last executing test programs: 1m14.93854174s ago: executing program 0 (id=90): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000009c0)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf1}, 0x0) 1m14.838057952s ago: executing program 0 (id=93): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0xb92b, 0x1000000, 0x5, 0x8000, 0x1d94]}, &(0x7f0000000040)=0x54) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000840)={0x1, 0x0, @pic={0x80, 0xf8, 0x0, 0xc, 0xfc, 0x6, 0x2, 0x7, 0x4, 0xfb, 0x3, 0x4, 0xc, 0xd4, 0x8, 0x3}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x0, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m13.889078927s ago: executing program 0 (id=95): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000001000000bd79000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_emit_ethernet(0xae, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf7003829008d0000000000000000f9000000000000ff020000000000000000000000000001"], 0x0) 1m13.758748389s ago: executing program 0 (id=96): mkdir(&(0x7f0000000140)='./file0\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prctl$PR_SET_NAME(0xf, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46, 0x43]}, 0x2b) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r6}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) syz_clone(0x640c7000, 0x0, 0x2f, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) 1m12.284683853s ago: executing program 0 (id=106): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x2, 0x4, @local}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0/file0\x00', 0x308413, &(0x7f00000002c0)={[{@debug}, {@usrquota}, {@nolazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nojournal_checksum}, {@lazytime}]}, 0x1c, 0x54a, &(0x7f0000000a80)="$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") openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffffffff}, 0x1c) 1m12.194777774s ago: executing program 0 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r2, &(0x7f0000000780)="0d0ad7", 0x3, 0x6d91fb6102d8d9cc, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e00000200000000000000000004000010000000", @ANYRES32=r3, @ANYBLOB='B\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000004000000000000000a00"/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1m12.170428474s ago: executing program 32 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r2, &(0x7f0000000780)="0d0ad7", 0x3, 0x6d91fb6102d8d9cc, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e00000200000000000000000004000010000000", @ANYRES32=r3, @ANYBLOB='B\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000004000000000000000a00"/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 15.358510902s ago: executing program 3 (id=391): syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0xe0}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_getoverrun(0x0) socket$packet(0x11, 0x3, 0x300) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3fe) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2a, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) 15.357246541s ago: executing program 3 (id=393): openat$ashmem(0xffffffffffffff9c, &(0x7f00000004c0), 0x2080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002c00)=ANY=[], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x20, 0x1, 0x5, 0x6, 0x1000, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x1, 0x7fff, 0x7, 0x4000, 0xb, r6, 0x0, 0x4, 0x10000}}, {0x0, 0x1}}}, 0xa0) syz_fuse_handle_req(r0, &(0x7f0000001740)="07a8952d1022b9079b4707184b14c3dab8279634f60a390b2634305e17f5d9ab13aa4957768f4f176731cab07051bde84c5a8a14560988ef04c61c6a7a4065aba941f460b94d0cf990671f0ce744fdc393841431df34f9e0d3e2fa1f6d065273027bbe394282f82092f1a9d16feb87dd8182543db1af24176f12fc9cee52557e909d72dcb10113d6e87d33331e0d2cea449a4684a64fbc1ab356941628b4fba1c767a6ee7b4c0b8295fe77858b324fd9788c3f2ca9f116d782181e21fe81945499e2bdd36f17407ae1958ece0d47d8721d77ef74ad19017096cad10238d930045d76078338088b2dbd9cd9030384a28d51229a9024bccdbc95c913d55922e5710021a7b18a60bd6c953536d21d69b073f14deadf9f466c40e5784d4d01e469e4a5c45cf1f26f1edfd27e22a4f5abb229caa29bcf6c0b431d1e2600ec4c2c6848d3ec6042bb01dd7ec306f5f27a60006832c4fdc2e933cf6e3da05a2b566c83ffcc59a82d88acca4768b1238b4c060e39941d16f9547867bab8707ca0a8b365f211749e3ac4429ccc4e165ee7cbfaff5a388fe57d79adfc9aaff7c4124dc315c6bc04a95a380843b10e644347d66eea35682208f755ee56b3221968b3cd3b8277d0611edf82165ac0b4e2bf71d89cae5868ad2e861cd60d103bcd99f2b8ac30e5dbc437f052fae83c990b0bf250dedc72f6abd23876c45242f1c865b7f002f3e2d75a22fc4bf68d659b5e14b921bf3cfa1c1429765ec7e191c473139e884694ed637141b1b8887821ab08a392f5c9e54e6832752ed7ee1b6bc9791805433e4e9969ad867b2fc4b6b53277b79ebd7dac052d9bd1abf377541e90391975cb664c0810c8f10de5a33b6bb544b9a54019473b27638d9f37c2b7f07b980f3b8126b222e4dd748c89a38fcfeb8321edf2669bb24d9c88f4434c32a0936b80d92730a5a99c2df09ecb85a68c02cf04ac574b87a84bd135888f31e817930884b04d29e1ecb0265b4b7a4d0fe9a5cbead89f551804f9259ecf8fa62ecad3b17eadc42e1b3ef5da89e0872facf68d6f01b800e49674802148de3f0f149c922e2233a64c80a3d99c9a4d858246e740684df1ea40dc6c6e1686cced61cd0f7dba80123bb514d5dcd9e8998d9f41c227524121e561b8b16552e6eecabaf90fec7d0bdc6c25ce42c570b6ad36621bd808a37d1c8ae6cca0bb033daa38fd814c7e464d10c0a2efac26d54c5c0cb0e3e954c70c37de7cd93e56fba7915352e320e30391bb8aa9feed0084547f0e56a28a6f9e3d05e6334f7cc57fade198cdc0aef5ec706d195aae6f9eadde44f621caf6a7885dfa392899d86d99efdad29af3e32d5cfb5b19da4a5301f3ffbd35597950c9b694d0b75c62760ac620b0c4e208c759226c938b05482978985f62122b737de0329849a8c38953cedb58038d83ca5cee52814e7b15ab5379297c81e683c12300d675f9a29081e8c5e294ef3bdb366900a91c1b2c6cb7adcd8cf608e2482282f13d2b58afe90e7d830a60046f9baf7d90c045facd154794769c4338e9b3f6921bf76f5bba4897c4ed97a82c7189a50da06d5b6d1e7ec8a3fade0089a1c5631cab92ff6ed0fd9c0bc04f4cab23ed42a75d6865957e72693daf97ac5f19cc738f29879587846ff8671f75b22b6e2ac26b0488a3804334cdb92a4bfbdda54f82f325ad8a2debc55fdc0a7059d1bb4a405b30c0fd29608630aaa05fa7d57d0d06a927e7023c75601671b78f92377fed49f4e9d9f215f66a7e47537e53a95354b1f44b7a105ff927b795c5018da3ae44cb06e8600bbf7a4d6c2580bf7a23893310cc2bf2fed99a02bdf625aeb20bb3cf9b542b8486c222837d320f212d0f3c4ac4dc35ea81bb714571b0d26c5b85af1012f5336feaef87ca2803570debe7341b913dec917845de638ac7b6be7b8348fe4f89c13d2b16a83beb716187e42dafb870e676ee5f46aefbea36ba81aaeeeb6fd5e1d62ba53a23e5d279e5a9e9d94a65b069fa9f894af63724cf8f9586771a12dc600c356301ac53b2bdd7d523e98e8902ca0f81a42e6610d589bd68f634da269b013a72bd4bd0da7285b256cc65829f3494233df8dca53ac487a647f0fb27612ee9acb9a28ce5734e16f50b0fa18e2277b99327ded84846e643c6005feb761402a7e0bbe829b9a7965543a34583c5793b738f455b45e81426dabf70994dbe7d173e29274d17b3e456bfe9246ce7642c20640bc0543e1e84f987f92fd1f1f245121efea27e0cc1b96ee94832ce6db1228df228cbb993b3101ef7dfb010786bfe787f8f6ee0f35a89b603f0324062060921505f3636cda62923b153f6772009e622718f93098bb365a8b8c2b1898d360df1c61e028455243162568445ad5875f9e2402a4099565f3dcb9a6bd3ce702a10a5f7587b911e494417a0547f0295723497a2386befc3ac2fb4cf67bdf197f93d4347933ae18e486ce533d5fe01ef53c54792fc88d2764e0f77741f52a70ac89bf05871414127fbdeda6d8ca8377dcb508d7b4137a7220d16ff108fc2dd053af90727546ae8d3ef1984a0c59c7501ce05d56b338d6ebccb19bec7396645165bc4263f252b63c278ca560d4f7b5cecd4ae210a3dfdd54ba89dcc4d064cd92546a4395e980e017734784f34ead5d67db27c297653348b34e01f359fb659d399ac7ccba4718e477af6187fdbb2a33ef331a25e4dd4e6f85951245c33d38106b46acec2575c114f7bd124167b241e36399d4803243609f10c1f4c35ba636f2ce1740637ced2a28577b9e9048159e756176f7a9966358391395934b6792738adb24de21a0d9097b19dbe96656e5012abdc06cf1f1a72397404731be6cadcbed84c54032e423185d3c9ad72de0709a5cac11ca4fbfc8dd543ee7aae9bb243af91c607cd1b9dfde5650e32e29fbc7985f6b82cd6fa419a12b6b8ad629f36f79201f7a10399f8a82c6914f790a0640f2a626d778aaed2f8c8b84935c6e04c195e1cea0e4c67b4311cd51e918fe0924e65385039484b1a1a8038ba1fcace92d830599bf7edefb9bcaf79734807f9f50f4fa79216c3baf4cbbfa6fb5f4cd769001e8aa21f5106690e292417de4bab5562a573f9f97decc1f9da1e10343f0d5faef28ce75c2b3b2beff09ca51c3d43156a73e798dfec86c73cb396e00170edf5b499495d2090caf89d6c5138637de609709f58b7987054aaa19a236403674e281fda9fe1eaf8953d1cf78e9936d5716a0f89174d4637445882cbdb3306790d4adad816f5d2c29c53781ff48c32924eef32454403fa9e6f5409eda9113ee6b106796a1df0f66f1d8e7b7ba0fe2592957435f88254bce89596817ba2b8236f04bfb7b6342a0867e21f143aefb42710336cf450dce83b9cc8a9ebd93ee234909f6f552c6b72494170a085025428d4a36a942e4d3128a1cd5823462b6c458c06ce335b556502563c02e0202f811ec5b65a27e45c0b5f51415c4467e374ccb4aa98b1a23bcab99d33dc85cffa5152888474f83584703e6485a28f5f7b247dc452ddf96e3e0d9414ab91f855842e8cf8804b9f99f28d7aff7fde9fdf95c5a25cbfb0b98b7753c3865ac7b0bbf015f5881ae3724656133d2aed1dcc470e03aee66c8fd4da3c6b8c547d0617fb0843941d0bfb663131ef856f6b29d2d70a584dc1e90b7628dff892e615ac00ebba8a67a7a4550218254723bf158990c7f08014190b5d71330d45d658eb2ac71b5444502b02760e65817851ce036470f457286962c2c2771c8616e3b5563ac58f51e871c4d34d19f54be4974844820ab23bbb018a73da62263044d22b3bc5014fb03f63d62d6bdd5dbec2dc8c040ffba8d878b7e4a5027385014719acb9f58d603d02055b953de717da8c0301e94ef60608b5701c57164c288f20672b543f5e3ed9ee6c84be47ec4916d02357cf9f5cb7fb7f8dd8d0e94bbe2495adcc06e9ecc803ada3ee0815135efe704c41731bc08ada004a3496799165d23e706965180cbce3b320ec2981fa48c2d54b79db4443ca91e844050a01af007a8e10163a64c63e2842bccba7f27c15819790023bc04d9a0f1e8ecff6cc75dcb806311c5553a687568ab7e98a766dfb4a5b8b0e9d44ad92f7874bc9384d51e67b774b136a57dc8fe8e45bfbb0b2f4bd608a118225aa43b23862265876dac683123cdb0666d2fe865239e19320e70f5ba88501bbc0d1477cf26863d2daed229491e8cb446e232435978ca0c81812f7c361e982b67462e1669f1f3696fb059213834dd6447189d3f95a31891487ec45995ab7c13584788589aa1f7b7352f1a342ae1827605aafbf8c3919444332f7cea8c983e6ee284b50d03cd0614e86bab84f28b70e801df8ebbbdc2c89cea88eaf16d611a3f60bf47888e1607872c923f0385556e9f60ad399c7f81de0c450a99aa18df58d8ff5d9435c04cb9f7b7b617df368451deacaeb7c3daf04a7a8b26913ccf0f5301f39229ab48b047023795e50aa66d7af0814b43fb5d68ca457c49e7e82d501e7b73c3d2fe6e836a5440726dbd4b5f370272f2696fd3d9f0acaae78f3eccb36fbf190f69aef076753edf1921a1da07fdeece688ed9cc143936649e852a40de2b6cea8df187c5e01ef638b8f2e7dda459fd9f03af1324f11e40ae314fadef81a961ac77c3b0fb55cbcfceee91276de2de2fcfb85c836c90ef5a8de304f61058ba42b7056589805f1feea46a67dd0efe32fa0e4b6ac8dd2422cf78b6ed293db2cb9f7ce14fff4714c49e0e5f5b73e363e3cf735693351764de437bab56c060979adb995678b954686f6b1ae9c67be373ac29478e1a24709a8baa8918ebf7c64b58690068b75563efa393d2243cee60a615e963846df7d68abf099a574a7127fb1508b4d587ed09e1a91af58749ff910e517211b037b5829a4024d36843b5c6c45f6abe87cc0a61ccb6e00972455abf2fc525144367ef079be51dd645e8d65782b8e7b30931ae4240c0dcbb39acece1b58f62126856f0161b9fd9f16804c8f07ecc7c58333ec2994756a5be5aa980c1ad321fcedc6038e4996f0dce4fe44bbfbdfe8a3cd4202ba9e2ce0cf9600c4e04ad0d0134f958cf025a5b917fc3e69dfba7199a402c51d4bad09d828fc1d8155e0b1712b81a20d5a25fa61d1cc2b8e11f6f773c16fbbf2de70f2c037285ef81b1f30d9086955f3c5af8bca29a87d4531421e28eadfc8b2de186bf6416249dee8347235a489f1465183c7c8e2ccd15aa5f8ae57698bb0cec0dee01eb9bd96adfc6869a75a5fe61f77ee7edfe159f3162cee9e740cfb5f5f8024c8207daeb477a4a18930c09765ba70abc4742169abf046a0231b8b73dfea09f4e9e2cb3cb408f43c2834a32f7049f170c963d26a321da4cf020f335e556b573807fd05c6f15402837814f7eb1a312ac99f4018d3d896634316c4b1f387b50bf59c84e16fff1be53bdacbcf2bbadfc3fe31922ab8e8a4d1c3009f78f36812eaf1140844a72bbb4424594b89def3f86c5d9214bb3df6fb7a6f77cc39a8bdb1c2b7e1f750bbdfa16d3fd8f46e4637f1bcec659b9e6778c0fea7c45c4a5ec1eef8b6ad7510cf254d341472be0ca18b568420446281af34dcb915ed6a04b889e5b79ecda8aed7831090e334a58cd3be02450dc317d96f2a9db67516223dc1ea7c66fee4308d7ec0b24d66b033edee9da66828de70b10c6e30dc59271a364b0dbbf96ae50296653892fba7ffb953d2525d53b5e583883fe3c788a68cb381fbae40e70b0178bc46092b2e89e7232b36daad94fc3a543489024dc1477924fc74abc14df6379fd83c29848960956709e871782fc9477ae83ffc649310c955fc63469f03d00bfd46c487b7bf2aba22c6fd626a73a3efb41ec4f3bac331ec1ecfbdcb1d8de2c7edf965d603164e9173b9ffac4bfa59a7bedb4e009b9d4c277cc2b049f28fe8cd35319f2c590ace77d7abe0eab2139d6fc4724e390407a6ad16c0d2bed7038ef86d5e9f3189bd6b8619eba6c5e40bb2009e74d96695068856f61548c69d7337cefb40376745bce74f1e8c93b4b02bf1c80dd80ac3f2f56c8f9b13b6a17bbfd41f1fd3faeb56644e8fcca328925e3fc033c8ce68bfdd8aa9fe684504a0123b33d39e411eece030f14ee712681a252f66eae3d1af5d361acdfef41f8a965bd25d1cb803e901a6ee4a773abc612f1c6d116a5909832d6f25ac7c21dbe8d37b6d19ac12b69c48f1a1bb446c846cac370fcd33de6778e22b86c139ee811b69baa27aa1f47a1019f63d3c45e309e9eef5e62c22e0c1d2fb39462c13426641b5b74196dd882dda6ae5d77718f7a87d8f0df1c17bf8ee1943fd1c0b6ef0cb14f2d4a428a6b36b9d0a7d2960f136f5b4ca2a3495a3b4aa559aabf93437c0c1a857889beca95059547ad3d4df7cc43c4d398289d9d26c63b8f865ed80439a7d4e82ad66d867d9ddfe58f806682a9c3c9e0c269c0336a0ce08d7a46b52b893842d0d4afd0c68e2a052784fc0bf4f8b3b0306e520ff4bac0d6bbba35546148ba8fde48024139678619262aa9dcb00ebe3bc31ff83b0cecec5711add001665ae85c91d2887521300be411628162466d0f32e452630529d35519a64d0972e6fc56832ad94431145f02471a310b46ee565245bc9feb6ddcfd67d7c5dda3db7614257b5ab3ceb1eccfb1cea56849adc941c2ad8bae5818910c5c82a3efdf5a1cc155aef1c93ddfdbec1bc75d00328d72d34ee2d7e657893dcc5785f58ceae167fc0f3c0d1580cfc839c198058b1f98aa8f1bf6df452e142ab849f59ef1820fc5b3f758640c96a570e040c8f1102346458ef7a6700954ad59dda2816035f9fb37feb6efa7610b495719540ff92950ff26ba43a4a1118fcfdabddbb06e77ed817b565d301a0791deefa8be475b1788ba465a01f5dad0f72ec216f83258457172c6713a18438f0d3a3cfa2c9b0c87e2b8fe309d618285de8bb1ae2687d1fa0d1158cabd49441815904f1de533e7a94c1e515822d8258ddfb2df417a081a7beddb26204efbab69b5cd395d3bf7e234c25b5f11da487d2184e5677d57f495a7b3116fd7004fd5327fe2d9bc762101be0b93a0d518207272b6011db26399ea157c561c5af4f57e721e01a8757d59155960bf4fa89aae2b6b8842fdc446f15ba9fde0ccd0f32752536e9bfcbd85e093ec69038f304bc0593328ae64ffd1e4f8d2e0da25523046c3ca4bef189097733942dc090ea749f3925aba657491ceadbab8bca47b22d4c92d2ac05a54e043136dabc5d54dbf2b30d832a52f05b5d44dcdb9ef8cf3fe2eea10a14e8d9c6ff6edb1e8bbf41c9a4b2aeaad4f409449eaaa15534d1e4236736e3622569519dba34e1cde05f21a1c8afdb7a6180a4b1fe490fe2d0dad671be7f11037df192a656aa022c4589dd9e46c121b93a4c2ba15b44d95b23638a6376e6c1af5a6b625735179572719f98e6f19e4a23847a9b62ed62c6e1b30e29ff76842f9b6a3ca6010097ddaf56c6abc7ea0b19569efeaff005d4336c934d6c36523f561ea1d6502af92ec59a547b7229f8e7ec5ba6bffa8493039d0634675c4d4ef3d898702f49a70c73ef53b5063bd6435082d2b5389ab70269d00242433f51de34719131a829f4639c438ca4167238729b41e4b4efb02aed5e214efab8b9945178f3d6ee8261f467ec55df0f0351bfb94aee3755ea86b4ee15723abd3e3f2c379e29be5f6a659e849d3c3664263d885db247fc5f23142f58c11c5fa5f7148674ca505598507a309674fa876d754076911c2d2176691201297b2f5a4372f1f13fcaf9118dde1bcd6b0b0d5887b34693398f0e1f98158644bfb3363544862c43bb86e0cb7d886b7ab62bdd5ba39824ab2df8dd0d979831bea1813f9b8c0928afb6a5c2b5b2729482af83f77f92483e8adad9116e6cf84e25aa428841cc6b79e32ef63b145ad35bc1e7a41f7ec06e75aecf551a04f9810a6fe1ab14461817cbeb269b38a3b2cfbff28c94bf660d363dc9fcc0ea2a1561846e637957e26ab1e4826ae8c078cd73ba8989f69de8de33acbd50560b2661d4d25f13b77984edb25874c3258693f54774902c21a99ffa4e29b3cc70c4d465b6b381885f48c800acd96ad5ef85f402057119618f9bd9bdfad30639824e7ba788abd874724f99803cb422643226420a502f12700599ba1a853b95a3ed74ce069622b9770c60422a6bd6aeca1df23488eab24179a18016956527f5f39600414c223a6ac4c60dad36790ae22b3ffc5afe293e8768a4ae84256aa76f70d75ffd01dd14efc789df1be21dacb5719c886bdace4f843c3fb5f9e164516b81781abf8ef6364824ae85d28ce96eeb32fff18541a0830a07be5a6a0dc4deb6f640f2d6a262bfc4c6bf0053b47a6d900852df8c00668c7d9c2913ac5edddadc6a57436637c7f84d8c26fdd1503b81fab129ef7c55ab7cded2020a2e8a28889bc545f83bcb90fe76f9fc23ece33aa008e83e01f67c8fab171eccebedde73e44b0617d43ae3b22f5e7782de9691768e247f2d593dfd097d12c4ca515f9cd1fb6d6c536a7c2c90041e27e24057f959b27234cdacd3386c35a657b442c56867f43361111a51579d190b029600250daaec9cc043eb9991c652d0debf4e7b2276ef9bfe596172c3112b680398fff1f6165be6396ae9ecdb1dab7ffbd5e267ce29b1e54480bb208160130f377375f9800ea80cf161449747fa70ed730109286bb0959be40f0c881d725e248c465ae7733573945bb8f5a44936e56f48bd3f939bf20447691ac14b844e8c36c0256be017d7c008d3a56c9d3a9289e0f1aba4bd40c6ea5150cc2de9fd601a5d8ae64923465614af37fde9ab0a8b828b0ab963312221039cc9d368175701fd0f9076ae569ec3f64f33c68fa1ad9d3bb954146bbdc93e34de7a8a53ba12cf6990ca3e4f3e11f446be93f3e660c3a0203040d1823ba5230d7ee3f8a1118aeceebe05a07c437241d2ca23e6061c56c8b77a9a9e6fbd20e0b1261e0fbe93213d9fc7422e58cfb8d69954ce259b6bc2f3239b6e9d53197732abffd4ae38f082fdd7228b5c170cd3a4d87b0336b4440a34a18cb0b8890a5ea8049ba2f2a390ba816434b481ae40a17593c0dbe0690bb25cfac7c93bcb7f511ba4e46cbab5f7825d26adf828d822b047a876e3f1859b1ad4d2c875751f4c4468434280ed64fb9471dbad8f777d31a7aeb21c5141516f89806b221ce55156e7240c0aef29d48b0ec94f494b0b0c17ab90b10cefa85f697de47f9939a4220d3378a060a7772dc768a6ebc7e051e6bbf94b38e5076a07a9668eae3b92d46dda679a900b048b2eb2f0c1161a2c63bd6575452bf5bde5ee1ea036040c8af18d5bb7568dd8e1f720e9ce86272efd79350134ae053053774cbc9d9f506491948df4a0b44306a739a1c7fbc6114a7daef44c7329a4dfcc8082715cb8a42fd7ce228073c7d8398c1d880ce2243fa423b1de97b44a44c4df8e8b35570c5243f302fcd0b69111921a3c532d1cddc5fe5fc82dc296ac01de4e56a690142edc2283da8fa74c612decf69f1207fb2de30a3cea6e9f5bec7534a4c485acf5045f4eaf98a0e8e23d4a962c5dca6fe2e7a5f76877ccc58c5bb968c3e4ce1dc2f33898068a9ea80ab0d71a26b0f4e4b80a1a3fbfa48439e5f38073051315675af286dd72850f2682e39c88b13553040980ec3822dcf8b3307c49c709ee37393d734c21d49094e08779e2f4c826fc461f9d46948239472c1eada5c09e7098ce870a3f7c436936ff3f688d7fbba7325e8b06301aa2e0d39fe9e772d7f98e9964671cf6511c00e99a7080a887d76e920d5e4a76a9cf531294c24591fb1f9339dfd4999eda42926ffe78667062d39d21ad72f6d394724bd1b4a750e5dfb7b5a715213f78349bb2e1a4f442acd68c8747298eec51687f9ae7624b24dc3023aae31d3b9dba93c2c5f5cd475f88182747553f2e5a3913d05dd9415e76fe267796697cccdcaf6e3334f71de0313f262278dc507be9a131c0dfad4ef0b226bb0cac4b0eb88bd290b5def1c9a2283501606a0ea9d935a01554f0b6b7d53400edca03a5dc8575a3091d7432e0d73d8638f0de7945038dbc972ce0a740703985d19d28907a2a9e377f38a5467aa4be0e4c38cb37017472d21fcd2a252f4a784e95eac25198ec3941c3ef10bb3b3979f2776228418a257e3623b5d9665fe09b75656cc68c33436257009b5daec9eb4f1e72f3407c0865fcc89c537793a3ac7d96c4da1f5abe4dc35a6529ff407269eb568d18597da3dc338af6e390ff55cd992178570ef8a3e2321b2836a11b5a29235d694eabb6c5417a41dd44a05daa188c2467a6b27dac4b809e2c16cc2e8fd36f081862cac4855992db0e3660f78dcae20f8e7cc909f07f570b240c4f86f9af1d9f1c5b1eb3473c9c950f7b247e4db6185dd9c6e51603ae38834faef4d999f420cb2c4b957387c42a6c0b80ea39be3b91a5491dbffc3c393c25c321ca89b1f04853ab81910d488444def624bddf2b6e253113604d3391f4fb4f45a4dd50a712e601ffcb3dc75b19d972649fe8c3ecb78340fc6599617efe729f0ab34ab9edd9c2903e8c690cacd189f6da3ae38acc779110bce28c0e0313a5780b058976d30c3afd526c0c7ee5c47dddfc46fc9f2959dcc24f1bb2bee5bfd385a6f6cc2a6fd57521f9e6e91b56ee58dceb7b4936dda0bb1f7cfc878b8b5fdf55836fb39ed51089eef705c860f0a21f151078e881d5dfb84fc0ce0ae0e5c4d1c676c11804eccf76b99c15c3f398ddd0bf8abff3b1d21d8c4ec2c63e3ceee4f62f58d470f2c6ac3e3084211b24455ee74b54ac8736370ff34643c3b4113f6473999f4077071aef7bb7c8c2f9107725da6de6a3cf19796316036057cd9fc6d357d594d515868254a326917d6ef60cc69411a4355b9526db12d4cb03701a4dd0bce290d8d1c89b293ebc31dbdfdf650cba09cbeb5b8b2a275e932d661ce4364a08092f7f805d2e8b85de48881a8e8376e5c546352ab9c14b5acfe714bda46b1f0640cc0d0137d8a34c5325785d3ce363f6f63a805d2c0a0b4bdb8ebf731d5fb8455978492912212cbe2e12bd7890f087277ca9fb03574b53a74dc8175f86adb3fc843e10b95aeac03645681a4badbc184fc8aa06c06dd185f1ee10aa0e67d5caf8f8f62cda4edbf57af59c6e7d047d6825d374f8321b0a52d0a6d7379ec770c6fc146121db1709a7180ba80d87396bd23f82d0003804d1fdfe0a3391ccea8fcf31ff79352ac8c99702335e7f0a15db62696650b953623c9ab17dec779471a4444ae3c0990ef48946a73f1f6176f7de783dc8627a128f042ccf87d9f0d71b18a1327e2b96750c7b727a0a15be7364697b29ff2ded5faccc54bc993e95bcab827fc52a6a2386d1cba84c5a9a25dc18be44926ae0b4d0edef5ce449b9bfd9dc3a560201aa853a4a05cc9b8968f7cc1feee9af20935bd3f68ab23c7b119ecc7ca3960033813272d6638650f9bad596454b2a90f9cb3bafe3b4c68385611ad8306c8f9df5be7731304247a6ead5fac665552da7e4733f63b7ee9615f7f224f909635dbea9432897072b9341c8aca0988e6a8fdb0c8d49a3b0f7c2f6d9d9b3ee6dfe3d99b543e80424d448", 