last executing test programs: 5.438329023s ago: executing program 2 (id=51): read$FUSE(0xffffffffffffffff, &(0x7f0000000cc0)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000340)={[{@data_journal}, {@test_dummy_encryption_v1}, {@noquota}, {@errors_remount}, {@journal_async_commit}, {@barrier}, {@noquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x83}}]}, 0x1, 0x53d, &(0x7f0000002d00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) unshare(0x20400) timerfd_gettime(r0, 0x0) unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000480, &(0x7f0000000380), 0x45, 0x7a5, &(0x7f0000000f80)="$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") r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_regs={0x12}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) listxattr(0x0, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x4}) 4.005189441s ago: executing program 1 (id=59): read$FUSE(0xffffffffffffffff, &(0x7f0000000cc0)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000340)={[{@data_journal}, {@test_dummy_encryption_v1}, {@noquota}, {@errors_remount}, {@journal_async_commit}, {@barrier}, {@noquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x83}}]}, 0x1, 0x53d, &(0x7f0000002d00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) unshare(0x20400) timerfd_gettime(r0, 0x0) unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000480, &(0x7f0000000380), 0x45, 0x7a5, &(0x7f0000000f80)="$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") r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_regs={0x12}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) listxattr(0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x4}) 3.804188318s ago: executing program 2 (id=61): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0xa75) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) sendfile(r2, r0, 0x0, 0xffffffff054) 3.682131086s ago: executing program 2 (id=63): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGVERSION(r2, 0x80044801, &(0x7f0000000c80)) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @none, 0x8001, 0x2}, 0x6) r3 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f8035", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) syz_usb_connect(0x0, 0x5b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109024900020000000009047f00022513bf000a240100000002010205240400001d050000000000000007250100000000072501000000000905000000000000000904", @ANYRESHEX], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x7, 0x8, 0xe, 0x0, {{0x11, 0x4, 0x3, 0x0, 0x44, 0x66, 0x0, 0xd, 0x2f, 0x0, @remote, @loopback, {[@rr={0x7, 0x7, 0xaf, [@dev={0xac, 0x14, 0x14, 0xf}]}, @timestamp={0x44, 0x28, 0x39, 0x0, 0x0, [0x7, 0x8, 0x8, 0xfff, 0x9, 0x10000, 0x2, 0x80, 0xfff]}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}]]}}}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0xe8, 0x0, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x10, 0x9, 0x3}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400061}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd0, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x884) 3.127243887s ago: executing program 1 (id=64): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r3, 0x5406, &(0x7f00000001c0)={0xffff, 0x0, 0x0, 0x38f, 0x0, "a0590469a322d928"}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001540)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r5, 0xc018480d, &(0x7f0000000040)={0x1, 0x200, 0x496d, 0x3, 0x5, 0x8}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x5f}, [@ldst={0x0, 0x0, 0xe001}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2f) syz_mount_image$fuse(&(0x7f0000002040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)=ANY=[@ANYBLOB="0203f3031600000000000000000000000200090040000000e900000000000000030006000000000002000000000000000000000000000000020001000000000000fffb0200000020030005000000000002000000ac1414aa00000000000000000a0008"], 0xb0}, 0x1, 0x7}, 0x58010) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) 2.061522761s ago: executing program 4 (id=68): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x8000, &(0x7f0000000d40), 0x11, 0x4db, &(0x7f0000001400)="$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") pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa0c406, &(0x7f00000001c0)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ee303030303032fd33a1ddfe6717c3d234e02f30303030302c6e6f646f74732cb7f973636172642c6e66733d6e6f73", @ANYRESDEC, @ANYRES64], 0x1, 0x2a2, &(0x7f0000001140)="$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") getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), &(0x7f0000000540)='%pB \x00'}, 0x20) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f00000003c0)={[], 0xf000}, 0x1000) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0xb, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'gre0\x00'}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009104"]) setreuid(0x0, r3) mount$9p_tcp(&(0x7f0000000380), &(0x7f0000000400)='./file1\x00', &(0x7f0000000440), 0x204040, &(0x7f0000000b00)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,nodevmap,fowner>', @ANYRESDEC=r3, @ANYBLOB=',smackfstransmute=ext4\x00,measure,dont_appraise,obj_user=ext4\x00,pcr=00000000000000000036,smackfstransmute=,euid<', @ANYRESDEC=0xee01, @ANYBLOB="c3f569513e", @ANYRESDEC=0x0, @ANYBLOB=',fsname=msdos\x00,\x00']) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="339cb8cec2a491d769c3f8597b35627a4870178898e186aeb6c4b15dcdbb8660cbb72c36c069c9d420fd3a51f304aeef74ab430c70b376f7e86618d520eb32be0b3f4ee3314c013bcbb29de9aa61", 0x54}, {&(0x7f0000000280)='\'', 0x1}], 0x2, 0x0) 1.184076638s ago: executing program 4 (id=77): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\xc7M\x99\x19,\x9d\xee\x04\x00\x00\x00=\x9b\x89+\x00\x00\b\x00\x00\x00\x00$}wK\xcde\xdcN/\x86\xb8\xafO\x7fB\xe4I8\x06\x00\x92\x16*\xa9\"Yk\x8ah\xdf\xdc T\xbd\x8b\xed\xe5\x05j\x02\xf4\ty\'\xf8\xbbi\xfb\xcdLM\xf6Eo\xde*\xbdD\x0f\a.\t\x00\x00\x00S\xc0\xb02m\xd8\x14\xa22\v\xa4\'\'\x1bQb\x977d\x0e\xab$Teh\xff*', 0x3) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) fcntl$addseals(r2, 0x409, 0x9) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd2(0x0, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0xd000, 0x10000, 0x0, r3}) syz_read_part_table(0x601, &(0x7f0000000000)="$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") ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x5000, 0x101800}) close(0x4) 1.141397067s ago: executing program 2 (id=80): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001680)={[{@dax}], [{@euid_eq}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, '!&{,'}}, {@dont_hash}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, 'dax'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x65, 0x31, 0x39, 0x35, 0x33, 0x35, 0x34], 0x2d, [0x34, 0x65, 0x36, 0x63], 0x2d, [0x36, 0x61, 0x66, 0x66], 0x2d, [0x33, 0x0, 0x64, 0x37], 0x2d, [0x38, 0x39, 0x33, 0x0, 0x6, 0x34, 0x62, 0x38]}}}, {@seclabel}, {@subj_type={'subj_type', 0x3d, 'dax'}}]}, 0x42, 0x500, &(0x7f0000000500)="$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") r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) setreuid(0xee01, 0x0) r1 = syz_clone(0x4000000, &(0x7f0000000080)="ec520f62ade32fdd7d99ace99d", 0xd, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000200)="c52f52d3a064c6a2cf5d6e9c894e6cbf28439a761cb0b724cfdfadeda82dfb4414520779b162fd90c6fc") capset(&(0x7f0000000240)={0x0, r1}, &(0x7f0000000280)={0x80, 0x5, 0x401, 0x7, 0x3, 0x8}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000140)={{0xffffffffffffffff}}) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.037727696s ago: executing program 0 (id=81): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007111390000000000851000000200000085000000050000009500007b0000000095008605000000005e9c81c1730ab9c30866e3086effb4b55892bfb34acc0b5253a8455773719663f39e79f1d8a6105b304ee84dcdd99ea59bc9f7cdf9e02e955cdc7e26c9d5ad9b1e1f67956d1b9cc8c93f9a710bedca45d3a6709caa90bfd378cde75ddb2ba7f5ac0b543d"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@minixdf}]}, 0xfd, 0x4fa, &(0x7f00000005c0)="$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") ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="700200000102010100000000000000000200000a0800094000000007340001801400018008000100ac1414aa08"], 0x270}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x0) 906.948323ms ago: executing program 4 (id=82): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000002c00), 0x80800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') write$cgroup_int(r1, &(0x7f0000000040)=0xffffffffffd, 