last executing test programs: 12m27.288622428s ago: executing program 32 (id=1029): syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x2ca, &(0x7f00000006c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) 11m26.952059936s ago: executing program 33 (id=1685): syz_mount_image$exfat(&(0x7f0000001080), &(0x7f0000001040)='./file1\x00', 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='utf8,umask=00000000000000000100003,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c696f636861727365743d6575632d6a702c6572726f72733d72656d6f756e742d726f2c757466382c666d61736b3d30303030303030303030303030303030303030303133332c646d61736b3d30303030303030303030303030303030303030303030332c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c00e7f7a64e12768f24588c031e3a7d52e686581692b31c66f5320a14e587a7c28feef0f667bc0421879f8dd03f06fa51770cf06aece55ad1185a9caffc331fae3067bf"], 0x3, 0x152b, &(0x7f0000002f80)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x2208880, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x41, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x142) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/174, 0xae}], 0x1, 0xfffffffe, 0x5) 11m25.428216434s ago: executing program 34 (id=1702): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f00000006c0)={[{@dots}, {@fat=@fmask={'fmask', 0x3d, 0xdbd}}, {@nodots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {}, {@nodots}, {@nodots}, {@fat=@quiet}, {@fat=@showexec}, {@dots}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x8001}}, {@fat=@check_normal}, {@fat=@check_strict}, {@nodots}, {@fat=@nfs_stale_rw}, {@nodots}]}, 0x1, 0x206, &(0x7f0000000480)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@ptr, @fwd={0xd}, @func_proto]}, {0x0, [0x2e, 0x30, 0x5f, 0x2e, 0x2e, 0x2e]}}, 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 11m12.984229997s ago: executing program 35 (id=1828): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000080), &(0x7f00000003c0)=""/187}, 0x20) 11m3.384476365s ago: executing program 7 (id=1901): socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c", @ANYRES8], 0x0) 11m1.666116972s ago: executing program 7 (id=1912): syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000100)=0x4, 0x4) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f00000003c0)={[{@grpid}, {@test_dummy_encryption}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@grpjquota}, {@nombcache}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) 11m0.763725318s ago: executing program 7 (id=1919): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") creat(&(0x7f0000000180)='./file0\x00', 0xa) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f00000011c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r1, &(0x7f0000000080)=""/4093, 0xffd) 11m0.544987029s ago: executing program 7 (id=1922): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) truncate(&(0x7f0000000640)='./file2\x00', 0xf6) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x610003d5) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3200009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 11m0.229227075s ago: executing program 7 (id=1929): syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000100)=0x4, 0x4) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f00000003c0)={[{@grpid}, {@test_dummy_encryption}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@grpjquota}, {@nombcache}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) 10m59.300280102s ago: executing program 7 (id=1937): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000008000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208"], 0x0, 0x4}, 0x94) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="8233", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 10m59.081617554s ago: executing program 36 (id=1937): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000008000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208"], 0x0, 0x4}, 0x94) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="8233", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 10m44.583702401s ago: executing program 1 (id=2078): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000400)='syzkaller\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x5}]}, {0x0, [0x2e]}}, 0x0, 0x27, 0x0, 0x1}, 0x28) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f0000000200)=""/227, 0xe3) read$watch_queue(r2, &(0x7f0000002d40)=""/4095, 0xfff) 10m44.40489448s ago: executing program 1 (id=2079): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000001c0)={[{@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@test_dummy_encryption_v1}]}, 0x3, 0x4d1, &(0x7f00000005c0)="$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") pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1000, 0x800000000000000) splice(r0, 0x0, r4, 0x0, 0x80, 0x8) write$tun(r1, &(0x7f00000033c0)=ANY=[], 0x107c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 10m43.962814773s ago: executing program 1 (id=2084): syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000000c0)='./file0\x00', 0x810000, &(0x7f00000005c0)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac", @ANYRESHEX, @ANYRES32], 0x1, 0x1506, &(0x7f0000001c80)="$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") mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x4000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x2, 0x9}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 10m43.721830315s ago: executing program 5 (id=2090): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x2a, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x7fffffc, 0x0, 0x8, 0x7, 0x8000000000000000, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m43.645436488s ago: executing program 5 (id=2092): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000000)={[{@grpid}, {@grpquota}, {@errors_remount}]}, 0x44, 0x4eb, &(0x7f0000001500)="$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") r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x8000000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1021408, 0x0, 0x1, 0x0, &(0x7f0000006380)) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) rename(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000180)='./bus/file0\x00') 10m43.644958758s ago: executing program 1 (id=2093): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000040)={[{@nomblk_io_submit}, {@nogrpid}]}, 0x1, 0x4bd, &(0x7f0000000800)="$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") pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 10m43.320995795s ago: executing program 1 (id=2095): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000005c0)=0x9, 0xfc17) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 10m43.132546005s ago: executing program 1 (id=2099): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000140)="01ff00004f52ff4b46846d3f810adc4eefd8a89453", 0x15, 0x80, &(0x7f0000002400)={0x2, 0x4e63, @multicast1}, 0x10) 10m43.132370094s ago: executing program 37 (id=2099): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000140)="01ff00004f52ff4b46846d3f810adc4eefd8a89453", 0x15, 0x80, &(0x7f0000002400)={0x2, 0x4e63, @multicast1}, 0x10) 10m42.707067507s ago: executing program 5 (id=2105): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x914) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x480, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000380)='./bus\x00') mount$overlay(0x0, 0x0, 0x0, 0x98461, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001240)='./file2\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x2, 0xa7b4}) 10m42.279693108s ago: executing program 5 (id=2107): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x4, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) umount2(&(0x7f0000000180)='./file0/../file0\x00', 0x0) 10m42.169605824s ago: executing program 5 (id=2108): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0) syz_mount_image$fuse(&(0x7f0000000380), &(0x7f0000000040)='./file0\x00', 0x480a8, &(0x7f0000000340)=ANY=[], 0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x100688d, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file1\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0/file1\x00', 0x29c7d62d2a8014d5, 0x0, 0x0, 0x0, 0x0) 10m42.013697052s ago: executing program 5 (id=2112): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x20) unlinkat(r0, &(0x7f00000011c0)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 10m41.922691456s ago: executing program 38 (id=2112): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x20) unlinkat(r0, &(0x7f00000011c0)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 10m35.039611317s ago: executing program 3 (id=2170): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'bridge0\x00', 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in6=@loopback, 0x4e21, 0x2, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xfffffffffffffe01, 0x0, 0x6, 0x1000000000}, 0x0, 0x1000, 0x0, 0x1}, {{@in=@broadcast, 0x4d5, 0x2b}, 0x0, @in6=@remote, 0x0, 0x3, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff8d) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@broadcast, @empty=0xff03, 0xffffff00, 0xff000000, 0xe, 0x2, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff]}}, 0x4, 0x4, 0x1, 0x4d3, 0x0, 0xf8db, 'veth1_virt_wifi\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x8}}}, {{@arp={@private=0xa010101, @empty, 0xffffffff, 0xffffff00, 0x9, 0x2, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x730e8ec89ff96e2d]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x1, 0xb, 0x6, 0x4000, 0x4, 'virt_wifi0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0x397}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010102, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x102d) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}]}, 0x50}, 0x1, 0xba01}, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100081, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32=r3]) 10m32.649057218s ago: executing program 3 (id=2177): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) 10m32.607820191s ago: executing program 3 (id=2180): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='C\xc7\a\x89H\xb8\xeb\x99\xaa\x8e\xba\xfcrA\xca\x06\xe6uE\xec\xbb\xa1m\xb3\x14\xd8d\"\x17\x97\x83\xda\av4i\xfc\a\xe7a\xfeO\xaf9u\t\x00\x00\x00\x00\x00\x00\x00\xc2`\xc3\xa5u_\xac\x0f\x14\xae\xb1\f\xea\xc1\xff\xc8\xc2\xf1\x01\v\xabL\xa0\xad\x12\x8b\r\xd8!\xa6I-u3\xbaa\xd3?\xe3_\xac:=&w.\xa3qp\xf4\xdb\x7fj\xc5\xea\x02\xe2\x00KMqF\xb6c\x85\x90s\xd9\xb6\xccd.\xd1g\xb8I\xea\x8c\xd5\x82j\xf9\xcam\xace\x053\x03\'\xc9\x03\xd3\x88\xb2d\x11;1\\\x8a\xec_\xf3\xdal\xe9\x8c\x92D$\x009\xf7\v\xb3#\xa4\xdc\xbf\xc3\xc3\xba\b8\x1dr\xeb\xd7=Jh\xf5\xc7;P;\b\xb6*E\"[\xf4\\]B\xb3\xab\xd0]n\xb02\x12\x14rf\x032\xaf\x9dr\xb6\xef\x99US\xb1\v\xf1\x8a\xdc\x8c\x02\xe5\'\xc0\x15\xfb\x8ch\x05\xd6eN\xcf\xf9\xb3N&\xc8-&\x99\x84$\xc3\xdc]\xfe\x85\xba\t$\x88>\xb1\x92w\xf2*Y\x91F\x92p\xf39\xc9\xd7?\x06\x15\xfckv\xba\x8f%\x0eM\xfa\xecge\xefM\xe0\xaa\x98\x82\xfd\xc8\x112\xe5Shh\xfa\x02\xea\x99\xb3\"\xa9*\xb9\xd1\xda\xb0\x9bo\v\x13\xbfNa.8\x88\x8c\x8339\xd57\x9c\xba \x81\x8c@\x96\xad\xbb)\x12.\x15\xd6\xfa\x1dxj\xde\xcf\x1f\xe4\xae\x84\xb9\x92\x0e\xed\n\x11\xc0S<\x14\xc0oLC\x04\xadb\xcc\xde9\xc8\xbe\xb8\x94*\x1b(A\x81\xeb#\xdaW\x90\xc6\x17\xd8C\x97:\xbdc]\xf4J\xaf\x12.a\x97B\xae,6#&\xc7\xf7\xf3{<\xce\xab\x02\xb6\xd9i\xd2\x9d\x184K.@\x8dC\xa7`\xa5%\xfa\x11\xdf1\x03bC\xdb\xb7/X2\xcf\xa9\x85\xec\x19\'\x16lc\xe5\xccsQ]\x01\xe9\xa5\xb3\xfb\n') ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private0={0xfc, 0x0, '\x00', 0x1}, @local, @private2, 0x8, 0x6, 0x2, 0x500, 0x6, 0x20b}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="12043600d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 10m32.452572848s ago: executing program 3 (id=2186): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[], 0x5, 0x5598, &(0x7f00000013c0)="$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") socket$inet(0x2, 0x4000000000000001, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 10m31.808031431s ago: executing program 3 (id=2192): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000090000000000000000000095000000000000000000000000000000000a50c9b8137fc75b6dc32d97"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x471d, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 10m31.308220716s ago: executing program 3 (id=2195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x13, 0x0}}, 0x10) 10m31.218967311s ago: executing program 39 (id=2195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x13, 0x0}}, 0x10) 3m38.23772028s ago: executing program 8 (id=3940): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x0) r2 = gettid() timer_create(0x3, &(0x7f0000000000)={0x0, 0x1f, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) syz_usb_connect$cdc_ecm(0x2, 0x53, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x10, 0x4, 0x8, 0x2, 0x0, r3, 0x7}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r5, r3}, 0xc) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') preadv(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r6, &(0x7f00000003c0), 0x100000000000022d) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) shutdown(r0, 0x0) 3m36.916960106s ago: executing program 8 (id=3943): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd2e, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_DPORT={0x6, 0x1d, 0x4e21}]}, 0x24}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x8]}, 0x8, 0x80000) read$FUSE(r4, &(0x7f0000000140)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269b3, 0x8031, 0xffffffffffffffff, 0x99cf0000) signalfd4(r4, &(0x7f0000000040)={[0xffffffffffff0150]}, 0x8, 0x80800) 3m34.979742894s ago: executing program 8 (id=3947): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_SE(r3, 0x0, 0x8010) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, 0x0, 0x24000) unshare(0x60040000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x3, 0x0, &(0x7f0000000040)) 3m33.630014582s ago: executing program 8 (id=3949): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x0) r2 = gettid() timer_create(0x3, &(0x7f0000000000)={0x0, 0x1f, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) syz_usb_connect$cdc_ecm(0x2, 0x53, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x10, 0x4, 0x8, 0x2, 0x0, r3, 0x7}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r5, r3}, 0xc) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') preadv(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r6, &(0x7f00000003c0), 0x100000000000022d) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) shutdown(r0, 0x0) 3m32.852126021s ago: executing program 8 (id=3952): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x0) r2 = gettid() timer_create(0x3, &(0x7f0000000000)={0x0, 0x1f, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) syz_usb_connect$cdc_ecm(0x2, 0x53, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x10, 0x4, 0x8, 0x2, 0x0, r3, 0x7}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r5, r3}, 0xc) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') preadv(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r6, &(0x7f00000003c0), 0x100000000000022d) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) shutdown(r0, 0x0) 3m30.648001331s ago: executing program 8 (id=3959): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0x188) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') 3m14.892437991s ago: executing program 40 (id=3959): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0x188) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') 29.053586712s ago: executing program 2 (id=4246): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x208810, &(0x7f0000000100), 0xff, 0x4c4, &(0x7f00000001c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') 27.467022172s ago: executing program 2 (id=4253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) prctl$PR_SET_TSC(0x1a, 0x1) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r2, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) connect$inet6(r2, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000", 0x1a, 0x8000, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read(r3, 0x0, 0x0) read$FUSE(r3, &(0x7f0000003f00)={0x2020}, 0x2020) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) setgroups(0x0, 0x0) 24.783488167s ago: executing program 2 (id=4260): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r0, &(0x7f0000000080)=""/1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x65, 0x0, &(0x7f00000000c0)) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r5 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f0000000200)=ANY=[@ANYBLOB]) keyctl$invalidate(0x15, r5) r6 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x2d3}) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000300)="0800c8460f2a2a2a", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00"/44], 0x40}, 0x20000000) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) close_range(r6, 0xffffffffffffffff, 0x0) 23.604060295s ago: executing program 2 (id=4264): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x65, 0x0, &(0x7f00000000c0)) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r6 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f0000000200)=ANY=[@ANYBLOB]) keyctl$invalidate(0x15, r6) io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r7 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x2d3}) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000300)="0800c8460f2a2a2a", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00"/44], 0x40}, 0x20000000) close_range(r7, r7, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) r9 = add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r9, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 21.240776875s ago: executing program 2 (id=4268): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x1, 0x5003) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b63, 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000280)=0x1e) sched_setaffinity(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ppoll(&(0x7f0000000540), 0x0, &(0x7f0000000580)={0x0, 0x989680}, &(0x7f00000005c0)={[0xdd46]}, 0x8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) ioprio_set$pid(0x3, 0x0, 0x4007) socket$netlink(0x10, 0x3, 0xb) 17.54126163s ago: executing program 2 (id=4274): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x1, 0x5003) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b63, 0x4) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @empty}}}, 0x108) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000280)=0x1e) sched_setaffinity(0x0, 0x0, 0x0) ppoll(&(0x7f0000000540), 0x0, &(0x7f0000000580)={0x0, 0x989680}, &(0x7f00000005c0)={[0xdd46]}, 