0x2000, &(0x7f0000001280)={&(0x7f0000000740)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x5a, 0x24000000, 0xc, 0x4, 0x7, 0x6, 0x0, 0x0, 0x20, 0xd}}, &(0x7f00000007c0)={0x18, 0x0, 0x7f, {0xffffffffffffffff}}, &(0x7f0000000800)={0x18, 0xffffffffffffffda, 0x2, {0x4}}, &(0x7f0000000840)={0x18, 0x8000000000000001, 0xbb, {0x315b6632}}, &(0x7f0000000880)={0x18, 0xfffffffffffffff5, 0x3, {0x7f}}, &(0x7f00000008c0)={0x28, 0x0, 0x7, {{0x2, 0x8000000, 0x3}}}, &(0x7f00000009c0)={0x60, 0x0, 0x100, {{0x2, 0xffffffffffffff08, 0x5, 0xa, 0x5, 0x4, 0x12800, 0x4}}}, &(0x7f0000000900)={0x18, 0x0, 0x8, {0x81}}, &(0x7f0000000a40)={0x12, 0x0, 0x2, {':\x00'}}, &(0x7f0000000a80)={0x20, 0x0, 0x7, {0x0, 0x1a}}, &(0x7f0000000b00)={0x78, 0x0, 0xfffffffffffff800, {0xfffffffffffffff8, 0x0, 0x0, {0x1, 0x7, 0xb852, 0x8, 0x7, 0xaba, 0x9, 0x5, 0x4, 0x2000, 0x9c3, 0x0, 0x0, 0x33c, 0x7}}}, 0x0, 0x0, &(0x7f0000000e00)={0xb8, 0x0, 0x4, [{{0x2, 0x2, 0x1, 0x36, 0x5, 0x6, {0x0, 0x3, 0x422, 0xac7, 0x5, 0x9, 0xffffffff, 0x5, 0x7fffffff, 0xc000, 0x6, 0x0, 0x0, 0x1, 0x8}}, {0x4, 0x2, 0x9, 0x9, 'bsdgroups'}}]}, &(0x7f0000000f80)={0xa0, 0x0, 0xdf30, {{0x1, 0x2, 0x8, 0x1, 0x5, 0xaa, {0x2, 0x7, 0x1c, 0x9, 0x7, 0x0, 0x2, 0x6, 0x101, 0x1000, 0x1, 0x0, 0x0, 0x3}}, {0x0, 0x1c}}}, &(0x7f0000001040)={0x20, 0x0, 0x4, {0x18e, 0x4, 0x3d9df107, 0x1}}, &(0x7f0000001140)={0x130, 0x0, 0x1, {0x5, 0x400, 0x0, '\x00', {0x10000, 0xe85, 0x5, 0xd46, r6, 0x0, 0x4000, '\x00', 0x5, 0x0, 0x4, 0xda, {0x6, 0xa}, {0x106a5d53, 0xfffffffe}, {0xe00000000000, 0x8}, {0x7fff, 0xfffffffa}, 0x4f, 0x7, 0x5, 0x2}}}}) 13.390178984s ago: executing program 3 (id=407): openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x69) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x17, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x7, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r6}, 0x8) creat(&(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x80005, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0, 0x0) 12.482840948s ago: executing program 3 (id=410): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000300)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) memfd_create(&(0x7f0000000000)='-\'[+\x00', 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000ffffffffa000903626e43925", 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 12.237926732s ago: executing program 3 (id=413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000300)=r3}, 0x20) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000640)={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x21}, 0x2150165a, 0x40, 0x6, 0x0, 0xfffffffffffffffe, 0x4080078, r9}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x2c, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @map_fd={0x18, 0x4, 0x1, 0x0, r10}, @map_fd={0x18, 0x5}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x0, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000380)='reno\x00', 0x5) 12.167741443s ago: executing program 3 (id=414): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x600000, 0x0) finit_module(r1, 0x0, 0x3) 12.143227463s ago: executing program 33 (id=414): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x600000, 0x0) finit_module(r1, 0x0, 0x3) 4.30852266s ago: executing program 5 (id=465): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xb, 0x4, 0x0, 0x0, 0x2c, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x4, 0xc0, 0x3, 0x1}, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x8, [{@multicast1}, {@broadcast, 0x1}]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x3}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x1, 0x4ec, &(0x7f0000000380)="$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") 2.970224571s ago: executing program 6 (id=471): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000e87b0ef961b712c200000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0xbb) io_setup(0x5, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 2.857072283s ago: executing program 6 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) (async) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000022000000400000065800000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES8=r4, @ANYRES32, @ANYRESHEX=r0, @ANYRES32, @ANYRES64=r4], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) (async) waitid(0x2, 0x0, 0x0, 0x4, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x6, 0x9, &(0x7f0000000080)={{0x2c, @rand_addr, 0x0, 0x3, 'wrr\x00', 0x0, 0x2}, {@dev={0xac, 0x14, 0x14, 0x44}, 0xffff, 0x3}}, 0x44) (async) getsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, &(0x7f0000000040)) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYRES8=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000003c0)}, 0x20) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000440)={r3, 0x8, 0x65393fe7, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x27, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000014150000000000000800000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000ffff0000090100000000009500000000000000850000007500000085000000093509ce02cd24f5600789000000b70800000000000100007b8af0ff00000000bfa1000041ef82ce1318984ee497f62c4252a40000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b5000400ffffffff18110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r12}, 0x10) 2.841766823s ago: executing program 6 (id=474): sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000009c0)={0xffffffffffffffff, &(0x7f0000000880), 0x0}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x562540, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000002201"]) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x5fd6, 0xffffffffffffffff, 0x0, 0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000020c0)='net/igmp\x00') 1.522525475s ago: executing program 2 (id=478): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x9, &(0x7f0000000000)=""/4081, &(0x7f0000001000)=0xff1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000030000"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000045c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f000008e000/0x4000)=nil, 0x4000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r5}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1, 0x2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xe, &(0x7f0000000640)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000001080)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x1f8, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000001040), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @remote, @local, 0x4, 0xffffffff}}}, {{@arp={@multicast1, @broadcast, 0xff00007f, 0xffffffff, 0xe, 0x6, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x5c6650b6ac2f17f8, 0xff]}}, {@empty, {[0xff, 0xff]}}, 0x4, 0x2, 0x7, 0x80, 0x8, 0x6, 'ip6gretap0\x00', 'veth1_vlan\x00', {0xff}, {}, 0x0, 0x25}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xff000000, 0xff, 0x4, 0x7, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@random="553c750e6d75", {[0xff, 0xff, 0x0, 0xff]}}, 0x8, 0x2, 0x8, 0xfffc, 0xffff, 0xffff, 'team0\x00', 'dummy0\x00', {}, {0xff}, 0x0, 0x80}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1.348432238s ago: executing program 5 (id=479): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@getnexthop={0x30, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8, 0x5, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r9) (async) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r11, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.342622258s ago: executing program 4 (id=480): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvtap0\x00'}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000300)="19ef3006c13ad05c2670452250bd878ce7c7", 0x12}, {&(0x7f0000000340)="e5", 0x1}], 0x2) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb}, 0xc) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfa, 0x1}, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f00000002c0)="defaf01544685165", 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) get_robust_list(0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.23942731s ago: executing program 5 (id=482): io_setup(0x2007, &(0x7f0000000200)) eventfd2(0xe2f4, 0x80801) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x4e20, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) 1.1501658s ago: executing program 4 (id=483): syz_emit_ethernet(0x86, &(0x7f00000002c0)={@local, @random="a15cc14e96b3", @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}]}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x29, 0x0, @multicast1, @rand_addr, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@multicast2}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @cipso={0x86, 0x21, 0x2, [{0x0, 0x11, "3400d501f81beaab010026db2ae513"}, {0x0, 0xa, "4ef661e96b401446"}]}]}}}}}}}, 0x0) 1.094594321s ago: executing program 4 (id=484): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}]}}}]}, 0x40}, 0xfe}, 0x0) 1.094308881s ago: executing program 4 (id=485): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60003a0400303afffe8000030000000000000000004000bbff020000000000000000000000000001"], 0x0) 1.069916932s ago: executing program 1 (id=486): mkdir(&(0x7f0000000400)='./file0\x00', 0x101) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x5, 0x0, &(0x7f0000000180)) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000003c0)={[], [{@uid_lt}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@appraise_type}, {@subj_user}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") (async, rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x2, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 1.061951562s ago: executing program 4 (id=487): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mkdir(&(0x7f00000020c0)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file0\x00', 0x8800, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x50e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x8000000000000000, 0xffffb57e}}, 0x30) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x200}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4085}, 0x20000000) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX]) 1.006413003s ago: executing program 1 (id=488): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) (async) dup3(r0, r0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x8, 0x0, 0x8, 0x0, 0x0) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) modify_ldt$read_default(0x2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r4 = socket(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) getgroups(0x4, &(0x7f0000000240)=[0x0, 0xee01, 0xee01, 0xffffffffffffffff]) (async) fstat(r2, &(0x7f00000003c0)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000180)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nouid32}, {@oldalloc}, {@delalloc}, {@data_writeback}]}, 0x1, 0x631, &(0x7f0000001940)="$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") (async) setresgid(r6, 0xffffffffffffffff, r6) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200001c5}, 0x8840) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000340)={'gretap0\x00', r5, 0x8000, 0x7, 0x3ec352eb, 0x4, {{0xf, 0x4, 0x0, 0x6, 0x3c, 0x67, 0x0, 0x3, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x13, 0x42, [@multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x33}, @remote]}, @ssrr={0x89, 0x13, 0xdf, [@loopback, @private=0xa010102, @private=0xa010102, @multicast1]}, @end]}}}}}) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c616669643d8a2366666666666666666666666666"]) (rerun: 32) 1.006010753s ago: executing program 1 (id=489): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x8000, 0x8000, 0x400, 0x2, {{0x5, 0x4, 0x0, 0x14, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010101, @empty}}}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x2711}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000010103000000000000000000070000400800048004000380580001801400018008000100ac1414aa08000200ffffffff2c00018014000300fe800000000000000000000000000069e1a967d1e15042bdd22caa14000400fc0100000000000000000000000000000800018008000100e000000108000200ac1414aa5879a07274a534ebf68abb388dee5d31ec"], 0x74}, 0x1, 0x0, 0x0, 0x8001}, 0x48000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1001, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) pwrite64(r5, &(0x7f0000000100)="e67ab166972ce298f4681ef5c755f60473b17b7887d68440dd9005bc69f6c3c5238bebfbce42365029d64c37eeaeec2d13731c56a864da45a465e64de685", 0x3e, 0x3) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x14, 0xf0b, 0x4000, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0x4}}}, 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000840)={0x1, 0x0, @pic={0x7b, 0x9c, 0x4, 0x5, 0x86, 0x3, 0xa, 0x2a, 0xf8, 0x7f, 0xad, 0x3, 0xe8, 0x2, 0x3, 0xa}}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000280)={[0x5, 0x795c9372, 0x80000000, 0xf3d, 0x2, 0x5, 0x7, 0x20080, 0x7, 0x62a5, 0x7, 0x3, 0x9, 0x6, 0x10001, 0x2], 0x1000, 0x22380}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 933.756984ms ago: executing program 1 (id=490): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000540)={@loopback, 0x0}, &(0x7f0000000580)=0x14) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffded, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r3, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r3, 0x29, 0xde, &(0x7f0000000000)=0x11, 0x4) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000800), 0x62, 0x12141, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x6) syz_emit_ethernet(0x46, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0020000000080800490000380000020000009078ac141400ac1e00010144f005030000000000000005000000fffd0000", @ANYRES32=0x41424344, @ANYRES32=r0, @ANYRESDEC=r0], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000500)={0xffffffff, [0x6, 0x7], 0x3}, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYBLOB, @ANYRES16=r2, @ANYRES32, @ANYRES16=r4, @ANYRES16=r2, @ANYRESDEC=r4, @ANYRESDEC=r2], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000d000000000000000500000018110000ffd5c4b276aa7e449b50cb8a0f8222681b5ac1145660884f2869b83c844c1088ff3450edc9e8a1729f45a2909d117ed81605566d64fde3f213637b5f735f4be0e56854c499932199aaea7ae2528a72b15c117263e03998fbc46b076aa480ecdd4c1d1682b0fa1ae0887ae43e2ecdd6a2b3c47273ab1b09caf9101f2ff084123f10134bc29d49b38bf99b22b3e988fbff1a164ff331cf14212f92f2a6a7c00059571564814e5c653b99a0e184702a90549785ff65ef18e4fc530209e87af1f1b46d2636e4", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800feffffff0000f50047000000000018110000", @ANYBLOB="fe037c7ef0c165332555bb8f207adba030ad10d8b22c6318cb367faaa9e0065ebf2d54a0d792c1c82ecaa4e9a9c0e1c3c951e2f991c76ddacf643a25081ab3622260425a0b9646ebc9e2836593d2d8", @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000300000000000000000007020000f8ffff850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0) write$selinux_load(r8, &(0x7f0000000000)=ANY=[], 0x606c) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 870.334035ms ago: executing program 6 (id=491): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x3, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=@random={'user.', 'police\x00'}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}, 0x64}]}}) 814.487946ms ago: executing program 6 (id=492): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffe}]}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x3ff, 0x19) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) (async) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 514.962201ms ago: executing program 6 (id=493): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0xff, 0x4, 0x81, 0xffffffff, 0x0, 0x17, 0x4, 0x0, [0x0, 0x100000]}}) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) read$FUSE(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000040000000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000080000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1821f02e5502b1", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000100)={0xfefd, 0xd15, 0x1fff, 0xffff, 0x1, "16ecc2f3485c992e"}) ppoll(&(0x7f0000000540)=[{r5, 0x241}], 0x1, &(0x7f0000000600)={0x0, 0x989680}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) sync() mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001600010000000000000000000a0000005d0d35963718a72d70f5ab82aae042687be1b78cd6752e2b43517df76c537f7de6906a888b8333889ea17a11adf542d00507c1d43ceb1f9ae77f2c9d331095afa3fc9b6915685992b668b3408a4101f93b9e731e21f54dd844f162670256abf8d7578af118efa477b07cc1600db81e"], 0x14}}, 0x0) connect$inet(r6, &(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10) 472.240242ms ago: executing program 2 (id=494): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x6, 0x3ff}]}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00') write$FUSE_INIT(r3, &(0x7f0000000540)={0x50, 0x0, r4, {0x7, 0x1f, 0x1000001, 0x716df681, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r6, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) connect$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e21, 0x99, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7fffffff}, 0x1c) sendto$inet6(r6, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x2163, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071004f000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 388.573703ms ago: executing program 2 (id=495): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_XSAVE2(r0, 0x9000aecf, &(0x7f0000ffa000/0x4000)=nil) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x5) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfea8, 0xe) 342.824344ms ago: executing program 1 (id=496): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000001c94d600a0fec2c488000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/101, 0x65}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, &(0x7f0000002140)=""/38, 0x26}, 0x10000}, {{&(0x7f0000000700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000840)=""/94, 0x5e}, {&(0x7f00000008c0)=""/198, 0xc6}, {&(0x7f00000009c0)=""/123, 0x7b}], 0x3}, 0x8ba}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a40)=""/78, 0x4e}, {&(0x7f0000000580)=""/57, 0x39}], 0x2, &(0x7f0000000ac0)=""/158, 0x9e}, 0x8}, {{&(0x7f0000000b80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c00)=""/180, 0xb4}, {&(0x7f0000000cc0)=""/219, 0xdb}, {&(0x7f0000000dc0)=""/189, 0xbd}], 0x3, &(0x7f0000000ec0)=""/82, 0x52}, 0xffff}, {{&(0x7f0000000f40)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/121, 0x79}, {&(0x7f0000002040)=""/168, 0xa8}, {&(0x7f0000002100)=""/28, 0x1c}, {&(0x7f0000002400)=""/117, 0x75}, {&(0x7f00000021c0)=""/19, 0x13}], 0x6, &(0x7f0000002280)=""/53, 0x35}, 0x5}, {{&(0x7f00000022c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002340)=""/139, 0x8b}, {&(0x7f0000002d00)=""/243, 0xf3}, {&(0x7f0000002500)=""/177, 0xb1}, {&(0x7f00000025c0)}, {&(0x7f0000002600)=""/35, 0x23}, {&(0x7f0000002640)=""/160, 0xa0}], 0x6}, 0x3}, {{&(0x7f0000002780)=@nfc_llcp, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000300)=""/21, 0x15}, {&(0x7f0000002840)=""/65, 0x41}], 0x2}, 0x4}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002900)=""/195, 0xc3}], 0x1, &(0x7f0000002a40)=""/91, 0x5b}}], 0x8, 0x40012002, &(0x7f0000002cc0)={0x0, 