0x12) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x1f, 0x1f, 0x34}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xd) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) 872.480973ms ago: executing program 2 (id=83): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8000000001) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x900, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x74) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10880b, &(0x7f0000000340)={[{@nodioread_nolock}, {@lazytime}, {@data_err_abort}, {@errors_remount}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@pcr={'pcr', 0x3d, 0x27}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fsname={'fsname', 0x3d, 'hugetlb.2MB.usage_in_bytes\x00'}}]}, 0x1, 0x7bb, &(0x7f00000019c0)="$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") r4 = socket$inet(0x2, 0x2, 0x1) r5 = syz_pidfd_open(0xffffffffffffffff, 0x0) r6 = dup3(r5, r4, 0x0) setsockopt$sock_int(r4, 0x1, 0x5, &(0x7f00000000c0)=0xabb3, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000600)='bond_slave_1\x00', 0x10) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000240)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x0) r7 = openat(r6, &(0x7f0000000180)='./file0\x00', 0x5ad200, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r10 = dup(r9) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18, 0xfffffffffffffff5, 0x0, {0xe554}}, 0x18) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x108000a, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRES8=r0]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r10, 0x0, 0x9, &(0x7f0000000280)=':@{!&**^\x00'}, 0x30) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020662a, &(0x7f0000000140)={0x8, 0x100000001, 0x4}) 848.809003ms ago: executing program 4 (id=84): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000002740)=ANY=[@ANYBLOB="18000000000000000000000000000000c3070000000000009565539517f3519a3c6700000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x8e, &(0x7f0000000080)=""/142, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x881) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01002000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 826.516132ms ago: executing program 1 (id=85): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0xa75) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) sendfile(r2, r0, 0x0, 0xffffffff054) 748.378551ms ago: executing program 4 (id=86): read$FUSE(0xffffffffffffffff, &(0x7f0000000cc0)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000340)={[{@data_journal}, {@test_dummy_encryption_v1}, {@noquota}, {@errors_remount}, {@journal_async_commit}, {@barrier}, {@noquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x83}}]}, 0x1, 0x53d, &(0x7f0000002d00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) unshare(0x20400) timerfd_gettime(r0, 0x0) unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000480, &(0x7f0000000380), 0x45, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngwLu4YQeZ31Jlso1KWHUmgg0J6bGFkxqWUrWHKIjWkTSqGXQlt6ay859+el9Nofh17a/6MkpK0TmtJDcRn9sJVYcuTElpLm84Gx3pt50nvfeaOZJ81YE8Bjazz9k4k4EhFvJRGj9flJRPRXU9mImVq52xvr+XRKYnPzhR+TaplbG+v5aHpO6lA98/eI+Or1iKOZnfWWV9cWZovFwnI9P1lZvDBZXl07dn5xdr4wX1g6MTU9ffzk/06e2L9Yf/5u7fD1t5/998czv772t0/e/DqJmThcX9Ycx34Zj/H6OulPV+Edntnvynrms1c6KNS0BWQPsjHsUdoxffVeORKj0bdb/wx3s2UAwEF5NSI22+lruwQAeKQlteP/U71uBwDQLY3vAW5trOcbU2+/keiuG09HxFAt/sb5zdqSbP2c3VD1POjIreSOMyNJRIztQ/3jEfH+5y99mE5xQOchAVq5fCUizo6N79z/JzuuWdir/3RQZvyuvP0fdM8X6fjn/63Gf5mt8U+0GP8Mtnjv3o97v/8z1/ahmrbS8d+TTde23W6Kv26sr577U3XM15+cO18spPu2P0fERPQPpvmpXeqYuPnbzXbLmsd/P73z8gdp/enjdonMtezgnc+Zm63MPkjMzW5cifhHtlX8yVb/J23Gv6c7rOO5J954r92yNP403sa0M/6DtXk14l8t+z/ZKpPsen3iZHVzmGxsFC18OhMj7eofz273fzql9Tc+C3RD2v8ju8c/ljRfr1nu+KW3rhb79urol+0KNW//reNvvf0PJC9W0wP1eZdmK5XlqYiB5Pmd849vP7eRb5RP45/4Z+v3/27bf/qZ8GyHKyJ7/YeP7j/+g5XGP7en/t9zIoZuL/S1q7+z/p+upibqczrZ/3XawAdZdwAAAAAAAAAAAAAAAAAAAAAAAADQqUxEHI4kk9tKZzK5XO0e3n+NkUyxVK4cPVdaWZqL6r2yx6I/0/ipy9Gm30Odqv8efiN//K78fyPiLxHx7uBwNZ/Ll4pzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOoOtbn/f+r7wV63DgA4MEN9vW4BANBlSTbb6yYAAN02tKfSwwfWDgCge/Z2/AcA/ggc/wHg8XOP479/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBBnT51Kp02f9lYz6f5uYurKwuli8fmCuWF3OJKPpcvLV/IzZdK88VCLl9abPtCl2sPxVLpwnQsrVyarBTKlcny6tqZxdLKUuXM+cXZ+cKZQn/XIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzpVX1xZmi8XCskRPEgvf1PrhYWmPxN4ScbnWfw9Le/YvEQPbe4nh3uycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4BvwcAAP//JJMi3A==") r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_regs={0x12}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) listxattr(0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x4}) 747.237981ms ago: executing program 1 (id=88): read$FUSE(0xffffffffffffffff, &(0x7f0000000cc0)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000340)={[{@data_journal}, {@test_dummy_encryption_v1}, {@noquota}, {@errors_remount}, {@journal_async_commit}, {@barrier}, {@noquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x83}}]}, 0x1, 0x53d, &(0x7f0000002d00)="$eJzs3e9rJGcdAPDvTLK55C41WxU5C7bFVu6K3u6lsW0UaSuIviqo9X2MySaEbLIhu6mXUDTFF74URFTwD9AXgn+AIP0TRCjoe1FRRK8KvtGOzO6kzSa7SUg22WPz+cDcPM/M7HyfZ27myTM/mAng2no6Il6NiLGIeC4iZorpaTEs5Jn9znLvPnxzKR+SyLLX/5FEUkw7WFeeH4+IW52fxGREfP0rEd9Kjsdt7u6tL9brte0iX21tbFWbu3v31jYWV2urtc25udkX51+af2H+fla4UD3LEfHyl/7y4x/8/Msv/+Yz3/7jwt/uficv1hc+1il3RCxdKEAfnXWX2tviQL6Nti8j2JDk9SmNnbLQfy72/wcAwGDkffwPR8Qn2/3/mRhr9+YAAACAUZK9Mh3/TSIyAAAAYGSlETEdSVopngWYjjStVDrP8H40bqb1RrP16ZXGzuZyPi+iHKV0Za1eu188K1yOUpLnZ4tnbA/yzx/Jz0XE4xHxo5mpdr6y1KgvD/viBwAAAFwTt57qPv//90zaTgMAAAAjptw3AwAAAIwKp/wAAAAw+pz/AwAAwEj76muv5UN28B3v5Td2d9Ybb9xbrjXXKxs7S5WlxvZWZbXRWG2/s2/jtPXVG42tz8bmzoNqq9ZsVZu7ewsbjZ3N1sJa1yewAQAAgCv0+FNv/yGJiP3PT7WH3PiwCwU8ev487AIAgzQ27AIAQ6OvD9dXqe+cG8VYCwGjLjll/vGHdzrXCuO3F438i+/3b4MAAIBBuvPx4/f/J4p5+uUw2tJhFwAAuHLu7sH1VTrvE4C3B10SYFg+1Bnd6De/78s7znD/v3ONIcvOVTAAAGBgpttDklaKfvp0pGmlEvFY+7MApWRlrV67X5wf/H6mdCPPz7Z/mZz6zDAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADASItI/5q03+YfcWfm2enuqwNHvvr1s9d/8mCx1dqejZhI/jmTT5qIiNZPi+nPZz4JAAAAAI+Aznl6MZ4ddmkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDXvPnxz6WC4yrh//2JElHvFH4/J9ngyShFx819JjB/6XRIRYwOIv/9WRNzuFT+J97IsKxel6BV/6pLjl9ubpnf8NCJuDSA+XGdv5+3Pq72OvzSebo97H3/jxXBR/du/9P32b6xP+/PYkXw/T7zzq2rf+G9FPDHeu/05iJ904neFyDPP9I3Y3TJ/8xt7ez0XO7TKXvEPx6q2Nraqzd29e2sbi6u11drm3Nzsi/Mvzb8wf7+6slavFf/2DPPDT/z6vZPqf7NP/HJ3/Y9t/2f71v+wLP73zoOHH+lkSr3i332m99/f233ip8UW/lSRzuffOUjvd9KHPfnL3z15Uv2X+9R/8pT63z1T/eNzz33te3/qOefY1gAArkJzd299sV6vbZ+QmDzDMleceOXIlLw7VJ+I4Rfs3Il4NIpxSYmpOGWZ7Lud/fFisQa9A2TdU/K97IRfTXUfTeNxtlhTccIyE8eO07E4b3WSiP18XWfcIQEAgBHzQaf/pDtIAAAAAAAAAAAAAAAAAAAAwGU659vRJiNOe6PbB4mjMfeHU1UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBP9PwAA//8xE836") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) unshare(0x20400) timerfd_gettime(r0, 0x0) unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000480, &(0x7f0000000380), 0x45, 0x7a5, &(0x7f0000000f80)="$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") r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_regs={0x12}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x4}) 536.915488ms ago: executing program 0 (id=89): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'c', ' *:* ', 'wm\x00'}, 0x9) (async) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x1) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x19) (async) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000200)={{0x7, 0xe339, 0x1, 0xff}, 'syz0\x00', 0x15}) (async) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f00000004c0)=ANY=[@ANYBLOB="726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c636f6465706167653d3836342c636f6465706167653d3836352c726f6469722c696f636861727365743d63703934392c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c001ea57eb6973f88cba67dc1a955271abe9f7d72185d9011f33c2503d7b48e1f8ff1587f033e7285d5d72f"], 0x1, 0x276, &(0x7f0000000a80)="$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") (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x5c, r2, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) 359.469555ms ago: executing program 0 (id=90): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="b40100721300010226bd7000fcdbdf25ffffffff000000000000000000000000fc0100000000000000000000000000004e23fffa4e2000060200202000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="87ae000000000000090000000014000006000000000000000500000000000000080000000000000008000000000000008100000000000000030000000000000004000000000000000080090000000000ffff000000000000ffffffff00000000040000000000000002010702000000008400050000000000000000000000000000000001000004d52b0000000a000000000000000000000000000000000000010435000001033a00080000000080000001800000ac141432000000000000000000000000000004d43300000000000000fc01000000000000000000000000000104350000038d720000000000220ad51915000000760008"], 