last executing test programs: 1m25.153795183s ago: executing program 0 (id=217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x154, r1, 0x0, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x154}, 0x1, 0x0, 0x0, 0x40801}, 0x4041) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x2, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x850) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa8, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "235e30d8909733760abd485edd06881ea8af17d73dbbba470e4c2e1768fb"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc0000}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24000800}, 0x44800) prlimit64(0x0, 0xf, 0x0, &(0x7f0000000540)) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000001980)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000001940)={&(0x7f0000000600)={0x1338, r4, 0x300, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x1a8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x188, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff9e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ')^+!\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ',\\*%&.*\b\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '&$)\x05%%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(]\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'gcm(aes)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '^,-@%)@-%^-#-{!.\'P@/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x431b}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+*:,#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x96}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'l2_drops\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4ec}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x135}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x90}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe40}]}, @ETHTOOL_A_EEE_MODES_OURS={0x13c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xfb, 0x5, "d3cd1e02c2733a6c271905f99958527c44d000b079bce4cfc080cb8103d616be94636aaedb181b13cbf06fba97426e0a70ae01981193339159009e7e1993e8cef82b33be4389ee6641374ec796fb1db5f7cd872fa4f228d583a8a3fdafdd87867b5e53db8abe5ec32dbd38b18b722da3661212eb2aeccf6552b538e98cc44c86a62d2ff70cc500269959c9eb17145331d1fbafdc45cc935d1169ffd3cbb5d26f1b63832a2685cba8112e1d20f552346308b7400e79c47edb83bf5d04fff46b8d749b4f699c3de871608c078074b61464acaf9d1e1a43b1e4690484ce23fccd0da019267f24034a70d22456a8b94b1b963e5e553240d8d4"}, @ETHTOOL_A_BITSET_MASK={0x1d, 0x5, "f1927257df276dc53c74ec4c9b4962c13f16627c02c5812a5b"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x1008, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_MODES_OURS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa, 0x5, "9e961ab87747"}]}]}, 0x1338}, 0x1, 0x0, 0x0, 0x40080}, 0xc040) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000019c0)={0x0, 0x0, 0x0}, &(0x7f0000001a00)=0xc) getresuid(&(0x7f0000001a40)=0x0, &(0x7f0000001a80)=0x0, &(0x7f0000001ac0)) setresuid(0xee01, r5, r7) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x18, 0x1a, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2516}, [@map_fd={0x18, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x4}, @generic={0x40, 0x4, 0x1, 0x7, 0x3}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @jmp={0x5, 0x1, 0x9, 0x1, 0x8, 0xffffffffffffffc0, 0xfffffffffffffff0}]}, &(0x7f0000001c40)='syzkaller\x00', 0x3, 0xad, &(0x7f0000001c80)=""/173, 0x40f00, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001d40)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001d80)={0x0, 0x10, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001dc0)=[{0x4, 0x3, 0x6}, {0x5, 0x2, 0x8}]}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001ec0)={&(0x7f0000001b00)='spmi_write_begin\x00', r9, 0x0, 0x1}, 0x18) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r10, 0x89f5, &(0x7f0000001f40)={'sit0\x00', &(0x7f0000001f00)={@empty, 0x0, 0x0, 0x30, 0x0, [{@initdev}, {@multicast2}, {@broadcast}]}}) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001fc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r11, &(0x7f0000004000)={0x90, 0x0, r12, {0x5, 0x2, 0x3, 0xa380, 0xfffffffe, 0x9, {0x1, 0x7, 0x7, 0x4, 0x3, 0xfffffffffffffff7, 0x8, 0xffff7fff, 0x2, 0x4000, 0x4, r8, r6, 0x5, 0x3}}}, 0x90) r13 = openat$dir(0xffffffffffffff9c, &(0x7f00000040c0)='./file0\x00', 0x0, 0x14d) close_range(r9, r13, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x3e5a2) fchdir(r2) dup2(r13, r2) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000004500)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000044c0)={&(0x7f0000004140)={0x348, r3, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5f1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x64af}]}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @private2, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfffff592, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf829}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x651}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x559a}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x410}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x75f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}]}, 