last executing test programs: 16m43.919927981s ago: executing program 3 (id=1984): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000440)={[{@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r1 = getpid() tgkill(r1, r0, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) futex(0x0, 0x5, 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x2) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9d}) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x3970b8090d64f40c}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 16m42.939596493s ago: executing program 3 (id=1996): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 16m42.921709112s ago: executing program 3 (id=1997): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r4) 16m42.904816063s ago: executing program 3 (id=1998): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000c40)='ext4\x00', &(0x7f0000000c80)='./file0\x00', 0x0, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = syz_io_uring_setup(0x2e2c, &(0x7f0000001580), &(0x7f0000001600), &(0x7f0000001640)) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0x2, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[r0]}, 0x1) 16m42.684312413s ago: executing program 3 (id=1999): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 16m42.600243653s ago: executing program 3 (id=2001): mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00', 0x0, 0x0) 16m42.557806963s ago: executing program 32 (id=2001): mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00', 0x0, 0x0) 1m35.351050593s ago: executing program 4 (id=8461): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802) r1 = dup(r0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x20, 0x3, 0x1c, 0x5, 0x0, 0x0, 0x0}) 1m35.273897293s ago: executing program 4 (id=8466): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x15, 0x0, 0x1, 0xffffffff}]}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000010101010000000000000000020000002400018014000180080001007f007ea770aa11756dd600000c00028005000100010000000c001980080001"], 0x44}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) mlockall(0x6) 1m35.170329733s ago: executing program 4 (id=8468): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x10}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) readv(r1, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000545c4dd7756e060000000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0xffffff63) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000d00)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) 1m35.038366713s ago: executing program 4 (id=8469): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b000900d3fd27dfdc224b7a020000ff09000000ffffffffffffffffffffffe7e6000000000000000002000000000000", 0x58}], 0x1) 1m34.999698923s ago: executing program 4 (id=8470): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x92) close(r2) inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x2c00) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) 1m34.941973954s ago: executing program 4 (id=8471): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 1m19.550631004s ago: executing program 33 (id=8471): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 50.163285492s ago: executing program 6 (id=8758): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x15, 0x0, 0x1, 0xffffffff}]}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) mlockall(0x1) mlockall(0x6) 49.736195182s ago: executing program 6 (id=8761): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000006000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='mm_page_free\x00', r1, 0x0, 0xe6}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r3, r3, 0x0, 0x80000000) 49.573167813s ago: executing program 6 (id=8763): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) 49.544950243s ago: executing program 6 (id=8766): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) readv(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000080000000000040000000000950000000000feffb7a9071925c35bcb249ea69737b1acdad9d9e33a664229cb39f44cefd86c4948b9ff65018faa33c171873d608ad7382f523824aef02029392dd3af6a100beb8d112712d9fb0ee16c1828f599e5964e16bded0ace4e1f5444c58bcaab77fe0af51513c6d5e8d83c805f221861fe3f13c1ad46"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xbb, &(0x7f0000000180)=""/187, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x267e, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lstat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000840)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001100010100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001300", @ANYRES32=0x0, @ANYBLOB="a2718a02899e32d8cd79ec"], 0x28}, 0x1, 0x0, 0x0, 0x200000d6}, 0x0) 46.532259309s ago: executing program 6 (id=8769): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000cc0)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x8}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r5 = io_uring_setup(0x1893, &(0x7f00000002c0)={0x0, 0x1351}) poll(0x0, 0x0, 0x8e7cc6b6) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="f8ff000000000000000000000000000000000000b0789c9737e7d644144e8a5007adcde5ceb22e4cc31ca6ff94e81d7d2089232058e92872a0e07b8579eacb447cb21d47027365d14df8cfa0f64fba0d38500e906c3a8635d11cdfa866a662e17a482bee598a2ce7b61eee093830fdbfd48253c91bc7e822b8262a27136407a98ad3e3f8f6289af55afb91760afe0e21ebbbfce60c2760ed7aece792968917549b12d0ad5f8a465c8b663c686001a5251f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000240)={0x3920e, r2, 0x4, 0x4, 0x80, 0x7}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000000)) 45.469925331s ago: executing program 6 (id=8780): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) close(r2) 32.964480695s ago: executing program 2 (id=8879): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_disconnect(0xffffffffffffffff) 32.111271637s ago: executing program 2 (id=8890): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x80001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_usb_connect$hid(0x0, 0x51, &(0x7f00000003c0)=ANY=[], 0x0) 31.594484008s ago: executing program 2 (id=8894): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000180)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0x6, 0x6, "e56eb0", 0x10, 0x21, 0xff, @private0, @empty, {[], {{0x4e24, 0x4e22, 0x4, 0x1, 0x1, 0x0, 0x0, 0x5, 0x6, "9f13b7", 0x3, "b54c9d"}}}}}}}, 0x0) 31.582540568s ago: executing program 2 (id=8895): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 31.477956639s ago: executing program 2 (id=8896): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) 31.417895818s ago: executing program 2 (id=8897): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x28, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xa}}]}, 0x28}}, 0x0) 31.376681628s ago: executing program 34 (id=8897): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x28, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xa}}]}, 0x28}}, 0x0) 30.46414158s ago: executing program 35 (id=8780): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) close(r2) 8.400243243s ago: executing program 5 (id=9060): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000cc0)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x8}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = io_uring_setup(0x1893, &(0x7f00000002c0)={0x0, 0x1351}) poll(0x0, 0x0, 0x8e7cc6b6) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="f8ff000000000000000000000000000000000000b0789c9737e7d644144e8a5007adcde5ceb22e4cc31ca6ff94e81d7d2089232058e92872a0e07b8579eacb447cb21d47027365d14df8cfa0f64fba0d38500e906c3a8635d11cdfa866a662e17a482bee598a2ce7b61eee093830fdbfd48253c91bc7e822b8262a27136407a98ad3e3f8f6289af55afb91760afe0e21ebbbfce60c2760ed7aece792968917549b12d0ad5f8a465c8b663c686001a5251f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x5}, 0x18) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000240)={0x3920e, r1, 0x4, 0x4, 0x80, 0x7}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000000)) 7.096873246s ago: executing program 0 (id=9063): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r2) r3 = inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x2c00) r4 = gettid() fcntl$setown(r2, 0x8, r4) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 7.024596246s ago: executing program 7 (id=9065): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_usb_connect$hid(0x0, 0x51, &(0x7f00000003c0)=ANY=[], 0x0) 7.012102097s ago: executing program 5 (id=9066): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) io_uring_setup(0x3eae, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$P9_RWALK(r3, &(0x7f0000000000)=ANY=[], 0x9) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f00005bd000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0f21cd0f001b66b9c50900000f323e0f2299f2e3060f013d66b8001000000f23d80f21f86635400000600f23f836660f3a0a6063f3b800008ed0f30f167005", 0x3f}], 0x1, 0xa, &(0x7f0000000180), 0x0) madvise(&(0x7f000028c000/0x1000)=nil, 0x1000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000ff0f0000070000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000004b2d7596301226c4157e791360820000e3d4211d00"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) sendfile(r6, r6, 0x0, 0x6) 6.931585087s ago: executing program 8 (id=9067): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b70300000009000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) memfd_create(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) unshare(0x62040200) 6.899179816s ago: executing program 1 (id=9068): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) fstat(r1, &(0x7f0000000480)) 6.839835767s ago: executing program 1 (id=9069): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001100)=ANY=[], 0x40}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0x2, 0x8) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x10) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r5, 0x6, 0x19, 0x0, 0x2000e881) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 6.248536678s ago: executing program 0 (id=9070): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 6.125255938s ago: executing program 7 (id=9071): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) readv(r0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB, @ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x0) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0xffffff63) sendfile(r6, r6, 0x0, 0x7a680000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000d00)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xf) 6.022970549s ago: executing program 8 (id=9072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[], 0x1, 0x17d, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='f2fs_readdir\x00', r1, 0x0, 0x5}, 0x18) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000008f", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) getpid() socket$inet(0x2, 0x2, 0xfffffffd) socket$netlink(0x10, 0x3, 0x0) read$FUSE(r0, &(0x7f0000000900)={0x2020}, 0x2020) 5.804930309s ago: executing program 1 (id=9073): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='jbd2_run_stats\x00', r1, 0x0, 0x20000000000}, 0x18) timerfd_create(0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x10000006, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x40000000000000, 0x4, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x6}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280), 0xfea7) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000100)=0x2, 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x4) 4.84295964s ago: executing program 0 (id=9074): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x21, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xf}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x64}}, 0x40080) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff22000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0xf, 0x1}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x1, 0x6, 0x7, 0x1, 0x3, 0x3, 0x1e}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0x81, 0xfa}}]}, 0x60}}, 0x4000000) r7 = socket$netlink(0x10, 0x3, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000500)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x3}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r10, 0xaea3, 0x0) ioctl$UFFDIO_UNREGISTER(r8, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ff1000/0xf000)=nil, 0xf000}) pipe2(&(0x7f0000000240), 0x800) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 4.740835541s ago: executing program 8 (id=9075): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001100)=ANY=[], 0x40}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0x2, 0x8) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x10) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r5, 0x6, 0x19, 0x0, 0x2000e881) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 4.740192231s ago: executing program 7 (id=9076): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x4, 0xfff, 0x7, 0x480, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0xd, @void, @value, @void, @value}, 0x50) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4.618496441s ago: executing program 5 (id=9077): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000cc0)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x8}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = io_uring_setup(0x1893, &(0x7f00000002c0)={0x0, 0x1351}) poll(0x0, 0x0, 0x8e7cc6b6) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="f8ff000000000000000000000000000000000000b0789c9737e7d644144e8a5007adcde5ceb22e4cc31ca6ff94e81d7d2089232058e92872a0e07b8579eacb447cb21d47027365d14df8cfa0f64fba0d38500e906c3a8635d11cdfa866a662e17a482bee598a2ce7b61eee093830fdbfd48253c91bc7e822b8262a27136407a98ad3e3f8f6289af55afb91760afe0e21ebbbfce60c2760ed7aece792968917549b12d0ad5f8a465c8b663c686001a5251f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x5}, 0x18) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000240)={0x3920e, r1, 0x4, 0x4, 0x80, 0x7}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000000)) 4.588277941s ago: executing program 1 (id=9078): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x4, 0xfff, 0x7, 0x480, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0xd, @void, @value, @void, @value}, 0x50) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4.293018972s ago: executing program 1 (id=9079): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) fstat(r1, &(0x7f0000000480)) 4.121573182s ago: executing program 0 (id=9080): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000500)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@generic={0xd, "e289badb0c772b4d02cad4c03ae4e6ce1fb46b5ff6c8637fc8e41ad5dea512d48b0fcaa89c520fd049b205d852c5ca894d55bf8946a33c1acfa4c9cb3fca837342973ea9b2385e298d82d5bf3ccedb72de6daa33d1264a9b5c6853394c121c656ed32f87f9406c8dc4440e9c1cff3413079232f2cb4f896a17d7033d749991cc7f897efcde2b4fa5d8cd99f2267e3bc6914f0907b91a936250f2c0d081de6398698dc9e8fab0551351af9563681c4b772a462f6afe20de69429ed7ddfa"}}}, &(0x7f0000000280)={0x0, 0x1, [0x708, 0xdeb, 0x6e9, 0x5b2]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000680)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) unshare(0x64000600) 4.120777482s ago: executing program 1 (id=9081): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x4, 0xfff, 0x7, 0x480, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0xd, @void, @value, @void, @value}, 0x50) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3.522944403s ago: executing program 7 (id=9082): socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$usbfs(0x0, 0x70, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0020}]}) pause() openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 3.488164433s ago: executing program 5 (id=9083): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) unshare(0x62040200) 3.360255913s ago: executing program 8 (id=9084): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000002440)={0x964, 0x1, 0x5, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [{{0x254, 0x1, {{0x3, 0x10001}, 0xb, 0x10, 0x3ba, 0x10, 0x24, 'syz0\x00', "253ccfb247fa796f4da616c23312ae13cfd685bea6d812c39c787853970301c1", "24dbc78d4468b15aad7510e3363c35b682a07bab79af8d68694cbba2e89cbefb", [{0x3, 0xdaae, {0x1, 0xc35c}}, {0x3a8c, 0xfff, {0x2, 0x4}}, {0xb68, 0x4, {0x1, 0xa}}, {0x1, 0x0, {0x3, 0x1ff}}, {0xa6d, 0x9a5, {0x3, 0x3}}, {0xa1, 0x40, {0x1, 0x7}}, {0xcc, 0x7, {0x2, 0x6}}, {0x702, 0x2, {0x2, 0x42b9}}, {0x10, 0x2, {0x3, 0x86ff}}, {0x0, 0xe, {0x3, 0x800}}, {0x2, 0x4, {0x3, 0x559f}}, {0x9, 0x9e, {0x2, 0x3}}, {0x6, 0x0, {0x2, 0x2}}, {0x80, 0xfffb, {0x0, 0x10000}}, {0x8, 0xdc, {0x3, 0x673}}, {0x1, 0xb0d, {0x0, 0x2}}, {0x8, 0x7, {0x0, 0x3}}, {0x1b, 0x2, {0x2, 0x7f}}, {0x4, 0x7, {0x2, 0x1000}}, {0x2, 0x1, {0x3, 0x7800}}, {0x5, 0x7, {0x3, 0x3}}, {0xd, 0x5, {0x1, 0xcb}}, {0x2, 0x7, {0x3, 0xf}}, {0x7, 0xfff9, {0x0, 0x7fffffff}}, {0x400, 0x400, {0x0, 0x7}}, {0x7, 0x0, {0x2, 0x9}}, {0x3, 0x2, {0x0, 0xfffffff7}}, {0x0, 0x4, {0x2, 0xf54}}, {0xffff, 0xf46, {0x2, 0x4}}, {0xfffc, 0x6, {0xc22e7202ad4bb243, 0x3}}, {0x26, 0x7, {0x1, 0x9e}}, {0x8, 0xfffd, {0x1, 0x1}}, {0x7d, 0x1, {0x1, 0x5}}, {0x94d6, 0x27ff, {0x3, 0xfffffffc}}, {0x0, 0xe2d8, {0x3, 0x100}}, {0x3, 0x5, {0x1, 0x9}}, {0x5, 0x2, {0x6, 0x102000}}, {0x7, 0x81, {0x0, 0x5}}, {0x7, 0x1, {0x38aec6fc941e59a5, 0x9}}, {0x3, 