last executing test programs: 4m52.989557442s ago: executing program 32 (id=227): rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x15, &(0x7f0000000000)={0x17, 0x3, 0x80}) tkill(r1, 0x3c) ppoll(0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)={[0x1]}, 0x8) 4m38.1214802s ago: executing program 33 (id=549): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_VMA(0x3d, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x1) 4m33.755841614s ago: executing program 34 (id=613): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) dup2(r1, r0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x8, 0x4, 0x9, 0xa1, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x7ff, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8c, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x116dad3, 0x0, 0x4, 0x2, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 4m24.285392727s ago: executing program 35 (id=770): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) 4m24.184300123s ago: executing program 36 (id=774): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r1, r3, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[], 0x0) 4m22.165448242s ago: executing program 37 (id=797): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000540)={[{@shortname_winnt}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_win95}, {@shortname_lower}, {@fat=@debug}, {@uni_xlate}, {@fat=@discard}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_lower}]}, 0x1, 0x21a, &(0x7f0000000180)="$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") ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@arm64={0x10, 0x2, 0xff, '\x00', 0x400009}) 4m13.984167019s ago: executing program 38 (id=957): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66, 0x0, 0x30}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f0000001480)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, 0x0, 0x0, 0x12000000, 0x0, 0x0) 4m8.735105515s ago: executing program 39 (id=1047): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) 4m7.104240051s ago: executing program 40 (id=1074): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000001c0), 0x4) 4m6.205306213s ago: executing program 41 (id=1090): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f00000000c0)=0x7f, 0x4) 3m38.279659243s ago: executing program 42 (id=1626): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000480)={0x0, 0x1, 0xffffff30}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/18, 0x12, 0x0, 0x24}, @fda={0x66646185, 0x0, 0x0, 0x15}, @fda={0x66646185, 0x9, 0xfffffffffffffffe, 0x31}}, &(0x7f0000000240)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 3m38.148339621s ago: executing program 43 (id=1629): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/36, 0x24}, 0x3}], 0x1, 0x40012021, 0x0) 3m12.165616328s ago: executing program 44 (id=2159): timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 2m56.474941606s ago: executing program 45 (id=2445): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x9da2) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m52.168251948s ago: executing program 46 (id=2512): r0 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80803, 0x83) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xae}, {0x4}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1, 0x4000, 0x0, 0x0, 0x0, 0x9}}, 0xe8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d"], 0x4c}}, 0x0) 2m50.794150588s ago: executing program 47 (id=2550): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x800080, &(0x7f00000000c0)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@errors_remount}]}, 0x1, 0x473, &(0x7f0000000900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f0000000300), &(0x7f0000000400)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) 2m46.449157013s ago: executing program 48 (id=2646): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x2}, 0x8) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m44.643815978s ago: executing program 3 (id=2676): keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='id:cb2e') syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f0000000300)={[{@errors_continue}, {}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}]}, 0x2, 0x574, &(0x7f0000000600)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) 2m44.309749178s ago: executing program 3 (id=2682): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000fc0)={[{@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7f, 0x1, 0xc, 0x0, 0x800, 0x2, 0x10, 0xf7, 0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x8, '\x00', 0x5}) stat(0x0, 0x0) 2m43.959397818s ago: executing program 3 (id=2687): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) read(r1, &(0x7f0000002080)=""/190, 0xbe) sendfile(r0, r1, 0x0, 0x7ffff004) 2m43.951441709s ago: executing program 49 (id=2687): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) read(r1, &(0x7f0000002080)=""/190, 0xbe) sendfile(r0, r1, 0x0, 0x7ffff004) 2m41.064442397s ago: executing program 50 (id=2726): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100000000000000010200850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x45) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xc0) close(r1) r2 = epoll_create1(0x0) r3 = socket$unix(0x1, 0x1, 0x0) socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r3, 0x1, 0x2e, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xa0028000}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 2m15.717640711s ago: executing program 51 (id=3095): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) gettid() fcntl$lock(0xffffffffffffffff, 0x26, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000022c0)={@void, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x3, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x15, 0x5c, 0x65, 0x0, 0x82, 0x11, 0x0, @empty, @multicast1}, {0x4e22, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "562d9ba90683726398023d5cc4caf4390083568d7c99bfb9", "eb835fb6e3cdca63bc7e0e60270408835fefb6a4d7ea9378cfc98b07790300"}}}}}}}, 0x72) 2m1.039760989s ago: executing program 52 (id=3347): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 1m59.072339605s ago: executing program 1 (id=3376): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x6004, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x3, 0x1, [0xc5f0, 0x2, 0x40, 0x0, 0x7], [0x9, 0x7fffffff, 0x2e, 0x8, 0x1, 0x4f5b, 0x8, 0x3, 0x3, 0x3, 0x0, 0x5, 0xe5f2, 0xfffffffffffffffb, 0x4, 0xcb, 0x5, 0x7, 0x7, 0x6, 0x450000, 0xffffffffffffffff, 0x44, 0x3, 0x9, 0x3, 0x6, 0x9, 0x0, 0x7, 0x0, 0x400, 0x3, 0x7, 0x9, 0x8, 0x0, 0x3, 0x2, 0xbbf4, 0xfffffffffffffffa, 0x1, 0x7ff, 0x7, 0x5426313a, 0x3, 0x6, 0x5a9, 0x7, 0x5, 0x100, 0x1, 0x0, 0x9, 0xfe61, 0x8, 0x8001, 0x7d, 0xfffffffffffff800, 0x6, 0x0, 0xae, 0x6, 0xfffffffffffffff9, 0x0, 0x5ad, 0x1, 0x8, 0x8, 0x9aee, 0x6, 0x996, 0x5, 0x8, 0x8000, 0x3, 0x39d, 0x3ff, 0x9, 0xffff, 0x2, 0x40, 0xfffffffffffffff9, 0xff, 0x1, 0x3, 0x800, 0x9, 0xfff, 0x6, 0x81, 0x4a, 0x4, 0x8, 0xe18d, 0x10001, 0x1, 0xbb1d, 0xa92e, 0x8, 0x1, 0x2, 0xc5f1, 0x3bb, 0x4, 0x9f, 0xa, 0xb50, 0x4, 0x1000, 0x7, 0x3ff, 0x8, 0xfffffffffffffeff, 0x44, 0x5, 0x200, 0x6, 0xd0, 0x10, 0x1000]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 1m59.058993005s ago: executing program 1 (id=3377): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1m59.014854958s ago: executing program 1 (id=3379): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m57.79208143s ago: executing program 1 (id=3383): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4fd, &(0x7f0000000d80)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) creat(0x0, 0x12) 1m56.574854091s ago: executing program 1 (id=3389): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000), 0x4) r2 = dup3(r0, r1, 0x0) sendmsg$tipc(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 1m56.310020716s ago: executing program 1 (id=3391): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) setresgid(0x0, 0xffffffffffffffff, 0xee00) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x40806685, 0x0) 1m56.24445171s ago: executing program 53 (id=3391): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) setresgid(0x0, 0xffffffffffffffff, 0xee00) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x40806685, 0x0) 1m51.27980152s ago: executing program 9 (id=3461): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents64(r2, &(0x7f0000000100)=""/134, 0x86) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 1m51.156147118s ago: executing program 9 (id=3469): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x10800, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = eventfd2(0x0, 0x800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x8440, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) close(r0) 1m51.016584636s ago: executing program 9 (id=3475): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x87}}, @call={0x85, 0x0, 0x0, 0xa0}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1m50.993902987s ago: executing program 9 (id=3476): writev(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m50.930731181s ago: executing program 9 (id=3477): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="0f8a0000008066f30fb3186626660f826e376464f30f11745a2f660fc73166edf20f2218ea000000807e00650f1af6653ef081580000000000", 0x39}], 0x1, 0x25, 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x2710, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_io_uring_setup(0x450d, &(0x7f00000000c0)={0x0, 0xa40d, 0x80, 0x1, 0x2e1}, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m50.900688313s ago: executing program 9 (id=3479): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x8800) 1m50.850717915s ago: executing program 54 (id=3479): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x8800) 1m49.784506017s ago: executing program 3 (id=3481): syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8100, &(0x7f0000000200)={0x87, 0x1, 0x80000}, 0x20) 1m48.89489555s ago: executing program 3 (id=3515): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x40200) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m48.89457531s ago: executing program 3 (id=3516): syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000240)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x1) 1m48.792249406s ago: executing program 55 (id=3516): syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000240)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x1) 1m44.61623708s ago: executing program 5 (id=3575): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x1c) ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x42, 0x3}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2000080}, 0x4090) 1m44.596204791s ago: executing program 5 (id=3576): socket(0x1d, 0x7, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000010000000000000000000000180100002020692400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000069bf0000850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r3}, 0x3c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_emit_ethernet(0xd48, &(0x7f0000003140)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x6, 0xd3a, 0x66, 0x0, 0x9, 0x2, 0x0, @remote, @remote}, {0x16, 0xb3, 0x0, @private=0xa010101, "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"}}}}}, 0x0) 1m44.570857693s ago: executing program 5 (id=3577): r0 = socket$inet(0x2, 0x3, 0x100) bind$inet(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m44.534616395s ago: executing program 5 (id=3578): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x0, &(0x7f0000000080)={[{@auto_da_alloc}, {@auto_da_alloc}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x29) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) 1m44.360084845s ago: executing program 5 (id=3579): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r1, 0x400, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x25) creat(&(0x7f00000001c0)='./file0\x00', 0xecf86c37d53049ce) 1m43.958631569s ago: executing program 5 (id=3583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) 1m43.881348653s ago: executing program 56 (id=3583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) 54.794700395s ago: executing program 6 (id=4102): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_virt_wifi\x00'}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000010000000000fddbdf2500000000", @ANYRES32, @ANYRESHEX=r0], 0x48}}, 0x48801) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3, @remote}, 0x1, 0x1}}, 0x2e) 54.793389915s ago: executing program 6 (id=4104): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001503d200100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) 53.85220268s ago: executing program 6 (id=4113): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1004003, &(0x7f0000000140)={[{@stripe={'stripe', 0x3d, 0x5}}]}, 0xa, 0xbd5, &(0x7f00000001c0)="$eJzs3M1rHOcZAPBnRquVZKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8FC3llhNYfSCquZEFX7T9Q2p4LvRTampgc4rMvCck1EBL7mpBDwATFSiCERGH2Q1IsjSzHuxpZ/v3g1bzvPKN9n2eH3ZkXdjeAF9Zo9ieNOB4Rl5KISnt/GhHlZm8wotE6bm11eeqT1eWpJNbXf/dhEklEPFpdnuo8VtLeHm0PBiPizV8m8a2/bp93fnFpdrJer821x6cWrt44Nb+49JOZq5NXaldq18bP/Gzi9MSZsbMTXav103fP3/34B79+v/HZ/z6//dE//pPE+Rhux7bW0S2jMbrxnGxViojJbk9WkL52PVvrTEpP+Ke0x0kBAJAr3XIP952oRF9s3rxV4tW3C00OAAAA6Ir1voh1AAAA4JBLrP8BAADgkOt8DuDR6vJUpxX7iYT99fBCRIy06l9rt1akFI3mdjD6I+LIoyS2fq01af3bMxuNiPcenL2TtejR95B301iJiO/udP6TZv0jzW9xb68/jYixLsw/+tj4eah/oF3/+S7MX3T9ALyY7l1oXci2X//Sjfuf2OH6X9rh2vV1FH3969z/rW27/9usvy/n/u+3e5zj1n//dTMvltX/87u/eqnTsvmz7TMV9RQerkR8r7RT/clG/UlO/Zf2OEfli5u1vFjR9a//O+JE7Fx/R7L77xOdmp6p18Zaf3ecY+WNif/nzV90/dn5P5JTf+f3n/LO/409zvGHixdf3rbzwWZ39/rTD8rJ75u9cnvPnyYXFubGI8rJb7bvP717Lp1jOo+R1X/yh3mv/yS3/uw9odF+HrK1wEp7m43/8ticv7h965W8fDrrvyLP/+Wc87/19f96afv5/9se5/jRa38/mRfbuv7NWjZ/Zy0MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1pRAxHklY3+mlarUYcjYhvx5G0fn1+4cfT1/947XIWixiJ/nR6pl4bi4hKa5xk4/Fmf3N8+rHxTyPiWET8szLUHFenrtcvF108AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG45GxHAkaTUi0ohYq6RptVp0VgAAAEDXjRSdAAAAANBz1v8AAABw+Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GPHvn/vfhIRjXNDzZYpt2P9hWYG9FpadAJAYfqKTgAoTKnoBIDCPOUa3+0CHELJE+KDuZGBrucCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMF14vi9+0lENM4NNVum3I71F5oZ0Gtp0QkAhenbLVjavzyA/eclDi+uXdb4Q/uZB1Cc5Anxwc1jGl+NDPQsJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOnuFmS9JqRJTb+6rViG9ExEj0J9Mz9dpYRHwzIt6p9A9k4/GCcwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKD75heXZifr9dpc1kmj3dnYk9tZb/nzng5+rjp33soJJa1nrFF4hjrd6ZTjQKRxQDtFvzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCE+cWl2cl6vTY3X3QmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNHmF5dmJ+v12lwPO0XXCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAcb4MAAD//1rcD0w=") r0 = fsopen(&(0x7f0000000b00)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, 0x0, 0x0, 0x0) getdents64(r2, 0x0, 0x22) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) r4 = fspick(r3, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 51.154830728s ago: executing program 6 (id=4124): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) timer_create(0x2, 0x0, 0x0) syz_clone(0x60000080, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x92, 0x7) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000100)={{0x2, 0x0, 0x0, 0x1, 0x4}, 0x0, 0x7, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x2, 0x4}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[]) 50.94630016s ago: executing program 6 (id=4126): r0 = gettid() timer_create(0x0, &(0x7f00000014c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) 50.520647905s ago: executing program 6 (id=4132): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001300010600000000e4fedbdf25000000", @ANYRES32=r2, @ANYBLOB="242400002019000008001300", @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x20048000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000120001d6040254197bfcdbdf25000000", @ANYRES32=0x0, @ANYBLOB="00140000bcb5f31a1400030064756d6d79300000000000000000000008002e"], 0x9f}, 0x1, 0x0, 0x0, 0x14044000}, 0x4080) 49.842533014s ago: executing program 57 (id=4132): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001300010600000000e4fedbdf25000000", @ANYRES32=r2, @ANYBLOB="242400002019000008001300", @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x20048000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000120001d6040254197bfcdbdf25000000", @ANYRES32=0x0, @ANYBLOB="00140000bcb5f31a1400030064756d6d79300000000000000000000008002e"], 0x9f}, 0x1, 0x0, 0x0, 0x14044000}, 0x4080) 4.322714818s ago: executing program 7 (id=4542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x2, 0x7fff0026}]}) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_socket_connect_nvme_tcp() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000600)={0x1, &(0x7f0000000000)=[{0x35, 0x0, 0xfa, 0x7}]}, 0x10) 4.11340279s ago: executing program 8 (id=4546): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) setpgid(0x0, 0x0) socketpair(0x10, 0x2, 0xb, 0x0) process_vm_writev(0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000a40)=""/164, 0xa4}], 0x2, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 4.029186445s ago: executing program 8 (id=4547): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000cab000)=0xc) r1 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r2) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000080)={[0x4]}, 0x8) 4.004136266s ago: executing program 8 (id=4548): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x8}, 0x1c) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0xf3}, 0xf338}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0xd}], 0x3fffe16, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 3.806777158s ago: executing program 0 (id=4554): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080), 