0x348}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004540)) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000004640)={&(0x7f0000004580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004600)={&(0x7f00000045c0)={0x1c, 0x0, 0xb, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008080) socket$inet_tcp(0x2, 0x1, 0x0) lstat(&(0x7f0000004680)='./file0\x00', &(0x7f00000046c0)) 1m23.391658159s ago: executing program 0 (id=227): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xfffffffffffffffc, 0x4000) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 1m23.390880389s ago: executing program 0 (id=228): r0 = fsopen(&(0x7f0000000240)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1m23.380236369s ago: executing program 0 (id=229): r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000e00)={[{@orlov}, {@data_err_ignore}, {@noquota}, {@jqfmt_vfsv1}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@nodelalloc}, {@data_err_ignore}]}, 0x3, 0x47b, &(0x7f0000000980)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000002d80)='2', 0x1, 0x8080c61) close_range(r1, r0, 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) 1m22.812033904s ago: executing program 0 (id=232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000380)={0x5, 0x10001, 0x40400, 0xa84}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='sched_switch\x00', r4, 0x0, 0x800000}, 0x18) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x89006c, 0x0) 1m22.727118067s ago: executing program 0 (id=234): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x305, &(0x7f0000000200)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000580)) 1m22.536454685s ago: executing program 32 (id=234): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x305, &(0x7f0000000200)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000580)) 11.475727698s ago: executing program 4 (id=640): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000f8cf89109904068255f40000000109021b0001000000000904940001ffe55700"], 0x0) 8.391505681s ago: executing program 4 (id=661): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60280, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'virt_wifi0\x00', 0xc1eb461a2917d087}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121ac2, 0x100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[], &(0x7f0000000380)=""/187, 0x3a, 0xbb, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002180)={&(0x7f0000002040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x56, 0x56, 0x8, [@func={0x10, 0x0, 0x0, 0xc, 0x5}, @datasec={0x8, 0x5, 0x0, 0xf, 0x2, [{0x5, 0xff, 0x5}, {0x1, 0x400, 0x93a}, {0x3, 0xf, 0x3ff}, {0x1, 0x3989, 0x3}, {0x3, 0x6, 0x3}], "b228"}]}, {0x0, [0x5f, 0x0, 0x0, 0x2e, 0x30, 0x61]}}, &(0x7f00000020c0)=""/143, 0x78, 0x8f, 0x1, 0xfff}, 0x28) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000005c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) pipe(&(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 8.122674462s ago: executing program 4 (id=665): syz_usb_connect(0x6, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x5f, 0xf4, 0x8a, 0x40, 0x5ac, 0x219, 0x8b0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0xc, 0x1, 0x0, 0x6, [{{0x9, 0x4, 0x68, 0x5, 0x3, 0x3, 0x93, 0x2, 0x9, [], [{{0x9, 0x5, 0x9, 0x4, 0x8, 0x0, 0x2, 0x1}}, {{0x9, 0x5, 0x6, 0x3, 0x3ff, 0x9, 0x2, 0xf}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x1, 0x4, 0x81}}]}}]}}]}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fspick(r0, &(0x7f0000000040)='./file0\x00', 0x1) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @private, @empty}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x2, {0x1, 0xffffffff, 0x5}}, 0x14) socket$inet6(0xa, 0x1, 0x9) 6.651742365s ago: executing program 4 (id=673): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0xffffff68) syz_usb_connect(0x0, 0x3d, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9d60000000109022b00010000000009049c0002010351000905031300000000000725ee0200000009"], 0x0) write$FUSE_DIRENT(r0, &(0x7f0000002080)={0xd0, 0x0, r1, [{0x6, 0x80000001, 0x5, 0x101, '\'@\\-\xc9'}, {0x6, 0x1, 0x9, 0x7f, '*{-^:-,),'}, {0x2, 0x8000000000000, 0x3, 0x6, '-+@'}, {0x1, 0x4, 0x4, 0x6, '!,($'}, {0x1, 0x1, 0x0, 0x2}, {0x6, 0x4, 0x1, 0xd92, '%'}]}, 0xd0) socket$nl_xfrm(0x10, 0x3, 0x6) 4.266520907s ago: executing program 5 (id=681): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101842, 0x1) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bff000/0x400000)=nil) 4.223111269s ago: executing program 5 (id=682): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x4]}, 0x8, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYRESOCT=r0, @ANYBLOB="4486fc", @ANYRESHEX, @ANYRES32=r0], 0x53) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r8, @ANYRES16=r8, @ANYRES64=r0, @ANYRES64=r7, @ANYRES32=r8, @ANYRES64=0x0], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000200)=ANY=[], 