last executing test programs: 18m2.980631058s ago: executing program 4 (id=5): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000940)={[{@utf8no}, {@utf8no}, {@uni_xlateno}, {@fat=@check_strict}, {@shortname_mixed}, {@numtail}, {@rodir}, {@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@shortname_winnt}, {@uni_xlate}, {@utf8no}, {@shortname_win95}]}, 0x26, 0x336, &(0x7f00000001c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 18m2.637831532s ago: executing program 4 (id=7): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, 'max_inline', 0x3a, '\x00', 0x3a, './file0', 0x3a, [0x43, 0x4f, 0x43]}, 0x35) 18m2.539178144s ago: executing program 4 (id=10): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0xf000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x7) 18m1.859633603s ago: executing program 4 (id=13): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x814}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000d40)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x941f) 18m1.610265806s ago: executing program 4 (id=16): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000dc0)={[{@utf8no}, {@rodir}, {@shortname_mixed}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@numtail}, {@uni_xlate}, {@uni_xlate}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@shortname_winnt}, {@uni_xlateno}, {@utf8no}, {@uni_xlate}]}, 0x26, 0x336, &(0x7f00000001c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) 18m1.398940858s ago: executing program 4 (id=19): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r2, 0x400, 0x2) 18m1.362495689s ago: executing program 32 (id=19): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r2, 0x400, 0x2) 11m15.307002957s ago: executing program 5 (id=2047): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000f8ed000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x10) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000640), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x1164420, &(0x7f0000002100)={[], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) 11m15.197973408s ago: executing program 5 (id=2048): mkdir(&(0x7f0000000200)='./file0\x00', 0x50) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11m14.875372953s ago: executing program 5 (id=2049): pipe(&(0x7f0000000040)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, 0x0, 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x0, 0x0, 0x2a8, 0x2a8, 0x1b8, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x5, 0x703}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0x6, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) socket(0x10, 0x3, 0x0) unshare(0xa000000) 11m13.978175405s ago: executing program 5 (id=2054): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x4) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') syz_emit_ethernet(0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=@newtaction={0x58, 0x32, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_ct={0x40, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0x15, 0x6, "02c5a3138ee5b3328af187c78a3bf949a5"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x58}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) 11m12.966080268s ago: executing program 5 (id=2057): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0xaa080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x632, &(0x7f0000000000)="$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") r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) creat(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="6c120000", @ANYRES16=0x0, @ANYBLOB="000827bd7000fddbdf25050000000500020004000000050006000900000014120380290004006cb410fba0a09e26e386ccce8915b4bfe5a5be7436ce307f625318390e893530b0714f53ee000000800003801800018008000200707070000800010003000000040003001c000180080001000600000008000100070000000400030004000300180001800800010017db000004000300080001005f0000000c0001800400030004000300180001800800020040285c000800010004000000040003000c000180080002005b822d00080002000200000004000100a500050051c4bfe17e64a3ceb918c0dcde3ad21b465fa6e12df6164e7ee473ebf8a0143274e1ae3e0eedb9062c6087d3e6174a376b286a45f7d3a7c531dc262b407c56610cc2a9397dd5bb4990f9c0c0175e77a3612565d765bc5603ebee9a42232f49fd501a3a2f1ab1691b86f3f7404852082a070a42ff06c9e24b09eea493c7364be89951f5d6ba166d8eaecb80e7049e8cc8900f916045bbefbe558ff96aadc7d356ef00000004100400ac36f8191e6198c18e5f1ba33bbe98356f7abcbcc3eec2b38378e9702855e27e931c97ca44fe139a61a8a6e7da89ad3263665c35c4f685dcc6a0ee8420f33718f543956e6ae212f80265b6fa00eef975095210c9648d8f40695dbbfed3619debe23eaf9d801f9f05cd483005900be4a9b198b3aa61447c18fef0749d3369e59d411eed1712f8f898a36533cb65caf14e3624f99a9f7e0e27d39cbe9bb6182d3bf4a90e70e9f3aa0f386b67cda3543bf6dfc5227a5e8c64ab6b8ef96e32ddfbbefb5f23970ff44152fdd3db0763f404d99a41f2a7073ce8f3a650eb900ecd90de960aee946307fd047c68fca50e10c9a0a3be5f3cd03bf3848cad12e2f9cf5c9ebff2ca1b9ab20de892d06862619c12a37775f3687d35896600f9720795bad6c5839c25a4f82489209f95becd25f50e5b953c2012c1719cb9ca14ffd3c22a914114a95ed037dd63e61299d9336eec8a412026acf8353779bbf00fa5e8e3b290f50487fa993355d42f0157968fb13c5ad4917d19952f4583a725b7e233968bc25ddd880bf17c79faac23e0600e97a406a2812bd8564b94409a974b736c9aabdf1e13bb51e7287dbfc213d79fec13cf4693e4a0eda552a06e4c60fc2a494b08f709aff786fe58995f80f1ca35da9c29f4493ddfd30f90af0874c6de82191651ad0a06fac8c68e1f87205ecfbb3088e275551073311ad4df5e5f112fb397e6b213e948b625608aae8c0c3ec9fb0a38ad0b977d13062d2a6b6c34b0d03db46e0b3b720d5e9c22cf7241b96c2f7071baf08a95873c639c0a61bd081760fe6449daa660197d1a5096a4a3c97dffb0bad6d9fdd715f3653678183fcb59cdf9081b0cb3e1a67be8ff70c044be87f50858a7ebc8bee594bbedf028485d9442e0e44fcb9fbdbc44bd25c439becfe70253f74c12648101cfbcfce5179a42385d8c43004e46735b9421e9712484b675b8be281fcfd6734db1bb28d1933e6dc5f2a63c949002ba542fb1a8a263a2e743d5b15d706568684381c636672bf7e5078848ace2faa9e7e4079fe42f009468459d465bbc1c6b7248b51e6afe1ee41b0d7eee96ca790bb68a5ed9aad85316ddacb8da1e26df2045c7437521c0ae459c00801cf8de14b46f8b81eda06f1c12737099c3e405599b4a409e3d332cbd07a4c16934ecdab69598a550dc065b699d8d430be58b125bbda02f751cd94261bf3d7b8be7438a3e3b5f742797dcac6b81bd01e334f9028d13489b7d416c9c96653de31115a8ed66b8edb4f3ef512a103b09cf30fcaaf94f9e61e84e85d2ce230af5ad4be8685a2646d36d8c10dc23920fcf79b1197d52a6362926eb8a25716cbeb70c49e7bf80b65e87afa7854ca6eb296db3489acbf377c49846168d8f31ad541e603e81d53ed073ff0d4a2348623f81437a4823e0f755664492c426b39f81e8bce6045f5a325c097e418f49020aecc437bc7cca4f93f5c257be816789a25e526f760b38cbe95bbabc6ebb8cb20193bdd54c09f4e3d7602dcac0398cf39a37e3a093f7b922b3c089232cb5f34da75ed8db831fc8452bececb87c71630da2da89f1bcf6a3cb3d2545055755d5a787cf6efe07769620f095d6b8727b55c148189f318d3e97a2043e0021a7389f10dfdd4fd16c5382cf9878fb4029178ff9b2e719536ace9545859fafb7df029e1c7672ec88f55e05be4158fd5bc6d2c389f5625e689c72ba34890588dca40febfae6b62a46ad15a28eab4875431c6b957675ee49bdb0932ce997933481dd043b52c9ef7d3c21b6ffcee8a25275cec947095ffc81b9a1068b242e3dc9c2d8b3ae97d724375d75a42c7f2909cf5630fdb81b96495a892962b85fe095b017876f2a09ec444695442769a83051c4fd3d35f2f3ddf879c45e94b6d7dd814712d25f1dbbf42fa0283eda52763f1f32d2d94a1ff26c8b79e65a72b593be36a27716551b3c60b9b835a99714c9aa5e6b0c48cc769655cc6b6e7e246f7434a504623a5f1bc4dd5a8c10cb5123", @ANYBLOB], 0x126c}, 0x1, 0x0, 0x0, 0x20008800}, 0x881) 11m12.251386097s ago: executing program 5 (id=2061): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @void}, 0x10) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 11m12.122708789s ago: executing program 33 (id=2061): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @void}, 0x10) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 13.271431355s ago: executing program 2 (id=4601): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@inlinecrypt}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@norecovery}, {@mblk_io_submit}, {@dax_always}, {@dax_never}, {@nombcache}, {}], [{@audit}]}, 0x43, 0x7bb, &(0x7f0000003000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x0, 0x8, 0xfa04, 0x98, 0x6c02, 0x198, 0x194, 0x194, 0x198, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @multicast2, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x0, 0xc}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "6a13", 0x1}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffff00]}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) getpriority(0x2, r1) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000240)={0x1, 0x6}, 0x8) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(0x0, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0x6, &(0x7f0000000500)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$search(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r4, 0x851, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000880)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, &(0x7f0000000180)) 12.992900628s ago: executing program 1 (id=4604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, 0x0}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x5}]}}}]}, 0x3c}}, 0x4048000) 11.711165494s ago: executing program 1 (id=4607): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00'}, 0x10) unshare(0x2040600) unshare(0x22020400) 11.632094935s ago: executing program 1 (id=4608): open(&(0x7f0000000000)='./file0\x00', 0x185c0caaa3fc5421, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$binderfs(0x0, &(0x7f0000000540)='./binderfs\x00', 0x0, 0x30200a1, &(0x7f00000007c0)) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r5}, 0x18) r6 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000340)={0x0, {{0xa, 0x2, 0x0, @mcast1}}}, 0x88) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="2b000e"], 0x68}}, 0x0) 10.46089217s ago: executing program 2 (id=4610): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3200046, &(0x7f0000000180)={[{@jqfmt_vfsv0}]}, 0x1, 0x56b, &(0x7f00000021c0)="$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") r0 = open(0x0, 0xa000, 0x124) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x10, &(0x7f0000000600), &(0x7f00000006c0), 0x8, 0xbe, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x2, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x7a7b, 0x1000, &(0x7f0000002740)=""/4096, 0x41100, 0x44, '\x00', 0x0, @fallback=0x26, r0, 0x8, &(0x7f0000000440)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, r1, r2, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071103100000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0af8fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 9.367756863s ago: executing program 1 (id=4615): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x4, &(0x7f0000000000), 0x1, 0x4e4, &(0x7f0000000a40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000003c0), 0x505000, 0x0) r5 = getuid() mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000380), 0x1000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_readahead}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@privport}, {@fscache}, {@fscache}, {@noxattr}, {@version_9p2000}, {@dfltuid={'dfltuid', 0x3d, r5}}], [{@flag='lazytime'}]}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 9.299552014s ago: executing program 6 (id=4617): sched_setscheduler(0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd3eb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xd935}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0x48}}, 0x0) 5.846134587s ago: executing program 2 (id=4619): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000000000000000020000000000000000000900"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) io_uring_setup(0x2471, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) gettid() r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = syz_pidfd_open(r1, 0x0) setns(r3, 0x24020000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x0, 0xffe2}, {0x5, 0xffe0}}}, 0x24}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x2c020400) 5.760324948s ago: executing program 3 (id=4620): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, 0x0) writev(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x0) 5.403423933s ago: executing program 1 (id=4621): getpid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f00000006c0)=ANY=[], 0x25, 0x5586, &(0x7f00000079c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x163c41, 0x98) truncate(0x0, 0xda0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x2b, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) open_tree(r1, &(0x7f0000000080)='./file3\x00', 0x100) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x140, 0x0, 0xffffff6a, 0x0, 0x0, 0x250, 0x258, 0x258, 0x250, 0x258, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0xffffff00, 0xff], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x2]}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x3d6}, {0x28}}}}, 0x350) 5.176687446s ago: executing program 6 (id=4622): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mkdir(0x0, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000180)={[0x1]}) inotify_init1(0x0) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00'], 0x1, 0x2c4, &(0x7f00000003c0)="$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") syz_open_dev$vcsa(0x0, 0x401, 0x8002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 5.174992625s ago: executing program 3 (id=4623): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001140040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r1 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.103322176s ago: executing program 3 (id=4624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) r4 = syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000034ed00000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r4, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) linkat(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0x884, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x9}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xdac8}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0x0, 0xec95, 0xffffffff, {0x7, 0x1, 0x8000, 0xc, 0xeb, 0xf}, {0x5, 0x2, 0x8, 0x3, 0x101, 0x5c}, 0x5, 0x3, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x7, 0x0, 0xc, 0x401, 0x5, 0x2, 0xfffffff7, 0x4, 0xfffffffb, 0x2, 0x6, 0x6, 0x9, 0x5, 0x200, 0x7, 0x7, 0xffffffff, 0x3, 0x3, 0x9, 0x7, 0x1, 0x81, 0x0, 0x0, 0x3, 0x9, 0x3ff, 0x10, 0xc3f, 0xf11, 0xfff, 0x3, 0x77a, 0x8, 0x532, 0xfffffff7, 0x6a2, 0xfffffffc, 0x9, 0x10000, 0x0, 0x8, 0x8, 0x5, 0x1, 0xffffffff, 0x4, 0x8, 0x0, 0x7, 0x9db, 0x7fffffff, 0x3cca00, 0x1, 0x0, 0x1ff, 0x1, 0x5, 0x9, 0x7ff, 0x2, 0x80, 0x8000, 0xdc6, 0xffffffff, 0x7, 0x878, 0x10001, 0x0, 0xc8, 0x80000000, 0x8, 0x4, 0x7, 0x3, 0x9, 0x5, 0x6, 0x0, 0x8, 0x3b60, 0x1, 0x2, 0x9, 0x2, 0x2, 0x9f8, 0x2, 0x6, 0x4, 0x5, 0x8, 0x1, 0x0, 0x5d, 0x9, 0x10001, 0x1, 0x9, 0xffff8000, 0xfff, 0x6, 0x2, 0x6, 0x1, 0x3, 0x200, 0x3, 0xb52, 0xfffffa63, 0x4, 0x10, 0x7, 0x0, 0x7, 0x0, 0x8000, 0x7, 0x2, 0x2, 0xb4, 0x3ff, 0x2, 0xffffffff, 0x2, 0x4, 0x7, 0x3, 0x8, 0x9, 0x800, 0x3, 0xffffffff, 0x1, 0xb178, 0x5, 0x5, 0x9, 0x50, 0x0, 0x4, 0x5, 0x2d, 0x3ff, 0x54d0000, 0xfffffffb, 0x40, 0xada, 0xfffeffff, 0x80, 0xc0, 0x7, 0x8, 0x3, 0x1ff, 0xb519, 0xa, 0x7, 0xffffffff, 0x401, 0x0, 0x5, 0x6, 0x9, 0x8e, 0x590, 0xfffa, 0x5, 0xffffffff, 0x6, 0x8, 0x545, 0x8, 0x6, 0x7, 0xff, 0x80000001, 0x1, 0x5e2c, 0x7ff, 0x7, 0x0, 0x200, 0x4, 0x7, 0x1, 0x9, 0x0, 0x5, 0x9f24, 0x0, 0x3ff, 0x595, 0x1, 0x1, 0x6, 0x5, 0x18000000, 0x59, 0x7, 0x3, 0x4, 0x1, 0x6, 0x80, 0x7ff, 0x6, 0x98, 0x2, 0x10000, 0x5, 0x1497, 0xffffffff, 0x10, 0x2, 0x3, 0x40, 0xac49, 0x5, 0xb329, 0x400, 0x6, 0x7ff, 0x0, 0x1, 0x6, 0x4c2, 0x9, 0x0, 0xffffff5b, 0x5, 0x5c6b, 0x6, 0x400000, 0x480000, 0xa, 0x401, 0x5, 0x8, 0x5ec, 0x0, 0x3, 0x65f6, 0x3, 0x7, 0x7fff, 0xffff197a, 0x95, 0xffffffff, 0x0, 0x65, 0x8, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1b4, 0x2, 0xd, 0xff, 0x3, 0x0, 0x3, 0x37, 0xffffff98, 0xfffffff9, 0xfff, 0xa, 0x2, 0x7, 0x5, 0x1, 0x6fc7e429, 0x3, 0x7, 0x3ff, 0xe9c, 0x1, 0x0, 0x8001, 0x5, 0xe, 0x8000, 0x7e8880e, 0x6, 0xfff, 0x6, 0x9, 0x8, 0x76, 0x9, 0x7fffffff, 0x7, 0x6, 0xe63, 0x8, 0x100, 0x8, 0x9, 0x6, 0xd801, 0x5, 0x8, 0xfffffffe, 0xff, 0x3, 0x8, 0x0, 0x8, 0x401, 0x492d, 0x1, 0x3, 0x9, 0xea, 0x7f, 0xaf, 0x5, 0x7, 0x94c, 0x3, 0x3ff, 0x8, 0xfff, 0x45f6, 0x7fffffff, 0x0, 0x2, 0x8, 0x80, 0x24a, 0x0, 0x0, 0x81, 0x9, 0x3, 0x0, 0x6, 0x3, 0x3ff, 0x8, 0x461, 0x0, 0xc, 0x7cd, 0x7fff, 0x9, 0x81, 0xe5e, 0x58e3, 0x401, 0x9, 0x8, 0x5, 0x53f, 0x8, 0x3, 0x1000, 0x10001, 0x4, 0x7ff, 0x8, 0x200, 0x3, 0x3, 0xfffffff5, 0x6, 0x6, 0x7, 0x1450, 0x64c, 0x4, 0x10001, 0x0, 0x0, 0x9, 0x3, 0x5, 0xf, 0x546b, 0x9, 0x2, 0x7, 0x2, 0x800, 0x4, 0x0, 0x7f0, 0x0, 0xc3e, 0x3, 0x4, 0x80000000, 0x0, 0x5, 0x0, 0x49, 0x3, 0x6, 0x8, 0xffffff01, 0x1, 0x400, 0xff, 0xffff, 0x4, 0xa, 0x515a392f, 0x1, 0x8, 0x2, 0x857, 0x5, 0x0, 0x8, 0x6, 0xfffff6c9, 0x7, 0x8, 0x3291dca0, 0x636, 0x81, 0x4, 0x2, 0xfffffffb, 0x0, 0xe3, 0x2, 0x9, 0x95c, 0x1000008, 0xd2, 0x571176f5, 0x5, 0x2, 0x80000001, 0x4, 0xbe4, 0x2, 0x9, 0x6ad5, 0x5, 0x7, 0x9, 0x6, 0x5, 0x8, 0x97, 0xdac9, 0x9, 0x3, 0xe9, 0xa33c, 0xffff, 0x6, 0x400, 0xc, 0x27f8, 0x6, 0x7, 0x8, 0xffff, 0xd1e1, 0xf1, 0x8532, 0x8, 0x30c000, 0xdc, 0x6, 0x100, 0x3, 0x1, 0x0, 0x40, 0x5, 0xfffffffb, 0xfe, 0xfffffffb, 0xb8cd, 0x0, 0x8, 0x3, 0xb, 0x100, 0x6, 0x0, 0x171, 0x91a, 0x3ff, 0xc3, 0x1e000, 0xc697, 0x8, 0xf1, 0x73, 0xb, 0xfffffff8, 0xc, 0x5, 0x3, 0x5, 0x9, 0x9, 0x4, 0x6, 0x7f, 0x3, 0x3, 0x7, 0xd, 0x378b]}]}]}}]}, 0x884}}, 0x24044094) 4.214938508s ago: executing program 0 (id=4626): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000780)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3802}], 