0xfffd, {0x3, 0xfffffc01}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0x6, 0x3, 0xfff, 0x4, 0x7, 'syz1\x00', "ced1cd5084cb8065a55a587ad32ee960785a311457e9c3778909bb6f4a0898ae", "1a1ae319766be694755c1683171ace9afcc5f5e7e83262de4393fdc3fe14961e", [{0x0, 0x9, {0x3, 0x2}}, {0x200, 0x4, {0x0, 0x6}}, {0x4, 0x4, {0x0, 0x2}}, {0x7, 0xadf, {0x0, 0x5}}, {0x1, 0x4, {0x1, 0x80000001}}, {0x8001, 0x6, {0x1, 0x8}}, {0xc5, 0x8, {0x2, 0x81}}, {0x5693, 0x7, {0x2, 0x1}}, {0xe15f, 0x0, {0x3, 0xb}}, {0x5, 0x2, {0x0, 0x6}}, {0x7, 0x6, {0x2, 0x9}}, {0x5, 0x6, {0x0, 0x37}}, {0xe, 0xffff, {0x2, 0x2}}, {0x5, 0x8000, {0x3, 0x6}}, {0x48, 0x101, {0x1, 0x6}}, {0x8e, 0x7, {0x0, 0xfffff14c}}, {0x98c0, 0x2, {0x2, 0x8}}, {0x4, 0x5, {0x3, 0x7}}, {0x1, 0x7, {0x0, 0x9}}, {0x1, 0x9, {0x3, 0x4}}, {0x5, 0x9, {0x3, 0x4}}, {0x6, 0xc61, {0x3, 0x8}}, {0x5, 0xff, {0x1, 0x4f}}, {0x79, 0x6, {0x2, 0x9}}, {0x80, 0x5, {0x1}}, {0x80, 0x81, {0x0, 0x14}}, {0x1, 0x4, {0x3, 0x3}}, {0xa3, 0x130, {0x2, 0x8}}, {0x546, 0x8, {0x3, 0x24000000}}, {0x4, 0x1, {0x1, 0x9aeb}}, {0xa, 0x2, {0x3, 0x3a7f5137}}, {0x3255, 0x8, {0x3, 0x4}}, {0x0, 0xff, {0x2, 0x5fa}}, {0x2, 0x3e6, {0x3, 0x2}}, {0x9, 0x9, {0x3, 0x7}}, {0x0, 0x2, {0x2}}, {0x5507, 0xe3b, {0x2, 0x80000001}}, {0x3ff, 0x8, {0x3, 0x7f}}, {0x33, 0x9, {0x1, 0xfffff952}}, {0x6, 0x8000, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0xf, 0xb, 0x100, 0x5, 0x13, 'syz0\x00', "3ffc1a689703f0433814ea9a458f40353dbcc8b41d542c0b943e125c37dadcc7", "4f3c263fe868d66408896c3397b8e3b706a01c74ca3f70d3fb78412dedad1da9", [{0x0, 0x2, {0x2, 0xff}}, {0x1, 0xb183, {0x3, 0x35e9}}, {0x8001, 0x3b, {0x1, 0x2}}, {0x5, 0x7, {0x2, 0xd}}, {0x1, 0x2, {0x1, 0xc7}}, {0x5, 0x755, {0x0, 0xd}}, {0xc0be, 0x8, {0x0, 0x80000000}}, {0x2, 0x3, {0x1, 0x2}}, {0xd1ae, 0x8000, {0x0, 0x11}}, {0x800, 0x7, {0x1, 0x4}}, {0x40, 0x4, {0x0, 0xf2d5}}, {0x4, 0x9, {0x2, 0x3}}, {0x6, 0x7ff, {0x1, 0x1}}, {0x80, 0x9, {0x0, 0x1}}, {0x6, 0x1d, {0x2, 0xa}}, {0x1ff, 0x4, {0x1, 0x10}}, {0x7, 0x9, {0x3, 0x800}}, {0x6, 0xb2, {0x2, 0x9}}, {0x6, 0x770, {0x3, 0x80}}, {0x2, 0x5, {0x2, 0x35}}, {0x8, 0x8, {0x2, 0x5}}, {0x1, 0x5, {0x0, 0x2}}, {0xa, 0xc}, {0x6, 0x6, {0x1, 0x2}}, {0x2, 0x4, {0x3, 0x81}}, {0x6, 0xf293, {0x1, 0x1ff}}, {0x8000, 0x3, {0x2, 0x2}}, {0x9c4, 0x7, {0x3, 0xb951}}, {0xfffd, 0x9, {0x0, 0xc}}, {0x3, 0x7, {0x3, 0x7}}, {0x5, 0xbd2, {0x2, 0x10}}, {0xa, 0x5, {0x3, 0xffff8000}}, {0x7fff, 0x1, {0x0, 0x2dbb}}, {0x7, 0x340, {0x1, 0x6}}, {0x9, 0x7fff, {0x2, 0x9}}, {0x5, 0x8, {0x2, 0x9}}, {0x10, 0x2}, {0xfe, 0x8000, {0x3, 0x5}}, {0x9a, 0x4, {0x0, 0x3}}, {0x5, 0x1, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x0, 0xe, 0x0, 0x6, 0x1e, 'syz0\x00', "f8c58f2f5dd201cfdce401260204da06a3c3952f992ba4b43dbe6a60dfc8858b", "ae51070ad22056836a6fc297557195f44a098453a33e26db7c9266ea4b6f7b2b", [{0x8000, 0x8, {0x1, 0x588}}, {0x1, 0x3, {0x2, 0x4a6}}, {0x4d36, 0x8, {0x1, 0x1000}}, {0x401, 0x6, {0x3, 0x10001}}, {0x0, 0x3, {0x2, 0xf59}}, {0x3, 0x1, {0x2, 0x5}}, {0xff, 0x6, {0x2, 0xd}}, {0xfe70, 0x5, {0x0, 0xcba3}}, {0x2, 0x800, {0x0, 0x4555}}, {0x8001, 0x7, {0x3, 0x97b}}, {0x101, 0x4, {0x3}}, {0x0, 0x400, {0x3, 0x401}}, {0x8, 0x3, {0x0, 0x1}}, {0x1, 0x7, {0x2, 0x5}}, {0x7, 0xa, {0x1}}, {0x1, 0xc01, {0x1, 0x7}}, {0xff, 0x6, {0x1, 0x3}}, {0x9, 0x5, {0x0, 0x5}}, {0x1, 0x0, {0x0, 0x544}}, {0x2, 0x3, {0x0, 0x2}}, {0x9, 0x2, {0x2, 0x2}}, {0xe4, 0x232, {0x3}}, {0x5, 0x2, {0x3, 0x4}}, {0x4, 0xed73, {0x3, 0xffffffff}}, {0xf, 0x0, {0x3, 0x96ae}}, {0x6, 0xf001, {0x2, 0x7}}, {0x200, 0x0, {0x3, 0xfffffffd}}, {0x2, 0x2, {0x3, 0x100}}, {0x8ed, 0x3ff, {0x3, 0x9}}, {0x7f, 0x1000, {0x2, 0xfffffff5}}, {0xfff8, 0x8001, {0x0, 0x8001}}, {0x9, 0x6, {0x1, 0x4}}, {0x4, 0xbfc, {0x0, 0x8}}, {0x0, 0x7fff, {0x1, 0x5}}, {0x0, 0x1, {0x1, 0x2}}, {0x0, 0x9, {0x3, 0x95}}, {0x2, 0x6, {0x2}}, {0xfb8e, 0x9, {0x1, 0x5}}, {0x8, 0x1765, {0x1, 0x6}}, {0x2, 0x8, {0x1, 0x8}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c0d1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x300, 0x1, 0x10, 0x6, r1}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 1.578550967s ago: executing program 5 (id=9085): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000400)='./bus\x00', 0x2000480, &(0x7f0000000640), 0x1, 0x799, &(0x7f00000027c0)="$eJzs3ctrXNUfAPDvnSTNo/39EkHQugoIWiidmBpbBRctLkSwUNC1bZhMQ80kUzKT0oSALSKIIKi4EHTTtY+6c+sDXOl/4UJaqsZgxFXkTu6k02YmnbTJJJjPB27uOffeyTnfOfc55zATwL41nP7JRRyOiA+SiMFseRIRPbVUd8Spte1WlhYL6ZTE6uprvye1bZaXFgvR8JrUwSzzeER8/07E0dzGcivzC1PjpVJxNsuPVKcvjVTmF45dnB6fLE4WZ06Mjo0dP/ncyRPbF+tfPy8cuvXhy09/deqftx+78f4PSZyKQ/WVfdtXTt1wDGfvSU/6Ft7lpe0vblclu10BHkh6aHatHeVxOAajq5Zqob+TNQMAdspbEbEKAOwzies/AOwz9c8BlpcWC/Vpdz+R6Kzbp/tqfX/LWd/mynr83VmfXV+tH3RgObmrZySJiKFtKH84Ij775o0v0inu6U8F2ElXr0XE+aHhjef/ZMOYha16ZrOVq7212fA9i+97/nvvISsFrPv2dEQ83+z+L7d+/xNN7n96mxy7D+L+x3/u5jYU09Lt0xEvNoxtW2mIPzPUleX+V7vn60kuXCwV03Pb/yPiSPT0pvnR2qYbRkF1ZfM/W5XfeP/3x0dvfp6Wn87vbJG72d1792smxqvjDx145va1iCe6m8WfrLd/0uL+92ybZbzywruftlqXxp/GW582xr+zVq9HPNW0/e+0ZbLp+MSR2u4wUt8pmvj6l08GWpXf2P7plJZffxbohLT9BzaPfyhpHK9Z2XoZP10f/K7VuvvH33z/P5C8XksfyJZdGa9WZ0cjDiSvblx+/M5r6/n69mn8R55sfvxvtv+nz4Tn24y/+9ZvXz54/M1t11C8NP6JLbX/1hM3Vqa62oz/x7NN23+sljqSLWnn/NduBR/mvQMAAAAAAAAAAAAAAAAAAAAAAACAduUi4lAkufx6OpfL59d+w/vRGMiVypXq0QvluZmJqP1W9lD05OpfdTnY8H2oo9n34dfzx+/JPxsRj0TEx739tXy+UC5N7HbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJA52OL3/1O/9u527QCAHdPXYnlXh+sBAHROq+s/APDftbXrf/+O1QMA6BzP/wCw/7R9/T+/s/UAADrH8z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA77OyZM+m0+vfSYiHNT1yen5sqXz42UaxM5afnCvlCefZSfrJcniwV84XydMt/dHVtViqXL43FzNyVkWqxUh2pzC+cmy7PzVTPXZwenyyeK/Z0LDIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaF9lfmFqvFQqzkpsmujfG9XYM4nu2BPVkFhPrG7zsdx4lujfvRMUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB73bwAAAP//6homRA==") r0 = open(&(0x7f0000000080)='./bus\x00', 0x400145042, 0x110) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x100010, r0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x1ffffff, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x1fffffffffffffa4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100002119fb4900a500000000000000000000000000000021c1fddac40f570b4573eb7110d47bb57234b8086efd0589b69a50aec38a9dbaf26c01bc1930b78360b3def37fa3b05d060bd32e75ae3da6d5f5690358f44982843bc8cf1246b4bc6285c5dd667de43e6a505d70afb4d1e86221412699bf977115c345d1f00d2a774669", @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r4, r5, 0x0, 0x10ffff) 1.131417508s ago: executing program 0 (id=9087): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) readv(r0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB, @ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x0) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0xffffff63) sendfile(r6, r6, 0x0, 0x7a680000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000d00)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xf) 1.130539298s ago: executing program 7 (id=9088): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) io_uring_setup(0x3eae, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$P9_RWALK(r3, &(0x7f0000000000)=ANY=[], 0x9) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f00005bd000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0f21cd0f001b66b9c50900000f323e0f2299f2e3060f013d66b8001000000f23d80f21f86635400000600f23f836660f3a0a6063f3b800008ed0f30f167005", 0x3f}], 0x1, 0xa, &(0x7f0000000180), 0x0) madvise(&(0x7f000028c000/0x1000)=nil, 0x1000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000ff0f0000070000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000004b2d7596301226c4157e791360820000e3d4211d00"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) sendfile(r6, r6, 0x0, 0x6) 1.103080798s ago: executing program 8 (id=9089): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x4, 0xfff, 0x7, 0x480, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0xd, @void, @value, @void, @value}, 0x50) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 502.755629ms ago: executing program 5 (id=9090): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 12.30635ms ago: executing program 8 (id=9091): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) fstat(r1, &(0x7f0000000480)) 11.17719ms ago: executing program 0 (id=9092): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000e80)='mmap_lock_acquire_returned\x00', r0}, 0x18) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x16, 0x20000002, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 0s ago: executing program 7 (id=9093): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000cc0)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x8}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = io_uring_setup(0x1893, &(0x7f00000002c0)={0x0, 0x1351}) poll(0x0, 0x0, 0x8e7cc6b6) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="f8ff000000000000000000000000000000000000b0789c9737e7d644144e8a5007adcde5ceb22e4cc31ca6ff94e81d7d2089232058e92872a0e07b8579eacb447cb21d47027365d14df8cfa0f64fba0d38500e906c3a8635d11cdfa866a662e17a482bee598a2ce7b61eee093830fdbfd48253c91bc7e822b8262a27136407a98ad3e3f8f6289af55afb91760afe0e21ebbbfce60c2760ed7aece792968917549b12d0ad5f8a465c8b663c686001a5251f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x5}, 0x18) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000240)={0x3920e, r1, 0x4, 0x4, 0x80, 0x7}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000000)) kernel console output (not intermixed with test programs): to } for pid=24971 comm="syz.2.8149" name="374" dev="tmpfs" ino=2001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:devicekit_power_exec_t:s0" [ 1169.309592][ T28] audit: type=1400 audit(1169.297:6806): avc: denied { associate } for pid=24971 comm="syz.2.8149" name="374" dev="tmpfs" ino=2001 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:devicekit_power_exec_t:s0" [ 1169.338162][ T28] audit: type=1400 audit(1169.317:6807): avc: denied { write } for pid=18812 comm="syz-executor" name="374" dev="tmpfs" ino=2001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:devicekit_power_exec_t:s0" [ 1169.365420][T24963] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1169.373844][ T28] audit: type=1400 audit(1169.317:6808): avc: denied { remove_name } for pid=18812 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:devicekit_power_exec_t:s0" [ 1169.407454][ T28] audit: type=1400 audit(1169.317:6809): avc: denied { rmdir } for pid=18812 comm="syz-executor" name="374" dev="tmpfs" ino=2001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:devicekit_power_exec_t:s0" [ 1169.488325][ T28] audit: type=1107 audit(1169.527:6810): pid=24988 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1170.376834][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1170.554659][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x1 [ 1170.562175][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1170.569953][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1170.577683][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1170.584924][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1170.592718][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1170.600097][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x4 [ 1170.607581][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1170.614856][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x2 [ 1170.622349][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1170.629854][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1170.637344][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1170.644590][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1170.658582][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x4 [ 1170.674505][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1170.689872][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1170.760243][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1170.767684][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1170.774959][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1170.782588][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1170.790041][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1170.797522][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1170.804923][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1171.127879][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1171.135112][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1171.142383][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1171.149578][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1171.158979][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1171.159899][T25021] loop2: detected capacity change from 0 to 128 [ 1171.166334][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1171.179746][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1171.187952][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1171.195301][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1171.202569][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1171.209839][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1171.217520][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1171.225058][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1171.232594][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1171.239960][T20751] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1171.434756][T20751] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1171.473687][ T28] audit: type=1326 audit(1171.497:6811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25018 comm="syz.2.8166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb0585d19 code=0x7ffc0000 [ 1171.496537][ T28] audit: type=1326 audit(1171.497:6812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25018 comm="syz.2.8166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fbdb0585d19 code=0x7ffc0000 [ 1171.521273][ T28] audit: type=1326 audit(1171.497:6813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25018 comm="syz.2.8166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb0585d19 code=0x7ffc0000 [ 1171.588286][T20748] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1171.783611][T20748] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.830413][T20748] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1171.839830][T20748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.848226][T20748] usb 2-1: config 0 descriptor?? [ 1171.853750][T20748] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 1171.860488][T20748] usb 2-1: No valid video chain found. [ 1171.944471][T25038] loop4: detected capacity change from 0 to 512 [ 1171.958224][T25038] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1172.370955][T25044] loop2: detected capacity change from 0 to 16 [ 1172.377495][T25044] erofs: (device loop2): mounted with root inode @ nid 36. [ 1172.474771][T25049] netlink: 2020 bytes leftover after parsing attributes in process `syz.5.8174'. [ 1172.483928][T25049] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8174'. [ 1172.822768][ T46] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1172.839128][T25052] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1172.862291][T18978] EXT4-fs (loop4): unmounting filesystem. [ 1173.275370][T25065] loop5: detected capacity change from 0 to 2048 [ 1173.299486][T25063] loop2: detected capacity change from 0 to 2048 [ 1173.318160][T25063] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1173.336638][T25074] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8182'. [ 1173.353403][T25065] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1173.362567][T18812] EXT4-fs (loop2): unmounting filesystem. [ 1173.372225][T25065] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1173.384704][T25078] loop2: detected capacity change from 0 to 512 [ 1173.393288][T25078] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1173.404548][T25078] EXT4-fs (loop2): 1 truncate cleaned up [ 1173.410166][T25078] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1173.432293][T18812] EXT4-fs (loop2): unmounting filesystem. [ 1173.808329][T20748] usb 2-1: USB disconnect, device number 23 [ 1173.849352][T25092] loop4: detected capacity change from 0 to 16 [ 1173.856097][T25092] erofs: (device loop4): mounted with root inode @ nid 36. [ 1173.910206][T25098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8191'. [ 1174.273402][ T46] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1174.353752][T25104] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1174.429925][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1174.552674][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 1174.552689][ T28] audit: type=1326 audit(1174.587:6829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25107 comm="syz.5.8194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e81785d19 code=0x7ffc0000 [ 1174.581685][ T28] audit: type=1326 audit(1174.617:6830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25107 comm="syz.5.8194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e81785d19 code=0x7ffc0000 [ 1174.604691][ T28] audit: type=1326 audit(1174.617:6831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25107 comm="syz.5.8194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e81785d19 code=0x7ffc0000 [ 1174.627764][ T28] audit: type=1326 audit(1174.617:6832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25107 comm="syz.5.8194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e81785d19 