0x108) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) syz_clone(0x600c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.96854382s ago: executing program 5 (id=685): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x4, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x0, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x10001, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0xe83, 0xfff, 0x4, 0x0, 0x40000040, 0x1, 0x8, 0x5, 0x8, 0x4bd, 0x34f1, 0x1ff, 0x4, 0x1b2c5a93, 0x0, 0x9, 0x8, 0x0, 0x1, 0x3, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x4, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x4, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x8c0, 0x9, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x7ff, 0x606, 0x5, 0x9, 0x80000001, 0x4, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0x1, 0x0, 0x2, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x81, 0x8, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00", @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0xb, 0x1002, &(0x7f0000001cc0)=""/4098, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0xf, 0xc, 0x0, 0x0, 0x96, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="050000000400000008000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) 3.582040917s ago: executing program 1 (id=689): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30"], 0xf4}}, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030527bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000090000140012800b0001006d6163736563000057fe028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x80801}, 0x0) 3.431948753s ago: executing program 2 (id=691): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe80ffff0000000000000000000000aa14000700fe"], 0x64}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)={0x53c, 0x1, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFQA_CT={0x90, 0xb, 0x0, 0x1, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x0, 0xe}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x2, 0x9}}]}}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2004}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}]}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xfff}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_EXP={0x108, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASK={0x94, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}]}, @NFQA_EXP={0x24, 0xf, 0x0, 0x1, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, @NFQA_EXP={0x2ec, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0x144, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x18}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1ff}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xe}, @CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASTER={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASTER={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_NAT={0x68, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASTER={0x7c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}]}]}, @NFQA_VLAN={0x44, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xc}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xe000}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x53c}, 0x1, 0x0, 0x0, 0x801}, 0x240400c0) 3.395612295s ago: executing program 2 (id=693): socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110660000000000950000cdce000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) setgid(0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000004c0)='kvm_unmap_hva_range\x00'}, 0xffffffffffffffa2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fstat(r6, 0x0) sched_setscheduler(r7, 0x2, &(0x7f0000000180)=0x7) 3.313338478s ago: executing program 1 (id=694): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)={0x124, 0x40, 0x20, 0x70bd28, 0x25dfdbfb, {0xa}, [@typed={0x4, 0x135}, @generic="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", @typed={0x8, 0x102, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x38, 0x0, 0x0, @uid=r1}]}, 0x124}, 0x1, 0x0, 0x0, 0x40004}, 0x80) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r3 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x201000a, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) write$FUSE_DIRENTPLUS(r0, 0x0, 0xb0) ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r4], 0x48) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.870422167s ago: executing program 1 (id=696): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x600) r2 = openat$kvm(0x0, &(0x7f0000000100), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae03, 0xd6) ioctl$FIOCLEX(r0, 0x5451) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1a4) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000340)={[{@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]}) mount$9p_fd(0x0, 0x0, 0x0, 0x84, &(0x7f0000000040)) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x101043, 0x2) chdir(&(0x7f0000000300)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000240)=@filename='./bus\x00', 0x0, &(0x7f0000000c40)={0x1, 0x0, 0x10001, 0x1, 0x1, 0x0, 0x10001, 0x38b4, 