0x1}, 0x0) 4.214340377s ago: executing program 6 (id=4627): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x92) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000004c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20002000}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x31) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknod(&(0x7f0000000180)='./file0\x00', 0xc000, 0x1) 4.135691689s ago: executing program 0 (id=4628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000080)) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getuid() r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8001, 0x0, 0x81, 0xffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f00000000c0), &(0x7f0000000240)=0x4) getsockopt$sock_buf(r4, 0x1, 0x1a, 0x0, &(0x7f0000000340)) 3.656996435s ago: executing program 0 (id=4629): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002040), 0xa000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') fstat(r4, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f00000006c0)="$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") read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) 3.20729747s ago: executing program 3 (id=4630): r0 = socket(0x2c, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x3e, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @broadcast}}}}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004000009000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}, {@block_validity}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 2.269597262s ago: executing program 1 (id=4631): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x4, &(0x7f0000000000), 0x1, 0x4e4, &(0x7f0000000a40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000003c0), 0x505000, 0x0) r5 = getuid() mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000380), 0x1000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_readahead}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@privport}, {@fscache}, {@fscache}, {@noxattr}, {@version_9p2000}, {@dfltuid={'dfltuid', 0x3d, r5}}], [{@flag='lazytime'}]}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 1.846685987s ago: executing program 0 (id=4632): sched_setscheduler(0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd3eb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xd935}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0x48}}, 0x0) 1.831497027s ago: executing program 6 (id=4633): socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r2}, 0x18) syz_emit_ethernet(0x9a, &(0x7f0000000480)=ANY=[], 0x0) 1.805011877s ago: executing program 2 (id=4634): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) 902.720449ms ago: executing program 2 (id=4635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) 901.564508ms ago: executing program 3 (id=4636): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x1000804, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x276, &(0x7f0000000640)="$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") open(&(0x7f0000000000)='./file0\x00', 0x109042, 0x0) unlink(&(0x7f0000000100)='./file0\x00') 715.674661ms ago: executing program 6 (id=4637): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000440), 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x14, &(0x7f0000000040)={0x0, 0x0}) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000580)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000b18000680140004002001000000000000000000000000000153c9aa0c53510b4abbcad7d7b067"], 0xac}}, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xd0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_NAT_SRC={0xb4, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2d}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1861642f33fe7edf}, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x30, r6, 0x701, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0xd}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8000000}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x30}}, 0x0) 691.287872ms ago: executing program 0 (id=4638): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000003080), 0x101000, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$TIOCGRS485(r1, 0x5453, 0x0) 517.742774ms ago: executing program 0 (id=4639): rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x9, 0x2, 0x9, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002680)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r1, &(0x7f0000000240), 0x0}, 0x20) 210.507187ms ago: executing program 6 (id=4640): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000000)={0x1, 0x3, 0xdc08, 0x8, 0x8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) 19.8316ms ago: executing program 3 (id=4641): syz_open_dev$tty20(0xc, 0x4, 0x0) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005300000085000000080000009500000000000000a94be0c51261be6a99e5e06bb0a232d5e107000000000000007cde9e8f4b9197701b547edf612a03f1737d951d7a617558b674e1c4fdfd771ebe7c33af3e4917be59ac67f0bbabcb8f41c23ba8f91633a8b9c70e804744dc081ac69cfea08e4e5a06f70c67a8f2888d6fd95f20202866918c3c3771bc3f325a6386a9d49e3c13b32461acf0be4b31638c29187d748841f439547b4dac15e52a4b6a2981eb4afadbbdf9157fa588f475c4cd2e44e2129dc6b93993909613e8"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 2 (id=4642): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002040), 0xa000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') fstat(r4, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f00000006c0)="$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") read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): r dev=overlay ino=104864 [ 875.337905][T14354] device veth1_to_team entered promiscuous mode [ 876.161918][T14353] device veth1_to_team left promiscuous mode [ 877.372227][T14384] incfs_lookup_dentry err:-5 [ 877.393345][T14384] incfs: Can't find or create .index dir in ./file0 [ 877.409394][T14384] incfs: mount failed -5 [ 878.452521][T14390] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 878.469117][ T466] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 878.564158][T14400] device veth1_to_team entered promiscuous mode [ 878.743167][T14408] EXT4-fs (loop2): Test dummy encryption mode enabled [ 878.752106][T14408] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 878.779106][ T466] usb 7-1: Using ep0 maxpacket: 32 [ 878.929538][ T466] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 878.988220][ T466] usb 7-1: config 0 has no interface number 0 [ 879.045931][ T466] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.209582][ T466] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.221046][ T466] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 879.232131][ T466] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.287929][T14399] device veth1_to_team left promiscuous mode [ 879.372310][ T466] usb 7-1: config 0 descriptor?? [ 879.557888][T14412] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 879.588180][T14412] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 879.597688][T14412] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 879.606450][T14412] EXT4-fs error (device loop3) in ext4_orphan_del:3257: error 27 [ 879.615426][T14412] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 879.624245][T14412] EXT4-fs error (device loop3) in ext4_orphan_cleanup:2816: error 27 [ 879.637037][T14412] EXT4-fs (loop3): 1 truncate cleaned up [ 879.643661][T14412] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 879.653278][T14412] ext4 filesystem being mounted at /155/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 879.840617][T14421] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 879.972643][T14421] blk_update_request: I/O error, dev loop20, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 879.989983][T14421] EXT4-fs (loop1): couldn't read superblock of external journal [ 880.119024][T14433] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3775'. [ 880.169225][ T466] uclogic 0003:28BD:0094.0015: pen parameters not found [ 880.177600][ T466] uclogic 0003:28BD:0094.0015: interface is invalid, ignoring [ 880.520370][ T421] usb 7-1: USB disconnect, device number 17 [ 881.760250][T14440] EXT4-fs (loop0): orphan cleanup on readonly fs [ 881.826041][T14440] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz.0.3776: bg 0: block 248: padding at end of block bitmap is not set [ 881.840942][T14440] Quota error (device loop0): write_blk: dquota write failed [ 881.848362][T14440] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 881.859105][T14440] EXT4-fs (loop0): 1 truncate cleaned up [ 881.865113][T14440] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,dioread_nolock,abort,noload,nodiscard,noinit_itable,,errors=continue [ 881.892371][T14443] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 881.937423][ T23] audit: type=1400 audit(1747906253.146:1446): avc: denied { read } for pid=14437 comm="syz.0.3776" name="usbmon0" dev="devtmpfs" ino=9446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 883.484936][ T23] audit: type=1400 audit(1747906253.146:1447): avc: denied { open } for pid=14437 comm="syz.0.3776" path="/dev/usbmon0" dev="devtmpfs" ino=9446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 884.030752][T14475] EXT4-fs (loop2): Test dummy encryption mode enabled [ 884.040308][T14475] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 885.499221][T14034] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 885.879241][T14034] usb 3-1: Using ep0 maxpacket: 32 [ 885.999223][T14034] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.010757][T14034] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.150854][T14034] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 886.153409][T14501] erofs: (device loop6): mounted with opts: , root inode @ nid 36. [ 886.162088][T14034] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 886.237175][T14034] usb 3-1: Product: syz [ 886.261428][T14034] usb 3-1: Manufacturer: syz [ 887.021447][T14034] hub 3-1:4.0: USB hub found [ 887.993060][T14034] hub 3-1:4.0: 2 ports detected [ 888.009247][T14513] EXT4-fs error (device loop6) in ext4_do_update_inode:5534: error 27 [ 888.200822][T14513] EXT4-fs error (device loop6) in ext4_do_update_inode:5534: error 27 [ 888.885531][T14513] Quota error (device loop6): write_blk: dquota write failed [ 888.901634][T14513] Quota error (device loop6): qtree_write_dquot: Error -27 occurred while creating quota [ 888.918858][T14513] EXT4-fs (loop6): 1 orphan inode deleted [ 888.925363][T14513] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 888.938114][T14513] ext4 filesystem being mounted at /332/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 889.098035][T14533] EXT4-fs (loop3): Test dummy encryption mode enabled [ 889.106757][T14533] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 889.139231][T14034] hub 3-1:4.0: set hub depth failed [ 889.204213][T14034] usb 3-1: USB disconnect, device number 36 [ 889.533815][T14536] FAT-fs (loop0): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 889.664848][T14539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3804'. [ 890.177783][T14549] attempt to access beyond end of device [ 890.177783][T14549] loop0: rw=2049, want=137, limit=128 [ 890.189116][T14549] Buffer I/O error on dev loop0, logical block 136, lost async page write [ 890.196328][ T573] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 890.197716][T14549] attempt to access beyond end of device [ 890.197716][T14549] loop0: rw=2049, want=147, limit=128 [ 890.509998][ T7] FAT-fs (loop0): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 890.829349][ T573] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.919843][ T573] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 891.125507][ T573] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 891.198507][ T573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.208225][ T573] usb 4-1: config 0 descriptor?? [ 891.415771][T14575] EXT4-fs error (device loop6) in ext4_do_update_inode:5534: error 27 [ 891.426142][T14575] EXT4-fs error (device loop6) in ext4_do_update_inode:5534: error 27 [ 891.437408][T14575] Quota error (device loop6): write_blk: dquota write failed [ 891.446396][T14575] Quota error (device loop6): qtree_write_dquot: Error -27 occurred while creating quota [ 891.458923][T14575] EXT4-fs (loop6): 1 orphan inode deleted [ 891.466339][T14575] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 891.475929][T14575] ext4 filesystem being mounted at /334/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 891.728400][ T23] audit: type=1400 audit(1747906262.936:1448): avc: denied { unlink } for pid=14579 comm="syz.2.3816" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 892.158202][T14595] FAT-fs (loop1): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 892.402392][T14603] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 893.334493][T14612] EXT4-fs (loop2): Test dummy encryption mode enabled [ 893.348014][T14612] EXT4-fs (loop2): can't mount with dioread_nolock if block size != PAGE_SIZE [ 893.479176][ T573] usb 4-1: string descriptor 0 read error: -71 [ 893.554108][T14614] attempt to access beyond end of device [ 893.554108][T14614] loop1: rw=2049, want=137, limit=128 [ 893.565987][T14614] Buffer I/O error on dev loop1, logical block 136, lost async page write [ 893.566275][ T573] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 893.575106][T14614] attempt to access beyond end of device [ 893.575106][T14614] loop1: rw=2049, want=147, limit=128 [ 893.584830][ T573] usb 4-1: USB disconnect, device number 27 [ 893.625343][T14618] EXT4-fs (loop0): Ignoring removed orlov option [ 893.695801][ T23] audit: type=1326 audit(1747906264.906:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14623 comm="syz.2.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaecb91969 code=0x7ffc0000 [ 893.700750][T14618] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,quota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,lazytime,noauto_da_alloc,stripe=0x0000000000000005,orlov,,errors=continue [ 893.722510][ T23] audit: type=1326 audit(1747906264.906:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14623 comm="syz.2.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbaecb91969 code=0x7ffc0000 [ 893.767408][ T359] FAT-fs (loop1): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 893.767418][ T23] audit: type=1326 audit(1747906264.906:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14623 comm="syz.2.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaecb91969 code=0x7ffc0000 [ 893.767436][ T23] audit: type=1326 audit(1747906264.906:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14623 comm="syz.2.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbaecb91969 code=0x7ffc0000 [ 893.825534][ T23] audit: type=1326 audit(1747906264.906:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14623 comm="syz.2.