last executing test programs: 9.77331181s ago: executing program 1 (id=85): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000380)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 9.351770414s ago: executing program 1 (id=92): open(0x0, 0x8000, 0x112) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) 9.289927078s ago: executing program 1 (id=96): socket$nl_route(0x10, 0x3, 0x0) r0 = open(0x0, 0x20040, 0x194) fcntl$setlease(r0, 0x400, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r2 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x802, 0x1) setsockopt$inet_opts(r3, 0x0, 0xd, 0x0, 0x0) connect$inet(r3, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) write(r3, &(0x7f0000000000), 0x0) recvmmsg(r3, &(0x7f0000006f80)=[{{0x0, 0x0, 0x0}, 0x4000002}], 0x1, 0x20, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) getrandom(0xfffffffffffffffe, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, &(0x7f00000002c0)=0x1c) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x38, 0x2}, @cond=[{0x2, 0x5, 0x40, 0x9, 0x8001, 0xfc01}, {0x9, 0x6, 0x401, 0x3, 0x2000, 0x8}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 9.274601419s ago: executing program 1 (id=98): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000002540)={[{@grpid}, {@init_itable_val}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 8.876111632s ago: executing program 1 (id=104): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000300)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=r2, @rand_addr=0x64010102}, 0x10) 8.637315266s ago: executing program 1 (id=109): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x5) 8.637133646s ago: executing program 32 (id=109): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x5) 7.19135245s ago: executing program 5 (id=131): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, &(0x7f00000002c0)=""/70, 0x0, 0xfec00000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/85, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000580)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000340)={0x0, 0x1}) 7.156453832s ago: executing program 5 (id=132): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c00)=ANY=[@ANYBLOB="f8010000100033060000000000000000ac141425000000000000000000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000cd2d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000004000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000010068"], 0x1f8}}, 0x0) 7.092093326s ago: executing program 5 (id=134): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001a40)={0x84, 0x0, 0x0, 0x0, &(0x7f0000001700)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a40)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, 0x0) pipe(0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x121100, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) 1.401991448s ago: executing program 3 (id=153): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000140)=""/159, 0x9f) 1.401541438s ago: executing program 3 (id=155): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x705442) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0) 1.397850659s ago: executing program 4 (id=160): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.397515299s ago: executing program 4 (id=161): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r5 = dup(r4) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', 0x0}) poll(0x0, 0x0, 0x9) read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0x2020) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) 1.394583599s ago: executing program 5 (id=163): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1db, &(0x7f0000002200)="$eJzslb+qE0EUxr+ZjbuJiA9gY2HAa+Fmd6Nic+Ha2GghRI0WgsFsQnRjJNnCBER8AjsLOwsfQ4itDyFR8A+INmo9Mn92M4ZESMyawvODnHyzM3vmzBn4FgRB/Le8f/dzJn7sfyoDOIIqPPP8swPgQGturX9b/vbo9eWLzae3Xr7xZn7l92ze2vuXAEwvOEjNWAgh7Pmq+b8Kjio+Kn0NHKfM8yYYfKNvg+O60TEYbhp919IDud73O70k9u8MkrYUgQyhDJEM9cX6vj5haFv1MWt+NJ7cayVJPCxQLO/c9EteXxnYt+qz78uHrjZQ/dOE4AiNroOhYfR5eFlvdEus8x8rzfM7fzy/i7889gcA8yedIjvryq02eh1g/+TuCxYOlMhudOf1bF2gtLWEwgM2fr1x49ml4k76yjh1XupjPV4vz8GKKXfNPKbzuX+KFwwnLX/SVvJcfSxqaf9BbTSenO71W924G9+Povq54EwQnI1qyoh0XG6BKn9F+dPho3n+yqq1LnPxsJWmw1DHfBzpuMxxufI/jr0TOCTH0k3dhbzfAWSbMvPj6l+qPWdl8QRBEDvkOJjyZOXLmTBfk3xCiOjKjuskCIIgCIIgCIIgCGJzfgUAAP//K0NgKg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = open(&(0x7f0000000340)='./file2\x00', 0x60100, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@tclass={{0x14, 0x29, 0x43, 0x5c}}, @dontfrag={{0x14, 0x29, 0x3b, 0x6}}], 0x30}, 0x8000) preadv2(r3, &(0x7f0000000000)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, 0xf, 0x0, 0x10) 1.394403779s ago: executing program 3 (id=165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setuid(0xee01) r1 = socket(0x400000000010, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x10, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.394317129s ago: executing program 4 (id=166): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x60d}}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x1, 0x783, &(0x7f0000000800)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.38119259s ago: executing program 0 (id=167): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) 1.274855926s ago: executing program 3 (id=169): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.20786709s ago: executing program 3 (id=170): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet_nvme_pdu(0xffffffffffffffff, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r1], 0x98}, 0x1, 0x7}, 0x14) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 994.564062ms ago: executing program 4 (id=171): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc000000000000000) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000008, 0x13, r0, 0x6783000) 636.180474ms ago: executing program 4 (id=173): r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) process_vm_writev(r0, &(0x7f0000004f00)=[{&(0x7f0000004d40)=""/111, 0x6f}], 0x1, &(0x7f0000005180)=[{&(0x7f0000000200)=""/79, 0x4f}], 0x1, 0x0) 631.924943ms ago: executing program 4 (id=174): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r5 = dup(r4) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', 0x0}) bind$packet(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0x2020) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) 575.750177ms ago: executing program 2 (id=175): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x28, 0xfc, 0x0, 0xfffff024}, {0x20, 0x0, 0x20, 0xfffff010}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[], 0x0) 530.05355ms ago: executing program 5 (id=176): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40b42, 0x180) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 526.91424ms ago: executing program 2 (id=177): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@const={0x8}, @const={0x1, 0x0, 0x0, 0xa, 0x4}, @float={0xd, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x30, 0x0, 0x5f]}}, 0x0, 0x41, 0x0, 0xfffffffc, 0x80000001}, 0x28) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8802, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f00000002c0), 0x200c808, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 468.133983ms ago: executing program 0 (id=178): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1504, &(0x7f0000003d80)="$eJzs3Au0T1XXMPA511qb4+TyT3Lfc83NP7kskiSUJJckSUJyT0iSJEkSh9ySkITck1xPyD2ddNzvl9yTTh5JkoSEJOsbp/R5e3qet+d93t5P33vmb4w9rGnvufZcZ47/2Zcxzv/rrsOqN6pRpT4zw79D/zrAX/5JAoAEABgIADkAIACAsjnL5kzfn0Vj0r91EvE/pMHMK12BuJKk/xmb9D9jk/5nbNL/jE36n7FJ/zM26X/GJv0XIkNLzne1bBl3k/f//59T/51kuf5nCPjPdkj//7fR/6Wjpf8Zm/Q/Y5P+Z2zS/4wsuNIFiCtMPv8Zm/RfiAztT3+nvOHclX6n/Vfd1F+ght9tQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHE/wPn/GUGAH4dX+m6hBBCCCGEEEII8efx717pCoQQQgghhBBCCPE/D0GBBgMBZILMkABZIBGugqyQDbJDDojB1ZATroFccC3khjyQF/JBfigABSEEAgsMERSCwhCH66AIXA9FoRgUhxLgoCSUghugNNwIZeAmKAs3Qzm4BcpDhZ/Pme52qAx3QBW4E6pCNagONeAuqAl3Qy24B2rDvVAH7oO6cD/UgwegPjSAhvAgNIKHoDE0gabQDJpDC2j5B/mTcvyj/OehB7wAPaEXFLkboA+8CH2hH/SHATAQXoJB8DIMhldgCAyFYfAqDIfXYAS8DiNhFIyGN2AMjIVxMB4mwESYBG/CZHgLpsDbD2WDaTAdZsBMmAXJ8A7MhjkwF96FeTAfFsCkLItgMSyB92ApvA8p8AEsgw8hFZbDClgJq2A1rIG1sA7WwwbYCJtgM2yBrbANPoLtsAN2wi7YDXtgL3wM++AT2A+fQhp+9l/MP/vbfOiGgIAKFRo0mAkzYQImYCImYlbMitkxO8YwhjkxJ+bCXJgbc2NezItJmB8LYkEkJGRkLISFMI5xLIJFsCgWxeJYHB06LIWlsDTeiGWwDJbFslgOy2F5rIAV8Fa8FSthJayMlbEKVsGqWBWrY3W8C+/Cu7EW1sLaWBvrYB2si3WxHtbD+lgfG2JDbISNsDE2xqbYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHDtgBO2JH7ISdsDN2xi7YBbtiV+yGz+Fz+Dw+jy/gC9gLq6re2Af7YF/si/1xAA7Al3AQvowv4ys4BIfiMHwVX8XXcASewZE4CkfjaKykxuI4HI+sJuIknISZYTJOwSk4FafhNJyBM3EWJmMyzsY5OAffxXk4H+fjQlyIi3EJLsGl+D6mYAouw7OYistxBa7EVbgaV+FaXIdrcQNuxA24GTfjVtyKH+FHuAN34C7chXtwD36MH+Mn+AkOwTRMwwN4AA/iQTyEh/AwHsYjeASP4lE8hsfwOB7HE3gST+FJPI2n8QyexXMAcB7P4wW8gBfxYvqHX6UzyqhMKpNKUAkqUSWqrCqryq6yq5iKqZwqp8qlcqncKrfKq/Kq/Cq/KqgKKlKkWEWqkCqk4iquiqgiqqgqqoqr4sopp0qpUqq0Kq3KqDKqrLpZlVO3qPKqgmrjblW3qkqqraus7lBVVBVVVVVT1VUNVUPVVDVVLVVL1Va1VR1VR9VV96t6qjf2xwYqvTON1FBsrIZhU9VMNVct1Gv4sGqlRmBr1Ua1VY+qUTgS26tWroN6QnVU47CTekqNx6dVFzURu6pnVTf1nOqunlc9VGvXU/VSU7G36qNmYF/VT/VXA9RsrKbSO1ZdvaKezzxUDVOvqsX4mhqhXlcj1Sg1Wr2hxqixapwaryaoiWqSelNNVm+pKeptNVVNU9PVDDVTzVLJ6h01W81Rc9W7ap6arxaohWqRWqyWqPfUUvW+SlEfqGXqQ5WqlqsVaqVapVarNWqtWqfWqw1qo9qkNqstaqvapj5S29UOtVPtUrvVHrVXfaz2qU/UfvWpSlOfqQPqb+qg+lwdUl+ow+pLdUR9pY6qr9Ux9Y06rr5VJ9RJdUp9p06r79UZdTbzOfWDOq9+VBfUT+qi8go0aqW1NjrQmXRmnaCz6ER9lc6qs+nsOoeO6at1Tn2NzqWv1bl1Hp3X5NP5dQFdUIeatNWsI11IF9ZxfZ0uoq/XRXUxXVyX0E6X1KX0Dbq0vlGX0TfpsvpmXU7fosvrCrqiB32brqRv15X1HbqKvlNX1dV0dV1D36Vr6rt1LX2Prq3v1XX0fbquvl/X0w/o+rqBbqgf1I30Q7qxbqKb6ma6uW6hW+qHdSv9iG6t2+i2+lHdTj+m2+vHdQf9hO6on9Sd9FO6s35ad9HP6K76Wd1NP6e765/0Re11T91LJ+neuo9+UffV/XR/PUAP1C/pQfplPVi/oofooXqYflUP16/pEfp1PVKP0qP1G3qMHqvH6fF6gp6oJ+k39WT9lp6i39ZT9TQ9Xc/QM/Us3f/STHP/hfy3/kH+4J/PvlVv0x/p7XqH3ql36d16j96r9+p9ep/er/frNJ2mD+gD+qA+qA/pQ/qwPqyP6CP6qD6qj+lj+rg+rk/ok/oH/Z0+rb/XZ/RZfVb/oM/r8/rCpZ8BGDTKaGNMYDKZzCbBZDGJ5iqT1WQz2U0OEzNXm5zmGpPLXGtymzwmr8ln8psCpqAJDRlr2ESmkCls4uY6U8Rcb4qaYqa4KWGcKWlKmRv+2/l/VF9L09K0Mq1Ma9PatDVtTTvTzrQ37U0H08F0NB1NJ9PJdDadTRfTxXQ1XU030810N91ND9PD9DQ9TZJJMn3Mi6av6Wf6mwFmoHnJDDKDzGAz2AwxQ8wwM8wMN8PNCDPCjDQjzWgz2owxY8w4M85MMBPMJJ/DTDaTzRQzxUw1U830gTnMTDPTJJtkM9vMNnPNXDPPzDMLzAKzyCwyS8wSs9QsNSkmxSwzy0yqWW6Wm5VmpVltVpu1Zq1Zb9abjWaj2Ww2m1SzzWwz2812s9PsNLvNbrPX7DX7zD6z3+w3aSbNHDAHzEFz0Bwyh8xhc9gcMUfMUXPUHDPHzHFz3JwwJ8wpc8qcNqfNGXPGnDPnzHlz3lwwF8xFczH9ti9QgQpMYIJMQaYgIUgIEoPEIGuQNcgeZA9iQSzIGeQMcgXXBrmDPEHeIF+QPygQFAzCgAIbcBAFhYLCQTy4LigSXB8UDYoFxYMSgQtKBqWCG4LSwY1BmeCmoGxwc1AuuCUoH1QIKga3BrcFlYLbg8rBHUGV4M6galAtqB7UCO4KagZ3B7WCe4Lawb1BneC+oG5wf1AveCCoHzQIGgYPBo2Ch4LGQZOgadAsaB60CFr+qfN7fybPI65n2CtMCnuHfcIXw75hv7B/OCAcGL4UDgpfDgeHr4RDwqHhsPDVcHj4WjgifD0cGY4KR4dvhGPCseG4cHw4IZwYTgrfDCeHb4VTwrfDqeG0cHowI5wZzgqTw3fC2eGccG74bjgvnB8uCBeGi8LFIf5ySwwp4QfhsvDDMDVcHq4IV4arwtXhmnBtuC5cH24IN4abws1lB/1yaLg93BHuDHeFu8M94d7w43Bf+Em4P/w0TAs/Cw+EfwsPhp+Hh8IvwsPhl+GR8KvwaPh1eCz8JjwefhueCE+Gp8LvwtPh9+GZ8Gx4LvwhPB/+GF4Ifwovhj795j798k6GDGWiTJRACZRIiZSVslJ2yk4xilFOykm5KBflptyUl/JSfspPBakgpWNiKkSFKE5xKkJFqCgVpeJUnBw5KkWlqDSVpjJUhspSWSpH5ag8laeKVJFuo9vodrqd7qA76E66k6pRNapBNagm1aRaVItqU22qQ3WoLtWlelSP6lN9akgNqRE1osbUmJpSU2pOzakltaRW1IpaU2tqS22pHbWj9tSeOlAH6kgdqRN1os7UmbpQF+pKXakbdaPu1J16UA/qST0piZKoD/WhvtSX+lN/GkgDaRANosE0mIbQEBpGw2g4DacRNIJG0igaTW/QGBpL42g8TaCJNIkm0WSaTFNoCk2lqTSdptNMmknJlEyzaTbNpbk0j+bRAlpAi2gRLaEltJSWUgql0DJaRqmUSitoBa2iVbSG1uh1tI420AbaRJtoC22hbbSNttN22kk7aTftpr20l/bRPtpP+ymN0ugAHaCDdJAO0SE6TIfpCB2ho3SUjtExOk7H6QSdoFN0ik7TaTpDZ+gcnaPz9CNdoJ/oInlKsFlsor3KZrXZbHabw/59nNfms/ltAVvQhja3zfObmKy1RW0xW9yWsM6WtKXsDb+Ly9sKtqK91d5mK9nbbWVb3maB/xjXtHfbWvYeW9vea2vYu34T17H32br2IVvPNrH1bTPb0LawjexDtrFtYpvaZra5bWHb2cdse/u47WCfsB3tk7+Ll9r37Tq73m6wG+0++4k9Z3+wR+3X9rz90fa0vexA+5IdZF+2g+0rdogd+tsYwI62b9gxdqwdZ8fbCXbi7+LpdoadaWfZZPuOnW3n/C5eYt+z82yKXWAX2kV28c9xek0p9gO7zH5oU+1yu8KutKvsarvGrv2/ta60m+0Wu9XutR/b7XaH3Wl32d12z89x+jr2209tmv3MHrFf2YP2c3vIHrOH7Zc/x+nrO2a/scftt/aEPWlP2e/safu9PWPP/rz+9LV/Z3+yF623wMiKNRsOOBNn5gTOwol8FWflbJydc3CMr+acfA3n4ms5N+fhvJyP83MBLsghE1tmjrgQF+Y4X8dF+HouysW4OJdgxyW5FN/ApflGLsM3cVm+mcvxLVyeK3BFvpVv40p8O1fmO7gK38lVuRpX5xp8F9fku7kW38O1+V6uw/dxXb6f6/EDXJ8bcEN+kBvxQ9yYm3BTbsbNuQW35Ie5FT/CrbkNt+VHuR0/xu35ce7AT3BHfpI78VPcmZ/mLvwMd+VnuRs/x935ee7BL3BP7sVJ3Jv78Ivcl/txfx7AA/klHsQv82B+hYfwUB7Gr/Jwfo1H8Os8kkfxaH6Dx/BYHsfjeQJP5En8Jk/mt3gKv81TeRpP5xk8k2dxMr/Ds3kOz+V3eR7P5wW8kBfxYl7C7/FSfp9T+ANexh9yKi/nFbySV/FqXsNreR2v5w28kTfxZt7CW3kbf8TbeQfv5F28m/fwXv6Y9/EnvJ8/5TT+jA/w3/ggf86H+As+zF/yEf6Kj/LXfIy/4eP8LZ/gk3yKv+PT/D2f4bN8jn/g8/wjX+Cf+CJ7hggjFenIREGUKcocJURZosToqihrlC3KHuWIYtHVUc7omihXdG2UO8oT5Y3yRfmjAlHBKIwoshFHUVQoKhzFo+uiItH1UdGoWFQ8KhG5qGRUKrohKh3dGJWJborKRjdH5aJbovJRhahidGt0W1Qpuj2qHN0RVYnujKpG1aLqUY3orqhmdHdUK7onqh3dG5WJ7ovqRvdH9aIHovpRg6hh9GDUKHooahw1iZpGzaLmUYuoZfRw1Cp6JGodtYnaRo9G7aLHovbR41GH6ImoY/Tk5f3Fgl+upn+3PynqHelLb8ju0Yvii+NL4u/Fl8bfj6fEP4gvi38YT40vj6+Ir4yviq+Or4mvja+Lr49viG+Mb4pvjm+Jb417XyMzOEx/EAbjApfJZXYJLotLdFe5rC6by+5yuJi72uV017hc7lqX2+VxeV0+l98VcAVd6MhZxy5yhVxhF3fXuSLuelfUFXPFXQnnXElXyrVwLV1L18o94lq7Nq6te9Q96h5zj7nHEy4V7jq5p1xn97Tr4p5xz7hnXTf3nOvunnc93Auup+vlklyS6+P6uL6ur+vv+ruBbqAb5Aa5wW6wG+KGuGFumBvuhrsRboQb6Ua60W60G+PGuHFunJvgJrhJc9SlM01xU91UN91NdzPdTJfskt1sN9vNdXPdPDfPLXAL3CK3yC1xS9xSt9SluBS3zC1zqS7VrXAr3Cq3yq1xa9w6t85tcBvcJrfJbXFb3Da3zW13291Ot9PtdrvdXrfX7XP73H6336W5NHfAHXAH3UF3yH3hDrsv3RH3lTvqvnbH3DfuuPvWnXAn3Snn9Wn3vTvjzrpz7gd33v3oLrif3EXn3aTYm7HJsbdiU2Jvx6bGpsWmx2bEZsZmxZJj78Rmx+bE5sbejc2LzY8tiC2MLYotji2JvRdbGns/lhL7ILYs9mEsNbY8tiK2MrYqtjrmfYHtkS/kC/u4v84X8df7or6YL+5LeOdL+lL+Bl/a3+jL+Jt8WX+zL+dv8eV9BV/RN/FNfTPf3LfwLf3DvpV/xLf2bXxb/6hv5x/z7f3jvoN/wnf0T/pO/inf2T/tu/hnfFf/7PxLXfY9/Au+p+/lk3xv38e/6Pv6fr6/H+AH+pf8IP+yH+xf8UP8UD/Mv+qH+9f8CP+6H+lH+dH+DT/Gj/Xj/Hg/wU/0k/ybfrJ/y0/xb/upfpqf7mf4mX6WT/bv+Nl+jp/r3/Xz/Hy/wC/0i/xiv8S/55f6932K/8Av8x/6VL/cr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Tb/kd/ud/idfpff7ff4vf5jv89/4vf7T32a/8wf8H/zB/3n/pD/wh/2X/oj/it/1H/tj/lv/HH/rT/hT/pT/jt/2n/vz/iz/pz/wZ/3P/oL/id/Uf5mTQghhBDiX6L/YH/vf/B/6tKWrg8AZNuR7/Dfz7kp9y/jfmpfxxgAPNGra4NftwYNkpKSLh2bqiEovBAAYpfzf/7+gUvxcmgLj0EHaAOl/2F9/VTFn+/7/rP54zcDJAJk+TUn/fEoEf5+/hv/yfxN3uM/mn8hQNHCl3PST/RrfHn+Mv9k/j3t/mD+LJ9PAmj9H3KywuX48vyl4BF4Ejr85kghhBBCCCGEEOIX/dT5bn/0fJv+fJ7fXM7JDJfjP3o+/wOV/4w1CCGEEEIIIYQQ4j/39HPdH3+4Q4c2nf83DzL/Ncr4CwwQAP4CZcjgrz+40r+ZhBBCCCGEEH+2yzf9V7oSIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBAi4/r3vyFM/csHX+k1CiGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEFfa/wkAAP//XeNSpg==") socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000500)=""/45, 0x2d) getdents64(r0, 0x0, 0x18) 466.899253ms ago: executing program 2 (id=179): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000040)) 352.1049ms ago: executing program 2 (id=180): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 331.763251ms ago: executing program 0 (id=181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = eventfd2(0x4001, 0x800) eventfd2(0x8, 0x80001) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x4000000, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r3, 0x5, 0x2, r2}) 281.306434ms ago: executing program 2 (id=182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x24, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 252.722216ms ago: executing program 0 (id=183): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2b, &(0x7f0000000040)) 192.10817ms ago: executing program 0 (id=184): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000680), 0x3, 0x48c, &(0x7f0000000e80)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) 191.94279ms ago: executing program 2 (id=185): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nodioread_nolock}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") creat(&(0x7f0000000200)='./file1\x00', 0x12e) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 148.328792ms ago: executing program 3 (id=186): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000780)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0xf, 