0x3938700}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffc, 0x4, {0x2, 0x0, 0x0, 0x0, {0xd, 0xd}, {0xe}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0xd, 0x3, 0x100, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x2, 0x18, 0x0, 0x2, 0x5, 0xffff}}, {0x4}}]}]}, 0x68}}, 0x0) 342.361804ms ago: executing program 2 (id=497): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') futimesat(r1, &(0x7f0000000000)='./cgroup\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ftruncate(r2, 0x8979) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYRES8=r3, @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) close_range(r4, r6, 0x0) chdir(&(0x7f0000000140)='./file0\x00') ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000003c0)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x6, 0x0, &(0x7f0000000080)="9b612aedab80beb4ad66d09ad58138c665b6949c2041ef92db15d5424d3ec8f6edcdaf48f15458e28abf41db76856372eba09fc7c224da9fd3ad", 0x3a, 0x7, 0x8f8, 0x81, 0x123, 0x9, &(0x7f0000000340)="0259ad0a51b75048310cae53720d4d8a7bded224581da4c0dc485054378bb0f9d87c9539ac8106c8b763128fb707894f3f1637054e13302f6aa6516b00983bf226b17d3783351c1227b198e282a23151db8ce12d67737037adef"}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = dup(r9) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000071000040"]) r11 = openat$cgroup_ro(r10, &(0x7f0000000780)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000040), 0x4) 341.738164ms ago: executing program 1 (id=498): mkdir(&(0x7f0000000140)='./file0\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prctl$PR_SET_NAME(0xf, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46, 0x43]}, 0x2b) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r6}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) syz_clone(0x640c7000, 0x0, 0x2f, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) 341.421714ms ago: executing program 2 (id=499): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095", @ANYRESHEX=r0, @ANYBLOB="a46d94861ae314e9f0d1c93f8df9aa77c9e773651719081cdb1ec9742db1b67195eae78de9591f026dfc6d6c5912736db90568d1a8190f689b3636f7dada897fda236ca43cff2d0f78a788561421592c8421fedb2bc983ec1271807b6ea231e0f298c24bee50ff080adc314d8d58ea85a69cb6f80cc49a8d53b97319bd69943c1cb041ef43ca27a12a9ca24112faa94b1f008a307ef318e5dc936d676c4249c49a64e1bcdb94b474dd86e3b06a5d3800ce76755570a2282df510b42884aaac0cf2afd396eb39b4e64f3f261e8a22844a824386b043354c54ad14958764", @ANYRES64=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES8=r0, @ANYRES16=r2], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000002000000030000000400000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$incfs(0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r6, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xff58) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) readahead(r7, 0xff, 0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="67c06418b1f2b042c99eeca6dd7b494be623e5c28307038fc85c2b3ad6ff81db988b2cbc6e0e970a04bbf82dff5490ee5b23aa36c6d26db2c31778fe22708babcbca0bec2852516e1c98d051ad283db2", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe25311156217f24a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r7}, 0x94) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000040)={0x280000, 0x200000, 0x1, 0x1000, 0xfffffffc}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r11 = getpid() r12 = syz_pidfd_open(r11, 0x0) setns(r12, 0x24020000) 278.480935ms ago: executing program 2 (id=500): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xa0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCG_STATS(r4, 0xc0109207, &(0x7f0000000040)) 277.882245ms ago: executing program 5 (id=501): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000008}}}, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) 105.730248ms ago: executing program 4 (id=502): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x3, 0x0, 0x7, 0x80}) setrlimit(0x40000000000008, &(0x7f0000000000)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) (fail_nth: 6) 64.755378ms ago: executing program 5 (id=503): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) utime(&(0x7f0000000200)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0xc, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000021b23a3e00399d1e58b79ab9680000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000023c0)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095", @ANYRESDEC=r4, @ANYRESOCT=r3, @ANYBLOB="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", @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='\x00'/16, @ANYRES32=0x0], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="0512feffc48a000007e0f7ff06000000ad00f0ff10000000097b0700040000001800000002000000000000000800000018120000", @ANYRES16=r4, @ANYBLOB="00000000fc0000001000000000850000000c000000b7000004610000001f7ecd31f98aff4f"], &(0x7f00000021c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10) timerfd_create(0x1, 0x80000) timerfd_gettime(0xffffffffffffffff, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001}, 0x8) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000005304040029bd7000000000a0af000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r8}, 0x10) setitimer(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r3, 0x0, 0x40}, 0x18) 0s ago: executing program 5 (id=504): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x3e8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="0100feffffff0000000005000000180001801400020073797a5f74756e0000000000000000001c000380040001800c"], 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x0) kernel console output (not intermixed with test programs): it: type=1400 audit(1743803077.170:68): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.774404][ T283] cgroup: Unknown subsys name 'devices' [ 30.946815][ T283] cgroup: Unknown subsys name 'hugetlb' [ 30.952258][ T283] cgroup: Unknown subsys name 'rlimit' [ 31.124926][ T24] audit: type=1400 audit(1743803077.540:69): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.148093][ T24] audit: type=1400 audit(1743803077.550:70): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.155231][ T287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.172691][ T24] audit: type=1400 audit(1743803077.550:71): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 31.204121][ T24] audit: type=1400 audit(1743803077.610:72): avc: denied { relabelto } for pid=287 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.229599][ T24] audit: type=1400 audit(1743803077.610:73): avc: denied { write } for pid=287 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.258137][ T24] audit: type=1400 audit(1743803077.680:74): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.283691][ T24] audit: type=1400 audit(1743803077.680:75): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.309596][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.134443][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.141394][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.148770][ T294] device bridge_slave_0 entered promiscuous mode [ 32.163686][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.170661][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.177935][ T294] device bridge_slave_1 entered promiscuous mode [ 32.213115][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.220126][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.227841][ T295] device bridge_slave_0 entered promiscuous mode [ 32.234496][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.241395][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.248697][ T295] device bridge_slave_1 entered promiscuous mode [ 32.316501][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.323355][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.330723][ T297] device bridge_slave_0 entered promiscuous mode [ 32.346200][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.353051][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.360351][ T297] device bridge_slave_1 entered promiscuous mode [ 32.383130][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.390026][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.397749][ T298] device bridge_slave_0 entered promiscuous mode [ 32.404432][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.411483][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.418773][ T298] device bridge_slave_1 entered promiscuous mode [ 32.444747][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.451630][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.458917][ T296] device bridge_slave_0 entered promiscuous mode [ 32.465628][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.472471][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.479792][ T296] device bridge_slave_1 entered promiscuous mode [ 32.517195][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.524053][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.531223][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.538539][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.607725][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.614577][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.621738][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.628592][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.661006][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.668715][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.677268][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.686212][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.693350][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.720020][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.727856][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.735368][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.742978][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.754081][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.762875][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.771102][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.778096][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.785624][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.793770][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.801913][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.808925][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.816223][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.845033][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.852825][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.861155][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.869089][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.877324][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.884250][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.891697][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.912747][ T295] device veth0_vlan entered promiscuous mode [ 32.926023][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.933908][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.941486][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.960561][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.969108][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.977182][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.984594][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.992524][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.000624][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.007570][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.019693][ T295] device veth1_macvtap entered promiscuous mode [ 33.027018][ T294] device veth0_vlan entered promiscuous mode [ 33.045987][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.054116][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.062456][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.070619][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.078906][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.085848][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.093016][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.101192][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.108156][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.115456][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.123247][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.132663][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.153265][ T294] device veth1_macvtap entered promiscuous mode [ 33.160544][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.169615][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.178768][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.187085][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.194048][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.201648][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.209930][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.216810][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.224195][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.232411][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.241471][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.249793][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.258554][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.267225][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.281485][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.289601][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.297934][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.306164][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.330688][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.339474][ T294] request_module fs-gadgetfs succeeded, but still no fs? [ 33.339642][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.355766][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.363670][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.382561][ T298] device veth0_vlan entered promiscuous mode [ 33.390264][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.398554][ T294] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 33.405373][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.424555][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.433143][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.441798][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.449373][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.472855][ T296] device veth0_vlan entered promiscuous mode [ 33.480450][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.495655][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.504016][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.512746][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.522628][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.531088][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.539427][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.547657][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.555950][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.563930][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.572174][ T297] device veth0_vlan entered promiscuous mode [ 33.584539][ T296] device veth1_macvtap entered promiscuous mode [ 33.594224][ T298] device veth1_macvtap entered promiscuous mode [ 33.601423][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.615359][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.639003][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.647089][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.655579][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.663120][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.671213][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.679659][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.707568][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.716602][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.724732][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.733108][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.741911][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.750426][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.770972][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.784258][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.792706][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.801071][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.810800][ T297] device veth1_macvtap entered promiscuous mode [ 33.890806][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.898613][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.907890][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.917402][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.925841][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.516774][ T340] overlayfs: filesystem on './file1' not supported [ 34.755224][ T332] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 35.396309][ T361] erofs: Unknown parameter 'ÿÿÿÿ' [ 35.425514][ T332] usb 4-1: unable to get BOS descriptor or descriptor too short [ 35.545294][ T332] usb 4-1: not running at top speed; connect to a high speed hub [ 35.735032][ T332] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.746233][ T349] F2FS-fs (loop2): Unrecognized mount option "noextent_cace=strict" or missing value [ 35.774702][ T332] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 35.791582][ T332] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 35.821738][ T349] Zero length message leads to an empty skb [ 35.822486][ T24] kauditd_printk_skb: 140 callbacks suppressed [ 35.822500][ T24] audit: type=1400 audit(1743803082.240:216): avc: denied { create } for pid=374 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.882906][ T24] audit: type=1400 audit(1743803082.280:217): avc: denied { create } for pid=374 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.902182][ T24] audit: type=1400 audit(1743803082.280:218): avc: denied { write } for pid=374 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.939670][ T24] audit: type=1400 audit(1743803082.360:219): avc: denied { create } for pid=379 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.966083][ T24] audit: type=1400 audit(1743803082.360:220): avc: denied { ioctl } for pid=379 comm="syz.4.20" path="socket:[15417]" dev="sockfs" ino=15417 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.003756][ T373] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 36.045137][ T332] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.054590][ T332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.064815][ T332] usb 4-1: Product: syz [ 36.084832][ T332] usb 4-1: Manufacturer: syz [ 36.089807][ T332] usb 4-1: SerialNumber: syz [ 36.097916][ T24] audit: type=1326 audit(1743803082.520:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=391 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5af09169 code=0x7ffc0000 [ 36.136804][ T24] audit: type=1326 audit(1743803082.550:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=391 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f2e5af09169 code=0x7ffc0000 [ 36.170092][ T24] audit: type=1326 audit(1743803082.550:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=391 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5af09169 code=0x7ffc0000 [ 36.194432][ T24] audit: type=1326 audit(1743803082.550:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=391 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f2e5af09169 code=0x7ffc0000 [ 36.225816][ T24] audit: type=1326 audit(1743803082.550:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=391 