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaecb91969 code=0x7ffc0000 [ 894.551872][ T23] kauditd_printk_skb: 3 callbacks suppressed [ 894.551885][ T23] audit: type=1400 audit(1747906265.766:1457): avc: denied { map } for pid=14615 comm="syz.0.3826" path="socket:[106826]" dev="sockfs" ino=106826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 894.584904][ T23] audit: type=1400 audit(1747906265.796:1458): avc: denied { read } for pid=14615 comm="syz.0.3826" path="socket:[106826]" dev="sockfs" ino=106826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 894.790737][T14645] EXT4-fs (loop1): orphan cleanup on readonly fs [ 894.800021][T14645] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.3834: bg 0: block 248: padding at end of block bitmap is not set [ 894.815256][T14645] Quota error (device loop1): write_blk: dquota write failed [ 894.851365][T14645] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 894.872409][T14645] EXT4-fs (loop1): 1 truncate cleaned up [ 894.886183][T14645] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 895.016469][ T23] audit: type=1400 audit(1747906266.226:1459): avc: denied { connect } for pid=14655 comm="syz.6.3838" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 895.019024][T14645] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 895.043578][ T23] audit: type=1400 audit(1747906266.256:1460): avc: denied { write } for pid=14655 comm="syz.6.3838" laddr=fe80::a8aa:aaff:feaa:aaaa lport=6 faddr=fc01::a fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 895.211355][T14645] EXT4-fs (loop1): re-mounted. Opts: (null) [ 895.222809][T14660] Quota error (device loop1): find_block_dqentry: Quota for id 131072 referenced but not present [ 895.237286][T14660] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 131072 [ 895.629166][ T331] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 895.636364][T14670] FAT-fs (loop1): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 895.790084][T14673] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 895.817184][T14673] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 895.845503][T14673] Quota error (device loop3): write_blk: dquota write failed [ 895.905012][T14673] Quota error (device loop3): qtree_write_dquot: Error -27 occurred while creating quota [ 895.947442][T14673] EXT4-fs (loop3): 1 orphan inode deleted [ 895.965667][T14673] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 895.982624][T14673] ext4 filesystem being mounted at /167/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 896.019268][ T331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.049312][ T331] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 896.073728][ T331] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 896.093530][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.114356][ T331] usb 3-1: config 0 descriptor?? [ 896.246424][T14682] attempt to access beyond end of device [ 896.246424][T14682] loop1: rw=2049, want=137, limit=128 [ 896.258404][T14682] Buffer I/O error on dev loop1, logical block 136, lost async page write [ 896.259094][T14034] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 896.267366][T14682] attempt to access beyond end of device [ 896.267366][T14682] loop1: rw=2049, want=147, limit=128 [ 896.505948][T14099] FAT-fs (loop1): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 896.813168][T14690] 9pnet: Could not find request transport: fd0x0000000000000003 [ 896.829964][T14034] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.852968][T14034] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 896.934681][T14034] usb 7-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 896.945196][T14034] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.955493][T14034] usb 7-1: config 0 descriptor?? [ 897.516744][T14699] FAT-fs (loop1): Directory bread(block 64) failed [ 897.532031][T14699] FAT-fs (loop1): Directory bread(block 65) failed [ 897.540155][T14699] FAT-fs (loop1): Directory bread(block 66) failed [ 897.546958][T14699] FAT-fs (loop1): Directory bread(block 67) failed [ 897.555017][T14699] FAT-fs (loop1): Directory bread(block 68) failed [ 897.562107][T14699] FAT-fs (loop1): Directory bread(block 69) failed [ 897.578599][T14699] FAT-fs (loop1): Directory bread(block 70) failed [ 897.585704][T14699] FAT-fs (loop1): Directory bread(block 71) failed [ 897.593956][T14699] FAT-fs (loop1): Directory bread(block 72) failed [ 897.600981][T14699] FAT-fs (loop1): Directory bread(block 73) failed [ 898.799558][ T331] usb 3-1: string descriptor 0 read error: -71 [ 898.806597][ T331] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 898.816004][ T331] usb 3-1: USB disconnect, device number 37 [ 898.962517][T14721] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 899.001188][T14726] 9pnet: Could not find request transport: fd0x0000000000000003 [ 899.099183][T14034] usb 7-1: string descriptor 0 read error: -71 [ 899.106010][T14034] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 899.142886][T14034] usb 7-1: USB disconnect, device number 18 [ 899.442754][T14732] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 899.461206][T14732] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 899.490793][T14732] EXT4-fs (loop1): 1 orphan inode deleted [ 899.496651][T14732] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 899.505864][T14732] ext4 filesystem being mounted at /133/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 899.735734][T14741] attempt to access beyond end of device [ 899.735734][T14741] loop3: rw=2049, want=137, limit=128 [ 899.746959][T14741] Buffer I/O error on dev loop3, logical block 136, lost async page write [ 899.756188][T14741] attempt to access beyond end of device [ 899.756188][T14741] loop3: rw=2049, want=147, limit=128 [ 899.920860][T14099] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 900.560338][T14751] EXT4-fs (loop3): Test dummy encryption mode enabled [ 900.586488][T14751] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 902.252235][T14763] FAT-fs (loop0): Directory bread(block 64) failed [ 902.317705][T14763] FAT-fs (loop0): Directory bread(block 65) failed [ 902.325225][T14763] FAT-fs (loop0): Directory bread(block 66) failed [ 902.332486][T14763] FAT-fs (loop0): Directory bread(block 67) failed [ 902.339543][T14769] device veth1_to_team entered promiscuous mode [ 902.346470][T14763] FAT-fs (loop0): Directory bread(block 68) failed [ 902.353371][T14763] FAT-fs (loop0): Directory bread(block 69) failed [ 902.360604][T14763] FAT-fs (loop0): Directory bread(block 70) failed [ 902.367872][T14763] FAT-fs (loop0): Directory bread(block 71) failed [ 902.375633][T14763] FAT-fs (loop0): Directory bread(block 72) failed [ 902.383519][T14763] FAT-fs (loop0): Directory bread(block 73) failed [ 903.076511][T14775] 9pnet: Could not find request transport: fd0x0000000000000003 [ 903.141906][T14768] device veth1_to_team left promiscuous mode [ 903.190200][T14034] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 903.589364][T14034] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 903.640604][T14034] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 903.707294][T14034] usb 7-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 903.722668][T14034] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.741132][T14034] usb 7-1: config 0 descriptor?? [ 905.127587][T14802] FAT-fs (loop2): Directory bread(block 64) failed [ 905.150385][T14808] EXT4-fs (loop1): Test dummy encryption mode enabled [ 905.160482][T14808] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 905.215408][T14802] FAT-fs (loop2): Directory bread(block 65) failed [ 905.306081][T14802] FAT-fs (loop2): Directory bread(block 66) failed [ 905.339394][T14802] FAT-fs (loop2): Directory bread(block 67) failed [ 905.373333][T14802] FAT-fs (loop2): Directory bread(block 68) failed [ 905.411654][T14802] FAT-fs (loop2): Directory bread(block 69) failed [ 905.444649][T14802] FAT-fs (loop2): Directory bread(block 70) failed [ 905.481557][T14802] FAT-fs (loop2): Directory bread(block 71) failed [ 905.516865][T14802] FAT-fs (loop2): Directory bread(block 72) failed [ 905.551137][T14802] FAT-fs (loop2): Directory bread(block 73) failed [ 906.065583][T14815] 9pnet: Insufficient options for proto=fd [ 906.875894][T14817] F2FS-fs (loop0): invalid crc value [ 906.882096][T14824] device veth1_to_team entered promiscuous mode [ 906.882683][T14817] F2FS-fs (loop0): Found nat_bits in checkpoint [ 906.965566][T14817] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 906.972491][T14817] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 906.979693][T14817] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 907.301578][T14034] usb 7-1: string descriptor 0 read error: -71 [ 907.768632][T14823] device veth1_to_team left promiscuous mode [ 907.991961][T14034] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 908.001185][T14034] usb 7-1: USB disconnect, device number 19 [ 908.092338][T10791] attempt to access beyond end of device [ 908.092338][T10791] loop0: rw=2049, want=45112, limit=40427 [ 908.317296][T14844] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 908.346347][T14844] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 908.410290][T14844] __quota_error: 2 callbacks suppressed [ 908.410300][T14844] Quota error (device loop2): write_blk: dquota write failed [ 908.429610][T14844] Quota error (device loop2): qtree_write_dquot: Error -27 occurred while creating quota [ 908.529761][T14844] EXT4-fs (loop2): 1 orphan inode deleted [ 908.536238][T14844] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 908.599242][T14844] ext4 filesystem being mounted at /160/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 908.882819][T14858] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 909.092170][T14861] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=46 [ 909.101560][T14861] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=overlay ino=108626 [ 909.934151][T14869] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 910.074402][T14867] F2FS-fs (loop0): invalid crc value [ 910.087382][T14867] F2FS-fs (loop0): Found nat_bits in checkpoint [ 910.125048][T14867] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 910.133018][T14867] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 910.142737][T14867] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 910.356974][T14878] FAT-fs (loop6): Directory bread(block 64) failed [ 910.364237][T14878] FAT-fs (loop6): Directory bread(block 65) failed [ 910.371106][T14878] FAT-fs (loop6): Directory bread(block 66) failed [ 910.378079][T14878] FAT-fs (loop6): Directory bread(block 67) failed [ 910.384971][T14878] FAT-fs (loop6): Directory bread(block 68) failed [ 910.616246][ T23] audit: type=1400 audit(1747906281.826:1461): avc: denied { remount } for pid=14875 comm="syz.3.3893" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 910.645513][T14878] FAT-fs (loop6): Directory bread(block 69) failed [ 910.809582][T14878] FAT-fs (loop6): Directory bread(block 70) failed [ 910.817130][T14878] FAT-fs (loop6): Directory bread(block 71) failed [ 910.824255][T14878] FAT-fs (loop6): Directory bread(block 72) failed [ 910.824307][T10791] attempt to access beyond end of device [ 910.824307][T10791] loop0: rw=2049, want=45112, limit=40427 [ 910.832055][T14878] FAT-fs (loop6): Directory bread(block 73) failed [ 910.838766][T14885] binder: 14884:14885 ioctl c0306201 2000000001c0 returned -14 [ 912.279970][T14903] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 912.441123][T14907] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=46 [ 912.451041][T14907] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=overlay ino=108824 [ 913.199186][T14034] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 913.422466][ T23] audit: type=1400 audit(1747906284.636:1462): avc: denied { bind } for pid=14922 comm="syz.0.3906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 913.444751][ T23] audit: type=1400 audit(1747906284.656:1463): avc: denied { write } for pid=14922 comm="syz.0.3906" path="socket:[108422]" dev="sockfs" ino=108422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 913.649287][T14034] usb 2-1: Using ep0 maxpacket: 16 [ 913.778182][T14929] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 913.787340][T14034] usb 2-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 913.815184][T14034] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.949216][T14034] usb 2-1: config 0 descriptor?? [ 914.045761][T14929] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 914.312046][T14929] Quota error (device loop2): write_blk: dquota write failed [ 914.460407][T14034] thrustmaster 0003:044F:B323.0016: unknown main item tag 0x2 [ 914.475231][T14034] thrustmaster 0003:044F:B323.0016: hidraw0: USB HID v20.00 Device [HID 044f:b323] on usb-dummy_hcd.1-1/input0 [ 914.503985][T14929] Quota error (device loop2): qtree_write_dquot: Error -27 occurred while creating quota [ 914.519129][T14034] thrustmaster 0003:044F:B323.0016: no inputs found [ 914.640229][T14929] EXT4-fs (loop2): 1 orphan inode deleted [ 914.651578][T14929] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 914.663468][T14929] ext4 filesystem being mounted at /164/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 914.720379][T14034] usb 2-1: USB disconnect, device number 42 [ 915.172288][T14954] erofs: (device loop6): mounted with opts: , root inode @ nid 36. [ 915.313949][T14957] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=46 [ 915.323793][T14957] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=overlay ino=109060 [ 915.746438][T14967] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3919'. [ 916.146456][T14971] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 916.170127][T14969] xt_bpf: check failed: parse error [ 919.470354][T14997] FAT-fs (loop6): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 919.518531][T15007] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3931'. [ 919.542715][T15005] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 919.723450][T15016] FAT-fs (loop2): Directory bread(block 64) failed [ 919.735458][T15013] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 919.744476][T15016] FAT-fs (loop2): Directory bread(block 65) failed [ 919.751763][T15016] FAT-fs (loop2): Directory bread(block 66) failed [ 919.759229][T15016] FAT-fs (loop2): Directory bread(block 67) failed [ 919.766147][T15016] FAT-fs (loop2): Directory bread(block 68) failed [ 919.776330][T15016] FAT-fs (loop2): Directory bread(block 69) failed [ 919.783728][T15018] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 919.793457][T15018] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=overlay ino=109775 [ 919.804288][T15013] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 919.812804][T15016] FAT-fs (loop2): Directory bread(block 70) failed [ 919.829148][T15016] FAT-fs (loop2): Directory bread(block 71) failed [ 919.835974][T15016] FAT-fs (loop2): Directory bread(block 72) failed [ 919.843597][T15013] Quota error (device loop3): write_blk: dquota write failed [ 919.851298][T15016] FAT-fs (loop2): Directory bread(block 73) failed [ 919.858246][T15013] Quota error (device loop3): qtree_write_dquot: Error -27 occurred while creating quota [ 919.883542][T15013] EXT4-fs (loop3): 1 orphan inode deleted [ 919.890385][T15013] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 919.899873][T15013] ext4 filesystem being mounted at /192/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 920.011855][T14997] attempt to access beyond end of device [ 920.011855][T14997] loop6: rw=2049, want=137, limit=128 [ 920.023308][T14997] Buffer I/O error on dev loop6, logical block 136, lost async page write [ 920.032036][T14997] attempt to access beyond end of device [ 920.032036][T14997] loop6: rw=2049, want=147, limit=128 [ 920.081556][ T2971] FAT-fs (loop6): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 920.150048][T15024] xt_bpf: check failed: parse error [ 920.347231][T15028] xt_CT: You must specify a L4 protocol and not use inversions on it [ 920.800950][T15035] FAT-fs (loop2): Directory bread(block 64) failed [ 920.818400][T15035] FAT-fs (loop2): Directory bread(block 65) failed [ 920.831865][T15035] FAT-fs (loop2): Directory bread(block 66) failed [ 920.838914][T15035] FAT-fs (loop2): Directory bread(block 67) failed [ 920.846422][ T23] audit: type=1400 audit(1747906292.066:1464): avc: denied { write } for pid=145 comm="syslogd" name="/" dev="tmpfs" ino=9570 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 920.847739][T15035] FAT-fs (loop2): Directory bread(block 68) failed [ 920.877642][T15035] FAT-fs (loop2): Directory bread(block 69) failed [ 920.884898][T15035] FAT-fs (loop2): Directory bread(block 70) failed [ 920.891706][T15035] FAT-fs (loop2): Directory bread(block 71) failed [ 920.891989][ T23] audit: type=1400 audit(1747906292.066:1465): avc: denied { remove_name } for pid=145 comm="syslogd" name="messages" dev="tmpfs" ino=90124 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 920.921829][T15035] FAT-fs (loop2): Directory bread(block 72) failed [ 920.928451][T15035] FAT-fs (loop2): Directory bread(block 73) failed [ 920.953411][ T23] audit: type=1400 audit(1747906292.066:1466): avc: denied { rename } for pid=145 comm="syslogd" name="messages" dev="tmpfs" ino=90124 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 921.004846][ T23] audit: type=1400 audit(1747906292.066:1467): avc: denied { add_name } for pid=145 comm="syslogd" name="messages.0" dev="tmpfs" ino=70894 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 921.196282][ T23] audit: type=1400 audit(1747906292.066:1468): avc: denied { unlink } for pid=145 comm="syslogd" name="messages.0" dev="tmpfs" ino=70894 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 922.082213][ T23] audit: type=1400 audit(1747906292.066:1469): avc: denied { create } for pid=145 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 922.225304][ T23] audit: type=1400 audit(1747906293.436:1470): avc: denied { write } for pid=15045 comm="syz.1.3939" name="uinput" dev="devtmpfs" ino=10823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 922.614318][T15051] F2FS-fs (loop1): invalid crc value [ 922.653183][T15051] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 922.660002][T15051] F2FS-fs (loop1): Start checkpoint disabled! [ 922.669995][T15051] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 922.751588][ T2971] bridge0: port 3(gretap0) entered disabled state [ 922.876977][ T2971] device gretap0 left promiscuous mode [ 922.884998][ T2971] bridge0: port 3(gretap0) entered disabled state [ 923.555443][ T2971] device bridge_slave_1 left promiscuous mode [ 923.563178][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.573979][ T2971] device bridge_slave_0 left promiscuous mode [ 923.574461][ T9304] attempt to access beyond end of device [ 923.574461][ T9304] loop1: rw=2049, want=45112, limit=40427 [ 923.580654][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.785458][T15068] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 923.834357][T15070] erofs: (device loop6): mounted with opts: , root inode @ nid 36. [ 923.994166][T15081] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=46 [ 924.004187][T15081] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=overlay ino=109395 [ 924.526282][T15068] attempt to access beyond end of device [ 924.526282][T15068] loop3: rw=2049, want=137, limit=128 [ 924.537991][T15068] Buffer I/O error on dev loop3, logical block 136, lost async page write [ 924.547226][T15068] attempt to access beyond end of device [ 924.547226][T15068] loop3: rw=2049, want=147, limit=128 [ 924.594999][T15065] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 924.646431][ T23] audit: type=1400 audit(1747906295.856:1471): avc: denied { write } for pid=15084 comm="syz.6.3949" name="kvm" dev="devtmpfs" ino=525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 924.678488][T15086] FAT-fs (loop3): Directory bread(block 64) failed [ 924.693697][T15086] FAT-fs (loop3): Directory bread(block 65) failed [ 924.712108][T15086] FAT-fs (loop3): Directory bread(block 66) failed [ 924.759255][T15086] FAT-fs (loop3): Directory bread(block 67) failed [ 924.778147][T15086] FAT-fs (loop3): Directory bread(block 68) failed [ 924.785479][T15086] FAT-fs (loop3): Directory bread(block 69) failed [ 924.792464][T15086] FAT-fs (loop3): Directory bread(block 70) failed [ 924.799653][T15086] FAT-fs (loop3): Directory bread(block 71) failed [ 924.806992][T15086] FAT-fs (loop3): Directory bread(block 72) failed [ 924.814802][T15086] FAT-fs (loop3): Directory bread(block 73) failed [ 924.882084][T15092] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 924.899460][T15092] ext4 filesystem being mounted at /172/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 925.423480][ T23] audit: type=1400 audit(1747906296.626:1472): avc: denied { read } for pid=15090 comm="syz.2.3951" name="msr" dev="devtmpfs" ino=8975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 926.209483][ T23] audit: type=1400 audit(1747906296.626:1473): avc: denied { open } for pid=15090 comm="syz.2.3951" path="/dev/cpu/0/msr" dev="devtmpfs" ino=8975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 926.430852][ T23] audit: type=1400 audit(1747906297.296:1474): avc: denied { bind } for pid=15090 comm="syz.2.3951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 926.503925][ T23] audit: type=1400 audit(1747906297.316:1475): avc: denied { read } for pid=15090 comm="syz.2.3951" name="loop-control" dev="devtmpfs" ino=565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 926.654377][ T23] audit: type=1400 audit(1747906297.316:1476): avc: denied { open } for pid=15090 comm="syz.2.3951" path="/dev/loop-control" dev="devtmpfs" ino=565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 926.838506][ T23] audit: type=1400 audit(1747906297.316:1477): avc: denied { ioctl } for pid=15090 comm="syz.2.3951" path="/dev/loop-control" dev="devtmpfs" ino=565 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 926.875821][ T23] audit: type=1400 audit(1747906298.056:1478): avc: denied { setopt } for pid=15107 comm="syz.0.3956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 927.058806][T15121] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3960'. [ 927.120197][T15119] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 927.582484][T15135] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=46 [ 927.592449][T15135] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=overlay ino=110593 [ 927.715081][T15132] EXT4-fs (loop1): 1 orphan inode deleted [ 927.721073][T15132] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 927.731341][T15132] ext4 filesystem being mounted at /149/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 928.178772][T15123] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 928.317138][T15142] syz.2.3962[15142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 928.317231][T15142] syz.2.3962[15142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 928.453588][T15142] EXT4-fs (loop2): Ignoring removed nobh option [ 928.495226][T15142] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,grpjquota=,dioread_nolock,,errors=continue [ 928.513826][T15123] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 929.276234][T15123] Quota error (device loop3): write_blk: dquota write failed [ 929.294200][T15123] Quota error (device loop3): qtree_write_dquot: Error -27 occurred while creating quota [ 929.431472][T15123] EXT4-fs (loop3): 1 orphan inode deleted [ 929.465804][T15123] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 929.475519][T15123] ext4 filesystem being mounted at /195/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 929.645014][ T23] audit: type=1400 audit(1747906300.856:1479): avc: denied { shutdown } for pid=15156 comm="syz.1.3968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 929.838580][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3966'. [ 929.980717][T15165] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3971'. [ 931.999116][ T125] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 932.249103][ T125] usb 3-1: Using ep0 maxpacket: 32 [ 932.539190][ T125] usb 3-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=16.7b [ 932.560605][ T125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.607684][ T125] usb 3-1: Product: syz [ 932.628225][ T125] usb 3-1: Manufacturer: syz [ 932.643699][ T125] usb 3-1: SerialNumber: syz [ 932.668925][ T125] usb 3-1: config 0 descriptor?? [ 932.876898][T15192] EXT4-fs (loop0): Ignoring removed bh option [ 932.886186][T15192] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 932.893769][T15192] EXT4-fs (loop0): Ignoring removed nobh option [ 932.906419][T15192] EXT4-fs (loop0): can't mount with dioread_nolock if block size != PAGE_SIZE [ 932.976504][ T125] snd-usb-audio: probe of 3-1:0.0 failed with error -71 [ 933.173980][ T125] usb 3-1: USB disconnect, device number 38 [ 933.472145][ T23] kauditd_printk_skb: 1 callbacks suppressed [ 933.472168][ T23] audit: type=1400 audit(1747906304.646:1481): avc: denied { bind } for pid=15201 comm="syz.0.3983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 933.563005][T15200] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 933.608023][T15200] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 933.702188][T15200] F2FS-fs (loop6): invalid crc value [ 933.724744][T15200] F2FS-fs (loop6): Found nat_bits in checkpoint [ 933.750602][T15200] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 933.757872][T15200] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 934.087612][T15222] xt_CT: No such helper "snmp_trap" [ 935.000705][ T23] audit: type=1400 audit(1747906306.216:1482): avc: denied { write } for pid=15232 comm="syz.1.3990" path="socket:[110941]" dev="sockfs" ino=110941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 936.018583][T15249] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 936.027655][T15249] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 936.036692][T15249] Quota error (device loop2): write_blk: dquota write failed [ 936.044935][T15249] Quota error (device loop2): qtree_write_dquot: Error -27 occurred while creating quota [ 936.059267][T15249] EXT4-fs (loop2): 1 orphan inode deleted [ 936.065055][T15249] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 936.074230][T15249] ext4 filesystem being mounted at /184/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 936.634802][T15270] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4003'. [ 936.691321][T15274] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 937.025898][T15286] device wg2 left promiscuous mode [ 937.505895][T15274] attempt to access beyond end of device [ 937.505895][T15274] loop3: rw=2049, want=137, limit=128 [ 937.517340][T15274] Buffer I/O error on dev loop3, logical block 136, lost async page write [ 937.526447][T15274] attempt to access beyond end of device [ 937.526447][T15274] loop3: rw=2049, want=147, limit=128 [ 937.596210][ T9304] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 937.769887][T15299] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 937.929808][T15308] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4014'. [ 938.192124][T15315] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 938.201355][T15315] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 938.210344][T15315] Quota error (device loop1): write_blk: dquota write failed [ 938.218219][T15315] Quota error (device loop1): qtree_write_dquot: Error -27 occurred while creating quota [ 938.230731][T15315] EXT4-fs (loop1): 1 orphan inode deleted [ 938.237016][T15315] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 938.246240][T15315] ext4 filesystem being mounted at /160/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 939.062307][T15326] EXT4-fs (loop2): Mount option "noload" incompatible with ext2 [ 939.290446][T15332] FAT-fs (loop1): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 939.788129][T15345] attempt to access beyond end of device [ 939.788129][T15345] loop1: rw=2049, want=137, limit=128 [ 939.800024][T15329] incfs_lookup_dentry err:-103 [ 939.815850][T15329] incfs: Can't find or create .incomplete dir in ./file0 [ 939.823731][T15345] Buffer I/O error on dev loop1, logical block 136, lost async page write [ 939.833187][T15329] incfs: mount failed -103 [ 939.865516][T15345] attempt to access beyond end of device [ 939.865516][T15345] loop1: rw=2049, want=147, limit=128 [ 940.298586][T15065] FAT-fs (loop1): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 941.952809][ T23] audit: type=1400 audit(1747906313.166:1483): avc: denied { unmount } for pid=12249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 942.383835][T15369] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 942.394003][T15369] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 942.405613][T15369] Quota error (device loop2): write_blk: dquota write failed [ 942.414114][T15369] Quota error (device loop2): qtree_write_dquot: Error -27 occurred while creating quota [ 942.430365][T15369] EXT4-fs (loop2): 1 orphan inode deleted [ 942.436728][T15369] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 942.446994][T15369] ext4 filesystem being mounted at /191/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 942.601186][T15382] EXT4-fs (loop3): Mount option "noload" incompatible with ext2 [ 944.538753][T15404] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 945.374029][T15388] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 945.382309][T15388] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 945.486133][T15395] F2FS-fs (loop3): invalid crc value [ 945.506643][T15388] F2FS-fs (loop1): Found nat_bits in checkpoint [ 945.544529][T15395] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 945.559022][T15395] F2FS-fs (loop3): Start checkpoint disabled! [ 945.575127][T15395] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 945.643951][T15388] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 945.654066][T15388] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 945.666670][ T2971] attempt to access beyond end of device [ 945.666670][ T2971] loop3: rw=2049, want=45104, limit=40427 [ 945.738304][T15429] syz.0.4047[15429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 945.738530][T15429] syz.0.4047[15429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 946.108206][T15431] FAT-fs (loop6): Directory bread(block 64) failed [ 946.147837][T15431] FAT-fs (loop6): Directory bread(block 65) failed [ 946.157644][T15431] FAT-fs (loop6): Directory bread(block 66) failed [ 946.165658][T15431] FAT-fs (loop6): Directory bread(block 67) failed [ 946.207224][T15431] FAT-fs (loop6): Directory bread(block 68) failed [ 946.239577][T15431] FAT-fs (loop6): Directory bread(block 69) failed [ 946.389731][T15431] FAT-fs (loop6): Directory bread(block 70) failed [ 946.502530][T15431] FAT-fs (loop6): Directory bread(block 71) failed [ 946.518910][T15431] FAT-fs (loop6): Directory bread(block 72) failed [ 946.526476][T15431] FAT-fs (loop6): Directory bread(block 73) failed [ 948.350798][T15438] EXT4-fs (loop2): Mount option "noload" incompatible with ext2 [ 948.634709][T15440] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 948.644781][T15440] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 948.653616][T15440] Quota error (device loop3): write_blk: dquota write failed [ 948.661755][T15440] Quota error (device loop3): qtree_write_dquot: Error -27 occurred while creating quota [ 948.673177][T15440] EXT4-fs (loop3): 1 orphan inode deleted [ 948.678938][T15440] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 948.688319][T15440] ext4 filesystem being mounted at /208/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 949.032338][T15461] syz.0.4054[15461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 949.032429][T15461] syz.0.4054[15461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 949.160307][T15460] overlayfs: filesystem on './file1' not supported [ 949.199290][T15461] EXT4-fs (loop0): Ignoring removed nobh option [ 949.240294][T15461] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,grpjquota=,dioread_nolock,,errors=continue [ 949.307395][T15467] syz.6.4057[15467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 949.307593][T15467] syz.6.4057[15467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 950.217266][T15469] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4056'. [ 950.250997][T15469] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4056'. [ 950.360854][ T23] audit: type=1400 audit(1747906321.576:1484): avc: denied { unmount } for pid=7920 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 950.597304][T15474] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 950.606785][T15474] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 950.615350][T15474] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 950.625000][T15474] EXT4-fs error (device loop3) in ext4_orphan_del:3257: error 27 [ 950.633928][T15474] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 950.642744][T15474] EXT4-fs error (device loop3) in ext4_orphan_cleanup:2816: error 27 [ 950.651951][T15474] EXT4-fs (loop3): 1 truncate cleaned up [ 950.657654][T15474] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 950.679625][T15474] ext4 filesystem being mounted at /210/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 950.708404][T15485] FAT-fs (loop2): Directory bread(block 64) failed [ 950.715759][T15485] FAT-fs (loop2): Directory bread(block 65) failed [ 950.725136][T15490] syz.1.4062[15490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 950.725374][T15490] syz.1.4062[15490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 950.763221][T15485] FAT-fs (loop2): Directory bread(block 66) failed [ 950.782283][T15485] FAT-fs (loop2): Directory bread(block 67) failed [ 950.793521][T15485] FAT-fs (loop2): Directory bread(block 68) failed [ 950.801602][T15485] FAT-fs (loop2): Directory bread(block 69) failed [ 950.831571][T15473] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 950.868962][T15485] FAT-fs (loop2): Directory bread(block 70) failed [ 950.880185][T15485] FAT-fs (loop2): Directory bread(block 71) failed [ 950.889357][T15473] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 950.909416][T15485] FAT-fs (loop2): Directory bread(block 72) failed [ 950.921677][T15485] FAT-fs (loop2): Directory bread(block 73) failed [ 950.996653][T15473] F2FS-fs (loop0): invalid crc value [ 951.282972][T15473] F2FS-fs (loop0): Found nat_bits in checkpoint [ 951.515739][T15473] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 951.524707][T15473] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 951.583124][ T23] audit: type=1400 audit(1747906322.796:1485): avc: denied { read } for pid=15499 comm="syz.2.4066" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=112892 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 952.019183][T15504] xt_CT: No such helper "snmp_trap" [ 952.790035][T15511] EXT4-fs (loop3): Mount option "noload" incompatible with ext2 [ 953.211490][T15519] syz.2.4070[15519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 953.211612][T15519] syz.2.4070[15519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 953.436688][T15519] EXT4-fs (loop2): Ignoring removed nobh option [ 953.950335][T15519] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,grpjquota=,dioread_nolock,,errors=continue [ 954.919119][T12498] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 954.968195][T15545] FAT-fs (loop1): Directory bread(block 64) failed [ 954.981611][T15545] FAT-fs (loop1): Directory bread(block 65) failed [ 954.996987][T15545] FAT-fs (loop1): Directory bread(block 66) failed [ 955.029179][T15545] FAT-fs (loop1): Directory bread(block 67) failed [ 955.045669][T15545] FAT-fs (loop1): Directory bread(block 68) failed [ 955.059147][T15545] FAT-fs (loop1): Directory bread(block 69) failed [ 955.122244][T15545] FAT-fs (loop1): Directory bread(block 70) failed [ 955.169164][T12498] usb 7-1: Using ep0 maxpacket: 16 [ 955.174658][T15545] FAT-fs (loop1): Directory bread(block 71) failed [ 955.191272][T15545] FAT-fs (loop1): Directory bread(block 72) failed [ 955.218868][T15545] FAT-fs (loop1): Directory bread(block 73) failed [ 955.311151][T15551] syz.2.4077[15551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 955.311365][T15551] syz.2.4077[15551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 956.220005][T12498] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.308139][T12498] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.319246][T12498] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 956.332967][T12498] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 956.342518][T12498] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.351919][T12498] usb 7-1: config 0 descriptor?? [ 956.641433][T15561] EXT4-fs (loop2): Test dummy encryption mode enabled [ 956.729215][ T1018] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 956.752672][T15561] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 957.284841][ T1018] usb 4-1: Using ep0 maxpacket: 16 [ 957.384153][T15565] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 957.489589][ T1018] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.523285][ T1018] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 957.557617][ T1018] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 957.588043][ T1018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.639650][ T1018] usb 4-1: config 0 descriptor?? [ 958.416488][T12498] usbhid 7-1:0.0: can't add hid device: -71 [ 958.424911][T12498] usbhid: probe of 7-1:0.0 failed with error -71 [ 958.443321][T12498] usb 7-1: USB disconnect, device number 20 [ 958.836559][T15588] FAT-fs (loop3): Directory bread(block 64) failed [ 958.843681][T15588] FAT-fs (loop3): Directory bread(block 65) failed [ 958.850964][T15588] FAT-fs (loop3): Directory bread(block 66) failed [ 958.857881][T15588] FAT-fs (loop3): Directory bread(block 67) failed [ 958.859172][ T1018] usbhid 4-1:0.0: can't add hid device: -71 [ 958.865393][T15588] FAT-fs (loop3): Directory bread(block 68) failed [ 958.877699][ T1018] usbhid: probe of 4-1:0.0 failed with error -71 [ 958.878533][T15588] FAT-fs (loop3): Directory bread(block 69) failed [ 958.895416][ T1018] usb 4-1: USB disconnect, device number 28 [ 958.906468][T15588] FAT-fs (loop3): Directory bread(block 70) failed [ 958.913401][T15588] FAT-fs (loop3): Directory bread(block 71) failed [ 958.920212][T15588] FAT-fs (loop3): Directory bread(block 72) failed [ 958.927286][T15588] FAT-fs (loop3): Directory bread(block 73) failed [ 959.016617][ T23] audit: type=1326 audit(1747906330.226:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15592 comm="syz.3.