last executing test programs: 2m13.485354979s ago: executing program 0 (id=334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x87}}, @call={0x85, 0x0, 0x0, 0x9e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="021200000200"], 0x10}}, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) getrlimit(0x4, &(0x7f0000000040)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) (async) r7 = syz_open_dev$rtc(&(0x7f0000000240), 0xffffffffffff0001, 0x4c4402) r8 = dup3(r7, r5, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000680)={0x73622a85, 0x300b, 0xffffffffffffffff}) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xb8) (async) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x4) 2m13.338411474s ago: executing program 0 (id=335): mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100, 0x82b) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x40000804) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x6, 0x3a, ')', 0x3a, '!{}', 0x3a, './file0', 0x3a, [0x46, 0x4f, 0x0]}, 0x2e) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 2m13.308428227s ago: executing program 0 (id=336): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@data_ordered}, {@jqfmt_vfsv1}, {@prjquota}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0xcc2}}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@nogrpid}, {@noauto_da_alloc}, {@nogrpid}], [{@permit_directio}, {@pcr={'pcr', 0x3d, 0x4}}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103542, 0x470e0589a70ae519) fallocate(r0, 0x10, 0x2000, 0x7fff) socket$inet6(0xa, 0x2, 0xfffffffc) write$UHID_INPUT(r0, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0xfffffffd, 0x0, 0xffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) chmod(0x0, 0x104) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)='T\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) r7 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) fcntl$getownex(r7, 0x10, &(0x7f0000000140)) 2m12.946608894s ago: executing program 0 (id=338): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000005a80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000007940)=""/252, 0xfc}, {&(0x7f0000000040)}, {&(0x7f0000000780)=""/133, 0x85}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000000840)=""/163, 0xa3}, {&(0x7f0000003600)=""/4096, 0x1000}], 0x7, &(0x7f0000000980)=""/186, 0xba}, 0x2}, {{&(0x7f0000000a40)=@isdn, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c00)=""/174, 0xae}, {&(0x7f00000001c0)}, {&(0x7f0000000cc0)=""/157, 0x9d}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f0000000d80)=""/248, 0xf8}, {&(0x7f0000000ac0)=""/66, 0x42}], 0x6, &(0x7f0000000f00)=""/121, 0x79}, 0x9}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)=""/49, 0x31}], 0x1}, 0x40}, {{&(0x7f0000000f80)=@generic, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001000)=""/76, 0x4c}, {&(0x7f0000001080)=""/84, 0x54}, {&(0x7f0000001100)=""/9, 0x9}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000006940)=""/4096, 0x1000}, {&(0x7f0000001140)=""/29, 0x1d}, {&(0x7f0000001180)=""/40, 0x28}, {&(0x7f00000011c0)=""/224, 0xe0}, {&(0x7f00000012c0)=""/144, 0x90}, {&(0x7f0000001380)}], 0xa, &(0x7f0000005600)=""/109, 0x6d}, 0x15}, {{0x0, 0x0, &(0x7f0000005a00)=[{&(0x7f0000005680)=""/6, 0x6}, {&(0x7f00000056c0)=""/69, 0x45}, {&(0x7f0000005740)=""/1, 0x1}, {&(0x7f0000005780)=""/94, 0x5e}, {&(0x7f0000005800)}, {&(0x7f0000005840)=""/164, 0xa4}, {&(0x7f0000005900)=""/203, 0xcb}], 0x7}, 0x1}], 0x5, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x6, 0x1, 0xffffbfff, 0x1, 0x1}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f00000014c0)=ANY=[@ANYRESHEX=r2, @ANYRES16=r5, @ANYBLOB="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", @ANYRESHEX=r3, @ANYRESHEX=r1, @ANYBLOB="90279dd1b8b000a1024d25667b06abbaac5d4adf8e7c4d961f6aa22638903a5aa5c2b9ec8a29c2b31f6739941553acd6f836686e2ec5e14e1bd8d721403f332e1796d7161b2538ef61155148e298cf39ccd164d7862ef42ad6a2e84e1d1898129c03bacc3282c7ce28b7ad009a91fa5b049fcaa8fa6c6813599769a2f35972dd51e975e355d37191d6606c89b5d4b357108fd25e11efa61f846680f6fe43b1cc04cf7dfb2a60fcbed37c9ff5210872dd468d87bd64f5", @ANYRES8=r4, @ANYRESHEX=r4], &(0x7f0000000240)='GPL\x00', 0x9ef3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x41) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x41) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) listen(r7, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) 2m12.146411204s ago: executing program 0 (id=343): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 2m12.049202264s ago: executing program 0 (id=346): setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x3) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x3, 0x96, 0xac, 0x1}]}) r1 = syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x1, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xf}}, {@allow_other}, {@blksize}, {@blksize}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x7f}}, {@max_read={'max_read', 0x3d, 0x3}}, {@max_read={'max_read', 0x3d, 0x6}}], [{@smackfshat={'smackfshat', 0x3d, '^'}}, {@subj_type={'subj_type', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@appraise}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'root'}}]}}, 0x1, 0x0, &(0x7f0000000380)="05d9cfd6745ab89d9a386911bd8bc6c56035e7abd2e52fa1c0996882de2986d5ab74e54961") mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x184) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r2, 0x20, &(0x7f0000000580)={&(0x7f0000000440)=""/146, 0x92, 0x0, &(0x7f0000000500)=""/86, 0x56}}, 0x10) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x101200, 0x0) mknodat(r3, &(0x7f0000000640)='./file0\x00', 0x10, 0x0) r4 = open(&(0x7f0000000680)='./file0\x00', 0x80, 0x80) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000006c0), 0x381680, 0x0) fadvise64(r5, 0x9, 0x3, 0x0) ustat(0x1, &(0x7f0000000700)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) chdir(&(0x7f0000000740)='./file0\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r4, 0x0, 0xcb, 0xab, &(0x7f0000000780)="b4acaa31655224f1dabdffbf8a262490e1d5a1729d4a76375beb3ec3e7a838b1887fe9d39abbd9ce5d0f601876f6bfa4653d4117a0a5563b5e46e6c2cb194bbc6097c0b52e2e8bc3a8c67c8fcb22947ad732be5eda5709d6dfcc2cf209aeab0fe925ce74192ca976a937c84211b874264ae5a0c04be231b541c3e6cd84d4aee20ede586e9878430aa1123ae3d50ebc07f369a8f3fe6d1be835783675f4ca5975a04dd507ebd20313804c98ad40c1c97d67f412e171fcef0185d86539190143406e77fa4a0f8a8494e1a50b", &(0x7f0000000880)=""/171, 0xfffffb1a, 0x0, 0x82, 0xd6, &(0x7f0000000940)="3038b45e287441a576fd29fc6dbd444fb07069016ee50e30bfd3d9ea5afc46381dad6f86fbc2c013270257d6b6b160989ebc13bf1f75f7e03b6ae4ba3026739d425babaf086f6d5eee2bd732141fb21542384a7a8a829f06a6bfa01e9108695e2e7926594c208a6ffcb102cf30103f1007bca53ca07db37e57dbfb5e929a4375bfe7", &(0x7f0000000a00)="1b7877817c25de2261ca27436f18efa3723de068df45988198693c413be431887daada6feb798f22578b6dde5e1f3795923aa9d33f8e56434a293a42d2d34c58ede68dc9151dd948cff68a0b8a4a3100638e3244e4dea1c8a866cef0645909de1cd78ae30e67b67b36d20ba0ea79cbdaa0990f9c330e481014d1db26c8c908ecd69d0d347fe8927e6f9c05f5b52c7c03b3fbfcaeefd255dd60011a8ecda4f0fa701bfd6cf1603583aff1d2509d2d474787140ff1dc2c85934043f6b17434a4de1116537a2a29cbc5ec3c6d34b623ba310eb662a93081", 0x0, 0x0, 0x5}, 0x50) r6 = dup(r2) r7 = open$dir(&(0x7f0000000bc0)='./file0\x00', 0x500, 0xb) move_mount(r6, &(0x7f0000000b80)='./file0\x00', r7, &(0x7f0000000c00)='./file0\x00', 0x340) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000c40)={'wg2\x00'}) r8 = accept(r4, &(0x7f0000000c80)=@nl=@proc, &(0x7f0000000d00)=0x80) writev(r8, &(0x7f0000001180)=[{&(0x7f0000000d40)="07f2f0b6d19ef5e1d3c4184c28f074e21eaec2b6fd93f8dd0f4db301b8fe0b4b3e519d973376127d0567bd2ba35a4ae7307796f26e6e4e7abdaf78680bcb868c1ab5e4150a9ed7c5f4ca06b6287d55ae67a4153b6aaaf7d5785349d1b5dba558f0e04db33c0d66b978d710104d635c258435ca3889b62f8a87f58c0a3becb7092821e9026ec3df9e1c66306b6387cd3eac6f6da6e8154b2f73b42c60d32ceefdff7c9a5da54af99351b110464ea13413910422fbbe83df6511c2a68074fe4aa31cc5bd2df95170d4da4c6eca0d437074f621b75c202f7a586ec5eb79f0272e8f07", 0xe1}, {&(0x7f0000000e40)="b081e143c75ba17d6b5a0b09dbaf24f2c3b2fffc7b9bdf991f57bc30246dbd8ef9ddcab636d049ac65e70057257cb2d778ad7410594a4694710612d6ac46f231cfec376b1af0b69346517fa3b57b92d97c65ff8f28dfd6a8a4327da2739e56f411a504e0b46683b8f7610fd1b554f8b7e856f6c4ab82931cd301c624a4f1b09f869caa5b64ab982db057a34dbebfd0b20c45ec839002ba1f7804df93f890d6b4b25490d0249792c01884fccbda0348b1cb76b0b63b2a9baf54f6053cdab16423d36419ff2a6f621c3328094efe1a0b6801964569af4e1d02a68425e3056354bf2905cb677a20b383adf9928ae613", 0xee}, {&(0x7f0000000f40)="9e2f81eb2dc798f3d8085db163556e80da61890ed06f1bfa30e35b79f4aa49795ec4619439d0585681a5d60e29fe21d76703ae7bf9b8072d1013ea4f95544fdf58c036e896f9d2edb36a83cd26f1324961addb0da7623aaee15b6b9461acf9879014", 0x62}, {&(0x7f0000000fc0)="baf20d47c3d0992e18ec8c57562b7210fc5e34c418da5946f2f81d492756d386d00b26b44316c4a50bc956de38c988c3cebb0c48e3e5d366a7ad337f79baa817ad502bbba3e29f5c5603291ec3f1ea4d2e5d7ac3ec0f0a8e82442300cf4d809c009e8c9f101780be19524fa23ca48142e0c32da9a46de1f0edcfcdca3a9153744118f7d880fa2e4cce4875684fbd41bf5f6a6603aaa919cf9cdd755990535d072bef6f6402bbaccf15e5f5423d4be81c992a1fc116b5cd1f0a3e83cc0ad53d3b314248e82de3d81352509372f21512a4801ffa8a9436da", 0xd7}, {&(0x7f00000010c0)="a5b7cd147022792d0577b330af0cc34ea14f2d9a83566006155d2860a584831162c4ba1ca0f8215362dc7063da94505c7b69d4dbe70754264d19519e7fbe20dc9f8b54d1c752a91bb5f1f43d4817d5ecd5e7005e271c3335f3260b6893767d8477caee9113ce5840c21f1f8f2bc697769a6aea94aa5eabf3a1ab5f585e3236d36828aeebd1c1f6d390f76560ad618293e927e184b40354f7009c70c56c787602a94566e726145eb4c5f3ce485e918f746c78259e3deba2f1709b263f", 0xbc}], 0x5) recvmsg$unix(r4, &(0x7f0000001440)={&(0x7f0000001200), 0x6e, &(0x7f0000001400)=[{&(0x7f0000001280)=""/78, 0x4e}, {&(0x7f0000001300)=""/41, 0x29}, {&(0x7f0000001340)}, {&(0x7f0000001380)=""/115, 0x73}], 0x4}, 0x2100) r9 = openat$cgroup_ro(r4, &(0x7f0000001480)='freezer.parent_freezing\x00', 0x0, 0x0) r10 = openat$cgroup_int(r9, &(0x7f00000014c0)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000001500)=0x7, 0x12) socket(0x2b, 0x800, 0x6175) pidfd_send_signal(r9, 0x24, &(0x7f0000001540)={0xb, 0x80000001, 0x5}, 0x0) recvmmsg(r8, &(0x7f0000004e80)=[{{&(0x7f00000015c0)=@phonet, 0x80, &(0x7f0000001940)=[{&(0x7f0000001640)=""/68, 0x44}, {&(0x7f00000016c0)=""/102, 0x66}, {&(0x7f0000001740)=""/150, 0x96}, {&(0x7f0000001800)=""/244, 0xf4}, {&(0x7f0000001900)=""/32, 0x20}], 0x5}, 0x100}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000019c0)=""/57, 0x39}, {&(0x7f0000001a00)=""/6, 0x6}, {&(0x7f0000001a40)}, {&(0x7f0000001a80)=""/215, 0xd7}], 0x4, &(0x7f0000001bc0)=""/174, 0xae}, 0x2}, {{&(0x7f0000001c80)=@alg, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001d00)=""/194, 0xc2}, {&(0x7f0000001e00)=""/84, 0x54}, {&(0x7f0000001e80)=""/205, 0xcd}], 0x3}, 0x1}, {{&(0x7f0000001fc0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002040)=""/10, 0xa}, {&(0x7f0000002080)=""/123, 0x7b}, {&(0x7f0000002100)=""/179, 0xb3}, {&(0x7f00000021c0)=""/120, 0x78}, {&(0x7f0000002240)=""/224, 0xe0}, {&(0x7f0000002340)=""/239, 0xef}, {&(0x7f0000002440)=""/208, 0xd0}, {&(0x7f0000002540)=""/168, 0xa8}], 0x8, &(0x7f0000002680)=""/4096, 0x1000}, 0xcabf}, {{&(0x7f0000003680)=@can, 0x80, &(0x7f0000003740)=[{&(0x7f0000003700)=""/17, 0x11}], 0x1, 0xfffffffffffffffc}, 0x7ff}, {{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000003780)=""/48, 0x30}, {&(0x7f00000037c0)=""/167, 0xa7}, {&(0x7f0000003880)=""/84, 0x54}, {&(0x7f0000003900)=""/235, 0xeb}, {&(0x7f0000003a00)=""/227, 0xe3}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004b00)=""/71, 0x47}, {&(0x7f0000004b80)=""/152, 0x98}, {&(0x7f0000004c40)=""/187, 0xbb}], 0x9, &(0x7f0000004dc0)=""/150, 0x96}}], 0x6, 0x10000, &(0x7f0000005000)={0x0, 0x3938700}) fsetxattr$security_evm(r10, &(0x7f0000005040), &(0x7f0000005080)=@v1={0x2, "69360c66a852c47b4f"}, 0xa, 0x2) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000050c0)={{r5}, {@void, @max}}) 2m11.966881952s ago: executing program 32 (id=346): setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x3) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x3, 0x96, 0xac, 0x1}]}) r1 = syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x1, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xf}}, {@allow_other}, {@blksize}, {@blksize}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x7f}}, {@max_read={'max_read', 0x3d, 0x3}}, {@max_read={'max_read', 0x3d, 0x6}}], [{@smackfshat={'smackfshat', 0x3d, '^'}}, {@subj_type={'subj_type', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@appraise}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'root'}}]}}, 0x1, 0x0, &(0x7f0000000380)="05d9cfd6745ab89d9a386911bd8bc6c56035e7abd2e52fa1c0996882de2986d5ab74e54961") mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x184) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r2, 0x20, &(0x7f0000000580)={&(0x7f0000000440)=""/146, 0x92, 0x0, &(0x7f0000000500)=""/86, 0x56}}, 0x10) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x101200, 0x0) mknodat(r3, &(0x7f0000000640)='./file0\x00', 0x10, 0x0) r4 = open(&(0x7f0000000680)='./file0\x00', 0x80, 0x80) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000006c0), 0x381680, 0x0) fadvise64(r5, 0x9, 0x3, 0x0) ustat(0x1, &(0x7f0000000700)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) chdir(&(0x7f0000000740)='./file0\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r4, 0x0, 0xcb, 0xab, &(0x7f0000000780)="b4acaa31655224f1dabdffbf8a262490e1d5a1729d4a76375beb3ec3e7a838b1887fe9d39abbd9ce5d0f601876f6bfa4653d4117a0a5563b5e46e6c2cb194bbc6097c0b52e2e8bc3a8c67c8fcb22947ad732be5eda5709d6dfcc2cf209aeab0fe925ce74192ca976a937c84211b874264ae5a0c04be231b541c3e6cd84d4aee20ede586e9878430aa1123ae3d50ebc07f369a8f3fe6d1be835783675f4ca5975a04dd507ebd20313804c98ad40c1c97d67f412e171fcef0185d86539190143406e77fa4a0f8a8494e1a50b", &(0x7f0000000880)=""/171, 0xfffffb1a, 0x0, 0x82, 0xd6, &(0x7f0000000940)="3038b45e287441a576fd29fc6dbd444fb07069016ee50e30bfd3d9ea5afc46381dad6f86fbc2c013270257d6b6b160989ebc13bf1f75f7e03b6ae4ba3026739d425babaf086f6d5eee2bd732141fb21542384a7a8a829f06a6bfa01e9108695e2e7926594c208a6ffcb102cf30103f1007bca53ca07db37e57dbfb5e929a4375bfe7", &(0x7f0000000a00)="1b7877817c25de2261ca27436f18efa3723de068df45988198693c413be431887daada6feb798f22578b6dde5e1f3795923aa9d33f8e56434a293a42d2d34c58ede68dc9151dd948cff68a0b8a4a3100638e3244e4dea1c8a866cef0645909de1cd78ae30e67b67b36d20ba0ea79cbdaa0990f9c330e481014d1db26c8c908ecd69d0d347fe8927e6f9c05f5b52c7c03b3fbfcaeefd255dd60011a8ecda4f0fa701bfd6cf1603583aff1d2509d2d474787140ff1dc2c85934043f6b17434a4de1116537a2a29cbc5ec3c6d34b623ba310eb662a93081", 0x0, 0x0, 0x5}, 0x50) r6 = dup(r2) r7 = open$dir(&(0x7f0000000bc0)='./file0\x00', 0x500, 0xb) move_mount(r6, &(0x7f0000000b80)='./file0\x00', r7, &(0x7f0000000c00)='./file0\x00', 0x340) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000c40)={'wg2\x00'}) r8 = accept(r4, &(0x7f0000000c80)=@nl=@proc, &(0x7f0000000d00)=0x80) writev(r8, &(0x7f0000001180)=[{&(0x7f0000000d40)="07f2f0b6d19ef5e1d3c4184c28f074e21eaec2b6fd93f8dd0f4db301b8fe0b4b3e519d973376127d0567bd2ba35a4ae7307796f26e6e4e7abdaf78680bcb868c1ab5e4150a9ed7c5f4ca06b6287d55ae67a4153b6aaaf7d5785349d1b5dba558f0e04db33c0d66b978d710104d635c258435ca3889b62f8a87f58c0a3becb7092821e9026ec3df9e1c66306b6387cd3eac6f6da6e8154b2f73b42c60d32ceefdff7c9a5da54af99351b110464ea13413910422fbbe83df6511c2a68074fe4aa31cc5bd2df95170d4da4c6eca0d437074f621b75c202f7a586ec5eb79f0272e8f07", 0xe1}, {&(0x7f0000000e40)="b081e143c75ba17d6b5a0b09dbaf24f2c3b2fffc7b9bdf991f57bc30246dbd8ef9ddcab636d049ac65e70057257cb2d778ad7410594a4694710612d6ac46f231cfec376b1af0b69346517fa3b57b92d97c65ff8f28dfd6a8a4327da2739e56f411a504e0b46683b8f7610fd1b554f8b7e856f6c4ab82931cd301c624a4f1b09f869caa5b64ab982db057a34dbebfd0b20c45ec839002ba1f7804df93f890d6b4b25490d0249792c01884fccbda0348b1cb76b0b63b2a9baf54f6053cdab16423d36419ff2a6f621c3328094efe1a0b6801964569af4e1d02a68425e3056354bf2905cb677a20b383adf9928ae613", 0xee}, {&(0x7f0000000f40)="9e2f81eb2dc798f3d8085db163556e80da61890ed06f1bfa30e35b79f4aa49795ec4619439d0585681a5d60e29fe21d76703ae7bf9b8072d1013ea4f95544fdf58c036e896f9d2edb36a83cd26f1324961addb0da7623aaee15b6b9461acf9879014", 0x62}, {&(0x7f0000000fc0)="baf20d47c3d0992e18ec8c57562b7210fc5e34c418da5946f2f81d492756d386d00b26b44316c4a50bc956de38c988c3cebb0c48e3e5d366a7ad337f79baa817ad502bbba3e29f5c5603291ec3f1ea4d2e5d7ac3ec0f0a8e82442300cf4d809c009e8c9f101780be19524fa23ca48142e0c32da9a46de1f0edcfcdca3a9153744118f7d880fa2e4cce4875684fbd41bf5f6a6603aaa919cf9cdd755990535d072bef6f6402bbaccf15e5f5423d4be81c992a1fc116b5cd1f0a3e83cc0ad53d3b314248e82de3d81352509372f21512a4801ffa8a9436da", 0xd7}, {&(0x7f00000010c0)="a5b7cd147022792d0577b330af0cc34ea14f2d9a83566006155d2860a584831162c4ba1ca0f8215362dc7063da94505c7b69d4dbe70754264d19519e7fbe20dc9f8b54d1c752a91bb5f1f43d4817d5ecd5e7005e271c3335f3260b6893767d8477caee9113ce5840c21f1f8f2bc697769a6aea94aa5eabf3a1ab5f585e3236d36828aeebd1c1f6d390f76560ad618293e927e184b40354f7009c70c56c787602a94566e726145eb4c5f3ce485e918f746c78259e3deba2f1709b263f", 0xbc}], 0x5) recvmsg$unix(r4, &(0x7f0000001440)={&(0x7f0000001200), 0x6e, &(0x7f0000001400)=[{&(0x7f0000001280)=""/78, 0x4e}, {&(0x7f0000001300)=""/41, 0x29}, {&(0x7f0000001340)}, {&(0x7f0000001380)=""/115, 0x73}], 0x4}, 0x2100) r9 = openat$cgroup_ro(r4, &(0x7f0000001480)='freezer.parent_freezing\x00', 