code=0x7ffc0000 [ 1174.650601][ T28] audit: type=1326 audit(1174.617:6833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25107 comm="syz.5.8194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e81785d19 code=0x7ffc0000 [ 1174.673414][ T28] audit: type=1326 audit(1174.637:6834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25107 comm="syz.5.8194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0e81785d19 code=0x7ffc0000 [ 1174.742574][ T28] audit: type=1326 audit(1174.637:6835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25107 comm="syz.5.8194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e81785d19 code=0x7ffc0000 [ 1174.792658][ T28] audit: type=1326 audit(1174.637:6836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25107 comm="syz.5.8194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e81785d19 code=0x7ffc0000 [ 1174.851731][T25130] loop1: detected capacity change from 0 to 512 [ 1174.865582][ T28] audit: type=1326 audit(1174.647:6837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25107 comm="syz.5.8194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0e81785d19 code=0x7ffc0000 [ 1175.081990][T25135] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1175.118220][T25130] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1175.138508][ T28] audit: type=1326 audit(1174.647:6838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25107 comm="syz.5.8194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e81785d19 code=0x7ffc0000 [ 1175.190060][T18912] EXT4-fs (loop1): unmounting filesystem. [ 1175.233842][T25143] loop1: detected capacity change from 0 to 512 [ 1175.309109][T25144] netlink: 'syz.0.8206': attribute type 4 has an invalid length. [ 1175.310088][T25143] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1175.689840][T25167] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8214'. [ 1175.698765][T25167] 0ªX¹¦À: renamed from wg1 [ 1175.704464][T25167] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1175.721733][T25165] loop4: detected capacity change from 0 to 16 [ 1175.728191][T25165] erofs: (device loop4): z_erofs_parse_cfgs: unidentified algorithms fffc, please upgrade kernel [ 1175.774741][T25171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8216'. [ 1176.068957][T18912] EXT4-fs (loop1): unmounting filesystem. [ 1176.137109][T25180] loop1: detected capacity change from 0 to 1024 [ 1176.144336][T25180] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1176.152501][T25180] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1176.159424][T25180] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 1176.169297][T25180] EXT4-fs (loop1): Remounting filesystem read-only [ 1176.175728][T25180] EXT4-fs error (device loop1): ext4_dirty_inode:6091: inode #3: comm syz.1.8219: mark_inode_dirty error [ 1176.187091][T25180] EXT4-fs (loop1): Remounting filesystem read-only [ 1176.193555][T25180] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.8219: Invalid block bitmap block 3 in block_group 0 [ 1176.207062][T25180] EXT4-fs (loop1): Remounting filesystem read-only [ 1176.213528][T25180] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 1176.223020][T25180] EXT4-fs (loop1): Remounting filesystem read-only [ 1176.229617][T25180] EXT4-fs error (device loop1): ext4_dirty_inode:6091: inode #3: comm syz.1.8219: mark_inode_dirty error [ 1176.241121][T25180] EXT4-fs (loop1): Remounting filesystem read-only [ 1176.247568][T25180] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 1: comm syz.1.8219: lblock 6 mapped to illegal pblock 1 (length 1) [ 1176.261606][T25180] EXT4-fs (loop1): Remounting filesystem read-only [ 1176.268348][T25180] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 48: comm syz.1.8219: lblock 0 mapped to illegal pblock 48 (length 1) [ 1176.282619][T25180] EXT4-fs (loop1): Remounting filesystem read-only [ 1176.289190][T25180] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.8219: Failed to acquire dquot type 0 [ 1176.301082][T25180] EXT4-fs (loop1): Remounting filesystem read-only [ 1176.307912][T25180] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 49: comm syz.1.8219: lblock 1 mapped to illegal pblock 49 (length 1) [ 1176.322299][T25180] EXT4-fs (loop1): Remounting filesystem read-only [ 1176.328896][T25180] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.8219: Failed to acquire dquot type 0 [ 1176.340339][T25180] EXT4-fs (loop1): Remounting filesystem read-only [ 1176.346916][T25180] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 1176.356671][T25180] EXT4-fs (loop1): Remounting filesystem read-only [ 1176.363026][T25180] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #15: comm syz.1.8219: mark_inode_dirty error [ 1176.374568][T25180] EXT4-fs (loop1): Remounting filesystem read-only [ 1176.381165][T25180] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 1176.391489][T25180] EXT4-fs (loop1): 1 orphan inode deleted [ 1176.397429][T25180] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1176.446801][T25189] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1176.457011][T25179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8219'. [ 1176.465881][T25179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8219'. [ 1176.493751][T18912] EXT4-fs (loop1): unmounting filesystem. [ 1176.543733][T25202] loop4: detected capacity change from 0 to 512 [ 1176.554616][T25206] loop1: detected capacity change from 0 to 1024 [ 1176.558380][T25202] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1176.561096][T25206] EXT4-fs: Ignoring removed orlov option [ 1176.577427][T25206] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1176.719117][T25214] syz.2.8232[25214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1176.719277][T25214] syz.2.8232[25214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1176.873535][T25219] loop2: detected capacity change from 0 to 16 [ 1176.891341][T25219] erofs: (device loop2): z_erofs_parse_cfgs: unidentified algorithms fffc, please upgrade kernel [ 1177.380975][T18978] EXT4-fs (loop4): unmounting filesystem. [ 1177.399399][T18912] EXT4-fs (loop1): unmounting filesystem. [ 1178.334692][T25253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8247'. [ 1178.343447][T25253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8247'. [ 1178.392019][T25257] device pim6reg1 entered promiscuous mode [ 1178.867196][T25266] loop4: detected capacity change from 0 to 2048 [ 1181.195464][T25268] 9pnet_fd: Insufficient options for proto=fd [ 1181.267307][ T28] kauditd_printk_skb: 117 callbacks suppressed [ 1181.267423][ T28] audit: type=1326 audit(1178.597:6950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25261 comm="syz.2.8251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbdb0585d19 code=0x7ffc0000 [ 1181.400331][ T28] audit: type=1326 audit(1178.597:6951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25261 comm="syz.2.8251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb0585d19 code=0x7ffc0000 [ 1181.434844][T25266] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1181.464051][ T28] audit: type=1326 audit(1178.597:6952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25261 comm="syz.2.8251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fbdb0585d19 code=0x7ffc0000 [ 1181.516828][ T28] audit: type=1326 audit(1178.597:6953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25261 comm="syz.2.8251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb0585d19 code=0x7ffc0000 [ 1181.596845][T18978] EXT4-fs (loop4): unmounting filesystem. [ 1181.612221][ T28] audit: type=1326 audit(1178.597:6954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25261 comm="syz.2.8251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbdb0585d19 code=0x7ffc0000 [ 1181.635727][ T28] audit: type=1326 audit(1178.597:6955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25261 comm="syz.2.8251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb0585d19 code=0x7ffc0000 [ 1181.658819][ T28] audit: type=1326 audit(1178.597:6956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25261 comm="syz.2.8251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbdb0585d19 code=0x7ffc0000 [ 1181.690112][ T28] audit: type=1326 audit(1178.597:6957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25261 comm="syz.2.8251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb0585d19 code=0x7ffc0000 [ 1181.736373][ T28] audit: type=1326 audit(1178.597:6958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25261 comm="syz.2.8251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbdb0585d19 code=0x7ffc0000 [ 1181.764886][T25281] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1181.782290][ T28] audit: type=1326 audit(1178.597:6959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25261 comm="syz.2.8251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb0585d19 code=0x7ffc0000 [ 1181.854226][T25289] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8259'. [ 1181.932286][T25295] syz.2.8263[25295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1181.932357][T25295] syz.2.8263[25295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1181.939496][T25297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8262'. [ 1181.996771][T25295] loop2: detected capacity change from 0 to 512 [ 1182.018955][T25295] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1182.038238][T25304] loop1: detected capacity change from 0 to 256 [ 1182.045682][T18812] EXT4-fs (loop2): unmounting filesystem. [ 1182.067579][T25304] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1182.365075][T25317] loop1: detected capacity change from 0 to 2048 [ 1182.383959][T25317] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1182.396863][T25316] 9pnet_fd: Insufficient options for proto=fd [ 1182.446951][T25330] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8274'. [ 1182.473557][T25336] loop2: detected capacity change from 0 to 512 [ 1182.481840][T25336] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1182.489278][T25336] EXT4-fs warning (device loop2): ext4_enable_quotas:7023: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1182.503977][T25336] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1182.510693][T25336] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.8277: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1182.529006][T25336] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.8277: couldn't read orphan inode 13 (err -117) [ 1182.541183][T25336] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1182.552287][T25336] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 1182.563829][T25336] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 2 [ 1182.581375][T18812] EXT4-fs (loop2): unmounting filesystem. [ 1182.595566][T25344] loop2: detected capacity change from 0 to 16 [ 1182.602239][T25344] erofs: (device loop2): mounted with root inode @ nid 36. [ 1182.677762][ T46] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1182.688755][T25344] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1182.805720][T25356] loop5: detected capacity change from 0 to 16 [ 1182.813433][T25356] erofs: (device loop5): mounted with root inode @ nid 36. [ 1183.026446][ T47] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1183.037829][T25369] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1183.073788][T18912] EXT4-fs (loop1): unmounting filesystem. [ 1183.277150][T25370] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1183.301857][T25381] loop4: detected capacity change from 0 to 512 [ 1183.327356][T25381] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1183.349616][T25379] loop1: detected capacity change from 0 to 16 [ 1183.356088][T25379] erofs: (device loop1): z_erofs_parse_cfgs: unidentified algorithms fffc, please upgrade kernel [ 1183.759446][ T6] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x4 [ 1183.769230][ T6] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x2 [ 1183.776876][ T6] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 1183.784721][ T6] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 1183.792744][ T6] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 1183.806459][ T6] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 1183.814019][ T6] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 1183.821975][ T6] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 1183.829600][ T6] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 1183.838771][ T6] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 1183.846357][ T6] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 1183.854019][ T6] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 1183.861678][ T6] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 1184.129082][ T6] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 1184.136658][ T6] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 1184.144100][ T6] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 1184.160902][ T6] hid-generic 0000:3000000:0000.0016: hidraw0: HID v0.00 Device [sy] on syz0 [ 1184.173586][T18978] EXT4-fs (loop4): unmounting filesystem. [ 1184.215398][T25414] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8306'. [ 1184.285418][T25420] loop4: detected capacity change from 0 to 512 [ 1184.286079][T25412] loop2: detected capacity change from 0 to 8192 [ 1184.312214][T25420] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1184.337503][T25412] loop2: p1 p2 p3 [ 1184.341114][T25412] loop2: p1 size 3523149824 extends beyond EOD, truncated [ 1184.348700][T25412] loop2: p2 size 117440512 extends beyond EOD, truncated [ 1184.355933][T25412] loop2: p3 start 4294901760 is beyond EOD, truncated [ 1184.363772][T25428] 9pnet: Could not find request transport: rdma [ 1184.387828][T25433] loop1: detected capacity change from 0 to 512 [ 1184.394202][T25435] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8316'. [ 1184.417647][T25433] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1184.444660][T25446] loop2: detected capacity change from 0 to 1024 [ 1184.453258][T25446] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1184.473818][T18812] EXT4-fs (loop2): unmounting filesystem. [ 1184.733069][T25463] loop5: detected capacity change from 0 to 1024 [ 1184.767979][T25463] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1184.882622][T25473] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8328'. [ 1184.937390][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1185.272723][T18978] EXT4-fs (loop4): unmounting filesystem. [ 1185.359302][T18912] EXT4-fs (loop1): unmounting filesystem. [ 1185.385073][T25503] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8340'. [ 1185.578893][T25533] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8355'. [ 1185.695102][T25536] loop1: detected capacity change from 0 to 2048 [ 1185.757986][T25536] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1185.787185][T25536] 9pnet_fd: Insufficient options for proto=fd [ 1186.366699][T25545] loop2: detected capacity change from 0 to 128 [ 1186.384271][ T28] kauditd_printk_skb: 234 callbacks suppressed [ 1186.384286][ T28] audit: type=1400 audit(1186.417:7194): avc: denied { write } for pid=25546 comm="syz.5.8359" name="001" dev="devtmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1186.469218][T25545] syz.2.8358: attempt to access beyond end of device [ 1186.469218][T25545] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 1186.496290][ T28] audit: type=1400 audit(1186.487:7195): avc: denied { connect } for pid=25551 comm="syz.5.8361" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1186.551066][ T28] audit: type=1400 audit(1186.487:7196): avc: denied { write } for pid=25551 comm="syz.5.8361" laddr=172.20.20.170 lport=256 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1186.579811][T18912] EXT4-fs (loop1): unmounting filesystem. [ 1186.640740][T25561] loop1: detected capacity change from 0 to 1024 [ 1186.647351][ T28] audit: type=1326 audit(1186.617:7197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25548 comm="syz.0.8360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f6f85d19 code=0x7ffc0000 [ 1186.666509][T25563] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8366'. [ 1186.760025][ T28] audit: type=1326 audit(1186.617:7198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25548 comm="syz.0.8360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59f6f85d19 code=0x7ffc0000 [ 1186.792192][ T28] audit: type=1326 audit(1186.617:7199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25548 comm="syz.0.8360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f6f85d19 code=0x7ffc0000 [ 1186.795443][T25561] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1186.825363][ T28] audit: type=1326 audit(1186.617:7200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25548 comm="syz.0.8360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59f6f85d19 code=0x7ffc0000 [ 1186.857646][ T28] audit: type=1326 audit(1186.617:7201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25548 comm="syz.0.8360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f6f85d19 code=0x7ffc0000 [ 1186.880743][ T28] audit: type=1326 audit(1186.617:7202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25548 comm="syz.0.8360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f59f6f85d19 