0x8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) ioprio_set$pid(0x3, 0x0, 0x4007) socket$netlink(0x10, 0x3, 0xb) 13.330949341s ago: executing program 4 (id=4278): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x4000) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x1208c00, &(0x7f00000000c0)={[{@noload}, {@minixdf}, {@init_itable}, {@nombcache}, {@nodelalloc}, {@nolazytime}, {@noauto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@acl}]}, 0x1, 0x532, &(0x7f0000000940)="$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") getpeername$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip_vti0\x00', r4, 0x1, 0x8000, 0x6, 0x4a, {{0x13, 0x4, 0x3, 0x14, 0x4c, 0x65, 0x0, 0xc0, 0x2f, 0x0, @loopback, @local, {[@cipso={0x86, 0x29, 0x3, [{0x2, 0x7, "6c3b6c6888"}, {0x1, 0xf, "3ae9a1a251f88a5708b74212e9"}, {0x7, 0xd, "a36cf7ee7b42d5bb5a3313"}]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x32, [@remote, @broadcast]}]}}}}}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800090400000000000000000a000000000000000000000008001e80"], 0x2c}}, 0x0) 13.325479312s ago: executing program 9 (id=4279): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) r2 = gettid() timer_create(0x3, &(0x7f0000000000)={0x0, 0x1f, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) syz_usb_connect$cdc_ecm(0x2, 0x53, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x10, 0x4, 0x8, 0x2, 0x0, r3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r5, &(0x7f00000003c0), 0x100000000000022d) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) shutdown(r0, 0x0) 12.539865611s ago: executing program 9 (id=4281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd2e, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_DPORT={0x6, 0x1d, 0x4e21}]}, 0x24}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_udp(0x2, 0x2, 0x0) 12.022134846s ago: executing program 0 (id=4282): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x208810, &(0x7f0000000100), 0xff, 0x4c4, &(0x7f00000001c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x5, 0xc, 0x40, 0x3, 0x41}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000840)='./file0\x00', 0x188) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') 11.943568951s ago: executing program 0 (id=4283): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x1, 0x5003) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b63, 0x4) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @empty}}}, 0x108) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000280)=0x1e) sched_setaffinity(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ppoll(&(0x7f0000000540), 0x0, &(0x7f0000000580)={0x0, 0x989680}, &(0x7f00000005c0)={[0xdd46]}, 0x8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) ioprio_set$pid(0x3, 0x0, 0x4007) socket$netlink(0x10, 0x3, 0xb) 11.926020172s ago: executing program 4 (id=4284): r0 = timerfd_create(0x0, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000001c0)=0x80000000) syz_socket_connect_nvme_tcp() r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r6}, @RTA_DST={0x8, 0x1, @remote}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0xea5bc50b6199d77e) 11.438140286s ago: executing program 6 (id=4285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) connect$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000", 0x1a, 0x8000, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read(r4, 0x0, 0x0) read$FUSE(r4, &(0x7f0000003f00)={0x2020}, 0x2020) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) setgroups(0x0, 0x0) 10.499667323s ago: executing program 0 (id=4286): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000300)}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00"/44], 0x40}, 0x20000000) 10.320786092s ago: executing program 9 (id=4287): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x1, 0x5003) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b63, 0x4) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @empty}}}, 0x108) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000280)=0x1e) sched_setaffinity(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ppoll(&(0x7f0000000540), 0x0, &(0x7f0000000580)={0x0, 0x989680}, &(0x7f00000005c0)={[0xdd46]}, 0x8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) ioprio_set$pid(0x3, 0x0, 0x4007) socket$netlink(0x10, 0x3, 0xb) 10.291022913s ago: executing program 0 (id=4288): sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x4000) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x1208c00, &(0x7f00000000c0)={[{@noload}, {@minixdf}, {@init_itable}, {@nombcache}, {@nodelalloc}, {@nolazytime}, {@noauto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@acl}]}, 0x1, 0x532, &(0x7f0000000940)="$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") getpeername$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip_vti0\x00', r4, 0x1, 0x8000, 0x6, 0x4a, {{0x13, 0x4, 0x3, 0x14, 0x4c, 0x65, 0x0, 0xc0, 0x2f, 0x0, @loopback, @local, {[@cipso={0x86, 0x29, 0x3, [{0x2, 0x7, "6c3b6c6888"}, {0x1, 0xf, "3ae9a1a251f88a5708b74212e9"}, {0x7, 0xd, "a36cf7ee7b42d5bb5a3313"}]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x32, [@remote, @broadcast]}]}}}}}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800090400000000000000000a000000000000000000000008001e80"], 0x2c}}, 0x0) 10.239901856s ago: executing program 6 (id=4289): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x65, 0x0, &(0x7f00000000c0)) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r6 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f0000000200)=ANY=[@ANYBLOB]) keyctl$invalidate(0x15, r6) r7 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x2d3}) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000300)="0800c8460f2a2a2a", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00"/44], 0x40}, 0x20000000) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) close_range(r7, 0xffffffffffffffff, 0x0) r9 = add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r9, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 5.247249197s ago: executing program 9 (id=4290): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x208810, &(0x7f0000000100), 0xff, 0x4c4, &(0x7f00000001c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x5, 0xc, 0x40, 0x3, 0x41}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000840)='./file0\x00', 0x188) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') 5.215866458s ago: executing program 6 (id=4291): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x4000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x1208c00, &(0x7f00000000c0)={[{@noload}, {@minixdf}, {@init_itable}, {@nombcache}, {@nodelalloc}, {@nolazytime}, {@noauto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@acl}]}, 0x1, 0x532, &(0x7f0000000940)="$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") getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip_vti0\x00', r3, 0x1, 0x8000, 0x6, 0x4a, {{0x13, 0x4, 0x3, 0x14, 0x4c, 0x65, 0x0, 0xc0, 0x2f, 0x0, @loopback, @local, {[@cipso={0x86, 0x29, 0x3, [{0x2, 0x7, "6c3b6c6888"}, {0x1, 0xf, "3ae9a1a251f88a5708b74212e9"}, {0x7, 0xd, "a36cf7ee7b42d5bb5a3313"}]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x32, [@remote, @broadcast]}]}}}}}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800090400000000000000000a000000000000000000000008001e80"], 0x2c}}, 0x0) 3.480735685s ago: executing program 4 (id=4292): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x1, 0x5003) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b63, 0x4) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @empty}}}, 0x108) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000280)=0x1e) sched_setaffinity(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ppoll(&(0x7f0000000540), 0x0, &(0x7f0000000580)={0x0, 0x989680}, &(0x7f00000005c0)={[0xdd46]}, 0x8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) ioprio_set$pid(0x3, 0x0, 0x4007) socket$netlink(0x10, 0x3, 0xb) 3.478814655s ago: executing program 6 (id=4293): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x65, 0x0, &(0x7f00000000c0)) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r6 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f0000000200)=ANY=[@ANYBLOB]) keyctl$invalidate(0x15, r6) r7 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r8 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x2d3}) r9 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r9, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000300)="0800c8460f2a2a2a", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00"/44], 0x40}, 0x20000000) close_range(r8, r8, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r10 = add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r10, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 3.472849346s ago: executing program 0 (id=4294): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x65, 0x0, &(0x7f00000000c0)) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r6 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f0000000200)=ANY=[@ANYBLOB]) keyctl$invalidate(0x15, r6) r7 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x2d3}) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000300)="0800c8460f2a2a2a", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00"/44], 0x40}, 0x20000000) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) close_range(r7, 0xffffffffffffffff, 0x0) r9 = add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r9, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 3.329704433s ago: executing program 6 (id=4295): timerfd_create(0x0, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000001c0)=0x80000000) syz_socket_connect_nvme_tcp() r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r5}, @RTA_DST={0x8, 0x1, @remote}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0xea5bc50b6199d77e) 2.326778763s ago: executing program 9 (id=4296): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) brk(0x689d80000003) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x80003, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000}, 0x38) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x318, 0x0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x280, 0x230, 0x230, 0x280, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x160, 0x1a8, 0x0, {0x1000000}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x44}, [0xffffffff, 0x54691080da52b893, 0xff, 0xffffff00], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff, 0xff, 0xff, 0xffffff], @ipv6=@private0, [0xffffff00, 0xffffff00, 0xff], @ipv6=@mcast2, [0xffffff00, 0xffffff00, 0xffffff00, 0xffff00], 0xfffffffe, 0x6, 0x1d, 0x4e23, 0x4e21, 0x4e22, 0x4e22, 0xa00, 0x2200}, 0x100, 0x1004, 0x4e22, 0x4e23, 0x4e22, 0x4e23}}, @common=@unspec=@state={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x378) 2.314011584s ago: executing program 41 (id=4274): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x1, 0x5003) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b63, 0x4) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @empty}}}, 0x108) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000280)=0x1e) sched_setaffinity(0x0, 0x0, 0x0) ppoll(&(0x7f0000000540), 0x0, &(0x7f0000000580)={0x0, 0x989680}, &(0x7f00000005c0)={[0xdd46]}, 0x8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) ioprio_set$pid(0x3, 0x0, 0x4007) socket$netlink(0x10, 0x3, 0xb) 1.349483312s ago: executing program 4 (id=4298): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x1, 0x5003) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b63, 0x4) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @empty}}}, 0x108) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000280)=0x1e) sched_setaffinity(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ppoll(&(0x7f0000000540), 0x0, &(0x7f0000000580)={0x0, 0x989680}, &(0x7f00000005c0)={[0xdd46]}, 0x8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) ioprio_set$pid(0x3, 0x0, 0x4007) socket$netlink(0x10, 0x3, 0xb) 1.184189931s ago: executing program 0 (id=4299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd2e, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_DPORT={0x6, 0x1d, 0x4e21}]}, 0x24}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x8]}, 0x8, 0x80000) read$FUSE(r4, &(0x7f0000000140)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd4(r4, &(0x7f0000000040)={[0xffffffffffff0150]}, 0x8, 0x80800) socket$inet_udp(0x2, 0x2, 0x0) 729.254214ms ago: executing program 6 (id=4300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd2e, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_DPORT={0x6, 0x1d, 0x4e21}]}, 0x24}}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269b3, 0x8031, 0xffffffffffffffff, 0x99cf0000) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffffffff0150]}, 0x8, 0x80800) socket$inet_udp(0x2, 0x2, 0x0) 239.486588ms ago: executing program 9 (id=4301): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x65, 0x0, &(0x7f00000000c0)) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r6 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f0000000200)=ANY=[@ANYBLOB]) keyctl$invalidate(0x15, r6) r7 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r8 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x2d3}) socket$inet(0x2, 0x2, 0x1) close_range(r8, r8, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) close_range(r7, 0xffffffffffffffff, 0x0) r9 = add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r9, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 185.523281ms ago: executing program 4 (id=4302): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) listen(r2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) 0s ago: executing program 4 (id=4303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269b3, 0x8031, 0xffffffffffffffff, 0x99cf0000) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffffffff0150]}, 0x8, 0x80800) socket$inet_udp(0x2, 0x2, 0x0) kernel console output (not intermixed with test programs): hashlimit: size too large, truncated to 1048576 [ 347.022495][ T6100] loop8: detected capacity change from 0 to 512 [ 347.094325][ T6103] loop5: detected capacity change from 0 to 1024 [ 347.131147][ T6103] EXT4-fs (loop5): error: could not find journal device path: error -2 [ 347.155386][ T6105] loop1: detected capacity change from 0 to 512 [ 347.175121][ T6101] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.185377][ T6103] loop5: detected capacity change from 0 to 256 [ 347.190965][ T6101] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.199283][ T6101] device bridge_slave_0 entered promiscuous mode [ 347.208984][ T6101] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.216118][ T6101] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.223737][ T6101] device bridge_slave_1 entered promiscuous mode [ 347.235322][ T6105] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1943: inode has both inline data and extents flags [ 347.252215][ T8] device bridge_slave_1 left promiscuous mode [ 347.258469][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.266420][ T6105] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1943: couldn't read orphan inode 15 (err -117) [ 347.283391][ T6103] FAT-fs (loop5): Directory bread(block 64) failed [ 347.290511][ T8] device bridge_slave_0 left promiscuous mode [ 347.296750][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.296773][ T6103] FAT-fs (loop5): Directory bread(block 65) failed [ 347.305112][ T6105] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 347.322781][ T8] device veth1_macvtap left promiscuous mode [ 347.328928][ T8] device veth0_vlan left promiscuous mode [ 347.339998][ T6103] FAT-fs (loop5): Directory bread(block 66) failed [ 347.346645][ T6103] FAT-fs (loop5): Directory bread(block 67) failed [ 347.369163][ T6103] FAT-fs (loop5): Directory bread(block 68) failed [ 347.375832][ T6103] FAT-fs (loop5): Directory bread(block 69) failed [ 347.388189][ T30] audit: type=1400 audit(1774316087.097:506): avc: denied { link } for pid=6104 comm="syz.1.1943" name="#23" dev="loop1" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 347.421205][ T6103] FAT-fs (loop5): Directory bread(block 70) failed [ 347.430009][ T6103] FAT-fs (loop5): Directory bread(block 71) failed [ 347.441162][ T6103] FAT-fs (loop5): Directory bread(block 72) failed [ 347.458343][ T6103] FAT-fs (loop5): Directory bread(block 73) failed [ 347.582962][ T6114] EXT4-fs (loop1): Test dummy encryption mode enabled [ 347.630706][ T6114] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,test_dummy_encryption,noblock_validity,commit=0x0000000000000005,inlinecrypt,grpjquota=,nombcache,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 348.046648][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 348.054978][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.117578][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 348.128426][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.138407][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.145745][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.181132][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.212155][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.273547][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.280662][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.546056][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 348.561753][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.571002][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.579146][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.587297][ T30] audit: type=1400 audit(1774316088.297:507): avc: denied { map } for pid=6131 comm="syz.1.1950" path="socket:[33400]" dev="sockfs" ino=33400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 348.590308][ T6128] EXT4-fs (loop8): Ignoring removed bh option [ 348.642798][ T30] audit: type=1400 audit(1774316088.327:508): avc: denied { accept } for pid=6131 comm="syz.1.1950" path="socket:[33400]" dev="sockfs" ino=33400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 348.670200][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.687227][ T6134] overlayfs: failed to resolve './file0': -2 [ 348.700858][ T6128] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 348.715973][ T6101] device veth0_vlan entered promiscuous mode [ 348.725852][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 348.734439][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 348.742986][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 348.751063][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 348.759744][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 348.762047][ T6128] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,bh,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,quota,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: writeback. [ 348.812110][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 348.821082][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 348.832370][ T6101] device veth1_macvtap entered promiscuous mode [ 348.842991][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 348.851237][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 348.859653][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 348.875051][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 348.894004][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 348.906305][ T6125] set_capacity_and_notify: 2 callbacks suppressed [ 348.906323][ T6125] loop5: detected capacity change from 0 to 40427 [ 348.923510][ T6125] F2FS-fs (loop5): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 348.933319][ T6125] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 348.940440][ T485] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 348.942894][ T6125] F2FS-fs (loop5): fault_type options not supported [ 348.957445][ T6125] F2FS-fs (loop5): fault_injection options not supported [ 348.975036][ T6125] F2FS-fs (loop5): invalid crc value [ 349.006083][ T6125] F2FS-fs (loop5): Found nat_bits in checkpoint [ 349.070349][ T6125] F2FS-fs (loop5): Start checkpoint disabled! [ 349.100722][ T6125] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 349.110424][ T6125] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 349.115749][ T6155] Illegal XDP return value 4294967282, expect packet loss! [ 349.196500][ T6157] loop8: detected capacity change from 0 to 2048 [ 349.204218][ T30] audit: type=1400 audit(1774316088.917:509): avc: denied { lock } for pid=6124 comm="syz.5.1948" path="/145/file2/file1" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 349.243818][ T8] attempt to access beyond end of device [ 349.243818][ T8] loop5: rw=2049, want=40976, limit=40427 [ 349.265812][ T385] Alternate GPT is invalid, using primary GPT. [ 349.280326][ T385] loop8: p2 p3 p7 [ 349.291017][ T6157] Alternate GPT is invalid, using primary GPT. [ 349.298443][ T6157] loop8: p2 p3 p7 [ 349.320426][ T485] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.332315][ T485] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.342706][ T485] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 349.376051][ T485] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 349.387787][ T485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.397124][ T485] usb 2-1: config 0 descriptor?? [ 349.461808][ T1650] udevd[1650]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 349.476070][ T322] udevd[322]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 349.487273][ T385] udevd[385]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 349.504263][ T6160] loop8: detected capacity change from 0 to 512 [ 349.519512][ T322] udevd[322]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 349.519529][ T6162] loop5: detected capacity change from 0 to 1024 [ 349.534677][ T1650] udevd[1650]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 349.554633][ T385] udevd[385]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 349.566004][ T6160] EXT4-fs (loop8): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 349.587745][ T6160] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.605416][ T6162] EXT4-fs (loop5): Test dummy encryption mode enabled [ 349.646947][ T6162] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,test_dummy_encryption,noblock_validity,commit=0x0000000000000005,inlinecrypt,grpjquota=,nombcache,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 349.791731][ T6152] loop9: detected capacity change from 0 to 131072 [ 350.161238][ T485] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 350.169050][ T485] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 350.177063][ T485] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 350.184815][ T485] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 350.195773][ T6152] F2FS-fs (loop9): invalid crc value [ 350.300876][ T485] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 350.314176][ T485] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 350.329789][ T6152] F2FS-fs (loop9): Found nat_bits in checkpoint [ 350.361664][ T485] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 350.480257][ T485] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 350.508169][ T485] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 350.526421][ T485] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 350.539466][ T485] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 350.548564][ T6152] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 350.556174][ T485] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 350.585289][ T485] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 350.593285][ T485] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 350.608432][ T485] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 350.615326][ T6152] F2FS-fs (loop9): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 350.625955][ T485] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 350.640416][ T485] usb 2-1: USB disconnect, device number 16 [ 350.668989][ T6180] fido_id[6180]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 350.735972][ T6187] loop5: detected capacity change from 0 to 512 [ 350.878387][ T6187] loop5: detected capacity change from 0 to 256 [ 350.889668][ T6187] exfat: Deprecated parameter 'namecase' [ 350.900737][ T6197] loop8: detected capacity change from 0 to 512 [ 350.918637][ T6195] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 350.963806][ T6187] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 350.993101][ T6197] EXT4-fs (loop8): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 351.070351][ T6197] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.171213][ T6209] loop9: detected capacity change from 0 to 512 [ 351.220460][ T30] audit: type=1400 audit(1774316090.927:510): avc: denied { execute_no_trans } for pid=6214 comm="syz.5.1977" path="/149/bus/file0" dev="overlay" ino=825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 351.258483][ T6220] loop5: detected capacity change from 0 to 256 [ 351.307522][ T6209] EXT4-fs (loop9): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 351.352636][ T6209] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.515563][ T6220] FAT-fs (loop5): Directory bread(block 64) failed [ 351.611642][ T6220] FAT-fs (loop5): Directory bread(block 65) failed [ 351.618264][ T6220] FAT-fs (loop5): Directory bread(block 66) failed [ 351.631431][ T6220] FAT-fs (loop5): Directory bread(block 67) failed [ 351.640088][ T6220] FAT-fs (loop5): Directory bread(block 68) failed [ 351.658562][ T6220] FAT-fs (loop5): Directory bread(block 69) failed [ 351.665366][ T6220] FAT-fs (loop5): Directory bread(block 70) failed [ 351.672374][ T6220] FAT-fs (loop5): Directory bread(block 71) failed [ 351.907518][ T6220] FAT-fs (loop5): Directory bread(block 72) failed [ 351.915090][ T6220] FAT-fs (loop5): Directory bread(block 73) failed [ 352.070277][ T30] audit: type=1400 audit(1774316091.757:511): avc: denied { setopt } for pid=6236 comm="syz.8.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 352.158246][ T6239] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 352.170221][ T20] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 352.199069][ T6239] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:476: comm syz.8.1986: Invalid block bitmap block 48142 in block_group 0 [ 352.550645][ T20] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 352.614650][ T6260] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 352.770418][ T20] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 352.786769][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 352.917240][ T20] usb 2-1: Product: syz [ 352.922705][ T20] usb 2-1: Manufacturer: syz [ 352.934337][ T20] usb 2-1: SerialNumber: syz [ 353.233924][ T20] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 353.426002][ T30] audit: type=1400 audit(1774316093.137:512): avc: denied { read write } for pid=6231 comm="syz.1.1984" name="lp0" dev="devtmpfs" ino=1904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 353.440458][ T26] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 353.479928][ T30] audit: type=1400 audit(1774316093.137:513): avc: denied { open } for pid=6231 comm="syz.1.1984" path="/dev/usb/lp0" dev="devtmpfs" ino=1904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 353.560212][ T369] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 353.584535][ T6279] overlayfs: failed to clone upperpath [ 353.663071][ T30] audit: type=1400 audit(1774316093.377:514): avc: denied { unmount } for pid=6101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 353.910242][ T26] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.020415][ T369] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.031529][ T369] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 354.041955][ T26] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 354.051128][ T26] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 354.059155][ T26] usb 6-1: Product: syz [ 354.063398][ T26] usb 6-1: SerialNumber: syz [ 354.120210][ T2720] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 354.210242][ T369] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 354.219376][ T369] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.227473][ T369] usb 9-1: Product: syz [ 354.231745][ T369] usb 9-1: Manufacturer: syz [ 354.236366][ T369] usb 9-1: SerialNumber: syz [ 354.280791][ T369] cdc_mbim 9-1:1.0: skipping garbage [ 354.481591][ T6269] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 354.520274][ T2720] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.537544][ T2720] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.553006][ T20] usb 2-1: USB disconnect, device number 17 [ 354.562263][ T20] usblp0: removed [ 354.571649][ T6305] set_capacity_and_notify: 5 callbacks suppressed [ 354.571694][ T6305] loop2: detected capacity change from 0 to 7 [ 354.584997][ T6305] loop2: [ 354.601738][ T6307] loop1: detected capacity change from 0 to 256 [ 354.630277][ T2720] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 354.639620][ T2720] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 354.647818][ T2720] usb 10-1: Manufacturer: syz [ 354.653920][ T2720] usb 10-1: config 0 descriptor?? [ 354.741329][ T6307] FAT-fs (loop1): Directory bread(block 64) failed [ 354.747896][ T6307] FAT-fs (loop1): Directory bread(block 65) failed [ 354.754688][ T6307] FAT-fs (loop1): Directory bread(block 66) failed [ 354.761615][ T6307] FAT-fs (loop1): Directory bread(block 67) failed [ 354.768177][ T6307] FAT-fs (loop1): Directory bread(block 68) failed [ 354.774975][ T6307] FAT-fs (loop1): Directory bread(block 69) failed [ 354.781779][ T6307] FAT-fs (loop1): Directory bread(block 70) failed [ 354.788410][ T6307] FAT-fs (loop1): Directory bread(block 71) failed [ 354.795049][ T6307] FAT-fs (loop1): Directory bread(block 72) failed [ 354.801652][ T6307] FAT-fs (loop1): Directory bread(block 73) failed [ 355.090219][ T306] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 355.130530][ T6269] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 355.150243][ T369] cdc_mbim 9-1:1.0: dwNtbInMaxSize=2 is too small. Using 2048 [ 355.157830][ T369] cdc_mbim 9-1:1.0: setting rx_max = 2048 [ 355.200296][ T26] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 355.206797][ T26] cdc_ncm 6-1:1.0: dwNtbInMaxSize=177 is too small. Using 2048 [ 355.214597][ T26] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 355.360326][ T369] cdc_mbim 9-1:1.0: setting tx_max = 40 [ 355.370689][ T369] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 355.378524][ T369] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, b2:3b:7b:bb:a9:40 [ 355.407522][ T369] usb 9-1: USB disconnect, device number 3 [ 355.416400][ T369] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 355.425300][ T26] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 355.433362][ T26] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM, 42:42:42:42:42:42 [ 355.465182][ T26] usb 6-1: USB disconnect, device number 11 [ 355.474713][ T26] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM [ 355.490234][ T306] usb 2-1: unable to get BOS descriptor or descriptor too short [ 355.540240][ T306] usb 2-1: not running at top speed; connect to a high speed hub [ 355.552364][ T2720] input: syz Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0010/input/input18 [ 355.575466][ T2720] input: syz Pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0010/input/input19 [ 355.588556][ T2720] uclogic 0003:256C:006D.0010: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.9-1/input0 [ 355.620302][ T306] usb 2-1: config 1 has an invalid descriptor of length 44, skipping remainder of the config [ 355.638787][ T306] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 355.662861][ T306] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 110, changing to 4 [ 355.684359][ T306] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 26999, setting to 1023 [ 355.772960][ T2720] usb 10-1: USB disconnect, device number 2 [ 355.870320][ T306] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 355.879417][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.900285][ T306] usb 2-1: Product: syz [ 355.904500][ T306] usb 2-1: Manufacturer: syz [ 355.909115][ T306] usb 2-1: SerialNumber: syz [ 355.946541][ T6342] APIC base relocation is unsupported by KVM [ 355.997537][ T6347] loop8: detected capacity change from 0 to 1024 [ 356.046099][ T6349] x_tables: duplicate underflow at hook 1 [ 356.131123][ T6347] EXT4-fs (loop8): Test dummy encryption mode enabled [ 356.205172][ T6347] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,test_dummy_encryption,noblock_validity,commit=0x0000000000000005,inlinecrypt,grpjquota=,nombcache,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 356.360367][ T306] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 356.483605][ T306] usb 2-1: USB disconnect, device number 18 [ 356.764302][ T6368] loop9: detected capacity change from 0 to 256 [ 356.877981][ T385] udevd[385]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 356.955324][ T6380] loop8: detected capacity change from 0 to 256 [ 357.143032][ T6380] FAT-fs (loop8): Directory bread(block 64) failed [ 357.192345][ T6380] FAT-fs (loop8): Directory bread(block 65) failed [ 357.211262][ T6380] FAT-fs (loop8): Directory bread(block 66) failed [ 357.218156][ T6380] FAT-fs (loop8): Directory bread(block 67) failed [ 357.226682][ T6380] FAT-fs (loop8): Directory bread(block 68) failed [ 357.234356][ T6380] FAT-fs (loop8): Directory bread(block 69) failed [ 357.241913][ T6380] FAT-fs (loop8): Directory bread(block 70) failed [ 357.249015][ T6380] FAT-fs (loop8): Directory bread(block 71) failed [ 357.256476][ T6380] FAT-fs (loop8): Directory bread(block 72) failed [ 357.263709][ T6380] FAT-fs (loop8): Directory bread(block 73) failed [ 357.909672][ T6396] x_tables: duplicate underflow at hook 1 [ 358.075976][ T6406] x_tables: duplicate underflow at hook 1 [ 358.382809][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 358.391589][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 358.399924][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 358.408913][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 358.438371][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 358.451493][ T6413] loop8: detected capacity change from 0 to 1024 [ 358.464587][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 358.487168][ T6413] EXT4-fs (loop8): Test dummy encryption mode enabled [ 358.504770][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 358.530059][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 358.538646][ T2720] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 358.550936][ T6413] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,test_dummy_encryption,noblock_validity,commit=0x0000000000000005,inlinecrypt,grpjquota=,nombcache,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 358.677157][ T6423] loop5: detected capacity change from 0 to 256 [ 359.040392][ T2720] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 359.058692][ T6428] loop1: detected capacity change from 0 to 4096 [ 359.164676][ T6428] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 359.400430][ T2720] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.435619][ T2720] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.470517][ T2720] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 359.510203][ T2720] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 359.539609][ T2720] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.574342][ T2720] usb 10-1: config 0 descriptor?? [ 359.615731][ T6445] loop8: detected capacity change from 0 to 512 [ 359.712723][ T6445] EXT4-fs (loop8): Ignoring removed oldalloc option [ 359.729882][ T6445] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 359.770086][ T6445] EXT4-fs error (device loop8): ext4_orphan_get:1426: comm syz.8.2047: bad orphan inode 131083 [ 359.800539][ T6445] EXT4-fs (loop8): mounted filesystem without journal. Opts: journal_dev=0x0000000000000005,init_itable,oldalloc,,errors=continue. Quota mode: none. [ 359.959766][ T6460] x_tables: duplicate underflow at hook 1 [ 360.051202][ T2720] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 360.058663][ T2720] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 360.073764][ T2720] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 360.083060][ T2720] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 360.115675][ T2720] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 360.123413][ T2720] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 360.132426][ T2720] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 360.140068][ T2720] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 360.148029][ T2720] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 360.160675][ T2720] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 360.168197][ T2720] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 360.175776][ T2720] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 360.183409][ T2720] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 360.190950][ T2720] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 360.198458][ T2720] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 360.206210][ T2720] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 360.217159][ T2720] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 360.322893][ T6478] loop5: detected capacity change from 0 to 512 [ 360.371169][ T2720] usb 10-1: USB disconnect, device number 