abXBNev8TlksPq3Ldqrm57f8mJO9H1+sup26X47PcsY2/q4EAAAAYCMsfuhvk2z4VTrbc+xepecEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2s4a/HJt4WK6l+WLn03KtSu8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASn4EAAD//xAR0Ao=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'xfrm0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}]}, 0x5c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x10, 0x111, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "06000000aedfaa9c"}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x50, r5, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x9}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x1000}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x1}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x101}]}, 0x50}, 0x1, 0x0, 0x0, 0x48019}, 0x4c004) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r6}, 0x10) faccessat(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x6, 0x4, 0x20001, 0x1008, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) r7 = socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x0, 0x0, 0x8000}, 0x48) sendmmsg$inet6(r7, &(0x7f0000003080)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x2b}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x3, @mcast1, 0x7}, 0x1c, &(0x7f0000001b40)=[{&(0x7f00000007c0)="451fb88ae975f58b82298dca2a6ee73f3cb4da03d559c14582e34297893c5f4fee2bf9d29330a460441f8cf14b0db1f32807d00c8ebdd96da9b1f10d67bb1302d966b57255173f30cbca983376cae6465fcddef87aa9f0ef243a649cd5331c35a5ddb32f63f9f93ac2778541ed41556476250dd8bf820efc25bb9515338270a9943688c473b1420aa454971b4e5fd0e12e4c32baf08c88c0817e8b9ba3cf7fcd469e5a7690fb959015d1b9c61fb2836e4cd98ec84f23519d5d17fd1dffbf550e26999449306b138993", 0xc9}, {&(0x7f00000008c0)="ae51afadffe4278d3259a749cc09197939a0161015e4ad0943ed1e43f93e5fca0a78d462dc3c49d25fd191e0487cbca18f298e5238135cc7018f801a98428f8c2c8417691f9a7e1be5823c67ad5b552a50c9b94e09d421cfa3029348bc48b16770a4bde74ee18e55e85272028048e1d52be4488b4ec05e3e74c55314c652fe9c1ef03d99246d658b3164c33c7401dd41f49432412ba556a7d0ca977c28eb34b7f8de3025b1e6738b1017aa8ae0853f359c9d35be546a9e97c6ad385586bf3c2db39b4275b8288556cd06c0eef535e17b10e05c4bef5f298ea0d653", 0xdb}, {&(0x7f0000000a40)="13ab3eeee593968811a98ce0eb08018efc054c8faeba6abd27c981fdbba854db371d3ef85fff0c5a815bce21f63166c801401f654ac3fd484338b4ccb726d2eb2e87f4a952aab9c6ab538365407a9b5b3f5d19b4d7d9afc8072d1d259130729a6745080c9db7398d70da7c1db8bc139e937a2a41f903526d5e15b06b01a068396389ed6dde3749593c274c153ecfa407e7aeb7f20f2eb436898fac9f0724b1894b286db08902dee46666f3af3c6a667eefa37e7eba83b8ddf74f0127ef456502cb08b0dcd36ff606a82b01910f19606a82bef4582d1f51aab907bcb478eea96c768a424e905dc525762d54a01a", 0xed}, {&(0x7f0000000b40)="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", 0x800}, {0x0}, {&(0x7f00000004c0)="b0f7", 0x2}], 0x6}}, {{&(0x7f0000001bc0)={0xa, 0x0, 0x0, @private1, 0xffffffff}, 0x1c, &(0x7f0000002dc0)=[{&(0x7f0000001c00)="7632a3a96351628cb4dd3938a5cf765c58fe946a5129ea4531b4bc92e15aafb5a52bd735535b59ee8a388f2261f74b41869cd7cd72c007cf01da982a087b27528f736540f63bff6a3a8c93f685dff6fc1c5278f039efef73966203b2b5492efe33d2145d6179f59048c93cafceac", 0x6e}, {&(0x7f0000001c80)="db606b02780f8625b339662204e04508339362a786b20b65f4438505ead1f6c2db524ec1faccf261a6c288a43e9b04c26aef2e353cbdcab7", 0x38}, {0x0}, {&(0x7f0000002cc0)="9915a92ac8ff53978046bbd8689252e5a2e873f070314f3e06e16b8871d0724b4f07fd23183401b22318ac7abd0914f17d4c50fd99a6f8e4f3a119307df345914df07164637c10d8f03ee393484a1d523c8fe47a78", 0x55}], 0x4}}, {{&(0x7f0000002e40)={0xa, 0x4e24, 0x6, @mcast2}, 0x1c, &(0x7f0000002f40)=[{&(0x7f0000002e80)="c2ad478fe859f847fab5f3d4acd45e5fc3b93feceb98bc1a5a5240a4bfb6f20104dbebbdebfbe5aa34498c24c64e0d05798a000dd8c52744f6331125816b12269fd22e775b5ef0d4b19808cd24fe5dd0f3d5d44b3860d0032d0cfd69f718ffd5b16cb3f4f670fe909c9dd1b92b25df97f36bc61847780f809221bbd1d22bd27e84658099797212b91aa0fb", 0x8b}], 0x1, &(0x7f0000002f80)=[@hopopts={{0xa0, 0x29, 0x36, {0x0, 0x10, '\x00', [@ra={0x5, 0x2, 0x3}, @pad1, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @dev}, @jumbo={0xc2, 0x4, 0xfffffff9}, @jumbo={0xc2, 0x4, 0x10001}, @generic={0x1, 0x4b, "3a506649410c7bfce8dfcdb0d99a4c559c0224e53a4c39d09938e0f14bbc62f1ca0415b6271f2eae366967d438b9ee93af47a79b501922bd64a3e5c87fd7313de1850a0ab8a880310cd811"}]}}}], 0xa0}}], 0x4, 0x0) 9.903416317s ago: executing program 2 (id=4378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0xe) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x3e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r7}, 0x10) setitimer(0x1, 0x0, &(0x7f0000000240)) 9.848461691s ago: executing program 3 (id=4379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0xe) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x3e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r8}, 0x10) setitimer(0x1, 0x0, &(0x7f0000000240)) 9.841465642s ago: executing program 1 (id=4380): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@init_itable_val}, {@nolazytime}, {@grpid}, {@prjquota}, {@norecovery}, {@lazytime}, {@errors_continue}, {@auto_da_alloc}, {@test_dummy_encryption}]}, 0xff, 0x468, &(0x7f0000000780)="$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") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x11, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) sendmsg$inet(r2, &(0x7f00000012c0)={&(0x7f0000000180)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000300)=[{&(0x7f00000001c0)}, {&(0x7f0000000240)="8a35eadcee39363a189c3c2371a2b94139ae2cf5b88f755fa0c19386a27664f6501fe66ce64c667e823fce4a8a8ea68c53192db5ee99f1ad859f46988d5bdc543f479aa0c423297dda23eefc8629135a32244e9d6caab8", 0x57}, {&(0x7f00000011c0)="73f9136b80c7d867e2998af160a5cb5d21faa6caf4b33b84cf7a05d2cf25bc3925194d661c54d8449053973e5fcb7dab8537e9f1f0888428eb9c5648a96f052355e6eddb75d4e7508c8380350fe088287fafceb84e13c3fb7ddc26ef066dcc03a6c98e0a4d7ee4a04628867dbe9e581bb89ef70304f1a73c20956df35409dabf4b2e849d46e2c5d4637c19269cddf1c48715c9b813817e696ab85f61730c34e22129626d8d56e5151027ecf240f896ae30b0312041a5dc11eff033fc4c6483de00141839cbc2341c3d4512c6e992dae0c7546f1f9fc478468f0e6ecf5a132df389ef72c4cb737203", 0xe8}], 0x3, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="240000001a001fffffffff7f0000000080"], 0x24}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080)={[{@noauto_da_alloc}, {@i_version}]}, 0x1, 0x55e, &(0x7f0000000580)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x8b4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000340)={[{@journal_dev={'journal_dev', 0x3d, 0x209}}, {@noblock_validity}, {@usrquota}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@nodiscard}]}, 0xff, 0x451, &(0x7f0000000d00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 8.866061224s ago: executing program 3 (id=4382): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000240)={[{@norecovery}, {@nogrpid}, {@grpjquota_path}, {@bh}, {@prjquota}, {@usrjquota}, {@usrjquota}, {@inlinecrypt}, {@nolazytime}]}, 0xff, 0x468, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x13) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r5) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0x4}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000005280)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0xd4) 8.862001485s ago: executing program 4 (id=4383): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000690000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007b000000850000009e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_free_batched\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000700), 0x12) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020706500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000180)='percpu_free_percpu\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000340)=ANY=[@ANYRES64=r4, @ANYRES8=r1, @ANYRES8, @ANYRES64=r6, @ANYRES8=r5], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX=r3, @ANYRES64=r1, @ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000180)='percpu_free_percpu\x00', r8}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 7.689005593s ago: executing program 0 (id=4384): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r7, r6, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000500)={'filter\x00', 0x0, 0x3, 0x60, [0x5, 0xffffffff, 0xffffffff00000000, 0xfffffffffffffffa, 0x80000001, 0x10000], 0x6, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000380)=""/96}, &(0x7f00000001c0)=0x78) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x28}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 7.688018493s ago: executing program 2 (id=4385): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) open(0x0, 0x141040, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x9, 0x2d, 0x0, 0xa, 0x4, 0x2c}, 0x48) open(&(0x7f00000000c0)='./bus\x00', 0x40004c141, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRES64, @ANYBLOB="f3fe202017a6306e05d395da058c6a6a67c4ed3dd12eafcdbeeaa61d4b5832dab2fe2ff8910d562d315299eec3c32431f69672e5a991c78b2481ea998746dd40cd85b584b3d212337e00df0f1008251a8a2ef431791db386", @ANYBLOB="d9e9aee9afb18270208988e87b8ee46c4e5fcb4148906b1b4cc6510d7df0cb3154fa4fe7e2ba6d0c10506d56b1b50613a52ea8787081c5f468b6143e7169d85d3198d422ba8211fecb99b77d0f9876c6e8364dc8a3072f3560ad0faed8d79f7c52870eb4b82ad228210fdbe3fb8556e17e922ab874a77720680a0d285fb45a2ba45bb4283a5e83070707102c25be0ede5d304e9bc132a5195ee22ada3e68fdc44c050b5d9744295b2dd946aa260fce3c7a33983552f2a761eba99aacde515f6e9b72cbdcfd23a767671c0b9ac69da2f85839ee4dc83b8c64e50b64ff5df7f603295422533ec4", @ANYRES32, @ANYRES8, @ANYRESDEC, @ANYRES8], 0x9, 0x2c1, &(0x7f00000025c0)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x107502, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) io_submit(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fadvise64(r4, 0x0, 0x0, 0x4) 5.748176299s ago: executing program 0 (id=4386): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) fstat(r2, &(0x7f0000000a40)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x10490f7aaae06a7d, &(0x7f0000000ac0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@sysvgroups}, {@auto_da_alloc}, {@dioread_nolock}, {@sysvgroups}, {@delalloc}, {@usrquota}], [{@smackfsdef={'smackfsdef', 0x3d, '(#*#}`@&,'}}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$mouse(&(0x7f0000000000), 0xffff, 0x608200) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x0, 0x0) fchown(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 5.679742784s ago: executing program 3 (id=4387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) fstat(r2, &(0x7f0000000a40)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x10490f7aaae06a7d, &(0x7f0000000ac0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@sysvgroups}, {@auto_da_alloc}, {@dioread_nolock}, {@sysvgroups}, {@delalloc}, {@usrquota}], [{@smackfsdef={'smackfsdef', 0x3d, '(#*#}`@&,'}}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$eJzs3c9rHG8ZAPBnJtlvf+VrUvVQC7bFVtKi3U0a2wYPtYLYU8Fa7zUmmxCyyYbspm1CkRTvCiIqePLkRfAPEKR/gggFvUsVRbTVgwd1ZWdnaxt3m0i3OzX5fGA67zvv7j7P27Az88687ARwaJ2LiJsRMRIRlyJiPN+e5sutdvudzutePH80316SaLXu/jmJJN/W/awkX5+IiJ2IOBoRX70V8Y3kv+M2trZX5mq16kZerzRX1yuNre3Ly6tzS9Wl6trMzPS12euzV2enBtLPiYi48aXff/87P/nyjV989sFv7/3x4jfbaY3l7a/2Y5A6XS9l/xddoxGx8S6CFWAkX5f6tH97ZIjJAACwp/Y5/kcj4lPZ+f94jGRnpwAAAMBB0vrCWPwjiWgBAAAAB1aazYFN0nI+F2As0rRc7szh/XgcT2v1RvMzi/XNtYXOXNmJKKWLy7XqVD5XeCJKSbs+nc+x7dav7KrPRMTJiPje+LGsXp6v1xaKvvgBAAAAh8SJXeP/v41n4/8jRecFAAAADNhE0QkAAAAA75zxPwAAABx8xv8AAABwoH3l9u320uo+/3rh/tbmSv3+5YVqY6W8ujlfnq9vrJeX6vWl7Df7Vvf6vFq9vv65WNt8WGlWG81KY2v73mp9c615b/m1R2ADAAAAQ3Ty7JPfJBGx8/lj2dL2QdFJAUOR7NGePSTkWV753RASAoZmpOgEgMKMFp0AUJhS0QkAhdvrOkDfyTu/HHwuAADAuzH5if73/10bgIMtLToBAGDo3P+Hw6v0+gzAq8VlAhTlI3u0v/39/1brf0oIAAAYuLFsSdJyfi9wLNK0XI74MHssQClZXK5Vp/Lxwa/HS0fa9ensncmec4YBAAAAAAAAAAAAAAAAAAAAAAAAgI5WK4kWAAAAcKBFpH9Isl/zj5gcvzC2+/rAB8nfx7N1RDz40d0fPJxrNjem29v/8nJ784f59itFXMEAAAAAduuO07vjeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYpBfPH813l2HG/dMXI2KiZ/yzR7PV0ShFxPG/JjH6yvuSiBgZQPydxxFxqlf8pJ1WTEQni17xjxUYP42IEwOID4fZk/b+52av718a57J17+/faL68rf77vzS6+7+RPvufD/cZ4/TTn1X6xn8ccXq09/6nGz/pE//8PuN//Wvb2/3aWj+OmOx5/Elei1Vprq5XGlvbl5dX55aqS9W1mZnpa7PXZ6/OTlUWl2vV/N+eMb77yZ//6039P94n/sQe/b+wz/7/8+nD5x/rFEu94l883/v4e6pP/DQ/9n06L7fbJ7vlnU75VWd++qszb+r/Qp/+v/z79zjQtmNe3Gf/L9351rN9vhQAGILG1vbKXK1W3fh/LKTxXqShMJDCkfcjDYVOoeg9EwAAMGj/OekvOhMAAAAAAAAAAAAAAAAAAAA4vIbxc2K7Y+4U01UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDf6dwAAAP//sf7Zeg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$mouse(&(0x7f0000000000), 0xffff, 0x608200) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x0, 0x0) fchown(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 5.073441979s ago: executing program 0 (id=4388): r0 = socket$inet(0x2, 0x3, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getdents64(r0, &(0x7f0000000340)=""/68, 0x44) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000480)=ANY=[@ANYRESDEC=r6, @ANYRESDEC=r4, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r8, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r8, &(0x7f0000000040), 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) 4.740943714s ago: executing program 1 (id=4389): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a2ad3c249c95b7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x0, 0x4, 0x10005}, 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x28000, 0xffffff89, 0x0, 0x146c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2004, 0x2, 0x4}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r8, &(0x7f0000003080)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2b}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x3, @mcast1}, 0x1c, &(0x7f0000001b40)=[{&(0x7f00000007c0)="451fb88ae975f58b82298dca2a6ee73f3cb4da03d559c14582e34297893c5f4fee2bf9d29330a460441f8cf14b0db1f32807d00c8ebd", 0x36}, {&(0x7f0000000a40)="13ab3eeee593968811a98ce0eb08018efc054c8faeba6abd27c981fdbba854db371d3ef85fff0c5a815bce21f63166c801401f654ac3fd484338b4ccb726d2eb2e87f4a952aab9c6ab538365407a9b5b3f5d19b4d7d9afc8072d1d259130729a6745080c9db739", 0x67}, {0x0}, {&(0x7f0000000440)}, {0x0}], 0x5}}, {{&(0x7f0000002e40)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c, &(0x7f0000002f40)=[{&(0x7f0000002e80)}], 0x1, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESHEX=r4, @ANYRES8=r2, @ANYRES8=r2, @ANYRES64, @ANYRES64], 0x18}}], 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c0000380002800400130006001000000000000800080000000000050006008a00000006001000000000"], 0x70}}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r9, 0x80045515, 0x0) 4.652575281s ago: executing program 2 (id=4390): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1d, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x2}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd1fc}, {@private=0xfffffffd, 0x7}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@barrier}, {@jqfmt_vfsold}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x10}}, {@journal_dev={'journal_dev', 0x3d, 0xd}}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") unlink(&(0x7f00000001c0)='./file2\x00') mkdir(&(0x7f0000000100)='./file2\x00', 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000400000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x75}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "449bab59"}, @global=@item_4={0x3, 0x1, 0x1, "a0e90dbe"}, @local=@item_4={0x3, 0x2, 0x0, "0f4399cb"}]}}, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) preadv(r5, &(0x7f0000002ac0)=[{&(0x7f00000025c0)=""/113, 0x71}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg2\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) close_range(r6, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000380)="0fae4d82b9790b00000f320f01cfb913080000b800c028b7ba65fbde750f300f3236673e0f01c5c4e3fd68395f66baf80cb804fb3285ef66bafc0c66b8b43f66ef0f22470f01c0", 0x47}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 4.560730107s ago: executing program 4 (id=4391): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000240)={[{@norecovery}, {@nogrpid}, {@grpjquota_path}, {@bh}, {@prjquota}, {@usrjquota}, {@usrjquota}, {@inlinecrypt}, {@nolazytime}]}, 0xff, 0x468, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x13) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r5) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0x4}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000005280)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0xd4) 3.183244041s ago: executing program 0 (id=4392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0xe) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x3e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r8}, 0x10) setitimer(0x1, 0x0, &(0x7f0000000240)) 3.125900295s ago: executing program 3 (id=4393): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_btf_id_by_name$bpf_lsm(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wg2\x00'}) geteuid() getresgid(&(0x7f00000023c0), 0x0, &(0x7f0000002440)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) r6 = socket(0x1, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 2.385586931s ago: executing program 1 (id=4394): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6685d4982a83b71b906769e737201ac6b7a7804454156569cbf3a5be811debc957b5831b89b59d703e748c7c", 0x25}, 0x48, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x36, &(0x7f0000000d00)=@raw=[@tail_call, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc}, @map_fd={0x18, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x19db}], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x0, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) 1.782529566s ago: executing program 0 (id=4395): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) r2 = dup2(r0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, r2}, 0x48) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) write$binfmt_elf64(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000002003e"], 0x78) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 498.639932ms ago: executing program 3 (id=4396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x51}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f00000000c0), 0x4001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = add_key(&(0x7f0000000080)='user\x00', 0x0, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r5, 0x0, 0xc9, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r6, 0x4b36, 0x0) keyctl$chown(0x12, r3, 0xee00, 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@delchain={0x2c, 0x65, 0x7da43c62733c9955, 0x0, 0x0, {}, [@TCA_RATE={0x6, 0x8}]}, 0x2c}}, 0x0) setrlimit(0x0, &(0x7f0000000000)={0x3, 0x3f}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 489.726373ms ago: executing program 0 (id=4397): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000240)={[{@norecovery}, {@nogrpid}, {@grpjquota_path}, {@bh}, {@prjquota}, {@usrjquota}, {@usrjquota}, {@inlinecrypt}, {@nolazytime}]}, 0xff, 0x468, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x13) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r5) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0x4}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000005280)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0xd4) 460.365536ms ago: executing program 2 (id=4398): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) fstat(r2, &(0x7f0000000a40)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x10490f7aaae06a7d, &(0x7f0000000ac0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@sysvgroups}, {@auto_da_alloc}, {@dioread_nolock}, {@sysvgroups}, {@delalloc}, {@usrquota}], [{@smackfsdef={'smackfsdef', 0x3d, '(#*#}`@&,'}}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$mouse(&(0x7f0000000000), 0xffff, 0x608200) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x0, 0x0) fchown(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 0s ago: executing program 1 (id=4399): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@init_itable_val}, {@nolazytime}, {@grpid}, {@prjquota}, {@norecovery}, {@lazytime}, {@errors_continue}, {@auto_da_alloc}, {@test_dummy_encryption}]}, 0xff, 0x468, &(0x7f0000000780)="$eJzs289vFFUcAPDvzG4BQdmKiIIgVTRp/NHSgsrBxGg08aCJiR7wWNtCkIUaWhMhjVZj8GhIvBuPJv4FnjwZ9WTiFY8mhoQoMQG9uGZ2Z0q77JbWbtlN9/NJBt6befve+3bmzb6dtxtA3xrK/kki7o6IyxFRaWSXFxhq/Hfj2vzk39fmJ5Oo1d78I6mXu35tfrKWK163I69zOI1IP03yRmJgabWz5y+cnqhWp8/l+dG5M++Nzp6/8PSpMxMnp09Onx0/duzokbHnnh1/pkWvf7u01jiz+K7v+3Bm/95X3770+uTxS+/8+E3W3z0HGsezONZa5+0MZYH/2fjbNB97vNONddm/tZtxJuVu94bVKkVEOR+cl6MSpbh58irxyidd7RywobJ79tb2hxdqwCaWRLd7AHRH8Uafff4ttjs09egJV19sfADK4r6Rb40j5UjzMgMb2P5QRBxf+OfLbIum5xC1Fs8NAADW67ts/vNUq/lfGnuWlNuZrw0NRsS9EbErIu6LiN0RcX9EvewDEfHgGtsfasrfOv9Mr/yvwFYpm/89n69tLZ//FbO/GCzluXvq8Q8kJ05Vpw/nf5PhGNia5cdaVV5U8fIvn7drf+n8L9uy9ou5YF7JlXLjAd22Ys/UxNxEpyalVz+O2FduFX+yuBKQRMTeiNi3tqp3FolTT3y9v12h28e/gg6sM9W+KiqZX4im+AvJyuuTo9uiOn14tLgqbvXTzxffaNf+uuLvgOz8b19+/TeVqPyVLF2vnV088MJq27j462dtP1OWV3/9L8qu/y3JW/U13S35vg8m5ubOjUVsSV6r55ftH7/52iJflM/iHz7Uevzvyl+Txf9QRGQX8YGIeDgiDubn7pGIeDQiDq0Q/w8vPfZuu2O9cP6nWt7/Fq//weXnf+2J0unvv23X/uruf0frqeF8T/3+dxvtu1PcRpuuZgAAANjE0vp345N0ZDGdpiMjje/w747taXVmdu7JEzPvn51qfId+MAbS4klXZcnz0LFkIa+xkR/PnxUXx4/kz42/KN1Vz49MzlSnuhw79LsdbcZ/5vdSt3sHbDi/14L+1Tz+0y71A7jzvP9D/zL+oX8Z/9C/Wo3/j5ry1gJgM6pVut0DoHvM/6F/Gf/Qv4x/6Evr+V3/RiXKK/x6X6JXEpH2RDd6JnGwh0ZTuQOju8s3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA75LwAA///foPki") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x11, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) sendmsg$inet(r2, &(0x7f00000012c0)={&(0x7f0000000180)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000300)=[{&(0x7f00000001c0)}, {&(0x7f0000000240)="8a35eadcee39363a189c3c2371a2b94139ae2cf5b88f755fa0c19386a27664f6501fe66ce64c667e823fce4a8a8ea68c53192db5ee99f1ad859f46988d5bdc543f479aa0c423297dda23eefc8629135a32244e9d6caab8", 0x57}, {&(0x7f00000011c0)="73f9136b80c7d867e2998af160a5cb5d21faa6caf4b33b84cf7a05d2cf25bc3925194d661c54d8449053973e5fcb7dab8537e9f1f0888428eb9c5648a96f052355e6eddb75d4e7508c8380350fe088287fafceb84e13c3fb7ddc26ef066dcc03a6c98e0a4d7ee4a04628867dbe9e581bb89ef70304f1a73c20956df35409dabf4b2e849d46e2c5d4637c19269cddf1c48715c9b813817e696ab85f61730c34e22129626d8d56e5151027ecf240f896ae30b0312041a5dc11eff033fc4c6483de00141839cbc2341c3d4512c6e992dae0c7546f1f9fc478468f0e6ecf5a132df389ef72c4cb737203", 0xe8}], 0x3, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="240000001a001fffffffff7f0000000080"], 0x24}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080)={[{@noauto_da_alloc}, {@i_version}]}, 0x1, 0x55e, &(0x7f0000000580)="$eJzs3c9vHFcdAPDvjH82TesEOEAFOEAhoCjreNNGVS9tLiBUVUKtOCAOqbE3lsluNmTXpTaRcP4GkEDiRP8EDkgckHriwI0jEkgIqRyQAkSgGKlIg2Z27GycNVmym9129/ORxrNv3sx837Mz+96+2cwLYGqdiYi9iJiPiLciYqncnpRLvNpZ8v3u3b21vn/31noSWfbm35MiP98WXcfkni7PuRgRb3wt4jvJw3FbO7vX1ur12s0yvdJu3Fhp7eye32qsbdY2a9er1Uurly68dPHF6tDqutz4xZ2vbr32zV//6jPv/27vKz/Ii3WyzOuuxzB1qj53GCc3GxGvPYlgYzBTrufHXA4eTxoRH4uIzxfX/1LMFP86AYBJlmVLkS11pwGASZcWY2BJWomINC07AZXOGN4nliOtN1vtc1eb29c3OmNlp2IuvbpVr104vfCH7xU7zyV5erXIK/KLdPVI+mJEnI6IHy88VaQr6836xni6PAAw9Z7ubv8j4l8LaVqp9HVoj7t6AMBHxuK4CwAAjFzZ/mfZuAsCAIzMw5//P8h0BgBgsvUx/l/e7N974mUBAEbD/X8AmD7afwCYPtp/AJgq33j99XzJ9svnX2+8vbN9rfn2+Y1a61qlsb1eWW/evFHZbDY3i2f2NB51vnqzeWP1hdh+Z6Vda7VXWju7VxrN7evtK8Vzva/U5kZSKwDgfzm9/N7vk4jYe/mpYomuuRy01TDZ0nEXABibmUEO1kGAjzSzfcH06qsJLzoJv33iZQHGo+fDvBd7vnzQT/+PIL5nBB8qZz/V//i/OZ5hshj/h+n1eOP/rwy9HMDoGf+H6ZVlydE5/+cPswCAiTTAV/iyHw6rEwKM1aMm8x7K/X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYMCcj4ruRpJViLvA0/5lWKhHPRMSpmEuubtVrFyLi2ViOiLmFPL067kIDAANK/5qU83+dXXr+5NHc+eTfC8U6Ir7/szd/8s5au31zNd/+j4W5cvvCwfRh1fvHDTCvIAAwZEX7XS3XXR/k7929tX6wjLI8dy7Hf8qpiNf3794qlk7ObOQbIxaLvsSJfyYxWx6zGBHPRcTMEOLv3Y6IT/aqf1KMjZwqZz7tjh9l7GdGGj99IH5a5HXWeefr40MoC0yb9y5HxKu9rr80zhTr3tf/YvEONbg7lzsnO3jv2++KP1tGmukRP7/mz/Qb44XffP2hjdlSJ+92xHOzveInh/GTY+I/32f8P336sz965Zi87OcRZ6N3/O5YK+3GjZXWzu75rcbaZm2zdr1avbR66cJLF1+srhRj1PnPLOs5J/3fXj737HFly+t/4pj4iz3rP3947Bf7rP+7H7z17c/dTy4cjf/lL/T8+7/bXf+jv/+8TfxSn/HXTvzy2Om78/gbZf2Tcn0Q9VF//3N9xn//L7sbfe4KAIxAa2f32lq9Xrs50Iv8U+hx+wwUIi9ifzsfdBcHq86fYwi/jWG9mHvs6tzu2rI8hsLPHvYVu7LeuPfHiwOe+Vv5GUdcnfTBWoz7xb1RxRrfexIwGvcv+nGXBAAAAAAAAAAAAAAAOM4o/uvSuOsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA5PpvAAAA//90ldN8") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x8b4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000340)={[{@journal_dev={'journal_dev', 0x3d, 0x209}}, {@noblock_validity}, {@usrquota}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@nodiscard}]}, 0xff, 0x451, &(0x7f0000000d00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): 1697.166807][T20331] device veth0_vlan entered promiscuous mode [ 1697.181364][T20331] device veth1_macvtap entered promiscuous mode [ 1697.257913][T20344] loop0: detected capacity change from 0 to 512 [ 1698.941471][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1698.951284][T20349] loop1: detected capacity change from 0 to 512 [ 1698.962572][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1698.974893][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1698.984093][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1698.993488][T20344] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1699.004913][T20344] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 1699.735962][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1699.736118][ T30] audit: type=1400 audit(2000000984.978:3725): avc: denied { bind } for pid=20350 comm="syz.2.4117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1699.767904][T20349] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1699.911209][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1699.926112][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1699.951357][ T30] audit: type=1400 audit(2000000984.978:3726): avc: denied { node_bind } for pid=20350 comm="syz.2.4117" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1699.956978][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1699.975571][ T30] audit: type=1400 audit(2000000984.988:3727): avc: denied { setopt } for pid=20350 comm="syz.2.4117" laddr=172.20.20.170 lport=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1699.981922][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1700.002961][ T30] audit: type=1400 audit(2000000984.988:3728): avc: denied { write } for pid=20350 comm="syz.2.4117" laddr=172.20.20.170 lport=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1700.011467][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 1700.033017][ T30] audit: type=1400 audit(2000000984.988:3729): avc: denied { setattr } for pid=20343 comm="syz.0.4113" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1700.039133][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1700.068536][T20349] EXT4-fs (loop1): 1 truncate cleaned up [ 1700.073967][T20349] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 1700.152766][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1700.161154][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 1700.168013][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1700.175172][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1700.183015][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1700.260178][T20368] loop3: detected capacity change from 0 to 512 [ 1700.293884][T20368] EXT4-fs (loop3): Ignoring removed bh option [ 1700.301867][T20368] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.4121: inline data xattr refers to an external xattr inode [ 1700.317151][T20368] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4121: couldn't read orphan inode 12 (err -117) [ 1700.329417][T20368] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1700.858550][T16990] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1701.295985][T16990] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1701.395861][T16990] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1701.404753][T16990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1701.412586][T16990] usb 3-1: SerialNumber: syz [ 1701.477105][T20374] binder: 20373:20374 ioctl 4018620d 0 returned -22 [ 1702.306177][ T30] audit: type=1400 audit(2000000987.498:3730): avc: denied { create } for pid=20377 comm="syz.3.4122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1702.409992][ T30] audit: type=1400 audit(2000000987.498:3731): avc: denied { connect } for pid=20377 comm="syz.3.4122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1702.432914][ T30] audit: type=1400 audit(2000000987.498:3732): avc: denied { ioctl } for pid=20377 comm="syz.3.4122" path="socket:[94623]" dev="sockfs" ino=94623 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1702.477354][ T30] audit: type=1400 audit(2000000987.528:3733): avc: denied { prog_load } for pid=20375 comm="syz.0.4119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1702.496341][ T30] audit: type=1400 audit(2000000987.528:3734): avc: denied { bpf } for pid=20375 comm="syz.0.4119" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1702.530234][ T381] device bridge_slave_1 left promiscuous mode [ 1702.534733][T20387] loop0: detected capacity change from 0 to 512 [ 1702.542916][ T381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.551575][ T381] device bridge_slave_0 left promiscuous mode [ 1702.557616][ T381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.566170][ T381] device veth1_macvtap left promiscuous mode [ 1702.572138][T20387] EXT4-fs (loop0): Ignoring removed bh option [ 1702.589643][T20388] loop3: detected capacity change from 0 to 512 [ 1702.609037][T20387] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.4126: inline data xattr refers to an external xattr inode [ 1702.610237][T20393] loop4: detected capacity change from 0 to 128 [ 1702.631211][T20387] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4126: couldn't read orphan inode 12 (err -117) [ 1702.644530][T20387] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1702.684954][T20388] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1702.705958][T20388] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038 (0x7fffffff) [ 1704.580003][ T26] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1704.732955][T16990] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 1704.739280][T20403] loop2: detected capacity change from 0 to 2048 [ 1704.741872][T16990] usb 3-1: USB disconnect, device number 69 [ 1704.760017][T20404] device syzkaller0 entered promiscuous mode [ 1704.768594][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 1704.768606][ T30] audit: type=1400 audit(2000000990.028:3772): avc: denied { write } for pid=20405 comm="syz.4.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1704.805041][ T30] audit: type=1400 audit(2000000990.028:3773): avc: denied { read write } for pid=20401 comm="syz.3.4128" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1704.829183][ T30] audit: type=1400 audit(2000000990.028:3774): avc: denied { open } for pid=20401 comm="syz.3.4128" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1704.855772][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 1704.870316][T20403] EXT4-fs error (device loop2): ext4_fill_super:4831: inode #2: comm syz.2.4129: casefold flag without casefold feature [ 1704.873518][ T30] audit: type=1400 audit(2000000990.058:3775): avc: denied { create } for pid=20405 comm="syz.4.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1704.903290][T20403] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 1704.910341][T20410] loop0: detected capacity change from 0 to 512 [ 1704.915616][ T30] audit: type=1400 audit(2000000990.058:3776): avc: denied { setopt } for pid=20405 comm="syz.4.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1704.923395][T20403] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 1704.945623][T20403] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1704.946537][ T30] audit: type=1400 audit(2000000990.058:3777): avc: denied { bind } for pid=20405 comm="syz.4.4130" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1704.990535][T20413] loop4: detected capacity change from 0 to 128 [ 1704.995690][ T30] audit: type=1400 audit(2000000990.058:3778): avc: denied { node_bind } for pid=20405 comm="syz.4.4130" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1705.018469][ T30] audit: type=1400 audit(2000000990.178:3779): avc: denied { create } for pid=20405 comm="syz.4.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1705.038996][T20410] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 1705.056626][ T30] audit: type=1400 audit(2000000990.178:3780): avc: denied { write } for pid=20405 comm="syz.4.