0x1, 0x532, &(0x7f0000001280)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) 2.654199266s ago: executing program 8 (id=4555): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248080, &(0x7f0000000340), 0x0, 0x5fd, &(0x7f00000004c0)="$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") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 2.652982696s ago: executing program 7 (id=4565): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000380)=[@acquire], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000580)=[@request_death, @clear_death], 0x0, 0x1000000, 0x0}) r2 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x58, 0x0, &(0x7f00000004c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000003c0)={@fda={0x66646185, 0x2, 0x2, 0x16}, @fda={0x66646185, 0xa, 0x1, 0x1a}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/153, 0x99, 0x2, 0x18}}, &(0x7f0000000200)={0x0, 0x20, 0x40}}}, @free_buffer={0x40086303, r2}], 0xe0, 0x0, &(0x7f00000005c0)="b3a9f77c9871b08c74cf2fd39d2592fa9b35338872540007e40da6142f984b3a2ae4f2c5cf90bc3f77bb2434a36a4fa31d16b634872e2c2fed9c964e029d542d67d53768ab76ab14cf0cd990dc0887f7bf01a749ac306e4522a8392a4aab7193f73b37c1d9e514cb597bf41dae30d3af25faba71b1c9f5eb68da59ac16f0227cadd2d464635815f26bddec3404d4c0085be56f41def05522ff67872bcb9fec4be7275f84ddcb5d695d62f22fa6bf3337b0611c1ddc9d48008363347afe256ec476f2282d4c5ea7d7df7f5c50353d17621429163b33c4c182cc87d6506d27a41e"}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, 0x0, 0xfffffffffffffc7f) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x18) 2.608102898s ago: executing program 2 (id=4557): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x182) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES32=r3], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 2.603000988s ago: executing program 0 (id=4558): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) open(0x0, 0x185102, 0x2b) 1.803742575s ago: executing program 7 (id=4559): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xb) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) splice(r3, 0x0, r2, 0x0, 0x1000, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)='F', 0x1) 1.802956125s ago: executing program 8 (id=4560): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.802668515s ago: executing program 2 (id=4570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x6, 0x0, 0x0) 1.802291405s ago: executing program 4 (id=4561): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000cab000)=0xc) r1 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r2) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000080)={[0x4]}, 0x8) 1.802095765s ago: executing program 0 (id=4562): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1.762103097s ago: executing program 4 (id=4563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 614.595305ms ago: executing program 4 (id=4564): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x503c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x1, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="14", 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, 0xee00}}}], 0x20, 0x40044}}], 0x1, 0x4) pwrite64(r2, &(0x7f0000000000)='q', 0x1, 0x12000) sendfile(r3, r2, 0x0, 0x8) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6=@private1}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "e3012835"}, @global=@item_012={0x1, 0x1, 0x8, 'O'}]}}, 0x0}, 0x0) 613.565305ms ago: executing program 0 (id=4576): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x2000884c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000280)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f00000004c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@mpls_uc={0x8847, {[], @ipv4=@generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x66, 0x0, 0xd5, 0x5c, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}, 0x0) 462.217174ms ago: executing program 7 (id=4566): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000480)="a6e2976b5c", 0x5, 0x840, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r5, r3, 0x15, 0x0, @val=@netkit={@void, @value, @void, @void, r4}}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000400)=0x40) 461.464263ms ago: executing program 0 (id=4567): mount$binderfs(0x0, &(0x7f0000000400)='./binderfs\x00', 0x0, 0x10000, &(0x7f0000000580)={[{@stats}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="d2ff03076003008cb89e08f086dd", 0x0, 0x101, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = dup(r2) connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x1, 0x4}}, 0x10) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x2, 0x2}, 0x10) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 446.265544ms ago: executing program 7 (id=4568): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x14, 0x56, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000044}, 0x4004841) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x1, 0x5, 0xf, 0x2, 0x2], 0xfec00000, 0x200}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[], 0x5ac}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000010) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 416.068676ms ago: executing program 7 (id=4569): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x800092, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x46, 0x2d1, &(0x7f0000000740)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000080a000/0x3000)=nil, 0x3000, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 408.651887ms ago: executing program 8 (id=4571): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000009c0), 0x0, &(0x7f0000000300)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, '!)'}}, {@obj_type={'obj_type', 0x3d, 'index=on'}}, {@subj_type={'subj_type', 0x3d, 'upperdir'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) 352.13794ms ago: executing program 0 (id=4572): r0 = creat(&(0x7f0000000180)='./file0\x00', 0xa) close(r0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r1, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @empty, 0x9}, 0x1c, 0x0}}], 0x1, 0x44040044) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x75, 0x109301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) listen(0xffffffffffffffff, 0x0) r3 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 321.326381ms ago: executing program 2 (id=4573): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) capset(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000000400)=""/4096, 0xc00) 78.990146ms ago: executing program 4 (id=4574): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32], 0x1, 0x1a2, &(0x7f0000000580)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0x13d) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc8) r1 = socket(0x2, 0x3, 0xff) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) socket(0x2, 0x3, 0xff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, 0x0) 77.474626ms ago: executing program 2 (id=4585): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4044844) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x338, 0x6, 0x3, 0x201, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x9}, [@nested={0x109, 0xa, 0x0, 0x1, [@generic="572bc35b94e593f206de4c86da6bf6d9f41b2e16988f61851dc2c4d137c365782cbcde4b14311700db7ed7c9485d7f7e85d2bc085e6c681340a751d97d05dc784e5bb56fd7106546a7fc3b31e264f27e938cb43e474cc308f69953298d3cfdf51f8b29f5eff057368ba0a376e228aac5d56d35f7989463aa86e21f7f536d", @nested={0x4, 0xd}, @generic="4093c0ff7b9cf17276a4", @generic="9ba3c350e4fdd22b243be48327763dff4d2cfbc8c4e470193c317f5ff68ce310880876f4ccdbc1a81d697e375230e37acf2bc8a5c88051d2cfb8d04ff19add21c0422fdd650921c3ba7f1518cf5403d0b7813a074668adac663c8ee0e507da690499d455bd", @typed={0x14, 0x66, 0x0, 0x0, @ipv6=@mcast2}]}, @typed={0x8, 0x11c, 0x0, 0x0, @uid}, @nested={0x81, 0xf3, 0x0, 0x1, [@generic="ba89292a0e7ffa485bdb406640358bddd4652f6c447bb3949d67f0094bce1e456283b8223c38c90da2c8a305a69010f1afe29d304df10b208caec94667f893a1f7d99a7c3d1d75aa9f68bdf96cfa069426f6a9deb7dd2c9033b224cd4c90d3a12ce7f6e3c38b9d345bd4f41ce3cdee024f5abf4fff42067a0b", @nested={0x4, 0x146}]}, @typed={0x8, 0x64, 0x0, 0x0, @ipv4=@remote}, @typed={0x9d, 0x7b, 0x0, 0x0, @binary="a2cc54d9d316dd5cb6579f86ecd03e8012f492b464e0b4b237686104a916a4c0e697e4d11c3e207176cda5610285b47198b86aa7927b29aba2d2587246857af429253b7a02ca676fa8669efab834e20909810ed93d24a039e8d3e43115a5ef8fb2ee61a95b2a1ab10a45f413788c7f036f2bb259d53ff741a5af7af517b2a3b248048ef2153984298b68cc21dd23f627694e693dd2360eb804"}, @generic="62fc626ea379aa554bd9d746d910b636e5ed31c538cf118c4129ef9902d93357fa16daf5559543c189322dbd238be60021ad0725d4852bb64f422ba21d1d3c3e827e42d70dfe6c3835806166e378bd4177590dec27e44aba620d832f6ae4176be56ea8f5602599ef64825c1a20dc3576211298e69e5cb23886c8728b8bc781c030e6b4474d673b851d1dbfdf7c71ce9099671a22437bd5a3963a6e48e9a0b71d1a55baf06fe434ccfd67f240ced5d06a8b7caf8ea73cd4d8d3e2766bc98070f98a59a85c6903bca1f6206adeb2925856f4073a6c1cca94a876", @nested={0x8, 0xfc, 0x0, 0x1, [@nested={0x4, 0xc1}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000010) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 51.663828ms ago: executing program 4 (id=4575): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r1, &(0x7f00000003c0)="11eb534bfc0baf745837", 0xa, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x4, 0x6, @local}, 0x14) 40.146778ms ago: executing program 2 (id=4577): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)="42f2d226dfbf55c6ebc9d4ba14698c2ec0416b3cb15f0b947b9e046bd3c42dcc8b", 0x21, r6) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="030328bd7000fddbdf254a"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 20.38485ms ago: executing program 4 (id=4578): socket$inet6(0xa, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 0s ago: executing program 2 (id=4579): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe42, 0x9, 0xfffffffffffffffb, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x80, 0x8b, 0x0, 0x8, 0x8c], 0x58000, 0x240046}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="a8640f98c5471c7b7e825b658e3b68e0a79a836a843dabe362", 0x19}], 0x1}, 0x24020040) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): interface, different from the descriptor's value: 81 [ 166.480804][ T2501] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 166.490555][ T2501] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 166.500456][ T2501] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 166.531327][ T2501] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 166.548616][ T2501] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.562978][ T2501] usb 8-1: config 0 descriptor?? [ 166.824898][ T2501] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 166.850870][ T2501] usb 8-1: USB disconnect, device number 5 [ 166.865093][ T2501] usblp0: removed [ 166.886726][ T7463] loop8: detected capacity change from 0 to 131072 [ 166.932938][ T7463] F2FS-fs (loop8): Found nat_bits in checkpoint [ 166.941543][ T7480] loop4: detected capacity change from 0 to 256 [ 166.955596][ T7480] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 166.976692][ T7480] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 166.987038][ T7480] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 167.025132][ T7463] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 167.414036][ T2501] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 167.664219][ T2501] usb 8-1: Using ep0 maxpacket: 32 [ 167.784084][ T2501] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 167.792775][ T2501] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 167.803443][ T2501] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 167.814338][ T2501] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 167.825391][ T2501] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 167.835759][ T2501] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 167.849534][ T2501] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 167.859290][ T2501] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.873771][ T2501] usb 8-1: config 0 descriptor?? [ 168.134852][ T2501] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 168.595394][ T20] usb 8-1: USB disconnect, device number 6 [ 168.606960][ T20] usblp0: removed [ 168.965942][ T7557] tipc: Enabling of bearer rejected, failed to enable media [ 169.302254][ T7578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2792'. [ 169.323074][ T7578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2792'. [ 169.344443][ T7579] @0: renamed from bond_slave_1 [ 170.070496][ T7627] fuse: Bad value for 'fd' [ 170.233987][ T2501] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 170.494097][ T2501] usb 9-1: Using ep0 maxpacket: 32 [ 170.624382][ T2501] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.647083][ T2501] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.668919][ T2501] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 170.689612][ T2501] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.699120][ T7641] netlink: 'syz.2.2815': attribute type 12 has an invalid length. [ 170.714764][ T2501] usb 9-1: config 0 descriptor?? [ 170.724162][ T7641] netlink: 'syz.2.2815': attribute type 1 has an invalid length. [ 170.752192][ T7641] netlink: 'syz.2.2815': attribute type 2 has an invalid length. [ 170.760468][ T7641] netlink: 'syz.2.2815': attribute type 3 has an invalid length. [ 170.774643][ T2501] hub 9-1:0.0: USB hub found [ 170.813351][ T7645] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 170.853496][ T7645] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 170.994092][ T2501] hub 9-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 171.002954][ T7659] loop6: detected capacity change from 0 to 256 [ 171.143111][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 171.143129][ T30] audit: type=1326 audit(1904285599.262:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.6.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792a6f2eb9 code=0x7ffc0000 [ 171.228676][ T30] audit: type=1326 audit(1904285599.262:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.6.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f792a6f2eb9 code=0x7ffc0000 [ 171.281642][ T30] audit: type=1326 audit(1904285599.262:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.6.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792a6f2eb9 code=0x7ffc0000 [ 171.328047][ T7673] bpf getsockopt: ignoring program buffer with optlen=1869768547 (max_optlen=4096) [ 171.333350][ T30] audit: type=1326 audit(1904285599.272:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.6.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f792a6f2eb9 code=0x7ffc0000 [ 171.376289][ T30] audit: type=1326 audit(1904285599.272:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.6.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792a6f2eb9 code=0x7ffc0000 [ 171.402275][ T30] audit: type=1326 audit(1904285599.272:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.6.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f792a6f2eb9 code=0x7ffc0000 [ 171.430140][ T2501] hid-generic 0003:046D:C31C.000F: unknown main item tag 0x0 [ 171.446646][ T2501] hid-generic 0003:046D:C31C.000F: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.8-1/input0 [ 171.481137][ T30] audit: type=1326 audit(1904285599.272:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.6.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792a6f2eb9 code=0x7ffc0000 [ 171.567771][ T30] audit: type=1326 audit(1904285599.292:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.6.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f792a6f2eb9 code=0x7ffc0000 [ 171.656064][ T30] audit: type=1326 audit(1904285599.292:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.6.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792a6f2eb9 code=0x7ffc0000 [ 171.731902][ T30] audit: type=1326 audit(1904285599.292:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.6.