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcaefb969 code=0x7ffc0000 [ 959.042017][ T23] audit: type=1326 audit(1747906330.266:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15592 comm="syz.3.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcaefb969 code=0x7ffc0000 [ 959.067846][ T23] audit: type=1326 audit(1747906330.286:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15592 comm="syz.3.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbcaefb969 code=0x7ffc0000 [ 959.093953][ T23] audit: type=1326 audit(1747906330.286:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15592 comm="syz.3.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcaefb969 code=0x7ffc0000 [ 959.127855][ T23] audit: type=1326 audit(1747906330.286:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15592 comm="syz.3.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcaefb969 code=0x7ffc0000 [ 959.153578][ T23] audit: type=1326 audit(1747906330.286:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15592 comm="syz.3.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbcaefb969 code=0x7ffc0000 [ 959.192712][ T23] audit: type=1326 audit(1747906330.286:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15592 comm="syz.3.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcaefb969 code=0x7ffc0000 [ 959.286514][ T23] audit: type=1326 audit(1747906330.286:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15592 comm="syz.3.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcaefb969 code=0x7ffc0000 [ 959.342537][ T23] audit: type=1326 audit(1747906330.286:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15592 comm="syz.3.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbcaefb969 code=0x7ffc0000 [ 960.108906][ T23] audit: type=1326 audit(1747906330.286:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15592 comm="syz.3.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcaefb969 code=0x7ffc0000 [ 962.228696][T15618] EXT4-fs (loop6): Mount option "noload" incompatible with ext2 [ 962.281874][T15623] FAT-fs (loop0): Directory bread(block 64) failed [ 962.288977][T15623] FAT-fs (loop0): Directory bread(block 65) failed [ 962.297481][T15623] FAT-fs (loop0): Directory bread(block 66) failed [ 962.306096][T15623] FAT-fs (loop0): Directory bread(block 67) failed [ 962.313875][T15623] FAT-fs (loop0): Directory bread(block 68) failed [ 962.321759][T15623] FAT-fs (loop0): Directory bread(block 69) failed [ 962.328744][T15623] FAT-fs (loop0): Directory bread(block 70) failed [ 962.463366][T15625] syz.1.4099[15625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 962.463457][T15625] syz.1.4099[15625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 962.491666][T15623] FAT-fs (loop0): Directory bread(block 71) failed [ 962.511469][T15623] FAT-fs (loop0): Directory bread(block 72) failed [ 962.518867][T15623] FAT-fs (loop0): Directory bread(block 73) failed [ 962.581904][T15625] EXT4-fs (loop1): Ignoring removed nobh option [ 962.606938][T15625] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,grpjquota=,dioread_nolock,,errors=continue [ 964.997753][T15665] bridge0: port 3(gretap0) entered disabled state [ 965.013253][T15665] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.017110][T15663] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 965.021023][T15665] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.042456][T15663] ext4 filesystem being mounted at /249/bus supports timestamps until (%ptR?) (0x7fffffff) [ 965.658518][T15674] FAT-fs (loop3): Directory bread(block 64) failed [ 965.676079][T15674] FAT-fs (loop3): Directory bread(block 65) failed [ 965.696435][T15674] FAT-fs (loop3): Directory bread(block 66) failed [ 965.721351][T15674] FAT-fs (loop3): Directory bread(block 67) failed [ 965.779118][T15674] FAT-fs (loop3): Directory bread(block 68) failed [ 965.807354][T15682] EXT4-fs (loop1): Mount option "noload" incompatible with ext2 [ 965.835232][T15674] FAT-fs (loop3): Directory bread(block 69) failed [ 965.848830][T15674] FAT-fs (loop3): Directory bread(block 70) failed [ 965.856931][T15674] FAT-fs (loop3): Directory bread(block 71) failed [ 965.864337][T15674] FAT-fs (loop3): Directory bread(block 72) failed [ 965.871540][T15674] FAT-fs (loop3): Directory bread(block 73) failed [ 966.270335][T15692] syz.2.4119[15692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 966.270390][T15692] syz.2.4119[15692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 966.333268][T15692] EXT4-fs (loop2): Ignoring removed nobh option [ 966.367255][T15692] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,grpjquota=,dioread_nolock,,errors=continue [ 966.769764][T15702] syz.1.4120[15702] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 966.769827][T15702] syz.1.4120[15702] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 966.915306][T15702] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 967.011263][T15702] xt_CT: You must specify a L4 protocol and not use inversions on it [ 967.065209][T15702] rtc_cmos 00:00: Alarms can be up to one day in the future [ 967.876224][T15710] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 967.977926][T15705] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 968.001162][T15705] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,init_itable=0x0000000000000000,errors=remount-ro,noauto_da_alloc,dioread_lock, [ 968.017205][T15705] ext4 filesystem being mounted at /224/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 968.093363][T15715] FAT-fs (loop2): Directory bread(block 64) failed [ 968.102151][T15715] FAT-fs (loop2): Directory bread(block 65) failed [ 968.108946][T15715] FAT-fs (loop2): Directory bread(block 66) failed [ 968.117855][T15715] FAT-fs (loop2): Directory bread(block 67) failed [ 968.148078][T15726] syz.0.4126[15726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 968.148296][T15726] syz.0.4126[15726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 968.261055][T15715] FAT-fs (loop2): Directory bread(block 68) failed [ 968.317315][ T466] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 968.359384][T15715] FAT-fs (loop2): Directory bread(block 69) failed [ 968.392629][T15715] FAT-fs (loop2): Directory bread(block 70) failed [ 968.421810][T15715] FAT-fs (loop2): Directory bread(block 71) failed [ 968.651584][T15730] x_tables: ip_tables: udplite match: only valid for protocol 136 [ 968.714517][T15730] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4122'. [ 968.877642][T15729] EXT4-fs error (device loop3): ext4_xattr_block_get:544: inode #15: comm syz.3.4122: corrupted xattr block 19 [ 968.890786][T15715] FAT-fs (loop2): Directory bread(block 72) failed [ 968.897689][T15715] FAT-fs (loop2): Directory bread(block 73) failed [ 969.071382][T15729] EXT4-fs (loop3): Remounting filesystem read-only [ 969.078306][T15729] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 969.087406][T15729] EXT4-fs error (device loop3): ext4_xattr_block_get:544: inode #15: comm syz.3.4122: corrupted xattr block 19 [ 969.099967][T15729] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 969.109483][T15729] EXT4-fs error (device loop3): ext4_xattr_block_list:717: inode #15: comm syz.3.4122: corrupted xattr block 19 [ 969.163923][ T466] usb 7-1: Using ep0 maxpacket: 8 [ 969.349201][ T466] usb 7-1: config 1 interface 0 has no altsetting 0 [ 969.509230][ T466] usb 7-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 969.522282][ T466] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.539110][ T466] usb 7-1: Product: syz [ 969.553065][ T466] usb 7-1: Manufacturer: syz [ 969.558232][ T466] usb 7-1: SerialNumber: syz [ 969.602278][T15751] syz.2.4135[15751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 969.602340][T15751] syz.2.4135[15751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 969.700284][T15751] EXT4-fs (loop2): Ignoring removed nobh option [ 969.722678][T15745] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 969.722718][T15751] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,grpjquota=,dioread_nolock,,errors=continue [ 969.731501][T15745] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 969.758723][T15745] F2FS-fs (loop3): invalid crc value [ 969.765957][T15745] F2FS-fs (loop3): Found nat_bits in checkpoint [ 969.789684][T15745] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 969.797231][T15745] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 970.601196][T15762] xt_CT: No such helper "snmp_trap" [ 970.926005][T15765] FAT-fs (loop0): Directory bread(block 64) failed [ 970.933454][T15765] FAT-fs (loop0): Directory bread(block 65) failed [ 970.938490][T15766] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 970.940979][T15765] FAT-fs (loop0): Directory bread(block 66) failed [ 970.955465][T15765] FAT-fs (loop0): Directory bread(block 67) failed [ 970.962647][T15765] FAT-fs (loop0): Directory bread(block 68) failed [ 970.965225][T15766] EXT4-fs (loop1): Ignoring removed bh option [ 970.969456][T15765] FAT-fs (loop0): Directory bread(block 69) failed [ 970.978150][T15766] EXT4-fs (loop1): can't mount with dioread_nolock if block size != PAGE_SIZE [ 970.993794][T15765] FAT-fs (loop0): Directory bread(block 70) failed [ 971.001052][T15765] FAT-fs (loop0): Directory bread(block 71) failed [ 971.007862][T15765] FAT-fs (loop0): Directory bread(block 72) failed [ 971.015166][T15765] FAT-fs (loop0): Directory bread(block 73) failed [ 971.052810][ T23] kauditd_printk_skb: 4 callbacks suppressed [ 971.052822][ T23] audit: type=1400 audit(1747906342.266:1500): avc: denied { setattr } for pid=15771 comm="syz.2.4140" name="file0" dev="9p" ino=7016996764471618667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 971.245859][T15775] FAT-fs (loop2): Directory bread(block 64) failed [ 971.260073][T15775] FAT-fs (loop2): Directory bread(block 65) failed [ 971.272758][T15775] FAT-fs (loop2): Directory bread(block 66) failed [ 971.286830][T15775] FAT-fs (loop2): Directory bread(block 67) failed [ 971.295662][T15775] FAT-fs (loop2): Directory bread(block 68) failed [ 971.302775][T15775] FAT-fs (loop2): Directory bread(block 69) failed [ 971.310252][T15775] FAT-fs (loop2): Directory bread(block 70) failed [ 971.317314][T15775] FAT-fs (loop2): Directory bread(block 71) failed [ 971.324491][T15775] FAT-fs (loop2): Directory bread(block 72) failed [ 971.331357][T15775] FAT-fs (loop2): Directory bread(block 73) failed [ 971.382095][T15786] bridge0: port 3(gretap0) entered disabled state [ 971.399860][T15786] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.407453][T15786] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.526416][T15791] syz.3.4144[15791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 971.526664][T15791] syz.3.4144[15791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 971.657026][T15789] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 972.739120][ T466] usbhid 7-1:1.0: can't add hid device: -71 [ 972.749168][ T466] usbhid: probe of 7-1:1.0 failed with error -71 [ 972.772874][ T466] usb 7-1: USB disconnect, device number 21 [ 973.759204][T12498] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 974.045074][T15798] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 974.054244][T15798] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 974.092429][T15798] F2FS-fs (loop6): invalid crc value [ 974.141738][T15827] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 974.178082][T15798] F2FS-fs (loop6): Found nat_bits in checkpoint [ 974.273076][T15798] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 974.281145][T15798] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 974.629098][T12498] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.755990][T15836] xt_CT: No such helper "snmp_trap" [ 975.859108][T12498] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.879122][T12498] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 975.888706][T12498] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.906750][T12498] usb 4-1: config 0 descriptor?? [ 976.130718][T15845] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 976.211587][T15850] syz.1.4161[15850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 976.211648][T15850] syz.1.4161[15850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 976.607900][T15849] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=46 [ 976.629645][T15849] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=overlay ino=114460 [ 977.279256][T12498] usbhid 4-1:0.0: can't add hid device: -71 [ 977.286080][T12498] usbhid: probe of 4-1:0.0 failed with error -71 [ 977.368167][T15864] overlayfs: './bus' not a directory [ 977.558079][ T23] audit: type=1400 audit(1747906348.576:1501): avc: denied { mounton } for pid=15856 comm="syz.1.4167" path="/194/bus" dev="tmpfs" ino=115350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 977.614148][T12498] usb 4-1: USB disconnect, device number 29 [ 977.693185][T15858] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 977.934050][T15863] EXT4-fs (loop3): 1 orphan inode deleted [ 977.940371][T15863] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 977.949914][T15863] ext4 filesystem being mounted at /231/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 978.419340][ T23] audit: type=1400 audit(2000000000.420:1502): avc: denied { create } for pid=15875 comm="syz.2.4169" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 979.689374][ T23] audit: type=1400 audit(2000000000.420:1503): avc: denied { unlink } for pid=11909 comm="syz-executor" name="file0" dev="tmpfs" ino=114572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 979.928518][T15882] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 982.665760][T15904] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 982.687317][T15915] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 982.951678][T15922] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=46 [ 982.961411][T15922] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=overlay ino=115765 [ 983.665132][ T23] audit: type=1400 audit(2000000005.570:1504): avc: denied { write } for pid=15929 comm="syz.3.4185" name="file0" dev="tmpfs" ino=115816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 983.797651][T15926] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 984.184047][ T23] audit: type=1400 audit(2000000005.570:1505): avc: denied { open } for pid=15929 comm="syz.3.4185" path="/234/file0" dev="tmpfs" ino=115816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 985.665186][T15962] netlink: 'syz.2.4193': attribute type 16 has an invalid length. [ 985.673498][T15962] netlink: 'syz.2.4193': attribute type 17 has an invalid length. [ 985.764106][T14830] IPv6: ADDRCONF(NETDEV_CHANGE): 5@ÿ: link becomes ready [ 985.777400][T14830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 985.805023][T14830] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 985.832376][T14830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 985.859682][T14830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 985.886525][T14830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 985.910733][T14830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 985.962622][T14830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 986.062187][T15970] erofs: (device loop6): mounted with opts: , root inode @ nid 36. [ 986.165190][T15976] input: syz0 as /devices/virtual/input/input12 [ 987.204502][ T23] audit: type=1400 audit(2000000009.290:1506): avc: denied { read } for pid=148 comm="acpid" name="event3" dev="devtmpfs" ino=115955 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 987.474851][T15977] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=46 [ 987.484571][T15977] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=overlay ino=116740 [ 987.504223][ T23] audit: type=1400 audit(2000000009.290:1507): avc: denied { open } for pid=148 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=115955 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 987.529226][ T23] audit: type=1400 audit(2000000009.290:1508): avc: denied { ioctl } for pid=148 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=115955 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 987.665139][T15982] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4199'. [ 