0x0, 0x0) r10 = openat$cgroup_int(r9, &(0x7f00000014c0)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000001500)=0x7, 0x12) socket(0x2b, 0x800, 0x6175) pidfd_send_signal(r9, 0x24, &(0x7f0000001540)={0xb, 0x80000001, 0x5}, 0x0) recvmmsg(r8, &(0x7f0000004e80)=[{{&(0x7f00000015c0)=@phonet, 0x80, &(0x7f0000001940)=[{&(0x7f0000001640)=""/68, 0x44}, {&(0x7f00000016c0)=""/102, 0x66}, {&(0x7f0000001740)=""/150, 0x96}, {&(0x7f0000001800)=""/244, 0xf4}, {&(0x7f0000001900)=""/32, 0x20}], 0x5}, 0x100}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000019c0)=""/57, 0x39}, {&(0x7f0000001a00)=""/6, 0x6}, {&(0x7f0000001a40)}, {&(0x7f0000001a80)=""/215, 0xd7}], 0x4, &(0x7f0000001bc0)=""/174, 0xae}, 0x2}, {{&(0x7f0000001c80)=@alg, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001d00)=""/194, 0xc2}, {&(0x7f0000001e00)=""/84, 0x54}, {&(0x7f0000001e80)=""/205, 0xcd}], 0x3}, 0x1}, {{&(0x7f0000001fc0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002040)=""/10, 0xa}, {&(0x7f0000002080)=""/123, 0x7b}, {&(0x7f0000002100)=""/179, 0xb3}, {&(0x7f00000021c0)=""/120, 0x78}, {&(0x7f0000002240)=""/224, 0xe0}, {&(0x7f0000002340)=""/239, 0xef}, {&(0x7f0000002440)=""/208, 0xd0}, {&(0x7f0000002540)=""/168, 0xa8}], 0x8, &(0x7f0000002680)=""/4096, 0x1000}, 0xcabf}, {{&(0x7f0000003680)=@can, 0x80, &(0x7f0000003740)=[{&(0x7f0000003700)=""/17, 0x11}], 0x1, 0xfffffffffffffffc}, 0x7ff}, {{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000003780)=""/48, 0x30}, {&(0x7f00000037c0)=""/167, 0xa7}, {&(0x7f0000003880)=""/84, 0x54}, {&(0x7f0000003900)=""/235, 0xeb}, {&(0x7f0000003a00)=""/227, 0xe3}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004b00)=""/71, 0x47}, {&(0x7f0000004b80)=""/152, 0x98}, {&(0x7f0000004c40)=""/187, 0xbb}], 0x9, &(0x7f0000004dc0)=""/150, 0x96}}], 0x6, 0x10000, &(0x7f0000005000)={0x0, 0x3938700}) fsetxattr$security_evm(r10, &(0x7f0000005040), &(0x7f0000005080)=@v1={0x2, "69360c66a852c47b4f"}, 0xa, 0x2) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000050c0)={{r5}, {@void, @max}}) 10.103219488s ago: executing program 2 (id=1173): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) pipe(&(0x7f0000000040)) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x1, &(0x7f0000000580)=[0x0]) io_pgetevents(r3, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(0x0, 0x188) socket(0x2a, 0x2, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) chdir(&(0x7f0000000140)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff0000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv4_newaddr={0x3c, 0x14, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x1f, 0x49, 0xcb, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x3c}}, 0x0) 7.980370093s ago: executing program 2 (id=1180): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@block_validity}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/62, 0x3e) getdents64(r3, 0xfffffffffffffffe, 0x63) 7.252328926s ago: executing program 2 (id=1186): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x22}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ppoll(&(0x7f00000002c0)=[{r1, 0x2}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x0) 7.252069556s ago: executing program 1 (id=1188): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 7.170570255s ago: executing program 1 (id=1189): pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) dup(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000400)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@checkpoint_diasble}, {@flush_merge}, {@alloc_mode_reuse}, {@acl}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@noextent_cache}, {@compress_cache}, {@fault_type={'fault_type', 0x3d, 0x4}}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8086) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 7.041997838s ago: executing program 2 (id=1190): write(0xffffffffffffffff, &(0x7f0000000440)="49a3683d442b1fdb359c477866ad346561b77274ee8316ff11c70c5306878944c74d37f62cf7f9ccc4a5cada1289df2b4ce60dc44d58cb65803bf8902a531a87f83f4653dc673e8523f74dfee7a43b93b82ebb7b4aa91838e16e2cd5a53cf72440a6ba6be68f7d2872d8954e837e5880c8b67ea8c7c9", 0x76) socket$inet6(0xa, 0x800, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1c7a) ptrace$pokeuser(0x6, r0, 0xffffffff, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x18) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xa7) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = epoll_create(0x3ff) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000280)={0x2000000}) userfaultfd(0x80801) r6 = socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000580), 0x3) 6.176350135s ago: executing program 5 (id=1194): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 6.011005132s ago: executing program 3 (id=1195): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.006548583s ago: executing program 5 (id=1196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x4, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4, 0x40, 0x2, 0x7, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_address={0x5, 0x6, 0x2b, 0x0, 0xe, @in6={0xa, 0x4e21, 0x4, @mcast2, 0x8}}]}, 0x38}}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 5.375177136s ago: executing program 3 (id=1198): r0 = syz_socket_connect_nvme_tcp() fcntl$getflags(r0, 0x408) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000002) sched_setscheduler(r3, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r3, 0x0, 0x4004) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="000000000081000000000000000000007b8af8ff00000000000007020000f8", @ANYRES32, @ANYRESHEX=0x0, @ANYRESDEC=r0, @ANYRESOCT=r5], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a00", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000060006000000"], 0x4c}}, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa86dd6000000000383a0008880000000000000000000000000001ff0200000000000000000000000000010300a1780a0000006e101074000729fffe8000000000000000000000000000bb20010000000000000000000000000001f738369f031271a1"], 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r10, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) syz_open_pts(r10, 0x28101) 5.362362637s ago: executing program 4 (id=1199): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0xc, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r3, 0x10, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) 3.987925097s ago: executing program 4 (id=1200): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x18) pwrite64(0xffffffffffffffff, 0x0, 0xffffffffffffff4d, 0x7fffffffffffffff) 3.930687922s ago: executing program 3 (id=1201): gettid() timer_create(0x8, 0x0, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd9, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) splice(r4, &(0x7f0000002000)=0xa3b, r2, &(0x7f0000002040)=0x80, 0x0, 0x6) write$binfmt_misc(r4, &(0x7f0000000040)="0b00002525f5b901088300100000b88e9b7879ea000000f959433e14454da6b588ee4b05c04edf3143fa35c42a8ad08cf0e24532c9b25bb96974f345a97783ee0208657e4224ec5eaae35a2356ad9409c3bbf13735da63924602a6a188d919000000000000", 0x65) 3.910934284s ago: executing program 1 (id=1202): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 3.640334642s ago: executing program 5 (id=1203): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x36e, &(0x7f0000000f00)="$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") syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000001c0)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x4, 0x2dc, &(0x7f0000000bc0)="$eJzs3c1uG1UfBvBnEsf221fCXrBCSIwEC1ZV0ytwhFIJkRVVFsACIppKKI6QWikSH8Ltii0bFiy4AiQkLoQNd8AFILGjlSoNmvE4toubj6pu+fj9Nj45c54z/zMZJ5NFjj969fjoVpnb97/8Nf1+kY1RRnlQZJiNzNzLktE3AQD+yR5UVX6vplYdL+6tzhVJ+muuDQBYj/N+/7deOm391L52114aALAmN997/52dvb3dd8uynxvHX5/s13/Z16/T4zu380nGOcy1DPIoaR4UttI8LdTNG1VVTTrlw7Ish3njeHKyXyePP/y5nX/nt6TJb2eQYdN1+rTR5N/e290upxbyk7qOK+35R3X+egZ5+TS8lL++Ip/9bt58faH+qxnkl4/zaca51RQxzfeyt/vVdlm+VX37xxcf1OXV+WJyst9rxs1Vm8/5WwMAAAAAAAAAAAAAAAAAAAAAwL/Y1XbvnF6a/Xvqrnb/nc1H9RdbKWeGy/vzTPPFbKLF/YGqqppU+X62P8+1siyrduA838krnXRezKoBAAAAAAAAAAAAAAAAAADg7+XuZ58fHYzHh3eeSaPYmM7aSfLwZvK084wWel7L8phRstTTa1dyMB63Z8/4cLgwYafpaePZnI0pkjPLqBfxjC7LeY3/LVa42Pjhx8tO2D9/zNbqcz1V48rqazi7u44OitXXsJdZT7+9Sb7rJvMx3VywjO6TDlW5zO3XXVFhMrhIfLbW6Tz/bw5NzkileHJhm6fvy7aneHwV3eaqroxvtY089gaZ3xsXup/Tn8b/+rOisFsHAAAAAAAAAAAAAAAAAACs1fy/f1ccvH9mdKPqra0sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHiu5p//f4nGpA1fYHA3d+6+4CUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwH/BnAAAA//+lXFN6") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) 3.510946805s ago: executing program 5 (id=1204): epoll_create1(0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x40187013, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0x1e57, 0x0, 0x3, 0x3ff, 0x2, "04ad7d2ed56d7fcb3678002e000000000d00", 0x400005, 0x205}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x20400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000100)="cbc6be84bf03f6fa9017eec3fb9eabb8c66f95e01b0bfa7d0bef55d8b9a0a7f443029833704e9f902906e6018c5f29b080c28028614a3ba77a3308c0b8a9dd35e72c1eb430f3f5a71b15cf5e35bad6b5a6", 0x51}], 0x1) pselect6(0x40, &(0x7f00000001c0)={0x100000000, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 2.180190799s ago: executing program 4 (id=1205): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x65) 2.116270206s ago: executing program 1 (id=1206): syz_usb_connect$uac1(0x0, 0x96, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) recvmmsg(0xffffffffffffffff, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000840)=""/204, 0xcc}, {&(0x7f0000000940)=""/121, 0x79}, {&(0x7f0000000a40)=""/206, 0xce}, {0x0}], 0x4, &(0x7f0000000e00)=""/98, 0x62}, 0x3c}], 0x1, 0x40000000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 2.115974476s ago: executing program 3 (id=1207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x276, &(0x7f0000000840)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0xffffffff, 0x7fffffff}, 0x1c) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 2.115786736s ago: executing program 4 (id=1208): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socket$inet6(0xa, 0x3, 0x100) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x18, 0x0, &(0x7f0000000040)=[@clear_death, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) 2.063647201s ago: executing program 5 (id=1209): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) 1.897205498s ago: executing program 4 (id=1210): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000440)=@req={0x28, &(0x7f0000000400)={'syzkaller1\x00', @ifru_settings={0x3, 0x7, @raw_hdlc=&(0x7f0000000300)={0xe, 0xf}}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(0x0, 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r7 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchownat(r8, &(0x7f0000000080)='.\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000000)=0x200) socket$inet6(0xa, 0x2, 0x3a) 1.852368343s ago: executing program 5 (id=1211): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 908.231518ms ago: executing program 3 (id=1212): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000d00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r6, 0x2004, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) 904.089649ms ago: executing program 4 (id=1213): syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000700)=ANY=[@ANYBLOB='E'], 0x31) 801.654129ms ago: executing program 2 (id=1214): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x3, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) inotify_rm_watch(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) accept(r0, 0x0, 0x0) 691.81132ms ago: executing program 2 (id=1215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000080)=0x2906, 0x4) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x1884000, &(0x7f0000000180), 0x42, 0x473, &(0x7f0000000a00)="$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") syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 141.055715ms ago: executing program 1 (id=1216): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1040, 0x1) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) write$uinput_user_dev(r0, &(0x7f0000000ac0)={'syz0\x00', {0x7, 0xfff7, 0x100, 0x4}, 0x19, [0xd7b3, 0x2, 0x7, 0x3, 0x80, 0x1, 0x3, 0xfffffff8, 0x4a, 0x40, 0x60d, 0x7, 0x3, 0x98, 0x8, 0x8, 0x8, 0x8, 0x10, 0x8, 0xfffff801, 0x9, 0xe9, 0x5, 0x101, 0x8, 0x3, 0x6aa1, 0x95, 0x2, 0x100, 0x2, 0x983, 0xf4, 0x24, 0x7f, 0x4, 0x8b60, 0x7, 0x1, 0x9, 0x7, 0x1, 0x7, 0x51, 0x10001, 0x6, 0x8, 0x9c, 0x9, 0x9, 0x3, 0x1, 0xf2, 0x9658, 0x7fff, 0x9, 0x1, 0x9, 0x9, 0x8, 0x7, 0x6, 0x1], [0x1, 0x3, 0x5, 0xff, 0x10001, 0x496e, 0x6, 0x2, 0x10, 0x400, 0x1, 0x7fffffff, 0x1, 0x6, 0x8000, 0xfffffff7, 0x80000001, 0xe44, 0x5, 0x8, 0xe, 0x4, 0x10000, 0x3, 0x7fff, 0x2, 0x3, 0x100, 0x0, 0x6, 0xe, 0x6, 0xb, 0x3, 0x3, 0x9, 0x0, 0x7, 0x40, 0x5, 0x1000, 0x5, 0x9, 0x6, 0x1, 0x7, 0x7, 0x100, 0xdc, 0x2, 0x2, 0x0, 0x6, 0x1, 0x4369, 0x3, 0x2c8, 0x0, 0x6, 0x4, 0x5, 0x10, 0x6, 0xed600], [0x0, 0x9, 0x2, 0x70, 0xfffffffc, 0x40, 0x800, 0x7ff, 0xb, 0x5, 0x80000001, 0x8, 0x3, 0x5, 0x0, 0x6, 0x9, 0x4, 0x8, 0xfffffff8, 0x8, 0x9c5b, 0x6, 0x2, 0x5, 0x8, 0x3ff, 0x29b7367c, 0x3, 0x3, 0xd, 0x3, 0x0, 0x6, 0xfffffffa, 0x7, 0x7, 0x1000, 0x6, 0xfffffffc, 0x9, 0x400, 0xfffffffc, 0x8, 0x3, 0x3, 0x6f20, 0x7, 0x5, 0x10, 0x1, 0xfff, 0x8, 0x94, 0x80000000, 0x8, 0x80000001, 0xff, 0xa, 0x9, 0x2, 0x7f, 0x3, 0xb], [0x0, 0xc7, 0xffff, 0x80b9, 0x100, 0x0, 0x9, 0x6, 0x8214, 0x3, 0x45cc8c1f, 0xbe, 0x8, 0x2, 0x81, 0xfffffffd, 0xfffffffc, 0x3, 0x7, 0x5, 0x9, 0x4, 0xfffffff9, 0x4, 0x101, 0x8, 0x2daf, 0x3, 0x4, 0x1, 0x6, 0x3, 0x3, 0x0, 0x10001, 0x2b, 0xff, 0x5, 0x4, 0x270e, 0x4, 0xf, 0x0, 0x3, 0x8000, 0xc9, 0xb0, 0x6, 0x7, 0x0, 0x2, 0xe649, 0x1dff, 0x8, 0x5, 0xb, 0x5, 0x2, 0x1, 0x846f, 0x5a000000, 0x2574, 0x458f, 0x1]}, 0x45c) 110.576439ms ago: executing program 1 (id=1217): syz_mount_image$erofs(&(0x7f0000000440), &(0x7f0000000180)='./file0\x00', 0x10410, &(0x7f0000000480)=ANY=[], 0x1, 0x1ed, &(0x7f0000000cc0)="$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") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 0s ago: executing program 3 (id=1218): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) kernel console output (not intermixed with test programs): 1356] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.310: error while reading EA inode 1 err=-117 [ 72.080197][ T1356] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 72.093294][ T1356] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.310: inode #1: comm syz.2.310: iget: illegal inode # [ 72.106394][ T1356] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.310: error while reading EA inode 1 err=-117 [ 72.111569][ T30] audit: type=1326 audit(1768189866.090:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1400 comm="syz.0.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e175c0749 code=0x7ffc0000 [ 72.143229][ T1356] EXT4-fs (loop2): 1 orphan inode deleted [ 72.149101][ T1356] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,orlov,minixdf,i_version,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 72.175826][ T30] audit: type=1326 audit(1768189866.090:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1400 comm="syz.0.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9e175c0749 code=0x7ffc0000 [ 72.199285][ T30] audit: type=1326 audit(1768189866.090:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1400 comm="syz.0.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e175c0749 code=0x7ffc0000 [ 72.233071][ T30] audit: type=1326 audit(1768189866.090:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1400 comm="syz.0.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9e175c0749 code=0x7ffc0000 [ 72.256413][ T30] audit: type=1326 audit(1768189866.090:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1400 comm="syz.0.