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792a6f2eb9 code=0x7ffc0000 [ 171.757729][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 171.784440][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.833479][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 171.853848][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.883576][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.906900][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.924717][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.967847][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.064158][ T7692] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 172.074933][ T20] usb 9-1: USB disconnect, device number 5 [ 172.102093][ T7692] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 172.114822][ T7692] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 172.131282][ T7692] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 172.148852][ T7692] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 172.163867][ T7692] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 172.234377][ T7692] device veth0_vlan left promiscuous mode [ 172.240793][ T7692] device veth0_vlan entered promiscuous mode [ 172.249718][ T7692] device veth1_macvtap left promiscuous mode [ 172.258915][ T7692] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 172.277945][ T7692] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 172.289335][ T7692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.300322][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.318005][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.340188][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.364427][ T1965] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.371868][ T1965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.403859][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.427366][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.444407][ T1965] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.451606][ T1965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.466036][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.476654][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 172.486090][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.494604][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): c@0: link becomes ready [ 172.502321][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.511429][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.520522][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.529588][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.539343][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.539955][ T7721] overlayfs: failed to clone upperpath [ 172.547777][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.561684][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.576564][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.590940][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.627928][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.646234][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.674531][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.696002][ T7727] xt_hashlimit: size too large, truncated to 1048576 [ 172.698211][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.714981][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.750593][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.760722][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.772351][ T7732] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 172.787059][ T7732] overlayfs: failed to set xattr on upper [ 172.796983][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.815499][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.830468][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.843167][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.864867][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 172.877633][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 172.904876][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 172.930586][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 172.971570][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 172.998490][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 173.015925][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 173.034295][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 173.054737][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 173.071817][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 173.090384][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.298775][ T7746] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2856'. [ 173.435157][ T7758] overlayfs: failed to clone upperpath [ 173.457769][ T7758] fuse: Bad value for 'fd' [ 173.665120][ T7773] xt_hashlimit: max too large, truncated to 1048576 [ 173.734003][ T63] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 173.774660][ T7782] loop4: detected capacity change from 0 to 4096 [ 173.810816][ T7782] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 173.835652][ T7782] EXT4-fs (loop4): Test dummy encryption mode enabled [ 173.865064][ T7782] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 174.101187][ T7791] tipc: Started in network mode [ 174.114116][ T63] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.124004][ T7791] tipc: Node identity a6ec1e7d5f1, cluster identity 4711 [ 174.136044][ T63] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.158638][ T7791] tipc: Enabled bearer , priority 0 [ 174.166327][ T63] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.186270][ T63] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.200328][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.216388][ T63] usb 7-1: config 0 descriptor?? [ 174.234847][ T7796] device syzkaller0 entered promiscuous mode [ 174.316695][ T7790] tipc: Resetting bearer [ 174.369893][ T7790] tipc: Disabling bearer [ 174.476066][ T7808] tipc: Enabled bearer , priority 0 [ 174.527355][ T7808] device syzkaller0 entered promiscuous mode [ 174.571356][ T7807] tipc: Resetting bearer [ 174.610267][ T7807] tipc: Disabling bearer [ 174.715875][ T63] plantronics 0003:047F:FFFF.0010: unknown main item tag 0xd [ 174.740947][ T63] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 174.775707][ T63] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 174.865800][ T7832] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 175.004983][ T63] usb 7-1: USB disconnect, device number 4 [ 175.551316][ T7860] VFS: Mount too revealing [ 175.772255][ T7873] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2906'. [ 175.852343][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2908'. [ 175.896724][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2908'. [ 175.987811][ T7806] loop8: detected capacity change from 0 to 131072 [ 176.087552][ T7806] F2FS-fs (loop8): Found nat_bits in checkpoint [ 176.187857][ T7806] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 176.342078][ T7806] F2FS-fs (loop8): lookup inode (7) has corrupted xattr [ 176.381684][ T7806] F2FS-fs (loop8): lookup inode (7) has corrupted xattr [ 176.393474][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 176.393493][ T30] audit: type=1400 audit(1904285604.512:693): avc: denied { create } for pid=7893 comm="syz.6.2914" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 176.473516][ T30] audit: type=1400 audit(1904285604.542:694): avc: denied { create } for pid=7893 comm="syz.6.2914" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=icmp_socket permissive=1 [ 176.540060][ T30] audit: type=1400 audit(1904285604.542:695): avc: denied { bind } for pid=7893 comm="syz.6.2914" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=icmp_socket permissive=1 [ 176.626140][ T30] audit: type=1400 audit(1904285604.542:696): avc: denied { setopt } for pid=7893 comm="syz.6.2914" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 176.698213][ T30] audit: type=1400 audit(1904285604.542:697): avc: denied { connect } for pid=7893 comm="syz.6.2914" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 176.783967][ T30] audit: type=1400 audit(1904285604.542:698): avc: denied { name_connect } for pid=7893 comm="syz.6.2914" dest=20257 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 177.160934][ T7907] bridge_slave_0: default FDB implementation only supports local addresses [ 177.654640][ T7932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2930'. [ 177.686635][ T7932] netlink: 65536 bytes leftover after parsing attributes in process `syz.2.2930'. [ 177.705373][ T63] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 177.723150][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2930'. [ 177.906405][ T7942] loop4: detected capacity change from 0 to 512 [ 177.930253][ T7942] EXT4-fs (loop4): Ignoring removed orlov option [ 177.937458][ T7942] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 177.947152][ T7942] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2233: inode #15: comm syz.4.2935: corrupted in-inode xattr [ 177.959702][ T7942] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2935: couldn't read orphan inode 15 (err -117) [ 177.972049][ T7942] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 178.134116][ T63] usb 7-1: unable to get BOS descriptor or descriptor too short [ 178.184123][ T63] usb 7-1: not running at top speed; connect to a high speed hub [ 178.274108][ T63] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.290305][ T63] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.544021][ T63] usb 7-1: string descriptor 0 read error: -22 [ 178.550442][ T63] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.571814][ T63] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.624819][ T63] usb 7-1: 0:2 : does not exist [ 178.786634][ T7987] overlayfs: failed to clone upperpath [ 178.885757][ T7999] xt_hashlimit: size too large, truncated to 1048576 [ 179.694248][ T8017] loop8: detected capacity change from 0 to 2048 [ 179.735762][ T8017] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.659824][ T30] audit: type=1400 audit(1904285608.782:699): avc: denied { execute } for pid=8072 comm="syz.2.2988" name="file1" dev="ramfs" ino=54496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 180.688905][ T30] audit: type=1400 audit(1904285608.782:700): avc: denied { execute_no_trans } for pid=8072 comm="syz.2.2988" path="/file1" dev="ramfs" ino=54496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 180.748210][ T8081] overlayfs: failed to clone upperpath [ 180.787399][ T63] usb 7-1: USB disconnect, device number 5 [ 180.871866][ T30] audit: type=1326 audit(1904285608.992:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.2.2992" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fc74a338cd7 code=0x0 [ 180.923707][ T8092] loop8: detected capacity change from 0 to 512 [ 181.006653][ T8092] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 181.033467][ T8092] EXT4-fs (loop8): 1 truncate cleaned up [ 181.061006][ T8092] EXT4-fs (loop8): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,noquota,,errors=continue. Quota mode: none. [ 181.129366][ T8095] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.136979][ T8095] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.145615][ T8092] xt_hashlimit: size too large, truncated to 1048576 [ 181.272260][ T8098] loop4: detected capacity change from 0 to 4096 [ 181.425327][ T8098] EXT4-fs (loop4): Test dummy encryption mode enabled [ 181.487369][ T8098] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 181.504037][ T8098] System zones: 0-5 [ 181.537448][ T8098] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,resuid=0x0000000000000000,test_dummy_encryption,errors=continue,data_err=ignore,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 181.642870][ T8105] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 181.651828][ T8108] loop4: detected capacity change from 0 to 128 [ 181.676463][ T8105] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 182.103344][ T8150] loop8: detected capacity change from 0 to 256 [ 182.156471][ T30] audit: type=1400 audit(1904285610.282:702): avc: denied { call } for pid=8153 comm="syz.4.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 182.185594][ T8150] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 182.247198][ T8150] exFAT-fs (loop8): error, tried to truncate zeroed cluster. [ 182.271591][ T8150] exFAT-fs (loop8): Filesystem has been set read-only [ 182.394086][ T8163] pic_ioport_write: 297 callbacks suppressed [ 182.394104][ T8163] kvm: pic: level sensitive irq not supported [ 182.613950][ T292] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 182.994020][ T292] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 183.005462][ T292] usb 7-1: config 0 has no interface number 0 [ 183.017882][ T292] usb 7-1: config 0 interface 41 has no altsetting 0 [ 183.194083][ T292] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 183.208626][ T292] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.228410][ T292] usb 7-1: Product: syz [ 183.238944][ T292] usb 7-1: Manufacturer: syz [ 183.251092][ T292] usb 7-1: SerialNumber: syz [ 183.267455][ T292] usb 7-1: config 0 descriptor?? [ 184.194093][ T292] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 185.564064][ T292] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 185.574911][ T292] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 185.584559][ T292] CoreChips: probe of 7-1:0.41 failed with error -71 [ 185.592589][ T292] usb 7-1: USB disconnect, device number 6 [ 186.086578][ T8197] loop6: detected capacity change from 0 to 512 [ 186.154290][ T8197] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 186.162589][ T8197] EXT4-fs (loop6): Number of reserved GDT blocks insanely large: 65280 [ 186.232611][ T8219] netlink: 'syz.7.3043': attribute type 13 has an invalid length. [ 186.241801][ T8219] netlink: 'syz.7.3043': attribute type 17 has an invalid length. [ 186.243562][ T8218] loop8: detected capacity change from 0 to 512 [ 186.295191][ T8218] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 186.342366][ T8218] EXT4-fs (loop8): 1 truncate cleaned up [ 186.358039][ T8218] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 186.396929][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 186.410007][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.438264][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 186.466735][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.493398][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.519298][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.542060][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.551826][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.564801][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 186.572559][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 186.857181][ T8197] loop6: detected capacity change from 0 to 131072 [ 186.938118][ T8197] F2FS-fs (loop6): Found nat_bits in checkpoint [ 187.031293][ T8197] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 187.548774][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3069'. [ 188.026180][ T8286] futex_wake_op: syz.8.3073 tries to shift op by -1; fix this program [ 188.045686][ T30] audit: type=1400 audit(1904285616.172:703): avc: denied { read } for pid=8285 comm="syz.8.3073" path="socket:[55861]" dev="sockfs" ino=55861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 188.539402][ T30] audit: type=1400 audit(1904285616.662:704): avc: denied { connect } for pid=8304 comm="syz.4.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 189.881698][ T8322] loop6: detected capacity change from 0 to 40427 [ 189.912231][ T8322] F2FS-fs (loop6): invalid crc value [ 189.939287][ T8322] F2FS-fs (loop6): Found nat_bits in checkpoint [ 190.000228][ T8322] F2FS-fs (loop6): Start checkpoint disabled! [ 190.024018][ T8322] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 190.117004][ T30] audit: type=1400 audit(1904285618.242:705): avc: denied { setattr } for pid=8321 comm="syz.6.3086" name="#98" dev="loop6" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 190.149469][ T7301] attempt to access beyond end of device [ 190.149469][ T7301] loop6: rw=524288, want=45072, limit=40427 [ 190.184099][ T7301] attempt to access beyond end of device [ 190.184099][ T7301] loop6: rw=0, want=45072, limit=40427 [ 190.275969][ T1771] attempt to access beyond end of device [ 190.275969][ T1771] loop6: rw=2049, want=41008, limit=40427 [ 190.795114][ T1771] device bridge_slave_1 left promiscuous mode [ 190.801291][ T1771] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.824790][ T1771] device bridge_slave_0 left promiscuous mode [ 190.848945][ T1771] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.867986][ T1771] device veth1_macvtap left promiscuous mode [ 190.881725][ T1771] device veth0_vlan left promiscuous mode [ 191.173335][ T8349] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.190661][ T8349] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.204602][ T8349] device bridge_slave_0 entered promiscuous mode [ 191.222787][ T8349] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.287942][ T8349] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.324360][ T8349] device bridge_slave_1 entered promiscuous mode [ 191.608086][ T8377] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3107'. [ 191.635863][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.660441][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.686303][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.708720][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.720163][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.727262][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.745812][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.754312][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.762571][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.769782][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.778355][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.798267][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.806619][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.822139][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.837853][ T8349] device veth0_vlan entered promiscuous mode [ 191.845591][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.854181][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.861850][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.881880][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.895019][ T8349] device veth1_macvtap entered promiscuous mode [ 191.916154][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.934089][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.347399][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3115'. [ 192.380540][ T8402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.388011][ T8402] IPv6: NLM_F_CREATE should be set when creating new route [ 192.397471][ T8402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.404806][ T8402] IPv6: NLM_F_CREATE should be set when creating new route [ 192.480603][ T8415] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3118'. [ 192.496207][ T8415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8415 comm=syz.2.3118 [ 192.514634][ T8415] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3118'. [ 192.870198][ T8423] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.877541][ T8423] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.059594][ T8432] loop1: detected capacity change from 0 to 512 [ 193.115279][ T8432] EXT4-fs (loop1): Ignoring removed bh option [ 193.152966][ T8432] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 193.165877][ T8432] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.306984][ T8450] overlayfs: overlapping lowerdir path [ 193.636380][ T8466] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3136'. [ 193.754821][ T1771] device bridge_slave_1 left promiscuous mode [ 193.763245][ T1771] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.776673][ T1771] device bridge_slave_0 left promiscuous mode [ 193.788524][ T1771] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.802829][ T1771] device veth1_macvtap left promiscuous mode [ 193.814154][ T1771] device veth0_vlan left promiscuous mode [ 194.126729][ T8470] loop8: detected capacity change from 0 to 256 [ 194.209934][ T8470] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 194.406007][ T8476] tipc: Started in network mode [ 194.410988][ T8476] tipc: Node identity c23cd8391207, cluster identity 4711 [ 194.418654][ T8476] tipc: Enabled bearer , priority 0 [ 194.441271][ T8476] device syzkaller0 entered promiscuous mode [ 194.463134][ T8475] tipc: Resetting bearer [ 194.480873][ T8475] tipc: Disabling bearer [ 194.723352][ T8487] xt_hashlimit: size too large, truncated to 1048576 [ 194.922881][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3156'. [ 195.200869][ T8517] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3160'. [ 195.410821][ T8527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8527 comm=syz.8.3164 [ 195.435025][ T8527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8527 comm=syz.8.3164 [ 195.458277][ T8527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8527 comm=syz.8.3164 [ 195.481586][ T8527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8527 comm=syz.8.3164 [ 195.504601][ T8527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8527 comm=syz.8.3164 [ 195.534562][ T8527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8527 comm=syz.8.3164 [ 195.565616][ T8527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8527 comm=syz.8.3164 [ 195.590358][ T8527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8527 comm=syz.8.3164 [ 195.603842][ T8527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8527 comm=syz.8.3164 [ 195.736374][ T30] audit: type=1400 audit(1904285623.862:706): avc: denied { watch watch_reads } for pid=8543 comm="syz.1.3172" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 195.773606][ T63] kernel write not supported for file /input/event0 (pid: 63 comm: kworker/1:2) [ 195.908215][ T8554] loop4: detected capacity change from 0 to 4096 [ 195.929501][ T8554] EXT4-fs (loop4): Ignoring removed bh option [ 195.947113][ T8554] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 195.974806][ T8554] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,bh,grpquota,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 196.032791][ T8570] device ip6gre1 entered promiscuous mode [ 196.227826][ T30] audit: type=1400 audit(1904285624.352:707): avc: denied { accept } for pid=8582 comm="syz.1.3186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.279230][ T8585] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 196.290646][ T30] audit: type=1400 audit(1904285624.412:708): avc: denied { create } for pid=8582 comm="syz.1.3186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 196.330179][ T20] kernel write not supported for file [eventfd] (pid: 20 comm: kworker/0:1) [ 196.335335][ T8588] loop8: detected capacity change from 0 to 256 [ 196.365371][ T8588] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x5bae174d, utbl_chksum : 0xe619d30d) [ 196.390699][ T30] audit: type=1400 audit(1904285624.512:709): avc: denied { mount } for pid=8593 comm="syz.4.3190" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 196.422322][ T8588] exFAT-fs (loop8): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 196.449978][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3193'. [ 196.486879][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3193'. [ 196.662615][ T8592] loop1: detected capacity change from 0 to 40427 [ 196.688944][ T8592] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 196.710134][ T8592] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 196.725530][ T8592] F2FS-fs (loop1): invalid crc value [ 196.752121][ T8592] F2FS-fs (loop1): Found nat_bits in checkpoint [ 196.809322][ T8592] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 196.816526][ T8592] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 196.854989][ T8616] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 197.553000][ T8635] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3205'. [ 197.963300][ T8639] overlayfs: failed to clone upperpath [ 198.031417][ T8660] overlayfs: failed to clone upperpath [ 198.211249][ T8672] overlayfs: failed to clone upperpath [ 198.303693][ T8675] mip6: mip6_destopt_init_state: state's mode is not 2: 1 [ 198.946382][ T8691] overlayfs: failed to clone upperpath [ 199.339526][ T8626] loop1: detected capacity change from 0 to 262144 [ 199.417479][ T8711] tipc: Started in network mode [ 199.422391][ T8711] tipc: Node identity 84e, cluster identity 4711 [ 199.429264][ T8711] tipc: Node number set to 2126 [ 199.450930][ T8626] F2FS-fs (loop1): invalid crc value [ 199.487646][ T8626] F2FS-fs (loop1): Found nat_bits in checkpoint [ 199.488197][ T8713] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 199.544149][ T8626] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 199.955471][ T8735] pit: kvm: requested 28495 ns i8254 timer period limited to 200000 ns [ 200.003681][ T30] audit: type=1400 audit(1904285628.122:710): avc: denied { name_bind 0x1000000 } for pid=8741 comm="syz.1.3247" path="socket:[58009]" dev="sockfs" ino=58009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 200.049190][ T8746] loop1: detected capacity change from 0 to 128 [ 200.155654][ T8746] attempt to access beyond end of device [ 200.155654][ T8746] loop1: rw=2049, want=1041, limit=128 [ 200.176637][ T8745] attempt to access beyond end of device [ 200.176637][ T8745] loop1: rw=524288, want=369, limit=128 [ 200.188363][ T8745] attempt to access beyond end of device [ 200.188363][ T8745] loop1: rw=0, want=169, limit=128 [ 200.199372][ T8745] attempt to access beyond end of device [ 200.199372][ T8745] loop1: rw=0, want=169, limit=128 [ 200.210143][ T8745] attempt to access beyond end of device [ 200.210143][ T8745] loop1: rw=0, want=169, limit=128 [ 200.221160][ T8745] attempt to access beyond end of device [ 200.221160][ T8745] loop1: rw=0, want=169, limit=128 [ 200.232197][ T8745] attempt to access beyond end of device [ 200.232197][ T8745] loop1: rw=0, want=169, limit=128 [ 200.243069][ T8745] attempt to access beyond end of device [ 200.243069][ T8745] loop1: rw=0, want=169, limit=128 [ 200.254282][ T8745] attempt to access beyond end of device [ 200.254282][ T8745] loop1: rw=0, want=169, limit=128 [ 200.265244][ T8745] attempt to access beyond end of device [ 200.265244][ T8745] loop1: rw=0, want=169, limit=128 [ 200.277130][ T30] audit: type=1400 audit(1904285628.402:711): avc: denied { read write } for pid=8745 comm="syz.1.3249" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 200.301226][ T30] audit: type=1400 audit(1904285628.402:712): avc: denied { open } for pid=8745 comm="syz.1.3249" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 200.301406][ T8760] loop8: detected capacity change from 0 to 512 [ 200.332951][ T30] audit: type=1400 audit(1904285628.402:713): avc: denied { ioctl } for pid=8745 comm="syz.1.3249" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x700b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 200.358726][ T8760] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 200.374253][ T8760] EXT4-fs (loop8): orphan cleanup on readonly fs [ 200.394343][ T8760] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 200.402491][ T8760] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 200.420076][ T8760] EXT4-fs (loop8): 1 truncate cleaned up [ 200.434231][ T8760] EXT4-fs (loop8): mounted filesystem without journal. Opts: resgid=0x0000000000000000,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,grpquota,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 201.335882][ T8793] netlink: 'syz.7.3269': attribute type 4 has an invalid length. [ 201.693872][ T8811] overlayfs: failed to clone upperpath [ 202.003297][ T8824] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 202.086794][ T8828] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3282'. [ 202.214380][ T30] audit: type=1400 audit(1904285630.342:714): avc: denied { create } for pid=8835 comm="syz.7.3286" dev="anon_inodefs" ino=58168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 202.236957][ T30] audit: type=1400 audit(1904285630.342:715): avc: denied { ioctl } for pid=8835 comm="syz.7.3286" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=58168 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 202.284611][ T8844] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3288'. [ 202.354404][ T30] audit: type=1326 audit(1904285630.482:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8851 comm="syz.7.3292" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fb4a6beb9 code=0x0 [ 202.653959][ T39] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 202.893976][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 203.014118][ T39] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 203.022370][ T39] usb 2-1: config 1 has no interface number 0 [ 203.028756][ T39] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 203.046832][ T39] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 203.055925][ T8867] binder: 8866:8867 unknown command 0 [ 203.062547][ T8867] binder: 8866:8867 ioctl c0306201 200000000080 returned -22 [ 203.067198][ T39] usb 2-1: config 1 interface 105 has no altsetting 0 [ 203.179437][ T8880] loop8: detected capacity change from 0 to 128 [ 203.208590][ T8882] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 203.234516][ T8880] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 203.245470][ T39] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 203.255885][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.264338][ T8880] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.273543][ T39] usb 2-1: Product: syz [ 203.277259][ T8888] fuse: Bad value for 'fd' [ 203.279429][ T39] usb 2-1: Manufacturer: syz [ 203.283848][ T8886] netlink: 'syz.7.3306': attribute type 4 has an invalid length. [ 203.288628][ T39] usb 2-1: SerialNumber: syz [ 203.313739][ T8888] fuse: Bad value for 'fd' [ 203.320526][ T8886] netlink: 'syz.7.3306': attribute type 4 has an invalid length. [ 203.334081][ T8855] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 203.341352][ T8855] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 203.467976][ T30] audit: type=1326 audit(1904285631.592:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8895 comm="syz.4.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da5ff2eb9 code=0x7ffc0000 [ 203.509895][ T30] audit: type=1326 audit(1904285631.612:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8895 comm="syz.4.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1da5ff2eb9 code=0x7ffc0000 [ 203.534548][ T30] audit: type=1326 audit(1904285631.612:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8895 comm="syz.4.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da5ff2eb9 code=0x7ffc0000 [ 203.560425][ T30] audit: type=1326 audit(1904285631.612:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8895 comm="syz.4.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da5ff2eb9 code=0x7ffc0000 [ 203.584669][ T30] audit: type=1326 audit(1904285631.612:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8895 comm="syz.4.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1da5ff2eb9 code=0x7ffc0000 [ 203.652513][ T30] audit: type=1326 audit(1904285631.622:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8895 comm="syz.4.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da5ff2eb9 code=0x7ffc0000 [ 203.704785][ T8906] netlink: 'syz.8.3314': attribute type 4 has an invalid length. [ 203.730368][ T30] audit: type=1326 audit(1904285631.622:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8895 comm="syz.4.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da5ff2eb9 code=0x7ffc0000 [ 203.755783][ T8908] netlink: 'syz.8.3314': attribute type 4 has an invalid length. [ 204.002234][ T8922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3320'. [ 204.042262][ T8914] loop8: detected capacity change from 0 to 40427 [ 204.074848][ T8855] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 204.081892][ T8855] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 204.146921][ T8914] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 204.168981][ T8914] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 204.194860][ T8914] F2FS-fs (loop8): invalid crc value [ 204.222128][ T8914] F2FS-fs (loop8): Found nat_bits in checkpoint [ 204.309025][ T8914] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 204.322739][ T8914] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 204.384918][ T8931] overlayfs: failed to clone upperpath [ 204.547453][ T7411] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 204.547479][ T7411] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 204.564005][ T39] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 204.565229][ T7411] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 204.584043][ T39] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 204.596559][ T7411] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 204.602427][ T7411] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 204.610754][ T7411] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 204.626836][ T7411] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 204.654149][ T39] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 204.693711][ T39] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 76:7c:9c:ab:b5:3b [ 204.734608][ T39] usb 2-1: USB disconnect, device number 5 [ 204.765682][ T39] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 204.835137][ T39] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 204.850301][ T39] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 204.877197][ T39] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 205.291006][ T8999] VFS: Mount too revealing [ 205.458589][ T9015] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3349'. [ 205.514263][ T9015] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3349'. [ 205.613687][ T9016] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.621184][ T9016] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.629998][ T9016] device bridge_slave_0 entered promiscuous mode [ 205.654961][ T9016] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.682544][ T9016] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.696310][ T9016] device bridge_slave_1 entered promiscuous mode [ 205.948602][ T9016] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.955816][ T9016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.963226][ T9016] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.970408][ T9016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.005866][ T969] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.044311][ T969] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.181633][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.197662][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.229346][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.323602][ T969] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.330739][ T969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.356097][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.377335][ T969] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.384435][ T969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.411493][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.434727][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.466730][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.481156][ T9016] device veth0_vlan entered promiscuous mode [ 206.493638][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.505206][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.514482][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.530415][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 206.539738][ T9016] device veth1_macvtap entered promiscuous mode [ 206.552253][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 206.564876][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 207.274248][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 207.274265][ T30] audit: type=1400 audit(1904285635.402:745): avc: denied { getopt } for pid=9088 comm="syz.1.3373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 207.341658][ T30] audit: type=1400 audit(1904285635.462:746): avc: denied { append } for pid=9095 comm="syz.1.3376" name="file1" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 209.172665][ T9114] loop1: detected capacity change from 0 to 512 [ 209.371250][ T9114] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 209.391803][ T9114] EXT4-fs (loop1): orphan cleanup on readonly fs [ 209.428260][ T9114] Quota error (device loop1): v2_read_file_info: Free block number too big (0 >= 0). [ 209.468399][ T9114] EXT4-fs warning (device loop1): ext4_enable_quotas:6453: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 209.511903][ T9114] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 209.524900][ T9114] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3383: bg 0: block 40: padding at end of block bitmap is not set [ 209.554839][ T9114] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 209.569660][ T9124] loop9: detected capacity change from 0 to 512 [ 209.604481][ T9114] EXT4-fs (loop1): 1 truncate cleaned up [ 209.632352][ T9114] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.654860][ T9124] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.684872][ T9124] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 209.784483][ T9124] EXT4-fs error (device loop9): ext4_do_update_inode:5248: inode #2: comm syz.9.3387: corrupted inode contents [ 209.833960][ T9124] EXT4-fs error (device loop9): ext4_dirty_inode:6084: inode #2: comm syz.9.3387: mark_inode_dirty error [ 209.864190][ T9124] EXT4-fs error (device loop9): ext4_do_update_inode:5248: inode #2: comm syz.9.3387: corrupted inode contents [ 209.894487][ T9124] EXT4-fs error (device loop9): __ext4_ext_dirty:183: inode #2: comm syz.9.3387: mark_inode_dirty error [ 209.926428][ T30] audit: type=1400 audit(1904285638.052:747): avc: denied { reparent } for pid=9123 comm="syz.9.3387" name="file0" dev="loop9" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 210.005708][ T9135] loop9: detected capacity change from 0 to 512 [ 210.105720][ T9135] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.3390: invalid indirect mapped block 4294967295 (level 1) [ 210.144396][ T9135] EXT4-fs (loop9): Remounting filesystem read-only [ 210.151211][ T9135] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.3390: invalid indirect mapped block 4294967295 (level 1) [ 210.166107][ T9135] EXT4-fs (loop9): Remounting filesystem read-only [ 210.172793][ T9135] EXT4-fs (loop9): 2 truncates cleaned up [ 210.184174][ T9135] EXT4-fs (loop9): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,bsdgroups,. Quota mode: writeback. [ 210.321841][ T9140] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.328991][ T9140] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.336583][ T9140] device bridge_slave_0 entered promiscuous mode [ 210.344249][ T9140] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.351451][ T9140] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.359190][ T9140] device bridge_slave_1 entered promiscuous mode [ 210.538659][ T9140] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.545798][ T9140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.553394][ T9140] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.560483][ T9140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.609422][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.625840][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.644642][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.688437][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.710683][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.732031][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.756903][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.777054][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.797766][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.823288][ T1771] device bridge_slave_1 left promiscuous mode [ 210.840034][ T1771] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.854658][ T1771] device bridge_slave_0 left promiscuous mode [ 210.866436][ T1771] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.885145][ T1771] device veth1_macvtap left promiscuous mode [ 210.891225][ T1771] device veth0_vlan left promiscuous mode [ 211.066862][ T9140] device veth0_vlan entered promiscuous mode [ 211.087335][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.100495][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.130452][ T9140] device veth1_macvtap entered promiscuous mode [ 211.159278][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 211.171522][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.186695][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.210231][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.225373][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.747705][ T9221] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3418'. [ 211.777752][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3418'. [ 211.891206][ T30] audit: type=1400 audit(1904285640.012:748): avc: denied { transfer } for pid=9232 comm="syz.5.3423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 211.946940][ T9237] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3424'. [ 212.334375][ T9258] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3432'. [ 212.348393][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3432'. [ 213.347642][ T9276] loop5: detected capacity change from 0 to 32768 [ 213.434761][ T30] audit: type=1400 audit(1904285641.562:749): avc: denied { shutdown } for pid=9289 comm="syz.2.3447" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 214.796692][ T9302] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3450'. [ 214.841831][ T9299] loop5: detected capacity change from 0 to 40427 [ 214.875046][ T9304] loop9: detected capacity change from 0 to 128 [ 214.891470][ T9299] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 214.913819][ T9299] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 214.926851][ T9304] FAT-fs (loop9): Directory bread(block 414) failed [ 214.943673][ T9304] FAT-fs (loop9): Directory bread(block 415) failed [ 214.965430][ T9299] F2FS-fs (loop5): invalid crc value [ 214.974427][ T9304] FAT-fs (loop9): Directory bread(block 416) failed [ 214.993161][ T9304] FAT-fs (loop9): Directory bread(block 417) failed [ 215.004062][ T9304] FAT-fs (loop9): Directory bread(block 418) failed [ 215.015591][ T9299] F2FS-fs (loop5): Found nat_bits in checkpoint [ 215.033345][ T9304] FAT-fs (loop9): Directory bread(block 419) failed [ 215.062447][ T9304] FAT-fs (loop9): Directory bread(block 420) failed [ 215.074221][ T9304] FAT-fs (loop9): Directory bread(block 421) failed [ 215.089783][ T30] audit: type=1400 audit(1904285643.212:750): avc: denied { create } for pid=9320 comm="syz.4.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 215.111190][ T9304] FAT-fs (loop9): Directory bread(block 414) failed [ 215.117925][ T9304] FAT-fs (loop9): Directory bread(block 415) failed [ 215.141767][ T9299] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 215.149215][ T9299] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 215.159471][ T9325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3459'. [ 215.215926][ T9299] handle_bad_sector: 8 callbacks suppressed [ 215.215948][ T9299] attempt to access beyond end of device [ 215.215948][ T9299] loop5: rw=2049, want=45192, limit=40427 [ 215.253374][ T9299] attempt to access beyond end of device [ 215.253374][ T9299] loop5: rw=0, want=45184, limit=40427 [ 215.462850][ T30] audit: type=1400 audit(1904285643.582:751): avc: denied { unmount } for pid=9016 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 215.596719][ T9369] tipc: Failed to remove unknown binding: 66,0,0/2126:1416287900/1416287901 [ 215.614560][ T9369] tipc: Failed to remove unknown binding: 66,0,0/2126:1416287900/1416287901 [ 215.625800][ T9361] loop5: detected capacity change from 0 to 32768 [ 215.675093][ T9361] loop5: p1 p2 p3 < p5 > [ 215.680417][ T9361] loop5: p1 size 242222080 extends beyond EOD, truncated [ 215.700406][ T9361] loop5: p2 start 16777215 is beyond EOD, truncated [ 215.756389][ T9372] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.763531][ T9372] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.772475][ T9372] device bridge_slave_0 entered promiscuous mode [ 215.780274][ T9372] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.787572][ T9372] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.796105][ T9372] device bridge_slave_1 entered promiscuous mode [ 215.805566][ T358] udevd[358]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 215.816572][ T1496] udevd[1496]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 215.829595][ T333] udevd[333]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 215.906326][ T9385] loop5: detected capacity change from 0 to 256 [ 216.036803][ T9372] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.044364][ T9372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.051900][ T9372] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.058962][ T9372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.090029][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.101165][ T1966] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.110415][ T1966] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.129187][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.146554][ T1966] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.153726][ T1966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.164680][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.174326][ T1966] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.182254][ T1966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.211372][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.221257][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.238999][ T1771] device bridge_slave_1 left promiscuous mode [ 216.247509][ T1771] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.265001][ T1771] device bridge_slave_0 left promiscuous mode [ 216.271391][ T1771] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.284952][ T1771] device veth1_macvtap left promiscuous mode [ 216.291103][ T1771] device veth0_vlan left promiscuous mode [ 216.416993][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.426254][ T9416] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3497'. [ 216.438742][ T9372] device veth0_vlan entered promiscuous mode [ 216.458704][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.485538][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.501655][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.518871][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.535412][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.551604][ T9372] device veth1_macvtap entered promiscuous mode [ 216.563290][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 216.571466][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.580342][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.607361][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.626484][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.671563][ T9433] overlayfs: unrecognized mount option "\']*=[\1\" or missing value [ 217.014287][ T30] audit: type=1400 audit(1904285645.132:752): avc: denied { getopt } for pid=9443 comm="syz.4.3506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 217.190258][ T9454] overlayfs: failed to resolve './bus': -2 [ 217.871973][ T9470] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.883972][ T9470] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.891617][ T9470] device bridge_slave_0 entered promiscuous mode [ 217.898963][ T9470] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.906077][ T9470] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.913798][ T9470] device bridge_slave_1 entered promiscuous mode [ 217.941575][ T9462] loop5: detected capacity change from 0 to 40427 [ 217.967330][ T9462] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 217.975401][ T9462] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 217.987952][ T9462] F2FS-fs (loop5): invalid crc value [ 218.015307][ T9462] F2FS-fs (loop5): Found nat_bits in checkpoint [ 218.053143][ T9462] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 218.065112][ T1966] device bridge_slave_1 left promiscuous mode [ 218.071437][ T1966] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.079604][ T9462] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 218.085898][ T1966] device bridge_slave_0 left promiscuous mode [ 218.093747][ T1966] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.135541][ T1966] device veth1_macvtap left promiscuous mode [ 218.141873][ T1966] device veth0_vlan left promiscuous mode [ 218.230495][ T9485] xt_hashlimit: size too large, truncated to 1048576 [ 218.352737][ T9470] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.359875][ T9470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.367236][ T9470] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.374296][ T9470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.442405][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.450761][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.459803][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.476759][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.510563][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.518058][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.555995][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.581372][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.588493][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.635530][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.654482][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.679909][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.698829][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.743723][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.772618][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.797570][ T9470] device veth0_vlan entered promiscuous mode [ 218.818826][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.831796][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.856797][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.879602][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.922211][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.945033][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.964958][ T9470] device veth1_macvtap entered promiscuous mode [ 218.983862][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 218.992023][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.000662][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.026951][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.050644][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.736382][ T9537] device syz_tun entered promiscuous mode [ 219.752429][ T9537] device vlan2 entered promiscuous mode [ 219.811170][ T9543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3540'. [ 219.832692][ T9543] device veth3 entered promiscuous mode [ 219.839643][ T9543] bridge1: port 1(veth3) entered blocking state [ 219.846760][ T9543] bridge1: port 1(veth3) entered disabled state [ 219.854398][ T9543] bridge1: port 1(veth3) entered blocking state [ 219.860672][ T9543] bridge1: port 1(veth3) entered forwarding state [ 220.133193][ T9574] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3555'. [ 220.156376][ T30] audit: type=1400 audit(1904285648.265:753): avc: denied { lock } for pid=9573 comm="syz.5.3555" path="socket:[61655]" dev="sockfs" ino=61655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 220.352340][ T9587] loop5: detected capacity change from 0 to 512 [ 220.404757][ T9587] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 220.430297][ T9587] EXT4-fs (loop5): journaled quota format not specified [ 220.614002][ T9582] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 220.805116][ T969] bridge1: port 1(veth3) entered disabled state [ 220.815436][ T9592] loop5: detected capacity change from 0 to 512 [ 220.844816][ T9592] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 220.864997][ T9592] EXT4-fs (loop5): invalid journal inode [ 220.874724][ T9592] EXT4-fs (loop5): can't get journal size [ 220.905015][ T9592] EXT4-fs (loop5): 1 truncate cleaned up [ 220.911259][ T9592] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 220.977657][ T30] audit: type=1400 audit(1904285649.095:754): avc: denied { read } for pid=9591 comm="syz.5.3562" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 221.004851][ T9592] EXT4-fs warning (device loop5): ext4_group_add:1696: No reserved GDT blocks, can't resize [ 221.058148][ T30] audit: type=1400 audit(1904285649.115:755): avc: denied { open } for pid=9591 comm="syz.5.3562" path="/44/file0/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 221.101462][ T30] audit: type=1400 audit(1904285649.125:756): avc: denied { ioctl } for pid=9591 comm="syz.5.3562" path="/44/file0/file1" dev="loop5" ino=15 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 221.134526][ T9597] loop0: detected capacity change from 0 to 2048 [ 221.204840][ T9597] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none. [ 221.254759][ T9597] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.283198][ T30] audit: type=1400 audit(1904285649.395:757): avc: denied { relabelfrom } for pid=9605 comm="syz.5.3566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 221.368777][ T30] audit: type=1400 audit(1904285649.395:758): avc: denied { relabelto } for pid=9605 comm="syz.5.3566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 221.773571][ T9629] tipc: Started in network mode [ 221.778633][ T9629] tipc: Node identity fffffffa, cluster identity 4711 [ 221.791927][ T9629] tipc: Node number set to 4294967290 [ 221.825273][ T9624] loop0: detected capacity change from 0 to 40427 [ 221.903949][ T9624] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 221.916067][ T9624] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 221.926818][ T9624] F2FS-fs (loop0): invalid crc value [ 221.936701][ T9638] loop5: detected capacity change from 0 to 512 [ 221.958031][ T9624] F2FS-fs (loop0): Found nat_bits in checkpoint [ 221.979243][ T9638] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 222.005696][ T9638] ext4 filesystem being mounted at /54/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.040073][ T9624] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 222.047321][ T9624] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 222.079462][ T9140] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 222.092919][ T9140] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 222.107248][ T9140] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 222.119328][ T9140] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 222.131622][ T9140] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 222.159798][ T9140] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 222.172025][ T9140] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 222.184899][ T9140] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 222.197978][ T9140] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 222.234349][ T9645] attempt to access beyond end of device [ 222.234349][ T9645] loop0: rw=2049, want=77960, limit=40427 [ 222.238925][ T9140] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 222.444258][ T1966] tipc: Left network mode [ 222.861531][ T9658] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.927131][ T9658] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.939460][ T30] audit: type=1400 audit(1904285651.055:759): avc: denied { read } for pid=9665 comm="syz.4.3591" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=61828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 223.006429][ T9658] device bridge_slave_0 entered promiscuous mode [ 223.049710][ T9658] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.107792][ T9658] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.143163][ T9658] device bridge_slave_1 entered promiscuous mode [ 223.218676][ T1966] device bridge_slave_1 left promiscuous mode [ 223.226121][ T1966] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.235103][ T1966] device bridge_slave_0 left promiscuous mode [ 223.242031][ T1966] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.262099][ T1966] device veth1_macvtap left promiscuous mode [ 223.268456][ T1966] device veth0_vlan left promiscuous mode [ 223.568885][ T9658] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.575997][ T9658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.583323][ T9658] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.590392][ T9658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.631745][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3611'. [ 223.663002][ T969] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.670983][ T969] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.681091][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.691062][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.721159][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.736485][ T969] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.743576][ T969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.755420][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.764980][ T969] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.772255][ T969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.797606][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.814536][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.844783][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 223.860482][ T9658] device veth0_vlan entered promiscuous mode [ 223.868215][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 223.877168][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.893069][ T9658] device veth1_macvtap entered promiscuous mode [ 223.901539][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.909531][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 223.917584][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.927311][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.936612][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.956793][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.969021][ T30] audit: type=1326 audit(1904285652.095:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.4.3614" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f1da5feccd7 code=0x0 [ 223.984935][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.020030][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 224.044562][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.100943][ T9741] xt_hashlimit: size too large, truncated to 1048576 [ 224.154582][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3584'. [ 224.175879][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.198450][ T9742] device bridge_slave_0 left promiscuous mode [ 224.230628][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.303568][ T30] audit: type=1326 audit(1904285654.415:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9783 comm="syz.6.3628" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48e8670eb9 code=0x0 [ 226.417564][ T9792] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3631'. [ 228.017024][ T9807] loop6: detected capacity change from 0 to 40427 [ 228.096737][ T9807] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 228.117011][ T9807] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 228.165324][ T9807] F2FS-fs (loop6): invalid crc value [ 228.235130][ T9807] F2FS-fs (loop6): Found nat_bits in checkpoint [ 228.388410][ T9807] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 228.420504][ T9807] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 228.624176][ T9819] attempt to access beyond end of device [ 228.624176][ T9819] loop6: rw=2049, want=77960, limit=40427 [ 229.924044][ T30] audit: type=1400 audit(1904285658.035:762): avc: denied { setattr } for pid=9854 comm="syz.4.3654" name="NETLINK" dev="sockfs" ino=64963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 230.049639][ T9859] device veth0_vlan left promiscuous mode [ 230.084588][ T9859] device veth0_vlan entered promiscuous mode [ 230.111184][ T9859] device veth1_macvtap left promiscuous mode [ 230.124321][ T9859] device veth1_macvtap entered promiscuous mode [ 230.158594][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.174525][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.184841][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.223539][ T969] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.230671][ T969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.287197][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.324612][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.333241][ T969] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.340344][ T969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.348562][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.362862][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 230.371568][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.380039][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 230.398178][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.439295][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.457235][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.467381][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.476463][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.488376][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 230.497513][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 230.506232][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 230.517218][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 230.528580][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.539223][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.550816][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.559270][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.574425][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.611419][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 230.664478][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.706577][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.763626][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.794145][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.831407][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 230.858237][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 230.876519][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 230.900574][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 230.925372][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 230.950024][ T969] bridge1: port 1(veth3) entered blocking state [ 230.956375][ T969] bridge1: port 1(veth3) entered forwarding state [ 230.966368][ T9894] selinux_netlink_send: 64 callbacks suppressed [ 230.966387][ T9894] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9894 comm=syz.0.3669 [ 231.009412][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.046091][ T9877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3663'. [ 231.062918][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3663'. [ 231.102979][ T9877] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 231.120159][ T9892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3669'. [ 231.268052][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3672'. [ 231.448638][ T9914] futex_wake_op: syz.4.3677 tries to shift op by -1; fix this program [ 231.464169][ T30] audit: type=1326 audit(1904285659.585:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9913 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da5ff2eb9 code=0x7ffc0000 [ 231.502854][ T30] audit: type=1326 audit(1904285659.615:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9913 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1da5feccd7 code=0x7ffc0000 [ 231.526862][ T30] audit: type=1326 audit(1904285659.615:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9913 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1da5f942d9 code=0x7ffc0000 [ 231.580456][ T9917] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 231.622272][ T30] audit: type=1326 audit(1904285659.615:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9913 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1da5ff2eb9 code=0x7ffc0000 [ 231.686585][ T30] audit: type=1326 audit(1904285659.615:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9913 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da5ff2eb9 code=0x7ffc0000 [ 231.744313][ T30] audit: type=1326 audit(1904285659.615:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9913 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f1da5ff2eb9 code=0x7ffc0000 [ 231.812127][ T30] audit: type=1326 audit(1904285659.615:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9913 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1da5feccd7 code=0x7ffc0000 [ 231.895661][ T30] audit: type=1326 audit(1904285659.615:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9913 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1da5f942d9 code=0x7ffc0000 [ 231.974966][ T30] audit: type=1326 audit(1904285659.615:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9913 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f1da5ff2eb9 code=0x7ffc0000 [ 232.051978][ T30] audit: type=1326 audit(1904285659.645:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9913 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1da5feccd7 code=0x7ffc0000 [ 232.117739][ T9919] loop6: detected capacity change from 0 to 40427 [ 232.129484][ T9926] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3682'. [ 232.158761][ T9919] F2FS-fs (loop6): Unrecognized mount option "age_extent_cache" or missing value [ 232.182371][ T9931] tipc: Can't bind to reserved service type 0 [ 232.225335][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3685'. [ 232.297692][ T9937] loop6: detected capacity change from 0 to 1024 [ 232.328405][ T9937] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,journal_dev=0x0000000000000080,nombcache,nobarrier,init_itable,errors=remount-ro,. Quota mode: none. [ 232.346464][ T9924] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3681'. [ 232.361317][ T9924] netem: unknown loss type 12 [ 232.367540][ T9924] netem: change failed [ 232.375781][ T9937] EXT4-fs error (device loop6): __ext4_get_inode_loc:4358: comm syz.6.3687: Invalid inode table block 17587891077129 in block_group 0 [ 232.390231][ T9937] EXT4-fs (loop6): Remounting filesystem read-only [ 232.399913][ T9937] EXT4-fs error (device loop6): __ext4_get_inode_loc:4358: comm syz.6.3687: Invalid inode table block 17587891077129 in block_group 0 [ 232.415743][ T9937] EXT4-fs (loop6): Remounting filesystem read-only [ 232.492291][ T9952] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3693'. [ 232.785209][ T9957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3694'. [ 232.862749][ T9957] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9957 comm=syz.0.3694 [ 233.293327][ T9979] loop0: detected capacity change from 0 to 256 [ 233.849576][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3705'. [ 233.859777][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3705'. [ 233.886961][ T9996] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3707'. [ 233.896631][ T9996] device gretap0 entered promiscuous mode [ 233.926854][ T9996] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3707'. [ 233.940817][ T9996] 0{X: renamed from gretap0 [ 233.947372][ T9996] device 30{X left promiscuous mode [ 233.954356][ T9996] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 234.940443][T10037] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.969316][T10037] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 235.155108][T10057] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3729'. [ 237.358661][T10101] netlink: 'syz.6.3746': attribute type 5 has an invalid length. [ 237.689118][T10104] loop6: detected capacity change from 0 to 8192 [ 239.243184][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3765'. [ 239.306349][T10118] loop0: detected capacity change from 0 to 40427 [ 239.320469][T10139] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3761'. [ 239.329673][T10139] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3761'. [ 239.334050][T10118] F2FS-fs (loop0): invalid crc value [ 239.347085][T10118] F2FS-fs (loop0): Found nat_bits in checkpoint [ 239.367567][T10139] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3761'. [ 239.379143][T10139] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3761'. [ 239.540140][T10118] F2FS-fs (loop0): Start checkpoint disabled! [ 239.705559][T10149] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3763'. [ 239.726175][T10149] device veth9 entered promiscuous mode [ 239.727101][T10118] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 239.740292][T10149] bridge6: port 1(veth9) entered blocking state [ 239.747531][T10149] bridge6: port 1(veth9) entered disabled state [ 239.754706][T10149] bridge6: port 1(veth9) entered blocking state [ 239.760981][T10149] bridge6: port 1(veth9) entered forwarding state [ 239.769647][ T1771] bridge6: port 1(veth9) entered disabled state [ 240.188780][T10118] attempt to access beyond end of device [ 240.188780][T10118] loop0: rw=2049, want=78800, limit=40427 [ 240.265681][ T1771] attempt to access beyond end of device [ 240.265681][ T1771] loop0: rw=2049, want=45112, limit=40427 [ 240.281886][ T30] kauditd_printk_skb: 125 callbacks suppressed [ 240.282852][ T30] audit: type=1400 audit(1904285668.405:898): avc: denied { watch watch_reads } for pid=10161 comm="syz.2.3770" path="/" dev="ramfs" ino=67783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 240.544665][T10171] xt_hashlimit: size too large, truncated to 1048576 [ 240.825414][ T30] audit: type=1400 audit(1904285668.945:899): avc: denied { read } for pid=10174 comm="syz.6.3776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 240.827242][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3776'. [ 241.341868][T10186] loop6: detected capacity change from 0 to 40427 [ 241.351916][T10186] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 241.366342][T10186] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 241.393413][T10186] F2FS-fs (loop6): invalid crc value [ 241.422454][T10186] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 241.475553][T10186] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 241.482938][T10186] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 241.520463][T10216] netlink: 'syz.4.3790': attribute type 4 has an invalid length. [ 241.542650][T10216] netlink: 'syz.4.3790': attribute type 4 has an invalid length. [ 241.660548][T10186] attempt to access beyond end of device [ 241.660548][T10186] loop6: rw=2049, want=55400, limit=40427 [ 241.678016][T10186] attempt to access beyond end of device [ 241.678016][T10186] loop6: rw=2049, want=57344, limit=40427 [ 241.741883][T10186] attempt to access beyond end of device [ 241.741883][T10186] loop6: rw=2049, want=50888, limit=40427 [ 241.765490][T10223] attempt to access beyond end of device [ 241.765490][T10223] loop6: rw=524288, want=53504, limit=40427 [ 241.788172][T10223] attempt to access beyond end of device [ 241.788172][T10223] loop6: rw=0, want=53256, limit=40427 [ 241.814048][T10223] attempt to access beyond end of device [ 241.814048][T10223] loop6: rw=0, want=53256, limit=40427 [ 241.825993][T10223] attempt to access beyond end of device [ 241.825993][T10223] loop6: rw=0, want=53256, limit=40427 [ 241.847988][T10223] attempt to access beyond end of device [ 241.847988][T10223] loop6: rw=0, want=53256, limit=40427 [ 242.134322][T10255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3805'. [ 242.157321][T10255] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10255 comm=syz.0.3805 [ 243.494640][T10286] loop6: detected capacity change from 0 to 128 [ 243.538546][T10288] overlayfs: failed to clone upperpath [ 243.671973][T10297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.679262][T10297] IPv6: NLM_F_CREATE should be set when creating new route [ 246.308652][ T30] audit: type=1400 audit(1904285674.425:900): avc: denied { create } for pid=10312 comm="syz.4.3826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 246.384280][ T30] audit: type=1326 audit(1904285674.445:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.4.