987.676026][T15982] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4199'. [ 988.061760][T15985] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 988.192495][T15994] FAT-fs (loop6): Directory bread(block 64) failed [ 988.221393][T15994] FAT-fs (loop6): Directory bread(block 65) failed [ 988.240315][T15994] FAT-fs (loop6): Directory bread(block 66) failed [ 988.248409][T15994] FAT-fs (loop6): Directory bread(block 67) failed [ 988.255254][T15994] FAT-fs (loop6): Directory bread(block 68) failed [ 988.262081][T15994] FAT-fs (loop6): Directory bread(block 69) failed [ 988.269437][T15994] FAT-fs (loop6): Directory bread(block 70) failed [ 988.276461][T15994] FAT-fs (loop6): Directory bread(block 71) failed [ 988.283358][T15994] FAT-fs (loop6): Directory bread(block 72) failed [ 988.290395][T15994] FAT-fs (loop6): Directory bread(block 73) failed [ 988.679108][ T23] audit: type=1400 audit(2000000010.760:1509): avc: denied { write } for pid=16002 comm="syz.2.4204" name="rtc0" dev="devtmpfs" ino=10824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 988.853761][T16006] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 988.862700][T16006] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 988.871283][T16006] Quota error (device loop0): write_blk: dquota write failed [ 988.879230][T16006] Quota error (device loop0): qtree_write_dquot: Error -27 occurred while creating quota [ 988.891029][T16006] EXT4-fs (loop0): 1 orphan inode deleted [ 988.897097][T16006] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 988.906415][T16006] ext4 filesystem being mounted at /265/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 989.141585][T16015] syz.6.4207[16015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 989.141648][T16015] syz.6.4207[16015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 989.233278][ T23] audit: type=1400 audit(2000000011.320:1510): avc: denied { write } for pid=16020 comm="syz.6.4209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 989.679754][T12498] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 990.486509][T16029] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 990.539104][T12498] usb 7-1: Using ep0 maxpacket: 16 [ 991.134566][T16034] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=46 [ 991.144968][T16034] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=overlay ino=116153 [ 991.249360][T12498] usb 7-1: config 255 has too many interfaces: 240, using maximum allowed: 32 [ 991.355573][T12498] usb 7-1: config 255 has 1 interface, different from the descriptor's value: 240 [ 991.366157][T12498] usb 7-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=20.64 [ 991.375797][T12498] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.581482][T16042] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 991.719564][ T23] audit: type=1400 audit(2000000013.800:1511): avc: denied { listen } for pid=16020 comm="syz.6.4209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 991.759294][T12498] usb 7-1: USB disconnect, device number 22 [ 992.270184][T16052] syz.2.4219[16052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 992.270224][T16052] syz.2.4219[16052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 993.713302][T16063] EXT4-fs (loop2): 1 orphan inode deleted [ 993.731297][T16063] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 993.740783][T16063] ext4 filesystem being mounted at /239/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 993.761690][ T23] audit: type=1400 audit(2000000015.850:1512): avc: denied { bind } for pid=16071 comm="syz.1.4224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 993.845241][T14830] attempt to access beyond end of device [ 993.845241][T14830] loop0: rw=1, want=1041, limit=128 [ 993.875102][T16078] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 994.425785][T16087] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 994.435889][T16087] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=overlay ino=116368 [ 996.044352][T16104] syz.0.4231[16104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 996.044414][T16104] syz.0.4231[16104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 996.920116][ T23] audit: type=1326 audit(2000000019.000:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16118 comm="syz.2.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaecb91969 code=0x7ffc0000 [ 996.957420][ T23] audit: type=1326 audit(2000000019.000:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16118 comm="syz.2.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbaecb91969 code=0x7ffc0000 [ 996.988732][T16114] EXT4-fs (loop6): Test dummy encryption mode enabled [ 996.996490][T16114] EXT4-fs (loop6): Unsupported blocksize for fs encryption [ 997.009595][ T23] audit: type=1326 audit(2000000019.000:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16118 comm="syz.2.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaecb91969 code=0x7ffc0000 [ 997.020833][T16112] FAT-fs (loop3): Directory bread(block 64) failed [ 997.035149][ T23] audit: type=1326 audit(2000000019.000:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16118 comm="syz.2.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbaecb91969 code=0x7ffc0000 [ 997.066899][ T23] audit: type=1326 audit(2000000019.000:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16118 comm="syz.2.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaecb91969 code=0x7ffc0000 [ 997.092106][ T23] audit: type=1326 audit(2000000019.000:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16118 comm="syz.2.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbaecb902d0 code=0x7ffc0000 [ 997.156046][T16112] FAT-fs (loop3): Directory bread(block 65) failed [ 997.169973][ T23] audit: type=1326 audit(2000000019.000:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16118 comm="syz.2.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbaecb902d0 code=0x7ffc0000 [ 997.205284][T16112] FAT-fs (loop3): Directory bread(block 66) failed [ 997.238648][T16112] FAT-fs (loop3): Directory bread(block 67) failed [ 997.269746][T16112] FAT-fs (loop3): Directory bread(block 68) failed [ 997.277505][T16112] FAT-fs (loop3): Directory bread(block 69) failed [ 997.285031][T16112] FAT-fs (loop3): Directory bread(block 70) failed [ 997.292464][T16112] FAT-fs (loop3): Directory bread(block 71) failed [ 997.300463][T16112] FAT-fs (loop3): Directory bread(block 72) failed [ 997.307487][T16112] FAT-fs (loop3): Directory bread(block 73) failed [ 997.311182][ T23] audit: type=1326 audit(2000000019.000:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16118 comm="syz.2.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaecb91969 code=0x7ffc0000 [ 997.376742][ T23] audit: type=1326 audit(2000000019.000:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16118 comm="syz.2.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fbaecb91969 code=0x7ffc0000 [ 997.574706][T16129] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 997.679160][T16129] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 997.693859][T16129] F2FS-fs (loop1): invalid crc value [ 997.720672][T16129] F2FS-fs (loop1): Found nat_bits in checkpoint [ 998.145285][T16129] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 998.152740][T16129] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 998.371607][T16152] xt_CT: No such helper "snmp_trap" [ 999.029976][T16158] FAT-fs (loop6): Unrecognized mount option "" or missing value [ 999.401072][T16165] syz.2.4248[16165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 999.401202][T16165] syz.2.4248[16165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1000.672388][T16191] binder_alloc: 16190: binder_alloc_buf, no vma [ 1002.327254][T16198] syz.3.4256[16198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1002.327384][T16198] syz.3.4256[16198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1002.409528][ T23] kauditd_printk_skb: 138 callbacks suppressed [ 1002.409541][ T23] audit: type=1326 audit(2000000024.410:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.1.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2c77f969 code=0x7ffc0000 [ 1002.579944][ T23] audit: type=1326 audit(2000000024.410:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.1.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2c77f969 code=0x7ffc0000 [ 1002.604961][ T23] audit: type=1326 audit(2000000024.410:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.1.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fce2c77f969 code=0x7ffc0000 [ 1002.633118][ T23] audit: type=1326 audit(2000000024.410:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.1.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2c77f969 code=0x7ffc0000 [ 1002.644666][T16198] EXT4-fs (loop3): Ignoring removed nobh option [ 1002.660854][ T23] audit: type=1326 audit(2000000024.410:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.1.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2c77f969 code=0x7ffc0000 [ 1002.696623][T16198] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,grpjquota=,dioread_nolock,,errors=continue [ 1002.713383][ T23] audit: type=1326 audit(2000000024.410:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.1.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fce2c77f969 code=0x7ffc0000 [ 1002.738170][ T23] audit: type=1326 audit(2000000024.410:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.1.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2c77f969 code=0x7ffc0000 [ 1002.805851][ T23] audit: type=1326 audit(2000000024.410:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.1.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2c77f969 code=0x7ffc0000 [ 1002.850341][T16207] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1002.868959][T16207] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 1004.074143][T16226] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 1004.469443][T16239] syz.6.4267[16239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1004.469507][T16239] syz.6.4267[16239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1005.461543][T16252] bridge0: port 3(gretap0) entered disabled state [ 1005.745405][T16252] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.753778][T16252] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.020702][T16253] EXT4-fs (loop6): 1 orphan inode deleted [ 1006.026558][T16253] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 1006.036026][T16253] ext4 filesystem being mounted at /412/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 1006.640634][T16261] syz.0.4274[16261] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1006.640727][T16261] syz.0.4274[16261] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1006.965861][T16261] EXT4-fs (loop0): Ignoring removed nobh option [ 1007.029624][T16261] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,grpjquota=,dioread_nolock,,errors=continue [ 1008.202942][T16270] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1008.210193][T16270] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1008.220638][T16270] EXT4-fs (loop6): Unsupported blocksize for fs encryption [ 1009.195910][T16287] EXT4-fs (loop6): 1 orphan inode deleted [ 1009.202645][T16287] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 1009.212583][T16287] ext4 filesystem being mounted at /414/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 1009.326579][T16293] EXT4-fs (loop0): 1 orphan inode deleted [ 1009.339368][T16293] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1009.348732][T16293] ext4 filesystem being mounted at /281/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 1010.605637][T16321] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 1010.657899][T16321] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,init_itable=0x0000000000000000,errors=remount-ro,noauto_da_alloc,dioread_lock, [ 1010.692975][T16321] ext4 filesystem being mounted at /415/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 1011.503474][T16335] x_tables: ip_tables: udplite match: only valid for protocol 136 [ 1011.522550][T16335] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4286'. [ 1012.755481][T16343] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 1012.770522][T16343] ext4 filesystem being mounted at /217/bus supports timestamps until (%ptR?) (0x7fffffff) [ 1013.461191][T16362] erofs: (device loop6): mounted with opts: , root inode @ nid 36. [ 1013.779693][ T466] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1013.864762][T16370] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 1014.875781][T16374] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=46 [ 1014.885531][T16374] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=overlay ino=118164 [ 1015.031176][ T466] usb 2-1: Using ep0 maxpacket: 8 [ 1015.928525][T16382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.936135][T16382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.205395][T16391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4302'. [ 1016.247508][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4302'. [ 1016.313814][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4302'. [ 1016.489204][ T466] usb 2-1: unable to read config index 0 descriptor/all [ 1016.498528][ T466] usb 2-1: can't read configurations, error -71 [ 1017.831163][T16401] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 1017.846047][T16401] ext4 filesystem being mounted at /220/bus supports timestamps until (%ptR?) (0x7fffffff) [ 1017.898300][T16387] F2FS-fs (loop6): invalid crc value [ 1017.905898][T16387] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1017.931806][T16387] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 1017.939443][T16387] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 1017.947204][T16387] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1018.853250][T16424] netlink: 'syz.6.4309': attribute type 4 has an invalid length. [ 1018.903482][T16426] erofs: (device loop6): mounted with opts: , root inode @ nid 36. [ 1019.072966][T16429] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 1019.568733][T16434] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 1019.578732][T16434] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=overlay ino=118450 [ 1019.865259][T16440] syz.3.4314[16440] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1019.865511][T16440] syz.3.4314[16440] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1020.402224][T16440] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1020.421125][T16440] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1020.437141][T16440] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 1021.500528][T16445] EXT4-fs (loop1): Mount option "noload" incompatible with ext2 [ 1022.989493][T16456] FAT-fs (loop6): Directory bread(block 64) failed [ 1023.008788][T16456] FAT-fs (loop6): Directory bread(block 65) failed [ 1023.039551][T16456] FAT-fs (loop6): Directory bread(block 66) failed [ 1023.058755][T16456] FAT-fs (loop6): Directory bread(block 67) failed [ 1023.072871][T16456] FAT-fs (loop6): Directory bread(block 68) failed [ 1023.088266][T16456] FAT-fs (loop6): Directory bread(block 69) failed [ 1023.099135][T16456] FAT-fs (loop6): Directory bread(block 70) failed [ 1023.106865][T16456] FAT-fs (loop6): Directory bread(block 71) failed [ 1023.115365][T16456] FAT-fs (loop6): Directory bread(block 72) failed [ 1023.123345][T16456] FAT-fs (loop6): Directory bread(block 73) failed [ 1023.773989][T16477] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 1023.911334][ T23] audit: type=1400 audit(2000000046.000:1668): avc: denied { create } for pid=16487 comm="syz.3.4328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1023.927860][T16488] binder_alloc: 16487: binder_alloc_buf, no vma [ 1023.934668][ T23] audit: type=1400 audit(2000000046.000:1669): avc: denied { write } for pid=16487 comm="syz.3.4328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1023.996464][T16484] EXT4-fs (loop1): 1 orphan inode deleted [ 1024.002936][T16484] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1024.012793][T16484] ext4 filesystem being mounted at /225/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 1025.986905][T16510] kernel profiling enabled (shift: 0) [ 1026.013397][T16518] syz.1.4331[16518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1026.013435][T16518] syz.1.4331[16518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1026.067720][T16513] FAT-fs (loop3): Directory bread(block 64) failed [ 1026.086766][T16513] FAT-fs (loop3): Directory bread(block 65) failed [ 1026.094076][T16513] FAT-fs (loop3): Directory bread(block 66) failed [ 1026.101862][T16513] FAT-fs (loop3): Directory bread(block 67) failed [ 1026.108651][T16513] FAT-fs (loop3): Directory bread(block 68) failed [ 1026.116535][T16513] FAT-fs (loop3): Directory bread(block 69) failed [ 1026.123752][T16513] FAT-fs (loop3): Directory bread(block 70) failed [ 1026.130931][T16513] FAT-fs (loop3): Directory bread(block 71) failed [ 1026.137705][T16513] FAT-fs (loop3): Directory bread(block 72) failed [ 1026.144779][T16513] FAT-fs (loop3): Directory bread(block 73) failed [ 1027.000161][T16527] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 1027.980271][T16544] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 1027.988114][T16544] EXT4-fs (loop6): Mount option "commit=0x0000000000000005" incompatible with ext2 [ 1027.998569][T16536] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000] [ 