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e175c0749 code=0x7ffc0000 [ 72.292857][ T1403] loop3: detected capacity change from 0 to 40427 [ 72.304062][ T680] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 72.328730][ T1403] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 72.338031][ T1403] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 72.347760][ T1403] F2FS-fs (loop3): invalid crc value [ 72.380985][ T1403] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.434015][ T680] usb 5-1: device descriptor read/8, error -71 [ 72.446146][ T1435] fuse: Bad value for 'fd' [ 72.479524][ T1435] loop2: detected capacity change from 0 to 1024 [ 72.505864][ T1403] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 72.515244][ T1403] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 72.703998][ T680] usb 5-1: device descriptor read/8, error -71 [ 72.729680][ T1435] EXT4-fs error (device loop2): ext4_map_blocks:740: inode #3: block 1: comm syz.2.331: lblock 1 mapped to illegal pblock 1 (length 1) [ 72.748788][ T1437] loop4: detected capacity change from 0 to 40427 [ 72.774476][ T1435] EXT4-fs error (device loop2): ext4_acquire_dquot:6200: comm syz.2.331: Failed to acquire dquot type 0 [ 72.802896][ T1437] F2FS-fs (loop4): fault_injection options not supported [ 72.809024][ T1435] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #3: block 1: comm syz.2.331: lblock 1 mapped to illegal pblock 1 (length 1) [ 72.824200][ T1437] F2FS-fs (loop4): fault_type options not supported [ 72.832124][ T1437] F2FS-fs (loop4): invalid crc value [ 72.867119][ T1437] F2FS-fs (loop4): Found nat_bits in checkpoint [ 72.877054][ T1435] EXT4-fs error (device loop2): ext4_acquire_dquot:6200: comm syz.2.331: Failed to acquire dquot type 0 [ 72.883675][ T1454] loop0: detected capacity change from 0 to 1024 [ 72.907290][ T1435] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz.2.331: Freeing blocks not in datazone - block = 0, count = 4096 [ 72.934628][ T1435] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #3: block 1: comm syz.2.331: lblock 1 mapped to illegal pblock 1 (length 1) [ 72.963351][ T1435] EXT4-fs error (device loop2): ext4_acquire_dquot:6200: comm syz.2.331: Failed to acquire dquot type 0 [ 72.985563][ T1435] EXT4-fs (loop2): 1 orphan inode deleted [ 72.999278][ T1435] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.044034][ T1437] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 73.065018][ T1454] capability: warning: `syz.0.336' uses deprecated v2 capabilities in a way that may be insecure [ 73.090016][ T1442] loop3: detected capacity change from 0 to 40427 [ 73.205274][ T1442] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 73.213085][ T1442] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 73.230441][ T1442] F2FS-fs (loop3): invalid crc value [ 73.557528][ T1442] F2FS-fs (loop3): Found nat_bits in checkpoint [ 73.610660][ T1442] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 73.618048][ T1442] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 73.769632][ T1470] loop4: detected capacity change from 0 to 1024 [ 73.779632][ T1470] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 73.792281][ T1470] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.813697][ T1470] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 73.829502][ T1470] System zones: 0-1, 3-36 [ 73.848929][ T1470] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 74.168523][ T1488] loop4: detected capacity change from 0 to 128 [ 74.251429][ T1488] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.277744][ T1488] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 74.418729][ T1500] loop1: detected capacity change from 0 to 256 [ 74.429940][ T1499] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.437132][ T1499] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.444854][ T1499] device bridge_slave_0 entered promiscuous mode [ 74.453745][ T1499] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.460898][ T1499] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.468316][ T1500] exfat: Bad value for 'uid' [ 74.473672][ T1499] device bridge_slave_1 entered promiscuous mode [ 74.599006][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.614421][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.636125][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.654291][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.664420][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.671611][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.694841][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.713340][ T8] device bridge_slave_1 left promiscuous mode [ 74.722812][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.740890][ T8] device bridge_slave_0 left promiscuous mode [ 74.754048][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.764921][ T8] device veth1_macvtap left promiscuous mode [ 74.770959][ T8] device veth0_vlan left promiscuous mode [ 74.800208][ T1480] loop2: detected capacity change from 0 to 131072 [ 74.888221][ T1480] F2FS-fs (loop2): Found nat_bits in checkpoint [ 74.935466][ T1480] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 74.959236][ T1520] loop4: detected capacity change from 0 to 512 [ 74.970316][ T1520] EXT4-fs (loop4): Invalid want_extra_isize 2 [ 74.980889][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.992652][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.030053][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.037191][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.095838][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.114642][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.123059][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.436160][ T1525] loop4: detected capacity change from 0 to 8192 [ 75.465586][ T1525] FAT-fs (loop4): Unrecognized mount option "§%ó„" or missing value [ 75.531359][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.582162][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.903576][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.943357][ T1499] device veth0_vlan entered promiscuous mode [ 75.980137][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.998589][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.027476][ T1531] loop3: detected capacity change from 0 to 256 [ 76.046175][ T1499] device veth1_macvtap entered promiscuous mode [ 76.065840][ T1531] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.092790][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.101315][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.114332][ T1531] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 76.133327][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.143755][ T1531] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 76.231586][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.242764][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.269562][ T1527] loop1: detected capacity change from 0 to 512 [ 76.269592][ T1536] netlink: 'syz.4.355': attribute type 12 has an invalid length. [ 76.390974][ T1548] netlink: 'syz.5.359': attribute type 5 has an invalid length. [ 76.470175][ T1527] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.497535][ T1548] loop5: detected capacity change from 0 to 128 [ 77.155680][ T1548] attempt to access beyond end of device [ 77.155680][ T1548] loop5: rw=2049, want=1041, limit=128 [ 77.274055][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 77.274074][ T30] audit: type=1400 audit(1768189871.530:514): avc: denied { setattr } for pid=1557 comm="syz.1.361" name="" dev="pipefs" ino=20979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 77.406783][ T30] audit: type=1400 audit(1768189871.590:515): avc: denied { getattr } for pid=1559 comm="syz.1.362" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.433047][ T30] audit: type=1400 audit(1768189871.730:516): avc: denied { append } for pid=1566 comm="syz.5.364" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 77.647535][ T1587] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1587 comm=syz.5.371 [ 77.794447][ T30] audit: type=1326 audit(1768189872.140:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1606 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 77.866757][ T30] audit: type=1326 audit(1768189872.160:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1606 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 77.942160][ T30] audit: type=1326 audit(1768189872.160:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1606 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 77.978946][ T30] audit: type=1326 audit(1768189872.160:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1606 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 78.017606][ T30] audit: type=1326 audit(1768189872.160:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1606 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 78.060034][ T30] audit: type=1326 audit(1768189872.160:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1606 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 78.098885][ T30] audit: type=1326 audit(1768189872.160:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1606 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 78.243816][ T1628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 78.829612][ T1694] loop5: detected capacity change from 0 to 512 [ 78.904024][ T1699] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 79.187395][ T1719] loop1: detected capacity change from 0 to 512 [ 79.313908][ T1723] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 32624. macoff=96 [ 79.697603][ T1754] loop2: detected capacity change from 0 to 256 [ 79.734457][ T1756] tipc: Started in network mode [ 79.739457][ T1756] tipc: Node identity 4, cluster identity 4711 [ 79.754006][ T1756] tipc: Node number set to 4 [ 79.771748][ T1754] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.481444][ T1763] netlink: 24 bytes leftover after parsing attributes in process `syz.5.441'. [ 80.716486][ T1773] syz.4.445[1773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.717610][ T1773] syz.4.445[1773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.794037][ T328] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 81.042781][ T1786] loop4: detected capacity change from 0 to 2048 [ 81.080936][ T1788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.442'. [ 81.097068][ T1786] EXT4-fs (loop4): Unrecognized mount option "fsmagic=0x0000000000000009" or missing value [ 81.214072][ T328] usb 6-1: config 0 has no interfaces? [ 81.464047][ T328] usb 6-1: string descriptor 0 read error: -22 [ 81.470399][ T328] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 81.493352][ T328] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.520476][ T328] usb 6-1: config 0 descriptor?? [ 81.594987][ T1808] loop4: detected capacity change from 0 to 40427 [ 81.607541][ T1808] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 81.615605][ T1808] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 81.625639][ T1808] F2FS-fs (loop4): invalid crc value [ 81.638996][ T1808] F2FS-fs (loop4): Found nat_bits in checkpoint [ 81.668829][ T1821] loop2: detected capacity change from 0 to 8192 [ 81.685383][ T1828] binder: 1827:1828 ioctl c0306201 200000000080 returned -14 [ 81.695605][ T1808] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 81.702781][ T1808] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 81.722853][ T1821] loop2: p1 p2 p4 < > [ 81.727265][ T1821] loop2: partition table partially beyond EOD, truncated [ 81.737778][ T1821] loop2: p1 start 16777216 is beyond EOD, truncated [ 81.747002][ T1821] loop2: p2 size 515840 extends beyond EOD, truncated [ 81.756742][ T1821] loop2: p4 start 16777216 is beyond EOD, truncated [ 81.766114][ T292] usb 6-1: USB disconnect, device number 2 [ 81.856722][ T723] udevd[723]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 82.204033][ T1259] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 82.324473][ T292] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 82.344933][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 82.344949][ T30] audit: type=1400 audit(1768189876.690:574): avc: denied { mount } for pid=1845 comm="syz.5.465" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 82.570645][ T1848] loop5: detected capacity change from 0 to 40427 [ 82.577287][ T292] usb 2-1: Using ep0 maxpacket: 16 [ 82.594617][ T1848] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 82.605813][ T1848] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 82.615678][ T1848] F2FS-fs (loop5): invalid crc_offset: 33558524 [ 82.623569][ T1848] F2FS-fs (loop5): Found nat_bits in checkpoint [ 82.644226][ T1259] usb 5-1: not running at top speed; connect to a high speed hub [ 82.673130][ T1848] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 82.680483][ T1848] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 82.810404][ T1259] usb 5-1: config 214 has an invalid descriptor of length 255, skipping remainder of the config [ 82.821994][ T1259] usb 5-1: config 214 has 0 interfaces, different from the descriptor's value: 1 [ 83.013969][ T292] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 83.025596][ T292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.037024][ T292] usb 2-1: Product: syz [ 83.041521][ T292] usb 2-1: Manufacturer: syz [ 83.050226][ T292] usb 2-1: SerialNumber: syz [ 83.064818][ T1259] usb 5-1: New USB device found, idVendor=5625, idProduct=a494, bcdDevice= 0.40 [ 83.074962][ T1259] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.083403][ T1259] usb 5-1: Product: syz [ 83.091802][ T1259] usb 5-1: Manufacturer: 묫䔮凭鞲ď¤îŚ©ď•śě™żî‡Ąáťľä˝śé«¬ć‘ î­‹î’™ď‡»îžŽęŤ¶č‹ď§’暮ꟼ峮á¦á§á’Ľďşĺ‡‡í‡ˇí§âžŹę·ťĺŻ‡âŚ‚ď†éľšč¨î¤Śă’şâ“”íŚ–ă‘¸äł [ 83.110383][ T1259] usb 5-1: SerialNumber: syz [ 83.167188][ T292] r8152-cfgselector 2-1: config 0 descriptor?? [ 83.208996][ T1259] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 83.233435][ T1259] usb 5-1: no configuration chosen from 1 choice [ 83.754080][ T292] r8152-cfgselector 2-1: Unknown version 0x0000 [ 83.773081][ T20] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 84.005336][ T292] r8152-cfgselector 2-1: Unknown version 0x0000 [ 84.013337][ T292] r8152-cfgselector 2-1: bad CDC descriptors [ 84.044375][ T292] r8152-cfgselector 2-1: Unknown version 0x0000 [ 84.093196][ T292] r8152-cfgselector 2-1: USB disconnect, device number 9 [ 85.019831][ T292] usb 5-1: USB disconnect, device number 14 [ 85.080601][ T30] audit: type=1400 audit(1768189879.420:575): avc: denied { write } for pid=1864 comm="syz.1.471" name="fib_triestat" dev="proc" ino=4026532304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 85.249220][ T1870] loop3: detected capacity change from 0 to 1024 [ 85.844879][ T1870] EXT4-fs (loop3): Test dummy encryption mode enabled [ 85.852009][ T30] audit: type=1400 audit(1768189880.140:576): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 85.913108][ T1870] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 85.960950][ T1881] loop2: detected capacity change from 0 to 128 [ 86.241857][ T30] audit: type=1400 audit(1768189880.470:577): avc: denied { checkpoint_restore } for pid=1882 comm="syz.1.475" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.515122][ T1895] loop3: detected capacity change from 0 to 128 [ 86.527819][ T1895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 86.592849][ T1895] loop3: detected capacity change from 0 to 8192 [ 86.594505][ T292] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 86.621014][ T1903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.479'. [ 86.659637][ T30] audit: type=1400 audit(1768189881.000:578): avc: denied { getattr } for pid=1909 comm="syz.2.483" name="/" dev="dax" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 86.683529][ T30] audit: type=1400 audit(1768189881.010:579): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 86.798451][ T1925] loop3: detected capacity change from 0 to 4096 [ 86.873049][ T1927] loop1: detected capacity change from 0 to 512 [ 86.879660][ T1925] EXT4-fs (loop3): Test dummy encryption mode enabled [ 86.888354][ T1925] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 86.896708][ T1925] System zones: 0-5 [ 86.901400][ T1925] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 86.944002][ T338] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 86.961057][ T1927] loop1: detected capacity change from 0 to 1024 [ 86.974187][ T292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.985936][ T292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.996039][ T292] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.009132][ T292] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.018488][ T292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.027266][ T292] usb 5-1: config 0 descriptor?? [ 87.266262][ T1934] loop3: detected capacity change from 0 to 512 [ 88.237773][ T1934] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 88.382197][ T1934] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.489: bad orphan inode 131083 [ 88.395413][ T1934] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 88.703674][ T30] audit: type=1326 audit(1768189883.040:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1946 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 88.759951][ T30] audit: type=1326 audit(1768189883.070:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1946 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 88.798607][ T30] audit: type=1326 audit(1768189883.070:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1946 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 88.829469][ T1891] incfs: mount failed -22 [ 88.836597][ T30] audit: type=1326 audit(1768189883.070:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1946 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 88.881428][ T1950] netlink: 92 bytes leftover after parsing attributes in process `syz.1.493'. [ 88.896703][ T1950] loop1: detected capacity change from 0 to 512 [ 88.903146][ T30] audit: type=1326 audit(1768189883.070:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1946 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 88.927012][ T292] usbhid 5-1:0.0: can't add hid device: -71 [ 88.933290][ T292] usbhid: probe of 5-1:0.0 failed with error -71 [ 88.967192][ T292] usb 5-1: USB disconnect, device number 15 [ 88.979557][ T30] audit: type=1326 audit(1768189883.070:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1946 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 88.993897][ T338] usb 3-1: device descriptor read/64, error -71 [ 89.015550][ T30] audit: type=1326 audit(1768189883.070:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1946 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 89.040528][ T30] audit: type=1326 audit(1768189883.070:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1946 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 89.065052][ T30] audit: type=1326 audit(1768189883.070:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1946 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 89.080212][ T1950] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.100076][ T1950] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.131031][ T30] audit: type=1326 audit(1768189883.070:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1946 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 89.227684][ T1955] loop3: detected capacity change from 0 to 512 [ 89.273684][ T1963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'. [ 89.289765][ T1963] loop1: detected capacity change from 0 to 512 [ 89.404019][ T338] usb 3-1: device descriptor read/64, error -71 [ 90.524012][ T338] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 90.943571][ T2028] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 90.975941][ T2028] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 91.367422][ T2090] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.665594][ T2270] loop2: detected capacity change from 0 to 256 [ 92.745535][ T2281] fuse: Bad value for 'fd' [ 92.801590][ T2291] loop4: detected capacity change from 0 to 256 [ 92.928008][ T2291] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffff0x0000000000000000" or missing value [ 94.364562][ T30] kauditd_printk_skb: 243 callbacks suppressed [ 94.364584][ T30] audit: type=1400 audit(1768189888.670:833): avc: denied { getopt } for pid=2312 comm="syz.2.