0x2a4, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, &(0x7f0000001000)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsv0}, {@test_dummy_encryption_v1, 0x2e}], [{@fowner_eq}, {@seclabel}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@hash}, {@fsmagic}], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") write$P9_RXATTRCREATE(r1, &(0x7f0000000400)={0x7}, 0x2000) 95.052195ms ago: executing program 5 (id=187): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1db, &(0x7f0000002200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = open(&(0x7f0000000340)='./file2\x00', 0x60100, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@tclass={{0x14, 0x29, 0x43, 0x5c}}, @dontfrag={{0x14, 0x29, 0x3b, 0x6}}], 0x30}, 0x8000) preadv2(r2, &(0x7f0000000000)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, 0xf, 0x0, 0x10) 0s ago: executing program 0 (id=188): socket$nl_route(0x10, 0x3, 0x0) r0 = open(0x0, 0x20040, 0x194) fcntl$setlease(r0, 0x400, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r2 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x802, 0x1) setsockopt$inet_opts(r3, 0x0, 0xd, 0x0, 0x0) write(r3, &(0x7f0000000000), 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_GET_NAME(0x10, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) getrandom(0xfffffffffffffffe, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, &(0x7f00000002c0)=0x1c) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x38, 0x2}, @cond=[{0x2, 0x5, 0x40, 0x9, 0x8001, 0xfc01}, {0x9, 0x6, 0x401, 0x3, 0x2000, 0x8}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.70' (ED25519) to the list of known hosts. [ 22.118045][ T24] audit: type=1400 audit(1769560867.130:64): avc: denied { mounton } for pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.119068][ T267] cgroup: Unknown subsys name 'net' [ 22.142563][ T24] audit: type=1400 audit(1769560867.130:65): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.171910][ T24] audit: type=1400 audit(1769560867.160:66): avc: denied { unmount } for pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.172103][ T267] cgroup: Unknown subsys name 'devices' [ 22.375985][ T267] cgroup: Unknown subsys name 'hugetlb' [ 22.382702][ T267] cgroup: Unknown subsys name 'rlimit' [ 22.550099][ T24] audit: type=1400 audit(1769560867.560:67): avc: denied { setattr } for pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.563206][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.575847][ T24] audit: type=1400 audit(1769560867.560:68): avc: denied { mounton } for pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.614190][ T24] audit: type=1400 audit(1769560867.560:69): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.614249][ T267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.640267][ T24] audit: type=1400 audit(1769560867.600:70): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.680085][ T24] audit: type=1400 audit(1769560867.600:71): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.707767][ T24] audit: type=1400 audit(1769560867.610:72): avc: denied { read } for pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.735734][ T24] audit: type=1400 audit(1769560867.610:73): avc: denied { open } for pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.200347][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.207519][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.215489][ T275] device bridge_slave_0 entered promiscuous mode [ 23.223780][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.231456][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.239729][ T275] device bridge_slave_1 entered promiscuous mode [ 23.325337][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.334136][ T277] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.342568][ T277] device bridge_slave_0 entered promiscuous mode [ 23.351507][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.359281][ T277] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.367172][ T277] device bridge_slave_1 entered promiscuous mode [ 23.380216][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.387793][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.396245][ T278] device bridge_slave_0 entered promiscuous mode [ 23.411708][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.418789][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.426318][ T276] device bridge_slave_0 entered promiscuous mode [ 23.433743][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.440994][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.449094][ T276] device bridge_slave_1 entered promiscuous mode [ 23.456454][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.464164][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.472520][ T278] device bridge_slave_1 entered promiscuous mode [ 23.533462][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.541547][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.549326][ T279] device bridge_slave_0 entered promiscuous mode [ 23.557145][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.565166][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.572580][ T279] device bridge_slave_1 entered promiscuous mode [ 23.670447][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.678157][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.685883][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.693292][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.710939][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.718693][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.726126][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.733834][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.767078][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.774323][ T277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.782205][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.789889][ T277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.798877][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.806451][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.814549][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.821931][ T276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.836909][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.844577][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.852581][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.860431][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.900395][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.908212][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.916568][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.925012][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.933344][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.941202][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.948763][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.956286][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.964634][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.972098][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.980140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.987991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.007939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.016096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.025161][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.032346][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.040972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.049547][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.056935][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.064909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.073240][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.080754][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.088707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.097669][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.105994][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