code=0x7ffc0000 [ 1186.929034][ T28] audit: type=1326 audit(1186.617:7203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25548 comm="syz.0.8360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f6f85d19 code=0x7ffc0000 [ 1186.955949][T18912] EXT4-fs (loop1): unmounting filesystem. [ 1187.482766][T25593] loop4: detected capacity change from 0 to 2048 [ 1190.609790][T25595] loop1: detected capacity change from 0 to 512 [ 1190.771426][T25595] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1190.837310][T25607] loop2: detected capacity change from 0 to 512 [ 1190.916559][T25593] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1190.950880][T18912] EXT4-fs (loop1): unmounting filesystem. [ 1190.951881][T25609] loop5: detected capacity change from 0 to 1024 [ 1190.964753][T25609] journal_path: Lookup failure for './file0' [ 1190.970972][T25609] EXT4-fs: error: could not find journal device path [ 1190.978976][T25607] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1191.107560][T18978] EXT4-fs (loop4): unmounting filesystem. [ 1191.135171][T25622] loop5: detected capacity change from 0 to 2048 [ 1191.154401][T25626] serio: Serial port ptm0 [ 1191.159821][T25622] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1191.266275][T20751] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1191.391126][T25636] 9pnet_fd: Insufficient options for proto=fd [ 1191.397593][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 1191.397718][ T28] audit: type=1400 audit(1191.427:7281): avc: denied { mounton } for pid=25621 comm="syz.5.8383" path="/94/file2/file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1191.549299][T20751] usb 2-1: Using ep0 maxpacket: 8 [ 1191.561473][T20751] usb 2-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1191.628570][T20751] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1191.629267][T18812] EXT4-fs (loop2): unmounting filesystem. [ 1191.647314][T20751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.186358][T20751] usb 2-1: string descriptor 0 read error: -71 [ 1192.199748][T20751] hub 2-1:32.0: bad descriptor, ignoring hub [ 1192.221006][T20751] hub: probe of 2-1:32.0 failed with error -5 [ 1192.326512][T20751] usb 2-1: USB disconnect, device number 24 [ 1192.396950][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1192.525623][T25654] loop5: detected capacity change from 0 to 1024 [ 1192.535300][T25654] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1192.553951][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1192.574650][ T28] audit: type=1400 audit(1192.607:7282): avc: denied { read write } for pid=25649 comm="syz.4.8392" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1192.597485][ T28] audit: type=1400 audit(1192.607:7283): avc: denied { open } for pid=25649 comm="syz.4.8392" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1192.620739][ T28] audit: type=1400 audit(1192.607:7284): avc: denied { ioctl } for pid=25649 comm="syz.4.8392" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1194.450927][T25678] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8401'. [ 1194.681616][T25680] loop1: detected capacity change from 0 to 16 [ 1194.691182][T25680] erofs: (device loop1): z_erofs_parse_cfgs: unidentified algorithms fffc, please upgrade kernel [ 1194.859398][ T28] audit: type=1400 audit(1194.897:7285): avc: denied { mounton } for pid=25682 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1194.903724][T25688] loop5: detected capacity change from 0 to 512 [ 1194.910302][T25688] EXT4-fs: Ignoring removed orlov option [ 1194.916111][T25688] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1194.927441][T25688] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1194.938237][T25682] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.945574][T25682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.947494][T25688] EXT4-fs (loop5): 1 orphan inode deleted [ 1194.958182][T25688] EXT4-fs (loop5): 1 truncate cleaned up [ 1194.963714][T25688] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1194.972603][T25682] device bridge_slave_0 entered promiscuous mode [ 1194.995112][T25682] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.002094][T25682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.009526][T25682] device bridge_slave_1 entered promiscuous mode [ 1195.067265][T25688] EXT4-fs (loop5): unmounting filesystem. [ 1195.095146][ T28] audit: type=1400 audit(1195.127:7286): avc: denied { read } for pid=25696 comm="syz.5.8406" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1195.130489][T16847] tipc: Left network mode [ 1195.241210][ T28] audit: type=1400 audit(1195.127:7287): avc: denied { open } for pid=25696 comm="syz.5.8406" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1195.284997][T25682] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.291879][T25682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1195.299077][T25682] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.305828][T25682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1195.329148][T25701] loop1: detected capacity change from 0 to 512 [ 1195.377954][T25270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1195.385597][T25270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.393088][T25270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.411568][T25270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1195.420995][T25701] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1195.430436][T25270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.437297][T25270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1195.459681][ T28] audit: type=1400 audit(1195.497:7288): avc: denied { remove_name } for pid=25700 comm="syz.1.8408" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1195.488452][T25270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1195.496422][ T28] audit: type=1400 audit(1195.517:7289): avc: denied { unlink } for pid=25700 comm="syz.1.8408" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1195.520247][T25270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.527128][T25270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1195.536785][T25706] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8409'. [ 1195.547040][ T28] audit: type=1400 audit(1195.517:7290): avc: denied { create } for pid=25700 comm="syz.1.8408" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1195.572789][T25270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1195.582675][T25270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1195.584347][T18912] EXT4-fs (loop1): unmounting filesystem. [ 1195.595886][ T368] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1195.617854][ T1837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1195.626762][T25716] loop1: detected capacity change from 0 to 256 [ 1195.629286][T25682] device veth0_vlan entered promiscuous mode [ 1195.639886][ T1837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1195.653292][ T1837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1195.661476][ T1837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1195.671951][T25682] device veth1_macvtap entered promiscuous mode [ 1195.679737][ T1837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1195.693180][ T1837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1195.701914][ T1837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1195.719119][T25718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8414'. [ 1195.727885][T25718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8414'. [ 1195.764434][T25723] loop0: detected capacity change from 0 to 2048 [ 1195.827955][ T368] usb 3-1: Using ep0 maxpacket: 8 [ 1195.834297][ T368] usb 3-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1195.860214][ T368] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1195.879665][ T368] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.888791][T25723] loop0: p1 < > p3 p4 < > [ 1195.893629][T25723] loop0: p3 start 4284289 is beyond EOD, truncated [ 1196.069351][T25732] loop5: detected capacity change from 0 to 16 [ 1196.076052][T25732] erofs: (device loop5): z_erofs_parse_cfgs: unidentified algorithms fffc, please upgrade kernel [ 1196.118665][ T368] usb 3-1: string descriptor 0 read error: -71 [ 1196.126400][ T368] hub 3-1:32.0: bad descriptor, ignoring hub [ 1196.135940][ T368] hub: probe of 3-1:32.0 failed with error -5 [ 1196.288206][T16847] device veth1_macvtap left promiscuous mode [ 1196.308440][T16847] device veth0_vlan left promiscuous mode [ 1196.406805][ T368] usb 3-1: USB disconnect, device number 37 [ 1196.515727][T25739] sch_fq: defrate 6 ignored. [ 1196.551437][T25743] loop1: detected capacity change from 0 to 1024 [ 1196.562717][T25743] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1196.574470][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 1196.574485][ T28] audit: type=1400 audit(1196.607:7328): avc: denied { create } for pid=25742 comm="syz.1.8422" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1196.603446][ T28] audit: type=1400 audit(1196.637:7329): avc: denied { remount } for pid=25742 comm="syz.1.8422" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1196.622713][T25743] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 1196.645006][T18912] EXT4-fs (loop1): unmounting filesystem. [ 1196.733699][T25746] loop1: detected capacity change from 0 to 2048 [ 1196.735896][T25749] syz.2.8424[25749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1196.740102][T25749] syz.2.8424[25749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1196.765463][T25746] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1196.787986][ T28] audit: type=1326 audit(1196.827:7330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25752 comm="syz.2.8425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb0585d19 code=0x7ffc0000 [ 1196.844220][T18912] EXT4-fs (loop1): unmounting filesystem. [ 1196.857988][T25757] loop4: detected capacity change from 0 to 1024 [ 1196.913991][T25761] loop1: detected capacity change from 0 to 8192 [ 1196.922668][ T28] audit: type=1326 audit(1196.827:7331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25752 comm="syz.2.8425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fbdb0585d19 code=0x7ffc0000 [ 1196.945639][ T28] audit: type=1326 audit(1196.827:7332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25752 comm="syz.2.8425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb0585d19 code=0x7ffc0000 [ 1196.972674][T25757] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1197.044632][ T28] audit: type=1326 audit(1197.077:7333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25775 comm="syz.2.8434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb0585d19 code=0x7ffc0000 [ 1197.101625][ T28] audit: type=1326 audit(1197.107:7334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25775 comm="syz.2.8434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb0585d19 code=0x7ffc0000 [ 1197.124842][ T28] audit: type=1326 audit(1197.107:7335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25775 comm="syz.2.8434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fbdb0585d19 code=0x7ffc0000 [ 1197.153119][ T28] audit: type=1326 audit(1197.107:7336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25775 comm="syz.2.8434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb0585d19 code=0x7ffc0000 [ 1197.530581][T25791] loop2: detected capacity change from 0 to 16 [ 1197.537049][T25791] erofs: (device loop2): z_erofs_parse_cfgs: unidentified algorithms fffc, please upgrade kernel [ 1197.620848][T25795] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8440'. [ 1197.650859][ T28] audit: type=1326 audit(1197.687:7337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25796 comm="syz.1.8441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1197.756642][T25803] loop1: detected capacity change from 0 to 2048 [ 1197.784017][T25803] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1197.798048][T25803] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.8444: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1197.825471][T25803] EXT4-fs (loop1): Remounting filesystem read-only [ 1197.862006][T18978] EXT4-fs (loop4): unmounting filesystem. [ 1197.862092][T18912] EXT4-fs (loop1): unmounting filesystem. [ 1197.989805][T25820] loop4: detected capacity change from 0 to 2048 [ 1197.998273][T25825] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8452'. [ 1198.012175][T25832] loop5: detected capacity change from 0 to 512 [ 1198.023745][T25835] loop0: detected capacity change from 0 to 512 [ 1198.032153][T25835] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1198.042634][T25835] EXT4-fs warning (device loop0): ext4_enable_quotas:7023: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1198.057371][T25835] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1198.064024][T25835] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.8457: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1198.082545][T25835] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.8457: couldn't read orphan inode 13 (err -117) [ 1198.096981][T25835] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 1198.106868][T25835] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 2 [ 1198.131387][T25846] netlink: 'syz.0.8460': attribute type 1 has an invalid length. [ 1198.222593][T25858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8466'. [ 1198.231365][T25858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8466'. [ 1198.246277][ T547] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1198.402655][T25864] loop4: detected capacity change from 0 to 2048 [ 1198.416274][ T547] usb 2-1: device descriptor read/64, error -71 [ 1198.696299][ T547] usb 2-1: device descriptor read/64, error -71 [ 1198.986257][ T547] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1199.136297][ T547] usb 2-1: device descriptor read/64, error -71 [ 1199.144868][T25893] loop2: detected capacity change from 0 to 16 [ 1199.151253][T25893] erofs: (device loop2): z_erofs_parse_cfgs: unidentified algorithms fffc, please upgrade kernel [ 1199.219882][T25894] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1199.406302][ T547] usb 2-1: device descriptor read/64, error -71 [ 1199.526478][ T547] usb usb2-port1: attempt power cycle [ 1199.893884][T25898] loop5: detected capacity change from 0 to 2048 [ 1200.112583][T25901] loop2: detected capacity change from 0 to 2048 [ 1200.231545][T25898] EXT4-fs mount: 8 callbacks suppressed [ 1200.231577][T25898] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1200.299696][T25901] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1200.510409][T18812] EXT4-fs (loop2): unmounting filesystem. [ 1200.732650][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1200.791964][T25915] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8484'. [ 1200.800824][ T547] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1201.270150][ T547] usb 2-1: device descriptor read/8, error -71 [ 1201.427013][ T547] usb 2-1: device descriptor read/8, error -71 [ 1201.666751][T25936] loop2: detected capacity change from 0 to 512 [ 1201.709660][T25936] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1201.744943][T25939] loop5: detected capacity change from 0 to 2048 [ 1201.757682][T25939] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1201.787677][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1201.996601][T25949] loop5: detected capacity change from 0 to 2048 [ 1202.093436][T25949] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1202.542704][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1202.542730][ T28] audit: type=1400 audit(1202.577:7343): avc: denied { map } for pid=25955 comm="syz.1.8495" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=107998 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1202.628427][T18812] EXT4-fs (loop2): unmounting filesystem. [ 1202.736480][ T28] audit: type=1400 audit(1202.607:7344): avc: denied { read write } for pid=25955 comm="syz.1.8495" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=107998 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1202.815508][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1202.931611][T25969] loop2: detected capacity change from 0 to 16 [ 1202.938085][T25969] erofs: (device loop2): z_erofs_parse_cfgs: unidentified algorithms fffc, please upgrade kernel [ 1203.091462][T25972] block device autoloading is deprecated and will be removed. [ 1203.126712][T25972] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1203.548830][T25983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25983 comm=syz.0.8504 [ 1203.565555][ T28] audit: type=1400 audit(1203.577:7345): avc: denied { ioctl } for pid=25980 comm="syz.0.8504" path="socket:[108069]" dev="sockfs" ino=108069 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1203.591436][ T28] audit: type=1400 audit(1203.587:7346): avc: denied { bind } for pid=25980 comm="syz.0.8504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1203.786814][T25987] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8507'. [ 1203.798330][T25989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8506'. [ 1203.807039][T25989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8506'. [ 1204.072368][T26005] loop2: detected capacity change from 0 to 2048 [ 1204.169997][T26005] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1204.525132][T26009] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1204.913960][T18812] EXT4-fs (loop2): unmounting filesystem. [ 1205.297621][T26025] loop2: detected capacity change from 0 to 2048 [ 1205.451773][T26025] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1205.484390][T26025] 9pnet_fd: Insufficient options for proto=fd [ 1206.145393][T18812] EXT4-fs (loop2): unmounting filesystem. [ 1206.422437][T26054] loop2: detected capacity change from 0 to 512 [ 1206.438924][T26054] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1206.549631][T26062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26062 comm=syz.0.8525 [ 1207.187986][ T28] audit: type=1400 audit(1207.227:7347): avc: denied { create } for pid=26065 comm="syz.1.8531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1207.206945][ T28] audit: type=1400 audit(1207.227:7348): avc: denied { bind } for pid=26065 comm="syz.1.8531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1207.228300][ T28] audit: type=1400 audit(1207.267:7349): avc: denied { watch } for pid=26067 comm="syz.1.8532" path="/462/control" dev="tmpfs" ino=2488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1207.263461][T18812] EXT4-fs (loop2): unmounting filesystem. [ 1207.295673][ T28] audit: type=1326 audit(1207.327:7350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26079 comm="syz.1.