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.557033][ T2316] loop2: detected capacity change from 0 to 512 [ 94.566619][ T30] audit: type=1400 audit(1768189888.670:834): avc: denied { ioctl } for pid=2312 comm="syz.2.633" path="socket:[24653]" dev="sockfs" ino=24653 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.661792][ T2316] EXT4-fs (loop2): orphan cleanup on readonly fs [ 94.669306][ T2316] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 94.861540][ T2324] loop1: detected capacity change from 0 to 256 [ 94.907363][ T2324] FAT-fs (loop1): Unrecognized mount option "˙˙˙˙" or missing value [ 94.933140][ T2318] loop4: detected capacity change from 0 to 4096 [ 95.247225][ T2318] EXT4-fs (loop4): Test dummy encryption mode enabled [ 95.275437][ T2318] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 95.387305][ T30] audit: type=1400 audit(1768189889.730:835): avc: denied { setattr } for pid=2317 comm="syz.4.637" name="/" dev="incremental-fs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.541102][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 95.558690][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.584407][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 95.611406][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.683264][ T2316] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 95.708025][ T2316] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.636: attempt to clear invalid blocks 2 len 1 [ 95.715911][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.730486][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.739213][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.747713][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.759770][ T2316] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.636: invalid indirect mapped block 1819239214 (level 0) [ 95.851835][ T2346] loop1: detected capacity change from 0 to 2048 [ 95.894011][ T680] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 95.932774][ T2346] loop1: p4 < > [ 95.952887][ T101] loop1: p4 < > [ 95.963846][ T2316] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.636: invalid indirect mapped block 1819239214 (level 1) [ 95.978189][ T2316] EXT4-fs (loop2): 1 truncate cleaned up [ 95.982831][ T30] audit: type=1400 audit(1768189890.320:836): avc: denied { mount } for pid=2349 comm="syz.5.645" name="/" dev="configfs" ino=13206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 95.983877][ T2316] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 95.997485][ T2316] EXT4-fs error (device loop2): ext4_remount:6026: comm syz.2.636: Abort forced by user [ 96.032689][ T2316] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 96.043862][ T30] audit: type=1400 audit(1768189890.380:837): avc: denied { search } for pid=2349 comm="syz.5.645" name="/" dev="configfs" ino=13206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.132080][ T30] audit: type=1400 audit(1768189890.380:838): avc: denied { read } for pid=2349 comm="syz.5.645" name="/" dev="configfs" ino=13206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.171617][ T30] audit: type=1400 audit(1768189890.380:839): avc: denied { open } for pid=2349 comm="syz.5.645" path="/" dev="configfs" ino=13206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.176539][ T723] udevd[723]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 96.194265][ T680] usb 4-1: Using ep0 maxpacket: 16 [ 96.214148][ T30] audit: type=1107 audit(1768189890.500:840): pid=2315 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='#' [ 96.364551][ T680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.425424][ T680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.485223][ T680] usb 4-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 96.534573][ T680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.569273][ T680] usb 4-1: config 0 descriptor?? [ 96.665614][ T2376] x_tables: duplicate underflow at hook 2 [ 96.903006][ T2388] device syzkaller0 entered promiscuous mode [ 97.085399][ T680] logitech-hidpp-device 0003:046D:C091.000B: item fetching failed at offset 1/5 [ 97.104164][ T680] logitech-hidpp-device 0003:046D:C091.000B: hidpp_probe:parse failed [ 97.122608][ T680] logitech-hidpp-device: probe of 0003:046D:C091.000B failed with error -22 [ 97.284236][ T2328] UDC core: couldn't find an available UDC or it's busy: -16 [ 97.301998][ T2328] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 97.312337][ T328] usb 4-1: USB disconnect, device number 11 [ 97.455990][ T2388] loop1: detected capacity change from 0 to 131072 [ 97.552934][ T30] audit: type=1400 audit(1768189891.890:841): avc: denied { getopt } for pid=2391 comm="syz.5.656" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.574905][ T2388] F2FS-fs (loop1): Test dummy encryption mode enabled [ 97.628921][ T2388] F2FS-fs (loop1): Unrecognized mount option "fsname=;/@+?" or missing value [ 97.641194][ T30] audit: type=1400 audit(1768189891.980:842): avc: denied { rmdir } for pid=285 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.790586][ T2395] tipc: Failed to remove unknown binding: 66,1,1/0:4183710857/4183710859 [ 97.799610][ T2395] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1025 sclass=netlink_audit_socket pid=2395 comm=syz.2.657 [ 97.866796][ T2400] netlink: 27 bytes leftover after parsing attributes in process `syz.4.658'. [ 97.938519][ T2399] loop4: detected capacity change from 0 to 1024 [ 98.031730][ T2399] EXT4-fs (loop4): quotafile must be on filesystem root [ 98.071425][ T2416] loop3: detected capacity change from 0 to 2048 [ 98.080925][ T2419] loop1: detected capacity change from 0 to 256 [ 98.133997][ T2407] loop2: detected capacity change from 0 to 40427 [ 98.145509][ T352] loop3: p3 < > p4 < > [ 98.149721][ T352] loop3: partition table partially beyond EOD, truncated [ 98.171467][ T352] loop3: p3 start 4284289 is beyond EOD, truncated [ 98.225158][ T2416] loop3: p3 < > p4 < > [ 98.233268][ T2416] loop3: partition table partially beyond EOD, truncated [ 98.240652][ T2416] loop3: p3 start 4284289 is beyond EOD, truncated [ 98.248606][ T2407] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 98.283617][ T2407] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 98.311304][ T2407] F2FS-fs (loop2): invalid crc value [ 98.430086][ T2407] F2FS-fs (loop2): Found nat_bits in checkpoint [ 98.447545][ T352] udevd[352]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 98.469618][ T2442] loop3: detected capacity change from 0 to 512 [ 98.480387][ T2442] EXT4-fs (loop3): Ignoring removed bh option [ 98.495550][ T723] udevd[723]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 98.512295][ T2454] loop1: detected capacity change from 0 to 512 [ 98.518734][ T2442] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 98.533275][ T2442] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.558613][ T2407] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 98.565928][ T2407] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 98.577230][ T2454] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 98.623854][ T2454] EXT4-fs (loop1): group descriptors corrupted! [ 98.671517][ T2506] loop4: detected capacity change from 0 to 128 [ 98.768547][ T2407] incfs: Error accessing: ./file0. [ 98.774525][ T2407] incfs: mount failed -20 [ 99.114058][ T2518] fuse: Bad value for 'fd' [ 99.234551][ T2523] loop2: detected capacity change from 0 to 128 [ 99.314482][ T2523] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 99.325391][ T2523] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 100.351614][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 100.351656][ T30] audit: type=1400 audit(1768189894.690:914): avc: denied { getopt } for pid=2530 comm="syz.1.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.614521][ T2551] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1 sclass=netlink_xfrm_socket pid=2551 comm=syz.2.683 [ 100.641789][ T30] audit: type=1400 audit(1768189894.980:915): avc: denied { read } for pid=2555 comm="syz.2.685" dev="sockfs" ino=25063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.666741][ T2556] 9pnet: Insufficient options for proto=fd [ 100.677450][ T2556] netlink: 'syz.2.685': attribute type 27 has an invalid length. [ 100.714242][ T2556] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.721592][ T2556] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.792116][ T2562] loop4: detected capacity change from 0 to 512 [ 100.802116][ T2562] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 100.814100][ T2562] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 101.858578][ T2562] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 101.894668][ T2562] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2229: inode #15: comm syz.4.686: corrupted in-inode xattr [ 101.916417][ T2559] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.917044][ T2562] EXT4-fs (loop4): Remounting filesystem read-only [ 101.923518][ T2559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.938966][ T2559] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.946254][ T2559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.963538][ T2559] device veth0_vlan left promiscuous mode [ 101.969512][ T2562] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.686: couldn't read orphan inode 15 (err -117) [ 101.970494][ T2559] device veth0_vlan entered promiscuous mode [ 101.989944][ T2559] device veth1_macvtap left promiscuous mode [ 101.997153][ T2559] device veth1_macvtap entered promiscuous mode [ 102.003162][ T2562] EXT4-fs (loop4): Remounting filesystem read-only [ 102.010082][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.010789][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.034610][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.047608][ T2562] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000000,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,usrjquota=,nombcache,noquota,grpquota,nodiscard,. Quota mode: writeback. [ 102.071316][ T2562] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev loop4, type ext3) errno=-22 [ 102.076320][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.095047][ T2583] loop2: detected capacity change from 0 to 16 [ 102.104210][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.117880][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.126961][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.136201][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.144579][ T2583] erofs: (device loop2): mounted with root inode @ nid 36. [ 102.154616][ T48] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 102.211136][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.236173][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.244719][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.253237][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 102.288065][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.299925][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 102.308370][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.316694][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.325032][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.333330][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.341831][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.362167][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 102.373831][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 102.388243][ T2565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'. [ 102.567556][ T2601] loop2: detected capacity change from 0 to 512 [ 102.584099][ T2601] EXT4-fs (loop2): Unrecognized mount option "mb_optimize_scan=0x0000000000000000"fowner<00000000000000000000" or missing value [ 102.724032][ T2502] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 103.026423][ T2611] loop1: detected capacity change from 0 to 512 [ 103.057015][ T2611] EXT4-fs (loop1): Unrecognized mount option "mb_optimize_scan=0x0000000000000000"fowner<00000000000000000000" or missing value [ 103.324049][ T2502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.335140][ T2502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.345365][ T2502] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.358583][ T2502] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.367875][ T2502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.381352][ T2502] usb 4-1: config 0 descriptor?? [ 103.471017][ T2619] loop4: detected capacity change from 0 to 1024 [ 103.526249][ T2619] EXT4-fs (loop4): Ignoring removed nobh option [ 103.556249][ T2619] EXT4-fs (loop4): Ignoring removed bh option [ 103.569583][ T2619] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.605492][ T2619] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,errors=remount-ro,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004005b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,. Quota mode: writeback. [ 103.729554][ T2626] loop1: detected capacity change from 0 to 4096 [ 103.748125][ T2626] EXT4-fs (loop1): Test dummy encryption mode enabled [ 103.758827][ T2626] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 103.770404][ T2626] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 103.922013][ T2502] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 103.932680][ T2502] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 103.978788][ T2633] loop4: detected capacity change from 0 to 512 [ 104.023871][ T2633] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 104.034068][ T2633] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 104.042152][ T2633] System zones: 0-1, 15-15, 18-18, 34-34 [ 104.088429][ T2633] EXT4-fs (loop4): orphan cleanup on readonly fs [ 104.096455][ T2633] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 104.106233][ T2633] EXT4-fs warning (device loop4): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 104.120921][ T2633] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 104.127953][ T2633] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.707: bg 0: block 40: padding at end of block bitmap is not set [ 104.162675][ T2633] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 104.183109][ T2633] EXT4-fs (loop4): 1 truncate cleaned up [ 104.188832][ T2633] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 104.205092][ T2642] loop2: detected capacity change from 0 to 256 [ 104.246888][ T2642] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 104.261679][ T30] audit: type=1400 audit(1768189898.600:916): avc: denied { rmdir } for pid=2629 comm="syz.2.709" name="file0" dev="loop2" ino=1048616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.432314][ T2684] loop1: detected capacity change from 0 to 1024 [ 105.486505][ T2690] loop4: detected capacity change from 0 to 1024 [ 105.511757][ T2684] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 105.521750][ T2684] EXT4-fs (loop1): orphan cleanup on readonly fs [ 105.606792][ T2684] EXT4-fs error (device loop1): ext4_free_blocks:6218: comm syz.1.725: Freeing blocks not in datazone - block = 0, count = 4096 [ 105.641287][ T2690] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 105.680583][ T2684] EXT4-fs (loop1): 1 orphan inode deleted [ 105.688282][ T2690] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.699696][ T2684] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.724212][ T2499] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 106.353318][ T2698] loop3: detected capacity change from 0 to 1024 [ 106.520183][ T2710] loop3: detected capacity change from 0 to 256 [ 106.539772][ T2710] exfat: Unknown parameter 'keep_last_dots' [ 106.612982][ T2712] loop2: detected capacity change from 0 to 1024 [ 106.762728][ T2708] netlink: 16 bytes leftover after parsing attributes in process `syz.5.734'. [ 106.793986][ T2500] usb 4-1: USB disconnect, device number 12 [ 106.840254][ T2721] loop1: detected capacity change from 0 to 128 [ 106.931910][ T2721] EXT4-fs (loop1): Test dummy encryption mode enabled [ 106.966600][ T2721] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,stripe=0x000000000000ba5c,,errors=continue. Quota mode: none. [ 106.987189][ T2721] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.134633][ T2499] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 107.634019][ T2499] usb 5-1: unable to get BOS descriptor or descriptor too short [ 107.642523][ T2742] loop3: detected capacity change from 0 to 1024 [ 107.725107][ T2742] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 107.735148][ T2499] usb 5-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.748320][ T2742] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 107.758346][ T2499] usb 5-1: config 1 interface 0 has no altsetting 0 [ 107.765469][ T2742] EXT4-fs error (device loop3): ext4_get_journal_inode:5151: inode #32: comm syz.3.745: iget: special inode unallocated [ 107.778393][ T2742] EXT4-fs (loop3): no journal found [ 107.783661][ T2742] EXT4-fs (loop3): can't get journal size [ 107.791832][ T2742] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 107.884245][ T2712] EXT4-fs (loop2): Ignoring removed nobh option [ 107.895859][ T2712] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.083992][ T2501] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 108.134155][ T2499] usb 5-1: string descriptor 0 read error: -22 [ 108.140468][ T2499] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.149919][ T2499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.196157][ T2499] cdc_ether 5-1:1.0: skipping garbage [ 108.201904][ T2499] cdc_ether 5-1:1.0: skipping garbage [ 108.208095][ T2499] cdc_ether 5-1:1.0: invalid descriptor buffer length [ 108.215228][ T2499] usb 5-1: bad CDC descriptors [ 108.396549][ T2499] usb 5-1: USB disconnect, device number 16 [ 108.422679][ T30] audit: type=1400 audit(1768189902.730:917): avc: denied { nlmsg_read } for pid=2729 comm="syz.1.