0x1b4}}, 0x80084) 284.582704ms ago: executing program 3 (id=91): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0xa75) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="ec", 0x1, 0x0, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) recvmmsg(r2, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) sendfile(r2, r0, 0x0, 0xffffffff054) 265.569874ms ago: executing program 3 (id=92): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x309000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000400)=0x13) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x3d17, 0x0, 0x0, 0x7, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0xd) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r7, r6, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000700)={'ip6gre0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4020ae46, &(0x7f00000001c0)={0x5}) ftruncate(r5, 0x5) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, 0x0) 201.722953ms ago: executing program 0 (id=93): r0 = socket$inet6(0xa, 0x3, 0x38) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x2fe3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}, 0x1c) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) openat$selinux_policy(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) mmap(&(0x7f00002e8000/0x800000)=nil, 0x800000, 0x8, 0x12, 0xffffffffffffffff, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, &(0x7f0000000200)) 201.405583ms ago: executing program 2 (id=94): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xc, 0x5, 0x81, 0x5, 0x5, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000ff02"]) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x3, 0x1, 0x0, &(0x7f0000048000), 0xffffffff) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @any, 0x4, 0x3}, 0xe) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0x80}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r5, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 178.786252ms ago: executing program 0 (id=95): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x40}}]}}}]}, 0x4c}, 0x1, 0x100000000000000}, 0x0) 178.315242ms ago: executing program 3 (id=96): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) r3 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r3, 0x0, 0x400000000000000, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x2, 0x0, {0x7, 0x0, 0x0, r4, 0x80, 0xe6, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040051}, 0x40c0) 162.043932ms ago: executing program 4 (id=97): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x9, 0x4, 0x0, @loopback, @empty}}}}) socket(0x11, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e25, 0xeb, @initdev={0xfe, 0x88, '\x00', 0x21, 0x0}, 0x5b56}, 0x1c) sendto$inet6(r1, &(0x7f00000000c0)="800037e92208a19e", 0x8, 0x40094, &(0x7f0000000040)={0xa, 0x1000, 0x6, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x101}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r4, 0x11, 0x2, @broadcast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x9, 0xb, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x80}}) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, 0x0) chdir(&(0x7f0000000000)='./file0\x00') llistxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) 90.943611ms ago: executing program 3 (id=98): socket$igmp6(0xa, 0x3, 0x2) timerfd_create(0x1, 0x800) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000000000000000107000000830b040a0101027f00000100000000001c000000000000000000000008000000", @ANYRES32=r0], 0x40}, 0x20000044) 89.714131ms ago: executing program 0 (id=99): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) unlink(&(0x7f00000003c0)='./file3\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) unshare(0x400) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000a, 0x12, r0, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0xc4, 0x12) splice(r2, 0x0, r3, &(0x7f00000002c0), 0x6, 0x0) sendto$inet(r1, 0x0, 0x0, 0x2000077d, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='wg1\x00', 0x10) sendmsg$inet(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)="d2", 0x200000c1}], 0x1}, 0x241) shutdown(r1, 0x1) 89.560951ms ago: executing program 3 (id=100): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x2182842, 0x0, 0x0, 0x0, &(0x7f0000000380)) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)=ANY=[]) 75.019971ms ago: executing program 3 (id=101): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) bpf$PROG_LOAD(0x5, 0x0, 0x10545c7c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x80000001, 0x9, 0x114, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0x8, @void, @value, @void, @value}, 0x48) futex(&(0x7f000000cffc)=0x2, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x0, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3, 0x0, 0x0, 0x1000, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0x9, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 30.54022ms ago: executing program 1 (id=102): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0xa75) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="ec", 0x1, 0x0, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) recvmmsg(r2, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) sendfile(r2, r0, 0x0, 0xffffffff054) 0s ago: executing program 1 (id=103): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg2\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fadvise64(r3, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000026c0), 0x802, 0x0) ioctl$UI_GET_SYSNAME(r4, 0x8040552c, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts. [ 21.515964][ T23] audit: type=1400 audit(1742482141.980:66): avc: denied { mounton } for pid=341 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.517751][ T341] cgroup1: Unknown subsys name 'net' [ 21.538610][ T23] audit: type=1400 audit(1742482141.980:67): avc: denied { mount } for pid=341 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.544015][ T341] cgroup1: Unknown subsys name 'net_prio' [ 21.566960][ T23] audit: type=1400 audit(1742482142.030:68): avc: denied { read } for pid=146 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 21.572041][ T341] cgroup1: Unknown subsys name 'devices' [ 21.599870][ T23] audit: type=1400 audit(1742482142.060:69): avc: denied { unmount } for pid=341 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.736751][ T341] cgroup1: Unknown subsys name 'hugetlb' [ 21.742563][ T341] cgroup1: Unknown subsys name 'rlimit' [ 21.883532][ T23] audit: type=1400 audit(1742482142.350:70): avc: denied { setattr } for pid=341 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=10757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.907407][ T23] audit: type=1400 audit(1742482142.350:71): avc: denied { mounton } for pid=341 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.932723][ T23] audit: type=1400 audit(1742482142.350:72): avc: denied { mount } for pid=341 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.939704][ T345] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.964657][ T23] audit: type=1400 audit(1742482142.430:73): avc: denied { relabelto } for pid=345 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.991531][ T23] audit: type=1400 audit(1742482142.430:74): avc: denied { write } for pid=345 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.032835][ T23] audit: type=1400 audit(1742482142.490:75): avc: denied { read } for pid=341 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.063235][ T341] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.656980][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.664356][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.671746][ T355] device bridge_slave_0 entered promiscuous mode [ 22.703307][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.710242][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.718525][ T355] device bridge_slave_1 entered promiscuous mode [ 22.725766][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.732752][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.740270][ T353] device bridge_slave_0 entered promiscuous mode [ 22.747441][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.754313][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.761863][ T353] device