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5af09169 code=0x7ffc0000 [ 36.276578][ T397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=397 comm=syz.1.25 [ 36.278962][ T388] F2FS-fs (loop0): Wrong NAT boundary, start(2560) end(3584) blocks(83968) [ 36.297916][ T388] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 36.306767][ T388] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 36.318116][ T388] F2FS-fs (loop0): invalid crc value [ 36.335071][ T388] F2FS-fs (loop0): Found nat_bits in checkpoint [ 36.390334][ T388] F2FS-fs (loop0): Start checkpoint disabled! [ 36.398131][ T388] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 36.405505][ T302] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 36.413058][ T388] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 36.477095][ T336] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 36.696904][ T336] EXT4-fs (loop3): re-mounted. Opts: (null) [ 36.829632][ T420] EXT4-fs error (device loop0): ext4_orphan_get:1395: inode #15: comm syz.0.30: casefold flag without casefold feature [ 36.864253][ T420] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.30: missing EA_INODE flag [ 36.877246][ T420] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.30: error while reading EA inode 12 err=-117 [ 36.912846][ T420] EXT4-fs (loop0): 1 orphan inode deleted [ 36.919505][ T420] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 37.208157][ T428] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 37.285076][ T302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.301177][ T302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.324871][ T302] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 37.335463][ T302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.361054][ T302] usb 3-1: config 0 descriptor?? [ 37.388471][ T437] capability: warning: `syz.1.36' uses deprecated v2 capabilities in a way that may be insecure [ 37.400428][ T437] tipc: Started in network mode [ 37.405309][ T437] tipc: Own node identity fe8000000002000000000000000000aa, cluster identity 4711 [ 37.414544][ T437] tipc: Enabling of bearer rejected, failed to enable media [ 38.502026][ T461] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 38.512079][ T461] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.587359][ T332] usb 4-1: USB disconnect, device number 2 [ 38.641488][ T474] input: syz1 as /devices/virtual/input/input5 [ 38.977413][ T481] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 38.987126][ T481] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.107479][ T390] udevd[390]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.315244][ T302] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 40.492242][ T302] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 40.500833][ T302] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 40.508791][ T302] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 40.516163][ T302] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 40.526293][ T302] usb 3-1: USB disconnect, device number 2 [ 41.341127][ T514] netlink: 60 bytes leftover after parsing attributes in process `syz.2.53'. [ 41.803126][ T534] IPv4: Oversized IP packet from 127.202.26.0 [ 43.010779][ T24] kauditd_printk_skb: 133 callbacks suppressed [ 43.010791][ T24] audit: type=1400 audit(1743803089.430:359): avc: denied { create } for pid=555 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.036109][ T24] audit: type=1400 audit(1743803089.430:360): avc: denied { connect } for pid=555 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.081323][ T563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'. [ 43.093802][ T24] audit: type=1326 audit(1743803089.510:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9612f169 code=0x7ffc0000 [ 43.151013][ T24] audit: type=1326 audit(1743803089.510:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9612f169 code=0x7ffc0000 [ 43.163988][ T572] syz.2.72[572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.176168][ T572] syz.2.72[572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.189000][ T560] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 43.191736][ T24] audit: type=1326 audit(1743803089.510:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3d9612f169 code=0x7ffc0000 [ 43.232176][ T24] audit: type=1326 audit(1743803089.510:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9612f169 code=0x7ffc0000 [ 43.256048][ T560] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.267690][ T24] audit: type=1326 audit(1743803089.510:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f3d9612f169 code=0x7ffc0000 [ 43.308353][ T24] audit: type=1326 audit(1743803089.510:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9612f169 code=0x7ffc0000 [ 43.331694][ T24] audit: type=1326 audit(1743803089.510:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f3d9612f169 code=0x7ffc0000 [ 43.357526][ T24] audit: type=1326 audit(1743803089.510:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9612f169 code=0x7ffc0000 [ 46.858429][ T639] netlink: 'syz.0.90': attribute type 7 has an invalid length. [ 47.338158][ T616] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 48.075744][ T616] usb 5-1: Using ep0 maxpacket: 16 [ 48.729502][ T662] ====================================================== [ 48.729502][ T662] WARNING: the mand mount option is being deprecated and [ 48.729502][ T662] will be removed in v5.15! [ 48.729502][ T662] ====================================================== [ 48.851884][ T662] EXT4-fs (loop0): orphan cleanup on readonly fs [ 48.874488][ T662] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.96: bg 0: block 248: padding at end of block bitmap is not set [ 48.949006][ T616] usb 5-1: unable to read config index 0 descriptor/all [ 48.956039][ T662] __quota_error: 67 callbacks suppressed [ 48.956049][ T662] Quota error (device loop0): write_blk: dquota write failed [ 48.956173][ T616] usb 5-1: can't read configurations, error -71 [ 48.976223][ T662] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 48.979102][ T24] audit: type=1400 audit(1743803095.400:436): avc: denied { create } for pid=677 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.006505][ T662] EXT4-fs error (device loop0): ext4_acquire_dquot:6219: comm syz.0.96: Failed to acquire dquot type 1 [ 49.015800][ T24] audit: type=1400 audit(1743803095.430:437): avc: denied { setopt } for pid=677 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.025644][ T662] EXT4-fs (loop0): 1 truncate cleaned up [ 49.037715][ T24] audit: type=1400 audit(1743803095.430:438): avc: denied { ioctl } for pid=677 comm="syz.1.100" path="socket:[15899]" dev="sockfs" ino=15899 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.044096][ T662] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 49.068219][ T678] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.093283][ T24] audit: type=1400 audit(1743803095.510:439): avc: denied { create } for pid=684 comm="syz.2.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.114573][ T678] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.137226][ T24] audit: type=1400 audit(1743803095.560:440): avc: denied { execute } for pid=661 comm="syz.0.96" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.167773][ T24] audit: type=1400 audit(1743803095.560:441): avc: denied { read open } for pid=661 comm="syz.0.96" path="/24/bus/file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.190725][ T24] audit: type=1400 audit(1743803095.580:442): avc: denied { name_bind } for pid=672 comm="syz.4.99" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 49.212825][ T665] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 49.238037][ T665] Quota error (device loop0): write_blk: dquota write failed [ 49.249915][ T665] EXT4-fs error (device loop0): ext4_acquire_dquot:6219: comm syz.0.96: Failed to acquire dquot type 1 [ 49.279336][ T665] EXT4-fs warning (device loop0): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 49.297437][ T665] EXT4-fs error (device loop0): ext4_lookup:1834: inode #2: comm syz.0.96: deleted inode referenced: 12 [ 49.423688][ T294] EXT4-fs error (device loop0): ext4_lookup:1834: inode #2: comm syz-executor: deleted inode referenced: 12 [ 49.440936][ T294] EXT4-fs error (device loop0): ext4_lookup:1834: inode #2: comm syz-executor: deleted inode referenced: 12 [ 49.480753][ T699] EXT4-fs error (device loop1): ext4_orphan_get:1395: inode #15: comm syz.1.105: casefold flag without casefold feature [ 49.493512][ T699] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.105: missing EA_INODE flag [ 49.505091][ T699] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.105: error while reading EA inode 12 err=-117 [ 49.521117][ T699] EXT4-fs (loop1): 1 orphan inode deleted [ 49.526957][ T699] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 49.616327][ T707] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.623209][ T707] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.630766][ T707] device bridge_slave_0 entered promiscuous mode [ 49.639462][ T707] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.646485][ T707] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.653835][ T707] device bridge_slave_1 entered promiscuous mode [ 49.694413][ T707] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.701281][ T707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.708486][ T707] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.715448][ T707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.735867][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.743438][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.751026][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.762587][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.770768][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.777702][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.786634][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.794697][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.801574][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.827978][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.836428][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.846674][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.861026][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.870067][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.877842][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.886635][ T707] device veth0_vlan entered promiscuous mode [ 49.898919][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.908539][ T707] device veth1_macvtap entered promiscuous mode [ 49.920890][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.941169][ T49] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.951329][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.956980][ T589] device bridge_slave_1 left promiscuous mode [ 50.970868][ T589] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.986025][ T589] device bridge_slave_0 left promiscuous mode [ 51.003439][ T589] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.021490][ T589] device veth1_macvtap left promiscuous mode [ 51.034451][ T589] device veth0_vlan left promiscuous mode [ 52.833041][ T788] incfs: Options parsing error. -22 [ 52.840120][ T788] incfs: mount failed -22 [ 53.946452][ T790] EXT4-fs (loop1): 1 orphan inode deleted [ 53.954240][ T790] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 54.006000][ T790] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.053743][ T24] kauditd_printk_skb: 56 callbacks suppressed [ 54.053756][ T24] audit: type=1400 audit(1743803100.470:498): avc: denied { setattr } for pid=789 comm="syz.1.130" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.115042][ T25] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 54.207140][ T24] audit: type=1326 audit(1743803100.630:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=821 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff543aef169 code=0x7ffc0000 [ 54.284985][ T24] audit: type=1326 audit(1743803100.650:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=821 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff543aef169 code=0x7ffc0000 [ 54.331337][ T825] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 54.365154][ T24] audit: type=1326 audit(1743803100.650:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=821 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff543aef169 code=0x7ffc0000 [ 54.452835][ T24] audit: type=1326 audit(1743803100.650:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=821 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff543aef169 code=0x7ffc0000 [ 54.475074][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 54.504990][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.515042][ T25] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 54.524019][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.532917][ T24] audit: type=1326 audit(1743803100.650:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=821 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff543aef169 code=0x7ffc0000 [ 54.556399][ T25] usb 6-1: config 0 descriptor?? [ 54.561396][ T24] audit: type=1326 audit(1743803100.650:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=821 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff543aef169 code=0x7ffc0000 [ 54.584623][ T24] audit: type=1326 audit(1743803100.650:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=821 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff543aef169 code=0x7ffc0000 [ 54.608472][ T25] hub 6-1:0.0: USB hub found [ 54.613105][ T24] audit: type=1326 audit(1743803100.650:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=821 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff543aef169 code=0x7ffc0000 [ 54.636527][ T24] audit: type=1326 audit(1743803100.660:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=821 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff543aef169 code=0x7ffc0000 [ 54.695669][ T818] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 54.719341][ T818] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 54.746639][ T818] F2FS-fs (loop2): Found nat_bits in checkpoint [ 54.849459][ T818] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 54.864219][ T818] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 54.895015][ T25] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 55.091875][ T818] attempt to access beyond end of device [ 55.091875][ T818] loop2: rw=2049, want=81920, limit=40427 [ 55.166211][ T25] hid-generic 0003:046D:C31C.0002: item fetching failed at offset 0/1 [ 55.174838][ T818] attempt to access beyond end of device [ 55.174838][ T818] loop2: rw=2049, want=53248, limit=40427 [ 55.184666][ T25] hid-generic: probe of 0003:046D:C31C.0002 failed with error -22 [ 55.258550][ T818] attempt to access beyond end of device [ 55.258550][ T818] loop2: rw=2049, want=59264, limit=40427 [ 55.535414][ T330] usb 6-1: USB disconnect, device number 2 [ 56.155445][ T849] syz.5.147 uses obsolete (PF_INET,SOCK_PACKET) [ 56.201546][ T818] SELinux: Context Ü is not valid (left unmapped). [ 56.908137][ T297] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 56.908150][ T297] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 56.916444][ T297] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 56.923979][ T297] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 56.944540][ T297] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 56.998120][ T297] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 57.005532][ T297] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 57.465282][ T871] EXT4-fs (loop5): Unrecognized mount option "dont_measure" or missing value [ 57.578000][ T878] input: syz1 as /devices/virtual/input/input7 [ 58.491142][ T881] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 58.503476][ T881] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.637999][ T896] netlink: 'syz.2.151': attribute type 13 has an invalid length. [ 60.555011][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 60.915110][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 60.936042][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 61.034126][ T922] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 61.048175][ T922] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 61.063864][ T924] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 61.071806][ T924] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 61.081176][ T924] F2FS-fs (loop3): invalid crc value [ 61.134436][ T924] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 61.147371][ T924] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 61.165073][ T25] usb 5-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce [ 61.181425][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.230420][ T924] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 61.274581][ T922] F2FS-fs (loop5): Found nat_bits in checkpoint [ 61.282410][ T25] usb 5-1: Product: syz [ 61.315809][ T924] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 61.326697][ T25] usb 5-1: Manufacturer: syz [ 61.375731][ T922] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 61.384795][ T25] usb 5-1: SerialNumber: syz [ 61.404841][ T25] usb 5-1: config 0 descriptor?? [ 61.711693][ T922] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 61.790182][ T922] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 61.815023][ T25] usb 5-1: can't set config #0, error -71 [ 61.823783][ T25] usb 5-1: USB disconnect, device number 4 [ 62.018659][ T24] kauditd_printk_skb: 58 callbacks suppressed [ 62.018692][ T24] audit: type=1400 audit(1743803108.440:566): avc: denied { write } for pid=948 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 62.126104][ T956] netem: change failed [ 62.232122][ T959] EXT4-fs (loop1): orphan cleanup on readonly fs [ 62.241001][ T959] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.172: bg 0: block 248: padding at end of block bitmap is not set [ 62.255631][ T959] Quota error (device loop1): write_blk: dquota write failed [ 62.262835][ T959] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 62.326286][ T966] process 'syz.2.170' launched './file1' with NULL argv: empty string added [ 62.793257][ T24] audit: type=1400 audit(1743803108.760:567): avc: denied { execute } for pid=954 comm="syz.2.170" name="file1" dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.819423][ T599] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 62.902201][ T24] audit: type=1400 audit(1743803108.760:568): avc: denied { execute_no_trans } for pid=954 comm="syz.2.170" path="/31/file1" dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.912681][ T959] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz.1.172: Failed to acquire dquot type 1 [ 63.225458][ T959] EXT4-fs (loop1): 1 truncate cleaned up [ 63.446580][ T974] input: syz1 as /devices/virtual/input/input8 [ 63.593359][ T959] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 64.232430][ T988] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 64.255025][ T599] usb 6-1: device descriptor read/all, error -71 [ 64.262232][ T988] Quota error (device loop1): write_blk: dquota write failed [ 64.270273][ T988] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 64.280373][ T988] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz.1.172: Failed to acquire dquot type 1 [ 64.292442][ T988] EXT4-fs warning (device loop1): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 64.308064][ T990] EXT4-fs error (device loop1): ext4_lookup:1834: inode #2: comm syz.1.172: deleted inode referenced: 12 [ 64.434981][ T53] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 64.482856][ T992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'. [ 64.492721][ T992] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.502663][ T992] device bridge_slave_1 left promiscuous mode [ 64.511549][ T992] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.549244][ T24] audit: type=1400 audit(1743803110.970:569): avc: denied { unmount } for pid=707 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 64.709385][ T53] usb 4-1: Using ep0 maxpacket: 32 [ 65.794925][ C0] sched: RT throttling activated [ 66.137203][ T1000] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 66.272946][ T1000] EXT4-fs error (device loop4) in ext4_do_update_inode:5303: error 27 [ 66.281795][ T1000] EXT4-fs error (device loop4): ext4_dirty_inode:6110: inode #3: comm syz.4.181: mark_inode_dirty error [ 66.295163][ T1000] EXT4-fs error (device loop4) in ext4_do_update_inode:5303: error 27 [ 66.304002][ T1000] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #3: comm syz.4.181: mark_inode_dirty error [ 66.317093][ T1000] Quota error (device loop4): write_blk: dquota write failed [ 66.324696][ T1000] Quota error (device loop4): qtree_write_dquot: Error -27 occurred while creating quota [ 66.334513][ T1000] EXT4-fs error (device loop4): ext4_acquire_dquot:6219: comm syz.4.181: Failed to acquire dquot type 0 [ 66.351190][ T1000] EXT4-fs (loop4): 1 orphan inode deleted [ 66.356869][ T1000] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 66.366440][ T1000] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.855006][ T53] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 66.872561][ T53] usb 4-1: can't read configurations, error -71 [ 67.203663][ T1005] F2FS-fs (loop1): Found nat_bits in checkpoint [ 67.412186][ T1005] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 67.463645][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 67.463693][ T24] audit: type=1400 audit(1743803113.880:571): avc: denied { rename } for pid=1004 comm="syz.1.182" name="bus" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 67.521663][ T295] attempt to access beyond end of device [ 67.521663][ T295] loop1: rw=2049, want=45112, limit=40427 [ 67.675686][ T302] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 67.784134][ T1027] FAT-fs (loop4): Directory bread(block 64) failed [ 67.901443][ T1027] FAT-fs (loop4): Directory bread(block 65) failed [ 67.913610][ T1027] FAT-fs (loop4): Directory bread(block 66) failed [ 67.922138][ T1027] FAT-fs (loop4): Directory bread(block 67) failed [ 67.929794][ T1027] FAT-fs (loop4): Directory bread(block 68) failed [ 67.937159][ T1027] FAT-fs (loop4): Directory bread(block 69) failed [ 67.943836][ T1027] FAT-fs (loop4): Directory bread(block 70) failed [ 69.501028][ T1043] 9pnet: Insufficient options for proto=fd [ 69.515035][ T1027] FAT-fs (loop4): Directory bread(block 71) failed [ 69.521433][ T1027] FAT-fs (loop4): Directory bread(block 72) failed [ 69.527835][ T302] usb 6-1: Using ep0 maxpacket: 16 [ 69.575157][ T1027] FAT-fs (loop4): Directory bread(block 73) failed [ 69.605007][ T302] usb 6-1: device descriptor read/all, error -71 [ 69.645452][ T1046] EXT4-fs (loop2): orphan cleanup on readonly fs [ 69.669455][ T1046] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.192: bg 0: block 248: padding at end of block bitmap is not set [ 69.797092][ T1046] Quota error (device loop2): write_blk: dquota write failed [ 69.805069][ T1046] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 69.874592][ T1046] EXT4-fs error (device loop2): ext4_acquire_dquot:6219: comm syz.2.192: Failed to acquire dquot type 1 [ 69.956013][ T1055] erofs: Unknown parameter 'ÿÿÿÿ' [ 70.005325][ T1046] EXT4-fs (loop2): 1 truncate cleaned up [ 70.016451][ T1046] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 70.075700][ T1042] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 70.084220][ T1042] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 70.092861][ T24] audit: type=1400 audit(1743803116.520:572): avc: denied { getopt } for pid=1044 comm="syz.5.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.116509][ T1042] F2FS-fs (loop3): Found nat_bits in checkpoint [ 70.125617][ T1046] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 70.172407][ T1042] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 70.172840][ T1046] Quota error (device loop2): write_blk: dquota write failed [ 70.187482][ T1068] EXT4-fs error (device loop2): ext4_lookup:1834: inode #2: comm syz.2.192: deleted inode referenced: 12 [ 70.192483][ T24] audit: type=1400 audit(1743803116.610:573): avc: denied { bind } for pid=1064 comm="syz.4.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.199728][ T1042] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 70.219915][ T1046] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 70.226005][ T1042] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 70.237128][ T1046] EXT4-fs error (device loop2): ext4_acquire_dquot:6219: comm syz.2.192: Failed to acquire dquot type 1 [ 70.254667][ T1046] EXT4-fs warning (device loop2): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 70.317718][ T1072] tipc: Started in network mode [ 70.322671][ T1072] tipc: Own node identity ac14142f, cluster identity 4711 [ 70.330009][ T1072] tipc: New replicast peer: 0.0.0.0 [ 70.335398][ T1072] tipc: Enabled bearer , priority 10 [ 70.342756][ T1072] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 70.487777][ T1084] syz.4.199 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 70.499359][ T1084] xt_CT: You must specify a L4 protocol and not use inversions on it [ 70.785178][ T616] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 70.954051][ T1087] EXT4-fs error (device loop5) in ext4_do_update_inode:5303: error 27 [ 70.962911][ T1087] EXT4-fs error (device loop5): ext4_dirty_inode:6110: inode #3: comm syz.5.198: mark_inode_dirty error [ 70.976365][ T1087] EXT4-fs error (device loop5) in ext4_do_update_inode:5303: error 27 [ 70.985329][ T1087] EXT4-fs error (device loop5): __ext4_ext_dirty:182: inode #3: comm syz.5.198: mark_inode_dirty error [ 70.998230][ T1087] Quota error (device loop5): write_blk: dquota write failed [ 71.005722][ T1087] Quota error (device loop5): qtree_write_dquot: Error -27 occurred while creating quota [ 71.015487][ T1087] EXT4-fs error (device loop5): ext4_acquire_dquot:6219: comm syz.5.198: Failed to acquire dquot type 0 [ 71.032997][ T1087] EXT4-fs (loop5): 1 orphan inode deleted [ 71.038807][ T1087] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 71.048128][ T1087] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.465019][ T302] tipc: 32-bit node address hash set to 2f1414ac [ 71.475108][ T616] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 71.655556][ T1074] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 71.669206][ T1074] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 71.989316][ T1074] F2FS-fs (loop2): invalid crc value [ 72.011134][ T616] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 72.020340][ T1074] F2FS-fs (loop2): Found nat_bits in checkpoint [ 72.067958][ T1074] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 72.084385][ T1074] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 72.095098][ T1107] 9pnet: Insufficient options for proto=fd [ 72.115130][ T616] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 72.124028][ T616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 72.151340][ T616] usb 4-1: SerialNumber: syz [ 72.178415][ T1111] xt_hashlimit: max too large, truncated to 1048576 [ 72.258830][ T616] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 72.268943][ T616] usb-storage 4-1:1.0: USB Mass Storage device detected [ 72.287481][ T616] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 72.297366][ T616] scsi host1: usb-storage 4-1:1.0 [ 72.507310][ T1119] attempt to access beyond end of device [ 72.507310][ T1119] loop2: rw=2049, want=78368, limit=40427 [ 72.739151][ T24] audit: type=1400 audit(1743803118.820:574): avc: denied { create } for pid=1073 comm="syz.2.197" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 73.696857][ T589] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 73.776688][ T589] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 73.786958][ T1114] EXT4-fs error (device loop5) in ext4_do_update_inode:5303: error 27 [ 73.795918][ T1114] EXT4-fs error (device loop5): ext4_dirty_inode:6110: inode #3: comm syz.5.203: mark_inode_dirty error [ 73.807533][ T1114] EXT4-fs error (device loop5) in ext4_do_update_inode:5303: error 27 [ 73.815786][ T1114] EXT4-fs error (device loop5): __ext4_ext_dirty:182: inode #3: comm syz.5.203: mark_inode_dirty error [ 73.828453][ T1114] Quota error (device loop5): write_blk: dquota write failed [ 73.835999][ T1114] Quota error (device loop5): qtree_write_dquot: Error -27 occurred while creating quota [ 73.845743][ T1114] EXT4-fs error (device loop5): ext4_acquire_dquot:6219: comm syz.5.203: Failed to acquire dquot type 0 [ 73.861464][ T1114] EXT4-fs (loop5): 1 orphan inode deleted [ 73.867063][ T1114] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 73.876078][ T1114] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.378959][ T317] usb 4-1: USB disconnect, device number 5 [ 74.492355][ T1125] EXT4-fs (loop4): orphan cleanup on readonly fs [ 74.500346][ T1125] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.205: bg 0: block 248: padding at end of block bitmap is not set [ 74.518359][ T1125] Quota error (device loop4): write_blk: dquota write failed [ 74.526306][ T24] audit: type=1400 audit(1743803120.950:575): avc: denied { remove_name } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.548860][ T1125] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 74.559802][ T1131] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.569573][ T1125] EXT4-fs error (device loop4): ext4_acquire_dquot:6219: comm syz.4.205: Failed to acquire dquot type 1 [ 74.582606][ T1131] EXT4-fs (loop1): 1 truncate cleaned up [ 74.588324][ T24] audit: type=1400 audit(1743803120.950:576): avc: denied { rename } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.610555][ T1131] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000bbc,resuid=0x0000000000000000,stripe=0x0000000000000009,,errors=continue [ 74.611543][ T24] audit: type=1400 audit(1743803120.950:577): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.630454][ T1125] EXT4-fs (loop4): 1 truncate cleaned up [ 74.653251][ T1125] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 74.780287][ T1138] tipc: Started in network mode [ 74.781548][ T1125] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 74.785490][ T1138] tipc: Own node identity 7f000001, cluster identity 4711 [ 74.801760][ T1138] tipc: Enabled bearer , priority 10 [ 74.805659][ T1125] Quota error (device loop4): write_blk: dquota write failed [ 74.815297][ T1125] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 74.825614][ T1125] EXT4-fs error (device loop4): ext4_acquire_dquot:6219: comm syz.4.205: Failed to acquire dquot type 1 [ 74.836702][ T1136] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 74.843776][ T1136] EXT4-fs (loop2): dax option not supported [ 74.860628][ T1145] EXT4-fs error (device loop4): ext4_lookup:1834: inode #2: comm syz.4.205: deleted inode referenced: 12 [ 74.881748][ T1125] EXT4-fs warning (device loop4): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 74.901549][ T24] audit: type=1400 audit(1743803121.320:578): avc: denied { read } for pid=1143 comm="syz.3.209" name="usbmon0" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 74.964307][ T1148] capability: warning: `syz.3.211' uses 32-bit capabilities (legacy support in use) [ 74.974443][ T1148] FAULT_INJECTION: forcing a failure. [ 74.974443][ T1148] name failslab, interval 1, probability 0, space 0, times 1 [ 74.987168][ T1148] CPU: 1 PID: 1148 Comm: syz.3.211 Not tainted 5.10.234-syzkaller-00033-g094fc3778d6b #0 [ 74.996906][ T1148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 75.006919][ T1148] Call Trace: [ 75.010146][ T1148] dump_stack_lvl+0x1e2/0x24b [ 75.014654][ T1148] ? panic+0x812/0x812 [ 75.018539][ T1148] ? bfq_pos_tree_add_move+0x43b/0x43b [ 75.023921][ T1148] ? arch_stack_walk+0xf3/0x140 [ 75.028605][ T1148] dump_stack+0x15/0x17 [ 75.032690][ T1148] should_fail+0x3c6/0x510 [ 75.036939][ T1148] ? ip_options_get+0x98/0x570 [ 75.041538][ T1148] __should_failslab+0xa4/0xe0 [ 75.046153][ T1148] should_failslab+0x9/0x20 [ 75.050500][ T1148] __kmalloc+0x60/0x330 [ 75.054474][ T1148] ip_options_get+0x98/0x570 [ 75.058921][ T1148] ? is_bpf_text_address+0x172/0x190 [ 75.064182][ T1148] ? stack_trace_save+0x1c0/0x1c0 [ 75.069030][ T1148] ? ip_options_undo+0x5d0/0x5d0 [ 75.073812][ T1148] ? unwind_get_return_address+0x4d/0x90 [ 75.079271][ T1148] ? arch_stack_walk+0xf3/0x140 [ 75.083950][ T1148] ip_cmsg_send+0x540/0xaa0 [ 75.088507][ T1148] udp_sendmsg+0xd8a/0x2a80 [ 75.092821][ T1148] ? _raw_spin_trylock_bh+0x190/0x190 [ 75.098032][ T1148] ? ip_do_fragment+0x2310/0x2310 [ 75.102886][ T1148] ? udp_cmsg_send+0x3a0/0x3a0 [ 75.107491][ T1148] ? ip4_datagram_release_cb+0x899/0xdf0 [ 75.112952][ T1148] ? __local_bh_enable_ip+0x53/0x80 [ 75.117984][ T1148] ? _raw_spin_unlock_bh+0x51/0x60 [ 75.122946][ T1148] ? release_sock+0x163/0x1b0 [ 75.127441][ T1148] ? inet_send_prepare+0x1b8/0x4a0 [ 75.132412][ T1148] inet_sendmsg+0xa1/0xc0 [ 75.136586][ T1148] ? inet_send_prepare+0x4a0/0x4a0 [ 75.141517][ T1148] ____sys_sendmsg+0x59e/0x8f0 [ 75.146124][ T1148] ? __sys_sendmsg_sock+0x40/0x40 [ 75.151170][ T1148] ? kmem_cache_free+0xa9/0x1e0 [ 75.155945][ T1148] ? import_iovec+0xe5/0x120 [ 75.160365][ T1148] ___sys_sendmsg+0x252/0x2e0 [ 75.164882][ T1148] ? __sys_sendmsg+0x280/0x280 [ 75.169482][ T1148] ? fsnotify_set_children_dentry_flags+0x210/0x210 [ 75.175897][ T1148] ? proc_fail_nth_write+0x20b/0x290 [ 75.181045][ T1148] ? __fdget+0x1bc/0x240 [ 75.185110][ T1148] __sys_sendmmsg+0x2c3/0x510 [ 75.189803][ T1148] ? __ia32_sys_sendmsg+0x90/0x90 [ 75.194742][ T1148] ? mutex_lock+0xa5/0x110 [ 75.199280][ T1148] ? __kasan_check_write+0x14/0x20 [ 75.204215][ T1148] ? __ia32_sys_read+0x90/0x90 [ 75.208804][ T1148] __x64_sys_sendmmsg+0xa0/0xb0 [ 75.213487][ T1148] do_syscall_64+0x34/0x70 [ 75.217737][ T1148] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 75.223465][ T1148] RIP: 0033:0x7ff543aef169 [ 75.227841][ T1148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.247353][ T1148] RSP: 002b:00007ff542159038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 75.255598][ T1148] RAX: ffffffffffffffda RBX: 00007ff543d07fa0 RCX: 00007ff543aef169 [ 75.263414][ T1148] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000006 [ 75.271485][ T1148] RBP: 00007ff542159090 R08: 0000000000000000 R09: 0000000000000000 [ 75.279476][ T1148] R10: 0000000004008804 R11: 0000000000000246 R12: 0000000000000001 [ 75.287281][ T1148] R13: 0000000000000000 R14: 00007ff543d07fa0 R15: 00007ffe724fcd78 [ 75.295659][ T599] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 75.372079][ T1158] 9pnet: Insufficient options for proto=fd [ 75.426102][ T1165] netem: change failed [ 75.430768][ T1162] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 75.725215][ T599] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 75.781268][ T599] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 75.861877][ T1174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 75.891184][ T599] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 76.001701][ T599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 76.034429][ T599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 76.229380][ T330] tipc: 32-bit node address hash set to 100007f [ 76.273996][ T599] usb 2-1: language id specifier not provided by device, defaulting to English [ 76.839909][ T1190] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 76.881148][ T1190] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 76.896554][ T1190] F2FS-fs (loop2): invalid crc value [ 76.902623][ T1190] F2FS-fs (loop2): invalid crc value [ 76.907931][ T1190] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 77.035418][ T599] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 77.044747][ T599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.053905][ T599] usb 2-1: Manufacturer: 畆s [ 77.126733][ T599] usb 2-1: config 0 descriptor?? [ 77.146319][ T1211] exfat: Unknown parameter 'iochar' [ 77.197112][ T599] hub 2-1:0.0: bad descriptor, ignoring hub [ 77.203069][ T599] hub: probe of 2-1:0.0 failed with error -5 [ 77.806968][ T478] udevd[478]: failed to send result of seq 4453 to main daemon: Connection refused [ 77.818127][ T390] udevd[390]: failed to send result of seq 4455 to main daemon: Transport endpoint is not connected [ 77.836814][ T599] input: 畆s as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 77.849619][ T477] udevd[477]: failed to send result of seq 4451 to main daemon: Transport endpoint is not connected [ 77.863533][ T25] usb 2-1: USB disconnect, device number 2 [ 78.004215][ T343] udevd[343]: failed to send result of seq 4449 to main daemon: Transport endpoint is not connected [ 78.075854][ T1224] exfat: Deprecated parameter 'utf8' [ 78.080999][ T1224] exfat: Deprecated parameter 'namecase' [ 78.086745][ T1224] exfat: Deprecated parameter 'utf8' [ 78.094649][ T1224] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 78.137196][ T1234] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 78.146392][ T1234] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.249242][ T1236] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 78.258273][ T1236] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.500812][ T1245] netlink: 68 bytes leftover after parsing attributes in process `syz.2.238'. [ 78.985879][ T1248] netlink: 44 bytes leftover after parsing attributes in process `syz.4.239'. [ 79.148908][ T1254] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 79.158201][ T1254] EXT4-fs (loop5): Ignoring removed bh option [ 79.164125][ T1254] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.176394][ T1254] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 79.192902][ T24] kauditd_printk_skb: 13 callbacks suppressed [ 79.192915][ T24] audit: type=1400 audit(1743803125.610:592): avc: denied { bind } for pid=1265 comm="syz.3.