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 108.466217][ T2712] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,nojournal_checksum,barrier=0x0000000000000002,dioread_lock,nolazytime,resgid=0x0000000000000000,jqfmt=vfsold,journal_dev=0x0000000000000800,nobh,inlinecrypt,bsddf,dioread_nolock,,errors=continue. Quota mode: none. [ 108.564105][ T2501] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.574720][ T2501] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 108.583665][ T2501] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 108.695028][ T2762] loop1: detected capacity change from 0 to 1024 [ 108.754277][ T2501] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 108.763566][ T2501] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.771895][ T2501] usb 4-1: Product: syz [ 108.777327][ T2501] usb 4-1: Manufacturer: syz [ 108.781960][ T2501] usb 4-1: SerialNumber: syz [ 108.791455][ T2501] usb 4-1: config 0 descriptor?? [ 108.799026][ T2762] EXT4-fs (loop1): Ignoring removed nobh option [ 108.811187][ T2762] EXT4-fs (loop1): Ignoring removed bh option [ 108.817792][ T2762] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.835471][ T2762] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,nodelalloc,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,nodiscard,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 108.884648][ T2762] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.749: Allocating blocks 497-513 which overlap fs metadata [ 108.899495][ T2762] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.749: Allocating blocks 497-513 which overlap fs metadata [ 109.085113][ T2501] usb 4-1: Found UVC 34.00 device syz (8086:0b5b) [ 109.128402][ T2501] usb 4-1: No valid video chain found. [ 109.218845][ T2501] usb 4-1: USB disconnect, device number 13 [ 109.329753][ T2779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.759'. [ 109.340021][ T2779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.759'. [ 109.349644][ T30] audit: type=1400 audit(1768189903.690:918): avc: denied { relabelfrom } for pid=2781 comm="syz.2.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 109.372282][ T30] audit: type=1400 audit(1768189903.690:919): avc: denied { relabelto } for pid=2781 comm="syz.2.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 110.050592][ T2798] ipt_REJECT: ECHOREPLY no longer supported. [ 110.204075][ T590] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 110.264192][ T30] audit: type=1400 audit(1768189904.590:920): avc: denied { create } for pid=2799 comm="syz.3.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 111.455829][ T2824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'. [ 111.493138][ T2824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'. [ 111.913969][ T2500] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 112.154068][ T2500] usb 5-1: Using ep0 maxpacket: 16 [ 112.314105][ T2500] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 112.359552][ T2500] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.512909][ T590] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 112.525336][ T2500] usb 5-1: config 0 descriptor?? [ 112.578629][ T590] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 112.608239][ T590] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 112.628691][ T590] usb 2-1: config 8 has no interface number 0 [ 112.646591][ T590] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 112.684084][ T30] audit: type=1400 audit(1768189907.020:921): avc: denied { read } for pid=2860 comm="syz.2.788" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 112.716060][ T30] audit: type=1400 audit(1768189907.020:922): avc: denied { open } for pid=2860 comm="syz.2.788" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 112.724522][ T590] usb 2-1: string descriptor 0 read error: -71 [ 112.747157][ T30] audit: type=1400 audit(1768189907.020:923): avc: denied { ioctl } for pid=2860 comm="syz.2.788" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 112.800074][ T2501] usb 5-1: USB disconnect, device number 17 [ 112.847283][ T590] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 112.856870][ T590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.884080][ T590] usb 2-1: can't set config #8, error -71 [ 112.891660][ T590] usb 2-1: USB disconnect, device number 10 [ 113.698682][ T2884] loop4: detected capacity change from 0 to 4096 [ 113.745224][ T2884] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 113.803303][ T2884] EXT4-fs warning (device loop4): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 113.869261][ T2889] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 113.900203][ T2889] EXT4-fs warning (device loop4): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 113.956055][ T2892] loop1: detected capacity change from 0 to 1024 [ 114.141809][ T2902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 114.164939][ T2892] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 114.189550][ T2892] EXT4-fs (loop1): Ignoring removed oldalloc option [ 114.226232][ T2892] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 114.396161][ T2892] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 114.412817][ T2892] System zones: 0-1, 3-36 [ 114.583313][ T2892] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: writeback. [ 114.865847][ T2913] loop4: detected capacity change from 0 to 128 [ 115.176651][ T2919] loop2: detected capacity change from 0 to 512 [ 115.261409][ T2919] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 115.429002][ T2919] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.657461][ T2940] loop1: detected capacity change from 0 to 256 [ 115.780467][ T2940] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 115.848697][ T2943] hub 9-0:1.0: USB hub found [ 115.853568][ T2943] hub 9-0:1.0: 1 port detected [ 116.027094][ T2941] loop4: detected capacity change from 0 to 256 [ 116.133965][ T2502] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 116.195446][ T2941] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.211329][ T2941] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 116.233025][ T2941] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 116.298795][ T30] audit: type=1400 audit(1768189910.640:924): avc: denied { rename } for pid=2937 comm="syz.4.815" name="bus" dev="loop4" ino=1048620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.393992][ T2502] usb 2-1: Using ep0 maxpacket: 16 [ 116.477807][ T30] audit: type=1326 audit(1768189910.820:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.4.823" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f20d973e749 code=0x0 [ 116.554116][ T2502] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.575018][ T2502] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 116.615359][ T2980] loop2: detected capacity change from 0 to 512 [ 116.754076][ T2502] usb 2-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 116.773335][ T2502] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.793526][ T2502] usb 2-1: Product: syz [ 116.798148][ T2502] usb 2-1: Manufacturer: syz [ 116.802789][ T2502] usb 2-1: SerialNumber: syz [ 116.819120][ T2502] usb 2-1: config 0 descriptor?? [ 116.924552][ T30] audit: type=1326 audit(1768189911.270:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.5.833" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1663a0e749 code=0x0 [ 117.023488][ T3009] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1420284373 (45449099936 ns) > initial count (5257758976 ns). Using initial count to start timer. [ 117.042991][ T3009] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1420284373 (45449099936 ns) > initial count (5257758976 ns). Using initial count to start timer. [ 117.126475][ T3017] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 117.435935][ T3035] device syzkaller0 entered promiscuous mode [ 117.543181][ T3042] loop4: detected capacity change from 0 to 2048 [ 117.597244][ T3042] loop4: p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 117.597922][ T3042] loop4: p2 start 50594308 is beyond EOD, truncated [ 117.736247][ T3042] loop4: p5 start 50594308 is beyond EOD, truncated [ 117.748467][ T3042] loop4: p6 start 50594308 is beyond EOD, truncated [ 117.763032][ T3042] loop4: p7 start 50594308 is beyond EOD, truncated [ 117.777535][ T3042] loop4: p8 start 50594308 is beyond EOD, truncated [ 117.790909][ T3042] loop4: p9 start 50594308 is beyond EOD, truncated [ 117.805408][ T3042] loop4: p10 start 50594308 is beyond EOD, truncated [ 117.818312][ T3042] loop4: p11 start 50594308 is beyond EOD, truncated [ 117.825967][ T3042] loop4: p12 start 50594308 is beyond EOD, truncated [ 117.832808][ T3042] loop4: p13 start 50594308 is beyond EOD, truncated [ 117.840005][ T3042] loop4: p14 start 50594308 is beyond EOD, truncated [ 117.848064][ T3042] loop4: p15 start 50594308 is beyond EOD, truncated [ 117.862670][ T3042] loop4: p16 start 50594308 is beyond EOD, truncated [ 117.877136][ T3042] loop4: p17 start 50594308 is beyond EOD, truncated [ 117.891625][ T3042] loop4: p18 start 50594308 is beyond EOD, truncated [ 117.900052][ T3042] loop4: p19 start 50594308 is beyond EOD, truncated [ 117.907093][ T3042] loop4: p20 start 50594308 is beyond EOD, truncated [ 117.914195][ T3042] loop4: p21 start 50594308 is beyond EOD, truncated [ 117.920988][ T3042] loop4: p22 start 50594308 is beyond EOD, truncated [ 117.928095][ T3042] loop4: p23 start 50594308 is beyond EOD, truncated [ 117.943638][ T3042] loop4: p24 start 50594308 is beyond EOD, truncated [ 117.958189][ T3042] loop4: p25 start 50594308 is beyond EOD, truncated [ 117.972594][ T3042] loop4: p26 start 50594308 is beyond EOD, truncated [ 118.010619][ T3042] loop4: p27 start 50594308 is beyond EOD, truncated [ 118.034804][ T3042] loop4: p28 start 50594308 is beyond EOD, truncated [ 118.042647][ T3042] loop4: p29 start 50594308 is beyond EOD, truncated [ 118.050396][ T3042] loop4: p30 start 50594308 is beyond EOD, truncated [ 118.057557][ T3042] loop4: p31 start 50594308 is beyond EOD, truncated [ 118.064949][ T3042] loop4: p32 start 50594308 is beyond EOD, truncated [ 118.071838][ T3042] loop4: p33 start 50594308 is beyond EOD, truncated [ 118.078888][ T3042] loop4: p34 start 50594308 is beyond EOD, truncated [ 118.086149][ T3042] loop4: p35 start 50594308 is beyond EOD, truncated [ 118.093145][ T3042] loop4: p36 start 50594308 is beyond EOD, truncated [ 118.100695][ T3042] loop4: p37 start 50594308 is beyond EOD, truncated [ 118.107653][ T3042] loop4: p38 start 50594308 is beyond EOD, truncated [ 118.114771][ T3042] loop4: p39 start 50594308 is beyond EOD, truncated [ 118.121553][ T3042] loop4: p40 start 50594308 is beyond EOD, truncated [ 118.128751][ T3042] loop4: p41 start 50594308 is beyond EOD, truncated [ 118.135782][ T3042] loop4: p42 start 50594308 is beyond EOD, truncated [ 118.142675][ T3042] loop4: p43 start 50594308 is beyond EOD, truncated [ 118.149697][ T3042] loop4: p44 start 50594308 is beyond EOD, truncated [ 118.157312][ T3042] loop4: p45 start 50594308 is beyond EOD, truncated [ 118.164279][ T3042] loop4: p46 start 50594308 is beyond EOD, truncated [ 118.171161][ T3042] loop4: p47 start 50594308 is beyond EOD, truncated [ 118.178223][ T3042] loop4: p48 start 50594308 is beyond EOD, truncated [ 118.185266][ T3042] loop4: p49 start 50594308 is beyond EOD, truncated [ 118.192058][ T3042] loop4: p50 start 50594308 is beyond EOD, truncated [ 118.199231][ T3042] loop4: p51 start 50594308 is beyond EOD, truncated [ 118.206198][ T3042] loop4: p52 start 50594308 is beyond EOD, truncated [ 118.213080][ T3042] loop4: p53 start 50594308 is beyond EOD, truncated [ 118.220213][ T3042] loop4: p54 start 50594308 is beyond EOD, truncated [ 118.227330][ T3042] loop4: p55 start 50594308 is beyond EOD, truncated [ 118.234398][ T3042] loop4: p56 start 50594308 is beyond EOD, truncated [ 118.241320][ T3042] loop4: p57 start 50594308 is beyond EOD, truncated [ 118.248522][ T3042] loop4: p58 start 50594308 is beyond EOD, truncated [ 118.255601][ T3042] loop4: p59 start 50594308 is beyond EOD, truncated [ 118.262379][ T3042] loop4: p60 start 50594308 is beyond EOD, truncated [ 118.269486][ T3042] loop4: p61 start 50594308 is beyond EOD, truncated [ 118.276468][ T3042] loop4: p62 start 50594308 is beyond EOD, truncated [ 118.283338][ T3042] loop4: p63 start 50594308 is beyond EOD, truncated [ 118.290354][ T3042] loop4: p64 start 50594308 is beyond EOD, truncated [ 118.298330][ T3042] loop4: p65 start 50594308 is beyond EOD, truncated [ 118.311818][ T3042] loop4: p66 start 50594308 is beyond EOD, truncated [ 118.326910][ T3042] loop4: p67 start 50594308 is beyond EOD, truncated [ 118.340206][ T3042] loop4: p68 start 50594308 is beyond EOD, truncated [ 118.360310][ T3042] loop4: p69 start 50594308 is beyond EOD, truncated [ 118.373553][ T3042] loop4: p70 start 50594308 is beyond EOD, truncated [ 118.388603][ T3042] loop4: p71 start 50594308 is beyond EOD, truncated [ 118.399142][ T3042] loop4: p72 start 50594308 is beyond EOD, truncated [ 118.406475][ T3042] loop4: p73 start 50594308 is beyond EOD, truncated [ 118.413240][ T3042] loop4: p74 start 50594308 is beyond EOD, truncated [ 118.420410][ T3042] loop4: p75 start 50594308 is beyond EOD, truncated [ 118.428110][ T3042] loop4: p76 start 50594308 is beyond EOD, truncated [ 118.435265][ T3042] loop4: p77 start 50594308 is beyond EOD, truncated [ 118.442306][ T3042] loop4: p78 start 50594308 is beyond EOD, truncated [ 118.449492][ T3042] loop4: p79 start 50594308 is beyond EOD, truncated [ 118.456871][ T3042] loop4: p80 start 50594308 is beyond EOD, truncated [ 118.463737][ T3042] loop4: p81 start 50594308 is beyond EOD, truncated [ 118.482914][ T3042] loop4: p82 start 50594308 is beyond EOD, truncated [ 118.490075][ T3042] loop4: p83 start 50594308 is beyond EOD, truncated [ 118.497106][ T3042] loop4: p84 start 50594308 is beyond EOD, truncated [ 118.510748][ T365] usb 2-1: USB disconnect, device number 11 [ 118.518897][ T3042] loop4: p85 start 50594308 is beyond EOD, truncated [ 118.527433][ T3042] loop4: p86 start 50594308 is beyond EOD, truncated [ 118.545935][ T3042] loop4: p87 start 50594308 is beyond EOD, truncated [ 118.552771][ T3042] loop4: p88 start 50594308 is beyond EOD, truncated [ 118.575250][ T3042] loop4: p89 start 50594308 is beyond EOD, truncated [ 118.582218][ T3042] loop4: p90 start 50594308 is beyond EOD, truncated [ 118.591006][ T3042] loop4: p91 start 50594308 is beyond EOD, truncated [ 118.598047][ T3042] loop4: p92 start 50594308 is beyond EOD, truncated [ 118.605035][ T3042] loop4: p93 start 50594308 is beyond EOD, truncated [ 118.611846][ T3042] loop4: p94 start 50594308 is beyond EOD, truncated [ 118.618868][ T3042] loop4: p95 start 50594308 is beyond EOD, truncated [ 118.626082][ T3042] loop4: p96 start 50594308 is beyond EOD, truncated [ 118.632881][ T3042] loop4: p97 start 50594308 is beyond EOD, truncated [ 118.640075][ T3042] loop4: p98 start 50594308 is beyond EOD, truncated [ 118.647377][ T3042] loop4: p99 start 50594308 is beyond EOD, truncated [ 118.654395][ T3042] loop4: p100 start 50594308 is beyond EOD, truncated [ 118.661404][ T3042] loop4: p101 start 50594308 is beyond EOD, truncated [ 118.668703][ T3042] loop4: p102 start 50594308 is beyond EOD, truncated [ 118.675828][ T3042] loop4: p103 start 50594308 is beyond EOD, truncated [ 118.682716][ T3042] loop4: p104 start 50594308 is beyond EOD, truncated [ 118.690059][ T3042] loop4: p105 start 50594308 is beyond EOD, truncated [ 118.697108][ T3042] loop4: p106 start 50594308 is beyond EOD, truncated [ 118.704112][ T3042] loop4: p107 start 50594308 is beyond EOD, truncated [ 118.710989][ T3042] loop4: p108 start 50594308 is beyond EOD, truncated [ 118.717994][ T3042] loop4: p109 start 50594308 is beyond EOD, truncated [ 118.725378][ T3042] loop4: p110 start 50594308 is beyond EOD, truncated [ 118.732298][ T3042] loop4: p111 start 50594308 is beyond EOD, truncated [ 118.740189][ T3042] loop4: p112 start 50594308 is beyond EOD, truncated [ 118.747283][ T3042] loop4: p113 start 50594308 is beyond EOD, truncated [ 118.754532][ T3042] loop4: p114 start 50594308 is beyond EOD, truncated [ 118.761398][ T3042] loop4: p115 start 50594308 is beyond EOD, truncated [ 118.768515][ T3042] loop4: p116 start 50594308 is beyond EOD, truncated [ 118.775485][ T3042] loop4: p117 start 50594308 is beyond EOD, truncated [ 118.782367][ T3042] loop4: p118 start 50594308 is beyond EOD, truncated [ 118.789554][ T3042] loop4: p119 start 50594308 is beyond EOD, truncated [ 118.796604][ T3042] loop4: p120 start 50594308 is beyond EOD, truncated [ 118.803463][ T3042] loop4: p121 start 50594308 is beyond EOD, truncated [ 118.810604][ T3042] loop4: p122 start 50594308 is beyond EOD, truncated [ 118.817611][ T3042] loop4: p123 start 50594308 is beyond EOD, truncated [ 118.824733][ T3042] loop4: p124 start 50594308 is beyond EOD, truncated [ 118.831591][ T3042] loop4: p125 start 50594308 is beyond EOD, truncated [ 118.838710][ T3042] loop4: p126 start 50594308 is beyond EOD, truncated [ 118.845741][ T3042] loop4: p127 start 50594308 is beyond EOD, truncated [ 118.852640][ T3042] loop4: p128 start 50594308 is beyond EOD, truncated [ 118.859776][ T3042] loop4: p129 start 50594308 is beyond EOD, truncated [ 118.866870][ T3042] loop4: p130 start 50594308 is beyond EOD, truncated [ 118.874239][ T3042] loop4: p131 start 50594308 is beyond EOD, truncated [ 118.881155][ T3042] loop4: p132 start 50594308 is beyond EOD, truncated [ 118.888261][ T3042] loop4: p133 start 50594308 is beyond EOD, truncated [ 118.895283][ T3042] loop4: p134 start 50594308 is beyond EOD, truncated [ 118.902135][ T3042] loop4: p135 start 50594308 is beyond EOD, truncated [ 118.909361][ T3042] loop4: p136 start 50594308 is beyond EOD, truncated [ 118.916425][ T3042] loop4: p137 start 50594308 is beyond EOD, truncated [ 118.923310][ T3042] loop4: p138 start 50594308 is beyond EOD, truncated [ 118.930418][ T3042] loop4: p139 start 50594308 is beyond EOD, truncated [ 118.937444][ T3042] loop4: p140 start 50594308 is beyond EOD, truncated [ 118.950879][ T3042] loop4: p141 start 50594308 is beyond EOD, truncated [ 118.958033][ T3042] loop4: p142 start 50594308 is beyond EOD, truncated [ 118.965379][ T3042] loop4: p143 start 50594308 is beyond EOD, truncated [ 118.972395][ T3042] loop4: p144 start 50594308 is beyond EOD, truncated [ 118.979286][ T3042] loop4: p145 start 50594308 is beyond EOD, truncated [ 118.986503][ T3042] loop4: p146 start 50594308 is beyond EOD, truncated [ 118.993373][ T3042] loop4: p147 start 50594308 is beyond EOD, truncated [ 119.000430][ T3042] loop4: p148 start 50594308 is beyond EOD, truncated [ 119.030718][ T3042] loop4: p149 start 50594308 is beyond EOD, truncated [ 119.044916][ T3042] loop4: p150 start 50594308 is beyond EOD, truncated [ 119.051844][ T3042] loop4: p151 start 50594308 is beyond EOD, truncated [ 119.060241][ T3042] loop4: p152 start 50594308 is beyond EOD, truncated [ 119.082627][ T3042] loop4: p153 start 50594308 is beyond EOD, truncated [ 119.091257][ T3042] loop4: p154 start 50594308 is beyond EOD, truncated [ 119.098678][ T3042] loop4: p155 start 50594308 is beyond EOD, truncated [ 119.121742][ T3042] loop4: p156 start 50594308 is beyond EOD, truncated [ 119.129140][ T3042] loop4: p157 start 50594308 is beyond EOD, truncated [ 119.156194][ T3042] loop4: p158 start 50594308 is beyond EOD, truncated [ 119.174947][ T3042] loop4: p159 start 50594308 is beyond EOD, truncated [ 119.181791][ T3042] loop4: p160 start 50594308 is beyond EOD, truncated [ 119.188691][ T3042] loop4: p161 start 50594308 is beyond EOD, truncated [ 119.196272][ T3042] loop4: p162 start 50594308 is beyond EOD, truncated [ 119.203291][ T3042] loop4: p163 start 50594308 is beyond EOD, truncated [ 119.210512][ T3042] loop4: p164 start 50594308 is beyond EOD, truncated [ 119.217363][ T3042] loop4: p165 start 50594308 is beyond EOD, truncated [ 119.224182][ T3042] loop4: p166 start 50594308 is beyond EOD, truncated [ 119.230981][ T3042] loop4: p167 start 50594308 is beyond EOD, truncated [ 119.237816][ T3042] loop4: p168 start 50594308 is beyond EOD, truncated [ 119.244807][ T3042] loop4: p169 start 50594308 is beyond EOD, truncated [ 119.251667][ T3042] loop4: p170 start 50594308 is beyond EOD, truncated [ 119.258703][ T3042] loop4: p171 start 50594308 is beyond EOD, truncated [ 119.265583][ T3042] loop4: p172 start 50594308 is beyond EOD, truncated [ 119.272488][ T3042] loop4: p173 start 50594308 is beyond EOD, truncated [ 119.279318][ T3042] loop4: p174 start 50594308 is beyond EOD, truncated [ 119.286191][ T3042] loop4: p175 start 50594308 is beyond EOD, truncated [ 119.293201][ T3042] loop4: p176 start 50594308 is beyond EOD, truncated [ 119.300223][ T3042] loop4: p177 start 50594308 is beyond EOD, truncated [ 119.307058][ T3042] loop4: p178 start 50594308 is beyond EOD, truncated [ 119.313859][ T3042] loop4: p179 start 50594308 is beyond EOD, truncated [ 119.330967][ T3042] loop4: p180 start 50594308 is beyond EOD, truncated [ 119.359635][ T3042] loop4: p181 start 50594308 is beyond EOD, truncated [ 119.371634][ T3086] loop1: detected capacity change from 0 to 128 [ 119.380591][ T3042] loop4: p182 start 50594308 is beyond EOD, truncated [ 119.401379][ T3042] loop4: p183 start 50594308 is beyond EOD, truncated [ 119.422568][ T3042] loop4: p184 start 50594308 is beyond EOD, truncated [ 119.447185][ T3042] loop4: p185 start 50594308 is beyond EOD, truncated [ 119.467543][ T3042] loop4: p186 start 50594308 is beyond EOD, truncated [ 119.528453][ T3086] FAT-fs (loop1): Unrecognized mount option "err" or missing value [ 119.584542][ T3042] loop4: p187 start 50594308 is beyond EOD, truncated [ 119.598984][ T3042] loop4: p188 start 50594308 is beyond EOD, truncated [ 119.613429][ T3042] loop4: p189 start 50594308 is beyond EOD, truncated [ 119.621145][ T3082] loop2: detected capacity change from 0 to 40427 [ 119.631616][ T3042] loop4: p190 start 50594308 is beyond EOD, truncated [ 119.642214][ T3042] loop4: p191 start 50594308 is beyond EOD, truncated [ 119.651603][ T3042] loop4: p192 start 50594308 is beyond EOD, truncated [ 119.658486][ T3042] loop4: p193 start 50594308 is beyond EOD, truncated [ 119.665366][ T3042] loop4: p194 start 50594308 is beyond EOD, truncated [ 119.672299][ T3042] loop4: p195 start 50594308 is beyond EOD, truncated [ 119.679159][ T3042] loop4: p196 start 50594308 is beyond EOD, truncated [ 119.686028][ T3042] loop4: p197 start 50594308 is beyond EOD, truncated [ 119.691010][ T3082] F2FS-fs (loop2): Invalid segment/section count (24 != 24 * 8) [ 119.692829][ T3042] loop4: p198 start 50594308 is beyond EOD, truncated [ 119.692850][ T3042] loop4: p199 start 50594308 is beyond EOD, truncated [ 119.714369][ T3042] loop4: p200 start 50594308 is beyond EOD, truncated [ 119.717963][ T3082] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 119.721222][ T3042] loop4: p201 start 50594308 is beyond EOD, truncated [ 119.746440][ T3082] F2FS-fs (loop2): fault_injection options not supported [ 119.769666][ T3082] F2FS-fs (loop2): fault_type options not supported [ 119.786458][ T3082] F2FS-fs (loop2): invalid crc value [ 119.791996][ T3042] loop4: p202 start 50594308 is beyond EOD, truncated [ 119.799332][ T3042] loop4: p203 start 50594308 is beyond EOD, truncated [ 119.807268][ T3042] loop4: p204 start 50594308 is beyond EOD, truncated [ 119.848015][ T3082] F2FS-fs (loop2): Found nat_bits in checkpoint [ 119.848661][ T3042] loop4: p205 start 50594308 is beyond EOD, truncated [ 119.862628][ T3042] loop4: p206 start 50594308 is beyond EOD, truncated [ 119.870012][ T3042] loop4: p207 start 50594308 is beyond EOD, truncated [ 119.876915][ T3042] loop4: p208 start 50594308 is beyond EOD, truncated [ 119.883780][ T3042] loop4: p209 start 50594308 is beyond EOD, truncated [ 119.890803][ T3042] loop4: p210 start 50594308 is beyond EOD, truncated [ 119.897750][ T3042] loop4: p211 start 50594308 is beyond EOD, truncated [ 119.904638][ T3042] loop4: p212 start 50594308 is beyond EOD, truncated [ 119.911495][ T3042] loop4: p213 start 50594308 is beyond EOD, truncated [ 119.918371][ T3042] loop4: p214 start 50594308 is beyond EOD, truncated [ 119.925257][ T3042] loop4: p215 start 50594308 is beyond EOD, truncated [ 119.945210][ T3042] loop4: p216 start 50594308 is beyond EOD, truncated [ 119.965501][ T3042] loop4: p217 start 50594308 is beyond EOD, truncated [ 119.975221][ T3042] loop4: p218 start 50594308 is beyond EOD, truncated [ 119.982442][ T3082] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 119.990140][ T3082] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 119.998754][ T3042] loop4: p219 start 50594308 is beyond EOD, truncated [ 120.013955][ T3042] loop4: p220 start 50594308 is beyond EOD, truncated [ 120.036326][ T3042] loop4: p221 start 50594308 is beyond EOD, truncated [ 120.045653][ T3042] loop4: p222 start 50594308 is beyond EOD, truncated [ 120.052525][ T3042] loop4: p223 start 50594308 is beyond EOD, truncated [ 120.059479][ T3042] loop4: p224 start 50594308 is beyond EOD, truncated [ 120.074839][ T3042] loop4: p225 start 50594308 is beyond EOD, truncated [ 120.088933][ T3042] loop4: p226 start 50594308 is beyond EOD, truncated [ 120.103010][ T3042] loop4: p227 start 50594308 is beyond EOD, truncated [ 120.118289][ T3042] loop4: p228 start 50594308 is beyond EOD, truncated [ 120.132490][ T3042] loop4: p229 start 50594308 is beyond EOD, truncated [ 120.146665][ T3042] loop4: p230 start 50594308 is beyond EOD, truncated [ 120.160910][ T3042] loop4: p231 start 50594308 is beyond EOD, truncated [ 120.169740][ T3042] loop4: p232 start 50594308 is beyond EOD, truncated [ 120.182438][ T3042] loop4: p233 start 50594308 is beyond EOD, truncated [ 120.190166][ T3042] loop4: p234 start 50594308 is beyond EOD, truncated [ 120.214143][ T3042] loop4: p235 start 50594308 is beyond EOD, truncated [ 120.228539][ T3042] loop4: p236 start 50594308 is beyond EOD, truncated [ 120.243020][ T3042] loop4: p237 start 50594308 is beyond EOD, truncated [ 120.253295][ T3042] loop4: p238 start 50594308 is beyond EOD, truncated [ 120.260204][ T3042] loop4: p239 start 50594308 is beyond EOD, truncated [ 120.267177][ T3042] loop4: p240 start 50594308 is beyond EOD, truncated [ 120.274048][ T3042] loop4: p241 start 50594308 is beyond EOD, truncated [ 120.280892][ T3042] loop4: p242 start 50594308 is beyond EOD, truncated [ 120.288377][ T3042] loop4: p243 start 50594308 is beyond EOD, truncated [ 120.295276][ T3042] loop4: p244 start 50594308 is beyond EOD, truncated [ 120.302074][ T3042] loop4: p245 start 50594308 is beyond EOD, truncated [ 120.308989][ T3042] loop4: p246 start 50594308 is beyond EOD, truncated [ 120.317327][ T3042] loop4: p247 start 50594308 is beyond EOD, truncated [ 120.324251][ T3042] loop4: p248 start 50594308 is beyond EOD, truncated [ 120.331044][ T3042] loop4: p249 start 50594308 is beyond EOD, truncated [ 120.339567][ T30] audit: type=1326 audit(1768189914.680:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3105 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 120.344272][ T3042] loop4: p250 start 50594308 is beyond EOD, [ 120.368542][ T3106] loop1: detected capacity change from 0 to 1024 [ 120.381049][ T3042] truncated [ 120.392170][ T3042] loop4: p251 start 50594308 is beyond EOD, truncated [ 120.400454][ T3042] loop4: p252 start 50594308 is beyond EOD, truncated [ 120.412381][ T30] audit: type=1326 audit(1768189914.680:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3105 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 120.442959][ T3042] loop4: p253 start 50594308 is beyond EOD, truncated [ 120.451310][ T3106] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 120.454160][ T3042] loop4: p254 start 50594308 is beyond EOD, truncated [ 120.488441][ T30] audit: type=1326 audit(1768189914.700:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3105 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 120.513058][ T3042] loop4: p255 start 50594308 is beyond EOD, truncated [ 120.542324][ T30] audit: type=1326 audit(1768189914.700:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3105 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f989c06e783 code=0x7ffc0000 [ 120.584767][ T30] audit: type=1326 audit(1768189914.710:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3105 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f989c06d1ff code=0x7ffc0000 [ 120.609455][ T30] audit: type=1326 audit(1768189914.710:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3105 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f989c06e7d7 code=0x7ffc0000 [ 120.633299][ T30] audit: type=1326 audit(1768189914.710:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3105 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f989c06cf90 code=0x7ffc0000 [ 120.645539][ T352] udevd[352]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 120.673151][ T723] udevd[723]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 120.700823][ T3119] device syzkaller0 entered promiscuous mode [ 120.769327][ T3123] loop2: detected capacity change from 0 to 256 [ 120.834566][ T3123] exfat: Deprecated parameter 'namecase' [ 120.841680][ T3123] exfat: Deprecated parameter 'utf8' [ 120.857143][ T3123] exfat: Deprecated parameter 'namecase' [ 120.869447][ T3123] exfat: Deprecated parameter 'utf8' [ 120.885762][ T3123] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 121.017101][ T3131] loop4: detected capacity change from 0 to 8192 [ 121.173952][ T2461] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 121.863435][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 121.863452][ T30] audit: type=1326 audit(1768189916.200:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3142 comm="syz.2.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7258a3b749 code=0x7ffc0000 [ 121.951824][ T30] audit: type=1326 audit(1768189916.240:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3142 comm="syz.2.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f7258a3b749 code=0x7ffc0000 [ 122.022503][ T30] audit: type=1326 audit(1768189916.240:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3142 comm="syz.2.