3 [ 360.409075][ T6478] EXT4-fs (loop5): 1 truncate cleaned up [ 360.420403][ T6478] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 360.457077][ T6478] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2057: bg 0: block 465: padding at end of block bitmap is not set [ 360.555556][ T6478] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2057: invalid indirect mapped block 234881024 (level 0) [ 360.597054][ T6486] loop1: detected capacity change from 0 to 256 [ 361.133110][ T6501] loop9: detected capacity change from 0 to 128 [ 361.196423][ T6508] device syzkaller0 entered promiscuous mode [ 361.241734][ T6501] EXT4-fs (loop9): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,delalloc,,errors=continue. Quota mode: none. [ 361.258683][ T6501] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.279662][ T6501] overlayfs: upper fs needs to support d_type. [ 361.298884][ T30] audit: type=1400 audit(1774316101.007:515): avc: denied { unlink } for pid=6101 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 361.484508][ T6533] x_tables: duplicate underflow at hook 1 [ 361.492265][ T6534] xt_hashlimit: size too large, truncated to 1048576 [ 361.683724][ T6540] loop1: detected capacity change from 0 to 512 [ 361.708017][ T6540] EXT4-fs (loop1): Ignoring removed nobh option [ 361.725860][ T6540] EXT4-fs (loop1): Test dummy encryption mode enabled [ 361.741496][ T6540] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 361.776742][ T6540] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.2079: iget: bad i_size value: -3674898675588399094 [ 361.805690][ T6540] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2079: couldn't read orphan inode 15 (err -117) [ 361.827622][ T6540] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,debug_want_extra_isize=0x0000000000000004,data_err=ignore,nojournal_checksum,dioread_nolock,test_dummy_encryption=v1,,errors=continue. Quota mode: writeback. [ 361.973747][ T6540] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.2079: bg 0: block 5: invalid block bitmap [ 361.991380][ T6540] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 362.003901][ T6540] EXT4-fs (loop1): This should not happen!! Data will be lost [ 362.003901][ T6540] [ 362.014524][ T6540] EXT4-fs (loop1): Total free blocks count 0 [ 362.020816][ T6540] EXT4-fs (loop1): Free/Dirty block details [ 362.055335][ T6540] EXT4-fs (loop1): free_blocks=0 [ 362.062866][ T6540] EXT4-fs (loop1): dirty_blocks=1 [ 362.068088][ T6540] EXT4-fs (loop1): Block reservation details [ 362.080887][ T6540] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 362.137805][ T6553] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 362.145874][ T6553] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 362.163628][ T6551] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 362.175128][ T6555] loop1: detected capacity change from 0 to 256 [ 362.182200][ T6555] exfat: Deprecated parameter 'namecase' [ 362.187965][ T6555] exfat: Deprecated parameter 'namecase' [ 362.196453][ T6555] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2a40b14e, utbl_chksum : 0xe619d30d) [ 362.421612][ T6573] loop8: detected capacity change from 0 to 1024 [ 362.429483][ T6575] loop5: detected capacity change from 0 to 512 [ 362.445567][ T6573] EXT4-fs (loop8): Ignoring removed orlov option [ 362.457010][ T6573] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 362.458456][ T281] exFAT-fs (loop1): invalid start cluster (4278190088) [ 362.486533][ T6573] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_nolock,orlov,noauto_da_alloc,noauto_da_alloc,stripe=0x0000000000000008,norecovery,dioread_nolock,grpquota,discard,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,lazytime,. Quota mode: writeback. [ 362.499983][ T6575] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,errors=remount-ro,. Quota mode: writeback. [ 362.513407][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 362.534957][ T6575] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.540580][ T1586] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 362.569114][ T6573] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3885: comm syz.8.2091: Allocating blocks 497-513 which overlap fs metadata [ 362.585585][ T6581] loop1: detected capacity change from 0 to 512 [ 362.592215][ T6573] EXT4-fs (loop8): Remounting filesystem read-only [ 362.599015][ T6573] EXT4-fs (loop8): pa ffff888112f35498: logic 131328, phys. 449, len 4 [ 362.607485][ T6573] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 362.618078][ T6581] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 362.625808][ T6573] EXT4-fs (loop8): Remounting filesystem read-only [ 362.637902][ T6581] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #11: comm syz.1.2093: iget: bad extended attribute block 3153 [ 362.651677][ T6581] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2093: couldn't read orphan inode 11 (err -117) [ 362.664120][ T6581] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,nogrpid,,errors=continue. Quota mode: none. [ 362.693446][ T281] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /406/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 362.715333][ T281] EXT4-fs error (device loop1): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extended attribute block 3153 [ 362.728797][ T281] EXT4-fs error (device loop1): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extended attribute block 3153 [ 362.819278][ T5562] device syz_tun left promiscuous mode [ 362.828481][ T5562] bridge0: port 1(syz_tun) entered disabled state [ 362.840199][ T1586] usb 10-1: Using ep0 maxpacket: 16 [ 362.960423][ T1586] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.986037][ T1586] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.006444][ T1586] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 363.032541][ T1586] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 363.051281][ T1586] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.062797][ T1586] usb 10-1: config 0 descriptor?? [ 363.088551][ T6597] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.095925][ T6597] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.105528][ T6597] device bridge_slave_0 entered promiscuous mode [ 363.115617][ T6597] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.122806][ T6597] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.130493][ T6597] device bridge_slave_1 entered promiscuous mode [ 363.166201][ T6608] loop8: detected capacity change from 0 to 512 [ 363.182329][ T6608] EXT4-fs (loop8): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 363.197032][ T6608] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.234041][ T6597] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.241176][ T6597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.248588][ T6597] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.255726][ T6597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.295449][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 363.310906][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 363.319663][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 363.329052][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 363.337974][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 363.353875][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 363.362632][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 363.581746][ T1586] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 363.590333][ T30] audit: type=1400 audit(1774316103.287:516): avc: denied { watch_reads } for pid=6614 comm="syz.5.2105" path="/179/file0" dev="tmpfs" ino=983 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 363.615824][ T1586] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 363.630367][ T1586] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 363.638708][ T6597] device veth0_vlan entered promiscuous mode [ 363.645956][ T1586] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 363.653513][ T30] audit: type=1400 audit(1774316103.337:517): avc: denied { module_request } for pid=6597 comm="syz-executor" kmod="netdev-virt_wifi0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 363.677201][ T1586] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 363.684688][ T1586] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 363.692363][ T1586] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 363.699668][ T1586] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 363.707230][ T1586] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 363.714692][ T1586] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 363.725316][ T1586] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0012/input/input20 [ 363.740279][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 363.748555][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 363.757037][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 363.765388][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 363.789397][ T6597] device veth1_macvtap entered promiscuous mode [ 363.803912][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 363.812754][ T1586] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 363.821315][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 363.838950][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 363.846900][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 363.855393][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 363.864084][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 363.869685][ T1586] usb 10-1: USB disconnect, device number 4 [ 363.873985][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 364.033387][ T6630] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 364.054943][ T6630] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 364.069808][ T6630] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 364.082566][ T6630] EXT4-fs (loop3): This should not happen!! Data will be lost [ 364.082566][ T6630] [ 364.092590][ T6630] EXT4-fs (loop3): Total free blocks count 0 [ 364.098604][ T6630] EXT4-fs (loop3): Free/Dirty block details [ 364.105070][ T6630] EXT4-fs (loop3): free_blocks=4096 [ 364.111689][ T6630] EXT4-fs (loop3): dirty_blocks=48 [ 364.117216][ T6630] EXT4-fs (loop3): Block reservation details [ 364.124780][ T6630] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 364.140442][ T6630] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 364.153754][ T6630] EXT4-fs (loop3): This should not happen!! Data will be lost [ 364.153754][ T6630] [ 364.173197][ T30] audit: type=1400 audit(1774316103.887:518): avc: denied { map } for pid=6629 comm="syz.3.2100" path="/0/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 364.262244][ T6635] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.269378][ T6635] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.283466][ T6635] device bridge_slave_0 entered promiscuous mode [ 364.290825][ T6635] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.297923][ T6635] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.305763][ T6635] device bridge_slave_1 entered promiscuous mode [ 364.359572][ T6643] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 364.389986][ T6643] overlayfs: failed to set xattr on upper [ 364.421682][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 364.429449][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 364.441283][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 364.449773][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 364.458363][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.465466][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.488678][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 364.496589][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 364.517126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 364.530742][ T6651] x_tables: duplicate underflow at hook 1 [ 364.534217][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.543596][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.578225][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 364.595428][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 364.635741][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 364.655479][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 364.680803][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 364.699157][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 364.708298][ T6635] device veth0_vlan entered promiscuous mode [ 364.723932][ T6664] set_capacity_and_notify: 1 callbacks suppressed [ 364.723951][ T6664] loop8: detected capacity change from 0 to 512 [ 364.760671][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 364.771363][ T6664] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.2125: bg 0: block 248: padding at end of block bitmap is not set [ 364.791490][ T6667] loop9: detected capacity change from 0 to 256 [ 364.851033][ T6670] x_tables: duplicate underflow at hook 1 [ 364.915136][ T6635] device veth1_macvtap entered promiscuous mode [ 364.926869][ T6664] Quota error (device loop8): write_blk: dquota write failed [ 364.934469][ T6664] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 364.944581][ T6664] EXT4-fs error (device loop8): ext4_acquire_dquot:6225: comm syz.8.2125: Failed to acquire dquot type 1 [ 364.956734][ T6664] EXT4-fs (loop8): 1 truncate cleaned up [ 364.962453][ T6664] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 364.980064][ T6664] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.079392][ T30] audit: type=1400 audit(1774316104.787:519): avc: denied { mount } for pid=6672 comm="syz.4.2126" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 365.107667][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 365.136446][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 365.163880][ T30] audit: type=1400 audit(1774316104.827:520): avc: denied { associate } for pid=6674 comm="syz.4.2126" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 365.250803][ T6677] loop0: detected capacity change from 0 to 1024 [ 365.281802][ T6677] EXT4-fs (loop0): Ignoring removed oldalloc option [ 365.296919][ T6677] EXT4-fs (loop0): Ignoring removed bh option [ 365.320394][ T6677] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 366.391425][ T6677] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 366.586885][ T6677] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3885: comm syz.0.2113: Allocating blocks 497-513 which overlap fs metadata [ 366.601767][ T30] audit: type=1400 audit(1774316106.317:521): avc: denied { mounton } for pid=6688 comm="syz.3.2130" path="/3/file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 366.602444][ T6689] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 366.651736][ T6689] FAT-fs (loop7): unable to read boot sector [ 366.667648][ T6677] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3885: comm syz.0.2113: Allocating blocks 497-513 which overlap fs metadata [ 366.715100][ T6696] loop9: detected capacity change from 0 to 256 [ 366.770397][ T6696] exfat: Unknown parameter 'ÿÿÿÿ' [ 366.974300][ T6709] loop3: detected capacity change from 0 to 512 [ 367.013174][ T6708] loop8: detected capacity change from 0 to 512 [ 367.189978][ T6714] x_tables: duplicate underflow at hook 1 [ 367.230490][ T6709] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 367.465080][ T6708] EXT4-fs (loop8): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 367.562373][ T6709] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #11: comm syz.3.2136: iget: bad extended attribute block 3153 [ 367.579575][ T6709] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2136: couldn't read orphan inode 11 (err -117) [ 367.591618][ T6708] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.602040][ T6709] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,nogrpid,,errors=continue. Quota mode: none. [ 367.638784][ T6721] loop9: detected capacity change from 0 to 256 [ 367.981334][ T6729] x_tables: duplicate underflow at hook 1 [ 368.261007][ T30] audit: type=1326 audit(1774316107.977:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8daccd6799 code=0x7ffc0000 [ 368.315045][ T30] audit: type=1326 audit(1774316107.997:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8daccd6799 code=0x7ffc0000 [ 368.406385][ T30] audit: type=1326 audit(1774316107.997:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8daccd6799 code=0x7ffc0000 [ 368.457782][ T6742] x_tables: duplicate underflow at hook 1 [ 368.668752][ T30] audit: type=1326 audit(1774316107.997:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8daccd6799 code=0x7ffc0000 [ 368.762788][ T30] audit: type=1326 audit(1774316108.007:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8daccd6799 code=0x7ffc0000 [ 368.786194][ T30] audit: type=1326 audit(1774316108.007:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8daccd6799 code=0x7ffc0000 [ 368.809719][ T30] audit: type=1326 audit(1774316108.007:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8daccd6799 code=0x7ffc0000 [ 368.833571][ T30] audit: type=1326 audit(1774316108.007:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8daccd6799 code=0x7ffc0000 [ 368.859977][ T30] audit: type=1326 audit(1774316108.007:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8daccd6799 code=0x7ffc0000 [ 368.866264][ T6733] loop8: detected capacity change from 0 to 40427 [ 368.934932][ T6733] F2FS-fs (loop8): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 368.962103][ T6733] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 368.994116][ T6733] F2FS-fs (loop8): fault_type options not supported [ 369.009871][ T6733] F2FS-fs (loop8): fault_injection options not supported [ 369.029386][ T6733] F2FS-fs (loop8): invalid crc value [ 369.059550][ T6733] F2FS-fs (loop8): Found nat_bits in checkpoint [ 369.140736][ T6733] F2FS-fs (loop8): Start checkpoint disabled! [ 369.163070][ T6733] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 369.171298][ T6733] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 369.211455][ T6733] attempt to access beyond end of device [ 369.211455][ T6733] loop8: rw=2049, want=45104, limit=40427 [ 369.295802][ T6733] attempt to access beyond end of device [ 369.295802][ T6733] loop8: rw=2049, want=45232, limit=40427 [ 369.405884][ T8] attempt to access beyond end of device [ 369.405884][ T8] loop8: rw=2049, want=40976, limit=40427 [ 369.663897][ T6775] x_tables: duplicate underflow at hook 1 [ 369.939012][ T6777] loop0: detected capacity change from 0 to 16 [ 370.027791][ T6777] erofs: (device loop0): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 370.224153][ T6772] loop3: detected capacity change from 0 to 40427 [ 370.269343][ T6772] F2FS-fs (loop3): invalid crc value [ 370.281534][ T6772] F2FS-fs (loop3): Found nat_bits in checkpoint [ 370.367134][ T6772] F2FS-fs (loop3): Start checkpoint disabled! [ 370.375251][ T6772] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 370.603474][ T6772] F2FS-fs (loop3): Unrecognized mount option "0000000000000000000400000000000000000000000" or missing value [ 370.650469][ T8] attempt to access beyond end of device [ 370.650469][ T8] loop3: rw=2049, want=40968, limit=40427 [ 370.671718][ T8] attempt to access beyond end of device [ 370.671718][ T8] loop3: rw=2049, want=40984, limit=40427 [ 370.679910][ T6795] loop9: detected capacity change from 0 to 40427 [ 370.755556][ T6795] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 370.765275][ T6795] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 370.780461][ T6795] F2FS-fs (loop9): invalid crc value [ 370.806954][ T6795] F2FS-fs (loop9): Found nat_bits in checkpoint [ 370.864089][ T6795] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 370.871371][ T6795] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 370.908475][ T6795] attempt to access beyond end of device [ 370.908475][ T6795] loop9: rw=2049, want=45104, limit=40427 [ 371.134735][ T6822] x_tables: duplicate underflow at hook 1 [ 371.310341][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 371.543931][ T6830] loop8: detected capacity change from 0 to 256 [ 371.557467][ T6832] loop9: detected capacity change from 0 to 512 [ 371.672076][ T6832] EXT4-fs (loop9): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 371.686105][ T6832] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.704104][ T6830] loop2: detected capacity change from 0 to 7 [ 371.770673][ T6830] loop2: [ 371.791866][ T6825] overlayfs: failed to clone upperpath [ 371.800079][ T101] loop2: [ 373.510943][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 373.510961][ T30] audit: type=1400 audit(1774316113.227:577): avc: denied { set_context_mgr } for pid=6854 comm="syz.9.