.114815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.123176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.131904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.155864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.164065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.172529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.181857][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.188990][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.197037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.206723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.215958][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.223526][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.231415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.240448][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.247849][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.255711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.264640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.272921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.282877][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.291504][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.302741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.312463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.321116][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.329160][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.348861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.358640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.367734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.376747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.385427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.394732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.403651][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.411209][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.419246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.427442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.436596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.445065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.457452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.466304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.474975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.483389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.493336][ T279] device veth0_vlan entered promiscuous mode [ 24.509032][ T277] device veth0_vlan entered promiscuous mode [ 24.521133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.531125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.540410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.550453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.560127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.570989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.580446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.589618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.599075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.607479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.621282][ T279] device veth1_macvtap entered promiscuous mode [ 24.631276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.640766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.649208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.657905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.667199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.676120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.684825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.696238][ T275] device veth0_vlan entered promiscuous mode [ 24.706844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.716194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.730793][ T276] device veth0_vlan entered promiscuous mode [ 24.743411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.752441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.762841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.772148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.781732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.790604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.799802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.808970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.817815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.827659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.837753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.845648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.855750][ T277] device veth1_macvtap entered promiscuous mode [ 24.865396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.873420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.882510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.898484][ T278] device veth0_vlan entered promiscuous mode [ 24.906390][ T275] device veth1_macvtap entered promiscuous mode [ 24.916418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.925093][ T279] request_module fs-gadgetfs succeeded, but still no fs? [ 24.927170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.941652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.950588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.959466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.968546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.975998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.985122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.994934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.007561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.016616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.025597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.034183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.044508][ T279] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 25.060756][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.069760][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.085112][ T276] device veth1_macvtap entered promiscuous mode [ 25.144776][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.153373][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.156320][ T302] Zero length message leads to an empty skb [ 25.162385][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.179750][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.189970][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.199237][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.208551][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.218295][ T278] device veth1_macvtap entered promiscuous mode [ 25.249060][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.309929][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.319095][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.350772][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.360159][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.372912][ T316] device syzkaller0 entered promiscuous mode [ 25.406058][ T320] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 25.419064][ T320] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.445610][ T320] EXT4-fs error (device loop1): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 25.576637][ T336] cgroup: syz.0.14 (336) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 25.594435][ T336] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 26.133686][ T355] exfat: Deprecated parameter 'namecase' [ 26.216730][ T355] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 26.269611][ T360] EXT4-fs (loop2): Ignoring removed bh option [ 26.289402][ T360] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue [ 26.301390][ T360] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 26.563640][ T371] process 'syz.1.25' launched './file0' with NULL argv: empty string added [ 26.589375][ T373] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 26.618296][ T386] device