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7258a3b749 code=0x7ffc0000 [ 122.104060][ T2461] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 122.136887][ T2461] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 122.193966][ T2461] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.235623][ T2461] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 122.279248][ T2461] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 122.327923][ T2461] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.362402][ T2461] usb 2-1: config 0 descriptor?? [ 122.571228][ T2461] usb-storage 2-1:0.0: USB Mass Storage device detected [ 122.683183][ T2461] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 123.121207][ T2501] usb 2-1: USB disconnect, device number 12 [ 123.215257][ T3168] loop3: detected capacity change from 0 to 512 [ 123.252380][ T3168] EXT4-fs (loop3): Ignoring removed oldalloc option [ 123.285598][ T3168] EXT4-fs (loop3): 1 truncate cleaned up [ 123.293175][ T3168] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 123.382816][ T30] audit: type=1400 audit(1768189917.720:968): avc: denied { read write } for pid=3170 comm="syz.5.891" name="file0" dev="tmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 123.405923][ T30] audit: type=1400 audit(1768189917.720:969): avc: denied { open } for pid=3170 comm="syz.5.891" path="/137/file0" dev="tmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 123.465789][ T30] audit: type=1400 audit(1768189917.810:970): avc: denied { name_bind } for pid=3173 comm="syz.3.898" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 123.958411][ T3179] binder: BINDER_SET_CONTEXT_MGR already set [ 123.964474][ T3179] binder: 3178:3179 ioctl 4018620d 2000000002c0 returned -16 [ 123.972195][ T3179] binder: 3178:3179 ioctl c0306201 0 returned -14 [ 123.979266][ T3179] netlink: 67 bytes leftover after parsing attributes in process `syz.3.900'. [ 125.186350][ T3185] loop4: detected capacity change from 0 to 40427 [ 125.211835][ T3185] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 125.226155][ T3185] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 125.235094][ T3185] F2FS-fs (loop4): fault_type options not supported [ 125.241761][ T3185] F2FS-fs (loop4): fault_injection options not supported [ 125.250746][ T3185] F2FS-fs (loop4): invalid crc value [ 125.278701][ T3185] F2FS-fs (loop4): Found nat_bits in checkpoint [ 125.390077][ T3185] F2FS-fs (loop4): Start checkpoint disabled! [ 125.418002][ T3185] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 125.434112][ T3185] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 125.678661][ T30] audit: type=1400 audit(1768189920.010:971): avc: denied { create } for pid=3183 comm="syz.4.901" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 125.791705][ T30] audit: type=1400 audit(1768189920.020:972): avc: denied { write } for pid=3183 comm="syz.4.901" name="file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 125.929773][ T30] audit: type=1400 audit(1768189920.020:973): avc: denied { open } for pid=3183 comm="syz.4.901" path="/160/file2/file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 125.992230][ T45] attempt to access beyond end of device [ 125.992230][ T45] loop4: rw=2049, want=40976, limit=40427 [ 126.838961][ T3214] loop4: detected capacity change from 0 to 40427 [ 126.888113][ T3204] loop2: detected capacity change from 0 to 131072 [ 126.935896][ T3204] F2FS-fs (loop2): invalid crc value [ 126.951740][ T3214] F2FS-fs (loop4): invalid crc value [ 126.960128][ T3214] F2FS-fs (loop4): Found nat_bits in checkpoint [ 126.983628][ T3204] F2FS-fs (loop2): Found nat_bits in checkpoint [ 127.029311][ T3214] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 127.121929][ T3204] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 127.130567][ T3204] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 127.147281][ T3204] incfs: Backing dir is not set, filesystem can't be mounted. [ 127.155544][ T3204] incfs: mount failed -2 [ 127.249698][ T30] audit: type=1400 audit(1768189921.580:974): avc: denied { ioctl } for pid=3213 comm="syz.4.908" path="/161/file0/file0" dev="loop4" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 127.275718][ T3231] F2FS-fs (loop4): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 128.399777][ T3259] loop3: detected capacity change from 0 to 512 [ 128.542417][ T3259] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 128.652326][ T3259] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2229: inode #15: comm syz.3.924: corrupted in-inode xattr [ 128.664929][ T3259] EXT4-fs (loop3): 1 orphan inode deleted [ 128.670730][ T3259] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,min_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,journal_ioprio=0x0000000000000002,,errors=continue. Quota mode: none. [ 128.705443][ T30] audit: type=1400 audit(1768189923.050:975): avc: denied { rename } for pid=3253 comm="syz.3.924" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.727880][ T30] audit: type=1400 audit(1768189923.050:976): avc: denied { reparent } for pid=3253 comm="syz.3.924" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.871524][ T3265] device syzkaller0 entered promiscuous mode [ 128.934078][ T30] audit: type=1400 audit(1768189923.260:977): avc: denied { append } for pid=3266 comm="syz.3.927" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 129.249907][ T3276] loop3: detected capacity change from 0 to 1024 [ 129.274134][ T3276] EXT4-fs (loop3): Ignoring removed nobh option [ 129.280507][ T3276] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 129.280507][ T3276] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 129.280507][ T3276] [ 129.322822][ T3278] tmpfs: Unknown parameter 'nolazytime˙˙' [ 129.330401][ T3276] EXT4-fs (loop3): Ignoring removed bh option [ 129.379080][ T3276] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,errors=remount-ro,barrier=0x0000000000000005,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004005b1,mb_optimize_scan=0x0000000000000001,grpquota,nobh,noacl,bh,inlinecrypt,. Quota mode: writeback. [ 129.634071][ T365] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 129.715368][ T3289] overlayfs: failed to resolve './bus': -2 [ 129.780149][ T3294] loop2: detected capacity change from 0 to 2048 [ 129.808986][ T723] Alternate GPT is invalid, using primary GPT. [ 129.815387][ T723] loop2: p2 p3 p7 [ 129.826820][ T3294] Alternate GPT is invalid, using primary GPT. [ 129.833121][ T3294] loop2: p2 p3 p7 [ 129.877034][ T101] Alternate GPT is invalid, using primary GPT. [ 129.884623][ T101] loop2: p2 p3 p7 [ 130.001214][ T3298] loop1: detected capacity change from 0 to 256 [ 130.014064][ T365] usb 5-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config [ 130.024482][ T365] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 130.033453][ T365] usb 5-1: config 1 has no interface number 1 [ 130.042503][ T365] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.056451][ T3298] futex_wake_op: syz.1.934 tries to shift op by 32; fix this program [ 130.196022][ T365] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 5.40 [ 130.205197][ T2914] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 130.212804][ T365] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 130.220889][ T365] usb 5-1: Product: syz [ 130.225216][ T365] usb 5-1: SerialNumber: syz [ 130.468405][ T3284] fuse: Bad value for 'fd' [ 130.540022][ T30] audit: type=1326 audit(1768189924.880:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3282 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d973e749 code=0x7ffc0000 [ 130.565326][ T30] audit: type=1326 audit(1768189924.910:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3282 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d973e749 code=0x7ffc0000 [ 130.607125][ T365] usb 5-1: USB disconnect, device number 18 [ 130.654074][ T2914] usb 3-1: Using ep0 maxpacket: 8 [ 130.774124][ T2914] usb 3-1: config index 0 descriptor too short (expected 29458, got 18) [ 130.782805][ T2914] usb 3-1: config 213 has an invalid descriptor of length 90, skipping remainder of the config [ 130.793567][ T2914] usb 3-1: config 213 has 0 interfaces, different from the descriptor's value: 19 [ 130.830227][ T723] udevd[723]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 131.170743][ T3308] xt_TCPMSS: Only works on TCP SYN packets [ 131.234129][ T2914] usb 3-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 131.250736][ T2914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.278458][ T2914] usb 3-1: Product: syz [ 131.287851][ T2914] usb 3-1: Manufacturer: syz [ 131.336427][ T2914] usb 3-1: SerialNumber: syz [ 131.731652][ T3319] loop4: detected capacity change from 0 to 512 [ 131.754578][ T3319] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 131.800210][ T3319] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 131.970025][ T3294] loop2: detected capacity change from 0 to 512 [ 132.074358][ T30] audit: type=1400 audit(1768189926.420:980): avc: denied { read write } for pid=3325 comm="syz.5.941" name="file1" dev="tmpfs" ino=793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 132.100907][ T2914] usb 3-1: USB disconnect, device number 9 [ 132.168044][ T30] audit: type=1400 audit(1768189926.510:981): avc: denied { open } for pid=3325 comm="syz.5.941" path="/143/file1" dev="tmpfs" ino=793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 132.358115][ T3338] xt_hashlimit: size too large, truncated to 1048576 [ 132.578849][ T3345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 132.944595][ T3349] xt_hashlimit: size too large, truncated to 1048576 [ 133.083990][ T338] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 133.334035][ T338] usb 3-1: Using ep0 maxpacket: 8 [ 133.366795][ T30] audit: type=1326 audit(1768189927.710:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3353 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 133.428577][ T30] audit: type=1326 audit(1768189927.710:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3353 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 133.464050][ T338] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.490824][ T338] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.534135][ T30] audit: type=1326 audit(1768189927.710:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3353 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 133.764969][ T30] audit: type=1326 audit(1768189927.710:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3353 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 134.028690][ T30] audit: type=1326 audit(1768189927.710:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3353 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 134.052318][ T30] audit: type=1326 audit(1768189927.710:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3353 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 134.075841][ T30] audit: type=1326 audit(1768189927.710:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3353 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 134.099212][ T30] audit: type=1326 audit(1768189927.710:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3353 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 134.122613][ T30] audit: type=1326 audit(1768189927.710:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3353 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 134.146131][ T30] audit: type=1326 audit(1768189927.710:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3353 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 134.184053][ T338] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.197297][ T338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.222077][ T338] usb 3-1: Product: syz [ 134.226359][ T338] usb 3-1: Manufacturer: syz [ 134.230981][ T338] usb 3-1: SerialNumber: syz [ 134.314461][ T338] cdc_ether 3-1:1.0: skipping garbage [ 134.320256][ T338] usb 3-1: bad CDC descriptors [ 134.519243][ T338] usb 3-1: USB disconnect, device number 10 [ 134.673865][ T3378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'. [ 135.259209][ T3384] loop3: detected capacity change from 0 to 512 [ 135.292681][ T3384] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 135.336248][ T3384] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.550385][ T3411] loop4: detected capacity change from 0 to 128 [ 138.102281][ T3411] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 138.116545][ T3416] netlink: 182 bytes leftover after parsing attributes in process `syz.2.970'. [ 138.125829][ T3411] ext4 filesystem being mounted at /171/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.175070][ T3418] loop2: detected capacity change from 0 to 256 [ 138.316290][ T3425] loop1: detected capacity change from 0 to 512 [ 138.438659][ T3425] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 138.693709][ T3425] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 138.713674][ T3425] __quota_error: 15 callbacks suppressed [ 138.713697][ T3425] Quota error (device loop1): write_blk: dquota write failed [ 138.810015][ T3425] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 138.853093][ T3425] EXT4-fs error (device loop1): ext4_acquire_dquot:6200: comm syz.1.974: Failed to acquire dquot type 0 [ 138.887553][ T3425] EXT4-fs (loop1): 1 truncate cleaned up [ 138.900951][ T3425] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000001000,barrier=0x0000000000000000,journal_dev=0x0000000000000005,dioread_lock,data_err=ignore,noinit_itable,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 138.994383][ T30] audit: type=1400 audit(1768189933.340:1007): avc: denied { create } for pid=3424 comm="syz.1.974" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 139.036786][ T3425] Quota error (device loop1): write_blk: dquota write failed [ 139.067146][ T3425] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 139.089547][ T3425] EXT4-fs error (device loop1): ext4_acquire_dquot:6200: comm syz.1.974: Failed to acquire dquot type 0 [ 141.135562][ T3473] loop2: detected capacity change from 0 to 1024 [ 142.967101][ T6] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 143.704056][ T3473] EXT4-fs (loop2): quotafile must be on filesystem root [ 143.866432][ T3480] loop3: detected capacity change from 0 to 40427 [ 143.894072][ T3480] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 143.901774][ T3480] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 143.914112][ T3480] F2FS-fs (loop3): invalid crc value [ 143.921191][ T3480] F2FS-fs (loop3): Found nat_bits in checkpoint [ 143.961769][ T3480] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 143.968933][ T3480] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 144.702455][ T3499] loop3: detected capacity change from 0 to 128 [ 144.728209][ T3499] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.740145][ T3499] ext4 filesystem being mounted at /190/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 145.057385][ T3506] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1000'. [ 145.446447][ T30] audit: type=1400 audit(1768189939.780:1008): avc: denied { write } for pid=3510 comm="syz.2.999" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 145.506843][ T30] audit: type=1400 audit(1768189939.780:1009): avc: denied { open } for pid=3510 comm="syz.2.999" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 145.545578][ T30] audit: type=1400 audit(1768189939.820:1010): avc: denied { ioctl } for pid=3510 comm="syz.2.999" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 145.817353][ T3534] fuse: Bad value for 'fd' [ 146.163627][ T3528] loop2: detected capacity change from 0 to 40427 [ 146.175886][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 146.210314][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.222094][ T3528] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 146.231660][ T3528] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 146.251487][ T3528] F2FS-fs (loop2): invalid crc value [ 146.259959][ T3528] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 146.805352][ T3548] loop3: detected capacity change from 0 to 256 [ 146.830244][ T3547] loop4: detected capacity change from 0 to 512 [ 147.078216][ T3548] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 147.187240][ T3547] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 147.299871][ T3554] loop1: detected capacity change from 0 to 256 [ 148.000795][ T3528] F2FS-fs (loop2): recover fsync data on readonly fs [ 148.007895][ T3528] F2FS-fs (loop2): Try to recover 2th superblock, ret: -30 [ 148.528132][ T3547] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #2: block 9: comm syz.4.1013: lblock 0 mapped to illegal pblock 9 (length 1) [ 148.796207][ T3528] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 148.803868][ T3547] EXT4-fs (loop4): mount failed [ 148.906550][ T3565] syz.3.1016[3565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.908080][ T3565] syz.3.1016[3565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.989867][ T3565] loop3: detected capacity change from 0 to 128 [ 149.535023][ T3567] blk_update_request: I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.578148][ T3567] F2FS-fs (loop11): Unable to read 1th superblock [ 149.609102][ T3567] blk_update_request: I/O error, dev loop11, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.655701][ T3567] F2FS-fs (loop11): Unable to read 2th superblock [ 152.067689][ T2501] hid-generic 4FAE:0FCC:FFFFFF33.000D: hidraw0: HID v0.ea Device [syz1] on syz1 [ 152.108249][ T30] audit: type=1400 audit(1768189946.450:1011): avc: denied { ioctl } for pid=3570 comm="syz.3.1021" path="socket:[29855]" dev="sockfs" ino=29855 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 152.202881][ T3574] fido_id[3574]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 152.696488][ T3590] loop2: detected capacity change from 0 to 512 [ 153.998628][ T30] audit: type=1400 audit(1768189948.340:1012): avc: denied { setopt } for pid=3593 comm="syz.4.