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 373.543624][ T30] audit: type=1400 audit(1774316113.227:578): avc: denied { map } for pid=6854 comm="syz.9.2179" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 373.584373][ T30] audit: type=1400 audit(1774316113.257:579): avc: denied { call } for pid=6854 comm="syz.9.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 373.701043][ T6873] tipc: Resetting bearer [ 373.712250][ T6873] netlink: 'syz.4.2188': attribute type 16 has an invalid length. [ 373.730223][ T6873] netlink: 'syz.4.2188': attribute type 17 has an invalid length. [ 373.768077][ T6873] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.775308][ T6873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.821438][ T6873] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.828643][ T6873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.880398][ T6868] loop3: detected capacity change from 0 to 40427 [ 373.888974][ T6873] tipc: Resetting bearer [ 373.908404][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0.1: link becomes ready [ 373.916321][ T6868] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 373.924669][ T6868] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 373.943996][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan.3: link becomes ready [ 373.948517][ T6879] loop9: detected capacity change from 0 to 512 [ 373.957989][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): sit1: link becomes ready [ 373.966638][ T6868] F2FS-fs (loop3): invalid crc value [ 373.981678][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0.257: link becomes ready [ 374.002869][ T6868] F2FS-fs (loop3): Found nat_bits in checkpoint [ 374.031095][ T6879] EXT4-fs (loop9): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 374.060511][ T6879] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.152828][ T6868] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 374.159996][ T6868] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 374.571249][ T6861] loop8: detected capacity change from 0 to 131072 [ 374.589960][ T6861] F2FS-fs (loop8): Invalid log sectorsize (67108873) [ 374.597403][ T6861] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 374.611175][ T6861] F2FS-fs (loop8): invalid crc value [ 374.643920][ T6861] F2FS-fs (loop8): Found nat_bits in checkpoint [ 374.654836][ T6900] loop9: detected capacity change from 0 to 512 [ 374.721831][ T6861] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 374.731825][ T6900] EXT4-fs (loop9): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 374.734690][ T6861] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 374.755988][ T6900] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.202477][ T383] device bridge_slave_1 left promiscuous mode [ 375.208680][ T383] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.228405][ T30] audit: type=1400 audit(1774316114.937:580): avc: denied { map } for pid=6915 comm="syz.0.2200" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 375.258987][ T383] device bridge_slave_0 left promiscuous mode [ 375.283203][ T383] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.292841][ T383] device veth1_macvtap left promiscuous mode [ 375.298919][ T383] device veth0_vlan left promiscuous mode [ 375.398431][ T6925] kvm: pic: non byte write [ 375.427119][ T6930] loop9: detected capacity change from 0 to 512 [ 375.506101][ T6930] EXT4-fs (loop9): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 375.530297][ T6930] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.906417][ T6919] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.918470][ T6952] loop8: detected capacity change from 0 to 512 [ 375.930402][ T6919] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.957317][ T6919] device bridge_slave_0 entered promiscuous mode [ 375.978506][ T6919] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.997179][ T6919] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.005232][ T6919] device bridge_slave_1 entered promiscuous mode [ 376.072580][ T6952] EXT4-fs (loop8): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 376.090283][ T6952] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.212304][ T30] audit: type=1400 audit(1774316115.927:581): avc: denied { watch watch_reads } for pid=6957 comm="syz.0.2212" path="pipe:[37568]" dev="pipefs" ino=37568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 376.630355][ T6962] loop9: detected capacity change from 0 to 512 [ 377.112403][ T6962] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 377.146743][ T6962] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #11: comm syz.9.2211: iget: bad extended attribute block 3153 [ 377.159955][ T6962] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.2211: couldn't read orphan inode 11 (err -117) [ 377.172416][ T6962] EXT4-fs (loop9): mounted filesystem without journal. Opts: nomblk_io_submit,nogrpid,,errors=continue. Quota mode: none. [ 377.245758][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 377.255754][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 377.281820][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 377.297770][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 377.350808][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.357911][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.369106][ T6969] loop8: detected capacity change from 0 to 16 [ 377.369285][ T6968] loop0: detected capacity change from 0 to 128 [ 377.383276][ T6969] erofs: (device loop8): mounted with root inode @ nid 36. [ 377.408404][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 377.416373][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 377.425042][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 377.434410][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.441493][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.459987][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 377.470820][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 377.478934][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 377.488207][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 377.497551][ T30] audit: type=1400 audit(1774316117.207:582): avc: denied { mounton } for pid=6972 comm="syz.8.2216" path="/proc/194/task" dev="proc" ino=37649 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 377.533567][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 377.550769][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 377.575312][ T6919] device veth0_vlan entered promiscuous mode [ 377.582591][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 377.590984][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 377.630821][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 377.638488][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 377.700530][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 377.715911][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 377.728707][ T6919] device veth1_macvtap entered promiscuous mode [ 377.743992][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 377.752210][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 377.761103][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 377.784356][ T6980] device syzkaller0 entered promiscuous mode [ 377.796661][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 377.810374][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 377.992682][ T6971] loop9: detected capacity change from 0 to 40427 [ 378.026246][ T30] audit: type=1400 audit(1774316117.737:583): avc: denied { bind } for pid=6985 comm="syz.8.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 378.053729][ T6971] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 378.062867][ T6971] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 378.074128][ T6990] loop6: detected capacity change from 0 to 512 [ 378.081267][ T30] audit: type=1400 audit(1774316117.777:584): avc: denied { accept } for pid=6985 comm="syz.8.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 378.104973][ T6971] F2FS-fs (loop9): invalid crc value [ 378.125489][ T6971] F2FS-fs (loop9): Found nat_bits in checkpoint [ 378.132367][ T30] audit: type=1400 audit(1774316117.847:585): avc: denied { write } for pid=6985 comm="syz.8.2220" path="socket:[38961]" dev="sockfs" ino=38961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 378.185811][ T6990] EXT4-fs (loop6): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 378.203656][ T6990] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.272514][ T6971] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 378.279640][ T6971] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 378.736343][ T30] audit: type=1400 audit(1774316118.447:586): avc: denied { bind } for pid=7017 comm="syz.4.2229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 378.757703][ T30] audit: type=1400 audit(1774316118.447:587): avc: denied { setopt } for pid=7017 comm="syz.4.2229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 378.809765][ T7024] loop8: detected capacity change from 0 to 128 [ 378.948927][ T7029] loop6: detected capacity change from 0 to 256 [ 378.974961][ T7029] exfat: Deprecated parameter 'utf8' [ 379.005821][ T7029] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 379.047255][ T7037] netlink: 'syz.9.2233': attribute type 4 has an invalid length. [ 379.199874][ T7048] x_tables: duplicate underflow at hook 1 [ 379.686831][ T7061] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 380.177871][ T7086] netlink: 9016 bytes leftover after parsing attributes in process `syz.0.2251'. [ 381.966175][ T7108] loop9: detected capacity change from 0 to 512 [ 382.033528][ T30] audit: type=1400 audit(1774316121.747:588): avc: denied { create } for pid=7112 comm="syz.0.2263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 382.063918][ T7108] EXT4-fs (loop9): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 382.125930][ T7108] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.238915][ T7064] loop6: detected capacity change from 0 to 131072 [ 382.846857][ T7064] F2FS-fs (loop6): Wrong NAT boundary, start(2560) end(5) blocks(1024) [ 382.894945][ T7064] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 382.983193][ T7064] F2FS-fs (loop6): Failed to start F2FS issue_checkpoint_thread (-12) [ 383.369149][ T7156] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 383.545287][ T7147] loop9: detected capacity change from 0 to 40427 [ 383.565056][ T7147] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 383.576963][ T7147] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 383.604013][ T7147] F2FS-fs (loop9): invalid crc value [ 383.611660][ T7163] binder: BINDER_SET_CONTEXT_MGR already set [ 383.618015][ T7163] binder: 7161:7163 ioctl 4018620d 200000004a80 returned -16 [ 383.627849][ T7147] F2FS-fs (loop9): Found nat_bits in checkpoint [ 383.668703][ T7147] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 383.675896][ T7147] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 383.690486][ T7163] binder: 7161:7163 ioctl c0306201 2000000003c0 returned -14 [ 383.830344][ T7168] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2278'. [ 383.856138][ T7168] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7168 comm=syz.8.2278 [ 383.903977][ T7175] loop8: detected capacity change from 0 to 512 [ 383.913789][ T7173] loop9: detected capacity change from 0 to 256 [ 383.963892][ T7175] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #11: comm syz.8.2281: iget: bad extra_isize 90 (inode size 256) [ 383.977628][ T7175] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.2281: error while reading EA inode 11 err=-117 [ 383.991564][ T7175] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #11: comm syz.8.2281: iget: bad extra_isize 90 (inode size 256) [ 384.005293][ T7175] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.2281: error while reading EA inode 11 err=-117 [ 384.018184][ T7175] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #18: comm syz.8.2281: iget: bad extra_isize 90 (inode size 256) [ 384.037301][ T7175] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.2281: error while reading EA inode 18 err=-117 [ 384.050006][ T7175] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #18: comm syz.8.2281: iget: bad extra_isize 90 (inode size 256) [ 384.063827][ T7175] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.2281: error while reading EA inode 18 err=-117 [ 384.077233][ T7175] EXT4-fs (loop8): 1 orphan inode deleted [ 384.083252][ T7175] EXT4-fs (loop8): mounted filesystem without journal. Opts: data_err=ignore,jqfmt=vfsold,debug_want_extra_isize=0x000000000000005a,stripe=0x0000000000002000,max_dir_size_kb=0x0000000000000005,nodiscard,min_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 384.333209][ T7183] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2284'. [ 385.328734][ T7193] x_tables: duplicate underflow at hook 1 [ 385.648213][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2292'. [ 387.498533][ T7241] loop9: detected capacity change from 0 to 512 [ 387.549828][ T7239] loop8: detected capacity change from 0 to 40427 [ 387.582786][ T7239] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 387.590598][ T7239] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 387.599605][ T7239] F2FS-fs (loop8): invalid crc value [ 387.616437][ T7241] EXT4-fs (loop9): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 387.630717][ T7241] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.641318][ T7239] F2FS-fs (loop8): Found nat_bits in checkpoint [ 387.676450][ T7239] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 387.683587][ T7239] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 387.951629][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 389.163068][ T7256] x_tables: duplicate underflow at hook 1 [ 389.795636][ T7273] loop6: detected capacity change from 0 to 40427 [ 389.842164][ T7273] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 389.849500][ T7273] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 389.859747][ T7273] F2FS-fs (loop6): fault_type options not supported [ 389.871209][ T7273] F2FS-fs (loop6): invalid crc value [ 389.886778][ T7273] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 389.987633][ T7273] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 389.994807][ T7273] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 390.658022][ T30] audit: type=1400 audit(1774316130.367:589): avc: denied { bind } for pid=7276 comm="syz.4.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 391.938160][ T30] audit: type=1400 audit(1774316130.457:590): avc: denied { write } for pid=7276 comm="syz.4.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 392.052088][ T7289] pit: kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 392.065628][ T7289] pit: kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 392.074754][ T7289] pit: kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 392.177886][ T7304] x_tables: duplicate underflow at hook 1 [ 392.188933][ T7289] pit: kvm: requested 123200 ns i8254 timer period limited to 200000 ns [ 392.359932][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2317'. [ 392.431125][ T7289] pit: kvm: requested 119009 ns i8254 timer period limited to 200000 ns [ 392.544001][ T7289] pit: kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 392.550697][ T7306] loop6: detected capacity change from 0 to 512 [ 392.576345][ T7289] pit: kvm: requested 196952 ns i8254 timer period limited to 200000 ns [ 392.586591][ T7306] EXT4-fs (loop6): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 392.600822][ T7306] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.616121][ T7289] pit: kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 392.703348][ T7289] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 392.712118][ T7289] pit: kvm: requested 185219 ns i8254 timer period limited to 200000 ns [ 393.133890][ T7325] overlayfs: failed to clone upperpath [ 393.533098][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2332'. [ 395.387971][ T7368] device syzkaller0 entered promiscuous mode [ 395.611825][ T7372] x_tables: duplicate underflow at hook 1 [ 397.963906][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2345'. [ 398.010690][ T7386] tipc: Started in network mode [ 398.015718][ T7386] tipc: Node identity 4, cluster identity 4711 [ 398.021967][ T7386] tipc: Node number set to 4 [ 398.036697][ T30] audit: type=1400 audit(1774316137.747:591): avc: denied { read } for pid=7387 comm="syz.9.2347" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 399.052277][ T7423] loop8: detected capacity change from 0 to 256 [ 400.487751][ T7425] loop9: detected capacity change from 0 to 256 [ 401.774558][ T7449] loop8: detected capacity change from 0 to 512 [ 401.946179][ T7471] x_tables: duplicate underflow at hook 1 [ 403.186666][ T7449] EXT4-fs (loop8): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 403.200924][ T7449] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.248599][ T7485] create_pit_timer: 6 callbacks suppressed [ 403.248620][ T7485] pit: kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 403.264074][ T7485] pit: kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 403.273349][ T7485] pit: kvm: requested 63695 ns i8254 timer period limited to 200000 ns [ 403.953806][ T7485] pit: kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 403.963124][ T7485] pit: kvm: requested 10895 ns i8254 timer period limited to 200000 ns [ 403.972768][ T7485] pit: kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 403.982866][ T7485] pit: kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 403.994190][ T7485] pit: kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 404.003447][ T7485] pit: kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 404.013681][ T7485] pit: kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 404.054919][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2383'. [ 404.096983][ T30] audit: type=1326 audit(1774316143.807:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7497 comm="syz.6.