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.236309][ T24] audit: type=1400 audit(1743803125.610:593): avc: denied { name_bind } for pid=1265 comm="syz.3.247" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 79.265088][ T24] audit: type=1400 audit(1743803125.610:594): avc: denied { node_bind } for pid=1265 comm="syz.3.247" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 79.289235][ T1254] EXT4-fs (loop5): 1 truncate cleaned up [ 79.294720][ T1254] EXT4-fs (loop5): mounted filesystem without journal. Opts: mblk_io_submit,dioread_nolock,bh,errors=continue,nouid32,quota,nogrpid,,errors=continue [ 80.305672][ T24] audit: type=1400 audit(1743803126.730:595): avc: denied { read } for pid=1278 comm="syz.2.252" dev="nsfs" ino=4026532527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 80.640637][ T1283] hub 6-0:1.0: USB hub found [ 80.646735][ T1283] hub 6-0:1.0: 1 port detected [ 81.264993][ T24] audit: type=1400 audit(1743803126.750:596): avc: denied { open } for pid=1278 comm="syz.2.252" path="net:[4026532527]" dev="nsfs" ino=4026532527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 81.907096][ T1276] EXT4-fs (loop3): Test dummy encryption mode enabled [ 81.914074][ T1276] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.989188][ T1276] EXT4-fs (loop3): 1 truncate cleaned up [ 81.994863][ T1276] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,resgid=0x0000000000000000,,errors=continue [ 82.068519][ T1294] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,,errors=continue [ 82.131128][ T1276] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 82.575575][ T1294] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.603375][ T1294] netlink: 71 bytes leftover after parsing attributes in process `syz.5.250'. [ 82.627869][ T24] audit: type=1400 audit(1743803129.050:597): avc: denied { ioctl } for pid=1292 comm="syz.5.250" path="/26/bus/cpu.stat" dev="loop5" ino=18 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.656693][ T1294] EXT4-fs (loop5): shut down requested (1) [ 82.741190][ T24] audit: type=1400 audit(1743803129.160:598): avc: denied { map } for pid=1292 comm="syz.5.250" path="socket:[17819]" dev="sockfs" ino=17819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.767796][ T24] audit: type=1400 audit(1743803129.160:599): avc: denied { read } for pid=1292 comm="syz.5.250" path="socket:[17819]" dev="sockfs" ino=17819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.791789][ T24] audit: type=1326 audit(1743803129.190:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1292 comm="syz.5.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 82.817020][ T24] audit: type=1326 audit(1743803129.190:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1292 comm="syz.5.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 82.841136][ T448] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 82.871241][ T1322] tipc: New replicast peer: 255.0.0.255 [ 82.876943][ T1322] tipc: Enabled bearer , priority 10 [ 83.080124][ T1327] device lo entered promiscuous mode [ 83.418581][ T1330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.263'. [ 83.484984][ T448] usb 4-1: device descriptor read/64, error -71 [ 83.737493][ T1323] device lo left promiscuous mode [ 85.604980][ T24] kauditd_printk_skb: 37 callbacks suppressed [ 85.604993][ T24] audit: type=1400 audit(1743803132.000:639): avc: denied { mount } for pid=1354 comm="syz.2.272" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 85.827403][ T1363] device lo entered promiscuous mode [ 86.266074][ T1362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=1362 comm=syz.3.270 [ 86.430369][ T1353] device lo left promiscuous mode [ 86.556790][ T1377] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 87.415993][ T1382] erofs: Unknown parameter '00000000000000000000004' [ 88.450060][ T1396] EXT4-fs (loop1): orphan cleanup on readonly fs [ 88.612817][ T1396] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.282: bg 0: block 248: padding at end of block bitmap is not set [ 88.812264][ T1396] Quota error (device loop1): write_blk: dquota write failed [ 88.821571][ T1396] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 88.832139][ T1396] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz.1.282: Failed to acquire dquot type 1 [ 88.844074][ T1396] EXT4-fs (loop1): 1 truncate cleaned up [ 88.850446][ T1396] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 88.919690][ T1396] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 88.935632][ T1396] Quota error (device loop1): write_blk: dquota write failed [ 88.943116][ T1396] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 88.953216][ T1396] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz.1.282: Failed to acquire dquot type 1 [ 88.965281][ T1396] EXT4-fs warning (device loop1): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 88.980771][ T1423] EXT4-fs error (device loop1): ext4_lookup:1834: inode #2: comm syz.1.282: deleted inode referenced: 12 [ 89.074584][ T1419] tipc: Enabling of bearer rejected, already enabled [ 89.660378][ T700] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 89.666336][ T24] audit: type=1400 audit(1743803136.090:640): avc: denied { read } for pid=1441 comm="syz.4.295" path="socket:[17981]" dev="sockfs" ino=17981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.007102][ T1452] device lo entered promiscuous mode [ 91.097155][ T1456] EXT4-fs warning (device loop1): dx_probe:860: inode #2: comm syz.1.299: dx entry: limit 1024 != root limit 124 [ 91.109558][ T1456] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.299: Corrupt directory, running e2fsck is recommended [ 91.124048][ T1456] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 91.132696][ T1456] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2210: inode #15: comm syz.1.299: corrupted in-inode xattr [ 91.145368][ T1456] EXT4-fs (loop1): Remounting filesystem read-only [ 91.151899][ T1456] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.299: couldn't read orphan inode 15 (err -117) [ 91.164341][ T1456] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 91.183549][ T700] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 91.192586][ T700] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 91.203238][ T700] usb 4-1: config 220 has no interface number 2 [ 91.209595][ T700] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 91.222779][ T700] usb 4-1: config 220 interface 0 has no altsetting 0 [ 91.229559][ T700] usb 4-1: config 220 interface 76 has no altsetting 0 [ 91.236468][ T700] usb 4-1: config 220 interface 1 has no altsetting 0 [ 91.250399][ T1456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'. [ 91.367191][ T1450] device lo left promiscuous mode [ 91.425093][ T700] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 91.442370][ T700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.450517][ T700] usb 4-1: Product: syz [ 91.455068][ T700] usb 4-1: Manufacturer: syz [ 91.459541][ T700] usb 4-1: SerialNumber: syz [ 91.508101][ T24] audit: type=1400 audit(1743803137.930:641): avc: denied { append } for pid=1471 comm="syz.1.302" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 91.544377][ T1460] F2FS-fs (loop2): Found nat_bits in checkpoint [ 91.603239][ T1474] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 91.611305][ T1474] System zones: 0-2, 18-18, 34-34 [ 91.617386][ T1474] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.303: bg 0: block 248: padding at end of block bitmap is not set [ 91.631744][ T1474] Quota error (device loop5): write_blk: dquota write failed [ 91.639003][ T1474] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 91.648865][ T1474] EXT4-fs error (device loop5): ext4_acquire_dquot:6219: comm syz.5.303: Failed to acquire dquot type 1 [ 91.660890][ T1474] EXT4-fs (loop5): 1 truncate cleaned up [ 91.666693][ T1474] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,noload,,errors=continue [ 91.677234][ T1474] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.680521][ T1460] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 91.761556][ T1495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.307'. [ 91.806611][ T297] attempt to access beyond end of device [ 91.806611][ T297] loop2: rw=2049, want=45112, limit=40427 [ 91.888774][ T700] usb 4-1: selecting invalid altsetting 0 [ 91.894501][ T700] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 91.902184][ T700] uvcvideo: No valid video chain found. [ 92.251631][ T700] usb 4-1: USB disconnect, device number 7 [ 92.347706][ T1503] EXT4-fs (loop5): Ignoring removed orlov option [ 92.359825][ T1503] EXT4-fs (loop5): orphan cleanup on readonly fs [ 92.373583][ T1503] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.309: bg 0: block 248: padding at end of block bitmap is not set [ 92.403333][ T1503] Quota error (device loop5): write_blk: dquota write failed [ 92.418877][ T1503] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 92.438435][ T1503] EXT4-fs error (device loop5): ext4_acquire_dquot:6219: comm syz.5.309: Failed to acquire dquot type 1 [ 92.450322][ T1503] EXT4-fs (loop5): 1 truncate cleaned up [ 92.462242][ T1503] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,abort,nombcache,stripe=0x0000000000000010,,errors=continue [ 92.528014][ T24] audit: type=1400 audit(1743803138.950:642): avc: denied { remount } for pid=1502 comm="syz.5.309" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 92.547812][ T1503] EXT4-fs (loop5): Ignoring removed orlov option [ 92.555298][ T1503] EXT4-fs error (device loop5): ext4_remount:5878: Abort forced by user [ 92.656693][ T1510] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 92.665725][ T1510] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.727349][ T1521] FAULT_INJECTION: forcing a failure. [ 92.727349][ T1521] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.748641][ T1521] CPU: 0 PID: 1521 Comm: syz.4.314 Not tainted 5.10.234-syzkaller-00033-g094fc3778d6b #0 [ 92.758281][ T1521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 92.768170][ T1521] Call Trace: [ 92.771384][ T1521] dump_stack_lvl+0x1e2/0x24b [ 92.775820][ T1521] ? bfq_pos_tree_add_move+0x43b/0x43b [ 92.781115][ T1521] dump_stack+0x15/0x17 [ 92.785102][ T1521] should_fail+0x3c6/0x510 [ 92.789357][ T1521] should_fail_usercopy+0x1a/0x20 [ 92.794220][ T1521] _copy_to_user+0x20/0x90 [ 92.798782][ T1521] simple_read_from_buffer+0xc7/0x150 [ 92.803963][ T1521] proc_fail_nth_read+0x1a3/0x210 [ 92.808816][ T1521] ? proc_fault_inject_write+0x390/0x390 [ 92.814365][ T1521] ? security_file_permission+0x86/0xb0 [ 92.819748][ T1521] ? rw_verify_area+0x1c3/0x360 [ 92.824435][ T1521] ? proc_fault_inject_write+0x390/0x390 [ 92.829914][ T1521] vfs_read+0x200/0xba0 [ 92.833937][ T1521] ? kernel_read+0x70/0x70 [ 92.838610][ T1521] ? __kasan_check_write+0x14/0x20 [ 92.843638][ T1521] ? mutex_lock+0xa5/0x110 [ 92.847906][ T1521] ? mutex_trylock+0xa0/0xa0 [ 92.852448][ T1521] ? __fdget_pos+0x2e7/0x3a0 [ 92.856871][ T1521] ? ksys_read+0x77/0x2c0 [ 92.861035][ T1521] ksys_read+0x199/0x2c0 [ 92.865114][ T1521] ? bpf_trace_run1+0x210/0x210 [ 92.869797][ T1521] ? vfs_write+0xe70/0xe70 [ 92.874160][ T1521] ? __bpf_trace_sys_enter+0x62/0x70 [ 92.879281][ T1521] __x64_sys_read+0x7b/0x90 [ 92.883612][ T1521] do_syscall_64+0x34/0x70 [ 92.887862][ T1521] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 92.893588][ T1521] RIP: 0033:0x7f64e77dbb7c [ 92.897841][ T1521] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 92.917293][ T1521] RSP: 002b:00007f64e5e47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 92.925544][ T1521] RAX: ffffffffffffffda RBX: 00007f64e79f5fa0 RCX: 00007f64e77dbb7c [ 92.933607][ T1521] RDX: 000000000000000f RSI: 00007f64e5e470a0 RDI: 0000000000000006 [ 92.941536][ T1521] RBP: 00007f64e5e47090 R08: 0000000000000000 R09: 0000000000000000 [ 92.949339][ T1521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.957150][ T1521] R13: 0000000000000000 R14: 00007f64e79f5fa0 R15: 00007ffc06782d28 [ 93.182417][ T1523] 9pnet: Insufficient options for proto=fd [ 93.419811][ T1526] device lo entered promiscuous mode [ 93.824822][ T1518] device lo left promiscuous mode [ 94.215618][ T1534] EXT4-fs (loop2): Unrecognized mount option "dont_measure" or missing value [ 94.336483][ T1543] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.347864][ T1543] EXT4-fs error (device loop3): ext4_orphan_get:1421: comm syz.3.320: bad orphan inode 16 [ 94.358120][ T1543] ext4_test_bit(bit=15, block=4) = 0 [ 94.363244][ T1543] EXT4-fs (loop3): 1 orphan inode deleted [ 94.368945][ T1543] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x000000000000004a,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000010000,acl,stripe=0x0000000000000001,init_itable=0x0000000000000401,journal_dev=0x000000000000ffff,bsdgroups,,errors=continue [ 94.400053][ T1546] xt_bpf: check failed: parse error [ 94.426491][ T616] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 94.466444][ T24] audit: type=1326 audit(1743803140.890:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1545 comm="syz.5.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 94.493212][ T24] audit: type=1326 audit(1743803140.890:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1545 comm="syz.5.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 94.517014][ T24] audit: type=1326 audit(1743803140.890:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1545 comm="syz.5.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 94.540663][ T24] audit: type=1326 audit(1743803140.890:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1545 comm="syz.5.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 94.735648][ T616] usb 5-1: too many configurations: 58, using maximum allowed: 8 [ 94.873874][ T1562] EXT4-fs (loop1): orphan cleanup on readonly fs [ 94.883704][ T1562] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.325: bg 0: block 248: padding at end of block bitmap is not set [ 94.898365][ T616] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 94.906359][ T1562] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz.1.325: Failed to acquire dquot type 1 [ 94.919407][ T1562] EXT4-fs (loop1): 1 truncate cleaned up [ 94.927047][ T616] usb 5-1: can't read configurations, error -61 [ 94.935106][ T1562] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue [ 94.988951][ T1562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27425 sclass=netlink_route_socket pid=1562 comm=syz.1.325 [ 95.145067][ T616] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 95.805085][ T616] usb 5-1: too many configurations: 58, using maximum allowed: 8 [ 95.928832][ T1572] netem: change failed [ 96.055493][ T616] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 96.063937][ T616] usb 5-1: can't read configurations, error -61 [ 96.070162][ T616] usb usb5-port1: attempt power cycle [ 96.098331][ T1570] F2FS-fs (loop3): Found nat_bits in checkpoint [ 96.145634][ T1570] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 96.190194][ T298] attempt to access beyond end of device [ 96.190194][ T298] loop3: rw=2049, want=45112, limit=40427 [ 96.355611][ T1594] EXT4-fs (loop3): Ignoring removed orlov option [ 96.369159][ T1594] EXT4-fs error (device loop3): ext4_orphan_get:1395: inode #15: comm syz.3.334: casefold flag without casefold feature [ 96.381792][ T1594] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.334: missing EA_INODE flag [ 96.393861][ T1594] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.334: error while reading EA inode 12 err=-117 [ 96.406141][ T1594] EXT4-fs (loop3): 1 orphan inode deleted [ 96.411769][ T1594] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,orlov,,errors=continue [ 96.558630][ T616] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 96.615478][ T24] kauditd_printk_skb: 28 callbacks suppressed [ 96.623249][ T24] audit: type=1400 audit(1743803143.020:673): avc: denied { create } for pid=1593 comm="syz.3.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 96.623619][ T1603] EXT4-fs (loop1): Invalid log block size: 54 [ 96.814728][ T1603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.336'. [ 96.899293][ T24] audit: type=1400 audit(1743803143.020:674): avc: denied { getopt } for pid=1593 comm="syz.3.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.924840][ T24] audit: type=1400 audit(1743803143.020:675): avc: denied { write } for pid=1593 comm="syz.3.334" path="socket:[18329]" dev="sockfs" ino=18329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 97.072869][ T616] usb 5-1: too many configurations: 58, using maximum allowed: 8 [ 97.099129][ T24] audit: type=1400 audit(1743803143.020:676): avc: denied { nlmsg_read } for pid=1593 comm="syz.3.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 97.525695][ T1610] syz.5.337[1610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.525760][ T1610] syz.5.337[1610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.979026][ T24] audit: type=1107 audit(1743803144.400:677): pid=1607 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='¯' [ 98.016038][ T24] audit: type=1326 audit(1743803144.430:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1607 comm="syz.5.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 98.039371][ T24] audit: type=1326 audit(1743803144.430:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1607 comm="syz.5.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 98.062847][ T24] audit: type=1326 audit(1743803144.430:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1607 comm="syz.5.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 98.087003][ T616] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 98.094964][ T24] audit: type=1326 audit(1743803144.430:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1607 comm="syz.5.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 98.119281][ T616] usb 5-1: can't read configurations, error -71 [ 98.133206][ T24] audit: type=1326 audit(1743803144.430:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1607 comm="syz.5.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 98.182442][ T1620] fuse: blksize only supported for fuseblk [ 98.369604][ T1625] xt_SECMARK: invalid mode: 2 [ 98.629630][ T1628] tipc: Started in network mode [ 98.638542][ T1628] tipc: Own node identity fe8000000000000000030000000000aa, cluster identity 4711 [ 98.647885][ T1628] tipc: Enabling of bearer rejected, failed to enable media [ 99.755239][ T1641] exfat: Bad value for 'fmask' [ 99.891160][ T317] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 100.121219][ T1644] EXT4-fs error (device loop1) in ext4_do_update_inode:5303: error 27 [ 100.130474][ T1644] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #16: comm syz.1.349: mark_inode_dirty error [ 100.142817][ T1644] EXT4-fs error (device loop1) in ext4_do_update_inode:5303: error 27 [ 100.151557][ T1644] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #16: comm syz.1.349: mark_inode_dirty error [ 100.164045][ T1644] EXT4-fs error (device loop1) in ext4_do_update_inode:5303: error 27 [ 100.172610][ T1644] EXT4-fs error (device loop1) in ext4_orphan_del:3292: error 27 [ 100.181403][ T1644] EXT4-fs error (device loop1) in ext4_do_update_inode:5303: error 27 [ 100.190036][ T1644] EXT4-fs error (device loop1): ext4_truncate:4389: inode #16: comm syz.1.349: mark_inode_dirty error [ 100.201811][ T1644] EXT4-fs error (device loop1) in ext4_orphan_cleanup:3108: error 27 [ 100.243625][ T1644] EXT4-fs (loop1): 1 truncate cleaned up [ 100.275652][ T1644] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 100.295346][ T317] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 100.331188][ T1644] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.348754][ T317] usb 6-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 100.383299][ T1652] EXT4-fs error (device loop2) in ext4_do_update_inode:5303: error 27 [ 100.392124][ T1652] EXT4-fs error (device loop2): ext4_dirty_inode:6110: inode #3: comm syz.2.348: mark_inode_dirty error [ 100.405556][ T1652] EXT4-fs error (device loop2) in ext4_do_update_inode:5303: error 27 [ 100.414461][ T1652] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #3: comm syz.2.348: mark_inode_dirty error [ 100.427229][ T1652] EXT4-fs error (device loop2): ext4_acquire_dquot:6219: comm syz.2.348: Failed to acquire dquot type 0 [ 100.443132][ T1652] EXT4-fs (loop2): 1 orphan inode deleted [ 100.448809][ T1652] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 100.458114][ T1652] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.547076][ T317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.622111][ T317] usb 6-1: config 0 descriptor?? [ 100.717739][ T1656] binfmt_misc: register: failed to install interpreter file ./file0 [ 101.195968][ T1663] syz.4.352[1663] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.196014][ T1663] syz.4.352[1663] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.283261][ T1667] syz.2.351[1667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.294486][ T1667] syz.2.351[1667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.315090][ T317] usbhid 6-1:0.0: can't add hid device: -71 [ 101.335913][ T1669] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 101.335913][ T1669] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 101.335913][ T1669] [ 101.357356][ T317] usbhid: probe of 6-1:0.0 failed with error -71 [ 101.358421][ T1669] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.369025][ T317] usb 6-1: USB disconnect, device number 7 [ 101.391960][ T1669] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,noinit_itable,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,noacl,user_xattr,quota,dioread_nolock,,errors=continue [ 101.455679][ T1674] EXT4-fs (loop2): Ignoring removed orlov option [ 101.535798][ T1674] EXT4-fs (loop2): orphan cleanup on readonly fs [ 101.542801][ T1674] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.355: bg 0: block 248: padding at end of block bitmap is not set [ 101.557440][ T1674] EXT4-fs error (device loop2): ext4_acquire_dquot:6219: comm syz.2.355: Failed to acquire dquot type 1 [ 101.569063][ T1674] EXT4-fs (loop2): 1 truncate cleaned up [ 101.574835][ T1674] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,abort,nombcache,stripe=0x0000000000000010,,errors=continue [ 101.813517][ T24] kauditd_printk_skb: 42 callbacks suppressed [ 101.813541][ T24] audit: type=1400 audit(1743803148.230:721): avc: denied { bind } for pid=1682 comm="syz.1.