1028.008941][T16536] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #3: block 2: comm syz.3.4342: lblock 2 mapped to illegal pblock 2 (length 1) [ 1028.023233][T16536] EXT4-fs (loop3): Remounting filesystem read-only [ 1028.030230][T16536] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 1028.038717][T16536] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #3: block 48: comm syz.3.4342: lblock 0 mapped to illegal pblock 48 (length 1) [ 1028.054483][T16536] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 1028.064502][T16536] EXT4-fs (loop3): 1 orphan inode deleted [ 1028.070952][T16536] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,noblock_validity,grpjquota=,init_itable=0x0000000000000006,debug,errors=remount-ro, [ 1028.089319][T16541] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 1028.101242][T16536] EXT4-fs error (device loop3): __ext4_get_inode_loc:4710: comm syz.3.4342: Invalid inode table block 1 in block_group 0 [ 1028.115426][T16536] EXT4-fs (loop3): Remounting filesystem read-only [ 1028.123754][T16536] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6102: Corrupt filesystem [ 1028.202457][ T23] audit: type=1400 audit(2000000050.290:1670): avc: denied { mount } for pid=16550 comm="syz.0.4346" name="/" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1028.243891][ T23] audit: type=1400 audit(2000000050.320:1671): avc: denied { mounton } for pid=16550 comm="syz.0.4346" path="/292/file0" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1028.606604][T16562] syz.2.4349[16562] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1028.606650][T16562] syz.2.4349[16562] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1028.679143][T16563] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1029.083697][ T23] audit: type=1400 audit(2000000051.170:1672): avc: denied { unmount } for pid=10791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1030.326552][T16595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4356'. [ 1031.062099][T16606] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 1031.083971][T16598] FAT-fs (loop3): Directory bread(block 64) failed [ 1031.107048][T16598] FAT-fs (loop3): Directory bread(block 65) failed [ 1031.114373][T16598] FAT-fs (loop3): Directory bread(block 66) failed [ 1031.121515][T16598] FAT-fs (loop3): Directory bread(block 67) failed [ 1031.128769][T16598] FAT-fs (loop3): Directory bread(block 68) failed [ 1031.135949][T16598] FAT-fs (loop3): Directory bread(block 69) failed [ 1031.143380][T16598] FAT-fs (loop3): Directory bread(block 70) failed [ 1031.266236][T16598] FAT-fs (loop3): Directory bread(block 71) failed [ 1031.276891][T16598] FAT-fs (loop3): Directory bread(block 72) failed [ 1031.285023][T16598] FAT-fs (loop3): Directory bread(block 73) failed [ 1033.720186][T15065] attempt to access beyond end of device [ 1033.720186][T15065] loop1: rw=1, want=1041, limit=128 [ 1034.262770][T16621] EXT4-fs (loop6): 1 orphan inode deleted [ 1034.268935][T16621] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 1034.284462][T16621] ext4 filesystem being mounted at /431/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 1034.830821][T16638] device batadv_slave_0 entered promiscuous mode [ 1034.838310][T16638] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1036.137248][T16662] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16662 comm=syz.6.4374 [ 1037.357121][T16674] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 1037.578552][T16683] syz.2.4381[16683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1037.578890][T16683] syz.2.4381[16683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1038.646960][T16683] EXT4-fs (loop2): Ignoring removed nobh option [ 1039.550101][T16683] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,grpjquota=,dioread_nolock,,errors=continue [ 1040.324162][T16694] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1040.333903][T16694] ext4 filesystem being mounted at /299/bus supports timestamps until (%ptR?) (0x7fffffff) [ 1040.365522][T16707] FAT-fs (loop3): Directory bread(block 64) failed [ 1040.372539][T16707] FAT-fs (loop3): Directory bread(block 65) failed [ 1040.379789][T16707] FAT-fs (loop3): Directory bread(block 66) failed [ 1040.394891][T16707] FAT-fs (loop3): Directory bread(block 67) failed [ 1040.402221][T16707] FAT-fs (loop3): Directory bread(block 68) failed [ 1040.459965][T16707] FAT-fs (loop3): Directory bread(block 69) failed [ 1040.466885][T16707] FAT-fs (loop3): Directory bread(block 70) failed [ 1040.473831][T16707] FAT-fs (loop3): Directory bread(block 71) failed [ 1040.481231][T16707] FAT-fs (loop3): Directory bread(block 72) failed [ 1040.487825][T16707] FAT-fs (loop3): Directory bread(block 73) failed [ 1041.462894][T16720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4388'. [ 1041.472313][ T23] audit: type=1400 audit(2000000063.540:1673): avc: denied { create } for pid=16712 comm="syz.2.4388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1041.561772][T16717] FAT-fs (loop1): Directory bread(block 64) failed [ 1041.569165][T16717] FAT-fs (loop1): Directory bread(block 65) failed [ 1041.576095][T16717] FAT-fs (loop1): Directory bread(block 66) failed [ 1041.584981][T16717] FAT-fs (loop1): Directory bread(block 67) failed [ 1041.592057][T16717] FAT-fs (loop1): Directory bread(block 68) failed [ 1041.599259][T16717] FAT-fs (loop1): Directory bread(block 69) failed [ 1041.606441][T16717] FAT-fs (loop1): Directory bread(block 70) failed [ 1041.613216][T16717] FAT-fs (loop1): Directory bread(block 71) failed [ 1041.620166][T16717] FAT-fs (loop1): Directory bread(block 72) failed [ 1041.627144][T16717] FAT-fs (loop1): Directory bread(block 73) failed [ 1041.811055][T16725] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1041.837541][T16725] EXT4-fs (loop3): Unrecognized mount option "dax=always" or missing value [ 1042.092345][T16725] xt_TCPMSS: Only works on TCP SYN packets [ 1042.646371][T16738] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 1043.900919][T16763] input: syz0 as /devices/virtual/input/input15 [ 1043.907703][T16763] input: failed to attach handler leds to device input15, error: -6 [ 1044.031658][T16768] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 1044.089077][ T125] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1044.449115][ T125] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.459596][ T125] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1044.473214][ T125] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1044.523691][ T125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.577415][ T125] usb 4-1: config 0 descriptor?? [ 1044.783389][T16781] EXT4-fs (loop0): 1 orphan inode deleted [ 1044.789371][T16781] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1044.798436][T16781] ext4 filesystem being mounted at /303/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 1044.930215][T16784] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1044.938933][T16784] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1044.954364][T16784] F2FS-fs (loop6): invalid crc value [ 1045.018742][T16784] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1045.064124][T16784] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1045.071627][T16784] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1045.716619][T16800] xt_CT: No such helper "snmp_trap" [ 1046.645574][T16820] input: syz0 as /devices/virtual/input/input16 [ 1046.652364][T16820] input: failed to attach handler leds to device input16, error: -6 [ 1047.164439][T16827] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1047.176251][T16827] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 1047.289189][ T125] usb 4-1: string descriptor 0 read error: -71 [ 1047.303819][ T125] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1048.011882][ T125] usb 4-1: USB disconnect, device number 30 [ 1049.179910][T16843] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 1049.191505][T16843] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 1049.202328][T16843] Quota error (device loop3): write_blk: dquota write failed [ 1049.210337][T16843] Quota error (device loop3): qtree_write_dquot: Error -27 occurred while creating quota [ 1049.225127][T16843] EXT4-fs (loop3): 1 orphan inode deleted [ 1049.231246][T16843] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1049.240803][T16843] ext4 filesystem being mounted at /281/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 1049.717723][T16855] xt_CT: No such helper "pptp" [ 1050.068513][ T23] audit: type=1400 audit(2000000072.150:1674): avc: denied { read write } for pid=16858 comm="syz.1.4427" name="uhid" dev="devtmpfs" ino=10827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1050.113996][ T23] audit: type=1400 audit(2000000072.190:1675): avc: denied { open } for pid=16858 comm="syz.1.4427" path="/dev/uhid" dev="devtmpfs" ino=10827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1050.399084][T16851] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1050.407855][T16851] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1050.418590][T16851] F2FS-fs (loop2): invalid crc value [ 1050.425991][T16851] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1050.465761][T16851] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1050.473312][T16851] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1050.736968][T16878] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 1050.839176][T16869] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 1051.025073][T16869] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,init_itable=0x0000000000000000,errors=remount-ro,noauto_da_alloc,dioread_lock, [ 1051.041308][T16869] ext4 filesystem being mounted at /447/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 1051.730473][T16888] xt_CT: No such helper "snmp_trap" [ 1051.745218][T16890] x_tables: ip_tables: udplite match: only valid for protocol 136 [ 1051.757311][T16890] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4431'. [ 1051.813770][T16890] EXT4-fs error (device loop6): ext4_xattr_block_get:544: inode #15: comm syz.6.4431: corrupted xattr block 19 [ 1051.830810][T16890] EXT4-fs (loop6): Remounting filesystem read-only [ 1051.838228][T16890] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 1051.848177][T16890] EXT4-fs error (device loop6): ext4_xattr_block_get:544: inode #15: comm syz.6.4431: corrupted xattr block 19 [ 1051.974700][T16890] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 1051.984268][T16890] EXT4-fs error (device loop6): ext4_xattr_block_list:717: inode #15: comm syz.6.4431: corrupted xattr block 19 [ 1052.711218][T16906] erofs: (device loop6): mounted with opts: , root inode @ nid 36. [ 1052.893887][T16912] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=46 [ 1052.904965][T16912] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=overlay ino=121814 [ 1053.117379][ T23] audit: type=1326 audit(2000000075.200:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16913 comm="syz.1.4440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2c77f969 code=0x7ffc0000 [ 1053.142152][ T23] audit: type=1326 audit(2000000075.200:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16913 comm="syz.1.4440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2c77f969 code=0x7ffc0000 [ 1053.167446][ T23] audit: type=1326 audit(2000000075.240:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16913 comm="syz.1.4440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce2c77f969 code=0x7ffc0000 [ 1053.203910][ T23] audit: type=1326 audit(2000000075.260:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16913 comm="syz.1.4440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2c77f969 code=0x7ffc0000 [ 1053.229432][ T23] audit: type=1326 audit(2000000075.260:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16913 comm="syz.1.4440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2c77f969 code=0x7ffc0000 [ 1053.257173][ T23] audit: type=1326 audit(2000000075.270:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16913 comm="syz.1.4440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce2c77f969 code=0x7ffc0000 [ 1053.743364][T16926] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4445'. [ 1056.225472][ T23] kauditd_printk_skb: 18 callbacks suppressed [ 1056.225484][ T23] audit: type=1400 audit(2000000078.310:1700): avc: denied { name_bind } for pid=16964 comm="syz.6.4458" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1056.382988][T16962] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 1056.436197][T16973] device batadv_slave_0 left promiscuous mode [ 1057.219977][T16978] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=46 [ 1057.229908][T16978] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=overlay ino=123087 [ 1060.064507][T17006] device pim6reg1 entered promiscuous mode [ 1060.660920][ T23] audit: type=1400 audit(2000000082.750:1701): avc: denied { mounton } for pid=17019 comm="syz.2.4474" path="/289/file0" dev="tmpfs" ino=123209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1060.661256][T17020] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1060.697525][T17020] FAT-fs (loop5): unable to read boot sector [ 1061.287786][T17023] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 1061.404569][T17023] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 1061.467867][T17023] Quota error (device loop3): write_blk: dquota write failed [ 1061.476358][T17023] Quota error (device loop3): qtree_write_dquot: Error -27 occurred while creating quota [ 1061.564659][T17023] EXT4-fs (loop3): 1 orphan inode deleted [ 1061.570631][T17023] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1061.580476][T17023] ext4 filesystem being mounted at /291/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 1063.657754][T17034] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 1063.667543][ T23] audit: type=1326 audit(2000000085.750:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17036 comm="syz.6.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e3d6f969 code=0x7ffc0000 [ 1063.693125][ T23] audit: type=1326 audit(2000000085.750:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17036 comm="syz.6.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e3d6f969 code=0x7ffc0000 [ 1063.717236][ T23] audit: type=1326 audit(2000000085.750:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17036 comm="syz.6.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48e3d6f969 code=0x7ffc0000 [ 1063.742432][ T23] audit: type=1326 audit(2000000085.760:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17036 comm="syz.6.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e3d6f969 code=0x7ffc0000 [ 1063.806750][ T23] audit: type=1326 audit(2000000085.760:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17036 comm="syz.6.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e3d6f969 code=0x7ffc0000 [ 1063.871741][ T23] audit: type=1326 audit(2000000085.760:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17036 comm="syz.6.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48e3d6f969 code=0x7ffc0000 [ 1063.961121][T17049] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=46 [ 1063.970899][T17049] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=overlay ino=123324 [ 1064.816876][ T23] audit: type=1326 audit(2000000085.760:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17036 comm="syz.6.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e3d6f969 code=0x7ffc0000 [ 1064.841668][ T23] audit: type=1326 audit(2000000085.760:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17036 comm="syz.6.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e3d6f969 code=0x7ffc0000 [ 1066.160858][T17056] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 1066.417878][T17075] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4487'. [ 1066.572138][T17073] F2FS-fs (loop0): invalid crc value [ 1066.589834][T17073] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1066.626648][T17073] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 1066.633851][T17073] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 1066.712910][T17073] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1066.883048][T17097] erofs: (device loop6): mounted with opts: , root inode @ nid 36. [ 1067.978394][T17105] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=46 [ 1067.987845][T17105] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=overlay ino=122563 [ 1068.052572][T10791] attempt to access beyond end of device [ 1068.052572][T10791] loop0: rw=2049, want=45104, limit=40427 [ 1068.984013][ T23] kauditd_printk_skb: 6 callbacks suppressed [ 1068.984035][ T23] audit: type=1400 audit(2000000091.070:1716): avc: denied { remount } for pid=17122 comm="syz.2.4506" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1069.230338][ T23] audit: type=1400 audit(2000000091.320:1717): avc: denied { getopt } for pid=17129 comm="syz.2.4507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1069.264134][ T23] audit: type=1326 audit(2000000091.350:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.3.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcaefb969 code=0x7ffc0000 [ 1069.289168][ T23] audit: type=1326 audit(2000000091.350:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.3.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcaefb969 code=0x7ffc0000 [ 1069.315903][ T23] audit: type=1326 audit(2000000091.350:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.3.