0x8}) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x242, 0x18e) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) syz_emit_ethernet(0x76, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1686dd60f52bf47ae433f3c4852282d04cffe4b627baf1e1e53a266c30298dd74c0400403a00fe880000000000800000000000000093464bebcd954daa303f7501ff020000000000000050835900000000fc0100000000000000000000fe8000000000000000010000000000bb3a0000000000000000010000000104000000000000000000"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x40, &(0x7f00000004c0)={[], [{@seclabel}, {@euid_lt}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@dont_appraise}]}, 0x1, 0x57c, &(0x7f00000006c0)="$eJzs3U1oHFUcAPD/TBLTj2gqKKj0UFSoULpJ+qHVU3sVC4UeBC8aNttQssmGbKJNyCG9F7EHUeml3vTgUfHgQbx49OpF8SwUGxSaHnRl9iNNk02T1G62Zn4/mN1582b3/97M/t/uDDNsALl1JHtII56PiAtJxOCaut5oVh5prLeyvFi8u7zYn0StdvGPJJKIuLO8WGytnzSfD0bEUkQ8FxE/9EUcSzfGrc4vTIyWy6WZZnlodnJ6qDq/cPzy5Oh4abw0dfK110+fOXV65MTI2pfdra0t9e2sr9d+vf7htZ/evHn9y68OLxU/Hk3ibAw069b241FqbJO+OLtu+alOBOuipNsN4KH0NPM8S6VnYzB6mlnfTm1wV5sGdFitP6IG5FQi/yGnWr8DsuPf1rSbvz9unWscgGRxV5pTo6a3cW4i9tWPTQ78mdx3ZJIdbx7azYayJy1djYjh3t6Nn/+k+fl7eMOPooF01PfnGjtq4/5PV8efaDP+DLTOnf5HrfFvZcP4l245/l3YZoy/3/nts03jX414oW38ZDV+0iZ+GhHvbRm5v/544+1vz2y2Ru3ziKPRPn5L8uDzw0OXLpdLw43HtjG+O3r4jXqsWvv+H9gkfuOc7b7610y77T+9Zf8bvvnx6xeXNqnL4r/y0oP3f7vtvz8iPtpm/KfvfPHWZnW3ria3s+2y0/2fLbu5zfivnj3yyzZXBQAAAAAAAAAAdiCtX8uWpIXV+TQtFBr38D4TB9JypTp77FJlbmqscc3boehLW1daDTbKSVYeaV6P2yqfWFc+2dMM2LO/Xi4UK+WxLvcdAAAAAAAAAAAAAAAAAAAAHhcH193//1dP/f7/9X9XDexVm//lN7DXyX/Ir/vzP+laO4Dd5/sfcqsm/yG/5D/kl/yH/JL/kF/yH/JL/kN+yX8AAAAAAAAAAAAAAAAAAAAAAAAAAOiIC+fPZ1Pt7vJiMSuP9c7PTVTePz5Wqk4UJueKhWJlZrowXqmMl0uFYmVyq/dLKpXp4ZiauzI0W6rODlXnF96drMxNtf5TtNTX8R4BAAAAAAAAAAAAAAAAAADA/89AfUrSQkSk9fk0LRQinoyIQ9GXXLpcLg1HxFMR8XNPX39WHul2owEAAAAAAAAAAAAAAAAAAGCPqc4vTIyWy6WZnMz07mTliFh6tM3I3nEHr+q9b189LtvQTPp4NKOjM10bkgAAAAAAAAAAAAAAAAAAILfu3fS73Vf809kGAQAAAAAAAAAAAAAAAAAAQC6lvycRkU1HB18eWF/7RLLSU3+OiA9uXPzkyujs7MxItvz26vLZT5vLT3Sj/cB2tfK0lccAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPdX5hYnRcrk008GZbvcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GH8GwAA//8O69Yf") 2.842645138s ago: executing program 3 (id=698): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40200000000000061118c00000000008500004fcb3848ea73001c0000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x30) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027a1000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x52, 0x101, 0x0, 0x0, {0x2, 0x3}}, 0x14}}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x600000, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = dup3(0xffffffffffffffff, r5, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3, 0x1, 0x0, 0x1840a, 0x1, 0x80000000, '\x00', r2, r4, 0x5, 0x3, 0x0, 0x0, @value=r6, @void, @value=r7}, 0x50) 2.748690362s ago: executing program 1 (id=699): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl(0xffffffffffffffff, 0x8b1a, 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4f}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002100)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r9, {0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x10, 0xa}}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_virt_wifi\x00'}]}}]}, 0x54}}, 0x24040084) faccessat(0xffffffffffffffff, 0x0, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="0a000100"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.676426536s ago: executing program 5 (id=700): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x20c, r1, 0x10, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc51}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6f49}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x490ba8c1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}]}, @TIPC_NLA_BEARER={0x124, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @private0, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @mcast1, 0x1000}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x36}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @loopback, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20060081}, 0x0) r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) getsockopt$inet_mreqsrc(r4, 0x0, 0xd, &(0x7f00000004c0)={@multicast2, @private, @broadcast}, &(0x7f0000000500)=0xc) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000540)=0x200003, 0x4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r2) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000005c0), 0x220100, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r4) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r8, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000dc0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000800)={0x550, r9, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x1f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x1}, {0x7, 0x5}, {0x1, 0x5}, {0x4, 0x7}, {0x3}, {0x2, 0x5}, {0x3, 0x8}, {0x7, 0x2}, {0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0x7}, {0x0, 0x6}, {0x7, 0x1}, {0x7, 0x5}, {0x2, 0x9}, {0x1, 0xa}, {0x7}, {0x7}, {0x2, 0x4}, {0x1}, {0x6, 