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.882076][ T1674] EXT4-fs (loop2): Ignoring removed orlov option [ 101.891943][ T1674] EXT4-fs error (device loop2): ext4_remount:5878: Abort forced by user [ 101.978957][ T1691] input: syz1 as /devices/virtual/input/input12 [ 101.988137][ T24] audit: type=1400 audit(1743803148.411:722): avc: denied { ioctl } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=596 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.408137][ T1706] syz.4.365[1706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.408198][ T1706] syz.4.365[1706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.453948][ T24] audit: type=1107 audit(1743803148.871:723): pid=1705 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='¯' [ 102.492322][ T24] audit: type=1326 audit(1743803148.901:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1705 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e77dd169 code=0x7ffc0000 [ 102.518011][ T24] audit: type=1326 audit(1743803148.901:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1705 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e77dd169 code=0x7ffc0000 [ 102.545809][ T1699] SELinux: Context system_u:object_r:dhcpd_exec_t:s0 is not valid (left unmapped). [ 102.555642][ T24] audit: type=1326 audit(1743803148.901:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1705 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64e77dd169 code=0x7ffc0000 [ 102.587209][ T24] audit: type=1326 audit(1743803148.901:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1705 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e77dd169 code=0x7ffc0000 [ 102.635529][ T1708] EXT4-fs (loop5): Ignoring removed nobh option [ 102.650171][ T24] audit: type=1326 audit(1743803148.901:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1705 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e77dd169 code=0x7ffc0000 [ 102.674115][ T24] audit: type=1326 audit(1743803148.901:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1705 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64e77dd169 code=0x7ffc0000 [ 102.700588][ T1708] EXT4-fs error (device loop5) in ext4_do_update_inode:5303: error 27 [ 102.708957][ T1708] EXT4-fs (loop5): Remounting filesystem read-only [ 102.715370][ T1708] EXT4-fs error (device loop5): ext4_dirty_inode:6110: inode #3: comm syz.5.364: mark_inode_dirty error [ 102.726508][ T24] audit: type=1326 audit(1743803148.901:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1705 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e77dd169 code=0x7ffc0000 [ 102.750107][ T1708] EXT4-fs error (device loop5) in ext4_do_update_inode:5303: error 27 [ 102.804459][ T317] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 102.814131][ T1708] EXT4-fs error (device loop5): __ext4_ext_dirty:182: inode #3: comm syz.5.364: mark_inode_dirty error [ 102.826001][ T1708] EXT4-fs error (device loop5): ext4_acquire_dquot:6219: comm syz.5.364: Failed to acquire dquot type 0 [ 102.837572][ T1708] EXT4-fs (loop5): 1 truncate cleaned up [ 102.843042][ T1708] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nobh, [ 102.852479][ T1708] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.165084][ T317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.186111][ T317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.223331][ T317] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 103.252185][ T317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.277578][ T317] usb 5-1: config 0 descriptor?? [ 103.357861][ T1724] EXT4-fs error (device loop1): ext4_orphan_get:1395: inode #15: comm syz.1.370: casefold flag without casefold feature [ 103.372209][ T1724] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.370: missing EA_INODE flag [ 103.384039][ T1724] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.370: error while reading EA inode 12 err=-117 [ 103.396724][ T1724] EXT4-fs (loop1): 1 orphan inode deleted [ 103.402318][ T1724] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 103.497072][ T1728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 103.574116][ T1745] syz.3.376[1745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.574177][ T1745] syz.3.376[1745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.959438][ T317] samsung 0003:0419:0600.0003: unknown main item tag 0x0 [ 103.977467][ T317] samsung 0003:0419:0600.0003: unknown main item tag 0x0 [ 103.984427][ T317] samsung 0003:0419:0600.0003: unknown main item tag 0x0 [ 103.991739][ T317] samsung 0003:0419:0600.0003: unknown main item tag 0x0 [ 103.998882][ T317] samsung 0003:0419:0600.0003: unknown main item tag 0x0 [ 104.006763][ T317] samsung 0003:0419:0600.0003: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.4-1/input0 [ 104.127161][ T1754] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,nouid32,,errors=continue [ 104.145084][ T1754] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.991096][ T1760] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:0:5efe:253.127.26.154 [ 105.407939][ T1770] sch_fq: defrate 0 ignored. [ 105.520115][ T330] usb 5-1: USB disconnect, device number 9 [ 105.836482][ T1777] device lo entered promiscuous mode [ 106.101851][ T1784] tipc: Cannot configure node identity twice [ 106.110837][ T1784] device ip6tnl0 entered promiscuous mode [ 106.143542][ T1784] device vlan2 entered promiscuous mode [ 106.165776][ T1784] device ip6tnl0 left promiscuous mode [ 106.214265][ T1767] device lo left promiscuous mode [ 107.039740][ T20] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 107.246064][ T1817] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.639283][ T448] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 107.795971][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 107.830714][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.049846][ T20] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 108.066285][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.074830][ T20] usb 6-1: config 0 descriptor?? [ 108.125508][ T20] hub 6-1:0.0: USB hub found [ 108.255101][ T448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.415950][ T448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.425728][ T448] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 108.446118][ T448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.458641][ T448] usb 5-1: config 0 descriptor?? [ 108.496907][ T448] hub 5-1:0.0: USB hub found [ 108.595136][ T20] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 108.776985][ T1824] futex_wake_op: syz.4.401 tries to shift op by -1; fix this program [ 108.835495][ T448] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 108.864983][ T24] kauditd_printk_skb: 35 callbacks suppressed [ 108.864998][ T24] audit: type=1326 audit(1743803155.271:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1814 comm="syz.5.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 108.897380][ T24] audit: type=1326 audit(1743803155.271:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1814 comm="syz.5.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 108.921227][ T24] audit: type=1326 audit(1743803155.271:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1814 comm="syz.5.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 108.944628][ T24] audit: type=1326 audit(1743803155.281:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1814 comm="syz.5.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 108.967840][ T24] audit: type=1326 audit(1743803155.281:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1814 comm="syz.5.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 108.990989][ T24] audit: type=1326 audit(1743803155.281:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1814 comm="syz.5.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 109.017480][ T24] audit: type=1326 audit(1743803155.281:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1814 comm="syz.5.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 109.041997][ T24] audit: type=1326 audit(1743803155.281:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1814 comm="syz.5.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 109.078075][ T1860] binder: BINDER_SET_CONTEXT_MGR already set [ 109.083939][ T1860] binder: 1855:1860 ioctl 4018620d 200000000040 returned -16 [ 109.153807][ T24] audit: type=1326 audit(1743803155.281:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1814 comm="syz.5.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa56953a359 code=0x7ffc0000 [ 109.206299][ T24] audit: type=1326 audit(1743803155.281:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1814 comm="syz.5.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 109.275702][ T1862] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.287864][ T1862] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 109.301148][ T1862] EXT4-fs (loop3): 1 truncate cleaned up [ 109.306833][ T1862] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota, [ 109.440884][ T298] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /70/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 109.465158][ T298] EXT4-fs (loop3): Remounting filesystem read-only [ 109.999525][ T1874] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.006670][ T1874] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.014055][ T1874] device bridge_slave_0 entered promiscuous mode [ 110.020598][ T20] usbhid 6-1:0.0: can't add hid device: -71 [ 110.026627][ T20] usbhid: probe of 6-1:0.0 failed with error -71 [ 110.027145][ T1874] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.040472][ T1874] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.041145][ T1876] EXT4-fs (loop1): mounted filesystem without journal. Opts: commit=0x0000000000000005,barrier=0x0000000000000003,minixdf,,errors=continue [ 110.048071][ T1874] device bridge_slave_1 entered promiscuous mode [ 110.061877][ T1876] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.067976][ T20] usb 6-1: USB disconnect, device number 8 [ 110.148162][ T1874] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.155091][ T1874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.162134][ T1874] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.168958][ T1874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.227815][ T1874] device veth0_vlan entered promiscuous mode [ 110.252709][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.266072][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.288020][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.297615][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.314133][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.322847][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.331405][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.339298][ T448] usbhid 5-1:0.0: can't add hid device: -71 [ 110.346056][ T448] usbhid: probe of 5-1:0.0 failed with error -71 [ 110.355536][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.363204][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.371123][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.381328][ T1874] device veth1_macvtap entered promiscuous mode [ 110.407728][ T1885] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,journal_dev=0x0000000000000005,data_err=abort,,errors=continue [ 110.421663][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.435505][ T1885] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.455835][ T448] usb 5-1: USB disconnect, device number 10 [ 110.466270][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.510933][ T1903] netlink: 76 bytes leftover after parsing attributes in process `syz.5.423'. [ 111.652284][ T979] device bridge_slave_1 left promiscuous mode [ 111.665679][ T1915] EXT4-fs (loop2): Ignoring removed orlov option [ 111.687060][ T979] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.711689][ T1919] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:163: inode #12: comm syz.6.427: inline data xattr refers to an external xattr inode [ 111.727069][ T1915] EXT4-fs (loop2): orphan cleanup on readonly fs [ 111.735673][ T1915] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.426: bg 0: block 248: padding at end of block bitmap is not set [ 111.750145][ T979] device bridge_slave_0 left promiscuous mode [ 111.754820][ T1919] EXT4-fs error (device loop6): ext4_orphan_get:1400: comm syz.6.427: couldn't read orphan inode 12 (err -117) [ 111.758314][ T979] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.775447][ T1915] EXT4-fs error (device loop2): ext4_acquire_dquot:6219: comm syz.2.426: Failed to acquire dquot type 1 [ 111.787299][ T1919] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodiscard,data_err=ignore,norecovery,resuid=0x0000000000000000,prjquota,usrjquota=,debug_want_extra_isize=0x0000000000000008,resgid=0x0000000000000000,grpjquota=,,errors=continue [ 111.813095][ T1915] EXT4-fs (loop2): 1 truncate cleaned up [ 111.820992][ T1930] xt_hashlimit: size too large, truncated to 1048576 [ 111.836101][ T979] device veth1_macvtap left promiscuous mode [ 111.854980][ T979] device veth0_vlan left promiscuous mode [ 111.886183][ T1919] EXT4-fs error (device loop6): ext4_add_entry:2442: inode #2: comm syz.6.427: Directory hole found for htree leaf block 0 [ 111.899686][ T1915] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,abort,nombcache,stripe=0x0000000000000010,,errors=continue [ 111.926769][ T1915] EXT4-fs (loop2): Ignoring removed orlov option [ 111.935038][ T1915] EXT4-fs error (device loop2): ext4_remount:5878: Abort forced by user [ 112.778048][ T1920] bridge: RTM_NEWNEIGH with invalid ether address [ 112.886044][ T1933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'. [ 112.900842][ T1945] netlink: 48 bytes leftover after parsing attributes in process `syz.5.433'. [ 114.286947][ T1973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 114.300550][ T1950] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 114.320807][ T1950] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.331803][ T24] kauditd_printk_skb: 62 callbacks suppressed [ 114.331817][ T24] audit: type=1326 audit(1743803160.751:834): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.5.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa56959cad0 code=0x7ffc0000 [ 114.362648][ T24] audit: type=1326 audit(1743803160.781:835): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.5.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fa56959ceb7 code=0x7ffc0000 [ 114.386289][ T24] audit: type=1326 audit(1743803160.781:836): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.5.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa56959cad0 code=0x7ffc0000 [ 114.410762][ T24] audit: type=1326 audit(1743803160.781:837): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.5.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa56959dd6b code=0x7ffc0000 [ 114.415856][ T1976] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 114.436472][ T24] audit: type=1326 audit(1743803160.781:838): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.5.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa56959cdca code=0x7ffc0000 [ 114.466894][ T24] audit: type=1326 audit(1743803160.781:839): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.5.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 114.491176][ T24] audit: type=1326 audit(1743803160.781:840): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.5.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 114.514950][ T24] audit: type=1326 audit(1743803160.831:841): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.5.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 114.538967][ T24] audit: type=1326 audit(1743803160.831:842): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.5.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 114.563022][ T24] audit: type=1326 audit(1743803160.831:843): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.5.