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcbcaefb969 code=0x7ffc0000 [ 1069.417472][ T23] audit: type=1326 audit(2000000091.350:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.3.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcaefb969 code=0x7ffc0000 [ 1069.560584][ T23] audit: type=1326 audit(2000000091.350:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.3.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcaefb969 code=0x7ffc0000 [ 1069.587068][ T23] audit: type=1326 audit(2000000091.350:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.3.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbcaefb969 code=0x7ffc0000 [ 1069.612080][ T23] audit: type=1326 audit(2000000091.350:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.3.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcaefb969 code=0x7ffc0000 [ 1069.641784][ T23] audit: type=1326 audit(2000000091.350:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.3.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcaefb969 code=0x7ffc0000 [ 1070.416800][T17142] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 1070.550633][T17155] syz.2.4510[17155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1070.550724][T17155] syz.2.4510[17155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1070.626105][T17156] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 1070.648546][T17156] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=overlay ino=122731 [ 1072.730354][T17168] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1072.748724][T17168] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1072.771130][T17168] F2FS-fs (loop0): invalid crc value [ 1072.806056][T17168] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1072.854614][T17168] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1072.862507][T17168] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1073.054354][T17189] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 1073.588427][ T125] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1073.811029][T17198] F2FS-fs (loop2): invalid crc value [ 1073.849447][ T125] usb 2-1: Using ep0 maxpacket: 16 [ 1073.931254][T17198] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1073.970296][T17198] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 1073.977313][T17198] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 1074.029339][ T125] usb 2-1: config 255 has too many interfaces: 240, using maximum allowed: 32 [ 1074.056397][T17183] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1074.087444][T17198] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1074.095693][T17183] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1074.363382][ T125] usb 2-1: config 255 has 1 interface, different from the descriptor's value: 240 [ 1074.796535][T17183] F2FS-fs (loop3): invalid crc value [ 1074.806594][T17183] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1074.847126][T17183] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1074.854557][T17183] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1074.886114][ T125] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=20.64 [ 1074.896147][ T125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.908458][T11909] attempt to access beyond end of device [ 1074.908458][T11909] loop2: rw=2049, want=45104, limit=40427 [ 1075.350049][ T331] usb 2-1: USB disconnect, device number 45 [ 1075.694610][T17233] syz.2.4533[17233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1075.694712][T17233] syz.2.4533[17233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1076.271227][T17233] EXT4-fs (loop2): Ignoring removed nobh option [ 1076.329349][T17233] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,grpjquota=,dioread_nolock,,errors=continue [ 1078.409688][T17254] x_tables: ip_tables: udplite match: only valid for protocol 136 [ 1078.428265][T17254] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4538'. [ 1078.782677][T17251] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 1078.800519][T15065] attempt to access beyond end of device [ 1078.800519][T15065] loop1: rw=1, want=1041, limit=128 [ 1078.868009][ T23] kauditd_printk_skb: 19 callbacks suppressed [ 1078.868022][ T23] audit: type=1326 audit(2000000100.950:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17257 comm="syz.1.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2c77f969 code=0x7ffc0000 [ 1079.314403][ T23] audit: type=1326 audit(2000000100.990:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17257 comm="syz.1.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce2c77f969 code=0x7ffc0000 [ 1079.340831][ T23] audit: type=1326 audit(2000000100.990:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17257 comm="syz.1.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2c77f969 code=0x7ffc0000 [ 1079.972554][ T23] audit: type=1326 audit(2000000100.990:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17257 comm="syz.1.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce2c77f969 code=0x7ffc0000 [ 1080.459612][ T23] audit: type=1326 audit(2000000100.990:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17257 comm="syz.1.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2c77f969 code=0x7ffc0000 [ 1080.484422][ T23] audit: type=1326 audit(2000000100.990:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17257 comm="syz.1.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce2c77f969 code=0x7ffc0000 [ 1080.528509][ T23] audit: type=1326 audit(2000000100.990:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17257 comm="syz.1.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2c77f969 code=0x7ffc0000 [ 1080.582000][ T23] audit: type=1326 audit(2000000101.010:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17257 comm="syz.1.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce2c77f969 code=0x7ffc0000 [ 1080.619356][ T23] audit: type=1326 audit(2000000101.010:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17257 comm="syz.1.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2c77f969 code=0x7ffc0000 [ 1080.645223][ T23] audit: type=1326 audit(2000000101.020:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17257 comm="syz.1.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fce2c77f969 code=0x7ffc0000 [ 1080.909088][T17287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4548'. [ 1080.918184][T17287] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4548'. [ 1081.246103][T17270] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1081.257389][T17270] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1081.268743][T17270] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1081.326721][T17300] syz.1.4551[17300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1081.326862][T17300] syz.1.4551[17300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1081.517786][T17270] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1081.589409][T17270] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1081.947956][T13082] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1081.960343][T17270] attempt to access beyond end of device [ 1081.960343][T17270] loop2: rw=2049, want=45104, limit=40427 [ 1081.976831][T17300] EXT4-fs (loop1): Ignoring removed nobh option [ 1081.999384][T17300] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,grpjquota=,dioread_nolock,,errors=continue [ 1082.000322][T17295] FAT-fs (loop6): Directory bread(block 64) failed [ 1082.039088][T17295] FAT-fs (loop6): Directory bread(block 65) failed [ 1082.045862][T17295] FAT-fs (loop6): Directory bread(block 66) failed [ 1082.056108][T17295] FAT-fs (loop6): Directory bread(block 67) failed [ 1082.069989][T17295] FAT-fs (loop6): Directory bread(block 68) failed [ 1082.079772][T17295] FAT-fs (loop6): Directory bread(block 69) failed [ 1082.087014][T17295] FAT-fs (loop6): Directory bread(block 70) failed [ 1082.094009][T17295] FAT-fs (loop6): Directory bread(block 71) failed [ 1082.100792][T17295] FAT-fs (loop6): Directory bread(block 72) failed [ 1082.108011][T17295] FAT-fs (loop6): Directory bread(block 73) failed [ 1082.239165][T13082] usb 4-1: Using ep0 maxpacket: 16 [ 1082.359247][T13082] usb 4-1: config 255 has too many interfaces: 240, using maximum allowed: 32 [ 1082.378125][T13082] usb 4-1: config 255 has 1 interface, different from the descriptor's value: 240 [ 1082.459377][T13082] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=20.64 [ 1082.503278][T13082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.858534][T13082] usb 4-1: USB disconnect, device number 31 [ 1084.050365][T17335] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1084.063628][T17335] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,init_itable,,errors=continue [ 1084.858677][T17343] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4563'. [ 1084.868608][T17343] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4563'. [ 1085.452003][T17347] overlayfs: overlapping lowerdir path [ 1085.999268][T17361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4568'. [ 1087.074863][T17372] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 1088.495956][T17382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4575'. [ 1088.505715][T17382] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4575'. [ 1088.741080][T17370] EXT4-fs (loop1): Mount option "noload" incompatible with ext2 [ 1089.228825][T17394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4576'. [ 1090.976125][T17410] wireguard: wg2: Could not create IPv6 socket [ 1090.984781][T17410] device wg2 entered promiscuous mode [ 1090.992563][T17396] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 1091.001626][T17396] ext4 filesystem being mounted at /477/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 1091.044303][T17413] FAT-fs (loop3): Directory bread(block 64) failed [ 1091.057047][T17413] FAT-fs (loop3): Directory bread(block 65) failed [ 1091.089838][T17413] FAT-fs (loop3): Directory bread(block 66) failed [ 1091.099102][T17413] FAT-fs (loop3): Directory bread(block 67) failed [ 1091.106054][T17413] FAT-fs (loop3): Directory bread(block 68) failed [ 1091.122923][T17413] FAT-fs (loop3): Directory bread(block 69) failed [ 1091.139111][T17413] FAT-fs (loop3): Directory bread(block 70) failed [ 1091.146082][T17413] FAT-fs (loop3): Directory bread(block 71) failed [ 1091.163912][T17413] FAT-fs (loop3): Directory bread(block 72) failed [ 1091.170827][T17413] FAT-fs (loop3): Directory bread(block 73) failed [ 1092.092084][T17429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4588'. [ 1092.101567][T17429] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4588'. [ 1092.146612][T17433] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 1092.187869][T17433] ext4 filesystem being mounted at /478/bus supports timestamps until (%ptR?) (0x7fffffff) [ 1093.488045][ T9011] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1094.478696][T17472] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1094.551517][T17472] EXT4-fs (loop2): Unrecognized mount option "dax=always" or missing value [ 1095.630920][T17472] xt_TCPMSS: Only works on TCP SYN packets [ 1095.720032][T17483] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4603'. [ 1095.729763][T17483] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4603'. [ 1097.270577][T17502] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1099.128459][T17517] EXT4-fs (loop3): Mount option "noload" incompatible with ext2 [ 1099.476636][T17531] fuse: Unknown parameter '0x0000000000000006' [ 1101.839559][ T23] kauditd_printk_skb: 26 callbacks suppressed [ 1101.839665][ T23] audit: type=1400 audit(2000000121.560:1781): avc: denied { mounton } for pid=17500 comm="syz.2.4610" path="/319/file1/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1102.021251][T17525] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1102.030994][T17525] ext4 filesystem being mounted at /282/bus supports timestamps until (%ptR?) (0x7fffffff) [ 1102.256633][T17532] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 1102.271326][T17532] ext4 filesystem being mounted at /480/bus supports timestamps until (%ptR?) (0x7fffffff) [ 1102.867594][T17551] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1102.895532][T17551] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1102.920773][T17551] F2FS-fs (loop1): invalid crc value [ 1102.948511][T17551] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1103.729866][T17551] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1103.742188][T17551] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1105.301695][T17585] erofs: (device loop6): mounted with opts: , root inode @ nid 36. [ 1105.448794][T17589] EXT4-fs (loop3): Mount option "noload" incompatible with ext2 [ 1107.571719][T17616] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1107.641391][T17616] ext4 filesystem being mounted at /284/bus supports timestamps until (%ptR?) (0x7fffffff) [ 1107.721180][T17631] kasan: CONFIG_KASAN_INLINE enabled [ 1107.726518][T17631] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1107.734936][T17631] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 1107.742136][T17631] CPU: 1 PID: 17631 Comm: syz.3.4641 Tainted: G W 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 1107.753517][T17631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1107.764448][T17631] RIP: 0010:bpf_skb_ancestor_cgroup_id+0x11d/0x280 [ 1107.771048][T17631] Code: 02 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 94 42 26 fe 4d 8b 36 49 8d be 1c 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 3b 01 00 00 45 8b be 1c 01 00 00 44 89 [ 1107.790829][T17631] RSP: 0018:ffff8881e406faf8 EFLAGS: 00010203 [ 1107.797362][T17631] RAX: 0000000000000023 RBX: 0000000000000000 RCX: 0000000000000002 [ 1107.805802][T17631] RDX: ffff8881e0a96e40 RSI: 0000000000000080 RDI: 000000000000011c [ 1107.813982][T17631] RBP: ffff8881e406fb18 R08: ffff8881e406fd20 R09: ffffed103b8dcd15 [ 1107.822724][T17631] R10: ffffed103b8dcd15 R11: 1ffff1103b8dcd14 R12: dffffc0000000000 [ 1107.830766][T17631] R13: ffffc90000218020 R14: 0000000000000000 R15: 0000000000000080 [ 1107.839181][T17631] FS: 00007fcbc95646c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1107.848572][T17631] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1107.855834][T17631] CR2: 00002000000006c0 CR3: 00000001dc22c000 CR4: 00000000003406a0 [ 1107.864251][T17631] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1107.872395][T17631] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1107.880855][T17631] Call Trace: [ 1107.884248][T17631] bpf_prog_a693361ad5ef896e+0x85a/0x1000 [ 1107.890171][T17631] bpf_test_run+0x1ea/0x5d0 [ 1107.894975][T17631] ? eth_type_trans+0x2c2/0x5e0 [ 1107.900024][T17631] ? bpf_ctx_init+0x1b0/0x1b0 [ 1107.905368][T17631] ? eth_get_headlen+0x1f0/0x1f0 [ 1107.910596][T17631] ? __kasan_check_write+0x14/0x20 [ 1107.915716][T17631] bpf_prog_test_run_skb+0x721/0xdc0 [ 1107.921211][T17631] ? __bpf_trace_bpf_test_finish+0x30/0x30 [ 1107.927038][T17631] bpf_prog_test_run+0x21a/0x2a0 [ 1107.931982][T17631] __se_sys_bpf+0x49a/0x570 [ 1107.936491][T17631] ? __x64_sys_bpf+0x90/0x90 [ 1107.941212][T17631] ? fpu__clear+0x3b0/0x3b0 [ 1107.946371][T17631] ? __kasan_check_read+0x11/0x20 [ 1107.951400][T17631] __x64_sys_bpf+0x7b/0x90 [ 1107.956489][T17631] do_syscall_64+0xcf/0x170 [ 1107.961099][T17631] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 1107.967123][T17631] RIP: 0033:0x7fcbcaefb969 [ 1107.971656][T17631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1107.991267][T17631] RSP: 002b:00007fcbc9564038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1108.000607][T17631] RAX: ffffffffffffffda RBX: 00007fcbcb122fa0 RCX: 00007fcbcaefb969 [ 1108.008887][T17631] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1108.016945][T17631] RBP: 00007fcbcaf7dab1 R08: 0000000000000000 R09: 0000000000000000 [ 1108.025181][T17631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1108.033758][T17631] R13: 0000000000000000 R14: 00007fcbcb122fa0 R15: 00007ffe680b2458 [ 1108.042003][T17631] Modules linked in: [ 1108.045995][T17631] ---[ end trace 46886397bce0328c ]--- [ 1108.051629][T17631] RIP: 0010:bpf_skb_ancestor_cgroup_id+0x11d/0x280 [ 1108.058183][T17631] Code: 02 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 94 42 26 fe 4d 8b 36 49 8d be 1c 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 3b 01 00 00 45 8b be 1c 01 00 00 44 89 [ 1108.078283][T17631] RSP: 0018:ffff8881e406faf8 EFLAGS: 00010203 [ 1108.084380][T17631] RAX: 0000000000000023 RBX: 0000000000000000 RCX: 0000000000000002 [ 1108.092563][T17631] RDX: ffff8881e0a96e40 RSI: 0000000000000080 RDI: 000000000000011c [ 1108.100918][T17631] RBP: ffff8881e406fb18 R08: ffff8881e406fd20 R09: ffffed103b8dcd15 [ 1108.108889][T17631] R10: ffffed103b8dcd15 R11: 1ffff1103b8dcd14 R12: dffffc0000000000 [ 1108.116985][T17631] R13: ffffc90000218020 R14: 0000000000000000 R15: 0000000000000080 [ 1108.125471][T17631] FS: 00007fcbc95646c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1108.134682][T17631] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1108.141287][T17631] CR2: 00002000000006c0 CR3: 00000001dc22c000 CR4: 00000000003406a0 [ 1108.149545][T17631] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1108.157646][T17631] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1108.165949][T17631] Kernel panic - not syncing: Fatal exception [ 1108.172456][T17631] Kernel Offset: disabled [ 1108.176776][T17631] Rebooting in 86400 seconds..