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da5ff2eb9 code=0x7ffc0000 [ 246.458669][ T30] audit: type=1326 audit(1904285674.445:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.4.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da5ff2eb9 code=0x7ffc0000 [ 246.532905][ T30] audit: type=1326 audit(1904285674.445:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.4.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da5ff2eb9 code=0x7ffc0000 [ 246.632993][ T30] audit: type=1326 audit(1904285674.445:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.4.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da5ff2eb9 code=0x7ffc0000 [ 246.666903][ T30] audit: type=1326 audit(1904285674.455:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.4.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1da5ff2eb9 code=0x7ffc0000 [ 246.710316][ T30] audit: type=1326 audit(1904285674.455:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.4.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da5ff2eb9 code=0x7ffc0000 [ 246.761220][ T30] audit: type=1326 audit(1904285674.455:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.4.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da5ff2eb9 code=0x7ffc0000 [ 246.790704][T10322] device batadv_slave_1 entered promiscuous mode [ 246.812686][T10322] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3828'. [ 246.848852][T10322] device batadv_slave_1 left promiscuous mode [ 246.871654][ T30] audit: type=1326 audit(1904285674.455:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.4.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da5ff2eb9 code=0x7ffc0000 [ 246.972860][ T30] audit: type=1326 audit(1904285674.455:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.4.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da5ff2eb9 code=0x7ffc0000 [ 248.435764][T10393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3858'. [ 248.475958][T10387] xt_CT: No such helper "pptp" [ 249.203133][T10413] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3866'. [ 249.240514][T10413] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10413 comm=syz.7.3866 [ 249.502732][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3867'. [ 250.017462][T10435] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3872'. [ 250.040097][T10437] binder: 10436:10437 ioctl c0306201 200000000640 returned -22 [ 250.059430][T10440] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3876'. [ 250.448398][T10466] netlink: 312 bytes leftover after parsing attributes in process `syz.6.3886'. [ 252.505406][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3901'. [ 252.570491][T10500] netlink: 'syz.6.3901': attribute type 5 has an invalid length. [ 252.598148][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3901'. [ 252.624215][T10504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3902'. [ 254.138289][T10579] overlayfs: failed to clone upperpath [ 254.144716][T10579] overlayfs: failed to clone upperpath [ 254.161536][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 254.161555][ T30] audit: type=1400 audit(1904285682.275:950): avc: denied { nlmsg_read } for pid=10580 comm="syz.4.3934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 254.189689][ T30] audit: type=1400 audit(1904285682.275:951): avc: denied { audit_write } for pid=10580 comm="syz.4.3934" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 254.211527][ T30] audit: type=1107 audit(1904285682.275:952): pid=10580 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 254.225721][ T63] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 254.317644][T10588] overlayfs: failed to clone upperpath [ 254.324467][T10588] overlayfs: failed to clone upperpath [ 254.349687][T10586] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.3936'. [ 254.483766][ T63] usb 7-1: Using ep0 maxpacket: 32 [ 254.532759][T10605] overlayfs: failed to clone upperpath [ 254.613821][ T63] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 254.627707][ T63] usb 7-1: config 0 has no interface number 0 [ 254.649198][ T63] usb 7-1: config 0 interface 184 has no altsetting 0 [ 254.835226][ T63] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 254.845304][ T63] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.853471][ T63] usb 7-1: Product: syz [ 254.858750][ T63] usb 7-1: Manufacturer: syz [ 254.864167][ T63] usb 7-1: SerialNumber: syz [ 254.883527][ T63] usb 7-1: config 0 descriptor?? [ 254.934523][ T63] smsc75xx v1.0.0 [ 255.633745][ T63] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 255.650597][ T63] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 256.473526][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 256.488306][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 256.502632][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 256.524304][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 256.540972][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 256.549561][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 256.557778][ T1771] bridge6: port 1(veth9) entered blocking state [ 256.564092][ T1771] bridge6: port 1(veth9) entered forwarding state [ 256.570808][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 256.578634][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 257.343724][ T63] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 257.358763][ T63] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 257.368985][ T63] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 257.378617][ T63] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 257.388417][ T63] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 257.400789][ T63] usb 7-1: USB disconnect, device number 7 [ 257.566011][T10656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3965'. [ 257.586571][T10656] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10656 comm=syz.2.3965 [ 257.644155][T10656] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3965'. [ 258.766218][T10659] netlink: 624 bytes leftover after parsing attributes in process `syz.0.3964'. [ 258.911796][T10673] device veth0_vlan left promiscuous mode [ 258.929826][T10673] device veth0_vlan entered promiscuous mode [ 258.945234][T10673] device veth1_macvtap left promiscuous mode [ 258.966163][T10673] device veth1_macvtap entered promiscuous mode [ 258.984621][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.996883][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.015343][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.033774][ T1965] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.041109][ T1965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.073890][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.082962][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 259.114027][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.122355][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 259.148260][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.174150][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.187021][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.197813][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.207161][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.216039][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.224821][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.233389][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.242118][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.251284][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.259778][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.268404][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.276767][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.285202][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.294029][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.302726][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.311294][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.319494][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.327334][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.335053][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.343416][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.352218][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 259.361942][ T1965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.589744][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3972'. [ 259.665223][T10689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3977'. [ 259.702497][T10689] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10689 comm=syz.0.3977 [ 260.958181][T10724] futex_wake_op: syz.0.3990 tries to shift op by -1; fix this program [ 260.967877][ T30] audit: type=1326 audit(1904286201.093:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c1289eb9 code=0x7ffc0000 [ 260.993831][ T30] audit: type=1326 audit(1904286201.113:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe8c1283cd7 code=0x7ffc0000 [ 261.018920][ T30] audit: type=1326 audit(1904286201.113:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe8c122b2d9 code=0x7ffc0000 [ 261.043591][T10725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3989'. [ 261.064108][T10725] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10725 comm=syz.2.3989 [ 261.083146][ T30] audit: type=1326 audit(1904286201.113:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8c1289eb9 code=0x7ffc0000 [ 261.112524][ T30] audit: type=1326 audit(1904286201.113:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c1289eb9 code=0x7ffc0000 [ 261.137385][ T30] audit: type=1326 audit(1904286201.113:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fe8c1289eb9 code=0x7ffc0000 [ 261.162757][ T30] audit: type=1326 audit(1904286201.143:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe8c1283cd7 code=0x7ffc0000 [ 261.186863][ T30] audit: type=1326 audit(1904286201.143:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe8c122b2d9 code=0x7ffc0000 [ 261.210951][ T30] audit: type=1326 audit(1904286201.143:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fe8c1289eb9 code=0x7ffc0000 [ 261.234989][ T30] audit: type=1326 audit(1904286201.173:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe8c1283cd7 code=0x7ffc0000 [ 261.306707][T10730] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3991'. [ 261.835525][T10740] overlayfs: failed to clone lowerpath [ 261.849663][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 261.868366][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 261.878446][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 261.898281][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 261.916407][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 261.954066][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 261.982884][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 261.995673][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 262.023678][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 262.053939][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 262.063994][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 262.113754][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 262.354160][T10761] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4000'. [ 263.190728][T10739] loop6: detected capacity change from 0 to 131072 [ 263.205544][T10739] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 263.216614][T10739] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 263.234678][T10739] F2FS-fs (loop6): invalid crc value [ 263.246818][T10739] F2FS-fs (loop6): Found nat_bits in checkpoint [ 263.278697][T10739] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 263.285874][T10739] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 263.410361][T10787] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 263.439944][T10787] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 263.469817][T10787] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 263.492290][T10787] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 263.500248][T10787] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 263.509018][T10787] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 263.559064][T10787] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 263.582657][T10787] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 263.605277][T10787] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.660222][T10791] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4016'. [ 263.701516][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 263.727027][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 263.746652][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 263.754672][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 263.762640][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): veth17: link becomes ready [ 263.777025][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 263.784816][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): veth19: link becomes ready [ 263.795871][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): veth18: link becomes ready [ 263.814022][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4017'. [ 263.836763][T10805] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 263.852668][T10805] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 263.862677][T10805] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 263.871220][T10805] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 263.880838][T10805] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 263.890160][T10805] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 263.903922][T10805] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 263.911288][T10805] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 263.928872][T10805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.714542][T10894] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 266.760922][T10894] SELinux: duplicate or incompatible mount options [ 266.869354][T10902] netlink: 180 bytes leftover after parsing attributes in process `syz.6.4057'. [ 266.889885][T10902] netlink: 180 bytes leftover after parsing attributes in process `syz.6.4057'. [ 266.986119][T10902] netlink: 180 bytes leftover after parsing attributes in process `syz.6.4057'. [ 270.477978][T10959] overlayfs: failed to clone lowerpath [ 270.650798][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4082'. [ 270.661290][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4082'. [ 270.758072][T10977] loop6: detected capacity change from 0 to 16 [ 270.781338][T10977] erofs: (device loop6): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 271.382540][T11000] kvm: pic: level sensitive irq not supported [ 271.382606][T11000] kvm: pic: single mode not supported [ 271.572935][T11012] serio: Serial port ptm0 [ 272.109530][T11033] overlayfs: failed to clone upperpath [ 273.112572][T11047] loop6: detected capacity change from 0 to 4096 [ 274.550621][T11047] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 274.874493][T11047] EXT4-fs warning (device loop6): ext4_enable_quotas:6453: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 274.900348][T11047] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 274.941020][T11047] EXT4-fs warning (device loop6): ext4_enable_quotas:6453: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 275.308687][T11083] loop6: detected capacity change from 0 to 128 [ 275.344412][T11083] EXT4-fs (loop6): Test dummy encryption mode enabled [ 275.378504][T11083] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 275.395048][T11083] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 275.490059][ T9658] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /81/mnt/lost+found: directory fails checksum at offset 6144 [ 275.505960][ T9658] EXT4-fs error (device loop6): ext4_empty_dir:3166: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 275.520275][ T9658] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /81/mnt/lost+found: directory fails checksum at offset 6144 [ 275.536185][ T9658] EXT4-fs error (device loop6): ext4_empty_dir:3166: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 275.550835][ T9658] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /81/mnt/lost+found: directory fails checksum at offset 6144 [ 275.566695][ T9658] EXT4-fs error (device loop6): ext4_empty_dir:3166: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 275.580586][ T9658] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /81/mnt/lost+found: directory fails checksum at offset 6144 [ 275.596508][ T9658] EXT4-fs error (device loop6): ext4_empty_dir:3166: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 275.616979][ T9658] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /81/mnt/lost+found: directory fails checksum at offset 6144 [ 275.633971][ T9658] EXT4-fs error (device loop6): ext4_empty_dir:3166: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 275.758558][T11091] netlink: 'syz.2.4127': attribute type 4 has an invalid length. [ 275.793105][T11091] netlink: 'syz.2.4127': attribute type 4 has an invalid length. [ 276.423330][T11101] xt_CT: You must specify a L4 protocol and not use inversions on it [ 276.940872][T11109] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.947983][T11109] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.955832][T11109] device bridge_slave_0 entered promiscuous mode [ 276.963215][T11109] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.970555][T11109] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.978173][T11109] device bridge_slave_1 entered promiscuous mode [ 