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56959e169 code=0x7ffc0000 [ 114.735875][ T1981] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 114.745507][ T1981] EXT4-fs (loop2): mount failed [ 114.905565][ T1994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.446'. [ 114.926510][ T1994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.446'. [ 115.010330][ T1997] netem: change failed [ 115.185896][ T2001] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 115.193565][ T2001] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 115.204573][ T2001] F2FS-fs (loop5): Found nat_bits in checkpoint [ 115.235236][ T2001] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 115.246856][ T2001] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 115.253766][ T2001] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 115.607780][ T2019] EXT4-fs (loop2): orphan cleanup on readonly fs [ 115.614680][ T2019] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.452: bg 0: block 248: padding at end of block bitmap is not set [ 115.629210][ T2019] EXT4-fs error (device loop2): ext4_acquire_dquot:6219: comm syz.2.452: Failed to acquire dquot type 1 [ 115.641004][ T2019] EXT4-fs (loop2): 1 truncate cleaned up [ 115.646921][ T2019] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 115.674964][ T599] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 115.708189][ T2013] F2FS-fs (loop6): Unrecognized mount option "errors=continue" or missing value [ 116.125589][ T599] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.137160][ T599] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 116.285047][ T599] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 116.294052][ T599] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 116.302211][ T599] usb 6-1: SerialNumber: syz [ 116.355846][ T599] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 116.413685][ T599] usb-storage 6-1:1.0: USB Mass Storage device detected [ 116.445032][ T599] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 116.453018][ T599] scsi host1: usb-storage 6-1:1.0 [ 116.857418][ T317] usb 6-1: USB disconnect, device number 9 [ 117.132361][ T2060] x_tables: duplicate underflow at hook 1 [ 118.679604][ T2084] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2084 comm=syz.1.469 [ 118.706903][ T2084] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2084 comm=syz.1.469 [ 118.761701][ T2074] kvm: emulating exchange as write [ 118.841308][ T2086] EXT4-fs (loop2): Mount option "journal_dev=0x0000000000000008" incompatible with ext2 [ 119.979295][ T24] kauditd_printk_skb: 22 callbacks suppressed [ 119.979311][ T24] audit: type=1326 audit(1743803166.401:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2110 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0845e169 code=0x7ffc0000 [ 120.017777][ T2079] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 120.035570][ T2079] EXT4-fs (loop5): orphan cleanup on readonly fs [ 120.052319][ T2079] EXT4-fs error (device loop5): ext4_orphan_get:1395: inode #16: comm syz.5.465: casefold flag without casefold feature [ 120.055548][ T24] audit: type=1326 audit(1743803166.441:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2110 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0845e169 code=0x7ffc0000 [ 120.075293][ T2079] EXT4-fs error (device loop5): ext4_orphan_get:1395: inode #16: comm syz.5.465: unexpected EA_INODE flag [ 120.099077][ T2079] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.465: couldn't read orphan inode 16 (err -117) [ 120.111002][ T2079] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 120.122529][ T24] audit: type=1326 audit(1743803166.441:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2110 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd0845e169 code=0x7ffc0000 [ 120.145717][ T24] audit: type=1326 audit(1743803166.441:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2110 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0845e169 code=0x7ffc0000 [ 120.169198][ T24] audit: type=1326 audit(1743803166.441:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2110 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0845e169 code=0x7ffc0000 [ 120.196014][ T24] audit: type=1326 audit(1743803166.441:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2110 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd0845e169 code=0x7ffc0000 [ 120.219666][ T24] audit: type=1326 audit(1743803166.441:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2110 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0845e169 code=0x7ffc0000 [ 120.260216][ T24] audit: type=1326 audit(1743803166.441:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2110 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0845e169 code=0x7ffc0000 [ 120.290300][ T24] audit: type=1326 audit(1743803166.441:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2110 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd0845e169 code=0x7ffc0000 [ 120.322099][ T2112] input: syz0 as /devices/virtual/input/input13 [ 120.328342][ T24] audit: type=1326 audit(1743803166.441:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2110 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0845e169 code=0x7ffc0000 [ 120.424308][ T2128] overlayfs: failed to resolve './file1': -2 [ 120.430906][ T2129] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 120.445229][ T2129] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 120.454809][ T2129] EXT4-fs error (device loop1): ext4_get_journal_inode:5243: comm syz.1.481: inode #1: comm syz.1.481: iget: illegal inode # [ 120.468345][ T2129] EXT4-fs (loop1): no journal found [ 120.487457][ T2134] x_tables: duplicate underflow at hook 1 [ 120.701059][ T2156] netlink: 20 bytes leftover after parsing attributes in process `syz.1.489'. [ 120.711683][ T2156] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 120.723217][ T2148] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 120.732257][ T2148] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.757443][ T2156] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.824768][ T2161] SELinux: failed to load policy [ 120.990632][ T2169] syz.6.492[2169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.990934][ T2169] syz.6.492[2169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.266777][ T2172] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,,errors=continue [ 121.294298][ T2172] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.307164][ T2172] netlink: 71 bytes leftover after parsing attributes in process `syz.6.493'. [ 121.321461][ T2172] EXT4-fs (loop6): shut down requested (1) [ 121.395559][ T297] ------------[ cut here ]------------ [ 121.401068][ T297] WARNING: CPU: 1 PID: 297 at fs/inode.c:304 drop_nlink+0xc1/0x110 [ 121.411659][ T297] Modules linked in: [ 121.416907][ T2187] EXT4-fs (loop1): orphan cleanup on readonly fs [ 121.423223][ T297] CPU: 1 PID: 297 Comm: syz-executor Not tainted 5.10.234-syzkaller-00033-g094fc3778d6b #0 [ 121.434483][ T2187] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.498: bg 0: block 248: padding at end of block bitmap is not set [ 121.443062][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.458956][ T297] RIP: 0010:drop_nlink+0xc1/0x110 [ 121.463867][ T297] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 67 cb f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 0f 2a b3 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 121.483462][ T297] RSP: 0018:ffffc90000b67cc0 EFLAGS: 00010293 [ 121.489685][ T297] RAX: ffffffff81b79541 RBX: 0000000000000000 RCX: ffff88811dedcf00 [ 121.497712][ T297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.505610][ T297] RBP: ffffc90000b67ce8 R08: ffffffff81b794c4 R09: 0000000000000003 [ 121.518274][ T297] R10: fffff5200016cf88 R11: dffffc0000000001 R12: dffffc0000000000 [ 121.526623][ T297] R13: 1ffff11022db2df9 R14: ffff888116d96f80 R15: ffff888116d96fc8 [ 121.534508][ T297] FS: 000055557b93e500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 121.535564][ T2187] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz.1.498: Failed to acquire dquot type 1 [ 121.544501][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.562641][ T2187] EXT4-fs (loop1): 1 truncate cleaned up [ 121.568441][ T297] CR2: 0000555570a9a4a8 CR3: 0000000124e0e000 CR4: 00000000003506b0 [ 121.576758][ T297] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 121.584561][ T297] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 121.592876][ T297] Call Trace: [ 121.596356][ T297] ? show_regs+0x58/0x60 [ 121.600849][ T297] ? __warn+0x160/0x2f0 [ 121.604841][ T297] ? drop_nlink+0xc1/0x110 [ 121.610865][ T297] ? report_bug+0x3d9/0x5b0 [ 121.611578][ T2187] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 121.615747][ T297] ? drop_nlink+0xc1/0x110 [ 121.628363][ T297] ? handle_bug+0x41/0x70 [ 121.632745][ T297] ? exc_invalid_op+0x1b/0x50 [ 121.637605][ T297] ? asm_exc_invalid_op+0x12/0x20 [ 121.642620][ T297] ? drop_nlink+0x44/0x110 [ 121.647126][ T297] ? drop_nlink+0xc1/0x110 [ 121.651786][ T297] ? drop_nlink+0xc1/0x110 [ 121.656805][ T297] shmem_rmdir+0x59/0x90 [ 121.660962][ T297] vfs_rmdir+0x2b7/0x3f0 [ 121.665108][ T297] incfs_kill_sb+0x108/0x220 [ 121.669639][ T297] deactivate_locked_super+0xad/0x110 [ 121.675096][ T297] deactivate_super+0xbe/0xf0 [ 121.679963][ T297] cleanup_mnt+0x45c/0x510 [ 121.685121][ T297] __cleanup_mnt+0x19/0x20 [ 121.689587][ T297] task_work_run+0x129/0x190 [ 121.694406][ T2197] FAULT_INJECTION: forcing a failure. [ 121.694406][ T2197] name failslab, interval 1, probability 0, space 0, times 0 [ 121.707067][ T297] exit_to_user_mode_loop+0xbf/0xd0 [ 121.721337][ T297] syscall_exit_to_user_mode+0xa2/0x1a0 [ 121.727789][ T297] do_syscall_64+0x40/0x70 [ 121.732104][ T297] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 121.737998][ T2197] CPU: 0 PID: 2197 Comm: syz.4.502 Not tainted 5.10.234-syzkaller-00033-g094fc3778d6b #0 [ 121.747626][ T2197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.757504][ T2197] Call Trace: [ 121.760657][ T2197] dump_stack_lvl+0x1e2/0x24b [ 121.761610][ T2187] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 121.765147][ T2197] ? bfq_pos_tree_add_move+0x43b/0x43b [ 121.765162][ T2197] dump_stack+0x15/0x17 [ 121.765182][ T2197] should_fail+0x3c6/0x510 [ 121.777713][ T297] RIP: 0033:0x7f2e5af0a497 [ 121.779553][ T2197] ? dst_alloc+0x17d/0x590 [ 121.779575][ T2197] __should_failslab+0xa4/0xe0 [ 121.783709][ T297] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 121.787878][ T2197] should_failslab+0x9/0x20 [ 121.787891][ T2197] kmem_cache_alloc+0x3d/0x2e0 [ 121.787903][ T2197] dst_alloc+0x17d/0x590 [ 121.787917][ T2197] ip_route_output_key_hash_rcu+0x129a/0x20b0 [ 121.787937][ T2197] ip_route_output_flow+0x144/0x310 [ 121.792769][ T297] RSP: 002b:00007fff8cba74c8 EFLAGS: 00000246 [ 121.796388][ T2197] ? ipv4_sk_update_pmtu+0x1e40/0x1e40 [ 121.796400][ T2197] ? ip_cmsg_send+0x9ed/0xaa0 [ 121.796418][ T2197] udp_sendmsg+0x179c/0x2a80 [ 121.796434][ T2197] ? ip_do_fragment+0x2310/0x2310 [ 121.796446][ T2197] ? udp_cmsg_send+0x3a0/0x3a0 [ 121.796460][ T2197] ? ip4_datagram_release_cb+0x899/0xdf0 [ 121.796477][ T2197] ? __local_bh_enable_ip+0x53/0x80 [ 121.796497][ T2197] ? _raw_spin_unlock_bh+0x51/0x60 [ 121.801854][ T297] ORIG_RAX: 00000000000000a6 [ 121.820450][ T2197] ? release_sock+0x163/0x1b0 [ 121.820464][ T2197] ? inet_send_prepare+0x1b8/0x4a0 [ 121.820476][ T2197] inet_sendmsg+0xa1/0xc0 [ 121.820487][ T2197] ? inet_send_prepare+0x4a0/0x4a0 [ 121.820498][ T2197] ____sys_sendmsg+0x59e/0x8f0 [ 121.820520][ T2197] ? __sys_sendmsg_sock+0x40/0x40 [ 121.825964][ T2204] EXT4-fs error (device loop1): ext4_lookup:1834: inode #2: comm syz.1.498: deleted inode referenced: 12 [ 121.829382][ T2197] ? kmem_cache_free+0xa9/0x1e0 [ 121.836292][ T297] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2e5af0a497 [ 121.839358][ T2197] ? import_iovec+0xe5/0x120 [ 121.839380][ T2197] ___sys_sendmsg+0x252/0x2e0 [ 121.845978][ T297] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8cba7580 [ 121.850292][ T2197] ? __sys_sendmsg+0x280/0x280 [ 121.850317][ T2197] ? fsnotify_set_children_dentry_flags+0x210/0x210 [ 121.856264][ T297] RBP: 00007fff8cba7580 R08: 0000000000000000 R09: 0000000000000000 [ 121.860097][ T2197] ? proc_fail_nth_write+0x20b/0x290 [ 121.860120][ T2197] ? __fdget+0x1bc/0x240 [ 121.864681][ T297] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff8cba8610 [ 121.869493][ T2197] __sys_sendmmsg+0x2c3/0x510 [ 121.869509][ T2197] ? __ia32_sys_sendmsg+0x90/0x90 [ 121.869521][ T2197] ? mutex_lock+0xa5/0x110 [ 121.869537][ T2197] ? __kasan_check_write+0x14/0x20 [ 121.869558][ T2197] ? __ia32_sys_read+0x90/0x90 [ 121.874999][ T297] R13: 00007f2e5af8a08c R14: 000000000001da15 R15: 00007fff8cba8650 [ 121.879547][ T2197] __x64_sys_sendmmsg+0xa0/0xb0 [ 121.879569][ T2197] do_syscall_64+0x34/0x70 [ 121.884668][ T297] ---[ end trace ca7d1d7d44a84a18 ]--- [ 121.889517][ T2197] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 121.889527][ T2197] RIP: 0033:0x7f64e77dd169 [ 121.889539][ T2197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.889554][ T2197] RSP: 002b:00007f64e5e47038 EFLAGS: 00000246 [ 121.894855][ T297] ================================================================== [ 121.898553][ T2197] ORIG_RAX: 0000000000000133 [ 121.903517][ T297] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 121.907661][ T2197] RAX: ffffffffffffffda RBX: 00007f64e79f5fa0 RCX: 00007f64e77dd169 [ 121.912617][ T297] Write of size 4 at addr 0000000000000170 by task syz-executor/297 [ 121.917207][ T2197] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000006 [ 121.922067][ T297] [ 121.933112][ T2197] RBP: 00007f64e5e47090 R08: 0000000000000000 R09: 0000000000000000 [ 122.131349][ T2197] R10: 0000000004008804 R11: 0000000000000246 R12: 0000000000000001 [ 122.139508][ T2197] R13: 0000000000000000 R14: 00007f64e79f5fa0 R15: 00007ffc06782d28 [ 122.147603][ T297] CPU: 1 PID: 297 Comm: syz-executor Tainted: G W 5.10.234-syzkaller-00033-g094fc3778d6b #0 [ 122.158785][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.168671][ T297] Call Trace: [ 122.171809][ T297] dump_stack_lvl+0x1e2/0x24b [ 122.176311][ T297] ? panic+0x812/0x812 [ 122.180218][ T297] ? bfq_pos_tree_add_move+0x43b/0x43b [ 122.185520][ T297] ? __kasan_check_write+0x14/0x20 [ 122.190653][ T297] ? _raw_spin_lock+0xa4/0x1b0 [ 122.195254][ T297] ? _raw_spin_trylock_bh+0x190/0x190 [ 122.200559][ T297] kasan_report+0x167/0x1c0 [ 122.204892][ T297] ? ihold+0x20/0x60 [ 122.208658][ T297] ? ihold+0x20/0x60 [ 122.212369][ T297] kasan_check_range+0x293/0x2a0 [ 122.217130][ T297] __kasan_check_write+0x14/0x20 [ 122.221899][ T297] ihold+0x20/0x60 [ 122.225466][ T297] vfs_rmdir+0x200/0x3f0 [ 122.229539][ T297] incfs_kill_sb+0x108/0x220 [ 122.233974][ T297] deactivate_locked_super+0xad/0x110 [ 122.239401][ T297] deactivate_super+0xbe/0xf0 [ 122.243913][ T297] cleanup_mnt+0x45c/0x510 [ 122.248163][ T297] __cleanup_mnt+0x19/0x20 [ 122.252423][ T297] task_work_run+0x129/0x190 [ 122.256843][ T297] exit_to_user_mode_loop+0xbf/0xd0 [ 122.261878][ T297] syscall_exit_to_user_mode+0xa2/0x1a0 [ 122.267345][ T297] do_syscall_64+0x40/0x70 [ 122.271707][ T297] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 122.277420][ T297] RIP: 0033:0x7f2e5af0a497 [ 122.281676][ T297] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 122.301458][ T297] RSP: 002b:00007fff8cba74c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 122.309706][ T297] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2e5af0a497 [ 122.317787][ T297] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8cba7580 [ 122.325676][ T297] RBP: 00007fff8cba7580 R08: 0000000000000000 R09: 0000000000000000 [ 122.333484][ T297] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff8cba8610 [ 122.341295][ T297] R13: 00007f2e5af8a08c R14: 000000000001da15 R15: 00007fff8cba8650 [ 122.349109][ T297] ================================================================== [ 122.357000][ T297] Disabling lock debugging due to kernel taint [ 122.412473][ T297] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 122.416028][ T2187] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz.1.498: Failed to acquire dquot type 1 [ 122.420105][ T297] #PF: supervisor write access in kernel mode [ 122.420113][ T297] #PF: error_code(0x0002) - not-present page [ 122.420128][ T297] PGD 126e11067 [ 122.433764][ T2187] EXT4-fs warning (device loop1): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 122.437037][ T297] P4D 126e11067 PUD 0 [ 122.437056][ T297] Oops: 0002 [#1] PREEMPT SMP KASAN [ 122.437079][ T297] CPU: 0 PID: 297 Comm: syz-executor Tainted: G B W 5.10.234-syzkaller-00033-g094fc3778d6b #0 [ 122.480692][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.490587][ T297] RIP: 0010:ihold+0x25/0x60 [ 122.494923][ T297] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 21 22 b3 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 50 c3 f0 ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 a4 25 b3 [ 122.514381][ T297] RSP: 0000:ffffc90000b67d00 EFLAGS: 00010246 [ 122.520275][ T297] RAX: ffff88811dedcf00 RBX: 0000000000000001 RCX: ffff88811dedcf00 [ 122.528071][ T297] RDX: 0000000000000000 RSI: 0000000000000286 RDI: 00000000ffffffff [ 122.535908][ T297] RBP: ffffc90000b67d10 R08: ffffffff813e2b8b R09: 0000000000000003 [ 122.543694][ T297] R10: fffffbfff0e11248 R11: dffffc0000000001 R12: dffffc0000000000 [ 122.551535][ T297] R13: ffff8881330adaa0 R14: 0000000000000000 R15: 0000000000000000 [ 122.559330][ T297] FS: 000055557b93e500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 122.568265][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.574811][ T297] CR2: 0000000000000170 CR3: 0000000124e0e000 CR4: 00000000003506b0 [ 122.582583][ T297] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 122.590389][ T297] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 122.598202][ T297] Call Trace: [ 122.601347][ T297] ? __die_body+0x62/0xb0 [ 122.605496][ T297] ? __die+0x7e/0x90 [ 122.609226][ T297] ? no_context+0x9f9/0xd20 [ 122.613569][ T297] ? is_prefetch+0x5c0/0x5c0 [ 122.617996][ T297] ? preempt_schedule+0xd9/0xe0 [ 122.622682][ T297] ? __kasan_check_read+0x11/0x20 [ 122.627540][ T297] ? preempt_schedule_common+0xbe/0xf0 [ 122.632843][ T297] ? preempt_schedule+0xd9/0xe0 [ 122.637613][ T297] ? schedule_preempt_disabled+0x20/0x20 [ 122.643075][ T297] ? sysvec_apic_timer_interrupt+0xcb/0xe0 [ 122.648810][ T297] ? __bad_area_nosemaphore+0xc4/0x430 [ 122.654151][ T297] ? bad_area_nosemaphore+0x2d/0x40 [ 122.659145][ T297] ? exc_page_fault+0x3df/0x5b0 [ 122.663822][ T297] ? asm_exc_page_fault+0x1e/0x30 [ 122.668682][ T297] ? check_panic_on_warn+0x5b/0xb0 [ 122.673631][ T297] ? ihold+0x25/0x60 [ 122.677370][ T297] vfs_rmdir+0x200/0x3f0 [ 122.681526][ T297] incfs_kill_sb+0x108/0x220 [ 122.685952][ T297] deactivate_locked_super+0xad/0x110 [ 122.691336][ T297] deactivate_super+0xbe/0xf0 [ 122.696021][ T297] cleanup_mnt+0x45c/0x510 [ 122.700274][ T297] __cleanup_mnt+0x19/0x20 [ 122.704499][ T297] task_work_run+0x129/0x190 [ 122.708944][ T297] exit_to_user_mode_loop+0xbf/0xd0 [ 122.713963][ T297] syscall_exit_to_user_mode+0xa2/0x1a0 [ 122.719339][ T297] do_syscall_64+0x40/0x70 [ 122.723593][ T297] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 122.729341][ T297] RIP: 0033:0x7f2e5af0a497 [ 122.733594][ T297] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 122.753103][ T297] RSP: 002b:00007fff8cba74c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 122.761516][ T297] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2e5af0a497 [ 122.769327][ T297] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8cba7580 [ 122.777253][ T297] RBP: 00007fff8cba7580 R08: 0000000000000000 R09: 0000000000000000 [ 122.785164][ T297] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff8cba8610 [ 122.793148][ T297] R13: 00007f2e5af8a08c R14: 000000000001da15 R15: 00007fff8cba8650 [ 122.800967][ T297] Modules linked in: [ 122.804711][ T297] CR2: 0000000000000170 [ 122.808684][ T297] ---[ end trace ca7d1d7d44a84a19 ]--- [ 122.813977][ T297] RIP: 0010:ihold+0x25/0x60 [ 122.818344][ T297] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 21 22 b3 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 50 c3 f0 ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 a4 25 b3 [ 122.837855][ T297] RSP: 0000:ffffc90000b67d00 EFLAGS: 00010246 [ 122.843907][ T297] RAX: ffff88811dedcf00 RBX: 0000000000000001 RCX: ffff88811dedcf00 [ 122.851702][ T297] RDX: 0000000000000000 RSI: 0000000000000286 RDI: 00000000ffffffff [ 122.859524][ T297] RBP: ffffc90000b67d10 R08: ffffffff813e2b8b R09: 0000000000000003 [ 122.867330][ T297] R10: fffffbfff0e11248 R11: dffffc0000000001 R12: dffffc0000000000 [ 122.875224][ T297] R13: ffff8881330adaa0 R14: 0000000000000000 R15: 0000000000000000 [ 122.883133][ T297] FS: 000055557b93e500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 122.891901][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.898313][ T297] CR2: 0000000000000170 CR3: 0000000124e0e000 CR4: 00000000003506b0 [ 122.906300][ T297] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 122.914106][ T297] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 122.921942][ T297] Kernel panic - not syncing: Fatal exception [ 122.928075][ T297] Kernel Offset: disabled [ 122.932319][ T297] Rebooting in 86400 seconds..