0xa}, {0x3, 0x5}, {0x5, 0xa}, {0x4}, {0x0, 0x1}, {0x0, 0x5}, {0x0, 0x9}, {0x0, 0x3}, {0x2, 0x9}, {0x4}, {0x7, 0x5}, {0x6, 0xa}, {0x6, 0x8}, {0x3, 0x4}, {0x6, 0x6}, {0x4, 0x4}, {0x2, 0x3}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x0, 0xc, 0x5, 0x2, 0x16, 0x5, 0x1, 0x24, 0x2, 0x18, 0x24, 0xb, 0x4, 0x9, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x7, 0x5}, {0x2, 0x4}, {0x6, 0x4}, {0x5, 0x7}, {0x6, 0x6}, {0x6, 0x8}, {0x1, 0x2}, {0x5}, {0x7, 0x7}, {0x5, 0x9}, {0x4, 0x2}, {0x5, 0x5}, {0x4, 0x8}, {0x1, 0xa}, {0x0, 0x4}, {0x1, 0x7}, {0x6, 0x9}, {0x0, 0x9}, {0x0, 0x5}, {0x6, 0x4}, {0x7, 0xa}, {0x1, 0x5}, {0x0, 0x7}, {0x3, 0x3}, {0x4, 0x1}, {0x2, 0xa}, {0x1, 0x6}, {0x0, 0x2}, {0x2, 0x4}, {0x1, 0x6}, {0x0, 0xa}, {0x0, 0x6}, {0x2, 0xa}, {0x5, 0x8}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x8}, {0x3, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x80, 0x1ff, 0x2, 0x1, 0x8, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x6, 0x400, 0x50fa, 0x3, 0x4df, 0x8]}}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3ff, 0x575, 0xb, 0xfff9, 0x9, 0x3, 0x5a]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x5, 0xfff9, 0xf, 0x2, 0xfff7, 0x0, 0x9]}}]}, @NL80211_BAND_6GHZ={0xe0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x6}, {0x6, 0x4}, {0x7, 0x7}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x3}, {0x1, 0x9}, {0x1, 0x1}, {0x6, 0x7}, {0x3, 0x9}, {0x2, 0x6}, {0x3}, {0x2, 0x8}, {0x7, 0x8}, {0x0, 0xa}, {0x1, 0x2}, {0x6, 0x5}, {0x0, 0x7}, {0x3, 0x7}, {0x4}, {0x0, 0x5}, {0x5}, {0x5, 0x8}, {0x1, 0x2}, {0x0, 0x4}, {0x1, 0x6}, {0x7, 0x5}, {0x6, 0x5}, {0x2, 0x1}, {0x4, 0x3}, {0x3, 0x6}, {0x6, 0x3}, {0x7, 0x9}, {0x6, 0x6}, {0x6, 0x3}, {}, {0x7, 0x3}, {0x1, 0x2}, {0x1, 0x7}, {0x7, 0x4}, {0x2}, {0x0, 0x9}, {0x6, 0xa}, {0x5, 0x8}, {0x4, 0x3}, {0x1, 0x6}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x7}, {0x0, 0x7}, {0x7, 0x6}, {0x4, 0x9}, {0x1, 0x7}, {0x5, 0x6}, {0x6, 0x7}, {0x7, 0xa}, {0x6, 0xa}, {0x5, 0x8}, {0x0, 0xa}, {0x6, 0x1}, {0x2, 0x4}, {0x1}, {0x3, 0x4}, {0x2, 0x2}, {0x3}, {0x0, 0x7}, {0x7, 0x5}, {0x5}, {0x1, 0x2}, {0x2, 0x1}, {0x2, 0x6}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x4, 0x6, 0x3, 0xffff, 0x63, 0xe, 0x9b2e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6800, 0x2, 0x200, 0x4a2, 0x6, 0x7, 0xf, 0x8000]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x8}, {0x4, 0x3}, {0x0, 0xa}, {0x0, 0x5}, {0x0, 0x8}, {0x1, 0x6}, {0x3}, {0x3, 0x2}, {0x2, 0x2}, {0x1}, {0x3, 0x6}, {0x7, 0x3}, {0x1, 0x8}, {0x1, 0x4}, {0x7, 0x5}, {0x0, 0x3}, {0x0, 0x5}, {0x2, 0x7}, {0x6}, {0x3, 0x9}, {0x2, 0x6}, {0x0, 0x9}, {0x0, 0x6}, {0x2, 0x3}, {0x7, 0x8}, {0x1, 0x6}, {0x4, 0x6}, {0x3, 0x2}, {0x4, 0x2}, {0x7}, {0x5, 0x1}, {0x6, 0x9}, {0x4}, {0x5, 0x2}, {0x1, 0x7}, {0x4, 0x3}, {0x1}, {}, {0x2, 0x1}, {0x7, 0x6}, {0x7, 0x4}, {0x3, 0xa}, {0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x1, 0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x6, 0x5}, {0x3, 0x2}, {0x0, 0x2}, {}, {0x7, 0x3}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x8}, {0x0, 0x2}, {0x6, 0x7}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x101, 0x50, 0x3ff, 0x5, 0x9, 0x17, 0x5]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xc, 0x30, 0x0, 0x5, 0x4, 0x6c, 0x5, 0x48, 0x48, 0x4, 0x1b, 0x4, 0x1, 0x7e, 0x12, 0x12, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x340, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x7, 0x8}, {0x2, 0x7}, {0x2, 0x4}, {0x4, 0x5}, {0x0, 0x4}, {0x2, 0xa}, {0x7, 0x5}, {0x5, 0x4}, {0x4}, {0x1, 0x5}, {0x1, 0x1}, {0x4, 0x3}, {0x3, 0x4}, {0x4}, {0x7, 0x7}, {0x0, 0x4}, {0x0, 0x4}, {0x1, 0x2}, {0x4, 0x1}, {0x3, 0x9}, {0x7, 0x6}, {0x2, 0x4}, {0x1, 0x1}, {0x5, 0x4}, {0x3, 0x6}, {0x6, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x5, 0x1}, {0x7, 0xa}, {0x5}, {0x6, 0x8}, {0x0, 0x9}, {0x5}, {0x4, 0x1}, {0x1, 0xa}, {0x6, 0x1}, {0x3, 0x1}, {0x0, 0x2}, {0x1}]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x7}, {0x5, 0xa}, {0x2, 0x6}, {0x0, 0x1}, {0x4, 0x6}, {0x5, 0x1}, {0x6, 0x3}, {0x0, 0x3}, {0x1, 0x2}, {0x7, 0x5}, {0x4, 0x6}, {0x6, 0x7}, {0x5, 0x3}, {0x2, 0x7}, {0x7}, {0x1, 0x7}, {0x0, 0x7}]}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x1, 0x3}, {0x4, 0x2}, {0x2}, {0x5, 0x7}, {0x4, 0xa}, {0x1, 0x5}, {0x6, 0x1}, {0x1, 0x5}, {0x3, 0x3}, {0x6, 0x7}, {0x6}, {0x4, 0x7}, {0x1, 0x5}, {0x4, 0x3}, {0x0, 0x2}, {0x5, 0x7}, {0x4, 0x1}, {0x2, 0x3}, {0x3}, {0x0, 0x7}, {0x1, 0x6}, {0x3, 0x3}, {0x0, 0x9}, {0x5, 0x2}, {0x1, 0x7}, {0x2, 0xa}, {0x4, 0x8}, {0x3, 0x2}, {0x5, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {0x4, 0x2}, {0x6, 0x6}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x4, 0x9}, {0x6, 0xa}, {0x7, 0x2}, {0x1}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x12, 0xc, 0x6, 0x60, 0xb, 0x48, 0x1, 0x0, 0x2, 0x18, 0x1, 0x24, 0x30, 0x18, 0x18, 0x16, 0x6, 0x24, 0x9, 0x18, 0x24, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x200, 0x100, 0xd606, 0x6, 0x4, 0x10, 0x1]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6, 0x3, 0x3, 0x1, 0x24, 0x16, 0x1, 0x12, 0x24, 0x60]}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x3, 