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1207.318613][ T28] audit: type=1326 audit(1207.327:7351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26079 comm="syz.1.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1207.738409][ T28] audit: type=1326 audit(1207.327:7352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26079 comm="syz.1.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1207.761898][ T28] audit: type=1326 audit(1207.327:7353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26079 comm="syz.1.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1207.785373][ T28] audit: type=1326 audit(1207.327:7354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26079 comm="syz.1.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1207.808991][ T28] audit: type=1326 audit(1207.327:7355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26079 comm="syz.1.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1208.419640][ T28] audit: type=1400 audit(1208.457:7356): avc: denied { read write } for pid=26093 comm="syz.0.8541" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1208.442954][ T28] audit: type=1400 audit(1208.457:7357): avc: denied { open } for pid=26093 comm="syz.0.8541" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1208.465856][ T28] audit: type=1400 audit(1208.457:7358): avc: denied { bpf } for pid=26096 comm="syz.1.8543" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1208.487000][ T28] audit: type=1400 audit(1208.457:7359): avc: denied { prog_load } for pid=26096 comm="syz.1.8543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1208.513289][ T28] audit: type=1400 audit(1208.457:7360): avc: denied { perfmon } for pid=26096 comm="syz.1.8543" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1208.533650][ T28] audit: type=1400 audit(1208.457:7361): avc: denied { read } for pid=26096 comm="syz.1.8543" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1208.573782][T26102] tipc: Started in network mode [ 1208.578670][T26102] tipc: Node identity eeeab313c3a, cluster identity 4711 [ 1208.585551][T26102] tipc: Enabled bearer , priority 7 [ 1208.593788][T26102] ªªªªªª: renamed from syzkaller0 [ 1208.599359][T26102] tipc: Disabling bearer [ 1208.746907][T26107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26107 comm=syz.2.8544 [ 1209.044768][T26115] 9pnet_fd: Insufficient options for proto=fd [ 1210.007837][T26128] loop2: detected capacity change from 0 to 1024 [ 1210.018572][T26128] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1210.046652][T18812] EXT4-fs (loop2): unmounting filesystem. [ 1210.072499][T26136] loop2: detected capacity change from 0 to 512 [ 1210.087856][T26136] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1210.184541][T26147] netlink: 'syz.0.8555': attribute type 4 has an invalid length. [ 1210.712956][T26150] loop5: detected capacity change from 0 to 16 [ 1210.719480][T26150] erofs: (device loop5): mounted with root inode @ nid 36. [ 1210.755530][T26152] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8562'. [ 1210.766910][T26152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8562'. [ 1211.901491][ T47] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1211.954146][T18812] EXT4-fs (loop2): unmounting filesystem. [ 1212.121779][T26167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26167 comm=syz.5.8565 [ 1212.135165][T26168] 9pnet_fd: Insufficient options for proto=fd [ 1212.836838][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 1212.836855][ T28] audit: type=1400 audit(1212.877:7423): avc: denied { create } for pid=26183 comm="syz.1.8573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1212.904350][T26188] loop2: detected capacity change from 0 to 16 [ 1212.911003][T26188] erofs: (device loop2): mounted with root inode @ nid 36. [ 1212.913660][T26192] tipc: New replicast peer: 255.255.255.255 [ 1212.921464][T26191] loop5: detected capacity change from 0 to 16 [ 1212.923952][ T28] audit: type=1400 audit(1212.947:7424): avc: denied { getopt } for pid=26190 comm="syz.1.8577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1212.949480][T26192] tipc: Enabled bearer , priority 10 [ 1212.955631][T26191] erofs: (device loop5): mounted with root inode @ nid 36. [ 1213.722806][T26200] netlink: 'syz.2.8575': attribute type 4 has an invalid length. [ 1213.747260][ T47] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1213.758708][T26205] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1213.771283][ T47] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1213.782983][T26200] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1213.964514][ T28] audit: type=1400 audit(1213.997:7425): avc: denied { name_bind } for pid=26209 comm="syz.5.8583" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1214.127978][T26221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26221 comm=syz.2.8582 [ 1214.258288][T26223] xt_nat: multiple ranges no longer supported [ 1214.716016][ T28] audit: type=1400 audit(1214.747:7426): avc: denied { mounton } for pid=26224 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1214.761413][T26224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.768468][T26224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.776310][T26224] device bridge_slave_0 entered promiscuous mode [ 1214.783914][T26224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.790912][T26224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.798487][T26224] device bridge_slave_1 entered promiscuous mode [ 1214.841525][ T28] audit: type=1400 audit(1214.877:7427): avc: denied { create } for pid=26229 comm="syz.2.8588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1214.916489][T26224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.923370][T26224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1214.930485][T26224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.937264][T26224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1214.950545][T26236] loop5: detected capacity change from 0 to 256 [ 1214.957984][ T28] audit: type=1400 audit(1214.997:7428): avc: denied { write } for pid=26229 comm="syz.2.8588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1214.988647][ T28] audit: type=1400 audit(1215.017:7429): avc: denied { mount } for pid=26232 comm="syz.5.8590" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1215.025359][T26233] block device autoloading is deprecated and will be removed. [ 1215.057101][ T28] audit: type=1400 audit(1215.097:7430): avc: denied { execute } for pid=26240 comm="syz.2.8592" path="/469/hugetlb.1GB.usage_in_bytes" dev="tmpfs" ino=2514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1215.059141][T26233] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1215.096783][ T28] audit: type=1400 audit(1215.127:7431): avc: denied { unmount } for pid=24078 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1215.177080][T26246] netlink: 'syz.1.8593': attribute type 4 has an invalid length. [ 1215.187145][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.196285][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.208885][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1215.221228][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1215.230105][T26247] loop5: detected capacity change from 0 to 16 [ 1215.236714][T26247] erofs: (device loop5): z_erofs_parse_cfgs: unidentified algorithms fffc, please upgrade kernel [ 1215.271550][T25270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1215.279747][ T28] audit: type=1400 audit(1215.307:7432): avc: denied { create } for pid=26248 comm="syz.1.8595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1215.301331][T25270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.308226][T25270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.315854][T25270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1215.325644][T25270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.332546][T25270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1215.340465][T25270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1215.348903][T25270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1215.370296][T26224] device veth0_vlan entered promiscuous mode [ 1215.383010][T26224] device veth1_macvtap entered promiscuous mode [ 1215.418528][T25270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1215.429160][T25270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1215.437543][T25270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1215.446065][T25270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1215.454031][T25270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1215.461428][T25270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1215.468940][T25270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1215.490777][T26264] loop6: detected capacity change from 0 to 512 [ 1215.508867][T26264] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1216.009468][T26281] loop5: detected capacity change from 0 to 16 [ 1216.016545][T26281] erofs: (device loop5): mounted with root inode @ nid 36. [ 1216.831600][T26283] netlink: 'syz.5.8605': attribute type 4 has an invalid length. [ 1216.839465][ T47] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1216.850310][T26284] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1216.865409][T26224] EXT4-fs (loop6): unmounting filesystem. [ 1217.084236][T26303] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8614'. [ 1217.254978][T26311] xt_CT: No such helper "syz0" [ 1217.388988][T26312] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1217.772040][T26317] xt_hashlimit: max too large, truncated to 1048576 [ 1217.936521][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 1217.936538][ T28] audit: type=1400 audit(1217.977:7455): avc: denied { write } for pid=26318 comm="syz.5.8617" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1218.055273][T26327] loop6: detected capacity change from 0 to 1024 [ 1218.063454][T26327] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1218.071817][T26327] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1218.189665][T26333] loop5: detected capacity change from 0 to 2048 [ 1218.276905][T26327] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1218.291054][T26333] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1218.321340][T26333] 9pnet_fd: Insufficient options for proto=fd [ 1218.356333][ T28] audit: type=1400 audit(1218.357:7456): avc: denied { mounton } for pid=26318 comm="syz.5.8617" path="/152/file1/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1218.580173][ T28] audit: type=1400 audit(1218.367:7457): avc: denied { ioctl } for pid=26318 comm="syz.5.8617" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1218.987422][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1219.067145][ T28] audit: type=1400 audit(1218.997:7458): avc: denied { create } for pid=26326 comm="syz.6.8621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1219.131807][T26346] loop5: detected capacity change from 0 to 512 [ 1219.140069][ T28] audit: type=1400 audit(1219.007:7459): avc: denied { connect } for pid=26326 comm="syz.6.8621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1219.194180][T26346] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1219.202097][T26346] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1219.223826][ T28] audit: type=1400 audit(1219.007:7460): avc: denied { bind } for pid=26326 comm="syz.6.8621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1219.249990][T26346] System zones: 0-1, 15-15, 18-18, 34-34 [ 1219.265415][T26346] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1219.371654][T26346] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 1219.387088][ T28] audit: type=1400 audit(1219.137:7461): avc: denied { create } for pid=26343 comm="syz.1.8624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1219.412434][T26346] EXT4-fs warning (device loop5): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1219.478971][T26361] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1219.518722][ T28] audit: type=1400 audit(1219.137:7462): avc: denied { write } for pid=26343 comm="syz.1.8624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1219.521697][T26346] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1219.547764][T26346] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.8623: bad orphan inode 16 [ 1219.598954][T26346] ext4_test_bit(bit=15, block=18) = 1 [ 1219.624047][ T28] audit: type=1400 audit(1219.407:7463): avc: denied { append } for pid=26353 comm="syz.1.8628" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1219.625035][T26346] is_bad_inode(inode)=0 [ 1220.368372][T26346] NEXT_ORPHAN(inode)=0 [ 1220.372273][T26346] max_ino=32 [ 1220.377739][T26224] EXT4-fs (loop6): unmounting filesystem. [ 1220.395584][T26346] i_nlink=2 [ 1220.405493][T26346] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1220.450631][T26346] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 1220.467415][T26346] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 1220.482402][T26370] loop2: detected capacity change from 0 to 128 [ 1220.494340][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1220.507090][T26370] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1220.538995][T18812] EXT4-fs (loop2): unmounting filesystem. [ 1220.658969][T26392] loop2: detected capacity change from 0 to 512 [ 1220.667693][T26392] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1220.977071][T26415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8650'. [ 1221.300890][T26429] 9pnet_fd: Insufficient options for proto=fd [ 1222.136094][T18812] EXT4-fs (loop2): unmounting filesystem. [ 1222.165725][T26432] loop6: detected capacity change from 0 to 1024 [ 1222.200622][T26432] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1222.212730][T26432] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1222.241549][T26432] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 16384 with max blocks 1 with error 28 [ 1222.254191][T26432] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1222.254191][T26432] [ 1222.263797][T26432] EXT4-fs (loop6): Total free blocks count 0 [ 1222.269765][T26432] EXT4-fs (loop6): Free/Dirty block details [ 1222.275505][T26432] EXT4-fs (loop6): free_blocks=68451041280 [ 1222.281236][T26432] EXT4-fs (loop6): dirty_blocks=16 [ 1222.286092][T26432] EXT4-fs (loop6): Block reservation details [ 1222.292068][T26432] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 1222.305913][T26224] EXT4-fs (loop6): unmounting filesystem. [ 1222.574556][T26477] block device autoloading is deprecated and will be removed. [ 1222.594617][T26477] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1222.710661][T26483] loop5: detected capacity change from 0 to 2048 [ 1222.868547][T26483] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1222.894752][T26483] 9pnet_fd: Insufficient options for proto=fd [ 1223.260774][T26490] loop2: detected capacity change from 0 to 2048 [ 1223.388116][T26490] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1223.422491][T18812] EXT4-fs (loop2): unmounting filesystem. [ 1223.548300][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1223.567615][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 1223.567630][ T28] audit: type=1400 audit(1223.607:7504): avc: denied { nlmsg_read } for pid=26499 comm="syz.2.8679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1223.594616][T26500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8679'. [ 1223.648606][ T28] audit: type=1400 audit(1223.687:7505): avc: denied { write } for pid=26509 comm="syz.2.8686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1223.668850][ T28] audit: type=1400 audit(1223.687:7506): avc: denied { create } for pid=26507 comm="syz.5.8685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1223.701915][ T28] audit: type=1326 audit(1223.737:7507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26511 comm="syz.6.