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1b964799 code=0x7ffc0000 [ 404.145945][ T30] audit: type=1326 audit(1774316143.807:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7497 comm="syz.6.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fdc1b964799 code=0x7ffc0000 [ 404.193055][ T30] audit: type=1326 audit(1774316143.807:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7497 comm="syz.6.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1b964799 code=0x7ffc0000 [ 404.254789][ T30] audit: type=1326 audit(1774316143.807:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7497 comm="syz.6.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc1b924fce code=0x7ffc0000 [ 404.279038][ T30] audit: type=1326 audit(1774316143.807:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7497 comm="syz.6.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1b964799 code=0x7ffc0000 [ 404.305532][ T30] audit: type=1326 audit(1774316143.807:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7497 comm="syz.6.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1b964799 code=0x7ffc0000 [ 404.680393][ T485] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 405.590498][ T485] usb 10-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 405.625183][ T485] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.690904][ T485] usb 10-1: Product: syz [ 405.725159][ T485] usb 10-1: Manufacturer: syz [ 405.784473][ T485] usb 10-1: SerialNumber: syz [ 406.312396][ T7526] loop8: detected capacity change from 0 to 40427 [ 406.390289][ T485] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 406.468119][ T485] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 406.476230][ T485] usb 10-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 406.478332][ T7526] F2FS-fs (loop8): invalid crc value [ 406.491270][ T485] usb 10-1: found format II with max.bitrate = 0, frame size=9 [ 406.499009][ T485] usb 10-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 406.513054][ T485] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 407.519687][ T485] usb 10-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 407.528305][ T485] usb 10-1: found format II with max.bitrate = 0, frame size=9 [ 407.540407][ T485] usb 10-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 407.557985][ T30] audit: type=1400 audit(1774316147.267:598): avc: denied { create } for pid=7543 comm="syz.0.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 407.592497][ T7526] F2FS-fs (loop8): Found nat_bits in checkpoint [ 407.610302][ T485] usb 10-1: unit 5 not found! [ 407.615068][ T485] usb 10-1: unit 2 not found! [ 407.652344][ T7526] F2FS-fs (loop8): Start checkpoint disabled! [ 407.674027][ T485] usb 10-1: USB disconnect, device number 5 [ 407.693990][ T7526] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 407.938183][ T7558] attempt to access beyond end of device [ 407.938183][ T7558] loop8: rw=2049, want=45104, limit=40427 [ 407.993050][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 408.013174][ T7559] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2400'. [ 408.022641][ T30] audit: type=1400 audit(1774316147.697:599): avc: denied { nlmsg_read } for pid=7555 comm="syz.9.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 408.307785][ T325] attempt to access beyond end of device [ 408.307785][ T325] loop8: rw=2049, want=40976, limit=40427 [ 409.263135][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2405'. [ 409.334277][ T7567] loop9: detected capacity change from 0 to 1024 [ 409.379617][ T7567] EXT4-fs (loop9): Test dummy encryption mode enabled [ 409.443042][ T7567] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 411.408691][ T7593] x_tables: duplicate underflow at hook 1 [ 411.989236][ T30] audit: type=1400 audit(1774316151.697:600): avc: denied { remount } for pid=7599 comm="syz.4.2413" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 413.060910][ T7628] x_tables: duplicate underflow at hook 1 [ 413.316024][ T7631] tipc: Enabling of bearer rejected, failed to enable media [ 413.535360][ T7637] loop9: detected capacity change from 0 to 40427 [ 414.104552][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2428'. [ 417.417490][ T30] audit: type=1326 audit(1774316156.207:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7672 comm="syz.8.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facbba59799 code=0x7ffc0000 [ 417.502443][ T7683] device syzkaller0 entered promiscuous mode [ 417.543075][ T30] audit: type=1326 audit(1774316156.207:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7672 comm="syz.8.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facbba59799 code=0x7ffc0000 [ 417.570760][ T30] audit: type=1326 audit(1774316156.267:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7672 comm="syz.8.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7facbba59799 code=0x7ffc0000 [ 417.625396][ T30] audit: type=1326 audit(1774316156.267:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7672 comm="syz.8.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facbba59799 code=0x7ffc0000 [ 417.702740][ T30] audit: type=1326 audit(1774316156.267:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7672 comm="syz.8.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facbba59799 code=0x7ffc0000 [ 419.320243][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 420.758169][ T7704] loop8: detected capacity change from 0 to 256 [ 422.409544][ T30] audit: type=1400 audit(1774316162.117:606): avc: denied { bind } for pid=7733 comm="syz.4.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 426.418510][ T7784] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2466'. [ 426.783876][ T7784] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2466'. [ 426.813037][ T7784] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2466'. [ 426.861791][ T7789] netlink: 'syz.8.2468': attribute type 4 has an invalid length. [ 426.928333][ T7802] loop8: detected capacity change from 0 to 1024 [ 426.973101][ T7803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2473'. [ 427.732043][ T7802] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsv1,errors=remount-ro,abort,. Quota mode: none. [ 433.626044][ T30] audit: type=1400 audit(1774316173.337:607): avc: denied { create } for pid=7862 comm="syz.0.2492" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 433.647684][ T7883] fuse: Unknown parameter '0x0000000000000005' [ 433.660193][ T30] audit: type=1400 audit(1774316173.357:608): avc: denied { mounton } for pid=7862 comm="syz.0.2492" path="/70/file0" dev="tmpfs" ino=393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 435.113737][ T7896] overlayfs: missing 'workdir' [ 442.718128][ T7987] overlayfs: missing 'lowerdir' [ 442.728062][ T7987] overlayfs: failed to clone lowerpath [ 444.300768][ T7999] overlayfs: failed to clone upperpath [ 444.720392][ T8000] overlayfs: failed to clone lowerpath [ 451.851995][ T8071] x_tables: duplicate underflow at hook 1 [ 453.410478][ T8096] cgroup: Invalid name [ 454.834128][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2559'. [ 454.970281][ T30] audit: type=1400 audit(1774316194.647:609): avc: denied { mount } for pid=8111 comm="syz.9.2561" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 455.521162][ T8125] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2563'. [ 460.334480][ T8174] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2575'. [ 461.443830][ T8189] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2577'. [ 462.634588][ T30] audit: type=1400 audit(1774316201.047:610): avc: denied { getopt } for pid=8180 comm="syz.6.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 465.353357][ T8209] x_tables: duplicate underflow at hook 1 [ 467.014802][ T30] audit: type=1326 audit(1774316206.727:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8212 comm="syz.9.2584" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01d06a1799 code=0x0 [ 475.183331][ T8278] overlayfs: failed to clone lowerpath [ 477.163927][ T383] device bridge_slave_1 left promiscuous mode [ 477.195754][ T383] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.673261][ T383] device bridge_slave_0 left promiscuous mode [ 477.703155][ T383] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.730296][ T383] device veth1_macvtap left promiscuous mode [ 477.750810][ T383] device veth0_vlan left promiscuous mode [ 480.300212][ T8322] xt_hashlimit: max too large, truncated to 1048576 [ 483.679073][ T8348] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.686376][ T8348] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.779639][ T8402] overlayfs: failed to clone lowerpath [ 495.163494][ T8436] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 503.824915][ T8541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2675'. [ 505.270301][ T8573] x_tables: duplicate underflow at hook 1 [ 507.395388][ T30] audit: type=1400 audit(1774316247.097:612): avc: denied { nlmsg_write } for pid=8592 comm="syz.4.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 507.486593][ T8602] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2705'. [ 507.670251][ T8608] x_tables: duplicate underflow at hook 1 [ 509.214320][ T8637] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2716'. [ 511.075238][ T8671] x_tables: duplicate underflow at hook 1 [ 511.093401][ T8673] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2730'. [ 515.011186][ T8763] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2764'. [ 515.892363][ T8782] overlayfs: failed to resolve './file0': -2 [ 515.955618][ T8787] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 [ 516.423019][ T8815] netlink: 168 bytes leftover after parsing attributes in process `syz.9.2786'. [ 516.812305][ T8836] x_tables: duplicate underflow at hook 1 [ 517.905948][ T8889] x_tables: duplicate underflow at hook 1 [ 520.140529][ T9011] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2877'. [ 520.395097][ T30] audit: type=1326 audit(1774316260.107:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.0.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea42139799 code=0x7ffc0000 [ 520.539855][ T30] audit: type=1326 audit(1774316260.137:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.0.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea42139799 code=0x7ffc0000 [ 520.629015][ T30] audit: type=1326 audit(1774316260.297:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.0.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea420f9fce code=0x7ffc0000 [ 520.740374][ T30] audit: type=1326 audit(1774316260.317:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.0.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea420f9fce code=0x7ffc0000 [ 520.819254][ T30] audit: type=1326 audit(1774316260.327:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.0.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea42139799 code=0x7ffc0000 [ 520.843487][ T30] audit: type=1326 audit(1774316260.327:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.0.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea42139799 code=0x7ffc0000 [ 520.880946][ T30] audit: type=1326 audit(1774316260.337:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.0.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fea42139799 code=0x7ffc0000 [ 520.911715][ T30] audit: type=1326 audit(1774316260.337:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.0.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea42139799 code=0x7ffc0000 [ 521.382092][ T9062] xt_NFQUEUE: number of total queues is 0 [ 521.575895][ T9074] overlayfs: failed to clone upperpath [ 522.074506][ T9097] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2916'. [ 522.453642][ T9130] x_tables: duplicate underflow at hook 1 [ 522.832464][ T9148] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2940'. [ 524.190727][ T9168] device bridge_slave_0 left promiscuous mode [ 524.203243][ T9168] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.527150][ T9183] x_tables: duplicate underflow at hook 1 [ 525.053585][ T9191] netem: change failed [ 525.388317][ T9195] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2957'. [ 525.406758][ T9203] netlink: 168 bytes leftover after parsing attributes in process `syz.9.2961'. [ 525.491438][ T9200] ip6erspan0: renamed from vlan0 [ 526.209874][ T9230] x_tables: duplicate underflow at hook 1 [ 526.575458][ T30] audit: type=1326 audit(1774316266.287:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9237 comm="syz.9.2974" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01d06a1799 code=0x0 [ 526.684818][ T9245] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2977'. [ 527.082671][ T9273] xt_hashlimit: size too large, truncated to 1048576 [ 527.433627][ T9282] x_tables: duplicate underflow at hook 1 [ 527.757523][ T9286] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2994'. [ 527.960467][ T9298] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3000'. [ 528.167694][ T9308] overlayfs: failed to clone upperpath [ 528.174363][ T9308] overlayfs: failed to clone upperpath [ 528.180559][ T30] audit: type=1326 audit(1774316267.897:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9309 comm="syz.0.3005" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea42139799 code=0x0 [ 528.483820][ T9328] netlink: 168 bytes leftover after parsing attributes in process `syz.9.3013'. [ 528.778606][ T9338] x_tables: duplicate underflow at hook 1 [ 529.048115][ T30] audit: type=1400 audit(1774316268.757:623): avc: denied { watch watch_reads } for pid=9340 comm="syz.6.3018" path="/139/file1" dev="tmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 529.103154][ T9353] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3024'. [ 529.107286][ T30] audit: type=1400 audit(1774316268.787:624): avc: denied { setattr } for pid=9347 comm="syz.0.3021" name="file0" dev="tmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 529.853573][ T30] audit: type=1326 audit(1774316269.567:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="syz.9.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d06a1799 code=0x7ffc0000 [ 529.877333][ T30] audit: type=1326 audit(1774316269.567:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="syz.9.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d06a1799 code=0x7ffc0000 [ 529.901054][ T30] audit: type=1326 audit(1774316269.567:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="syz.9.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01d06a1799 code=0x7ffc0000 [ 529.924987][ T30] audit: type=1326 audit(1774316269.567:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="syz.9.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d06a1799 code=0x7ffc0000 [ 529.949465][ T30] audit: type=1326 audit(1774316269.567:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="syz.9.