0x1}, {0x7, 0x7}, {0x4, 0x9}, {0x7, 0x4}, {0x3, 0x6}, {0x1}, {0x7, 0x3}, {0x2, 0xa}, {0x1, 0x4}, {0x1, 0x9}, {0x5}, {0x2, 0xa}, {0x6, 0x2}, {0x3, 0x6}, {0x1, 0x8}, {0x2, 0x3}, {0x6, 0x9}, {0x1, 0x2}, {0x1, 0x4}, {0x0, 0xa}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0x7}, {0x6, 0x7}, {0x2, 0x4}, {0x2, 0x2}, {0x4}, {0x3, 0x5}, {0x4, 0x5}, {0x1}, {0x1, 0x2}, {0x4, 0x9}, {0x0, 0x3}, {0x0, 0x7}, {0x3}, {0x7, 0x9}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x5}, {0x1, 0x4}, {0x2, 0x3}, {0x1, 0x5}, {0x4, 0x7}, {0x5, 0x3}, {0x6, 0x7}, {0x7, 0x15}, {0x4, 0x2}, {0x4, 0x7}, {0x4, 0x5}, {0x7}, {0x5}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xb, 0x9, 0x48, 0x12, 0x0, 0x1a, 0x1b, 0x1, 0x48, 0x60, 0x5, 0x6, 0x1b, 0x60, 0x12, 0x30, 0x6, 0xb, 0x36, 0xb, 0x1, 0x9, 0x1, 0x24]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0x9, 0x60, 0x6c, 0x16, 0x60, 0x9, 0x60, 0x6, 0x48, 0x36, 0x4, 0x18, 0x30, 0x48, 0x6, 0x48, 0x48, 0x3, 0x30, 0x1, 0x4, 0x2, 0x48, 0x30, 0x36, 0x3f, 0x24, 0x16, 0xb]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0xc, 0xb, 0x4, 0x5, 0x18, 0x30, 0x1, 0x6, 0x2, 0x0, 0x6, 0x4, 0x6, 0x16, 0x2, 0x0, 0x30, 0x24, 0x36, 0x9, 0x24, 0x60, 0xc, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xb656, 0x1, 0x801, 0xfec6, 0x9, 0x9, 0x8c5]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xb, 0x60, 0x4, 0x6, 0x3, 0x3, 0x3, 0x3, 0x6, 0x36, 0xb, 0x6, 0x5, 0x4, 0x36, 0x36, 0x16, 0x36, 0x6, 0x4, 0x1, 0x30, 0x0, 0x24, 0x48, 0x9, 0x12, 0x3, 0x6]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x8, 0x431, 0x4, 0xa, 0x7, 0xf3d6]}}]}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x1, 0x200, 0x8, 0x0, 0xf824, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x3, 0x4, 0x8000, 0x9, 0x1, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6c, 0x3, 0x1b, 0xb, 0x36, 0x1b, 0x36, 0x2, 0x48, 0xd, 0x36, 0x6, 0x2c, 0x32, 0x5, 0x2, 0xc, 0x30, 0x1b, 0x4, 0x2d, 0x2d, 0x18, 0x9, 0x3, 0x5, 0x12, 0x4, 0x2, 0x2, 0xc, 0x16]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x1, 0x4}, {0x5}, {0x1, 0xa}, {0x7, 0x1}, {0x5}, {0x0, 0x2}, {0x1, 0x8}, {0x0, 0x4}, {0x4, 0x9}, {0x0, 0x6}, {0x4, 0x8}, {}, {0x5, 0x2}, {0x6, 0x2}, {0x4, 0x6}, {0x7, 0x9}, {0x7, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x1}, {0x5, 0x9}, {0x7, 0x2}, {0x7, 0x2}, {0x2, 0xa}, {0x1, 0x8}, {0x4, 0x7}, {0x7, 0xa}, {0x1, 0x1}, {0x4, 0x2}, {0x1, 0x4}, {0x3, 0x3}, {0x1, 0x4}, {0x0, 0x1}, {0x3, 0x8}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x4}, {0x2, 0x1}, {0x6, 0x7}, {0x5, 0x4}, {0x0, 0x1}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0x2}, {0x4, 0x2}, {0x2, 0x4}, {0x0, 0x9}, {0x6, 0xa}, {0x0, 0x1}, {0x7, 0xc}, {0x1, 0x2}, {0x4, 0x4}, {0x0, 0x1}, {0x3, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x2, 0x5}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x6}, {0x5}, {0x3, 0x1}, {0x3, 0x5}, {0x1}, {0x7, 0x3}, {0x4}, {0x4, 0x3}, {0x6, 0x1}, {0x3, 0x8}, {0x0, 0x2}, {0x5, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfff, 0x5, 0x7fff, 0x5, 0x8, 0xce, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x0, 0x4, 0x7, 0xb79, 0x7, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x2, 0x7, 0xe55f, 0x2, 0x4, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x62, 0x40, 0xeb1, 0x100, 0x2, 0x1c, 0xfffd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x9, 0x0, 0x4, 0x1, 0x8, 0x100]}}]}]}]}, 0x550}, 0x1, 0x0, 0x0, 0x40801}, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000e00)={0x1, 'lo\x00', {}, 0x7}) sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x80, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x10000000}, 0x40005) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r9, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) socket(0x23, 0x800, 0x6) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000001080)=0x8) mount$overlay(0x0, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100), 0xd1, &(0x7f0000001140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@dont_appraise}]}) r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$TUNSETQUEUE(r11, 0x400454d9, &(0x7f00000011c0)={'bridge0\x00', 0x200}) openat2$dir(0xffffffffffffff9c, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240)={0x2820, 0x1d, 0x10}, 0x18) r12 = accept4$bt_l2cap(r11, &(0x7f0000001280)={0x1f, 0x0, @none}, &(0x7f00000012c0)=0xe, 0x4e5739941c169ecc) accept4$bt_l2cap(r12, &(0x7f0000001300)={0x1f, 0x0, @none}, &(0x7f0000001340)=0xe, 0x0) setsockopt(r4, 0x0, 0x8, &(0x7f0000001380), 0x0) 2.675920316s ago: executing program 3 (id=701): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) request_key(0x0, 0x0, &(0x7f0000000080)='(+\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) timer_create(0x3, 0x0, &(0x7f0000000080)=0x0) timer_settime(r5, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = epoll_create(0xbe1) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x40000008}) r8 = fcntl$dupfd(r6, 0x0, r7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000004c0)={0x4000200c}) syz_clone3(&(0x7f00000000c0)={0x40004000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) timer_settime(r5, 