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc73f85d19 code=0x7ffc0000 [ 1223.726220][ T28] audit: type=1326 audit(1223.737:7508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26511 comm="syz.6.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc73f85d19 code=0x7ffc0000 [ 1223.762154][ T28] audit: type=1326 audit(1223.737:7509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26511 comm="syz.6.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fcc73f85d19 code=0x7ffc0000 [ 1223.785108][ T28] audit: type=1326 audit(1223.737:7510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26511 comm="syz.6.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc73f85d19 code=0x7ffc0000 [ 1223.810941][ T28] audit: type=1326 audit(1223.737:7511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26511 comm="syz.6.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc73f85d19 code=0x7ffc0000 [ 1223.926265][ T28] audit: type=1400 audit(1223.737:7512): avc: denied { mount } for pid=26513 comm="syz.5.8688" name="/" dev="ramfs" ino=109967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1223.962021][ T28] audit: type=1326 audit(1223.737:7513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26511 comm="syz.6.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fcc73f85d19 code=0x7ffc0000 [ 1224.132286][T26528] 9pnet_fd: Insufficient options for proto=fd [ 1224.543017][T26531] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1224.786604][T26533] tipc: Started in network mode [ 1224.791403][T26533] tipc: Node identity 2d6a0ef2ccd58fc7002e, cluster identity 4711 [ 1224.833419][T26535] loop5: detected capacity change from 0 to 512 [ 1224.849808][T26535] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1224.877497][T26535] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1224.902110][T26535] EXT4-fs (loop5): 1 truncate cleaned up [ 1224.911991][T26535] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1224.947606][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1225.029163][T26550] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8702'. [ 1225.111956][T26559] loop6: detected capacity change from 0 to 512 [ 1225.118766][T26559] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1225.129945][T26559] EXT4-fs (loop6): 1 truncate cleaned up [ 1225.135765][T26559] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1226.152797][T26564] loop5: detected capacity change from 0 to 2048 [ 1226.599940][T26224] EXT4-fs (loop6): unmounting filesystem. [ 1226.609090][T26568] loop2: detected capacity change from 0 to 512 [ 1226.615424][T26568] EXT4-fs: Ignoring removed orlov option [ 1226.621604][T26568] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1226.633410][T26568] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1226.645018][T26564] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1226.661623][T26561] 9pnet_fd: Insufficient options for proto=fd [ 1226.669282][T26568] EXT4-fs (loop2): 1 orphan inode deleted [ 1226.674970][T26568] EXT4-fs (loop2): 1 truncate cleaned up [ 1226.680620][T26568] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1226.693829][T26568] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1226.811526][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1227.008632][T18812] EXT4-fs (loop2): unmounting filesystem. [ 1227.031123][T26586] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8712'. [ 1227.160944][T26594] loop6: detected capacity change from 0 to 2048 [ 1227.283668][T26594] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1227.310298][T26594] 9pnet_fd: Insufficient options for proto=fd [ 1228.011661][T26224] EXT4-fs (loop6): unmounting filesystem. [ 1228.067243][T26628] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8724'. [ 1228.086542][T26633] xt_CT: No such helper "syz0" [ 1240.666243][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 1240.666258][ T28] audit: type=1326 audit(1240.697:7536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26647 comm="syz.0.8726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a47b85d19 code=0x7ffc0000 [ 1240.677460][T26653] loop5: detected capacity change from 0 to 512 [ 1240.695635][ T28] audit: type=1326 audit(1240.697:7537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26647 comm="syz.0.8726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f4a47b85d19 code=0x7ffc0000 [ 1240.724248][ T28] audit: type=1326 audit(1240.697:7538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26647 comm="syz.0.8726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a47b85d19 code=0x7ffc0000 [ 1240.762983][ T28] audit: type=1326 audit(1240.697:7539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26647 comm="syz.0.8726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a47b85d19 code=0x7ffc0000 [ 1240.789612][ T28] audit: type=1326 audit(1240.697:7540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26647 comm="syz.0.8726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a47b85d19 code=0x7ffc0000 [ 1240.808096][T26653] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 1024: comm syz.5.8729: invalid block [ 1240.812771][ T28] audit: type=1326 audit(1240.697:7541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26647 comm="syz.0.8726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a47b85d19 code=0x7ffc0000 [ 1240.890363][T26664] xt_nat: multiple ranges no longer supported [ 1241.146240][ T28] audit: type=1326 audit(1240.697:7542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26647 comm="syz.0.8726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a47b85d19 code=0x7ffc0000 [ 1241.177420][T26653] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.8729: invalid indirect mapped block 1024 (level 0) [ 1241.219060][ T28] audit: type=1326 audit(1240.697:7543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26647 comm="syz.0.8726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a47b85d19 code=0x7ffc0000 [ 1241.277558][ T28] audit: type=1326 audit(1240.697:7544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26647 comm="syz.0.8726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a47b85d19 code=0x7ffc0000 [ 1241.301411][ T28] audit: type=1326 audit(1240.697:7545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26647 comm="syz.0.8726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a47b85d19 code=0x7ffc0000 [ 1241.301721][T26653] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.8729: bg 0: block 35: padding at end of block bitmap is not set [ 1241.341624][T26653] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1241.374772][T26653] EXT4-fs (loop5): 1 truncate cleaned up [ 1241.380600][T26653] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1241.395540][T26653] EXT4-fs (loop5): unmounting filesystem. [ 1241.535112][T26674] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8736'. [ 1241.614988][T26690] tipc: Enabling of bearer rejected, media not registered [ 1241.701587][T26696] loop2: detected capacity change from 0 to 512 [ 1241.715828][T26696] EXT4-fs: Ignoring removed orlov option [ 1241.728263][T26696] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1241.745030][T26696] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1241.758115][T26696] EXT4-fs (loop2): 1 orphan inode deleted [ 1241.763739][T26696] EXT4-fs (loop2): 1 truncate cleaned up [ 1241.769480][T26696] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1241.804574][T26696] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1241.826864][T18812] EXT4-fs (loop2): unmounting filesystem. [ 1241.851622][T26712] loop2: detected capacity change from 0 to 16 [ 1241.858545][T26712] erofs: (device loop2): mounted with root inode @ nid 36. [ 1242.120637][T26713] xt_nat: multiple ranges no longer supported [ 1242.427727][T26716] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8752'. [ 1243.216875][ T46] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1243.253933][T26729] loop2: detected capacity change from 0 to 128 [ 1243.480873][T26739] loop5: detected capacity change from 0 to 512 [ 1243.513253][T26739] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1243.577568][T26743] xt_nat: multiple ranges no longer supported [ 1243.632740][T26739] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1243.700978][T26739] EXT4-fs warning (device loop5): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1243.756374][T26739] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 1243.763690][T26739] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #16: comm syz.5.8760: iget: immutable or append flags not allowed on symlinks [ 1243.781866][T26739] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.8760: couldn't read orphan inode 16 (err -117) [ 1243.798761][T26739] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1243.836645][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1244.183818][T26758] loop5: detected capacity change from 0 to 2048 [ 1246.182390][T26758] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1246.399334][T26749] 9pnet_fd: Insufficient options for proto=fd [ 1246.483888][T26755] device wireguard0 entered promiscuous mode [ 1246.816907][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1246.896988][T26770] loop6: detected capacity change from 0 to 512 [ 1246.924080][T26770] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1247.052419][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 1247.052437][ T28] audit: type=1326 audit(1247.087:7597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26785 comm="syz.1.8774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1247.081404][ T28] audit: type=1326 audit(1247.087:7598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26785 comm="syz.1.8774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1247.112268][ T28] audit: type=1326 audit(1247.087:7599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26785 comm="syz.1.8774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1247.193791][T26792] loop5: detected capacity change from 0 to 2048 [ 1247.208420][ T28] audit: type=1326 audit(1247.087:7600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26785 comm="syz.1.8774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1247.231952][ T28] audit: type=1326 audit(1247.087:7601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26785 comm="syz.1.8774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1247.604165][ T28] audit: type=1326 audit(1247.087:7602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26785 comm="syz.1.8774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1247.715671][T26792] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1247.739437][T26792] 9pnet_fd: Insufficient options for proto=fd [ 1247.923246][T26224] EXT4-fs error (device loop6): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /24/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1247.944167][T26803] xt_nat: multiple ranges no longer supported [ 1247.960056][ T28] audit: type=1326 audit(1247.087:7603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26785 comm="syz.1.8774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1248.001535][ T28] audit: type=1326 audit(1247.087:7604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26785 comm="syz.1.8774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1248.027510][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1248.095405][ T28] audit: type=1326 audit(1247.087:7605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26785 comm="syz.1.8774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1248.109853][T26808] loop2: detected capacity change from 0 to 128 [ 1248.118268][ T28] audit: type=1326 audit(1247.087:7606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26785 comm="syz.1.8774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 1248.171822][T26808] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1248.260326][T26817] loop2: detected capacity change from 0 to 128 [ 1248.297263][T26817] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1248.401073][T26825] loop5: detected capacity change from 0 to 16 [ 1248.407950][T26825] erofs: (device loop5): mounted with root inode @ nid 36. [ 1248.602708][ T47] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1248.614035][T26829] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1249.132737][T18812] EXT4-fs (loop2): unmounting filesystem. [ 1249.314804][T26842] xt_nat: multiple ranges no longer supported [ 1249.755234][T26852] loop5: detected capacity change from 0 to 2048 [ 1249.874436][T26852] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1249.909430][T26852] 9pnet_fd: Insufficient options for proto=fd [ 1250.151706][T26858] syz.2.8797[26858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1250.153009][T26858] syz.2.8797[26858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1250.643497][T26865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8799'. [ 1250.664677][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1250.704971][T26870] loop2: detected capacity change from 0 to 16 [ 1250.713091][T26870] erofs: (device loop2): mounted with root inode @ nid 36. [ 1250.834609][T26872] loop5: detected capacity change from 0 to 2048 [ 1250.863081][T26880] device wireguard0 entered promiscuous mode [ 1250.870232][T26872] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1250.935431][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1250.957008][ T47] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1250.968372][T26885] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1251.183759][T26890] loop5: detected capacity change from 0 to 512 [ 1251.394682][T26890] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1251.717760][T26910] 9pnet_fd: Insufficient options for proto=fd [ 1252.674017][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1252.869381][T26920] block device autoloading is deprecated and will be removed. [ 1252.915015][T26920] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1253.040441][T26922] loop5: detected capacity change from 0 to 512 [ 1253.056521][T26922] EXT4-fs: Ignoring removed orlov option [ 1253.068785][T26922] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1253.110525][T26922] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1253.157686][T26922] EXT4-fs (loop5): 1 orphan inode deleted [ 1253.163246][T26922] EXT4-fs (loop5): 1 truncate cleaned up [ 1253.176673][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 1253.176691][ T28] audit: type=1326 audit(1253.207:7651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26925 comm="syz.1.8820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1253.206530][T26922] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1253.210933][ T28] audit: type=1326 audit(1253.207:7652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26925 comm="syz.1.8820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1253.241108][T26922] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1253.262113][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1253.268169][ T28] audit: type=1326 audit(1253.217:7653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26925 comm="syz.1.8820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1253.335653][T26931] loop5: detected capacity change from 0 to 2048 [ 1253.341617][ T28] audit: type=1326 audit(1253.217:7654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26925 comm="syz.1.8820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1253.366883][T26931] EXT4-fs: Ignoring removed orlov option [ 1253.403031][ T28] audit: type=1326 audit(1253.217:7655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26925 comm="syz.1.8820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1253.443825][T26931] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1253.470057][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1253.476536][ T28] audit: type=1326 audit(1253.217:7656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26925 comm="syz.1.8820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1253.541239][T26943] loop5: detected capacity change from 0 to 256 [ 1253.545369][ T28] audit: type=1326 audit(1253.217:7657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26925 comm="syz.1.8820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1253.590491][ T28] audit: type=1326 audit(1253.217:7658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26925 comm="syz.1.8820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1253.628715][ T28] audit: type=1326 audit(1253.217:7659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26925 comm="syz.1.8820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1253.686610][ T28] audit: type=1326 audit(1253.217:7660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26925 comm="syz.1.8820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1255.286941][T26992] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8844'. [ 1255.519244][T27000] loop2: detected capacity change from 0 to 2048 [ 1255.706659][T27000] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1256.346415][T27004] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1256.477486][T18812] EXT4-fs (loop2): unmounting filesystem. [ 1256.537355][T27013] loop0: detected capacity change from 0 to 2048 [ 1256.646735][T27013] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1256.671859][T25682] EXT4-fs (loop0): unmounting filesystem. [ 1257.224473][T27038] loop0: detected capacity change from 0 to 16 [ 1257.231626][T27038] erofs: (device loop0): mounted with root inode @ nid 36. [ 1258.049513][T27047] loop5: detected capacity change from 0 to 2048 [ 1258.499075][ T47] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1258.609372][T27047] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1259.143853][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1259.244696][T27065] loop5: detected capacity change from 0 to 512 [ 1259.253929][T27065] EXT4-fs: Ignoring removed bh option [ 1259.259485][T27065] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1259.294008][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 1259.294024][ T28] audit: type=1400 audit(1259.327:7675): avc: denied { create } for pid=27067 comm="syz.2.8869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1259.320398][T27065] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1259.355435][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1259.365410][ T28] audit: type=1400 audit(1259.367:7676): avc: denied { setopt } for pid=27067 comm="syz.2.8869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1260.425823][T27088] loop5: detected capacity change from 0 to 2048 [ 1260.504391][T27091] loop0: detected capacity change from 0 to 512 [ 1260.517036][T27088] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1260.559195][T27091] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1260.581647][ T28] audit: type=1326 audit(1260.617:7677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27100 comm="syz.1.8880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1260.604539][ T28] audit: type=1326 audit(1260.617:7678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27100 comm="syz.1.8880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1260.627420][ T28] audit: type=1326 audit(1260.617:7679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27100 comm="syz.1.8880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1260.650941][ T28] audit: type=1326 audit(1260.617:7680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27100 comm="syz.1.8880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1260.673839][ T28] audit: type=1326 audit(1260.667:7681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27100 comm="syz.1.8880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1260.696842][ T28] audit: type=1326 audit(1260.677:7682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27100 comm="syz.1.8880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1260.720553][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1260.724967][ T28] audit: type=1326 audit(1260.677:7683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27100 comm="syz.1.8880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1260.749186][ T28] audit: type=1326 audit(1260.677:7684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27100 comm="syz.1.8880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9660785d19 code=0x7ffc0000 [ 1260.781519][T25682] EXT4-fs (loop0): unmounting filesystem. [ 1260.878326][T27112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27112 comm=syz.5.8883 [ 1260.898461][T27112] netlink: 'syz.5.8883': attribute type 7 has an invalid length. [ 1260.916389][T27112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8883'. [ 1260.984102][T27118] xt_nat: multiple ranges no longer supported [ 1261.367240][T27125] loop5: detected capacity change from 0 to 2048 [ 1261.391968][T27125] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1261.432102][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1261.526734][T27136] loop5: detected capacity change from 0 to 512 [ 1261.537894][T27136] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1261.917180][T27147] loop2: detected capacity change from 0 to 512 [ 1261.923863][T27147] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1261.932439][T27147] EXT4-fs (loop2): invalid journal inode [ 1261.937952][T27147] EXT4-fs (loop2): can't get journal size [ 1261.944617][T27147] EXT4-fs (loop2): 1 truncate cleaned up [ 1261.950127][T27147] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1262.028959][T27149] EXT4-fs (loop2): unmounting filesystem. [ 1262.035018][ T43] tipc: Left network mode [ 1262.244308][T27155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.251857][T27155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.259204][T27155] device bridge_slave_0 entered promiscuous mode [ 1262.267224][T27155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.274117][T27155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.281424][T27155] device bridge_slave_1 entered promiscuous mode [ 1262.348407][T27155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.355275][T27155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.362383][T27155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.369163][T27155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.378339][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1262.408906][T15118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1262.417079][T15118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.424300][T15118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.440710][T15118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1262.449065][T15118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.455926][T15118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.470410][T15118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1262.478399][T27160] loop5: detected capacity change from 0 to 2048 [ 1262.478545][T15118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.491431][T15118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.507959][T15118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1262.532105][T15118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1262.536655][T27160] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1262.580602][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1262.587085][T15118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1262.610159][T27155] device veth0_vlan entered promiscuous mode [ 1262.616749][T15118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1262.627236][T27170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8904'. [ 1262.656834][ T43] device bridge_slave_1 left promiscuous mode [ 1262.662791][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.682351][ T43] device bridge_slave_0 left promiscuous mode [ 1262.693747][T27176] loop5: detected capacity change from 0 to 1024 [ 1262.703558][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.768478][T27176] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1262.781222][T27176] EXT4-fs error (device loop5): ext4_get_journal_inode:5721: inode #32: comm syz.5.8907: iget: special inode unallocated [ 1262.793974][T27176] EXT4-fs (loop5): no journal found [ 1262.799119][T27176] EXT4-fs (loop5): can't get journal size [ 1262.805741][T27176] EXT4-fs error (device loop5): ext4_protect_reserved_inode:160: inode #32: comm syz.5.8907: iget: special inode unallocated [ 1262.818745][T27176] EXT4-fs (loop5): failed to initialize system zone (-117) [ 1262.825940][T27176] EXT4-fs (loop5): mount failed [ 1262.879788][T15118] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1262.892721][T27184] loop5: detected capacity change from 0 to 512 [ 1262.896548][T15118] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1262.910650][T27155] device veth1_macvtap entered promiscuous mode [ 1262.921506][T15118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1263.037199][T15118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1263.049645][T27187] tipc: Enabling of bearer rejected, already enabled [ 1263.065147][T15118] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1263.126828][T27184] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1263.287272][T15118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1263.797218][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1263.869862][T26224] EXT4-fs (loop6): unmounting filesystem. [ 1264.015178][T27214] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8918'. [ 1264.016793][T27213] loop5: detected capacity change from 0 to 128 [ 1264.035519][T27213] FAT-fs (loop5): bogus number of reserved sectors [ 1264.073871][T27202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.145150][T27213] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1264.155837][T27202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.194548][T27202] device bridge_slave_0 entered promiscuous mode [ 1264.203442][T27213] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1264.255882][T27202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.287292][T27202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.295040][T27202] device bridge_slave_1 entered promiscuous mode [ 1264.378098][T15062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1264.385453][T15062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1264.394502][T15062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1264.402914][T15062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1264.411109][T15062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.417988][T15062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.427965][T15062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1264.436537][T15062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1264.444713][T15062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1264.452794][T15062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.459661][T15062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1264.474785][T15062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1264.487389][T15062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1264.500864][T15062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1264.513879][T15062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1264.522699][T15062] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1264.530147][T15062] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1264.539136][T27202] device veth0_vlan entered promiscuous mode [ 1264.555124][T15062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1264.555245][T27224] loop0: detected capacity change from 0 to 512 [ 1264.565045][T27202] device veth1_macvtap entered promiscuous mode [ 1264.578104][T27224] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1264.589930][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1264.598427][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1264.691290][T27233] loop8: detected capacity change from 0 to 16 [ 1264.697875][T27233] erofs: (device loop8): mounted with root inode @ nid 36. [ 1264.707820][ T43] device bridge_slave_1 left promiscuous mode [ 1264.713954][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.721611][ T43] device bridge_slave_0 left promiscuous mode [ 1264.727789][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.736073][ T43] device veth1_macvtap left promiscuous mode [ 1264.742097][ T43] device veth0_vlan left promiscuous mode [ 1264.882650][ T47] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1264.894141][T27239] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1265.063951][T27243] loop5: detected capacity change from 0 to 512 [ 1265.070716][T27243] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1265.081286][T27245] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8928'. [ 1265.083100][T27243] EXT4-fs (loop5): 1 truncate cleaned up [ 1265.097459][T27243] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1265.110741][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 1265.110765][ T28] audit: type=1400 audit(1265.147:7723): avc: denied { mounton } for pid=27242 comm="syz.5.8927" path="/224/file2/file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1265.184236][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1265.221958][ T28] audit: type=1400 audit(1265.257:7724): avc: denied { read write } for pid=24078 comm="syz-executor" name="loop5" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1265.246682][ T28] audit: type=1400 audit(1265.257:7725): avc: denied { open } for pid=24078 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1265.270817][ T28] audit: type=1400 audit(1265.257:7726): avc: denied { ioctl } for pid=24078 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1265.306637][ T28] audit: type=1400 audit(1265.257:7727): avc: denied { bpf } for pid=27260 comm="syz.5.8935" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1265.332179][ T28] audit: type=1400 audit(1265.257:7728): avc: denied { map_create } for pid=27260 comm="syz.5.8935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1265.356968][ T28] audit: type=1400 audit(1265.257:7729): avc: denied { map_read map_write } for pid=27260 comm="syz.5.8935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1265.376734][ T28] audit: type=1400 audit(1265.257:7730): avc: denied { prog_load } for pid=27260 comm="syz.5.8935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1265.403368][ T28] audit: type=1400 audit(1265.257:7731): avc: denied { perfmon } for pid=27260 comm="syz.5.8935" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1265.405218][T25682] EXT4-fs (loop0): unmounting filesystem. [ 1265.424196][ T28] audit: type=1400 audit(1265.257:7732): avc: denied { prog_run } for pid=27260 comm="syz.5.8935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1265.579548][T27279] loop5: detected capacity change from 0 to 512 [ 1265.591761][T27279] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1265.604278][T27279] EXT4-fs (loop5): 1 truncate cleaned up [ 1265.616129][T27279] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1265.638372][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1265.752055][T27301] loop5: detected capacity change from 0 to 512 [ 1265.767684][T27301] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1265.985723][T27315] loop7: detected capacity change from 0 to 512 [ 1265.992636][T27315] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1266.004096][T27315] EXT4-fs (loop7): 1 truncate cleaned up [ 1266.009765][T27315] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1266.026836][T27155] EXT4-fs (loop7): unmounting filesystem. [ 1266.196210][T27321] SELinux: Context Ü is not valid (left unmapped). [ 1266.591005][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1266.817648][T27351] loop5: detected capacity change from 0 to 512 [ 1266.827198][T27351] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1266.933935][T27351] EXT4-fs (loop5): 1 truncate cleaned up [ 1266.939494][T27351] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1267.989169][T27366] loop8: detected capacity change from 0 to 512 [ 1268.942144][T27366] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1268.952596][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1268.964000][T27366] EXT4-fs (loop8): 1 truncate cleaned up [ 1268.969533][T27366] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1269.124255][T27202] EXT4-fs (loop8): unmounting filesystem. [ 1269.317539][T27395] loop5: detected capacity change from 0 to 512 [ 1269.327185][T27395] EXT4-fs: Ignoring removed i_version option [ 1269.333045][T27395] EXT4-fs: Ignoring removed mblk_io_submit option [ 1269.339683][T27395] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1269.351250][T27395] EXT4-fs (loop5): 1 truncate cleaned up [ 1269.356808][T27395] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1269.571714][T27399] bridge0: port 3(vlan2) entered blocking state [ 1269.591086][T27399] bridge0: port 3(vlan2) entered disabled state [ 1270.053790][T27405] netlink: 96 bytes leftover after parsing attributes in process `syz.8.8986'. [ 1270.268246][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1270.526776][T27413] loop5: detected capacity change from 0 to 256 [ 1270.746375][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 1270.746416][ T28] audit: type=1400 audit(1526.577:7813): avc: denied { mount } for pid=27408 comm="syz.5.8988" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1270.957926][T27415] loop0: detected capacity change from 0 to 512 [ 1271.503211][ T28] audit: type=1400 audit(1527.537:7814): avc: denied { unmount } for pid=24078 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1271.609665][T27415] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1271.728363][T27429] loop5: detected capacity change from 0 to 512 [ 1271.738180][T27429] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1271.834225][T27429] EXT4-fs (loop5): 1 truncate cleaned up [ 1271.839802][T27429] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1271.918633][ T28] audit: type=1400 audit(1527.957:7815): avc: denied { read write } for pid=27406 comm="syz.8.8987" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1271.943507][T25682] EXT4-fs (loop0): unmounting filesystem. [ 1271.989341][T27433] loop0: detected capacity change from 0 to 512 [ 1271.995785][ T28] audit: type=1400 audit(1527.987:7816): avc: denied { open } for pid=27406 