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1705.079947][ T30] audit: type=1400 audit(2000000990.178:3781): avc: denied { connect } for pid=20405 comm="syz.4.4130" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1705.100871][T20417] loop3: detected capacity change from 0 to 512 [ 1705.103777][T20410] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.4131: invalid indirect mapped block 10 (level 1) [ 1705.121466][ T26] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1705.121471][T20410] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.4131: invalid indirect mapped block 8 (level 1) [ 1705.142379][T20410] EXT4-fs (loop0): 1 truncate cleaned up [ 1705.148001][T20417] EXT4-fs (loop3): Ignoring removed bh option [ 1705.153680][T20410] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 1705.431175][ T26] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 4533, setting to 1024 [ 1705.487336][T20417] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.4133: inline data xattr refers to an external xattr inode [ 1705.502762][T20417] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4133: couldn't read orphan inode 12 (err -117) [ 1705.514715][T20417] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1706.943138][T20434] loop2: detected capacity change from 0 to 512 [ 1707.026522][T20434] EXT4-fs (loop2): Ignoring removed bh option [ 1707.129968][T20434] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.4135: inline data xattr refers to an external xattr inode [ 1707.165608][T20434] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4135: couldn't read orphan inode 12 (err -117) [ 1707.185905][T20434] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1707.395512][T20439] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1707.404775][T20439] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1707.755707][ T26] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1707.871498][ T26] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1707.904534][T20443] loop1: detected capacity change from 0 to 40427 [ 1707.912772][T20447] loop4: detected capacity change from 0 to 512 [ 1707.950839][T20443] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1707.965968][ T26] usb 2-1: string descriptor 0 read error: -71 [ 1707.986195][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1708.002931][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.031552][ T293] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1708.035855][ T26] usb 2-1: can't set config #1, error -71 [ 1708.046251][T20443] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1708.056072][T20447] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1708.166448][ T26] usb 2-1: USB disconnect, device number 35 [ 1708.172657][T20447] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038 (0x7fffffff) [ 1708.425869][ T293] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1708.565852][ T293] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1708.580611][ T293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1708.603747][ T293] usb 1-1: SerialNumber: syz [ 1709.346309][T20445] UDC core: couldn't find an available UDC or it's busy: -16 [ 1709.353603][T20445] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1709.377677][ T293] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1710.973028][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1710.973047][ T30] audit: type=1400 audit(2000000996.218:3814): avc: denied { read } for pid=20483 comm="syz.2.4142" dev="nsfs" ino=4026532326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1711.001004][ T30] audit: type=1400 audit(2000000996.218:3815): avc: denied { open } for pid=20483 comm="syz.2.4142" path="net:[4026532326]" dev="nsfs" ino=4026532326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1711.001537][ T310] usb 1-1: USB disconnect, device number 69 [ 1711.027509][ T30] audit: type=1400 audit(2000000996.218:3816): avc: denied { create } for pid=20483 comm="syz.2.4142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1711.051708][ T30] audit: type=1400 audit(2000000996.228:3817): avc: denied { write } for pid=20444 comm="syz.0.4139" name="event2" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1711.079564][ T30] audit: type=1400 audit(2000000996.248:3818): avc: denied { bind } for pid=20483 comm="syz.2.4142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1711.202401][ T30] audit: type=1400 audit(2000000996.338:3819): avc: denied { sys_chroot } for pid=20490 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1711.227093][T20492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4143'. [ 1711.236789][ T30] audit: type=1400 audit(2000000996.338:3820): avc: denied { setgid } for pid=20490 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1711.258303][ T30] audit: type=1400 audit(2000000996.338:3821): avc: denied { setuid } for pid=20490 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1711.275056][ T310] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 1711.279953][ T30] audit: type=1400 audit(2000000996.338:3822): avc: denied { setrlimit } for pid=20490 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 1711.309384][T19337] attempt to access beyond end of device [ 1711.309384][T19337] loop1: rw=2049, want=45104, limit=40427 [ 1711.642020][T20536] loop0: detected capacity change from 0 to 512 [ 1711.706473][T20536] EXT4-fs (loop0): Ignoring removed orlov option [ 1711.714688][T20536] EXT4-fs (loop0): 1 truncate cleaned up [ 1711.720437][T20536] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,init_itable=0x000000000000000d,orlov,,errors=continue. Quota mode: none. [ 1712.956250][ T30] audit: type=1400 audit(2000000998.018:3823): avc: denied { read } for pid=20535 comm="syz.0.4146" name="rtc0" dev="devtmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1712.985600][T20545] loop4: detected capacity change from 0 to 512 [ 1713.006561][T20543] loop2: detected capacity change from 0 to 256 [ 1713.086600][T20543] FAT-fs (loop2): Unrecognized mount option "uid=00000000000000000000Ö!$9ð8ƒ‰žÜÄ ±@èùÔ¬ŒNŸŠÈz‰¯|h²¬àÈS¡œÖP‰‚äÎl`8aD¥_—¾øvA0Õ" or missing value [ 1713.106436][T20545] EXT4-fs (loop4): Ignoring removed bh option [ 1713.115865][T20545] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.4147: inline data xattr refers to an external xattr inode [ 1714.719983][T20545] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4147: couldn't read orphan inode 12 (err -117) [ 1714.884772][T20563] loop1: detected capacity change from 0 to 512 [ 1715.584924][T20564] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4150'. [ 1715.875963][T20545] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1715.980695][T20563] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1715.992174][T20563] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038 (0x7fffffff) [ 1716.004685][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1716.004699][ T30] audit: type=1400 audit(2000001001.268:3832): avc: denied { write } for pid=20568 comm="syz.2.4152" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1716.192796][ T30] audit: type=1326 audit(2000001001.448:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20568 comm="syz.2.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb158311eb9 code=0x7ffc0000 [ 1716.219344][T20569] loop2: detected capacity change from 0 to 256 [ 1716.229395][ T293] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1716.240427][ T30] audit: type=1326 audit(2000001001.478:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20568 comm="syz.2.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb158311eb9 code=0x7ffc0000 [ 1716.264351][ T30] audit: type=1326 audit(2000001001.478:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20568 comm="syz.2.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb158311eb9 code=0x7ffc0000 [ 1716.288385][ T30] audit: type=1326 audit(2000001001.478:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20568 comm="syz.2.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb158311eb9 code=0x7ffc0000 [ 1716.328748][ T30] audit: type=1326 audit(2000001001.478:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20568 comm="syz.2.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb158311eb9 code=0x7ffc0000 [ 1716.403472][ T30] audit: type=1326 audit(2000001001.478:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20568 comm="syz.2.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb158311eb9 code=0x7ffc0000 [ 1716.428249][ T30] audit: type=1326 audit(2000001001.478:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20568 comm="syz.2.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb158311eb9 code=0x7ffc0000 [ 1716.452069][ T30] audit: type=1326 audit(2000001001.478:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20568 comm="syz.2.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb158311eb9 code=0x7ffc0000 [ 1716.475621][ T30] audit: type=1326 audit(2000001001.478:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20568 comm="syz.2.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb158311eb9 code=0x7ffc0000 [ 1716.499769][ T293] usb 1-1: Using ep0 maxpacket: 16 [ 1716.635907][ T293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1716.655775][ T293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1716.675450][ T293] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1716.705780][ T293] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1716.724753][ T293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.739380][ T293] usb 1-1: config 0 descriptor?? [ 1716.818412][T20580] loop2: detected capacity change from 0 to 40427 [ 1716.887452][T20580] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1716.895138][T20580] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1716.904516][T20580] F2FS-fs (loop2): invalid crc value [ 1716.911328][T20580] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 1716.940747][T20580] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1716.947688][T20580] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1716.992914][T20580] attempt to access beyond end of device [ 1716.992914][T20580] loop2: rw=2049, want=45104, limit=40427 [ 1717.026675][T20580] attempt to access beyond end of device [ 1717.026675][T20580] loop2: rw=0, want=45104, limit=40427 [ 1717.088905][T20172] attempt to access beyond end of device [ 1717.088905][T20172] loop2: rw=2049, want=40968, limit=40427 [ 1717.216944][ T293] microsoft 0003:045E:07DA.002D: ignoring exceeding usage max [ 1717.265580][ T293] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.002D/input/input96 [ 1717.367725][ T293] microsoft 0003:045E:07DA.002D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1717.438340][ T293] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1717.447880][ T293] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1717.458326][ T293] hid-generic 0000:0000:0000.002E: hidraw1: HID v0.00 Device [syz0] on syz1 [ 1717.578750][ T620] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1717.589093][ T8855] tipc: Disabling bearer [ 1717.594235][ T8855] tipc: Left network mode [ 1717.603332][T20594] bridge0: port 1(bridge_slave_0) entered blocking state [ 1717.610651][T20594] bridge0: port 1(bridge_slave_0) entered disabled state [ 1717.618171][T20594] device bridge_slave_0 entered promiscuous mode [ 1717.625074][T20594] bridge0: port 2(bridge_slave_1) entered blocking state [ 1717.632431][T20594] bridge0: port 2(bridge_slave_1) entered disabled state [ 1717.640071][T20594] device bridge_slave_1 entered promiscuous mode [ 1717.719851][T20594] bridge0: port 2(bridge_slave_1) entered blocking state [ 1717.726721][T20594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1717.733808][T20594] bridge0: port 1(bridge_slave_0) entered blocking state [ 1717.740599][T20594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1717.768086][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1717.777279][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1717.784433][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1717.789310][T20589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4155'. [ 1717.810734][T16990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1717.819455][T16990] bridge0: port 1(bridge_slave_0) entered blocking state [ 1717.826317][T16990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1717.833838][T16990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1717.841925][T16990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1717.848809][T16990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1717.868650][T16990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1717.877292][T16990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1717.885000][T16990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1717.899936][T20594] device veth0_vlan entered promiscuous mode [ 1717.909486][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1717.917803][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1717.925022][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1717.941320][T20594] device veth1_macvtap entered promiscuous mode [ 1717.949236][T16990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1717.957267][ T620] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1717.983812][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1717.992607][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1718.038751][T20603] loop3: detected capacity change from 0 to 1024 [ 1718.075870][ T620] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1718.084915][ T620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1718.093167][ T620] usb 3-1: SerialNumber: syz [ 1718.117946][T20603] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1718.146841][ T8855] device bridge_slave_1 left promiscuous mode [ 1718.159747][ T8855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1718.173825][ T8855] device veth1_macvtap left promiscuous mode [ 1718.179837][ T8855] device veth0_vlan left promiscuous mode [ 1718.969074][T12732] usb 1-1: USB disconnect, device number 70 [ 1718.986521][T20610] loop0: detected capacity change from 0 to 512 [ 1719.292690][T20608] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4157'. [ 1719.338954][T20610] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 1719.351962][T20610] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 1719.738588][T20618] UDC core: couldn't find an available UDC or it's busy: -16 [ 1719.757806][T20618] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1719.766295][T20616] input: syz0 as /devices/virtual/input/input98 [ 1719.771186][T20620] loop3: detected capacity change from 0 to 1024 [ 1719.798875][ T620] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1719.799592][T20621] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1719.812249][T20620] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1719.834129][T20621] binder: 20614:20621 ioctl 4018620d 0 returned -22 [ 1719.870541][T20621] loop1: detected capacity change from 0 to 512 [ 1719.877520][T20620] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,lazytime,norecovery,data_err=ignore,mblk_io_submit,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 1719.905818][ T1916] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1719.926508][T20621] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1719.964571][T20621] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.4161: casefold flag without casefold feature [ 1719.978324][T20621] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.4161: missing EA_INODE flag [ 1720.056097][T20621] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.4161: error while reading EA inode 12 err=-117 [ 1720.069285][T20621] EXT4-fs (loop1): 1 orphan inode deleted [ 1720.075190][T20621] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback. [ 1720.175771][ T1916] usb 5-1: Using ep0 maxpacket: 32 [ 1720.366753][T16990] usb 3-1: USB disconnect, device number 70 [ 1720.378109][T16990] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 1720.485902][ T1916] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1720.494524][ T1916] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1720.503426][ T1916] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1720.512539][ T1916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1720.540953][ T1916] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1720.550719][ T1916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1720.560470][ T1916] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1720.570292][ T1916] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1720.583396][ T1916] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1720.621245][T20650] netlink: 41414 bytes leftover after parsing attributes in process `syz.0.4163'. [ 1720.642660][ T1916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.656476][ T1916] usb 5-1: config 0 descriptor?? [ 1720.682404][T20678] loop1: detected capacity change from 0 to 512 [ 1720.692364][T20681] loop0: detected capacity change from 0 to 512 [ 1720.708129][T20683] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20683 comm=syz.3.4164 [ 1720.730868][T20685] loop3: detected capacity change from 0 to 512 [ 1720.746795][T20678] EXT4-fs (loop1): Ignoring removed orlov option [ 1720.753445][T20685] EXT4-fs (loop3): Ignoring removed bh option [ 1720.763409][T20685] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.4167: inline data xattr refers to an external xattr inode [ 1720.766165][T20681] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1720.789420][T20685] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4167: couldn't read orphan inode 12 (err -117) [ 1720.789552][T20681] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038 (0x7fffffff) [ 1720.810974][T20685] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1720.820906][T20678] EXT4-fs (loop1): 1 orphan inode deleted [ 1720.890773][T20678] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,orlov,usrjquota=,resgid=0x0000000000000000,sysvgroups,delalloc,errors=continue,. Quota mode: writeback. [ 1720.953311][T20678] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038 (0x7fffffff) [ 1720.966894][ T1916] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1721.147066][T20697] overlayfs: missing 'lowerdir' [ 1721.325769][T16990] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1721.611045][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1721.611065][ T30] audit: type=1400 audit(2000001006.806:3901): avc: denied { read write } for pid=20598 comm="syz.4.4158" name="lp0" dev="devtmpfs" ino=3998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1721.671368][ T30] audit: type=1400 audit(2000001006.806:3902): avc: denied { open } for pid=20598 comm="syz.4.4158" path="/dev/usb/lp0" dev="devtmpfs" ino=3998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1721.695343][T16990] usb 3-1: Using ep0 maxpacket: 8 [ 1721.825809][T16990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1721.915869][T16990] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1721.924870][T16990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1721.933087][T16990] usb 3-1: SerialNumber: syz [ 1721.941863][T16990] usb 3-1: config 0 descriptor?? [ 1721.986766][T16990] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 1721.993598][T16990] usb 3-1: No valid video chain found. [ 1722.062976][T20703] loop0: detected capacity change from 0 to 512 [ 1722.147956][T20703] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1722.165905][T20703] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 1722.277076][T20704] loop3: detected capacity change from 0 to 40427 [ 1722.294808][T20704] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1722.302694][T20704] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1722.306080][T20709] loop1: detected capacity change from 0 to 512 [ 1722.315626][T20704] F2FS-fs (loop3): invalid crc value [ 1722.323389][T20704] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1722.353370][T20704] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1722.360291][T20704] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1722.541332][T20704] attempt to access beyond end of device [ 1722.541332][T20704] loop3: rw=2049, want=45224, limit=40427 [ 1722.572934][T20709] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1722.581442][T20709] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 1722.594214][T20709] EXT4-fs (loop1): 1 truncate cleaned up [ 1722.600592][T20709] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 1722.684576][ T30] audit: type=1400 audit(2000001007.946:3903): avc: denied { remount } for pid=20705 comm="syz.1.4171" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1722.704567][T20709] EXT4-fs (loop1): re-mounted. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota=. Quota mode: writeback. [ 1722.721524][ T1916] usb 3-1: USB disconnect, device number 71 [ 1723.098144][ T310] usb 5-1: USB disconnect, device number 45 [ 1723.137703][ T310] usblp0: removed [ 1723.169295][ T8855] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1723.169672][ T30] audit: type=1400 audit(2000001008.436:3904): avc: denied { create } for pid=20721 comm="syz.2.4172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1723.189934][T20720] loop4: detected capacity change from 0 to 1024 [ 1723.206805][ T8855] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1723.228970][T20725] loop0: detected capacity change from 0 to 512 [ 1723.247242][T20725] EXT4-fs (loop0): Ignoring removed bh option [ 1723.263683][ T30] audit: type=1400 audit(2000001008.436:3905): avc: denied { bind } for pid=20721 comm="syz.2.4172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1723.290369][T20725] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.4173: inline data xattr refers to an external xattr inode [ 1723.305482][T20725] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4173: couldn't read orphan inode 12 (err -117) [ 1723.320735][T20720] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1723.331158][T20725] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1723.341104][T20731] loop1: detected capacity change from 0 to 128 [ 1723.356825][ T30] audit: type=1400 audit(2000001008.436:3906): avc: denied { listen } for pid=20721 comm="syz.2.4172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1723.366981][T20720] EXT4-fs (loop4): Ignoring removed orlov option [ 1723.377483][ T30] audit: type=1400 audit(2000001008.436:3907): avc: denied { connect } for pid=20721 comm="syz.2.4172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1723.558719][T20731] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 1723.558719][T20731] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1723.558719][T20731] [ 1724.024538][T20731] EXT4-fs (loop1): Unrecognized mount option "hash" or missing value [ 1724.042761][T20720] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 1725.284146][ T30] audit: type=1400 audit(2000001010.126:3908): avc: denied { setopt } for pid=20719 comm="syz.4.4174" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1725.337012][ T30] audit: type=1400 audit(2000001010.606:3909): avc: denied { write } for pid=20739 comm="syz.0.4179" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1725.462236][ T30] audit: type=1400 audit(2000001010.726:3910): avc: denied { write } for pid=20753 comm="syz.3.4180" name="ppp" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1726.368248][T20761] loop0: detected capacity change from 0 to 256 [ 1727.344861][T12732] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1727.360749][T20769] loop1: detected capacity change from 0 to 512 [ 1727.603086][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1727.603145][ T30] audit: type=1400 audit(2000001012.726:3913): avc: denied { name_bind } for pid=20764 comm="syz.2.4183" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1727.635289][T20773] loop4: detected capacity change from 0 to 512 [ 1727.650588][T20769] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1727.661734][T20769] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038 (0x7fffffff) [ 1727.676874][T20773] EXT4-fs (loop4): Ignoring removed bh option [ 1727.744908][T20767] loop0: detected capacity change from 0 to 40427 [ 1727.760561][T20773] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.4181: inline data xattr refers to an external xattr inode [ 1727.775453][T20773] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4181: couldn't read orphan inode 12 (err -117) [ 1727.787618][T20773] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1727.787900][T20767] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1727.853032][T20767] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1729.882081][T20793] Restarting kernel threads ... done. [ 1729.969380][ T30] audit: type=1400 audit(2000001015.106:3914): avc: denied { write } for pid=20789 comm="syz.3.4187" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1730.004409][T20331] attempt to access beyond end of device [ 1730.004409][T20331] loop0: rw=2049, want=45104, limit=40427 [ 1730.160837][ T30] audit: type=1400 audit(2000001015.106:3915): avc: denied { open } for pid=20789 comm="syz.3.4187" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1730.238802][ T30] audit: type=1400 audit(2000001015.146:3916): avc: denied { ioctl } for pid=20789 comm="syz.3.4187" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1730.983276][T20791] loop2: detected capacity change from 0 to 40427 [ 1730.991313][ T30] audit: type=1400 audit(2000001015.156:3917): avc: denied { ioctl } for pid=20789 comm="syz.3.4187" path="socket:[96399]" dev="sockfs" ino=96399 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1731.367496][T20791] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1731.392708][T20791] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1731.451408][T20791] F2FS-fs (loop2): invalid crc value [ 1731.457902][T20791] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1731.506554][T20791] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1731.513627][T20791] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1731.559324][T20791] attempt to access beyond end of device [ 1731.559324][T20791] loop2: rw=2049, want=45224, limit=40427 [ 1732.106483][ T30] audit: type=1400 audit(2000001017.376:3918): avc: denied { create } for pid=20811 comm="syz.1.4190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1732.708235][ T45] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1732.717696][ T45] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1732.898717][T20821] loop2: detected capacity change from 0 to 512 [ 1732.965783][ T293] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1732.975410][T20821] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1732.986398][T20821] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff) [ 1734.385852][ T293] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1734.435786][ T30] audit: type=1400 audit(2000001019.696:3919): avc: denied { write } for pid=20811 comm="syz.1.4190" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1734.462906][T20829] loop4: detected capacity change from 0 to 2048 [ 1734.478346][T20830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4191'. [ 1734.488306][T20830] device bridge_slave_1 left promiscuous mode [ 1734.495123][T20830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.506685][ T293] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1734.506744][T20830] device bridge_slave_0 left promiscuous mode [ 1734.516225][ T293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1734.524081][T20830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.530214][ T293] usb 1-1: SerialNumber: syz [ 1735.051449][T20829] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1735.446145][T20819] UDC core: couldn't find an available UDC or it's busy: -16 [ 1735.453428][T20819] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1735.725782][ T620] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1735.935993][T20824] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1736.125835][ T620] usb 3-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice=ac.5f [ 1736.134774][ T620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.170024][T20842] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 1736.182079][T20842] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1736.182079][T20842] [ 1736.191547][T20842] EXT4-fs (loop4): Total free blocks count 0 [ 1736.197354][T20842] EXT4-fs (loop4): Free/Dirty block details [ 1736.203071][T20842] EXT4-fs (loop4): free_blocks=2415919104 [ 1736.208655][T20842] EXT4-fs (loop4): dirty_blocks=16 [ 1736.213954][T20842] EXT4-fs (loop4): Block reservation details [ 1736.219859][T20842] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 1736.226547][T20842] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 1736.238831][T20842] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1736.238831][T20842] [ 1736.251368][ T30] audit: type=1400 audit(2000001021.516:3920): avc: denied { write } for pid=20836 comm="syz.1.4196" path="socket:[95106]" dev="sockfs" ino=95106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1736.276369][ T30] audit: type=1400 audit(2000001021.516:3921): avc: denied { nlmsg_read } for pid=20836 comm="syz.1.4196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1736.309905][ T620] usb 3-1: config 0 descriptor?? [ 1736.350140][ T293] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1736.379824][ T293] usb 1-1: USB disconnect, device number 71 [ 1736.395629][ T293] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 1736.592014][ T30] audit: type=1400 audit(2000001021.856:3922): avc: denied { connect } for pid=20862 comm="syz.1.4198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1736.627998][T20881] loop1: detected capacity change from 0 to 512 [ 1736.640698][ T30] audit: type=1400 audit(2000001021.886:3923): avc: denied { unmount } for pid=19337 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1736.697121][ T620] usb 3-1: USB disconnect, device number 73 [ 1738.015992][ T5296] udevd[5296]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1738.040045][T20881] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1738.051215][T20881] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038 (0x7fffffff) [ 1738.157556][T20895] netlink: 'syz.0.4202': attribute type 28 has an invalid length. [ 1738.171114][ T30] audit: type=1400 audit(2000001023.436:3924): avc: denied { unmount } for pid=20331 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1738.214030][T20898] loop0: detected capacity change from 0 to 512 [ 1738.287781][T20898] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1738.298752][T20898] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038 (0x7fffffff) [ 1739.897635][ T30] audit: type=1400 audit(2000001024.546:3925): avc: denied { write } for pid=20897 comm="syz.0.4203" name="bus" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1739.951460][ T30] audit: type=1400 audit(2000001024.546:3926): avc: denied { add_name } for pid=20897 comm="syz.0.4203" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1739.972141][ T30] audit: type=1400 audit(2000001024.556:3927): avc: denied { setattr } for pid=20897 comm="syz.0.4203" name="work" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1739.994232][ T30] audit: type=1400 audit(2000001024.556:3928): avc: denied { remove_name } for pid=20897 comm="syz.0.4203" name="#227" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1740.023156][ T30] audit: type=1400 audit(2000001024.556:3929): avc: denied { rename } for pid=20897 comm="syz.0.4203" name="#227" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1740.055002][ T30] audit: type=1400 audit(2000001024.556:3930): avc: denied { unlink } for pid=20897 comm="syz.0.4203" name="#227" dev="loop0" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1740.111866][ T30] audit: type=1400 audit(2000001024.556:3931): avc: denied { unlink } for pid=20897 comm="syz.0.4203" name="#228" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1740.239219][T20919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4208'. [ 1740.285442][T20919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4208'. [ 1740.345971][T20919] netlink: 165 bytes leftover after parsing attributes in process `syz.1.4208'. [ 1740.358693][ T30] audit: type=1400 audit(2000001024.956:3932): avc: denied { read } for pid=20897 comm="syz.0.4203" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1740.365765][ T1916] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1740.397287][T20919] loop1: detected capacity change from 0 to 512 [ 1740.407265][ T30] audit: type=1400 audit(2000001024.956:3933): avc: denied { open } for pid=20897 comm="syz.0.4203" path="/23/file0/bus/file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1740.433308][T20919] EXT4-fs error (device loop1): ext4_get_journal_inode:5150: comm syz.1.4208: inode #196608: comm syz.1.4208: iget: illegal inode # [ 1740.449134][ T30] audit: type=1400 audit(2000001025.196:3934): avc: denied { rmdir } for pid=20331 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1740.471857][T20919] EXT4-fs (loop1): no journal found [ 1740.572855][T20921] loop0: detected capacity change from 0 to 40427 [ 1740.754572][T20921] F2FS-fs (loop0): invalid crc value [ 1740.939813][ T1916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1740.961583][ T1916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1740.966051][T20921] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1740.972199][ T1916] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 1740.986255][ T1916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.995128][ T1916] usb 5-1: config 0 descriptor?? [ 1741.023261][T20921] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1742.469855][T20943] loop3: detected capacity change from 0 to 2048 [ 1742.487730][T20943] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1742.532618][T20952] binder: 20945:20952 ioctl 4018620d 0 returned -22 [ 1743.397048][T20951] loop2: detected capacity change from 0 to 256 [ 1743.486033][ T1916] usbhid 5-1:0.0: can't add hid device: -71 [ 1743.492562][T20951] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1743.504125][ T1916] usbhid: probe of 5-1:0.0 failed with error -71 [ 1743.579292][T20959] loop4: detected capacity change from 0 to 512 [ 1743.581090][ T1916] usb 5-1: USB disconnect, device number 46 [ 1743.615255][T20959] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1743.629050][T20959] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038 (0x7fffffff) [ 1743.648895][T20965] loop3: detected capacity change from 0 to 512 [ 1743.757520][T20965] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1743.769041][T20965] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 1743.987802][ T620] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1744.968425][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1744.968445][ T30] audit: type=1400 audit(2000001030.226:3948): avc: denied { setattr } for pid=20958 comm="syz.4.4217" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1745.003513][ T30] audit: type=1400 audit(2000001030.226:3949): avc: denied { write } for pid=20958 comm="syz.4.4217" dev="loop4" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1745.029390][T20976] sysfs: Unknown parameter 'tid' [ 1745.074794][ T293] kernel write not supported for file /vcs (pid: 293 comm: kworker/0:3) [ 1745.084032][ T30] audit: type=1400 audit(2000001030.296:3950): avc: denied { mount } for pid=20970 comm="syz.2.4219" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1745.106204][ T30] audit: type=1400 audit(2000001030.296:3951): avc: denied { remount } for pid=20970 comm="syz.2.4219" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1745.178400][ T30] audit: type=1400 audit(2000001030.436:3952): avc: denied { unmount } for pid=19337 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1745.257326][ T30] audit: type=1400 audit(2000001030.506:3953): avc: denied { unmount } for pid=20172 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1745.285110][T20985] loop2: detected capacity change from 0 to 1024 [ 1745.333539][ T30] audit: type=1400 audit(2000001030.596:3954): avc: denied { ioctl } for pid=20978 comm="syz.3.4230" path="/dev/usbmon0" dev="devtmpfs" ino=135 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1745.388633][T20985] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1745.435855][ T620] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1745.446001][ T620] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1745.454839][ T620] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1745.464237][ T620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.476069][ T620] usb 1-1: config 0 descriptor?? [ 1746.386055][T20966] loop0: detected capacity change from 0 to 8192 [ 1746.415787][ T382] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1746.436245][T20966] loop0: p1 < > p2 p3 p4 < p5 > [ 1746.442908][T20966] loop0: p3 size 16744448 extends beyond EOD, truncated [ 1746.655760][ T382] usb 4-1: Using ep0 maxpacket: 8 [ 1746.795849][ T382] usb 4-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 1746.806048][ T382] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1746.814794][ T382] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1746.827932][ T382] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1746.837114][ T382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.972411][ T100] loop0: p1 < > p2 p3 p4 < p5 > [ 1746.978261][ T100] loop0: p3 size 16744448 extends beyond EOD, truncated [ 1746.989452][ T26] usb 1-1: USB disconnect, device number 72 [ 1747.020930][T20997] loop2: detected capacity change from 0 to 512 [ 1747.070235][T20997] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1747.081175][T20997] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038 (0x7fffffff) [ 1747.095060][T20997] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #2: comm syz.2.4223: corrupted inode contents [ 1747.107382][T20997] EXT4-fs error (device loop2): ext4_dirty_inode:6024: inode #2: comm syz.2.4223: mark_inode_dirty error [ 1747.120447][T20997] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #2: comm syz.2.4223: corrupted inode contents [ 1747.133358][T20997] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.4223: mark_inode_dirty error [ 1747.536034][ T382] usb 4-1: string descriptor 0 read error: -71 [ 1747.542330][ T382] hub 4-1:1.0: bad descriptor, ignoring hub [ 1747.549613][ T382] hub: probe of 4-1:1.0 failed with error -5 [ 1747.555624][ T382] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 1747.586062][ T382] usb 4-1: USB disconnect, device number 54 [ 1748.977941][T20172] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /38/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 1749.002157][T20172] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /38/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 1749.133615][T20172] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /38/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 1749.159004][T20172] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /38/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1749.179639][T20172] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /38/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 1749.200546][T20172] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /38/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 1749.238025][ T30] audit: type=1400 audit(2000001034.506:3955): avc: denied { create } for pid=21016 comm="syz.0.4228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1749.294950][ T30] audit: type=1400 audit(2000001034.526:3956): avc: denied { bind } for pid=21016 comm="syz.0.4228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1749.985811][ T30] audit: type=1400 audit(2000001035.106:3957): avc: denied { mounton } for pid=21016 comm="syz.0.4228" path="/27/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1751.289012][T21026] loop0: detected capacity change from 0 to 512 [ 1751.302672][ T30] audit: type=1400 audit(2000001036.536:3958): avc: denied { unmount } for pid=20331 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1751.336837][T21028] loop1: detected capacity change from 0 to 512 [ 1751.348233][T21026] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1751.359831][T21026] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff) [ 1751.595814][T21033] overlayfs: missing 'lowerdir' [ 1751.756415][T21036] loop3: detected capacity change from 0 to 512 [ 1751.776917][T21028] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1751.787863][T21028] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038 (0x7fffffff) [ 1751.826342][T21036] EXT4-fs (loop3): Ignoring removed bh option [ 1751.840879][T21036] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.4233: inline data xattr refers to an external xattr inode [ 1751.875343][T21036] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4233: couldn't read orphan inode 12 (err -117) [ 1751.902690][T21036] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1752.076207][ T390] device bridge_slave_1 left promiscuous mode [ 1752.082515][ T390] bridge1: port 1(bridge_slave_1) entered disabled state [ 1752.098316][ T390] device bridge_slave_0 left promiscuous mode [ 1752.388090][ T390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.406841][ T390] device veth1_macvtap left promiscuous mode [ 1752.412669][ T390] device veth0_vlan left promiscuous mode [ 1752.709385][ T30] audit: type=1400 audit(2000001037.976:3959): avc: denied { ioctl } for pid=21032 comm="syz.4.4234" path="socket:[97389]" dev="sockfs" ino=97389 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1752.719402][T21039] loop4: detected capacity change from 0 to 2048 [ 1752.826779][T21039] loop4: p1 p3 [ 1752.830240][T21039] loop4: p1 size 33024 extends beyond EOD, truncated [ 1752.837291][T21039] loop4: p3 start 4284289 is beyond EOD, truncated [ 1752.866445][ T30] audit: type=1400 audit(2000001038.136:3960): avc: denied { create } for pid=21046 comm="syz.0.4236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1752.921856][T21048] loop3: detected capacity change from 0 to 2048 [ 1753.027849][T21048] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1754.348193][T21063] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1754.646413][T21063] input: syz1 as /devices/virtual/input/input102 [ 1754.775896][T21074] loop3: detected capacity change from 0 to 512 [ 1754.837276][T20172] EXT4-fs error: 8 callbacks suppressed [ 1754.837293][T20172] EXT4-fs error (device loop2): ext4_lookup:1852: inode #19: comm syz-executor: 'file1' linked to parent dir [ 1754.848505][T21069] loop4: detected capacity change from 0 to 40427 [ 1754.855308][T20172] EXT4-fs error (device loop2): ext4_lookup:1852: inode #19: comm syz-executor: 'file1' linked to parent dir [ 1754.871722][T21074] EXT4-fs (loop3): Ignoring removed bh option [ 1754.879606][T21074] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.4241: inline data xattr refers to an external xattr inode [ 1754.894427][T21074] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4241: couldn't read orphan inode 12 (err -117) [ 1754.906842][T21074] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1754.920288][T21069] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1755.004304][T21069] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1755.190401][ T26] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1755.226830][T21086] bridge0: port 1(bridge_slave_0) entered blocking state [ 1755.233829][T21086] bridge0: port 1(bridge_slave_0) entered disabled state [ 1755.241513][T21086] device bridge_slave_0 entered promiscuous mode [ 1755.250555][T21086] bridge0: port 2(bridge_slave_1) entered blocking state [ 1755.439440][T21092] loop0: detected capacity change from 0 to 256 [ 1756.618501][ T30] audit: type=1400 audit(2000001040.626:3961): avc: denied { map } for pid=21084 comm="syz.0.4244" path="socket:[97427]" dev="sockfs" ino=97427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1756.652895][T21086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1756.703463][T21086] device bridge_slave_1 entered promiscuous mode [ 1756.899223][T21096] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4245'. [ 1756.910508][T21096] device vlan0 entered promiscuous mode [ 1756.919507][ T1427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1756.926996][ T1427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1756.936180][ T390] device bridge_slave_1 left promiscuous mode [ 1756.942126][ T390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1756.962075][ T390] device bridge_slave_0 left promiscuous mode [ 1756.978408][ T390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1756.991244][ T30] audit: type=1400 audit(2000001042.256:3962): avc: denied { bind } for pid=21097 comm="syz.3.4246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1757.011770][ T390] device veth1_macvtap left promiscuous mode [ 1757.018596][ T390] device veth0_vlan left promiscuous mode [ 1757.056141][T16174] attempt to access beyond end of device [ 1757.056141][T16174] loop4: rw=2049, want=45104, limit=40427 [ 1757.144877][T21103] incfs: ino conflict with backing FS 1 [ 1757.226448][ T26] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1757.259802][ T26] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1757.357007][ T26] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1757.375296][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.387557][T21103] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1757.425765][T21108] loop3: detected capacity change from 0 to 512 [ 1757.434001][ T26] usb 2-1: config 0 descriptor?? [ 1757.436261][T21086] device veth0_vlan entered promiscuous mode [ 1757.457743][ T1427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1757.465773][T21108] EXT4-fs (loop3): Ignoring removed bh option [ 1757.471976][T21110] loop4: detected capacity change from 0 to 128 [ 1757.479178][ T1427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1757.487208][ T1427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1757.488444][T21108] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.4249: inline data xattr refers to an external xattr inode [ 1757.494541][ T1427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1757.509147][T21108] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4249: couldn't read orphan inode 12 (err -117) [ 1757.516351][ T1427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1757.528080][T21108] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1757.539883][ T1427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1757.561915][T21110] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 1757.561915][T21110] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1757.561915][T21110] [ 1757.621285][ T1427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1757.628161][ T1427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1757.635420][T21110] EXT4-fs (loop4): Unrecognized mount option "hash" or missing value [ 1757.644078][ T1427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1757.653044][ T1427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1757.661214][ T1427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1757.668077][ T1427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1757.692482][T21114] loop1: detected capacity change from 0 to 512 [ 1757.698802][ T1427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1757.706934][ T1427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1757.715379][ T1427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1757.724804][ T310] usb 2-1: USB disconnect, device number 36 [ 1757.735504][T21086] device veth1_macvtap entered promiscuous mode [ 1757.742278][ T9194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1757.750781][ T30] audit: type=1400 audit(2000001043.016:3963): avc: denied { block_suspend } for pid=21116 comm="syz.3.4251" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1757.772212][ T9194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1757.801815][T21114] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1757.834637][ T9194] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1757.878574][T21120] loop3: detected capacity change from 0 to 1024 [ 1757.895961][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1757.904099][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1757.904635][T21114] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038 (0x7fffffff) [ 1757.912583][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1757.933649][T21122] loop2: detected capacity change from 0 to 2048 [ 1757.946654][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1757.962307][T21120] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1757.970876][T21120] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1757.977883][T21120] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 1757.986878][T21120] EXT4-fs warning (device loop3): ext4_enable_quotas:6422: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 1758.001295][T21120] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 1758.008770][T21120] EXT4-fs (loop3): 1 truncate cleaned up [ 1758.014263][T21120] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1758.045909][ T30] audit: type=1400 audit(2000001043.226:3964): avc: denied { mounton } for pid=21121 comm="syz.2.4243" path="/0/file0" dev="tmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1758.070792][T21120] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1758.080240][T21122] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1758.109709][T21120] EXT4-fs error (device loop3): ext4_search_dir:1548: inode #2: block 16: comm syz.3.4251: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1758.155882][ T620] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1758.525840][ T620] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1758.542338][ T620] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1758.559834][ T620] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1758.569619][ T620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1758.581084][ T620] usb 1-1: config 0 descriptor?? [ 1758.632452][T21132] loop3: detected capacity change from 0 to 512 [ 1758.674186][T21135] loop2: detected capacity change from 0 to 256 [ 1758.746692][T21132] EXT4-fs (loop3): Ignoring removed bh option [ 1758.755029][T21135] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60c5118c, utbl_chksum : 0xe619d30d) [ 1758.790222][T21132] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.4253: inline data xattr refers to an external xattr inode [ 1758.805369][T21132] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4253: couldn't read orphan inode 12 (err -117) [ 1758.818133][T21132] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1759.973817][ T30] audit: type=1400 audit(2000001044.426:3965): avc: denied { write } for pid=21134 comm="syz.2.4254" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1759.996915][ T30] audit: type=1400 audit(2000001044.426:3966): avc: denied { add_name } for pid=21134 comm="syz.2.4254" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1760.016854][T21139] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 1760.027747][T21139] 9pnet: Insufficient options for proto=fd [ 1760.124198][ T30] audit: type=1400 audit(2000001044.426:3967): avc: denied { associate } for pid=21134 comm="syz.2.4254" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1760.221622][ T30] audit: type=1400 audit(2000001045.266:3968): avc: denied { mounton } for pid=21134 comm="syz.2.4254" path="/1/file1/file0" dev="loop2" ino=1049111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1760.266542][ T30] audit: type=1400 audit(2000001045.296:3969): avc: denied { write open } for pid=21134 comm="syz.2.4254" path="/1/file1/file0/file0" dev="loop2" ino=1049112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1760.275114][T21147] loop2: detected capacity change from 0 to 512 [ 1760.300626][T21149] loop4: detected capacity change from 0 to 512 [ 1760.312564][T21147] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1760.322119][T21147] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.4255: inline data xattr refers to an external xattr inode [ 1760.340194][T21151] loop3: detected capacity change from 0 to 128 [ 1760.356304][T21147] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4255: couldn't read orphan inode 12 (err -117) [ 1760.396142][T21147] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 1760.534733][T21158] loop3: detected capacity change from 0 to 512 [ 1760.599008][T21160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4255'. [ 1761.446854][T21158] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1761.465821][ T620] usbhid 1-1:0.0: can't add hid device: -71 [ 1761.471582][ T620] usbhid: probe of 1-1:0.0 failed with error -71 [ 1761.482624][T21158] EXT4-fs error (device loop3): __ext4_iget:4892: inode #11: block 1: comm syz.3.4259: invalid block [ 1761.497330][ T620] usb 1-1: USB disconnect, device number 73 [ 1761.504103][T21158] EXT4-fs (loop3): Remounting filesystem read-only [ 1761.513513][T21158] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4259: couldn't read orphan inode 11 (err -117) [ 1761.525473][T21158] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 1761.604147][T21164] SELinux: Context   is not valid (left unmapped). [ 1761.611812][T21164] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 1761.649572][T21164] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 1761.661510][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1761.661522][ T30] audit: type=1400 audit(2000001046.926:3972): avc: denied { rmdir } for pid=21163 comm="syz.0.4261" name=".index" dev="tmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=A0 [ 1762.193268][T21156] device bridge_slave_1 left promiscuous mode [ 1762.199298][T21156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1762.207615][T21156] fuse: Bad value for 'fd' [ 1762.219004][T21149] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1762.230274][T21172] loop0: detected capacity change from 0 to 4096 [ 1762.236554][T21149] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038 (0x7fffffff) [ 1762.331833][T21172] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1762.357161][T21172] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,data_err=ignore,init_itable,test_dummy_encryption,nobarrier,noblock_validity,minixdf,nolazytime,,errors=continue. Quota mode: writeback. [ 1762.497611][ T30] audit: type=1400 audit(2000001047.726:3973): avc: denied { execute } for pid=21175 comm="syz.3.4263" name="file0" dev="ramfs" ino=97612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1762.710495][ T30] audit: type=1400 audit(2000001047.726:3974): avc: denied { execute_no_trans } for pid=21175 comm="syz.3.4263" path="/25/file0/file0" dev="ramfs" ino=97612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1762.952077][ T30] audit: type=1400 audit(2000001047.996:3975): avc: denied { mounton } for pid=21171 comm="syz.0.4262" path="/36/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1763.008185][T21178] loop2: detected capacity change from 0 to 40427 [ 1763.253321][ T30] audit: type=1400 audit(2000001047.996:3976): avc: denied { mount } for pid=21171 comm="syz.0.4262" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1763.276711][T21178] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1763.284249][T21178] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1763.317013][T21178] F2FS-fs (loop2): invalid crc value [ 1763.336251][ T30] audit: type=1400 audit(2000001048.006:3977): avc: denied { remount } for pid=21171 comm="syz.0.4262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1763.366781][T21178] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1763.481965][T21178] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1763.505796][T21178] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1763.595936][T21188] overlayfs: missing 'lowerdir' [ 1763.679386][ T30] audit: type=1400 audit(2000001048.946:3978): avc: denied { write } for pid=21177 comm="syz.2.4260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1763.719906][T21199] loop4: detected capacity change from 0 to 512 [ 1763.737525][ T30] audit: type=1400 audit(2000001049.006:3979): avc: denied { unmount } for pid=20331 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1763.779399][T21182] loop1: detected capacity change from 0 to 40427 [ 1763.797111][T21190] loop3: detected capacity change from 0 to 40427 [ 1763.816366][T21182] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1763.823967][T21182] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1763.830556][T21190] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1763.833733][T21182] F2FS-fs (loop1): invalid crc value [ 1763.870257][T21190] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1763.887309][T21190] F2FS-fs (loop3): invalid crc value [ 1763.893840][T21190] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1763.929578][T21199] EXT4-fs (loop4): Ignoring removed bh option [ 1763.943762][T21182] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1763.956111][T21190] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1763.962985][T21190] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1764.062521][T21199] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.4266: inline data xattr refers to an external xattr inode [ 1764.174244][T21199] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4266: couldn't read orphan inode 12 (err -117) [ 1764.234074][T21182] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1764.241310][T21182] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1764.249035][ T30] audit: type=1326 audit(2000001049.516:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21189 comm="syz.3.4265" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fccfbc12eb9 code=0x0 [ 1764.307389][ T30] audit: type=1400 audit(2000001049.566:3981): avc: denied { link } for pid=21189 comm="syz.3.4265" name="file1" dev="overlay" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1764.347495][T21199] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1764.472334][T21219] loop2: detected capacity change from 0 to 512 [ 1764.510082][ T45] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1764.520284][ T45] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1764.585898][T21219] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1764.603882][T21219] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 1764.761144][T21229] loop0: detected capacity change from 0 to 512 [ 1766.427949][T21229] EXT4-fs (loop0): Ignoring removed bh option [ 1766.437628][T13282] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1766.443959][T21229] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.4270: inline data xattr refers to an external xattr inode [ 1766.447379][T13282] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1766.483782][T21229] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4270: couldn't read orphan inode 12 (err -117) [ 1766.514515][T21239] loop2: detected capacity change from 0 to 512 [ 1766.521161][T21229] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1766.545668][T21239] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1766.564703][T21239] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.4271: inline data xattr refers to an external xattr inode [ 1766.579642][T21239] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4271: couldn't read orphan inode 12 (err -117) [ 1766.591400][T21239] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 1767.103808][T21249] loop1: detected capacity change from 0 to 256 [ 1767.843969][T21254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4271'. [ 1768.755992][T21261] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1768.786886][T21261] input: syz1 as /devices/virtual/input/input103 [ 1769.455955][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1769.455974][ T30] audit: type=1400 audit(2000001054.326:3983): avc: denied { execute } for pid=21244 comm="syz.4.4274" name="file1" dev="tmpfs" ino=816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1769.488210][T21249] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1769.502608][T21260] loop3: detected capacity change from 0 to 512 [ 1769.618027][T21260] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 1769.660656][T21272] loop4: detected capacity change from 0 to 512 [ 1770.333562][T21278] xt_bpf: check failed: parse error [ 1770.474668][T21272] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1770.494983][T21272] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a024e01c, mo2=0002] [ 1770.505901][T21272] System zones: 1-12 [ 1770.521146][T21272] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.4280: casefold flag without casefold feature [ 1770.548506][T21288] loop2: detected capacity change from 0 to 512 [ 1770.606690][T21272] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.4280: missing EA_INODE flag [ 1770.618395][T21272] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.4280: error while reading EA inode 12 err=-117 [ 1770.630737][T21272] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.4280: missing EA_INODE flag [ 1770.642267][T21272] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.4280: error while reading EA inode 12 err=-117 [ 1770.654655][T21272] EXT4-fs (loop4): 1 orphan inode deleted [ 1770.669658][T21294] loop0: detected capacity change from 0 to 512 [ 1770.732842][T21288] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1770.744181][T21260] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1770.752558][T21294] EXT4-fs (loop0): Ignoring removed bh option [ 1770.760339][T21288] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 1770.776185][T21260] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1770.838910][T21294] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.4284: inline data xattr refers to an external xattr inode [ 1770.865686][T21294] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4284: couldn't read orphan inode 12 (err -117) [ 1770.892740][T21294] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1771.466205][T21301] overlayfs: missing 'lowerdir' [ 1771.857390][T21308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21308 comm=syz.3.4286 [ 1771.872499][T21272] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,user_xattr,debug_want_extra_isize=0x000000000000005c,debug,mblk_io_submit,errors=continue,usrjquota=,prjquota,nodiscard,,errors=continue. Quota mode: writeback. [ 1771.938261][T21310] loop2: detected capacity change from 0 to 512 [ 1772.010792][T21310] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1772.018891][T21310] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.4285: inline data xattr refers to an external xattr inode [ 1772.033893][T21310] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4285: couldn't read orphan inode 12 (err -117) [ 1772.062469][T21310] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 1772.605930][T21317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4285'. [ 1772.983961][T21320] loop1: detected capacity change from 0 to 256 [ 1773.131553][T21320] exfat: Deprecated parameter 'utf8' [ 1773.136902][T21320] exfat: Deprecated parameter 'namecase' [ 1773.143011][T21320] exfat: Deprecated parameter 'utf8' [ 1774.151780][T21320] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1774.515767][T16990] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1774.994960][T21335] loop4: detected capacity change from 0 to 512 [ 1775.015657][T21345] loop2: detected capacity change from 0 to 512 [ 1775.742750][T21343] xt_bpf: check failed: parse error [ 1775.777372][ T30] audit: type=1400 audit(2000001061.026:3984): avc: denied { mount } for pid=21319 comm="syz.1.4288" name="/" dev="configfs" ino=2986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1775.806499][ T30] audit: type=1400 audit(2000001061.076:3985): avc: denied { unmount } for pid=19337 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1775.827724][ T30] audit: type=1400 audit(2000001061.096:3986): avc: denied { remove_name } for pid=19337 comm="syz-executor" name="file0" dev="loop1" ino=1049119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1775.850990][ T30] audit: type=1400 audit(2000001061.096:3987): avc: denied { unlink } for pid=19337 comm="syz-executor" name="file0" dev="loop1" ino=1049119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1775.851075][T21335] EXT4-fs (loop4): Ignoring removed bh option [ 1775.878306][ T30] audit: type=1400 audit(2000001061.096:3988): avc: denied { rmdir } for pid=19337 comm="syz-executor" name="file0" dev="loop1" ino=1049114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1775.913361][T21335] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.4291: inline data xattr refers to an external xattr inode [ 1775.928773][T21335] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4291: couldn't read orphan inode 12 (err -117) [ 1775.955091][T21355] loop0: detected capacity change from 0 to 512 [ 1775.955093][T21354] loop1: detected capacity change from 0 to 512 [ 1775.967385][T21345] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1775.978188][T21335] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1776.002470][T21345] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 1776.063315][T21355] EXT4-fs (loop0): Ignoring removed bh option [ 1776.076002][T16990] usb 4-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice=ac.5f [ 1776.090363][T16990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.114115][T16990] usb 4-1: config 0 descriptor?? [ 1776.120085][T21355] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.4297: inline data xattr refers to an external xattr inode [ 1776.139873][T21355] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4297: couldn't read orphan inode 12 (err -117) [ 1776.151851][T21355] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1776.154106][T21354] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1776.182589][T21354] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038 (0x7fffffff) [ 1776.230061][T21360] overlayfs: missing 'lowerdir' [ 1776.491228][T21366] loop2: detected capacity change from 0 to 512 [ 1776.507650][T16990] usb 4-1: USB disconnect, device number 55 [ 1776.580854][ T5296] udevd[5296]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1776.611667][T21366] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.4299: casefold flag without casefold feature [ 1776.624719][T21366] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.4299: casefold flag without casefold feature [ 1776.637976][T21366] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.4299: ea_inode with extended attributes [ 1776.650880][T21366] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.4299: error while reading EA inode 12 err=-117 [ 1776.663351][T21366] EXT4-fs (loop2): 1 orphan inode deleted [ 1776.669607][T21366] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1776.704211][T21366] netlink: 'syz.2.4299': attribute type 8 has an invalid length. [ 1777.068916][T21368] overlayfs: missing 'lowerdir' [ 1777.101880][T21375] loop3: detected capacity change from 0 to 128 [ 1777.475758][ T293] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 1777.604370][T21373] bridge0: port 3(gretap0) entered blocking state [ 1777.610651][T21373] bridge0: port 3(gretap0) entered disabled state [ 1777.617365][T21373] device gretap0 entered promiscuous mode [ 1777.622978][T21373] bridge0: port 3(gretap0) entered blocking state [ 1777.629158][T21373] bridge0: port 3(gretap0) entered forwarding state [ 1777.638282][T21373] loop4: detected capacity change from 0 to 256 [ 1777.745501][T21382] loop1: detected capacity change from 0 to 512 [ 1777.776093][T21373] FAT-fs (loop4): Unrecognized mount option "shortna" or missing value [ 1777.785276][T21382] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1777.984650][T21378] loop2: detected capacity change from 0 to 40427 [ 1777.994796][T21382] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.4303: inline data xattr refers to an external xattr inode [ 1778.020130][T21382] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.4303: couldn't read orphan inode 12 (err -117) [ 1778.037546][T21382] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 1778.082528][T21378] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 1778.090582][ T293] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1778.101005][ T293] usb 4-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice=5b.36 [ 1778.109865][ T293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.121201][ T293] usb 4-1: config 0 descriptor?? [ 1778.126239][T21378] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1778.163379][T21378] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1778.170332][ T293] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 1778.221904][T21378] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 1778.229229][T21378] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1778.271496][T21389] af_packet: tpacket_rcv: packet too big, clamped from 78 to 4294967286. macoff=82 [ 1778.373137][ T293] usb 4-1: USB disconnect, device number 56 [ 1778.410197][T21393] attempt to access beyond end of device [ 1778.410197][T21393] loop2: rw=2049, want=40432, limit=40427 [ 1778.638988][T21401] loop2: detected capacity change from 0 to 2048 [ 1779.065996][T21397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4303'. [ 1779.877682][T21409] loop0: detected capacity change from 0 to 512 [ 1779.919440][T21409] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1779.999477][T21409] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.4308: inline data xattr refers to an external xattr inode [ 1780.016938][T21409] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4308: couldn't read orphan inode 12 (err -117) [ 1780.027496][T21413] loop3: detected capacity change from 0 to 1024 [ 1780.034888][T21409] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 1780.168776][ T30] audit: type=1400 audit(2000001065.386:3989): avc: denied { getopt } for pid=21405 comm="syz.4.4307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1780.194678][T21416] loop1: detected capacity change from 0 to 128 [ 1780.388616][T21413] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1780.399030][T21413] EXT4-fs (loop3): Ignoring removed orlov option [ 1780.417330][ T30] audit: type=1326 audit(2000001065.686:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21415 comm="syz.1.4309" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e25f2deb9 code=0x0 [ 1780.421179][T21416] attempt to access beyond end of device [ 1780.421179][T21416] loop1: rw=2049, want=129, limit=128 [ 1780.442157][T21413] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 1780.463365][T21416] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 1780.528176][T21416] attempt to access beyond end of device [ 1780.528176][T21416] loop1: rw=2049, want=385, limit=128 [ 1780.542397][T21424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4308'. [ 1780.717623][T21421] loop2: detected capacity change from 0 to 512 [ 1780.778653][T21421] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1780.789833][T21421] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 1781.002445][T21431] overlayfs: missing 'lowerdir' [ 1781.095143][T21433] netlink: 'syz.1.4313': attribute type 4 has an invalid length. [ 1781.145828][ T30] audit: type=1400 audit(2000001066.356:3991): avc: denied { name_bind } for pid=21432 comm="syz.1.4313" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1781.198282][T21434] loop0: detected capacity change from 0 to 512 [ 1781.217552][T21434] EXT4-fs (loop0): Ignoring removed bh option [ 1781.236103][T21434] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.4312: inline data xattr refers to an external xattr inode [ 1781.251506][T21434] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4312: couldn't read orphan inode 12 (err -117) [ 1781.263565][T21434] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1781.389144][ T30] audit: type=1400 audit(2000001066.656:3992): avc: denied { map } for pid=21412 comm="syz.3.4310" path="/34/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1781.444840][ T30] audit: type=1400 audit(2000001066.676:3993): avc: denied { execute } for pid=21412 comm="syz.3.4310" path="/34/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1781.500219][T21446] loop4: detected capacity change from 0 to 128 [ 1781.777257][ T30] audit: type=1400 audit(2000001066.876:3994): avc: denied { write } for pid=21442 comm="syz.2.4315" name="001" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1781.800372][T21446] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1781.814283][ T30] audit: type=1400 audit(2000001066.886:3995): avc: denied { read } for pid=21442 comm="syz.2.4315" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1781.816384][T21446] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1781.897968][ T30] audit: type=1400 audit(2000001067.166:3996): avc: denied { connect } for pid=21451 comm="syz.3.4317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1781.998938][ T30] audit: type=1400 audit(2000001067.246:3997): avc: denied { append } for pid=21451 comm="syz.3.4317" name="001" dev="devtmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1783.081003][T21466] loop2: detected capacity change from 0 to 512 [ 1783.211845][ T30] audit: type=1400 audit(2000001068.476:3998): avc: denied { write } for pid=21467 comm="syz.0.4322" path="socket:[98905]" dev="sockfs" ino=98905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1783.279513][T21470] loop3: detected capacity change from 0 to 2048 [ 1783.326446][T21466] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1783.334732][T21466] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.4320: inline data xattr refers to an external xattr inode [ 1783.349755][T21466] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4320: couldn't read orphan inode 12 (err -117) [ 1783.363127][T21470] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1783.372835][T21466] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 1783.976810][T21470] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1783.998071][T21470] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1784.005188][T21470] EXT4-fs (loop3): mount failed [ 1784.575885][T21476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4320'. [ 1784.866275][T21479] loop0: detected capacity change from 0 to 512 [ 1784.993876][T21479] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1785.002117][T21479] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.4323: inline data xattr refers to an external xattr inode [ 1785.017245][T21479] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4323: couldn't read orphan inode 12 (err -117) [ 1785.031153][T21479] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 1785.187872][ T30] audit: type=1400 audit(2000001070.456:3999): avc: denied { read } for pid=21469 comm="syz.3.4321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1785.208020][T21470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=21470 comm=syz.3.4321 [ 1785.635864][T21485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4323'. [ 1785.994512][ T30] audit: type=1400 audit(2000001071.256:4000): avc: denied { bind } for pid=21487 comm="syz.3.4325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1786.325616][T21484] device syzkaller0 entered promiscuous mode [ 1786.988507][T21495] loop2: detected capacity change from 0 to 512 [ 1787.233880][T21497] loop0: detected capacity change from 0 to 512 [ 1787.255295][T21499] loop1: detected capacity change from 0 to 1024 [ 1787.255659][T21495] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1787.271222][T21495] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.4328: inline data xattr refers to an external xattr inode [ 1787.286523][T21495] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4328: couldn't read orphan inode 12 (err -117) [ 1787.294977][T21499] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1787.304871][T21499] EXT4-fs (loop1): Ignoring removed orlov option [ 1787.317393][T21495] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 1787.359649][T21497] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1787.373335][T21497] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038 (0x7fffffff) [ 1787.390422][T21505] loop3: detected capacity change from 0 to 512 [ 1787.420333][T21508] syz.4.4330[21508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1787.420413][T21508] syz.4.4330[21508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1787.433308][T21499] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 1787.484072][T21505] EXT4-fs (loop3): Ignoring removed bh option [ 1787.520616][T21509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4328'. [ 1787.687619][T21505] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.4331: inline data xattr refers to an external xattr inode [ 1787.702817][T21505] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4331: couldn't read orphan inode 12 (err -117) [ 1787.714670][T21505] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1787.795979][T21513] overlayfs: missing 'workdir' [ 1788.082286][T21508] loop4: detected capacity change from 0 to 256 [ 1788.438511][T21508] FAT-fs (loop4): Directory bread(block 64) failed [ 1788.444876][T21508] FAT-fs (loop4): Directory bread(block 65) failed [ 1788.561242][T21508] FAT-fs (loop4): Directory bread(block 66) failed [ 1788.716342][T21528] loop3: detected capacity change from 0 to 128 [ 1788.733192][T21508] FAT-fs (loop4): Directory bread(block 67) failed [ 1788.773185][T21508] FAT-fs (loop4): Directory bread(block 68) failed [ 1788.806338][T21508] FAT-fs (loop4): Directory bread(block 69) failed [ 1788.924085][T21508] FAT-fs (loop4): Directory bread(block 70) failed [ 1788.930795][T21508] FAT-fs (loop4): Directory bread(block 71) failed [ 1788.937696][T21508] FAT-fs (loop4): Directory bread(block 72) failed [ 1788.944082][T21508] FAT-fs (loop4): Directory bread(block 73) failed [ 1788.971835][T21532] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1789.283285][T21539] loop2: detected capacity change from 0 to 2048 [ 1789.358113][T21539] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1789.389367][ T30] audit: type=1400 audit(2000001074.656:4001): avc: denied { ioctl } for pid=21538 comm="syz.2.4337" path="/21/file1/bus" dev="loop2" ino=18 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1789.624406][T21546] loop3: detected capacity change from 0 to 512 [ 1789.766661][T21546] EXT4-fs (loop3): Ignoring removed bh option [ 1789.781190][T21546] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.4338: inline data xattr refers to an external xattr inode [ 1789.801008][T21546] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4338: couldn't read orphan inode 12 (err -117) [ 1789.817113][T21546] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1790.751526][T21540] tipc: Enabling of bearer rejected, failed to enable media [ 1790.836726][ T30] audit: type=1400 audit(2000001075.256:4002): avc: denied { create } for pid=21507 comm="syz.4.4330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1790.956515][ T30] audit: type=1400 audit(2000001076.226:4003): avc: denied { read } for pid=21555 comm="syz.1.4341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1791.001824][T21558] loop0: detected capacity change from 0 to 512 [ 1791.026618][T21558] EXT4-fs (loop0): Unrecognized mount option "appraise" or missing value [ 1791.078570][T21563] loop3: detected capacity change from 0 to 512 [ 1791.157461][T21563] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1791.503006][T21563] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038 (0x7fffffff) [ 1792.125567][T21582] loop0: detected capacity change from 0 to 512 [ 1792.156135][T21585] loop2: detected capacity change from 0 to 512 [ 1792.165135][T21579] loop1: detected capacity change from 0 to 512 [ 1792.165457][T21582] EXT4-fs (loop0): Ignoring removed bh option [ 1792.184674][T21582] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.4346: inline data xattr refers to an external xattr inode [ 1792.199967][T21579] EXT4-fs (loop1): Ignoring removed bh option [ 1792.200066][T21582] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4346: couldn't read orphan inode 12 (err -117) [ 1792.244259][T21582] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1792.273943][T21579] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.4345: inline data xattr refers to an external xattr inode [ 1792.277762][T21585] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1792.303068][T21585] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038 (0x7fffffff) [ 1792.360758][T21579] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.4345: couldn't read orphan inode 12 (err -117) [ 1792.422236][T21579] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1792.986816][T21598] overlayfs: missing 'lowerdir' [ 1794.573250][T21609] loop0: detected capacity change from 0 to 512 [ 1794.579950][T21606] loop2: detected capacity change from 0 to 256 [ 1794.606651][T21606] FAT-fs (loop2): Unrecognized mount option "K ‡³hcheck=strict" or missing value [ 1794.614421][T21589] loop4: detected capacity change from 0 to 40427 [ 1794.691060][T21609] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1794.703023][T21609] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.4351: inline data xattr refers to an external xattr inode [ 1794.719025][T21609] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4351: couldn't read orphan inode 12 (err -117) [ 1794.733063][T21614] loop1: detected capacity change from 0 to 256 [ 1794.734811][T21609] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 1794.747603][T21589] F2FS-fs (loop4): invalid crc value [ 1794.812875][T21614] exfat: Deprecated parameter 'utf8' [ 1795.094573][T21616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4351'. [ 1795.108903][T21614] exfat: Deprecated parameter 'utf8' [ 1795.114622][T21614] exfat: Deprecated parameter 'utf8' [ 1795.125375][T21614] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 1795.142813][T21589] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1795.459989][ T30] audit: type=1400 audit(2000001080.726:4004): avc: denied { read } for pid=21605 comm="syz.2.4350" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=99082 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1795.530761][T21625] loop0: detected capacity change from 0 to 512 [ 1795.639141][T21625] EXT4-fs (loop0): Ignoring removed bh option [ 1795.656107][T21625] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.4354: inline data xattr refers to an external xattr inode [ 1795.854167][ T30] audit: type=1400 audit(2000001081.116:4005): avc: denied { bind } for pid=21626 comm="syz.3.4355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1795.880063][T21625] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4354: couldn't read orphan inode 12 (err -117) [ 1795.904355][T21625] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1795.968836][T21635] loop2: detected capacity change from 0 to 256 [ 1796.037192][T21635] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1796.981254][T21644] loop2: detected capacity change from 0 to 256 [ 1797.175069][T21648] loop1: detected capacity change from 0 to 512 [ 1797.215931][ T30] audit: type=1400 audit(2000001082.486:4006): avc: denied { write } for pid=21649 comm="syz.4.4359" name="hwrng" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1797.317780][T21648] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1797.395772][ T293] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1797.706734][T21657] loop2: detected capacity change from 0 to 512 [ 1797.728800][T21657] EXT4-fs (loop2): Ignoring removed bh option [ 1797.738231][T21657] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.4361: inline data xattr refers to an external xattr inode [ 1797.753444][T21657] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4361: couldn't read orphan inode 12 (err -117) [ 1797.765602][T21657] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1797.785174][ T293] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1797.805285][ T293] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1798.183841][T21648] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038 (0x7fffffff) [ 1798.323234][ T293] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1798.335536][T21665] loop2: detected capacity change from 0 to 512 [ 1798.341668][ T293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.350142][ T293] usb 1-1: Product: syz [ 1798.354149][ T293] usb 1-1: Manufacturer: syz [ 1798.358886][ T293] usb 1-1: SerialNumber: syz [ 1798.377569][T21665] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1798.388574][T21665] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff) [ 1798.966320][T21668] overlayfs: missing 'lowerdir' [ 1799.479393][T21646] UDC core: couldn't find an available UDC or it's busy: -16 [ 1799.487975][T21646] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1799.541648][T21646] netlink: 'syz.0.4358': attribute type 1 has an invalid length. [ 1799.549590][T21646] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1799.640490][T21681] loop3: detected capacity change from 0 to 512 [ 1799.717866][T21681] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1799.728813][T21681] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038 (0x7fffffff) [ 1801.074279][T21690] loop0: detected capacity change from 0 to 512 [ 1801.080517][ T293] cdc_ncm 1-1:1.0: bind() failure [ 1801.208824][ T293] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1801.217114][T21693] loop2: detected capacity change from 0 to 512 [ 1801.227150][T21690] EXT4-fs (loop0): Ignoring removed bh option [ 1801.422284][T21695] overlayfs: missing 'lowerdir' [ 1801.587108][T21690] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.4367: inline data xattr refers to an external xattr inode [ 1801.614300][T21690] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4367: couldn't read orphan inode 12 (err -117) [ 1801.626847][T21690] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1801.633555][ T293] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1801.656067][T21693] EXT4-fs (loop2): Ignoring removed bh option [ 1801.656245][ T293] usb 1-1: USB disconnect, device number 74 [ 1801.692827][T21693] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.4368: inline data xattr refers to an external xattr inode [ 1801.766507][T21700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4369'. [ 1801.791601][T21693] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4368: couldn't read orphan inode 12 (err -117) [ 1802.348214][T21693] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1802.564560][T21714] loop0: detected capacity change from 0 to 1024 [ 1802.587604][T21714] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1802.622738][T21700] device gretap0 left promiscuous mode [ 1802.652877][T21700] bridge0: port 3(gretap0) entered disabled state [ 1802.676998][T21719] fuse: Bad value for 'fd' [ 1802.775579][T21700] device bridge_slave_1 left promiscuous mode [ 1802.783702][T21700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1802.833388][T21700] device bridge_slave_0 left promiscuous mode [ 1802.887479][T21700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1803.115640][T21727] loop3: detected capacity change from 0 to 512 [ 1803.187787][T21727] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1803.198770][T21727] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038 (0x7fffffff) [ 1803.494608][T21733] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1803.504098][T21733] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1804.121171][T21731] loop2: detected capacity change from 0 to 2048 [ 1804.147239][T21737] loop1: detected capacity change from 0 to 128 [ 1804.225821][T21731] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1804.836156][T21745] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 1807.292061][T21757] loop1: detected capacity change from 0 to 512 [ 1807.304060][T21763] loop3: detected capacity change from 0 to 512 [ 1807.386877][T21763] EXT4-fs (loop3): Ignoring removed bh option [ 1807.395037][T21763] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.4382: inline data xattr refers to an external xattr inode [ 1807.445254][T21763] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4382: couldn't read orphan inode 12 (err -117) [ 1807.457295][T21763] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1808.201204][T21757] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1810.384211][ T30] audit: type=1400 audit(2000001094.626:4007): avc: denied { set_context_mgr } for pid=21776 comm="syz.0.4384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1810.423449][T21787] loop0: detected capacity change from 0 to 512 [ 1810.442195][T21779] loop2: detected capacity change from 0 to 1024 [ 1810.486238][ T30] audit: type=1400 audit(2000001095.746:4008): avc: denied { mounton } for pid=21774 comm="syz.2.4385" path="/34/bus" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1810.519787][T21779] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1810.530528][T21787] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1810.541998][T21787] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038 (0x7fffffff) [ 1810.780893][T21794] overlayfs: missing 'lowerdir' [ 1811.383177][T21757] EXT4-fs: error -4 creating inode table initialization thread [ 1811.397031][T21757] EXT4-fs (loop1): mount failed [ 1811.425111][ T30] audit: type=1400 audit(2000001096.686:4009): avc: denied { append } for pid=21774 comm="syz.2.4385" name="loop2" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1811.455244][T21801] loop3: detected capacity change from 0 to 512 [ 1811.461666][ T30] audit: type=1400 audit(2000001096.686:4010): avc: denied { map } for pid=21774 comm="syz.2.4385" path="/34/bus" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1811.533829][ T30] audit: type=1400 audit(2000001096.776:4011): avc: denied { unmount } for pid=21086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1811.572779][T21804] loop2: detected capacity change from 0 to 512 [ 1811.580319][T21801] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1811.603500][T21801] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038 (0x7fffffff) [ 1812.043364][T21804] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 1812.077774][T21804] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue. Quota mode: writeback. [ 1812.097238][T21804] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038 (0x7fffffff) [ 1812.133718][T21804] EXT4-fs error (device loop2): __ext4_new_inode:1282: comm syz.2.4390: failed to insert inode 16: doubly allocated? [ 1812.776229][T21818] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1812.784871][T21818] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1812.984970][T21821] loop4: detected capacity change from 0 to 512 [ 1813.447157][T21813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4389'. [ 1813.455905][T21813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4389'. [ 1813.609504][T21821] EXT4-fs (loop4): Ignoring removed bh option [ 1813.690574][ T620] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1814.365300][T21831] device wg2 entered promiscuous mode [ 1815.708265][T21844] loop0: detected capacity change from 0 to 512 [ 1815.725783][ T620] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1815.738205][ T620] usb 3-1: can't read configurations, error -71 [ 1815.786556][T21844] EXT4-fs (loop0): Ignoring removed bh option [ 1815.794718][T21844] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.4397: inline data xattr refers to an external xattr inode [ 1815.809773][T21844] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4397: couldn't read orphan inode 12 (err -117) [ 1815.821869][T21844] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nolazytime,,errors=continue. Quota mode: writeback. [ 1815.884052][T21833] xt_bpf: check failed: parse error [ 1815.933666][ T30] audit: type=1400 audit(2000001101.166:4012): avc: denied { setopt } for pid=21841 comm="syz.3.4396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1815.974574][T21821] EXT4-fs: failed to create workqueue [ 1816.170309][T21852] loop1: detected capacity change from 0 to 512 [ 1816.177023][T21821] EXT4-fs (loop4): mount failed [ 1816.185294][T21853] loop2: detected capacity change from 0 to 512 [ 1816.206992][T21852] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1816.379727][T21852] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.4399: inline data xattr refers to an external xattr inode [ 1816.395319][T21852] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.4399: couldn't read orphan inode 12 (err -117) [ 1816.409609][T21852] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 1816.454378][T21853] ================================================================== [ 1816.462264][T21853] BUG: KASAN: use-after-free in __ext4_iget+0x2ee/0x3f00 [ 1816.469119][T21853] Read of size 8 at addr ffff88812d528508 by task syz.2.4398/21853 [ 1816.476837][T21853] [ 1816.479008][T21853] CPU: 1 PID: 21853 Comm: syz.2.4398 Tainted: G W 5.15.157-syzkaller-00896-g38761ec9fc9e #0 [ 1816.490203][T21853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1816.500097][T21853] Call Trace: [ 1816.503222][T21853] [ 1816.506003][T21853] dump_stack_lvl+0x151/0x1c0 [ 1816.510523][T21853] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1816.515984][T21853] ? panic+0x760/0x760 [ 1816.519889][T21853] ? __kasan_check_write+0x14/0x20 [ 1816.524845][T21853] print_address_description+0x87/0x3b0 [ 1816.530214][T21853] ? __se_sys_mount+0x2c4/0x3b0 [ 1816.534906][T21853] ? __x64_sys_mount+0xbf/0xd0 [ 1816.539505][T21853] kasan_report+0x179/0x1c0 [ 1816.543839][T21853] ? __ext4_iget+0x2ee/0x3f00 [ 1816.548351][T21853] ? __ext4_iget+0x2ee/0x3f00 [ 1816.552865][T21853] __asan_report_load8_noabort+0x14/0x20 [ 1816.558336][T21853] __ext4_iget+0x2ee/0x3f00 [ 1816.562671][T21853] ? xas_nomem+0x19a/0x1d0 [ 1816.566924][T21853] ? ida_alloc_range+0x9fd/0xa80 [ 1816.571701][T21853] ? __kasan_kmalloc+0x9/0x10 [ 1816.576214][T21853] ? ext4_get_projid+0x140/0x140 [ 1816.580986][T21853] ? __kasan_check_write+0x14/0x20 [ 1816.585935][T21853] ? _raw_write_lock+0xa4/0x170 [ 1816.590620][T21853] ? __proc_create+0x65a/0xa00 [ 1816.595220][T21853] ? ext4_init_orphan_info+0x161/0x1080 [ 1816.600602][T21853] ext4_enable_quotas+0x556/0x980 [ 1816.605463][T21853] ? ext4_force_commit+0xc0/0xc0 [ 1816.610234][T21853] ? proc_create+0x2b0/0x2b0 [ 1816.614662][T21853] ? ext4_register_sysfs+0x281/0x2c0 [ 1816.619782][T21853] ext4_fill_super+0x8b95/0x96e0 [ 1816.624561][T21853] ? ext4_mount+0x40/0x40 [ 1816.628722][T21853] ? set_blocksize+0xf4/0x380 [ 1816.633237][T21853] ? set_blocksize+0x1f0/0x380 [ 1816.637834][T21853] ? sb_set_blocksize+0xa8/0xf0 [ 1816.642522][T21853] mount_bdev+0x282/0x3b0 [ 1816.646684][T21853] ? ext4_mount+0x40/0x40 [ 1816.650851][T21853] ext4_mount+0x34/0x40 [ 1816.654844][T21853] legacy_get_tree+0xf1/0x190 [ 1816.659357][T21853] ? ext4_errno_to_code+0x140/0x140 [ 1816.664391][T21853] vfs_get_tree+0x88/0x290 [ 1816.668644][T21853] do_new_mount+0x2ba/0xb30 [ 1816.672982][T21853] ? do_move_mount_old+0x160/0x160 [ 1816.677928][T21853] ? security_capable+0x87/0xb0 [ 1816.682616][T21853] ? ns_capable+0x89/0xe0 [ 1816.686783][T21853] path_mount+0x671/0x1070 [ 1816.691038][T21853] __se_sys_mount+0x2c4/0x3b0 [ 1816.695548][T21853] ? __x64_sys_mount+0xd0/0xd0 [ 1816.700151][T21853] ? __kasan_check_read+0x11/0x20 [ 1816.705009][T21853] __x64_sys_mount+0xbf/0xd0 [ 1816.709436][T21853] x64_sys_call+0x49d/0x9a0 [ 1816.713774][T21853] do_syscall_64+0x3b/0xb0 [ 1816.718031][T21853] ? clear_bhb_loop+0x35/0x90 [ 1816.722543][T21853] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1816.728268][T21853] RIP: 0033:0x7f86c887f65a [ 1816.732526][T21853] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1816.751962][T21853] RSP: 002b:00007f86c74fae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1816.760210][T21853] RAX: ffffffffffffffda RBX: 00007f86c74faef0 RCX: 00007f86c887f65a [ 1816.768021][T21853] RDX: 00000000200004c0 RSI: 00000000200000c0 RDI: 00007f86c74faeb0 [ 1816.775832][T21853] RBP: 00000000200004c0 R08: 00007f86c74faef0 R09: 0000000000000000 [ 1816.783644][T21853] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 1816.791455][T21853] R13: 00007f86c74faeb0 R14: 0000000000000500 R15: 0000000020000100 [ 1816.799272][T21853] [ 1816.802128][T21853] [ 1816.804298][T21853] Allocated by task 18380: [ 1816.808551][T21853] __kasan_slab_alloc+0xb1/0xe0 [ 1816.813236][T21853] slab_post_alloc_hook+0x53/0x2c0 [ 1816.818185][T21853] kmem_cache_alloc+0xf5/0x200 [ 1816.822787][T21853] f2fs_alloc_inode+0x26/0x340 [ 1816.827384][T21853] iget_locked+0x174/0x860 [ 1816.831638][T21853] f2fs_iget+0x55/0x5040 [ 1816.835725][T21853] f2fs_fill_super+0x6761/0x8170 [ 1816.840488][T21853] mount_bdev+0x282/0x3b0 [ 1816.844657][T21853] f2fs_mount+0x34/0x40 [ 1816.848647][T21853] legacy_get_tree+0xf1/0x190 [ 1816.853161][T21853] vfs_get_tree+0x88/0x290 [ 1816.857415][T21853] do_new_mount+0x2ba/0xb30 [ 1816.861751][T21853] path_mount+0x671/0x1070 [ 1816.866005][T21853] __se_sys_mount+0x2c4/0x3b0 [ 1816.870517][T21853] __x64_sys_mount+0xbf/0xd0 [ 1816.874948][T21853] x64_sys_call+0x49d/0x9a0 [ 1816.879284][T21853] do_syscall_64+0x3b/0xb0 [ 1816.883625][T21853] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1816.889352][T21853] [ 1816.891523][T21853] Last potentially related work creation: [ 1816.897081][T21853] kasan_save_stack+0x3b/0x60 [ 1816.901607][T21853] __kasan_record_aux_stack+0xd3/0xf0 [ 1816.906796][T21853] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1816.912437][T21853] call_rcu+0x135/0x1310 [ 1816.916521][T21853] evict+0x5df/0x630 [ 1816.920250][T21853] evict_inodes+0x5db/0x660 [ 1816.924594][T21853] generic_shutdown_super+0x9c/0x2e0 [ 1816.929713][T21853] kill_block_super+0x7e/0xe0 [ 1816.934311][T21853] kill_f2fs_super+0x2f9/0x3c0 [ 1816.938910][T21853] deactivate_locked_super+0xad/0x110 [ 1816.944118][T21853] deactivate_super+0xbe/0xf0 [ 1816.948629][T21853] cleanup_mnt+0x45c/0x510 [ 1816.952882][T21853] __cleanup_mnt+0x19/0x20 [ 1816.957138][T21853] task_work_run+0x129/0x190 [ 1816.961564][T21853] exit_to_user_mode_loop+0xc4/0xe0 [ 1816.966600][T21853] exit_to_user_mode_prepare+0x5a/0xa0 [ 1816.971890][T21853] syscall_exit_to_user_mode+0x26/0x160 [ 1816.977275][T21853] do_syscall_64+0x47/0xb0 [ 1816.981524][T21853] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1816.987252][T21853] [ 1816.989422][T21853] Second to last potentially related work creation: [ 1816.995843][T21853] kasan_save_stack+0x3b/0x60 [ 1817.000356][T21853] __kasan_record_aux_stack+0xd3/0xf0 [ 1817.005564][T21853] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1817.011208][T21853] call_rcu+0x135/0x1310 [ 1817.015284][T21853] evict+0x5df/0x630 [ 1817.019019][T21853] evict_inodes+0x5db/0x660 [ 1817.023356][T21853] generic_shutdown_super+0x9c/0x2e0 [ 1817.028478][T21853] kill_block_super+0x7e/0xe0 [ 1817.032991][T21853] kill_f2fs_super+0x2f9/0x3c0 [ 1817.037589][T21853] deactivate_locked_super+0xad/0x110 [ 1817.042799][T21853] deactivate_super+0xbe/0xf0 [ 1817.047313][T21853] cleanup_mnt+0x45c/0x510 [ 1817.051562][T21853] __cleanup_mnt+0x19/0x20 [ 1817.055816][T21853] task_work_run+0x129/0x190 [ 1817.060245][T21853] do_exit+0xc48/0x2ca0 [ 1817.064236][T21853] do_group_exit+0x141/0x310 [ 1817.068660][T21853] __x64_sys_exit_group+0x3f/0x40 [ 1817.073524][T21853] x64_sys_call+0x610/0x9a0 [ 1817.077861][T21853] do_syscall_64+0x3b/0xb0 [ 1817.082116][T21853] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1817.087841][T21853] [ 1817.090011][T21853] The buggy address belongs to the object at ffff88812d528000 [ 1817.090011][T21853] which belongs to the cache f2fs_inode_cache of size 1424 [ 1817.104419][T21853] The buggy address is located 1288 bytes inside of [ 1817.104419][T21853] 1424-byte region [ffff88812d528000, ffff88812d528590) [ 1817.117710][T21853] The buggy address belongs to the page: [ 1817.123184][T21853] page:ffffea0004b54a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88812d52ced0 pfn:0x12d528 [ 1817.134536][T21853] head:ffffea0004b54a00 order:3 compound_mapcount:0 compound_pincount:0 [ 1817.142696][T21853] flags: 0x4000000000010200(slab|head|zone=1) [ 1817.148604][T21853] raw: 4000000000010200 0000000000000000 0000000100000001 ffff8881049c5c80 [ 1817.157022][T21853] raw: ffff88812d52ced0 0000000080150001 00000001ffffffff 0000000000000000 [ 1817.165443][T21853] page dumped because: kasan: bad access detected [ 1817.171689][T21853] page_owner tracks the page as allocated [ 1817.177236][T21853] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 987, ts 73283789958, free_ts 0 [ 1817.197558][T21853] post_alloc_hook+0x1a3/0x1b0 [ 1817.202153][T21853] prep_new_page+0x1b/0x110 [ 1817.206575][T21853] get_page_from_freelist+0x3550/0x35d0 [ 1817.211971][T21853] __alloc_pages+0x27e/0x8f0 [ 1817.216386][T21853] new_slab+0x9a/0x4e0 [ 1817.220284][T21853] ___slab_alloc+0x39e/0x830 [ 1817.224711][T21853] __slab_alloc+0x4a/0x90 [ 1817.228876][T21853] kmem_cache_alloc+0x134/0x200 [ 1817.233563][T21853] f2fs_alloc_inode+0x26/0x340 [ 1817.238163][T21853] new_inode_pseudo+0x64/0x220 [ 1817.242771][T21853] new_inode+0x28/0x1c0 [ 1817.246757][T21853] f2fs_new_inode+0x10e/0x1410 [ 1817.251355][T21853] __f2fs_tmpfile+0xab/0x380 [ 1817.255783][T21853] f2fs_rename2+0xa6c/0x28f0 [ 1817.260209][T21853] vfs_rename+0xd25/0x10e0 [ 1817.264460][T21853] ovl_get_workdir+0x84b/0x1250 [ 1817.269148][T21853] page_owner free stack trace missing [ 1817.274355][T21853] [ 1817.276525][T21853] Memory state around the buggy address: [ 1817.282001][T21853] ffff88812d528400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1817.289905][T21853] ffff88812d528480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1817.297794][T21853] >ffff88812d528500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1817.305690][T21853] ^ [ 1817.309878][T21853] ffff88812d528580: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1817.317759][T21853] ffff88812d528600: fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1817.325657][T21853] ================================================================== [ 1817.333549][T21853] Disabling lock debugging due to kernel taint [ 1817.343069][T21853] EXT4-fs warning (device loop2): ext4_enable_quotas:6422: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 1817.359496][T21853] EXT4-fs (loop2): mount failed [ 1817.513291][T21853] loop2: detected capacity change from 0 to 512 [ 1818.116375][T21862] overlayfs: missing 'lowerdir' [ 1818.125803][T21863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4399'.