syz_tun entered promiscuous mode [ 26.632919][ T373] EXT4-fs (loop3): 1 orphan inode deleted [ 26.639091][ T373] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 26.648858][ T373] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.748789][ T383] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota, [ 26.778230][ T383] EXT4-fs error (device loop2): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 27.413136][ T24] kauditd_printk_skb: 64 callbacks suppressed [ 27.413146][ T24] audit: type=1400 audit(1769560871.790:138): avc: denied { create } for pid=382 comm="syz.2.29" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.450725][ T383] EXT4-fs (loop2): Remounting filesystem read-only [ 27.461025][ T24] audit: type=1400 audit(1769560871.790:139): avc: denied { read append open } for pid=382 comm="syz.2.29" path="/5/file2/cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.487473][ T24] audit: type=1400 audit(1769560871.790:140): avc: denied { map } for pid=382 comm="syz.2.29" path="/5/file2/cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.514937][ T24] audit: type=1400 audit(1769560871.790:141): avc: denied { write } for pid=382 comm="syz.2.29" path="/5/file2/cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.540293][ T24] audit: type=1400 audit(1769560872.390:142): avc: denied { create } for pid=372 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.557216][ T403] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue [ 27.561107][ T24] audit: type=1400 audit(1769560872.390:143): avc: denied { bind } for pid=372 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.596298][ T24] audit: type=1400 audit(1769560872.390:144): avc: denied { setopt } for pid=372 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.617545][ T24] audit: type=1400 audit(1769560872.390:145): avc: denied { write } for pid=372 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.695998][ T405] ====================================================== [ 27.695998][ T405] WARNING: the mand mount option is being deprecated and [ 27.695998][ T405] will be removed in v5.15! [ 27.695998][ T405] ====================================================== [ 27.810818][ T403] EXT4-fs error (device loop1): ext4_lookup:1830: inode #16: comm syz.1.36: iget: bad i_size value: 8796093031208 [ 27.822536][ T24] audit: type=1400 audit(1769560872.830:146): avc: denied { write } for pid=413 comm="syz.3.38" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.854153][ T24] audit: type=1400 audit(1769560872.830:147): avc: denied { open } for pid=413 comm="syz.3.38" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.854816][ T405] EXT4-fs error (device loop4): ext4_orphan_get:1421: comm syz.4.34: bad orphan inode 15 [ 27.888778][ T407] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 27.899193][ T405] ext4_test_bit(bit=14, block=5) = 0 [ 27.917436][ T405] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue [ 28.010021][ T429] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.026401][ T405] EXT4-fs error (device loop4): __ext4_new_inode:1073: comm syz.4.34: reserved inode found cleared - inode=1 [ 28.108806][ T432] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 28.138531][ T444] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 28.558710][ T465] erofs: (device loop0): mounted with root inode @ nid 36. [ 28.568049][ T471] netlink: 'syz.2.55': attribute type 11 has an invalid length. [ 28.661823][ T465] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 28.672208][ T465] attempt to access beyond end of device [ 28.672208][ T465] loop0: rw=524288, want=524304, limit=16 [ 28.684451][ T41] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100] [ 28.698469][ T465] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 28.721479][ T473] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7b59247a, utbl_chksum : 0xe619d30d) [ 28.735052][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.745314][ T465] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 28.792628][ T478] attempt to access beyond end of device [ 28.792628][ T478] loop0: rw=0, want=524304, limit=16 [ 28.805074][ T478] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100] [ 28.832211][ T465] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100] [ 28.832223][ T478] attempt to access beyond end of device [ 28.832223][ T478] loop0: rw=0, want=524304, limit=16 [ 29.004349][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 29.164771][ T25] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 29.713396][ T25] usb 2-1: config 0 has no interface number 0 [ 29.720664][ T25] usb 2-1: config 0 interface 2 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 29.732125][ T25] usb 2-1: config 0 interface 2 has no altsetting 0 [ 29.842385][ T499] EXT4-fs (loop3): Test dummy encryption mode enabled [ 29.854094][ T499] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue [ 29.869899][ T499] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 29.895905][ T502] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 29.906180][ T25] usb 2-1: New USB device found, idVendor=0af0, idProduct=7901, bcdDevice= 0.00 [ 29.916453][ T504] exfat: Deprecated parameter 'namecase' [ 29.922805][ T504] exfat: Deprecated parameter 'namecase' [ 29.924750][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.932511][ T499] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 29.938020][ T25] usb 2-1: Product: syz [ 29.958229][ T499] capability: warning: `syz.3.65' uses deprecated v2 capabilities in a way that may be insecure [ 29.968853][ T504] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 29.985418][ T25] usb 2-1: Manufacturer: syz [ 29.990188][ T25] usb 2-1: SerialNumber: syz [ 29.996521][ T25] usb 2-1: config 0 descriptor?? [ 30.058767][ T521] erofs: (device loop3): mounted with root inode @ nid 36. [ 30.154621][ T20] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 30.269083][ T25] usb-storage 2-1:0.2: USB Mass Storage device detected [ 30.405956][ T530] EXT4-fs (loop3): Test dummy encryption mode enabled [ 30.417096][ T530] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 30.426497][ T25] usb 2-1: USB disconnect, device number 2 [ 30.427025][ T530] System zones: 0-5 [ 30.452457][ T530] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue [ 30.529496][ T535] erofs: (device loop4): mounted with root inode @ nid 36. [ 30.534367][ T20] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 30.559049][ T20] usb 1-1: config 0 has no interface number 0 [ 30.565545][ T20] usb 1-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 30.614161][ T535] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 30.625471][ T535] attempt to access beyond end of device [ 30.625471][ T535] loop4: rw=524288, want=524304, limit=16 [ 30.638939][ T41] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100] [ 30.655920][ T535] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 30.672890][ T535] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 30.691095][ T535] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 30.709760][ T20] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 30.720285][ T20] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 30.724642][ T535] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 30.728471][ T20] usb 1-1: Product: syz [ 30.746631][ T20] usb 1-1: SerialNumber: syz [ 30.764776][ T20] usb 1-1: config 0 descriptor?? [ 30.770388][ T540] mmap: syz.1.74 (540) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 30.772100][ T537] attempt to access beyond end of device [ 30.772100][ T537] loop4: rw=0, want=524304, limit=16 [ 30.801270][ T537] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100] [ 30.821239][ T20] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 30.834429][ T537] attempt to access beyond end of device [ 30.834429][ T537] loop4: rw=0, want=524304, limit=16 [ 30.857675][ T537] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100] [ 30.881564][ T544] tc_dump_action: action bad kind [ 30.953526][ T548] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,noinit_itable,abort,bsdgroups,,errors=continue [ 30.966941][ T548] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.059841][ T52] usb 1-1: USB disconnect, device number 2 [ 31.123228][ T567] EXT4-fs (loop1): Ignoring removed orlov option [ 31.146250][ T567] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 31.161732][ T567] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 31.172832][ T567] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2224: inode #15: comm syz.1.85: corrupted in-inode xattr [ 31.186843][ T567] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.85: couldn't read orphan inode 15 (err -117) [ 31.213555][ T579] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 31.306789][ T567] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue [ 31.396488][ T584] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 31.422121][ T584] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.445471][ T584] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,nomblk_io_submit,user_xattr,delalloc,dioread_nolock,,errors=continue [ 31.617650][ T603] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 31.627120][ T603] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 31.700016][ T603] EXT4-fs (loop4): shut down requested (0) [ 31.745903][ T609] EXT4-fs (loop1): Test dummy encryption mode enabled [ 31.753341][ T617] EXT4-fs (loop3): Test dummy encryption mode enabled [ 31.761444][ T617] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 31.762221][ T609] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,init_itable=0x0000000000000000,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000020000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 31.770885][ T617] System zones: 0-5 [ 31.802257][ T617] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue [ 31.853142][ T296] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.853711][ T296] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 31.965307][ T624] SELinux: failed to load policy [ 32.047941][ T625] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 32.055887][ T296] hid-generic 07FF:0004:0009.0002: unknown main item tag 0x0 [ 32.065290][ T625] EXT4-fs (loop0): Test dummy encryption mode enabled [ 32.065603][ T296] hid-generic 07FF:0004:0009.0002: unknown main item tag 0x0 [ 32.074241][ T296] hid-generic 07FF:0004:0009.0002: unknown main item tag 0x0 [ 32.089369][ T625] EXT4-fs (loop0): Ignoring removed orlov option [ 32.095086][ T296] hid-generic 07FF:0004:0009.0002: hidraw1: HID v0.04 Device [syz1] on syz1 [ 32.131059][ T625] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,orlov,,errors=continue [ 32.140516][ T636] fido_id[636]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 32.187519][ T641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.108'. [ 32.209620][ T641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.108'. [ 32.245271][ T646] erofs: (device loop3): mounted with root inode @ nid 36. [ 32.310433][ T644] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.367588][ T646] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 32.377978][ T646] attempt to access beyond end of device [ 32.377978][ T646] loop3: rw=524288, want=524304, limit=16 [ 32.426667][ T644] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.439079][ T644] device bridge_slave_0 entered promiscuous mode [ 32.446307][ T42] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100] [ 32.464773][ T646] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 32.521135][ T644] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.525194][ T652] EXT4-fs (loop2): Test dummy encryption mode enabled [ 32.528757][ T663] attempt to access beyond end of device [ 32.528757][ T663] loop3: rw=0, want=524304, limit=16 [ 32.552098][ T644] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.552129][ T657] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 32.559933][ T663] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100] [ 32.569087][ T644] device bridge_slave_1 entered promiscuous mode [ 32.593992][ T646] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 32.606337][ T657] EXT4-fs (loop4): orphan cleanup on readonly fs [ 32.619593][ T646] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 32.636507][ T663] attempt to access beyond end of device [ 32.636507][ T663] loop3: rw=0, want=524304, limit=16 [ 32.637032][ T652] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 32.664503][ T657] EXT4-fs error (device loop4): ext4_orphan_get:1395: inode #17: comm syz.4.116: inode has both inline data and extents flags [ 32.679116][ T652] System zones: 0-5 [ 32.680048][ T663] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100] [ 32.713465][ T652] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue [ 32.740408][ T657] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.116: couldn't read orphan inode 17 (err -117) [ 32.765213][ T657] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 32.801053][ T644] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.809130][ T644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.817319][ T644] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.825704][ T644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.848485][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.864843][ T526] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.876196][ T526] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.906448][ T644] device veth0_vlan entered promiscuous mode [ 32.950057][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.965373][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.975569][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.983397][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.991715][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.000943][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.010820][ T526] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.018696][ T526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.026989][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.035496][ T526] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.042813][ T526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.051121][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.059538][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.069967][ T644] device veth1_macvtap entered promiscuous mode [ 33.075075][ T24] kauditd_printk_skb: 73 callbacks suppressed [ 33.075086][ T24] audit: type=1400 audit(1769560878.090:221): avc: denied { map } for pid=671 comm="syz.3.120" path="socket:[16837]" dev="sockfs" ino=16837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.112273][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.116390][ T24] audit: type=1400 audit(1769560878.090:222): avc: denied { read } for pid=671 comm="syz.3.120" path="socket:[16837]" dev="sockfs" ino=16837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.137981][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.158081][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.167086][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.178465][ T9] device bridge_slave_1 left promiscuous mode [ 33.178506][ T674] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000e8a4, chksum : 0x7bc75166, utbl_chksum : 0xe619d30d) [ 33.185440][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.215398][ T24] audit: type=1400 audit(1769560878.230:223): avc: denied { block_suspend } for pid=680 comm="syz.2.119" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.239904][ T9] device bridge_slave_0 left promiscuous mode [ 33.246657][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.255166][ T9] device veth1_macvtap left promiscuous mode [ 33.261197][ T9] device veth0_vlan left promiscuous mode [ 33.286218][ T684] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 33.358436][ T687] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 33.419833][ T687] [syz.3.124/687] FS: loop3 File: /file1 would truncate fibmap result [ 33.479395][ T694] erofs: (device loop0): mounted with root inode @ nid 36. [ 33.495859][ T689] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue [ 33.509721][ T689] ext4 filesystem being mounted at /26/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.547991][ T706] device sit0 entered promiscuous mode [ 33.556757][ T706] netlink: 'syz.5.129': attribute type 1 has an invalid length. [ 33.565882][ T706] netlink: 1 bytes leftover after parsing attributes in process `syz.5.129'. [ 33.638295][ T714] netlink: 192 bytes leftover after parsing attributes in process `syz.5.132'. [ 33.964361][ T5] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.977347][ T720] EXT4-fs (loop5): 1 truncate cleaned up [ 33.983661][ T720] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,,errors=continue [ 34.154507][ T20] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 34.183336][ T24] audit: type=1400 audit(1769560879.190:224): avc: denied { ioctl } for pid=725 comm="syz.2.136" path="socket:[16217]" dev="sockfs" ino=16217 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.210323][ T24] audit: type=1400 audit(1769560879.190:225): avc: denied { bind } for pid=725 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.231335][ T24] audit: type=1400 audit(1769560879.190:226): avc: denied { setopt } for pid=725 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.274358][ T296] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 34.374412][ T5] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 34.384992][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.398422][ T5] usb 4-1: config 0 descriptor?? [ 34.534362][ T20] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 34.543247][ T24] audit: type=1400 audit(1769560879.550:227): avc: denied { name_bind } for pid=736 comm="syz.4.140" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 34.584423][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.598433][ T20] usb 1-1: config 0 descriptor?? [ 34.658679][ T20] asix: probe of 1-1:0.0 failed with error -22 [ 34.674708][ T296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 34.687363][ T296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.688260][ T24] audit: type=1400 audit(1769560879.700:228): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 34.719852][ T296] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 34.730393][ T296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.741634][ T296] usb 6-1: config 0 descriptor?? [ 34.807570][ T296] hub 6-1:0.0: USB hub found [ 34.946606][ T744] exfat: Deprecated parameter 'namecase' [ 34.952896][ T744] exfat: Deprecated parameter 'namecase' [ 35.308853][ T744] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 35.372128][ T24] audit: type=1400 audit(1769560880.370:229): avc: denied { setattr } for pid=741 comm="syz.4.142" name="file0" dev="loop4" ino=1048607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.428815][ T296] hub 6-1:0.0: 1 port detected [ 35.459292][ T749] SELinux: failed to load policy [ 35.725801][ T758] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,journal_dev=0x0000000000000002,minixdf,,errors=continue [ 35.856495][ T763] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,noinit_itable,abort,bsdgroups,,errors=continue [ 35.870977][ T763] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.965934][ T768] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 35.975896][ T768] EXT4-fs (loop4): invalid journal inode [ 35.983096][ T768] EXT4-fs (loop4): can't get journal size [ 35.991799][ T768] EXT4-fs (loop4): 1 truncate cleaned up [ 35.997947][ T768] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,grpquota,sysvgroups,lazytime,,errors=continue [ 36.022618][ T24] audit: type=1400 audit(1769560881.030:230): avc: denied { write } for pid=767 comm="syz.4.148" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.070713][ T768] EXT4-fs error (device loop4): __ext4_get_inode_loc:4444: comm syz.4.148: Invalid inode table block 0 in block_group 0 [ 36.164363][ T52] hub 6-1:0.0: activate --> -90 [ 36.392005][ T15] usb 1-1: USB disconnect, device number 3 [ 36.437871][ T780] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.450902][ T780] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.463242][ T780] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2820: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.477181][ T780] EXT4-fs (loop2): 1 truncate cleaned up [ 36.483280][ T780] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue [ 36.504212][ T782] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 36.512366][ T782] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.525077][ T782] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #16: comm syz.0.151: invalid indirect mapped block 83886080 (level 1) [ 36.540616][ T782] EXT4-fs (loop0): Remounting filesystem read-only [ 36.544521][ T5] usb 4-1: USB disconnect, device number 2 [ 36.549629][ T782] EXT4-fs (loop0): 1 orphan inode deleted [ 36.561995][ T782] EXT4-fs (loop0): 1 truncate cleaned up [ 36.569624][ T782] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,errors=remount-ro,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000000040,block_validity,nodelalloc,quota,nolazytime,grpjquota=,mblk_io_submit,barrier=0x00000000000000ff,max_batch_time=0x00000 [ 36.713968][ T792] device erspan0 entered promiscuous mode [ 36.714414][ T788] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 36.721016][ T792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'. [ 36.739384][ T792] device erspan0 left promiscuous mode [ 36.800323][ T25] usb 6-1: USB disconnect, device number 2 [ 36.814502][ T52] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 36.863461][ T799] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 36.879646][ T799] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.893378][ T799] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 36.903747][ T799] System zones: 0-1, 3-36 [ 36.909578][ T799] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 39.412800][ T824] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 39.438297][ T821] erofs: (device loop5): mounted with root inode @ nid 36. [ 39.447312][ T824] kvm: pic: non byte read [ 39.453048][ T824] kvm: pic: level sensitive irq not supported [ 39.453092][ T824] kvm: pic: non byte read [ 39.466616][ T824] kvm: pic: level sensitive irq not supported [ 39.466661][ T824] kvm: pic: non byte read [ 39.535565][ T828] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,dioread_lock,barrier,bsdgroups,inode_readahead_blks=0x0000000000002000,norecovery,max_batch_time=0x000000000000060d,noload,journal_dev=0x0000000000000005, [ 39.566222][ T828] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.809911][ T834] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 39.821430][ T834] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.847928][ T846] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 39.858049][ T42] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 39.879306][ T846] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 40.065575][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 40.065593][ T24] audit: type=1400 audit(1769560885.080:235): avc: denied { map } for pid=849 comm="syz.4.171" path="/dev/ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.167401][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 40.176829][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.186364][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 40.195182][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.203799][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.217825][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.227508][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.237196][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.347956][ T866] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3967cd3a, utbl_chksum : 0xe619d30d) [ 40.356902][ T24] audit: type=1400 audit(1769560885.370:236): avc: denied { ioctl } for pid=869 comm="syz.2.179" path="socket:[17482]" dev="sockfs" ino=17482 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.457217][ T864] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 40.499934][ T864] EXT4-fs error (device loop5) in ext4_do_update_inode:5350: error 27 [ 40.509390][ T864] EXT4-fs error (device loop5): ext4_dirty_inode:6157: inode #15: comm syz.5.176: mark_inode_dirty error [ 40.522584][ T864] EXT4-fs error (device loop5) in ext4_do_update_inode:5350: error 27 [ 40.539113][ T864] EXT4-fs error (device loop5): __ext4_ext_dirty:182: inode #15: comm syz.5.176: mark_inode_dirty error [ 40.556772][ T864] EXT4-fs error (device loop5) in ext4_do_update_inode:5350: error 27 [ 40.561333][ T24] audit: type=1400 audit(1769560885.570:237): avc: denied { link } for pid=862 comm="syz.5.176" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.568976][ T864] EXT4-fs error (device loop5): __ext4_ext_dirty:182: inode #15: comm syz.5.176: mark_inode_dirty error [ 40.606432][ T864] EXT4-fs error (device loop5) in ext4_do_update_inode:5350: error 27 [ 40.626297][ T864] EXT4-fs error (device loop5): ext4_truncate:4396: inode #15: comm syz.5.176: mark_inode_dirty error [ 40.638608][ T864] EXT4-fs error (device loop5) in ext4_setattr:5721: error 27 [ 40.643809][ T881] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.184: inode #1: comm syz.0.184: iget: illegal inode # [ 40.648421][ T884] EXT4-fs error (device loop5) in ext4_do_update_inode:5350: error 27 [ 40.660887][ T881] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.184: error while reading EA inode 1 err=-117 [ 40.683861][ T881] EXT4-fs (loop0): 1 orphan inode deleted [ 40.691778][ T881] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 40.709393][ T886] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000008,nodioread_nolock,,errors=continue [ 40.734159][ T886] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.743255][ T277] EXT4-fs error (device loop0): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 40.767077][ T24] audit: type=1400 audit(1769560885.780:238): avc: denied { unlink } for pid=277 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 40.791951][ T277] ------------[ cut here ]------------ [ 40.792437][ T24] audit: type=1400 audit(1769560885.780:239): avc: denied { rmdir } for pid=277 comm="syz-executor" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 40.798149][ T277] kernel BUG at fs/namei.c:2794! [ 40.830461][ T277] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 40.838275][ T277] CPU: 0 PID: 277 Comm: syz-executor Not tainted syzkaller #0 [ 40.843746][ T888] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 40.846906][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 40.846940][ T277] RIP: 0010:may_delete+0x7b1/0x7c0 [ 40.846958][ T277] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff ff 48 89 df e8 f0 01 f5 ff e9 d0 fd ff ff e8 66 84 ba ff 0f 0b e8 5f 84 ba ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 40.885160][ T895] erofs: (device loop5): mounted with root inode @ nid 36. [ 40.894130][ T277] RSP: 0018:ffffc90000bd7ca0 EFLAGS: 00010293 [ 40.894142][ T277] RAX: ffffffff81aa3171 RBX: ffff8881101f6110 RCX: ffff88811db08000 [ 40.894148][ T277] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 40.894163][ T277] RBP: ffffc90000bd7d20 R08: 0000000000000003 R09: 0000000000000004 [ 40.907251][ T888] FAT-fs (loop3): Filesystem has been set read-only [ 40.908620][ T277] R10: dffffc0000000000 R11: fffff5200017af78 R12: ffff88811a5b2508 [ 40.908628][ T277] R13: 1ffff1102203ec22 R14: ffff8881101f6128 R15: ffff88811a78d7a0 [ 40.908646][ T277] FS: 00005555954dd500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 40.937645][ T888] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 40.941060][ T277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.941067][ T277] CR2: 0000555595508988 CR3: 0000000124bb3000 CR4: 00000000003506b0 [ 40.941083][ T277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.951431][ T888] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 40.958051][ T277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.958056][ T277] Call Trace: [ 40.958075][ T277] ? __kasan_check_write+0x14/0x20 [ 40.958085][ T277] vfs_rmdir+0x2c/0x3e0 [ 40.958094][ T277] incfs_kill_sb+0xfe/0x210 [ 40.958113][ T277] deactivate_locked_super+0xa0/0x100 [ 40.968035][ T888] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 40.976846][ T277] deactivate_super+0xaf/0xe0 [ 40.976856][ T277] cleanup_mnt+0x45b/0x510 [ 40.976865][ T277] __cleanup_mnt+0x19/0x20 [ 40.976881][ T277] task_work_run+0x127/0x190 [ 40.986195][ T886] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz.2.185: Freeing blocks not in datazone - block = 0, count = 16 [ 40.992587][ T277] exit_to_user_mode_loop+0xcb/0xe0 [ 41.038663][ T897] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.185: bg 0: block 112: padding at end of block bitmap is not set [ 41.042953][ T277] exit_to_user_mode_prepare+0x76/0xa0 [ 41.051890][ T897] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 65 with error 28 [ 41.056588][ T277] syscall_exit_to_user_mode+0x1d/0x40 [ 41.056597][ T277] do_syscall_64+0x3d/0x40 [ 41.056607][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.056615][ T277] RIP: 0033:0x7fb820520117 [ 41.056633][ T277] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 41.061770][ T897] EXT4-fs (loop2): This should not happen!! Data will be lost [ 41.061770][ T897] [ 41.065941][ T277] RSP: 002b:00007ffd7d59d778 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 41.065953][ T277] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb820520117 [ 41.065958][ T277] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7d59d830 [ 41.065964][ T277] RBP: 00007ffd7d59d830 R08: 00007ffd7d59e830 R09: 00000000ffffffff [ 41.065970][ T277] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd7d59e920 [ 41.065985][ T277] R13: 00007fb82058871f R14: 0000000000009f0c R15: 00007ffd7d59f9f0 [ 41.071534][ T897] EXT4-fs (loop2): Total free blocks count 0 [ 41.085806][ T277] Modules linked in: [ 41.094008][ T277] ---[ end trace 5521b9123d10f21c ]--- [ 41.165769][ T897] EXT4-fs (loop2): Free/Dirty block details [ 41.181844][ T277] RIP: 0010:may_delete+0x7b1/0x7c0 [ 41.192156][ T897] EXT4-fs (loop2): free_blocks=0 [ 41.199904][ T277] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff ff 48 89 df e8 f0 01 f5 ff e9 d0 fd ff ff e8 66 84 ba ff 0f 0b e8 5f 84 ba ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 41.207791][ T897] EXT4-fs (loop2): dirty_blocks=80 [ 41.216739][ T277] RSP: 0018:ffffc90000bd7ca0 EFLAGS: 00010293 [ 41.225303][ T897] EXT4-fs (loop2): Block reservation details [ 41.225320][ T897] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 41.235045][ T277] [ 41.320182][ T277] RAX: ffffffff81aa3171 RBX: ffff8881101f6110 RCX: ffff88811db08000 [ 41.330051][ T277] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 41.330099][ T898] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 41.339788][ T277] RBP: ffffc90000bd7d20 R08: 0000000000000003 R09: 0000000000000004 [ 41.339802][ T277] R10: dffffc0000000000 R11: fffff5200017af78 R12: ffff88811a5b2508 [ 41.339809][ T277] R13: 1ffff1102203ec22 R14: ffff8881101f6128 R15: ffff88811a78d7a0 [ 41.339818][ T277] FS: 00005555954dd500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 41.339825][ T277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.339832][ T277] CR2: 00007fb94a5e3d58 CR3: 0000000124bb3000 CR4: 00000000003506b0 [ 41.339842][ T277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.339848][ T277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.339854][ T277] Kernel panic - not syncing: Fatal exception [ 41.340623][ T277] Kernel Offset: disabled [ 41.434153][ T277] Rebooting in 86400 seconds..