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 155.231403][ T3601] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 155.374151][ T30] audit: type=1400 audit(1768189949.570:1013): avc: denied { mounton } for pid=3598 comm="syz.4.1028" path="/181/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 155.516501][ T30] audit: type=1400 audit(1768189949.710:1014): avc: denied { compute_member } for pid=3598 comm="syz.4.1028" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 156.132761][ T30] audit: type=1400 audit(1768189950.300:1015): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 156.173997][ T3590] EXT4-fs (loop2): Ignoring removed oldalloc option [ 156.180706][ T3590] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 156.970645][ T3590] EXT4-fs: error -4 creating inode table initialization thread [ 156.978436][ T3590] EXT4-fs (loop2): mount failed [ 157.073375][ T3627] loop2: detected capacity change from 0 to 128 [ 157.101030][ T3627] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 157.115671][ T3627] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.136189][ T30] audit: type=1400 audit(1768189951.480:1016): avc: denied { rename } for pid=3626 comm="syz.2.1037" name="file1" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 158.967618][ T30] audit: type=1400 audit(1768189953.210:1017): avc: denied { create } for pid=3626 comm="syz.2.1037" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 159.493906][ T3642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1042'. [ 159.575787][ T3653] Illegal XDP return value 4294967282, expect packet loss! [ 160.696434][ T3658] loop2: detected capacity change from 0 to 512 [ 160.983567][ T3661] loop4: detected capacity change from 0 to 512 [ 161.629920][ T3661] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 161.644256][ T30] audit: type=1400 audit(1768189955.990:1018): avc: denied { mounton } for pid=3645 comm="syz.2.1040" path="/206/file0" dev="tmpfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 161.675683][ T3661] EXT4-fs (loop4): 1 truncate cleaned up [ 161.684803][ T3661] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="errors=continue,noload,nombcache,usrjquota="data=writeback,usrjquota=,barrier,,errors=continue. Quota mode: writeback. [ 161.763819][ T3669] loop1: detected capacity change from 0 to 512 [ 161.774039][ T3658] EXT4-fs (loop2): Test dummy encryption mode enabled [ 161.780917][ T3658] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 161.869651][ T3669] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 161.893956][ T2461] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 161.914023][ T3658] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e01c, mo2=0002] [ 161.922867][ T3658] EXT4-fs (loop2): orphan cleanup on readonly fs [ 161.929515][ T3658] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1040: bg 0: block 361: padding at end of block bitmap is not set [ 161.944420][ T3669] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 161.968904][ T3669] Quota error (device loop1): write_blk: dquota write failed [ 161.976409][ T3669] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 161.986882][ T3669] EXT4-fs error (device loop1): ext4_acquire_dquot:6200: comm syz.1.1050: Failed to acquire dquot type 0 [ 161.999288][ T3669] EXT4-fs (loop1): 1 truncate cleaned up [ 162.005479][ T3669] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000001000,barrier=0x0000000000000000,journal_dev=0x0000000000000005,dioread_lock,data_err=ignore,noinit_itable,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 162.153923][ T3658] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 163.454111][ T30] audit: type=1400 audit(1768189956.880:1019): avc: denied { mount } for pid=3668 comm="syz.1.1050" name="/" dev="pstore" ino=13820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 163.874101][ T2461] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.887848][ T2461] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 163.899386][ T3688] loop4: detected capacity change from 0 to 256 [ 163.906143][ T2461] usb 4-1: config 1 has no interface number 0 [ 164.004682][ T2461] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.301600][ T3697] loop4: detected capacity change from 0 to 128 [ 165.344007][ T2461] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.363269][ T2461] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.450588][ T3699] loop4: detected capacity change from 0 to 512 [ 165.474175][ T2461] usb 4-1: can't set config #1, error -71 [ 165.484832][ T3658] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.1040: attempt to clear invalid blocks 33619980 len 1 [ 165.498374][ T2461] usb 4-1: USB disconnect, device number 15 [ 165.503814][ T3658] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1040: invalid indirect mapped block 1811939328 (level 0) [ 165.524588][ T3658] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1040: invalid indirect mapped block 2185560079 (level 1) [ 165.539049][ T3658] EXT4-fs (loop2): 1 truncate cleaned up [ 165.544840][ T3658] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000006,noblock_validity,dioread_lock,test_dummy_encryption=v1,jqfmt=vfsv0,errors=continue. Quota mode: none. [ 166.052373][ T3706] loop4: detected capacity change from 0 to 512 [ 167.666552][ T3709] loop2: detected capacity change from 0 to 128 [ 172.088293][ T3736] loop1: detected capacity change from 0 to 512 [ 172.107810][ T3735] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1070'. [ 172.196104][ T3736] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 172.203362][ T3736] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 172.233813][ T3736] EXT4-fs error (device loop1): __ext4_iget:4939: inode #11: block 1: comm syz.1.1069: invalid block [ 172.247680][ T3736] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1069: couldn't read orphan inode 11 (err -117) [ 172.260158][ T3736] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,commit=0x0000000000000005,mblk_io_submit,stripe=0x0000000000000004,auto_da_alloc=0x0000000000000008,dioread_nolock,lazytime,quota,,errors=continue. Quota mode: writeback. [ 172.309581][ T3743] loop4: detected capacity change from 0 to 16 [ 172.339997][ T3744] bridge: RTM_NEWNEIGH with invalid ether address [ 172.344974][ T3736] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.1069: Directory hole found for htree leaf block 0 [ 172.389176][ T3743] erofs: (device loop4): mounted with root inode @ nid 36. [ 172.643144][ T3749] attempt to access beyond end of device [ 172.643144][ T3749] loop4: rw=524288, want=48, limit=16 [ 172.655745][ T3749] attempt to access beyond end of device [ 172.655745][ T3749] loop4: rw=524288, want=40, limit=16 [ 173.275549][ T3750] netlink: 'syz.1.1072': attribute type 13 has an invalid length. [ 173.284132][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 173.299369][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 173.318313][ T3750] gretap0: refused to change device tx_queue_len [ 173.326284][ T3750] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.555371][ T3758] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 174.564709][ T3758] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 174.805466][ T3767] overlayfs: missing 'lowerdir' [ 176.536389][ T3781] overlayfs: maximum fs stacking depth exceeded [ 178.383089][ T3803] loop1: detected capacity change from 0 to 256 [ 179.246951][ T3808] loop4: detected capacity change from 0 to 128 [ 179.253735][ T30] audit: type=1400 audit(1768189973.580:1020): avc: denied { create } for pid=3805 comm="syz.3.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 180.344562][ T3808] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.392384][ T3808] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 181.244923][ T30] audit: type=1400 audit(1768189975.400:1021): avc: denied { getopt } for pid=3827 comm="syz.1.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 181.593343][ T3852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1104'. [ 181.609814][ T3852] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1104'. [ 181.628133][ T3852] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1104'. [ 182.644006][ T3868] device veth2 entered promiscuous mode [ 182.847977][ T30] audit: type=1400 audit(1768189977.190:1022): avc: denied { mounton } for pid=3877 comm="syz.3.1113" path="/217/file0" dev="tmpfs" ino=1177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 184.510280][ T3902] loop4: detected capacity change from 0 to 2048 [ 184.566287][ T20] kernel write not supported for file /uinput (pid: 20 comm: kworker/0:1) [ 184.664476][ T3902] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.677914][ T3902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1121'. [ 184.710834][ T30] audit: type=1400 audit(1768189979.050:1023): avc: denied { append } for pid=3900 comm="syz.4.1121" path="/203/bus/memory.events.local" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 184.846594][ T30] audit: type=1400 audit(1768189979.080:1024): avc: denied { execute } for pid=3912 comm="syz.3.1125" path="/219/pids.current" dev="tmpfs" ino=1188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 184.871090][ T30] audit: type=1400 audit(1768189979.210:1025): avc: denied { map } for pid=3900 comm="syz.4.1121" path="/203/bus/memory.events.local" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 184.884340][ T3902] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1121: bg 0: block 234: padding at end of block bitmap is not set [ 187.413852][ T3902] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 402 with error 28 [ 187.426601][ T3902] EXT4-fs (loop4): This should not happen!! Data will be lost [ 187.426601][ T3902] [ 187.439169][ T3902] EXT4-fs (loop4): Total free blocks count 0 [ 187.446998][ T3902] EXT4-fs (loop4): Free/Dirty block details [ 187.453099][ T3902] EXT4-fs (loop4): free_blocks=0 [ 187.512863][ T3902] EXT4-fs (loop4): dirty_blocks=416 [ 187.527103][ T3902] EXT4-fs (loop4): Block reservation details [ 187.547679][ T3902] EXT4-fs (loop4): i_reserved_data_blocks=26 [ 188.537694][ T3941] loop1: detected capacity change from 0 to 40427 [ 188.554615][ T3941] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 188.562394][ T3941] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 188.576403][ T3941] F2FS-fs (loop1): invalid crc value [ 188.583281][ T3941] F2FS-fs (loop1): Found nat_bits in checkpoint [ 188.623182][ T3941] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 188.630340][ T3941] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 188.680897][ T3959] loop3: detected capacity change from 0 to 128 [ 190.835827][ T3985] overlayfs: missing 'workdir' [ 191.764263][ T3995] syz.2.1145[3995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.764348][ T3995] syz.2.1145[3995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.778899][ T3995] syz.2.1145 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 191.813949][ T2461] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 191.908032][ T4006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1147'. [ 192.114808][ T4008] syz.5.1152[4008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.115853][ T4008] syz.5.1152[4008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.247507][ T2461] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 192.290927][ T2461] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.312614][ T2461] usb 4-1: config 0 descriptor?? [ 192.840286][ T4019] loop2: detected capacity change from 0 to 512 [ 194.012613][ T4019] EXT4-fs (loop2): Ignoring removed oldalloc option [ 194.047549][ T4019] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 194.083327][ T4019] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 194.107357][ T4027] netlink: 'syz.4.1158': attribute type 12 has an invalid length. [ 194.393968][ T2461] usb 4-1: Cannot read MAC address [ 194.399275][ T2461] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 194.420561][ T2461] usb 4-1: USB disconnect, device number 16 [ 194.618588][ T4029] loop4: detected capacity change from 0 to 131072 [ 194.634614][ T4019] EXT4-fs (loop2): 1 truncate cleaned up [ 194.640484][ T4019] EXT4-fs (loop2): mounted filesystem without journal. Opts: oldalloc,block_validity,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000080,bsddf,i_version,nomblk_io_submit,nodioread_nolock,,errors=continue. Quota mode: none. [ 194.758128][ T4029] F2FS-fs (loop4): Test dummy encryption mode enabled [ 194.766284][ T4029] F2FS-fs (loop4): invalid crc value [ 194.844611][ T4029] F2FS-fs (loop4): Found nat_bits in checkpoint [ 194.891525][ T4029] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 195.866800][ T2498] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 196.061890][ T4065] syz.1.1169[4065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.061983][ T4065] syz.1.1169[4065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.543932][ T2498] usb 4-1: Using ep0 maxpacket: 16 [ 196.635404][ T4074] loop1: detected capacity change from 0 to 512 [ 198.093961][ T2498] usb 4-1: device descriptor read/all, error -71 [ 198.140409][ T30] audit: type=1326 audit(1768189992.480:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4081 comm="syz.1.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 198.170714][ T4084] loop2: detected capacity change from 0 to 4096 [ 198.203956][ T30] audit: type=1326 audit(1768189992.520:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4081 comm="syz.1.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 198.244281][ T4084] EXT4-fs (loop2): Test dummy encryption mode enabled [ 198.293386][ T4084] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,block_validity,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 198.319445][ T30] audit: type=1326 audit(1768189992.520:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4081 comm="syz.1.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 198.418341][ T4093] Invalid ELF header magic: != ELF [ 198.442455][ T30] audit: type=1326 audit(1768189992.520:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4081 comm="syz.1.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 198.476850][ T30] audit: type=1326 audit(1768189992.520:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4081 comm="syz.1.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989c06e749 code=0x7ffc0000 [ 198.507119][ T30] audit: type=1400 audit(1768189992.700:1031): avc: denied { module_load } for pid=4086 comm="syz.1.1181" path="/231/file0/file1" dev="overlay" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 200.160488][ T4116] loop1: detected capacity change from 0 to 40427 [ 200.755536][ T4116] F2FS-fs (loop1): fault_type options not supported [ 200.802478][ T4116] F2FS-fs (loop1): invalid crc value [ 201.232675][ T4148] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1198'. [ 201.566472][ T30] audit: type=1400 audit(1768189995.590:1032): avc: denied { read } for pid=4142 comm="syz.3.1198" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 202.011506][ T30] audit: type=1400 audit(1768189995.590:1033): avc: denied { open } for pid=4142 comm="syz.3.1198" path="/dev/loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 202.036944][ T4116] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4) [ 202.050717][ T30] audit: type=1400 audit(1768189995.610:1034): avc: denied { ioctl } for pid=4142 comm="syz.3.1198" path="/dev/loop-control" dev="devtmpfs" ino=115 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 204.392606][ T4183] loop3: detected capacity change from 0 to 256 [ 204.558789][ T4183] FAT-fs (loop3): "posix" option is obsolete, not supported now [ 205.395497][ T30] audit: type=1400 audit(1768189999.740:1035): avc: denied { accept } for pid=4198 comm="syz.2.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 205.431531][ T4202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1215'. [ 205.447687][ T4202] loop2: detected capacity change from 0 to 512 [ 205.455048][ T30] audit: type=1400 audit(1768189999.790:1036): avc: denied { relabelfrom } for pid=4201 comm="syz.2.1215" name="NETLINK" dev="sockfs" ino=29619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.487590][ T30] audit: type=1400 audit(1768189999.790:1037): avc: denied { relabelto } for pid=4201 comm="syz.2.1215" name="NETLINK" dev="sockfs" ino=29619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 205.513592][ T30] audit: type=1400 audit(1768189999.790:1038): avc: denied { connect } for pid=4201 comm="syz.2.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 206.063424][ T4211] loop1: detected capacity change from 0 to 16 [ 206.081189][ T4211] erofs: (device loop1): mounted with root inode @ nid 36. [ 206.102458][ T4211] attempt to access beyond end of device [ 206.102458][ T4211] loop1: rw=0, want=15300821032, limit=16 [ 206.113941][ T4211] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 206.122172][ T4211] BUG: scheduling while atomic: syz.1.1217/4211/0x00000002 [ 206.129462][ T4211] Modules linked in: [ 206.133386][ T4211] Preemption disabled at: [ 206.133396][ T4211] [] z_erofs_reload_indexes+0x310/0x410 [ 206.144966][ T4211] CPU: 0 PID: 4211 Comm: syz.1.1217 Not tainted syzkaller #0 [ 206.152371][ T4211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.162475][ T4211] Call Trace: [ 206.165791][ T4211] [ 206.168759][ T4211] __dump_stack+0x21/0x30 [ 206.173147][ T4211] dump_stack_lvl+0xee/0x150 [ 206.177776][ T4211] ? show_regs_print_info+0x20/0x20 [ 206.183016][ T4211] ? z_erofs_reload_indexes+0x310/0x410 [ 206.188601][ T4211] dump_stack+0x15/0x20 [ 206.192801][ T4211] __schedule_bug+0x174/0x230 [ 206.197512][ T4211] ? ttwu_queue_wakelist+0x490/0x490 [ 206.202894][ T4211] __schedule+0xc2f/0x14c0 [ 206.207348][ T4211] ? release_firmware_map_entry+0x190/0x190 [ 206.213280][ T4211] ? __x64_sys_futex+0x100/0x100 [ 206.218261][ T4211] schedule+0x11e/0x1e0 [ 206.222450][ T4211] exit_to_user_mode_loop+0x50/0xe0 [ 206.227678][ T4211] exit_to_user_mode_prepare+0x87/0xd0 [ 206.233157][ T4211] syscall_exit_to_user_mode+0x1a/0x30 [ 206.238639][ T4211] do_syscall_64+0x58/0xa0 [ 206.243072][ T4211] ? clear_bhb_loop+0x50/0xa0 [ 206.247764][ T4211] ? clear_bhb_loop+0x50/0xa0 [ 206.252455][ T4211] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 206.258376][ T4211] RIP: 0033:0x7f989c06e749 [ 206.262811][ T4211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.282429][ T4211] RSP: 002b:00007f989aad6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 206.290855][ T4211] RAX: ffffffffffffff8b RBX: 00007f989c2c4fa0 RCX: 00007f989c06e749 [ 206.298847][ T4211] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 206.306835][ T4211] RBP: 00007f989c0f2f91 R08: 0000000000000000 R09: 0000000000000000 [ 206.314820][ T4211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.322797][ T4211] R13: 00007f989c2c5038 R14: 00007f989c2c4fa0 R15: 00007fffc08a9c18 [ 206.330789][ T4211]