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d06a1799 code=0x7ffc0000 [ 530.019349][ T9391] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3039'. [ 530.028777][ T9391] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3039'. [ 530.038499][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3039'. [ 530.064373][ T9395] overlayfs: failed to clone upperpath [ 531.501354][ T9432] 9pnet: Insufficient options for proto=fd [ 531.531781][ T9438] overlayfs: failed to clone upperpath [ 531.538088][ T9438] overlayfs: failed to clone upperpath [ 531.954487][ T9450] xt_hashlimit: size too large, truncated to 1048576 [ 531.978576][ T9452] netem: change failed [ 532.011731][ T9460] device batadv_slave_1 entered promiscuous mode [ 532.021036][ T9460] __nla_validate_parse: 2 callbacks suppressed [ 532.021085][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3069'. [ 532.105747][ T9459] device batadv_slave_1 left promiscuous mode [ 532.121600][ T9463] netlink: 'syz.9.3070': attribute type 4 has an invalid length. [ 532.136430][ T9463] netlink: 'syz.9.3070': attribute type 4 has an invalid length. [ 532.486704][ T9463] syz.9.3070 (9463) used greatest stack depth: 20248 bytes left [ 532.549737][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3077'. [ 533.446505][ T9510] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3088'. [ 533.613672][ T9521] overlayfs: failed to clone upperpath [ 533.633992][ T9523] xt_hashlimit: size too large, truncated to 1048576 [ 533.665699][ T9525] tipc: Resetting bearer [ 533.689586][ T9525] tipc: Disabling bearer [ 534.323856][ T9562] x_tables: duplicate underflow at hook 1 [ 535.109080][ T9590] overlayfs: failed to clone upperpath [ 536.081036][ T9625] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3131'. [ 536.474820][ T9643] x_tables: duplicate underflow at hook 1 [ 536.660728][ T9651] x_tables: duplicate underflow at hook 1 [ 538.769725][ T9691] x_tables: duplicate underflow at hook 1 [ 538.838437][ T9694] x_tables: duplicate underflow at hook 1 [ 540.880987][ T9735] x_tables: duplicate underflow at hook 1 [ 542.001035][ T9754] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3177'. [ 542.290593][ T9761] fuse: Unknown parameter 'fd00000000000000000000' [ 543.370637][ T9796] overlayfs: failed to clone upperpath [ 543.392022][ T9798] netlink: 168 bytes leftover after parsing attributes in process `syz.9.3196'. [ 544.220389][ T9816] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3202'. [ 544.240209][ T9816] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3202'. [ 544.309253][ T9816] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.316580][ T9816] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.771278][ T9833] x_tables: duplicate underflow at hook 1 [ 545.414727][ T9843] x_tables: duplicate underflow at hook 1 [ 546.751180][ T9851] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 546.788671][ T9855] netlink: 168 bytes leftover after parsing attributes in process `syz.9.3217'. [ 547.261427][ T9871] fuse: Bad value for 'fd' [ 549.236862][ T9884] x_tables: duplicate underflow at hook 1 [ 549.263076][ T9880] x_tables: duplicate underflow at hook 1 [ 551.451148][ T9908] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3233'. [ 551.493084][ T9908] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9908 comm=syz.9.3233 [ 553.233251][ T9957] overlayfs: failed to clone upperpath [ 554.197611][ T9980] x_tables: duplicate underflow at hook 1 [ 559.604427][T10049] overlayfs: failed to clone upperpath [ 560.594155][T10068] overlayfs: failed to clone lowerpath [ 561.263423][T10082] x_tables: duplicate underflow at hook 1 [ 562.173557][T10091] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3293'. [ 562.191092][T10091] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3293'. [ 562.270560][T10100] x_tables: duplicate underflow at hook 1 [ 562.921507][T10108] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3300'. [ 567.309733][T10149] x_tables: duplicate underflow at hook 1 [ 567.832458][T10161] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3312'. [ 567.860697][T10161] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3312'. [ 570.205471][T10197] x_tables: duplicate underflow at hook 1 [ 570.832293][ T30] audit: type=1400 audit(1774316566.541:630): avc: denied { sys_module } for pid=10201 comm="syz.8.3327" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 573.109935][T10242] x_tables: duplicate underflow at hook 1 [ 577.090892][T10289] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3355'. [ 577.120577][T10291] x_tables: duplicate underflow at hook 1 [ 577.406708][T10295] device veth0_vlan left promiscuous mode [ 578.910691][T10321] x_tables: duplicate underflow at hook 1 [ 580.953495][T10342] x_tables: duplicate underflow at hook 1 [ 582.452615][T10363] xt_hashlimit: size too large, truncated to 1048576 [ 582.971264][T10377] x_tables: duplicate underflow at hook 1 [ 583.920537][T10395] x_tables: duplicate underflow at hook 1 [ 586.196789][T10401] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3387'. [ 590.500813][T10422] x_tables: duplicate underflow at hook 1 [ 591.386121][ T30] audit: type=1400 audit(1774316587.091:631): avc: denied { create } for pid=10436 comm="syz.0.3398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 591.538706][T10444] x_tables: duplicate underflow at hook 1 [ 595.481260][T10482] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3418'. [ 597.920171][T10503] x_tables: duplicate underflow at hook 1 [ 598.975118][T10514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3417'. [ 602.826466][T10561] fuse: Unknown parameter 'fd00000000000000000000' [ 602.834662][T10562] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3432'. [ 603.223450][T10570] x_tables: duplicate underflow at hook 1 [ 603.328137][T10572] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3438'. [ 607.266930][T10623] x_tables: duplicate underflow at hook 2 [ 607.345513][T10624] xt_CT: You must specify a L4 protocol and not use inversions on it [ 607.506579][T10631] netlink: 168 bytes leftover after parsing attributes in process `syz.9.3455'. [ 608.654888][T10646] tmpfs: Bad value for 'nr_blocks' [ 608.771194][T10654] overlayfs: missing 'lowerdir' [ 610.084614][T10672] x_tables: duplicate underflow at hook 1 [ 610.155003][T10673] overlayfs: failed to clone upperpath [ 610.428620][T10681] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3471'. [ 610.574070][ T30] audit: type=1400 audit(1774316606.281:632): avc: denied { accept } for pid=10678 comm="syz.8.3469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 610.762166][T10687] device veth0_vlan left promiscuous mode [ 610.769584][T10687] device veth0_vlan entered promiscuous mode [ 610.784166][T10687] device veth1_macvtap left promiscuous mode [ 610.871892][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 610.907494][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 610.933620][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 610.943111][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 610.951835][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 610.960462][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.967539][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.975305][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 610.983819][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 610.992480][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 611.000952][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 611.009240][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 611.022684][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 611.037146][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 611.050644][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 611.121769][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 611.146603][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 611.164360][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 611.181921][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 611.549069][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 611.568550][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 611.600938][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 611.620425][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 611.636834][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 611.672950][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 611.699845][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 611.729615][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 611.738013][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 611.746290][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 611.754295][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 611.761898][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 611.770226][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 611.781356][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 612.710018][T10712] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3480'. [ 613.205707][T10719] x_tables: duplicate underflow at hook 1 [ 616.836094][T10759] netlink: 168 bytes leftover after parsing attributes in process `syz.9.3496'. [ 617.054865][T10765] xt_CT: No such helper "pptp" [ 617.532821][T10766] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 617.685226][T10771] x_tables: duplicate underflow at hook 1 [ 620.911600][T10796] x_tables: duplicate underflow at hook 1 [ 623.294012][T10827] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3512'. [ 624.898563][T10845] x_tables: duplicate underflow at hook 1 [ 628.658824][T10891] overlayfs: failed to clone lowerpath [ 630.075802][T10900] netem: change failed [ 630.163092][T10906] x_tables: duplicate underflow at hook 1 [ 633.285009][T10935] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3545'. [ 633.327170][T10941] x_tables: duplicate underflow at hook 3 [ 635.736383][T10963] x_tables: duplicate underflow at hook 1 [ 636.072050][T10971] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3555'. [ 637.405754][T10977] overlayfs: failed to clone upperpath [ 643.043553][T11002] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 648.577429][T11017] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.593036][T11017] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.923218][T11035] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3572'. [ 651.105247][ T30] audit: type=1400 audit(1774316646.811:633): avc: denied { mount } for pid=11057 comm="syz.0.3578" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 651.340613][T11068] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.347851][T11068] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.771277][T11074] netem: change failed [ 653.074984][T11088] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3587'. [ 655.459224][T11116] netem: change failed [ 657.394895][T11157] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3603'. [ 658.886483][T11169] overlayfs: failed to clone upperpath [ 664.330066][T11236] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3625'. [ 664.774236][T11253] fuse: Bad value for 'fd' [ 666.462600][T11260] x_tables: duplicate underflow at hook 1 [ 670.077127][T11301] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3647'. [ 679.733276][T11447] netlink: 168 bytes leftover after parsing attributes in process `syz.9.3693'. [ 683.602528][T11530] xt_hashlimit: size too large, truncated to 1048576 [ 688.273715][T11576] xt_hashlimit: size too large, truncated to 1048576 [ 688.320519][T11581] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3735'. [ 694.391997][T11629] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3749'. [ 699.385258][T11681] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3763'. [ 710.438851][T11841] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3807'. [ 710.452808][T11843] xt_hashlimit: size too large, truncated to 1048576 [ 731.373037][T11978] xt_CT: You must specify a L4 protocol and not use inversions on it [ 740.768358][T12039] xt_CT: You must specify a L4 protocol and not use inversions on it [ 740.815653][T12041] xt_CT: You must specify a L4 protocol and not use inversions on it [ 742.935621][T12052] xt_CT: You must specify a L4 protocol and not use inversions on it [ 745.411056][T12093] xt_CT: You must specify a L4 protocol and not use inversions on it [ 760.276231][T12174] xt_CT: You must specify a L4 protocol and not use inversions on it [ 780.362666][T12285] xt_CT: You must specify a L4 protocol and not use inversions on it [ 781.079621][T12302] xt_CT: You must specify a L4 protocol and not use inversions on it [ 795.347867][T12419] xt_CT: You must specify a L4 protocol and not use inversions on it [ 795.980690][T12426] xt_CT: You must specify a L4 protocol and not use inversions on it [ 798.500027][T12455] xt_CT: You must specify a L4 protocol and not use inversions on it [ 806.767878][T12489] xt_CT: You must specify a L4 protocol and not use inversions on it [ 810.844114][T12528] xt_CT: You must specify a L4 protocol and not use inversions on it [ 811.348861][T12540] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.374686][T12540] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.749891][T12540] device bridge_slave_0 entered promiscuous mode [ 811.820452][T12540] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.908911][T12540] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.499291][T12540] device bridge_slave_1 entered promiscuous mode [ 814.221383][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 814.233635][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 814.270062][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 814.294810][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 814.337181][ T8370] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.344311][ T8370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.381579][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 814.661754][T12569] xt_CT: You must specify a L4 protocol and not use inversions on it [ 814.775964][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 815.128665][ T8370] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.135805][ T8370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.306779][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 815.328677][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 815.349265][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 815.400449][T12540] device veth0_vlan entered promiscuous mode [ 815.466290][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 815.481216][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 815.502117][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 815.533318][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 816.641728][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 816.692272][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 816.700533][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 816.709097][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 816.723624][T12540] device veth1_macvtap entered promiscuous mode [ 816.733639][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 816.750835][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 816.758417][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 816.800630][ T3513] tipc: Left network mode [ 816.884435][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 816.908941][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 816.938414][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 817.170916][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 819.960077][T12610] loop2: detected capacity change from 0 to 512 [ 824.566668][T12610] EXT4-fs: failed to create workqueue [ 824.587992][T12610] EXT4-fs (loop2): mount failed [ 833.442371][ T3513] device bridge_slave_1 left promiscuous mode [ 833.453881][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.499525][ T3513] device bridge_slave_0 left promiscuous mode [ 834.994340][T12678] loop2: detected capacity change from 0 to 16 [ 835.006915][ T3513] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.054884][T12678] erofs: (device loop2): mounted with root inode @ nid 36. [ 835.193489][T12678] erofs: (device loop2): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 835.202530][T12678] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 835.211696][T12678] attempt to access beyond end of device [ 835.211696][T12678] loop2: rw=524288, want=1072, limit=16 [ 835.223042][T12678] attempt to access beyond end of device [ 835.223042][T12678] loop2: rw=524288, want=24, limit=16 [ 839.172034][T12696] loop2: detected capacity change from 0 to 512 [ 839.220766][T12696] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.4029: inode has both inline data and extents flags [ 839.234584][T12696] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.4029: couldn't read orphan inode 15 (err -117) [ 840.231368][T12696] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 847.774668][T12737] loop2: detected capacity change from 0 to 16 [ 847.880943][T12737] erofs: (device loop2): mounted with root inode @ nid 36. [ 848.424392][ T3513] ------------[ cut here ]------------ [ 848.472510][ T3513] WARNING: CPU: 0 PID: 3513 at net/xfrm/xfrm_state.c:2754 xfrm_state_fini+0x289/0x2e0 [ 848.556262][ T3513] Modules linked in: [ 848.592276][ T3513] CPU: 0 PID: 3513 Comm: kworker/u4:8 Tainted: G W syzkaller #0 [ 848.671316][ T3513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 848.700132][ T3513] Workqueue: netns cleanup_net [ 848.705246][ T3513] RIP: 0010:xfrm_state_fini+0x289/0x2e0 [ 848.710988][ T3513] Code: 43 80 3c 2c 00 74 08 48 89 df e8 a2 da 88 fd 48 8b 3b 44 89 f6 e8 d7 20 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d7 ab 49 fd <0f> 0b e9 e1 fd ff ff e8 cb ab 49 fd 0f 0b e9 49 fe ff ff e8 bf ab [ 848.730898][ T3513] RSP: 0018:ffffc90000c47c10 EFLAGS: 00010293 [ 848.737053][ T3513] RAX: ffffffff84201b09 RBX: ffff888123173000 RCX: ffff88813c71e2c0 [ 848.820031][ T3513] RDX: 0000000000000000 RSI: 0000000000000246 RDI: 00000000ffffffff [ 848.886023][ T3513] RBP: ffffc90000c47c38 R08: 0000000000000003 R09: 0000000000000004 [ 848.956477][ T3513] R10: dffffc0000000000 R11: fffff52000188f18 R12: 1ffffffff0db08f4 [ 849.027986][ T3513] R13: dffffc0000000000 R14: ffff888123173a80 R15: dffffc0000000000 [ 849.084091][ T3513] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 849.104891][ T3513] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 849.112450][ T3513] CR2: 0000001b33c1eff8 CR3: 0000000143aec000 CR4: 00000000003506b0 [ 849.124684][ T3513] Call Trace: [ 849.128092][ T3513] [ 849.132291][ T3513] xfrm_net_exit+0x25/0x60 [ 849.136797][ T3513] cleanup_net+0x593/0xae0 [ 849.142522][ T3513] ? ops_init+0x4a0/0x4a0 [ 849.146915][ T3513] ? __schedule+0xb76/0x14c0 [ 849.153266][ T3513] process_one_work+0x6be/0xba0 [ 849.162752][ T3513] worker_thread+0xa59/0x1200 [ 849.167527][ T3513] kthread+0x411/0x500 [ 849.173037][ T3513] ? worker_clr_flags+0x190/0x190 [ 849.178289][ T3513] ? kthread_blkcg+0xd0/0xd0 [ 849.184001][ T3513] ret_from_fork+0x1f/0x30 [ 849.188568][ T3513] [ 849.192358][ T3513] ---[ end trace c7983a9a862d74e5 ]--- [ 851.164840][T12751] loop2: detected capacity change from 0 to 16 [ 851.181559][T12751] erofs: (device loop2): mounted with root inode @ nid 36. [ 851.479189][ T30] audit: type=1400 audit(1774316847.184:634): avc: denied { create } for pid=12754 comm="syz.2.4043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 851.598777][T12755] loop2: detected capacity change from 0 to 512 [ 851.706949][T12755] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,minixdf,init_itable,nombcache,nodelalloc,nolazytime,noauto_da_alloc,inode_readahead_blks=0x0000000000000080,acl,,errors=continue. Quota mode: writeback. [ 851.728478][T12755] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 860.831047][T12852] xt_CT: You must specify a L4 protocol and not use inversions on it [ 863.515338][T12859] xt_CT: You must specify a L4 protocol and not use inversions on it [ 863.639055][T12878] xt_CT: You must specify a L4 protocol and not use inversions on it [ 867.380877][T12906] xt_CT: You must specify a L4 protocol and not use inversions on it [ 868.990829][T12923] loop2: detected capacity change from 0 to 16 [ 869.072985][T12923] erofs: (device loop2): mounted with root inode @ nid 36. [ 886.038532][T13007] loop2: detected capacity change from 0 to 128 [ 887.288694][T13013] xt_CT: You must specify a L4 protocol and not use inversions on it [ 892.635893][T13043] xt_CT: You must specify a L4 protocol and not use inversions on it [ 899.468892][T13075] loop2: detected capacity change from 0 to 16 [ 899.541957][T13075] erofs: (device loop2): mounted with root inode @ nid 36. [ 899.666358][T13085] xt_CT: You must specify a L4 protocol and not use inversions on it [ 901.917971][T13088] xt_CT: You must specify a L4 protocol and not use inversions on it [ 906.377619][T13121] loop2: detected capacity change from 0 to 16 [ 907.542810][T13121] erofs: (device loop2): mounted with root inode @ nid 36. [ 907.560863][T13121] erofs: (device loop2): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 907.569927][T13121] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 907.579272][T13121] attempt to access beyond end of device [ 907.579272][T13121] loop2: rw=524288, want=1072, limit=16 [ 907.590697][T13121] attempt