comm="syz.8.8987" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1272.035968][T27433] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1272.062688][T27433] EXT4-fs (loop0): 1 truncate cleaned up [ 1272.075565][T27433] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1272.099301][T25682] EXT4-fs (loop0): unmounting filesystem. [ 1272.960794][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1273.010299][T27455] loop0: detected capacity change from 0 to 512 [ 1273.086926][T27455] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1273.109015][T27455] overlayfs: missing 'lowerdir' [ 1273.113847][ T28] audit: type=1400 audit(1529.147:7817): avc: denied { mounton } for pid=27454 comm="syz.0.8999" path="/128/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1273.301664][T27469] overlayfs: failed to resolve './file0': -2 [ 1273.345660][ T28] audit: type=1400 audit(1529.337:7818): avc: denied { unlink } for pid=27458 comm="syz.1.9000" name="#113" dev="tmpfs" ino=3101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1274.507138][ T28] audit: type=1400 audit(1530.547:7819): avc: denied { create } for pid=27474 comm="syz.1.9004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1274.582510][T27477] loop5: detected capacity change from 0 to 256 [ 1274.592380][T27478] loop7: detected capacity change from 0 to 512 [ 1275.630764][T27482] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1275.647871][ T28] audit: type=1400 audit(1531.397:7820): avc: denied { create } for pid=27454 comm="syz.0.8999" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1275.709954][T27478] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1275.728611][T25682] EXT4-fs (loop0): unmounting filesystem. [ 1275.743704][ T28] audit: type=1400 audit(1531.777:7821): avc: denied { create } for pid=27492 comm="syz.5.9010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1275.768386][ T28] audit: type=1400 audit(1531.797:7822): avc: denied { ioctl } for pid=27492 comm="syz.5.9010" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=112347 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1275.794169][ T28] audit: type=1400 audit(1531.797:7823): avc: denied { read } for pid=27492 comm="syz.5.9010" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1275.825823][ T28] audit: type=1400 audit(1531.797:7824): avc: denied { open } for pid=27492 comm="syz.5.9010" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1275.864339][ T28] audit: type=1400 audit(1531.797:7825): avc: denied { ioctl } for pid=27492 comm="syz.5.9010" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1275.987532][T27503] loop0: detected capacity change from 0 to 512 [ 1276.197403][T27503] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1276.292044][T27503] EXT4-fs (loop0): 1 truncate cleaned up [ 1276.297593][T27503] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1276.360235][T27155] EXT4-fs (loop7): unmounting filesystem. [ 1276.623232][T25682] EXT4-fs (loop0): unmounting filesystem. [ 1277.059281][T27524] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1277.546802][T27532] loop8: detected capacity change from 0 to 512 [ 1277.736775][T27532] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1277.785242][T27532] EXT4-fs (loop8): 1 truncate cleaned up [ 1277.790795][T27532] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1277.857654][ T28] audit: type=1400 audit(1533.887:7826): avc: denied { create } for pid=27544 comm="syz.1.9023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1277.919082][ T28] audit: type=1400 audit(1533.957:7827): avc: denied { read write } for pid=27544 comm="syz.1.9023" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1277.945160][ T28] audit: type=1400 audit(1533.957:7828): avc: denied { open } for pid=27544 comm="syz.1.9023" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1278.121450][T27552] bridge0: port 3(vlan2) entered blocking state [ 1278.127616][T27552] bridge0: port 3(vlan2) entered disabled state [ 1278.250774][T27202] EXT4-fs (loop8): unmounting filesystem. [ 1278.282594][T27553] bridge0: port 3(vlan2) entered blocking state [ 1278.355887][T27553] bridge0: port 3(vlan2) entered disabled state [ 1278.612716][T27562] loop5: detected capacity change from 0 to 512 [ 1278.628942][T27562] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1278.889169][T27576] loop7: detected capacity change from 0 to 512 [ 1278.899663][T27576] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1278.970746][T27576] EXT4-fs (loop7): 1 truncate cleaned up [ 1278.976343][T27576] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1279.503632][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1279.664871][T27155] EXT4-fs (loop7): unmounting filesystem. [ 1280.444134][T27594] bridge0: port 3(vlan2) entered blocking state [ 1280.462887][T27594] bridge0: port 3(vlan2) entered disabled state [ 1280.643795][T27601] loop8: detected capacity change from 0 to 512 [ 1280.747449][T27601] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1281.035865][T27202] EXT4-fs (loop8): unmounting filesystem. [ 1281.055967][T27614] loop8: detected capacity change from 0 to 16 [ 1281.063117][T27614] erofs: (device loop8): mounted with root inode @ nid 36. [ 1281.109198][T27603] syz.5.9034 (27603) used greatest stack depth: 19224 bytes left [ 1281.321036][ T47] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1281.332654][T27620] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1281.723595][ T28] audit: type=1400 audit(1537.737:7829): avc: denied { create } for pid=27627 comm="syz.1.9043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1282.263790][T27633] loop8: detected capacity change from 0 to 512 [ 1282.493147][T27638] loop5: detected capacity change from 0 to 512 [ 1282.681595][T27638] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1282.847682][T27638] EXT4-fs (loop5): 1 truncate cleaned up [ 1282.853219][T27638] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1282.907006][T27633] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1283.516328][T27651] loop7: detected capacity change from 0 to 512 [ 1283.523549][T27651] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1283.526008][T27647] loop0: detected capacity change from 0 to 256 [ 1283.541542][T27651] EXT4-fs (loop7): 1 truncate cleaned up [ 1283.547064][T27651] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1283.576090][T27202] EXT4-fs (loop8): unmounting filesystem. [ 1283.584633][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1283.782812][T27662] loop8: detected capacity change from 0 to 512 [ 1283.847041][T27662] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1283.870292][T27155] EXT4-fs (loop7): unmounting filesystem. [ 1283.958986][T27662] EXT4-fs (loop8): 1 truncate cleaned up [ 1283.964494][T27662] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1284.236498][T27673] loop7: detected capacity change from 0 to 512 [ 1284.306754][T27673] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1284.501356][T27202] EXT4-fs (loop8): unmounting filesystem. [ 1284.507744][T27673] EXT4-fs (loop7): 1 truncate cleaned up [ 1284.513234][T27673] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1284.570639][T27676] loop8: detected capacity change from 0 to 16 [ 1284.577209][T27676] erofs: (device loop8): mounted with root inode @ nid 36. [ 1284.766122][ T47] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1284.781018][T27681] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1284.932419][T27155] EXT4-fs (loop7): unmounting filesystem. [ 1284.973378][T27683] loop7: detected capacity change from 0 to 512 [ 1285.007439][T27683] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1285.037223][T27692] loop5: detected capacity change from 0 to 512 [ 1285.044151][T27683] overlayfs: missing 'lowerdir' [ 1285.050164][T27692] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1285.066456][T27692] EXT4-fs (loop5): 1 truncate cleaned up [ 1285.072058][T27692] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1285.090207][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1285.146857][T27697] loop5: detected capacity change from 0 to 512 [ 1285.158086][T27697] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1286.464474][T27155] EXT4-fs (loop7): unmounting filesystem. [ 1286.477847][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1286.497276][T27712] loop8: detected capacity change from 0 to 256 [ 1287.053319][T27733] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1287.471722][T27742] loop8: detected capacity change from 0 to 16 [ 1287.478308][T27742] erofs: (device loop8): mounted with root inode @ nid 36. [ 1287.582115][T27744] loop7: detected capacity change from 0 to 2048 [ 1287.846469][T27744] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1288.545533][ T47] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1288.560711][T27751] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1288.749571][T27155] EXT4-fs (loop7): unmounting filesystem. [ 1288.838536][T27761] loop7: detected capacity change from 0 to 512 [ 1288.851533][T27764] loop5: detected capacity change from 0 to 512 [ 1288.904187][T27761] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1288.918635][T27764] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1288.944464][T27761] overlayfs: missing 'lowerdir' [ 1289.062745][T27770] overlayfs: failed to resolve './file1': -2 [ 1289.304988][ T28] audit: type=1400 audit(1801.225:7830): avc: denied { mounton } for pid=27760 comm="syz.7.9076" path="/39/file0/bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1289.412088][ T28] audit: type=1400 audit(1801.225:7831): avc: denied { write } for pid=27760 comm="syz.7.9076" name="bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1289.445357][ T28] audit: type=1400 audit(1801.225:7832): avc: denied { add_name } for pid=27760 comm="syz.7.9076" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1289.465327][ T28] audit: type=1400 audit(1801.225:7833): avc: denied { setattr } for pid=27760 comm="syz.7.9076" name="work" dev="loop7" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1289.488244][ T28] audit: type=1400 audit(1801.235:7834): avc: denied { write open } for pid=27760 comm="syz.7.9076" path=2F202864656C6574656429 dev="loop7" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1289.534891][ T28] audit: type=1400 audit(1801.235:7835): avc: denied { remove_name } for pid=27760 comm="syz.7.9076" name="#115" dev="loop7" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1289.828426][T27783] overlayfs: failed to resolve './file0': -2 [ 1289.911469][ T28] audit: type=1400 audit(1801.235:7836): avc: denied { rename } for pid=27760 comm="syz.7.9076" name="#115" dev="loop7" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1289.973124][ T28] audit: type=1400 audit(1801.235:7837): avc: denied { unlink } for pid=27760 comm="syz.7.9076" name="#115" dev="loop7" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1290.005187][T27155] EXT4-fs (loop7): unmounting filesystem. [ 1290.019038][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1290.024720][ T28] audit: type=1400 audit(1801.235:7838): avc: denied { unlink } for pid=27760 comm="syz.7.9076" name="#116" dev="loop7" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1290.054574][ T28] audit: type=1400 audit(1801.925:7839): avc: denied { rmdir } for pid=27155 comm="syz-executor" name="lost+found" dev="loop7" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1291.120250][T27798] bridge0: port 3(vlan2) entered blocking state [ 1291.126413][T27798] bridge0: port 3(vlan2) entered disabled state [ 1291.925743][T27801] loop5: detected capacity change from 0 to 2048 [ 1291.937669][T27801] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1292.033899][T27807] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1292.181284][T27801] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1292.396094][T27813] loop8: detected capacity change from 0 to 512 [ 1292.435431][T27813] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1292.466687][T27813] overlayfs: missing 'lowerdir' [ 1292.609662][T27820] loop0: detected capacity change from 0 to 2048 [ 1292.819906][T27820] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1292.924175][T24078] EXT4-fs (loop5): unmounting filesystem. [ 1293.283948][T27813] overlayfs: failed to resolve './file1': -2 [ 1293.361497][T27202] EXT4-fs (loop8): unmounting filesystem. [ 1293.479160][T25682] EXT4-fs (loop0): unmounting filesystem. [ 1293.487497][T27817] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.496754][T27821] ------------[ cut here ]------------ [ 1293.498480][T27817] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.502023][T27821] kernel BUG at fs/buffer.c:2714! [ 1293.509663][T27817] device bridge_slave_0 entered promiscuous mode [ 1293.521798][T27817] bridge0: port 2(bridge_slave_1) entered blocking state SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1293.529342][T27817] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.532098][T27833] loop7: detected capacity change from 0 to 512 [ 1293.542886][T27821] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1293.546713][T27817] device bridge_slave_1 entered promiscuous mode [ 1293.548773][T27821] CPU: 1 PID: 27821 Comm: kmmpd-loop0 Not tainted 6.1.115-syzkaller-00017-g22b7ded8b55b #0 [ 1293.564917][T27821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1293.574814][T27821] RIP: 0010:submit_bh_wbc+0x4cd/0x4f0 [ 1293.580020][T27821] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 e4 ce e6 ff e9 b0 fe ff ff e8 da 5c 9f ff 0f 0b e8 d3 5c 9f ff <0f> 0b e8 cc 5c 9f ff 0f 0b e8 c5 5c 9f ff 0f 0b e8 be 5c 9f ff 0f [ 1293.599462][T27821] RSP: 0018:ffffc9000079fc20 EFLAGS: 00010293 [ 1293.605364][T27821] RAX: ffffffff81d629dd RBX: 0000000000000000 RCX: ffff88812ead9440 [ 1293.613265][T27821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1293.621076][T27821] RBP: ffffc9000079fc70 R08: ffffffff81d625b0 R09: ffffed10200e3c94 [ 1293.628881][T27821] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 1293.636696][T27821] R13: 1ffff110200e3c93 R14: ffff88810071e498 R15: 0000000000003801 [ 1293.644513][T27821] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1293.653283][T27821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1293.659692][T27821] CR2: 00007ffd6ad4fff8 CR3: 000000013022d000 CR4: 00000000003506a0 [ 1293.667511][T27821] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1293.675318][T27821] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1293.683565][T27821] Call Trace: [ 1293.686694][T27821] [ 1293.689463][T27821] ? __die_body+0x62/0xb0 [ 1293.693628][T27821] ? die+0x88/0xb0 [ 1293.697188][T27821] ? do_trap+0x103/0x330 [ 1293.701265][T27821] ? submit_bh_wbc+0x4cd/0x4f0 [ 1293.705865][T27821] ? handle_invalid_op+0x95/0xc0 [ 1293.710639][T27821] ? submit_bh_wbc+0x4cd/0x4f0 [ 1293.715239][T27821] ? exc_invalid_op+0x32/0x50 [ 1293.719755][T27821] ? asm_exc_invalid_op+0x1b/0x20 [ 1293.724619][T27821] ? submit_bh_wbc+0xa0/0x4f0 [ 1293.729125][T27821] ? submit_bh_wbc+0x4cd/0x4f0 [ 1293.733726][T27821] ? submit_bh_wbc+0x4cd/0x4f0 [ 1293.738331][T27821] ? __kasan_check_read+0x11/0x20 [ 1293.743190][T27821] submit_bh+0x1d/0x30 [ 1293.747093][T27821] write_mmp_block_thawed+0x3a0/0x570 [ 1293.752303][T27821] ? read_mmp_block+0x7d0/0x7d0 [ 1293.756987][T27821] ? update_process_times+0x1b0/0x1b0 [ 1293.762198][T27821] write_mmp_block+0x12b/0x2a0 [ 1293.766802][T27821] kmmpd+0x263/0xa10 [ 1293.770529][T27821] ? write_mmp_block_thawed+0x570/0x570 [ 1293.775909][T27821] ? __kthread_parkme+0x12d/0x180 [ 1293.780769][T27821] kthread+0x26d/0x300 [ 1293.784676][T27821] ? write_mmp_block_thawed+0x570/0x570 [ 1293.790057][T27821] ? kthread_blkcg+0xd0/0xd0 [ 1293.794481][T27821] ret_from_fork+0x1f/0x30 [ 1293.798740][T27821] [ 1293.801598][T27821] Modules linked in: [ 1293.835390][T27821] ---[ end trace 0000000000000000 ]--- [ 1293.840747][T27821] RIP: 0010:submit_bh_wbc+0x4cd/0x4f0 [ 1293.841067][T27833] EXT4-fs warning (device loop7): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop7. [ 1293.845987][T27821] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 e4 ce e6 ff e9 b0 fe ff ff e8 da 5c 9f ff 0f 0b e8 d3 5c 9f ff <0f> 0b e8 cc 5c 9f ff 0f 0b e8 c5 5c 9f ff 0f 0b e8 be 5c 9f ff 0f [ 1293.876703][T27821] RSP: 0018:ffffc9000079fc20 EFLAGS: 00010293 [ 1293.882609][T27821] RAX: ffffffff81d629dd RBX: 0000000000000000 RCX: ffff88812ead9440 [ 1293.906179][T27821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1293.913994][T27821] RBP: ffffc9000079fc70 R08: ffffffff81d625b0 R09: ffffed10200e3c94 [ 1293.935818][T27821] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 1293.943886][T27821] R13: 1ffff110200e3c93 R14: ffff88810071e498 R15: 0000000000003801 [ 1293.964715][T27821] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1293.987488][T27821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1293.993914][T27821] CR2: 00007ffd6ad4fff8 CR3: 000000000700f000 CR4: 00000000003506a0 [ 1294.013934][T27821] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1294.025047][T27821] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1294.032901][T27821] Kernel panic - not syncing: Fatal exception [ 1294.038881][T27821] Kernel Offset: disabled [ 1294.042916][T27821] Rebooting in 86400 seconds..