bridge_slave_1 entered promiscuous mode [ 22.812460][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.819470][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.826983][ T354] device bridge_slave_0 entered promiscuous mode [ 22.842703][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.849920][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.858214][ T354] device bridge_slave_1 entered promiscuous mode [ 22.904801][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.911643][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.919520][ T351] device bridge_slave_0 entered promiscuous mode [ 22.926290][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.933361][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.940985][ T356] device bridge_slave_0 entered promiscuous mode [ 22.961886][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.968745][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.976252][ T351] device bridge_slave_1 entered promiscuous mode [ 22.982714][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.990332][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.998159][ T356] device bridge_slave_1 entered promiscuous mode [ 23.143354][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.150206][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.191924][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.199345][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.206769][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.213889][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.248125][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.255003][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.262264][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.270354][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.281004][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.288087][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.295236][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.302417][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.340378][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.347975][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.355602][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.362695][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.369930][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.377052][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.384384][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.391928][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.399503][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.423211][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.431013][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.439541][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.447950][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.454924][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.462758][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.471490][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.478446][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.513323][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.522240][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.531488][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.540901][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.547976][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.556003][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.564223][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.571301][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.579113][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.587665][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.594636][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.601905][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.610036][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.616903][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.635914][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.644365][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.652493][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.659339][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.668312][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.676907][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.685015][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.693716][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.701906][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.708857][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.716554][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.725038][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.754501][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.763478][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.771633][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.780544][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.789890][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.798297][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.806249][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.814800][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.828915][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.836936][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.853909][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.862112][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.870366][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.879113][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.897547][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.906356][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.915015][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.922014][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.930010][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.939289][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.948156][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.955337][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.963670][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.981793][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.989780][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.997758][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.006134][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.033322][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.041510][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.050149][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.059384][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.068609][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.077770][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.086718][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.095252][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.103712][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.112063][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.120112][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.128332][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.137144][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.145082][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.166811][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.175231][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.184153][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.196199][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.204686][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.227648][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.236552][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.245433][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.254311][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.265590][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.273986][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.288618][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.296835][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.311271][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.320618][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.340262][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.349419][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.358438][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.366998][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.379538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.388440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.409793][ T356] request_module fs-gadgetfs succeeded, but still no fs? [ 24.411239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.425841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.434882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.466734][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.489365][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.504318][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.512767][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.522102][ T380] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue [ 24.557784][ T382] FAT-fs (loop2): Unrecognized mount option "uni_% xlate=0" or missing value [ 24.686330][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.696454][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.705055][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.715599][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.725900][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.528320][ T380] syz.1.2 (380) used greatest stack depth: 22392 bytes left [ 26.219536][ T397] EXT4-fs (loop3): Ignoring removed nobh option [ 26.228084][ T397] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,stripe=0x0000000000010000,dioread_nolock,,errors=continue [ 26.472259][ T404] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 26.485710][ T404] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 26.485710][ T404] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 26.485710][ T404] [ 26.562074][ T23] kauditd_printk_skb: 51 callbacks suppressed [ 26.562085][ T23] audit: type=1400 audit(1742482147.020:127): avc: denied { write } for pid=396 comm="syz.3.4" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.593894][ T404] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 26.634042][ T404] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:2998: comm syz.4.5: Allocating blocks 41-42 which overlap fs metadata [ 26.638606][ T23] audit: type=1400 audit(1742482147.020:128): avc: denied { add_name } for pid=396 comm="syz.3.4" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.677835][ T23] audit: type=1400 audit(1742482147.020:129): avc: denied { create } for pid=396 comm="syz.3.4" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.703967][ T23] audit: type=1400 audit(1742482147.060:130): avc: denied { read write open } for pid=396 comm="syz.3.4" path="/0/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.728729][ T404] EXT4-fs (loop4): Remounting filesystem read-only [ 26.737946][ T404] Quota error (device loop4): write_blk: dquota write failed [ 26.745270][ T404] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 26.753021][ T125] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.754856][ T404] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:2998: comm syz.4.5: Allocating blocks 41-42 which overlap fs metadata [ 26.780186][ T404] Quota error (device loop4): write_blk: dquota write failed [ 26.787953][ T404] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 26.799585][ T404] EXT4-fs (loop4): 1 truncate cleaned up [ 26.805400][ T404] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000200,noblock_validity,mblk_io_submit,nodiscard,noinit_itable,abort,noacl,errors=remount-ro,resgid=0x000000000000ee002 [ 26.843918][ T404] syz.4.5 (404) used greatest stack depth: 22240 bytes left [ 26.903256][ T401] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.963311][ T23] audit: type=1400 audit(1742482147.430:131): avc: denied { read } for pid=426 comm="syz.4.10" name="kvm" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.967558][ T427] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.986850][ T23] audit: type=1400 audit(1742482147.430:132): avc: denied { open } for pid=426 comm="syz.4.10" path="/dev/kvm" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.137106][ T429] input: syz0 as /devices/virtual/input/input4 [ 27.289451][ T412] syz.2.8 (412) used greatest stack depth: 22040 bytes left [ 27.353150][ T125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.365714][ T125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.375632][ T125] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 27.389905][ T125] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 27.399995][ T125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.412334][ T125] usb 1-1: config 0 descriptor?? [ 27.513337][ T401] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.525074][ T401] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.136810][ T401] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 28.151510][ T401] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 28.161351][ T401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.174447][ T401] usb 2-1: config 0 descriptor?? [ 28.483186][ T125] usbhid 1-1:0.0: can't add hid device: -71 [ 28.489714][ T125] usbhid: probe of 1-1:0.0 failed with error -71 [ 28.516136][ T125] usb 1-1: USB disconnect, device number 2 [ 28.552994][ T108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.693328][ T439] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 28.753054][ T401] usbhid 2-1:0.0: can't add hid device: -71 [ 28.758891][ T401] usbhid: probe of 2-1:0.0 failed with error -71 [ 28.766832][ T401] usb 2-1: USB disconnect, device number 2 [ 28.923153][ T108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.933008][ T439] usb 5-1: Using ep0 maxpacket: 16 [ 28.933932][ T108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.951875][ T108] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 28.964946][ T108] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 28.973900][ T108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.983328][ T108] usb 4-1: config 0 descriptor?? [ 29.053221][ T439] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 29.062916][ T439] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 29.072471][ T439] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 29.113105][ T439] usb 5-1: language id specifier not provided by device, defaulting to English [ 29.203700][ T463] ====================================================== [ 29.203700][ T463] WARNING: the mand mount option is being deprecated and [ 29.203700][ T463] will be removed in v5.15! [ 29.203700][ T463] ====================================================== [ 29.234981][ T125] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 29.243107][ T439] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.252243][ T439] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.260770][ T439] usb 5-1: Product: syz [ 29.265143][ T439] usb 5-1: Manufacturer: ဤ엝ꭷ咞覂⤦鱚┆갲ﻉ랠ᖼ촎筮Ӓ夯쫗膬裐 [ 29.275305][ T439] usb 5-1: SerialNumber: syz [ 29.513319][ T401] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.593413][ T125] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 29.606770][ T373] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.614369][ T125] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 29.623593][ T125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.633550][ T125] usb 1-1: config 0 descriptor?? [ 29.953064][ T108] usbhid 4-1:0.0: can't add hid device: -71 [ 29.958879][ T108] usbhid: probe of 4-1:0.0 failed with error -71 [ 29.973725][ T108] usb 4-1: USB disconnect, device number 2 [ 30.234639][ T125] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 30.283108][ T439] cdc_ncm 5-1:1.0: bind() failure [ 30.288894][ T439] cdc_ncm 5-1:1.1: bind() failure [ 30.297949][ T469] F2FS-fs (loop4): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 30.306516][ T469] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 30.316349][ T469] F2FS-fs (loop4): invalid crc value [ 30.324503][ T439] usb 5-1: USB disconnect, device number 2 [ 30.332030][ T469] F2FS-fs (loop4): Found nat_bits in checkpoint [ 30.356378][ T469] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 30.363286][ T469] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 30.393117][ T401] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.404133][ T401] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 30.417773][ T401] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 30.426871][ T401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.435031][ T373] usb 3-1: Using ep0 maxpacket: 16 [ 30.463551][ T401] usb 2-1: config 0 descriptor?? [ 30.477424][ T467] fscrypt (loop4, inode 8): Error -61 getting encryption context [ 30.503650][ T401] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 30.553220][ T373] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.564326][ T373] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 30.703436][ T373] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 30.755547][ T373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.765713][ T373] usb 3-1: config 0 descriptor?? [ 30.832167][ T486] [ 30.834392][ T486] ********************************************************** [ 30.841820][ T486] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 30.849504][ T486] ** ** [ 30.857462][ T486] ** trace_printk() being used. Allocating extra memory. ** [ 30.864915][ T486] ** ** [ 30.872183][ T486] ** This means that this is a DEBUG kernel and it is ** [ 30.879600][ T486] ** unsafe for production use. ** [ 30.887014][ T486] ** ** [ 30.894267][ T486] ** If you see this message and you are not debugging ** [ 30.901521][ T486] ** the kernel, report this immediately to your vendor! ** [ 30.908841][ T486] ** ** [ 30.916136][ T486] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 30.923496][ T486] ********************************************************** [ 31.006273][ T463] netlink: 196 bytes leftover after parsing attributes in process `syz.2.17'. [ 31.571691][ T108] usb 3-1: USB disconnect, device number 2 [ 31.635406][ T23] kauditd_printk_skb: 18 callbacks suppressed [ 31.635418][ T23] audit: type=1400 audit(1742482152.100:151): avc: denied { mounton } for pid=495 comm="syz.2.23" path="/5/file0" dev="tmpfs" ino=14347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 31.745109][ T496] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue [ 31.757098][ T496] ext4 filesystem being mounted at /5/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 31.889926][ T23] audit: type=1400 audit(1742482152.350:152): avc: denied { execute } for pid=495 comm="syz.2.23" name="file0" dev="tmpfs" ino=14347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 31.903099][ T496] process 'syz.2.23' launched './file0' with NULL argv: empty string added [ 32.349478][ T23] audit: type=1400 audit(1742482152.810:153): avc: denied { execute_no_trans } for pid=495 comm="syz.2.23" path="/5/file0" dev="tmpfs" ino=14347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.631627][ T23] audit: type=1400 audit(1742482153.090:154): avc: denied { append } for pid=146 comm="syslogd" name="messages" dev="tmpfs" ino=10880 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.671057][ T439] usb 1-1: USB disconnect, device number 3 [ 32.691966][ T23] audit: type=1400 audit(1742482153.120:155): avc: denied { open } for pid=146 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10880 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.979666][ T23] audit: type=1400 audit(1742482153.120:156): avc: denied { getattr } for pid=146 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10880 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.193285][ T439] usb 2-1: USB disconnect, device number 3 [ 33.256825][ T506] EXT4-fs (loop4): Ignoring removed oldalloc option [ 33.264408][ T506] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 33.285270][ T506] EXT4-fs (loop4): failed to initialize system zone (-117) [ 33.292402][ T506] EXT4-fs (loop4): mount failed [ 33.294736][ T23] audit: type=1400 audit(1742482153.750:157): avc: denied { ioctl } for pid=515 comm="syz.3.28" path="socket:[14400]" dev="sockfs" ino=14400 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.366221][ T516] device syzkaller0 entered promiscuous mode [ 33.815396][ T523] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 33.842192][ T523] ext4 filesystem being mounted at /4/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 33.947585][ T23] audit: type=1400 audit(1742482154.410:158): avc: denied { rename } for pid=509 comm="syz.2.25" name="file0" dev="tmpfs" ino=13600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 33.977621][ T23] audit: type=1400 audit(1742482154.410:159): avc: denied { unlink } for pid=509 comm="syz.2.25" name="file0" dev="tmpfs" ino=13600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 34.003516][ T23] audit: type=1400 audit(1742482154.470:160): avc: denied { setattr } for pid=522 comm="syz.1.29" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.033206][ T18] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.433160][ T18] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.449016][ T541] EXT4-fs (loop2): Ignoring removed nobh option [ 34.461221][ T18] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 34.478236][ T541] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,stripe=0x0000000000010000,dioread_nolock,,errors=continue [ 34.499523][ T18] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 34.509082][ T18] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.520138][ T18] usb 1-1: config 0 descriptor?? [ 34.563676][ T18] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 34.793369][ T393] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 35.211062][ T564] netlink: 60 bytes leftover after parsing attributes in process `syz.1.37'. [ 35.285762][ T541] syz.2.33 (541) used greatest stack depth: 21112 bytes left [ 35.364340][ T564] erofs: (device loop1): erofs_parse_options: Unrecognized mount option "./bus" or missing value [ 35.403137][ T393] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.414379][ T393] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.424154][ T393] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 35.436826][ T393] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 35.446339][ T393] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.455279][ T393] usb 5-1: config 0 descriptor?? [ 36.014121][ T575] FAT-fs (loop3): Unrecognized mount option "uni_% xlate=0" or missing value [ 36.073081][ T401] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.295590][ T393] hid-led 0003:27B8:01ED.0001: unknown main item tag 0x0 [ 36.304160][ T393] hid-led 0003:27B8:01ED.0001: unknown main item tag 0x0 [ 36.311640][ T393] hid-led 0003:27B8:01ED.0001: unknown main item tag 0x0 [ 36.320064][ T393] hid-led 0003:27B8:01ED.0001: unknown main item tag 0x0 [ 36.327348][ T393] hid-led 0003:27B8:01ED.0001: unknown main item tag 0x0 [ 36.524934][ T108] usb 1-1: USB disconnect, device number 4 [ 36.534131][ T393] hid-led: probe of 0003:27B8:01ED.0001 failed with error -71 [ 36.563689][ T393] usb 5-1: USB disconnect, device number 3 [ 36.683495][ T23] kauditd_printk_skb: 3 callbacks suppressed [ 36.689371][ T23] audit: type=1400 audit(1742482157.150:164): avc: denied { bind } for pid=582 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.708548][ T23] audit: type=1400 audit(1742482157.150:165): avc: denied { write } for pid=582 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.729275][ T23] audit: type=1400 audit(1742482157.150:166): avc: denied { create } for pid=582 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.749381][ T23] audit: type=1400 audit(1742482157.160:167): avc: denied { connect } for pid=582 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.750268][ T583] FAT-fs (loop2): Unrecognized mount option "fmask=0177777777a" or missing value [ 36.769809][ T23] audit: type=1400 audit(1742482157.160:168): avc: denied { write } for pid=582 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.943085][ T108] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 37.393465][ T401] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.428313][ T401] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.439262][ T401] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 37.449340][ T401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.474243][ T401] usb 2-1: config 0 descriptor?? [ 37.753141][ T439] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 37.771789][ T108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.782869][ T108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.792488][ T108] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 37.805744][ T393] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 37.814493][ T108] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.823893][ T108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.832656][ T108] usb 1-1: config 0 descriptor?? [ 37.854207][ T600] FAT-fs (loop2): Unrecognized mount option "uni_% xlate=0" or missing value [ 38.263071][ T393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.274298][ T393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.286457][ T393] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 38.300933][ T393] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.310094][ T393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.319492][ T393] usb 4-1: config 0 descriptor?? [ 38.399569][ T401] sunplus 0003:04FC:05D8.0002: hidraw0: USB HID v0.00 Device [HID 04fc:05d8] on usb-dummy_hcd.1-1/input0 [ 38.413094][ T401] usb 2-1: USB disconnect, device number 4 [ 38.563251][ T439] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.573058][ T108] usbhid 1-1:0.0: can't add hid device: -71 [ 38.574931][ T439] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.580518][ T108] usbhid: probe of 1-1:0.0 failed with error -71 [ 38.591010][ T439] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 38.599693][ T108] usb 1-1: USB disconnect, device number 5 [ 38.622166][ T439] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.653213][ T439] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.663754][ T439] usb 5-1: config 0 descriptor?? [ 38.796206][ T608] EXT4-fs (loop2): Ignoring removed nobh option [ 38.804585][ T608] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,stripe=0x0000000000010000,dioread_nolock,,errors=continue [ 38.814915][ T393] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 38.825624][ T23] audit: type=1400 audit(1742482159.280:169): avc: denied { setopt } for pid=607 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.847450][ T393] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 38.860749][ T23] audit: type=1400 audit(1742482159.290:170): avc: denied { bind } for pid=607 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.886103][ T23] audit: type=1400 audit(1742482159.290:171): avc: denied { name_bind } for pid=607 comm="syz.2.47" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 38.927573][ T23] audit: type=1400 audit(1742482159.290:172): avc: denied { node_bind } for pid=607 comm="syz.2.47" saddr=fe88::3 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 38.953705][ T23] audit: type=1400 audit(1742482159.290:173): avc: denied { append } for pid=607 comm="syz.2.47" path="/12/bus/cpuacct.usage_percpu_sys" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.084430][ T597] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 39.103231][ T393] usb 4-1: USB disconnect, device number 3 [ 39.225824][ T439] usbhid 5-1:0.0: can't add hid device: -71 [ 39.240793][ T439] usbhid: probe of 5-1:0.0 failed with error -71 [ 39.295821][ T439] usb 5-1: USB disconnect, device number 4 [ 39.454938][ T616] loop0: p2 < > p4 [ 39.461471][ T616] loop0: p4 size 8192 extends beyond EOD, truncated [ 39.524608][ T164] loop0: p2 < > p4 [ 39.529266][ T164] loop0: p4 size 8192 extends beyond EOD, truncated [ 39.561943][ T418] udevd[418]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 39.575646][ T421] udevd[421]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 39.592386][ T421] udevd[421]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 39.605150][ T418] udevd[418]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 39.619651][ T625] FAT-fs (loop0): Unrecognized mount option "uni_% xlate=0" or missing value [ 40.148734][ T633] EXT4-fs (loop3): Ignoring removed oldalloc option [ 40.170250][ T633] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #3: block 2: comm syz.3.52: lblock 2 mapped to illegal pblock 2 (length 1) [ 40.187812][ T635] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 40.215534][ T633] EXT4-fs (loop3): Remounting filesystem read-only [ 40.229321][ T633] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #3: block 48: comm syz.3.52: lblock 0 mapped to illegal pblock 48 (length 1) [ 40.259003][ T633] EXT4-fs (loop3): 1 orphan inode deleted [ 40.270881][ T633] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000007,noblock_validity,grpjquota=,init_itable=0x00000000000000fe,min_batch_time=0x0000000000000002,errors=remount-ro,oldalloc, [ 40.345894][ T633] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #2: block 16: comm syz.3.52: lblock 0 mapped to illegal pblock 16 (length 1) [ 40.360743][ T633] EXT4-fs (loop3): Remounting filesystem read-only [ 40.379647][ T642] EXT4-fs (loop2): Test dummy encryption mode enabled [ 40.397688][ T642] EXT4-fs (loop2): Invalid want_extra_isize 131 [ 40.473830][ T646] FAT-fs (loop1): Unrecognized mount option "uni_% xlate=0" or missing value [ 41.332091][ T635] EXT4-fs error (device loop4): __ext4_iget:5217: inode #12: block 2: comm syz.4.53: invalid block [ 41.418131][ T649] F2FS-fs (loop3): fault_injection options not supported [ 41.434264][ T660] kvm: emulating exchange as write [ 41.448088][ T649] F2FS-fs (loop3): invalid crc value [ 41.463476][ T649] F2FS-fs (loop3): Found nat_bits in checkpoint [ 41.548391][ T642] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 41.571393][ T649] F2FS-fs (loop3): Start checkpoint disabled! [ 41.578575][ T649] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 41.614050][ T642] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 41.670801][ T673] device syzkaller0 entered promiscuous mode [ 41.690576][ T7] attempt to access beyond end of device [ 41.690576][ T7] loop3: rw=2049, want=40984, limit=40427 [ 41.706497][ T670] EXT4-fs (loop1): Test dummy encryption mode enabled [ 41.728484][ T670] EXT4-fs (loop1): Invalid want_extra_isize 131 [ 41.753979][ T676] FAT-fs (loop0): Unrecognized mount option "uni_% xlate=0" or missing value [ 42.083086][ T670] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 42.175335][ T685] EXT4-fs (loop4): Ignoring removed nobh option [ 42.194347][ T685] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,stripe=0x0000000000010000,dioread_nolock,,errors=continue [ 42.272990][ T628] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 42.345255][ T693] loop3: p2 < > p4 [ 42.349649][ T693] loop3: p4 size 8192 extends beyond EOD, truncated [ 42.439268][ T164] loop3: p2 < > p4 [ 42.443756][ T164] loop3: p4 size 8192 extends beyond EOD, truncated [ 42.562879][ T418] udevd[418]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 42.574516][ T421] udevd[421]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 42.610862][ T421] udevd[421]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 42.624039][ T418] udevd[418]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 42.643188][ T628] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.934262][ T628] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.944475][ T628] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 42.957418][ T628] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.966573][ T628] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.975652][ T628] usb 3-1: config 0 descriptor?? [ 43.002981][ T108] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 43.354951][ T711] Zero length message leads to an empty skb [ 43.374267][ T23] kauditd_printk_skb: 9 callbacks suppressed [ 43.374278][ T23] audit: type=1400 audit(1742482163.840:181): avc: denied { load_policy } for pid=710 comm="syz.4.67" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 43.374547][ T711] SELinux: policydb magic number 0x5 does not match expected magic number 0xf97cff8c [ 43.411235][ T711] SELinux: failed to load policy [ 43.494487][ T713] EXT4-fs error (device loop4): ext4_orphan_get:1262: comm syz.4.68: bad orphan inode 6 [ 43.504739][ T713] EXT4-fs (loop4): 1 orphan inode deleted [ 43.510419][ T713] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 43.519304][ T713] ext4 filesystem being mounted at /12/bus supports timestamps until (%ptR?) (0x7fffffff) [ 43.558870][ T716] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 43.574172][ T108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.586562][ T628] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 43.605718][ T108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.619466][ T628] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 43.632143][ T108] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 43.647128][ T108] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 43.667524][ T108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.682333][ T108] usb 2-1: config 0 descriptor?? [ 43.844537][ T687] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 43.860534][ T628] usb 3-1: USB disconnect, device number 3 [ 43.885810][ T716] EXT4-fs error (device loop3): __ext4_iget:5217: inode #12: block 2: comm syz.3.69: invalid block [ 44.005615][ T23] audit: type=1400 audit(1742482164.470:182): avc: denied { ioctl } for pid=727 comm="syz.3.71" path="pid:[4026532279]" dev="nsfs" ino=4026532279 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.065154][ T726] EXT4-fs (loop0): Test dummy encryption mode enabled [ 44.072240][ T726] EXT4-fs (loop0): Invalid want_extra_isize 131 [ 44.174503][ T23] audit: type=1400 audit(1742482164.640:183): avc: denied { create } for pid=736 