to access beyond end of device [ 907.590697][T13121] loop2: rw=524288, want=24, limit=16 [ 907.605635][T13121] attempt to access beyond end of device [ 907.605635][T13121] loop2: rw=0, want=1064, limit=16 [ 911.910978][T13144] loop2: detected capacity change from 0 to 512 [ 915.059799][T13144] EXT4-fs: failed to create workqueue [ 915.404736][T13144] EXT4-fs (loop2): mount failed [ 938.484758][T13272] xt_CT: You must specify a L4 protocol and not use inversions on it [ 938.493976][T13276] loop2: detected capacity change from 0 to 16 [ 939.653463][T13276] erofs: (device loop2): mounted with root inode @ nid 36. [ 948.691440][T13333] loop2: detected capacity change from 0 to 16 [ 948.763638][T13333] erofs: (device loop2): mounted with root inode @ nid 36. [ 948.880329][T13333] erofs: (device loop2): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 948.889487][T13333] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 948.898582][T13333] attempt to access beyond end of device [ 948.898582][T13333] loop2: rw=524288, want=1072, limit=16 [ 948.909757][T13333] attempt to access beyond end of device [ 948.909757][T13333] loop2: rw=524288, want=24, limit=16 [ 948.930528][T13333] attempt to access beyond end of device [ 948.930528][T13333] loop2: rw=0, want=1064, limit=16 [ 948.986914][T13339] xt_CT: You must specify a L4 protocol and not use inversions on it [ 955.329204][T13407] loop2: detected capacity change from 0 to 512 [ 955.502887][T13407] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.4206: inode has both inline data and extents flags [ 955.520957][T13414] xt_CT: You must specify a L4 protocol and not use inversions on it [ 955.532993][T13407] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.4206: couldn't read orphan inode 15 (err -117) [ 955.662505][T13407] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 963.803196][T13462] xt_CT: You must specify a L4 protocol and not use inversions on it [ 967.510833][T13484] xt_CT: You must specify a L4 protocol and not use inversions on it [ 977.476736][T13574] loop2: detected capacity change from 0 to 512 [ 977.577690][T13574] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.4246: inode has both inline data and extents flags [ 977.769685][T13574] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.4246: couldn't read orphan inode 15 (err -117) [ 977.788374][T13574] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 979.962597][T13612] loop2: detected capacity change from 0 to 16 [ 980.315091][T13612] erofs: (device loop2): mounted with root inode @ nid 36. [ 980.514185][T13604] erofs: (device loop2): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 980.657892][T13604] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 980.692809][T13604] attempt to access beyond end of device [ 980.692809][T13604] loop2: rw=524288, want=1072, limit=16 [ 980.704139][T13604] attempt to access beyond end of device [ 980.704139][T13604] loop2: rw=524288, want=24, limit=16 [ 980.998542][T13604] attempt to access beyond end of device [ 980.998542][T13604] loop2: rw=0, want=1064, limit=16 [ 992.704625][T13697] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1005.255823][T13771] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1005.303717][T13770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.313833][T13770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.322589][T13770] device bridge_slave_0 entered promiscuous mode [ 1005.332656][T13770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.339788][T13770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.347746][T13770] device bridge_slave_1 entered promiscuous mode [ 1106.159820][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1106.166867][ C0] (detected by 0, t=10002 jiffies, g=58429, q=106) [ 1106.173483][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4295047821-4295037819), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1106.186870][ C0] rcu: rcu_preempt kthread starved for 10002 jiffies! g58429 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1106.198088][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1106.208163][ C0] rcu: RCU grace-period kthread stack dump: [ 1106.214067][ C0] task:rcu_preempt state:R running task stack:28424 pid: 14 ppid: 2 flags:0x00004000 [ 1106.224999][ C0] Call Trace: [ 1106.228298][ C0] [ 1106.231255][ C0] __schedule+0xb6e/0x14c0 [ 1106.235808][ C0] ? release_firmware_map_entry+0x190/0x190 [ 1106.241729][ C0] ? __kasan_check_write+0x14/0x20 [ 1106.247092][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1106.252646][ C0] preempt_schedule_irq+0xaa/0x120 [ 1106.257966][ C0] ? __cond_resched+0xd0/0xd0 [ 1106.262670][ C0] irqentry_exit_cond_resched+0x29/0x30 [ 1106.268321][ C0] irqentry_exit+0x37/0x40 [ 1106.272820][ C0] sysvec_apic_timer_interrupt+0x64/0xc0 [ 1106.278477][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1106.284493][ C0] RIP: 0010:preempt_count_sub+0x66/0x170 [ 1106.290257][ C0] Code: ff ff ff 7f 39 cf 7f 27 81 ff ff 00 00 00 0f 93 c1 84 c0 0f 95 c0 08 c8 74 55 65 8b 05 6b a5 ba 7e f7 df 65 01 3d 62 a5 ba 7e <5b> 41 5e 5d c3 e8 70 74 05 01 85 c0 74 f2 48 c7 c0 68 77 e9 86 48 [ 1106.310012][ C0] RSP: 0018:ffffc900000e7c30 EFLAGS: 00000297 [ 1106.316112][ C0] RAX: 0000000080000001 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1106.324111][ C0] RDX: ffffc900000e7d68 RSI: 0000000000000a06 RDI: 00000000ffffffff [ 1106.332106][ C0] RBP: ffffc900000e7c40 R08: 0000000000000003 R09: 0000000000000004 [ 1106.340394][ C0] R10: dffffc0000000000 R11: fffff5200001cf78 R12: dffffc0000000000 [ 1106.348445][ C0] R13: ffffffff867a95e0 R14: ffffc900000e7d70 R15: ffffc900000e7d68 [ 1106.356449][ C0] _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1106.362118][ C0] finish_swait+0x17d/0x1b0 [ 1106.366722][ C0] rcu_gp_fqs_loop+0x2c7/0xf80 [ 1106.371557][ C0] ? __kasan_check_write+0x14/0x20 [ 1106.376811][ C0] ? debug_smp_processor_id+0x17/0x20 [ 1106.382217][ C0] ? __note_gp_changes+0x4e2/0x9e0 [ 1106.387482][ C0] ? rcu_gp_init+0xc00/0xc00 [ 1106.392129][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 1106.397450][ C0] ? rcu_gp_init+0x9a7/0xc00 [ 1106.402330][ C0] rcu_gp_kthread+0x9b/0x360 [ 1106.406948][ C0] ? _raw_spin_lock+0xf0/0xf0 [ 1106.411655][ C0] ? wake_nocb_gp+0x1d0/0x1d0 [ 1106.416368][ C0] ? __kasan_check_read+0x11/0x20 [ 1106.421423][ C0] ? __kthread_parkme+0xac/0x200 [ 1106.426472][ C0] kthread+0x411/0x500 [ 1106.430626][ C0] ? wake_nocb_gp+0x1d0/0x1d0 [ 1106.435330][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1106.439944][ C0] ret_from_fork+0x1f/0x30 [ 1106.444393][ C0] [ 1106.447428][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1106.453766][ C0] NMI backtrace for cpu 0 [ 1106.458122][ C0] CPU: 0 PID: 13782 Comm: syz.6.4300 Tainted: G W syzkaller #0 [ 1106.467195][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1106.477274][ C0] Call Trace: [ 1106.480582][ C0] [ 1106.483532][ C0] __dump_stack+0x21/0x30 [ 1106.487971][ C0] dump_stack_lvl+0x110/0x170 [ 1106.492675][ C0] ? show_regs_print_info+0x20/0x20 [ 1106.497907][ C0] dump_stack+0x15/0x20 [ 1106.502081][ C0] nmi_cpu_backtrace+0x2af/0x2c0 [ 1106.507129][ C0] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 1106.513314][ C0] ? load_image+0x3e0/0x3e0 [ 1106.517852][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 1106.524039][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 1106.530147][ C0] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 1106.536161][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 1106.542096][ C0] rcu_check_gp_kthread_starvation+0x1e0/0x260 [ 1106.548296][ C0] print_other_cpu_stall+0xe33/0x1010 [ 1106.553706][ C0] ? print_cpu_stall+0x600/0x600 [ 1106.558677][ C0] ? tick_nohz_handler+0x300/0x300 [ 1106.563916][ C0] ? accumulate_nsecs_to_secs+0xb1/0x250 [ 1106.569579][ C0] ? cgroup_rstat_updated+0xf5/0x360 [ 1106.574954][ C0] ? timekeeping_update+0x397/0x470 [ 1106.580186][ C0] rcu_sched_clock_irq+0x8b2/0x12c0 [ 1106.585479][ C0] ? rcu_boost_kthread_setaffinity+0x320/0x320 [ 1106.591708][ C0] ? hrtimer_run_queues+0x166/0x430 [ 1106.596938][ C0] update_process_times+0x198/0x200 [ 1106.602171][ C0] tick_sched_timer+0x17c/0x240 [ 1106.607047][ C0] ? tick_setup_sched_timer+0x450/0x450 [ 1106.612619][ C0] __hrtimer_run_queues+0x39f/0x8c0 [ 1106.617975][ C0] ? hrtimer_interrupt+0x8c0/0x8c0 [ 1106.623116][ C0] ? ktime_get_update_offsets_now+0x2fa/0x310 [ 1106.629224][ C0] hrtimer_interrupt+0x3c7/0x8c0 [ 1106.634193][ C0] __sysvec_apic_timer_interrupt+0xfa/0x3e0 [ 1106.640116][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1106.645784][ C0] [ 1106.648739][ C0] [ 1106.651701][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1106.657733][ C0] RIP: 0010:_raw_spin_unlock_irq+0x49/0x70 [ 1106.663575][ C0] Code: 12 48 89 fb 48 c7 c7 b8 3e 6d 86 e8 91 be f4 fc 48 89 df 48 83 3d ae 07 b9 01 00 74 27 e8 f3 bb 9b fc 66 90 fb bf 01 00 00 00 a2 90 93 fc 65 8b 05 63 36 4e 7b 85 c0 74 03 5b 5d c3 e8 c3 41 [ 1106.683381][ C0] RSP: 0018:ffffc90000ba7b98 EFLAGS: 00000246 [ 1106.689481][ C0] RAX: 0000000000000001 RBX: 0000000000000021 RCX: dffffc0000000000 [ 1106.697474][ C0] RDX: ffffc90003734000 RSI: 000000000007ffff RDI: 0000000000000001 [ 1106.705470][ C0] RBP: ffffc90000ba7ba0 R08: ffffc90000ba7dff R09: 1ffff92000174fbf [ 1106.713476][ C0] R10: dffffc0000000000 R11: fffff52000174fc0 R12: 1ffff11021b8219c [ 1106.721481][ C0] R13: dffffc0000000000 R14: ffff88810dc10ce0 R15: 000000001c000004 [ 1106.729601][ C0] ? _raw_spin_unlock_irq+0x41/0x70 [ 1106.734835][ C0] get_signal+0x13b2/0x1480 [ 1106.739452][ C0] arch_do_signal_or_restart+0xdf/0x11c0 [ 1106.745173][ C0] ? __ia32_sys_rt_sigreturn+0x639/0x730 [ 1106.750840][ C0] ? load_gs_index+0xc0/0xc0 [ 1106.755461][ C0] ? get_sigframe_size+0x10/0x10 [ 1106.760426][ C0] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 1106.766262][ C0] exit_to_user_mode_loop+0xa7/0xe0 [ 1106.771487][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 1106.777111][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 1106.782699][ C0] do_syscall_64+0x58/0xa0 [ 1106.787147][ C0] ? clear_bhb_loop+0x50/0xa0 [ 1106.791854][ C0] ? clear_bhb_loop+0x50/0xa0 [ 1106.796549][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1106.802472][ C0] RIP: 0033:0x7fdc1b964797 [ 1106.806915][ C0] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 1106.826634][ C0] RSP: 002b:00007fdc1a3bf028 EFLAGS: 00000246 [ 1106.832729][ C0] RAX: 000000000000012b RBX: 00007fdc1bbddfa0 RCX: 00007fdc1b964799 [ 1106.840732][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1106.848734][ C0] RBP: 00007fdc1b9fac99 R08: 0000000000000000 R09: 0000000000000000 [ 1106.856738][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1106.864827][ C0] R13: 00007fdc1bbde038 R14: 00007fdc1bbddfa0 R15: 00007ffee486d278 [ 1106.872826][ C0] [ 1289.069763][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 282s! [ 1289.079009][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 282s! [ 1289.087932][ C0] Showing busy workqueues and worker pools: [ 1289.093888][ C0] workqueue events: flags=0x0 [ 1289.098580][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 1289.098629][ C0] pending: psi_avgs_work, kfree_rcu_monitor [ 1289.098769][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 1289.098811][ C0] pending: vmstat_shepherd, kfree_rcu_monitor, rht_deferred_worker [ 1289.098983][ C0] workqueue events_long: flags=0x0 [ 1289.134153][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 1289.134207][ C0] pending: br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup [ 1289.134316][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 1289.134359][ C0] pending: br_multicast_gc_work, br_fdb_cleanup [ 1289.134403][ C0] workqueue events_unbound: flags=0x2 [ 1289.172012][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/512 refcnt=5 [ 1289.172057][ C0] pending: toggle_allocation_gate, linkwatch_event, flush_memcg_stats_dwork [ 1289.172238][ C0] workqueue events_power_efficient: flags=0x80 [ 1289.194689][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.194736][ C0] pending: neigh_periodic_work [ 1289.194861][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 1289.194903][ C0] pending: wg_ratelimiter_gc_entries, neigh_periodic_work, gc_worker, check_lifetime [ 1289.195087][ C0] workqueue events_freezable_power_: flags=0x84 [ 1289.232418][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.232478][ C0] pending: sync_hw_clock [ 1289.232513][ C0] workqueue netns: flags=0xe000a [ 1289.249928][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=3 [ 1289.249976][ C0] in-flight: 8:cleanup_net [ 1289.250016][ C0] workqueue mm_percpu_wq: flags=0x8 [ 1289.267180][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.267230][ C0] pending: vmstat_update [ 1289.267275][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.267317][ C0] pending: vmstat_update [ 1289.267358][ C0] workqueue writeback: flags=0x4a [ 1289.296954][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1289.296998][ C0] pending: wb_workfn [ 1289.297221][ C0] workqueue kblockd: flags=0x18 [ 1289.313748][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 1289.313800][ C0] pending: blk_mq_timeout_work [ 1289.313944][ C0] workqueue dm_bufio_cache: flags=0x8 [ 1289.332326][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.332367][ C0] pending: work_fn [ 1289.332548][ C0] workqueue mld: flags=0x40008 [ 1289.349077][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=3 [ 1289.349123][ C0] pending: mld_dad_work [ 1289.349228][ C0] inactive: mld_dad_work [ 1289.349255][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 1289.371538][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=2 [ 1289.371583][ C0] pending: addrconf_verify_work [ 1289.371735][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1289.389470][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1289.389517][ C0] pending: wg_packet_handshake_send_worker [ 1289.389551][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1289.408295][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.408343][ C0] pending: wg_packet_encrypt_worker [ 1289.408389][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.408429][ C0] pending: wg_packet_encrypt_worker [ 1289.408471][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1289.440177][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1289.440223][ C0] pending: wg_packet_handshake_send_worker [ 1289.440258][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1289.459033][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.459084][ C0] pending: wg_packet_encrypt_worker [ 1289.459119][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.459154][ C0] pending: wg_packet_encrypt_worker [ 1289.459188][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1289.491085][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.491134][ C0] pending: wg_packet_encrypt_worker [ 1289.491182][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.491223][ C0] pending: wg_packet_encrypt_worker [ 1289.491270][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1289.522876][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1289.522926][ C0] pending: wg_packet_handshake_send_worker [ 1289.522961][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1289.541631][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.541671][ C0] pending: wg_packet_encrypt_worker [ 1289.541730][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1289.560005][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1289.560045][ C0] pending: wg_packet_handshake_send_worker [ 1289.560095][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1289.578797][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.578846][ C0] pending: wg_packet_encrypt_worker [ 1289.578893][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1289.597231][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 1289.597275][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 1289.597340][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1289.618744][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 1289.618787][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1289.618859][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1289.640565][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/256 refcnt=6 [ 1289.640614][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material, wg_queued_expired_zero_key_material [ 1289.640713][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1289.668912][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1289.668956][ C0] pending: wg_packet_handshake_send_worker [ 1289.668999][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1289.687878][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.687926][ C0] pending: wg_packet_encrypt_worker [ 1289.687971][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.688013][ C0] pending: wg_packet_encrypt_worker [ 1289.688046][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1289.719895][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 1289.719939][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 1289.720008][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 1289.720049][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 1289.720107][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1289.756549][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.756597][ C0] pending: wg_packet_encrypt_worker [ 1289.756651][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.756702][ C0] pending: wg_packet_encrypt_worker [ 1289.756744][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1289.788593][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1289.788636][ C0] pending: wg_packet_handshake_send_worker [ 1289.788687][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1289.807425][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.807474][ C0] pending: wg_packet_encrypt_worker [ 1289.807510][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.807550][ C0] pending: wg_packet_encrypt_worker [ 1289.807580][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1289.839408][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.839456][ C0] pending: wg_packet_encrypt_worker [ 1289.839490][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.839530][ C0] pending: wg_packet_encrypt_worker [ 1289.839559][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1289.871280][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.871333][ C0] pending: wg_packet_encrypt_worker [ 1289.871367][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.871409][ C0] pending: wg_packet_encrypt_worker [ 1289.871452][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=283s workers=6 idle: 496 325 383 11262 486