277.050529][T11109] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.057635][T11109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.065052][T11109] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.072099][T11109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.102166][ T1962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.110095][ T1962] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.118414][ T1962] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.140447][ T1962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.149810][ T1962] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.157085][ T1962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.165690][ T1962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.174852][ T1962] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.181904][ T1962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.204525][ T1962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.213920][ T1962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.229672][ T1962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.250236][ T1962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.261662][T11109] device veth0_vlan entered promiscuous mode [ 277.269017][ T1962] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.278961][ T1962] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.309203][ T1962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.323784][T11109] device veth1_macvtap entered promiscuous mode [ 277.344333][ T1962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.363684][ T1962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.380228][ T1771] device bridge_slave_1 left promiscuous mode [ 277.387769][ T1771] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.399360][ T1771] device veth1_macvtap left promiscuous mode [ 277.405891][ T1771] device veth0_vlan left promiscuous mode [ 277.621349][T11124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4146'. [ 277.625772][ T30] kauditd_printk_skb: 201 callbacks suppressed [ 277.625788][ T30] audit: type=1400 audit(1904286217.753:1164): avc: denied { mounton } for pid=11109 comm="syz-executor" path="/root/syzkaller.xtyv9M/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=70182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 277.671492][T11127] device veth21 entered promiscuous mode [ 277.682272][T11127] bridge6: port 1(veth21) entered blocking state [ 277.698012][T11127] bridge6: port 1(veth21) entered disabled state [ 277.712974][T11127] bridge6: port 1(veth21) entered blocking state [ 277.719898][T11127] bridge6: port 1(veth21) entered forwarding state [ 277.874569][ T1962] bridge6: port 1(veth21) entered disabled state [ 278.449138][ T30] audit: type=1400 audit(1904286218.573:1165): avc: denied { connect } for pid=11142 comm="syz.4.4152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 278.470682][T11144] netlink: 'syz.7.4142': attribute type 5 has an invalid length. [ 278.693048][T11161] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4150'. [ 278.720574][T11161] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4150'. [ 283.776134][T11240] netlink: 'syz.0.4178': attribute type 3 has an invalid length. [ 287.240511][T11273] netlink: 312 bytes leftover after parsing attributes in process `syz.8.4190'. [ 287.543532][ T6] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 287.783503][ T6] usb 9-1: Using ep0 maxpacket: 16 [ 287.943576][ T6] usb 9-1: unable to get BOS descriptor or descriptor too short [ 288.033592][ T6] usb 9-1: config 13 has an invalid interface number: 50 but max is 0 [ 288.051462][ T6] usb 9-1: config 13 has no interface number 0 [ 288.083868][ T6] usb 9-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 288.136223][ T6] usb 9-1: config 13 interface 50 has no altsetting 0 [ 288.303606][ T6] usb 9-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 288.344810][ T6] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.352961][ T6] usb 9-1: Product: syz [ 288.398334][ T6] usb 9-1: Manufacturer: syz [ 288.402971][ T6] usb 9-1: SerialNumber: syz [ 288.463570][T11273] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 289.363622][ T6] usb 9-1: MIDIStreaming interface descriptor not found [ 289.401247][ T6] usb 9-1: USB disconnect, device number 6 [ 289.520464][T11301] bridge0: port 3(veth0_to_bridge) entered blocking state [ 289.527814][T11301] bridge0: port 3(veth0_to_bridge) entered disabled state [ 289.536283][T11301] device veth0_to_bridge entered promiscuous mode [ 289.543011][T11301] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.556675][T11301] bridge0: port 3(veth0_to_bridge) entered blocking state [ 289.563844][T11301] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 289.591136][T11301] device veth0_to_bridge left promiscuous mode [ 289.597543][T11301] bridge0: port 3(veth0_to_bridge) entered disabled state [ 291.520085][T11342] loop8: detected capacity change from 0 to 128 [ 291.626105][T11342] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 291.685184][T11342] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 295.532320][T11437] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.539721][T11437] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.874696][T11437] bridge6: port 1(veth9) entered disabled state [ 296.625184][T11476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4263'. [ 296.637417][T11476] netlink: 'syz.2.4263': attribute type 5 has an invalid length. [ 296.645293][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4263'. [ 298.616310][T11522] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4280'. [ 298.658485][T11522] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11522 comm=syz.7.4280 [ 301.783408][T11587] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 301.909968][T11591] overlayfs: failed to clone upperpath [ 302.509855][T11612] overlayfs: failed to clone upperpath [ 302.534658][T11612] overlayfs: failed to clone lowerpath [ 302.872047][T11621] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 302.879364][T11621] IPv6: NLM_F_CREATE should be set when creating new route [ 302.949291][T11621] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.956597][T11621] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.697467][T11657] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4334'. [ 304.585235][T11679] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4341'. [ 306.368791][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4384'. [ 307.047385][T11798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4385'. [ 307.217412][T11798] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11798 comm=syz.2.4385 [ 307.469440][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4389'. [ 307.977045][T11834] overlayfs: failed to clone upperpath [ 308.508089][T11862] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 310.551597][T11882] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 311.436700][T11898] device batadv_slave_1 entered promiscuous mode [ 311.445731][T11898] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4425'. [ 311.456429][T11898] device batadv_slave_1 left promiscuous mode [ 311.527847][ T30] audit: type=1107 audit(1904286251.644:1166): pid=11906 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 311.554045][T11911] overlayfs: failed to clone upperpath [ 311.567884][T11911] overlayfs: failed to clone upperpath [ 311.911353][T11934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4442'. [ 314.183727][ T30] audit: type=1400 audit(1904286254.304:1167): avc: denied { mounton } for pid=11970 comm="syz.2.4455" path="/755/file0/file0" dev="tmpfs" ino=4112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 315.279166][T12018] virtio-fs: tag not found [ 316.289200][T12035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4479'. [ 316.401630][T12037] netlink: 624 bytes leftover after parsing attributes in process `syz.2.4478'. [ 316.575567][ T30] audit: type=1400 audit(1904286256.694:1168): avc: denied { map } for pid=12038 comm="syz.0.4490" path="socket:[93627]" dev="sockfs" ino=93627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 317.807312][ T63] kernel write not supported for file bpf-prog (pid: 63 comm: kworker/1:2) [ 318.322370][T12090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4498'. [ 318.342615][ T30] audit: type=1400 audit(1904286258.454:1169): avc: denied { map } for pid=12093 comm="syz.7.4500" path="socket:[94465]" dev="sockfs" ino=94465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 318.438282][T12102] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 318.459479][T12105] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 319.311959][T12122] device bridge_slave_0 left promiscuous mode [ 319.318181][T12122] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.460183][T12122] device bridge_slave_1 left promiscuous mode [ 319.467360][T12122] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.286391][T12176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4531'. [ 323.846714][T12246] netlink: 'syz.2.4557': attribute type 7 has an invalid length. [ 323.855482][T12246] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4557'. [ 326.134996][T12289] overlayfs: failed to clone lowerpath [ 326.182327][T12290] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 326.202154][T12290] SELinux: duplicate or incompatible mount options [ 326.442720][T12300] ================================================================== [ 326.450943][T12300] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 326.460191][T12300] Read of size 1 at addr ffff888119eae3f8 by task syz.4.4578/12300 [ 326.468108][T12300] [ 326.470474][T12300] CPU: 0 PID: 12300 Comm: syz.4.4578 Tainted: G W syzkaller #0 [ 326.479437][T12300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 326.489629][T12300] Call Trace: [ 326.493019][T12300] [ 326.495974][T12300] __dump_stack+0x21/0x30 [ 326.500335][T12300] dump_stack_lvl+0x110/0x170 [ 326.505044][T12300] ? show_regs_print_info+0x20/0x20 [ 326.510440][T12300] ? load_image+0x3e0/0x3e0 [ 326.514958][T12300] ? unwind_get_return_address+0x4d/0x90 [ 326.520618][T12300] print_address_description+0x7f/0x2c0 [ 326.526186][T12300] ? xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 326.532799][T12300] kasan_report+0xf1/0x140 [ 326.537253][T12300] ? xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 326.543821][T12300] __asan_report_load1_noabort+0x14/0x20 [ 326.549564][T12300] xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 326.556016][T12300] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 326.562199][T12300] ? xfrm_netlink_rcv+0x72/0x90 [ 326.567160][T12300] ? netlink_unicast+0x876/0xa40 [ 326.572204][T12300] ? ____sys_sendmsg+0x5b7/0x8f0 [ 326.577266][T12300] ? x64_sys_call+0x4b/0x9a0 [ 326.581886][T12300] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 326.588621][T12300] xfrm_policy_inexact_alloc_chain+0x53d/0xb30 [ 326.594813][T12300] xfrm_policy_inexact_insert+0x70/0x1130 [ 326.600561][T12300] ? __kasan_check_write+0x14/0x20 [ 326.605805][T12300] ? _raw_spin_lock_bh+0x94/0xf0 [ 326.610775][T12300] ? policy_hash_bysel+0x13f/0x6f0 [ 326.615920][T12300] xfrm_policy_insert+0x126/0x9a0 [ 326.620976][T12300] ? xfrm_policy_construct+0x54f/0x1f00 [ 326.626544][T12300] xfrm_add_policy+0x4ed/0x850 [ 326.631421][T12300] ? xfrm_dump_sa_done+0xc0/0xc0 [ 326.636396][T12300] xfrm_user_rcv_msg+0x4dc/0x7b0 [ 326.641358][T12300] ? xfrm_netlink_rcv+0x90/0x90 [ 326.646249][T12300] ? avc_has_perm_noaudit+0x490/0x490 [ 326.651640][T12300] ? x64_sys_call+0x4b/0x9a0 [ 326.656248][T12300] ? selinux_nlmsg_lookup+0x237/0x4c0 [ 326.661642][T12300] netlink_rcv_skb+0x1f5/0x440 [ 326.666425][T12300] ? xfrm_netlink_rcv+0x90/0x90 [ 326.671298][T12300] ? netlink_ack+0xb50/0xb50 [ 326.675906][T12300] ? wait_for_completion_killable_timeout+0x10/0x10 [ 326.682520][T12300] ? __netlink_lookup+0x387/0x3b0 [ 326.687659][T12300] xfrm_netlink_rcv+0x72/0x90 [ 326.692377][T12300] netlink_unicast+0x876/0xa40 [ 326.697166][T12300] netlink_sendmsg+0x879/0xb80 [ 326.701946][T12300] ? netlink_getsockopt+0x530/0x530 [ 326.707163][T12300] ? do_futex+0xde8/0x2800 [ 326.711599][T12300] ? security_socket_sendmsg+0x82/0xa0 [ 326.717074][T12300] ? netlink_getsockopt+0x530/0x530 [ 326.722377][T12300] ____sys_sendmsg+0x5b7/0x8f0 [ 326.727165][T12300] ? __sys_sendmsg_sock+0x40/0x40 [ 326.732309][T12300] ? import_iovec+0x7c/0xb0 [ 326.736827][T12300] ___sys_sendmsg+0x236/0x2e0 [ 326.741520][T12300] ? __sys_sendmsg+0x280/0x280 [ 326.746305][T12300] ? __fdget+0x1a1/0x230 [ 326.750568][T12300] __x64_sys_sendmsg+0x206/0x2f0 [ 326.755536][T12300] ? ___sys_sendmsg+0x2e0/0x2e0 [ 326.760426][T12300] ? __kasan_check_write+0x14/0x20 [ 326.765556][T12300] ? switch_fpu_return+0x15d/0x2c0 [ 326.770674][T12300] x64_sys_call+0x4b/0x9a0 [ 326.775114][T12300] do_syscall_64+0x4c/0xa0 [ 326.779563][T12300] ? clear_bhb_loop+0x50/0xa0 [ 326.784234][T12300] ? clear_bhb_loop+0x50/0xa0 [ 326.788909][T12300] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 326.794792][T12300] RIP: 0033:0x7f1da5ff2eb9 [ 326.799198][T12300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.818797][T12300] RSP: 002b:00007f1da4a4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.827379][T12300] RAX: ffffffffffffffda RBX: 00007f1da626dfa0 RCX: 00007f1da5ff2eb9 [ 326.835384][T12300] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 326.843354][T12300] RBP: 00007f1da6060c1f R08: 0000000000000000 R09: 0000000000000000 [ 326.851348][T12300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.859347][T12300] R13: 00007f1da626e038 R14: 00007f1da626dfa0 R15: 00007ffdaff30298 [ 326.867317][T12300] [ 326.870436][T12300] [ 326.872757][T12300] Allocated by task 12300: [ 326.877185][T12300] __kasan_kmalloc+0xda/0x110 [ 326.881852][T12300] __kmalloc+0x13d/0x2c0 [ 326.886205][T12300] sk_prot_alloc+0xed/0x320 [ 326.890883][T12300] sk_alloc+0x38/0x430 [ 326.895034][T12300] pfkey_create+0x12a/0x660 [ 326.899610][T12300] __sock_create+0x38d/0x7a0 [ 326.904187][T12300] __sys_socket+0xec/0x190 [ 326.908589][T12300] __x64_sys_socket+0x7a/0x90 [ 326.913344][T12300] x64_sys_call+0x8c5/0x9a0 [ 326.917833][T12300] do_syscall_64+0x4c/0xa0 [ 326.922239][T12300] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 326.928220][T12300] [ 326.930555][T12300] The buggy address belongs to the object at ffff888119eae000 [ 326.930555][T12300] which belongs to the cache kmalloc-1k of size 1024 [ 326.944619][T12300] The buggy address is located 1016 bytes inside of [ 326.944619][T12300] 1024-byte region [ffff888119eae000, ffff888119eae400) [ 326.958177][T12300] The buggy address belongs to the page: [ 326.963977][T12300] page:ffffea000467aa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119ea8 [ 326.974375][T12300] head:ffffea000467aa00 order:3 compound_mapcount:0 compound_pincount:0 [ 326.982691][T12300] flags: 0x4000000000010200(slab|head|zone=1) [ 326.988855][T12300] raw: 4000000000010200 0000000000000000 0000000600000001 ffff888100043080 [ 326.997521][T12300] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 327.006172][T12300] page dumped because: kasan: bad access detected [ 327.012669][T12300] page_owner tracks the page as allocated [ 327.018396][T12300] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 10564, ts 253606506156, free_ts 250188611276 [ 327.038618][T12300] post_alloc_hook+0x192/0x1b0 [ 327.043378][T12300] prep_new_page+0x1c/0x110 [ 327.047870][T12300] get_page_from_freelist+0x2d3a/0x2dc0 [ 327.053416][T12300] __alloc_pages+0x1a2/0x460 [ 327.057992][T12300] new_slab+0xa1/0x4d0 [ 327.062159][T12300] ___slab_alloc+0x381/0x810 [ 327.066765][T12300] __slab_alloc+0x49/0x90 [ 327.071081][T12300] __kmalloc_track_caller+0x169/0x2c0 [ 327.076445][T12300] __alloc_skb+0x21a/0x740 [ 327.080850][T12300] tipc_msg_create+0x4b/0x4e0 [ 327.085513][T12300] tipc_sk_filter_rcv+0x1726/0x2cb0 [ 327.090695][T12300] tipc_sk_rcv+0x794/0x2c20 [ 327.095282][T12300] tipc_node_xmit+0x26c/0xd80 [ 327.099947][T12300] __tipc_sendstream+0xa81/0x11b0 [ 327.105304][T12300] tipc_send_packet+0x7c/0xa0 [ 327.109964][T12300] ____sys_sendmsg+0x5b7/0x8f0 [ 327.114722][T12300] page last free stack trace: [ 327.119389][T12300] free_unref_page_prepare+0x542/0x550 [ 327.124833][T12300] free_unref_page+0xae/0x540 [ 327.129495][T12300] __free_pages+0x6c/0x100 [ 327.133895][T12300] __free_slab+0xe8/0x1e0 [ 327.138212][T12300] discard_slab+0x29/0x40 [ 327.142527][T12300] __slab_free+0x211/0x290 [ 327.146927][T12300] ___cache_free+0x104/0x120 [ 327.151523][T12300] qlink_free+0x4d/0x90 [ 327.155670][T12300] qlist_free_all+0x5f/0xb0 [ 327.160162][T12300] kasan_quarantine_reduce+0x14a/0x170 [ 327.165609][T12300] __kasan_slab_alloc+0x2f/0xf0 [ 327.170446][T12300] slab_post_alloc_hook+0x4f/0x2b0 [ 327.175570][T12300] __kmalloc+0x120/0x2c0 [ 327.179803][T12300] iter_file_splice_write+0x19e/0xcb0 [ 327.185169][T12300] direct_splice_actor+0xe9/0x120 [ 327.190182][T12300] splice_direct_to_actor+0x4d8/0xb50 [ 327.195564][T12300] [ 327.197873][T12300] Memory state around the buggy address: [ 327.203583][T12300] ffff888119eae280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 327.211835][T12300] ffff888119eae300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 327.219898][T12300] >ffff888119eae380: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 327.227941][T12300] ^ [ 327.235940][T12300] ffff888119eae400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 327.244001][T12300] ffff888119eae480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 327.252148][T12300] ================================================================== [ 327.260218][T12300] Disabling lock debugging due to kernel taint [ 327.272068][ T30] audit: type=1400 audit(1904286267.384:1170): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1