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.196034][ T726] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 44.206364][ T23] audit: type=1400 audit(1742482164.640:184): avc: denied { getopt } for pid=736 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.227015][ T23] audit: type=1400 audit(1742482164.670:185): avc: denied { read write } for pid=740 comm="syz.3.76" name="fuse" dev="devtmpfs" ino=9394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 44.251717][ T23] audit: type=1400 audit(1742482164.670:186): avc: denied { open } for pid=740 comm="syz.3.76" path="/dev/fuse" dev="devtmpfs" ino=9394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 44.253191][ T108] usbhid 2-1:0.0: can't add hid device: -71 [ 44.282406][ T713] syz.4.68 (713) used greatest stack depth: 19352 bytes left [ 44.283620][ T108] usbhid: probe of 2-1:0.0 failed with error -71 [ 44.298178][ T108] usb 2-1: USB disconnect, device number 5 [ 44.349156][ T23] audit: type=1400 audit(1742482164.810:187): avc: denied { unmount } for pid=351 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 44.405671][ T747] netlink: 148 bytes leftover after parsing attributes in process `syz.0.79'. [ 44.420585][ T747] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 44.459476][ T754] EXT4-fs (loop2): dax option not supported [ 44.503837][ T751] loop4: p2 < > p4 [ 44.512719][ T751] loop4: p4 size 8192 extends beyond EOD, truncated [ 44.652559][ T23] audit: type=1400 audit(1742482165.110:188): avc: denied { map } for pid=763 comm="syz.4.82" path="/dev/zero" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 44.697179][ T768] netlink: 'syz.4.84': attribute type 4 has an invalid length. [ 44.710095][ T760] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000040000,minixdf,,errors=continue [ 44.734062][ T418] udevd[418]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 44.748436][ T421] udevd[421]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 44.760048][ T760] ext4 filesystem being mounted at /13/bus supports timestamps until (%ptR?) (0x7fffffff) [ 44.834374][ T776] EXT4-fs (loop4): Test dummy encryption mode enabled [ 44.839010][ T760] netlink: 544 bytes leftover after parsing attributes in process `syz.0.81'. [ 44.856820][ T23] audit: type=1400 audit(1742482165.300:189): avc: denied { create } for pid=759 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.857824][ T776] EXT4-fs (loop4): Invalid want_extra_isize 131 [ 44.878865][ T760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.81'. [ 44.892727][ T23] audit: type=1400 audit(1742482165.300:190): avc: denied { write } for pid=759 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.913397][ T760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 44.921933][ T760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 44.945830][ T421] udevd[421]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 44.964243][ T419] udevd[419]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 44.974225][ T779] EXT4-fs (loop1): Test dummy encryption mode enabled [ 44.981139][ T779] EXT4-fs (loop1): Invalid want_extra_isize 131 [ 45.261571][ T776] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 45.323161][ T797] capability: warning: `syz.3.92' uses 32-bit capabilities (legacy support in use) [ 45.367862][ T779] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 45.401311][ T779] EXT4-fs (loop1): Online defrag not supported with bigalloc [ 45.414388][ T818] tpacket_rcv: packet too big, clamped from 65232 to 3952. macoff=96 [ 45.424861][ T809] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 45.437681][ T816] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 45.455244][ T816] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,bsddf,,errors=continue [ 45.468823][ T816] ext4 filesystem being mounted at /18/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 45.535458][ T809] incfs: Unexpected inode type [ 45.550011][ T353] ------------[ cut here ]------------ [ 45.555562][ T353] kernel BUG at fs/namei.c:2894! [ 45.570743][ T353] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 45.576844][ T353] CPU: 0 PID: 353 Comm: syz-executor Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 45.587157][ T353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.597245][ T353] RIP: 0010:may_delete+0x750/0x760 [ 45.602405][ T353] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e8 fd ff ff 4c 89 e7 e8 31 0d f6 ff e9 db fd ff ff e8 07 23 c6 ff 0f 0b e8 00 23 c6 ff <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 56 53 48 89 fb [ 45.622077][ T353] RSP: 0018:ffff8881d6eb7c28 EFLAGS: 00010293 [ 45.627974][ T353] RAX: ffffffff819e2800 RBX: ffff8881e9f1a898 RCX: ffff8881f31f1f80 [ 45.635951][ T353] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 45.644027][ T353] RBP: ffff8881dd17fe00 R08: ffffffff819e2128 R09: 0000000000000003 [ 45.652034][ T353] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881e9f1a880 [ 45.660372][ T353] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8881dd14c628 [ 45.668384][ T353] FS: 0000555559554500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 45.677149][ T353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.683766][ T353] CR2: fffffffff0000000 CR3: 00000001d6db1000 CR4: 00000000003426b0 [ 45.691962][ T353] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.699770][ T353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.707568][ T353] Call Trace: [ 45.710812][ T353] ? __die+0xb4/0x100 [ 45.714962][ T353] ? die+0x26/0x50 [ 45.718497][ T353] ? do_trap+0x1e7/0x340 [ 45.722728][ T353] ? may_delete+0x750/0x760 [ 45.726997][ T353] ? may_delete+0x750/0x760 [ 45.731891][ T353] ? do_invalid_op+0xfb/0x110 [ 45.736392][ T353] ? may_delete+0x750/0x760 [ 45.740724][ T353] ? invalid_op+0x1e/0x30 [ 45.744877][ T353] ? may_delete+0x78/0x760 [ 45.749117][ T353] ? may_delete+0x750/0x760 [ 45.753453][ T353] ? may_delete+0x750/0x760 [ 45.758099][ T353] ? may_delete+0x750/0x760 [ 45.762443][ T353] vfs_rmdir+0x29/0x3c0 [ 45.766480][ T353] incfs_kill_sb+0x105/0x200 [ 45.771058][ T353] deactivate_locked_super+0xa8/0x110 [ 45.776263][ T353] deactivate_super+0x1e2/0x2a0 [ 45.780945][ T353] ? vfs_submount+0xb0/0xb0 [ 45.785285][ T353] ? deactivate_locked_super+0x110/0x110 [ 45.790753][ T353] ? fast_dput+0x7a/0x280 [ 45.794920][ T353] cleanup_mnt+0x44e/0x500 [ 45.799353][ T353] task_work_run+0x140/0x170 [ 45.803787][ T353] exit_to_usermode_loop+0x190/0x1a0 [ 45.808904][ T353] prepare_exit_to_usermode+0x199/0x200 [ 45.814282][ T353] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 45.820125][ T353] RIP: 0033:0x7fcab6519497 [ 45.824364][ T353] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 45.844116][ T353] RSP: 002b:00007fffde2e1488 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 45.852362][ T353] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fcab6519497 [ 45.860546][ T353] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffde2e1540 [ 45.868355][ T353] RBP: 00007fffde2e1540 R08: 0000000000000000 R09: 0000000000000000 [ 45.876166][ T353] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffde2e2630 [ 45.883975][ T353] R13: 00007fcab659908c R14: 000000000000b1d0 R15: 00007fffde2e3700 [ 45.892336][ T353] Modules linked in: [ 45.903550][ T353] ---[ end trace ed890adfdf0fbf7a ]--- [ 45.918740][ T353] RIP: 0010:may_delete+0x750/0x760 [ 45.924176][ T353] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e8 fd ff ff 4c 89 e7 e8 31 0d f6 ff e9 db fd ff ff e8 07 23 c6 ff 0f 0b e8 00 23 c6 ff <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 56 53 48 89 fb [ 45.944365][ T353] RSP: 0018:ffff8881d6eb7c28 EFLAGS: 00010293 [ 45.950402][ T353] RAX: ffffffff819e2800 RBX: ffff8881e9f1a898 RCX: ffff8881f31f1f80 [ 45.958325][ T353] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 45.966607][ T353] RBP: ffff8881dd17fe00 R08: ffffffff819e2128 R09: 0000000000000003 [ 45.974674][ T353] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881e9f1a880 [ 45.982510][ T353] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8881dd14c628 [ 45.990477][ T353] FS: 0000555559554500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 45.999476][ T353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.010028][ T353] CR2: fffffffff0000000 CR3: 00000001d6db1000 CR4: 00000000003426a0 [ 46.017920][ T353] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.025785][ T353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.033806][ T353] Kernel panic - not syncing: Fatal exception [ 46.039905][ T353] Kernel Offset: disabled [ 46.044223][ T353] Rebooting in 86400 seconds..