0x1, &(0x7f0000000180), &(0x7f00000001c0)) 2.656962206s ago: executing program 5 (id=702): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00', 0x0}) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x12, 0x15, &(0x7f00000009c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRESOCT, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYBLOB], 0x8, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r9 = pidfd_getfd(r5, r5, 0x0) setns(r9, 0x66020000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x2010, r0}, 0x18) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x1a, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000a5820503e27bed74f9df4c84181ba6295cd26c9c905a9bbea11e74b298663aeda4e9d0bb22db125b378b7b405f805699132e23bb8525e696015bc551483a48d3aed1118d08edae2ad76c496eb613c6f89f1bfcc7ca748d630424969c41888babba4f4ebb22db44d836e3ab90d0d6b4eea87e933022ff16ca05158ded0e00000000000000efd21f1ac3a5e3e852d2ccdfbf93e3b0a241168363cc1d61a1a57d1d3a0203a474be1179196fa1cad42f01dcf8b0", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000180000000100000000000000040000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000ac0)='syzkaller\x00', 0x4, 0x67, &(0x7f0000000b00)=""/103, 0x41000, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x3, 0xc, 0x3, 0xe}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0xc}, 0x94) r12 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000d00), 0x254102, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="ac0000001000020327bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="0800000000000000240022000d27e2d187432d969e0de432ac601ab6cfa1d0ba699d9f25de53284ea25ccff708002e000200000008000500", @ANYRES32=r3, @ANYBLOB="08002500030000003c002b8008000100", @ANYRES32=r9, @ANYBLOB="080003000600000008000100", @ANYRES32=r10, @ANYBLOB="080001e6", @ANYRES32=r11, @ANYBLOB="080003000900000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="1400140070696d36726567000000000000000000"], 0xac}, 0x1, 0x0, 0x0, 0x44000}, 0x20004080) r13 = dup(r0) ioctl$TIOCL_SETSEL(r13, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x7f00, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r13, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x2, 0x4000}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000140)={0x8, 0x7, {0x5, @usage=0x100000000, 0x0, 0x100000000, 0xf, 0x4, 0xc, 0x8001, 0x10, @usage=0xf2, 0x7, 0x6f0ffcaa, [0x2, 0xffffffffffffffff, 0xfffffffffffff000, 0x2, 0x5, 0x400]}, {0x1, @struct={0x4, 0x7}, 0x0, 0xe, 0x10, 0xfff, 0xffffffffffffff80, 0x8000000000000001, 0x80, @struct={0x3, 0x40000001}, 0xf3, 0x80000000, [0x1416, 0x5, 0x1, 0x1, 0x0, 0x973]}, {0x5, @struct={0x23e, 0xfffffff0}, 0x0, 0xffffffffffffffff, 0x6, 0x8001, 0x80000000, 0x0, 0x8, @usage=0x7fffffffffffffff, 0xaa1, 0x9, [0x3, 0xf5f, 0x7767fc92, 0x9, 0x6, 0x1d]}, {0x7c8, 0x1, 0x3}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r13, 0xc400941d, &(0x7f0000000540)={r14, 0x3da2, 0x5, 0x1}) ioctl$TUNSETTXFILTER(r13, 0x400454d1, &(0x7f0000000000)={0x0, 0x7, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @multicast, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast]}) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000001380)=ANY=[@ANYRESHEX=r6, @ANYRES64, @ANYBLOB="040025bd7000fcdbdf250800000008000500090000004c00018014000300e000000100000000000000000000000014000300fe8000000000000000000000000000aa0c0007000000000038000000070006006c6300000c000700050000000100000018000280140001000a010101000000000000000000000000240001800600020029000000060002002f0000000800050003000000080005000300000008000500e1000000"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x80) 1.731766086s ago: executing program 2 (id=703): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x700, 0x80, 0x6, 0x9, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x65, 0x0, 0xd, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}]}}}}}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x1, 0xff, 0x7, 0x0, 0x1}, 0x50) r7 = socket(0xa, 0x3, 0x3a) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r9}, 0xc) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f00000002c0)=0x8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x8, 0x0, r3, 0xe629, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x20, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @map_idx={0x18, 0x4, 0x5, 0x0, 0xf}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @alu={0x7, 0x1, 0x9, 0x4, 0x5, 0xfffffffffffffff0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x80000000, 0x57, &(0x7f00000004c0)=""/87, 0x41000, 0x64, '\x00', r4, 0x1c, r5, 0x8, &(0x7f0000000200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x6, 0x80, 0xff}, 0x10, 0x29b5f, r1, 0x1, &(0x7f0000000640)=[r3, 0x1, r6, r10, r2, r11, r12, r2, r2, r3], &(0x7f0000000680)=[{0x0, 0x1, 0x1, 0x9}], 0x10, 0x3}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r13}, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000300)={0x2c, r14, 0x1, 0x70bd26, 0x25df9bfc, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}}, 0x40814) 1.729051036s ago: executing program 3 (id=704): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="180000001000000000000000e5f3000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000040b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000001c0)=r5, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000740)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001"], 0x13c}}, 0x20040880) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x120d, &(0x7f0000001280)="$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") 1.727434176s ago: executing program 1 (id=705): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101842, 0x1) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bff000/0x400000)=nil) 1.726042016s ago: executing program 2 (id=706): r0 = socket(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x4, 0x0, 0x1, {0xa, 0x4e21, 0x80000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x79}}}, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e95800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 1.705129117s ago: executing program 2 (id=707): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") clock_gettime(0x4, &(0x7f0000003000)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffde, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_cancel(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r6}, 0x18) 1.697820757s ago: executing program 1 (id=708): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x4]}, 0x8, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYRESOCT=r0, @ANYBLOB="4486fc", @ANYRESHEX, @ANYRES32=r0], 0x53) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r8, @ANYRES16=r8, @ANYRES64=r0, @ANYRES64=r7, @ANYRES32=r8, @ANYRES64=0x0], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000200)=ANY=[], 0x108) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) syz_clone(0x600c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.696765338s ago: executing program 5 (id=709): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'bond0\x00', 0x100}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'pimreg\x00', 0x1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @private0, 0x106}, 0x1c) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1.008919057s ago: executing program 4 (id=710): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 471.07679ms ago: executing program 4 (id=711): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup3(r1, r1, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") syz_io_uring_setup(0x60e3, &(0x7f0000000000)={0x0, 0xaf64, 0x2, 0x1, 0x13d}, &(0x7f00000000c0), &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) 390.940423ms ago: executing program 2 (id=712): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (fail_nth: 1) 4.09498ms ago: executing program 3 (id=713): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x3, 0x7, 0xffffffffffffffff, 0x0, 0x7c, 0x7}) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_SREGS2(r1, 0x8140aecc, &(0x7f0000000040)) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) r3 = syz_clone(0x1140000, &(0x7f00000001c0)="9275af4ca9623b5814d22783ef14d0df4eb5566e6b650b332bd21aa637452b59f9f0c84aa7d3a284be1dfc3ea368ab3d52408e79627c5312dd0d80b731e3a5157a6431d7c312a7", 0x47, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="1d4171ad3634dfe2a69f151f04d9e80f7033b7f2af3a2e39e3ba22") ioctl$TIOCCONS(r0, 0x541d) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x1083024, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000003c0)=r3) r4 = syz_mount_image$fuse(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x20000, &(0x7f0000000480)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0xe00}}], [{@smackfsroot={'smackfsroot', 0x3d, ',['}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'pipefs\x00'}}, {@subj_user={'subj_user', 0x3d, 'pipefs\x00'}}, {@uid_eq}, {@hash}]}}, 0x0, 0x0, &(0x7f0000000580)="52b410f343b72aa386455cb3885f3e93e149806625cb23072747e602f666432aaf57509eecc45fd50898d684a7d3f73a80303b4751ba316c25734bbee469c7672ca8ecde147040e843c66c2d7931747a249b17ef5bc0465721231004a553ac4d8bdba1515bb7165e9fb4b44a695b7431469b6af91d5b71e92ddde338bedc9701c4f7fec5e3d67154d889abb43ff357c8faabc7c0b031bdfa2bc051e18ab50b49bd458c2a34fc9960f36f764f5979b1169f70d74ec877f039cb8f2480385e29baee851d5ad9a5ee2dacee621fd2b88053bb37f4109bf066e993c37999") r5 = getuid() fchownat(r4, &(0x7f0000000680)='./file0\x00', r5, 0xee00, 0x1000) connect$inet6(r2, &(0x7f00000006c0)={0xa, 0x4e22, 0x5, @private1, 0x9}, 0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@mpls_newroute={0x24, 0x18, 0x100, 0x70bd2a, 0x25dfdbff, {0x1c, 0x20, 0x20, 0xe9, 0xfc, 0x7, 0xfe, 0x8, 0x1c00}, [@RTA_OIF={0x8, 0x4, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, 0x0, 0x8, 0x101, 0x0, 0x0, {0xb, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xd6}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x17}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000000) mknodat$loop(r4, &(0x7f00000009c0)='./file0\x00', 0x800, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000e00)={0xb1, 0x17, &(0x7f0000000a00)="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"}) r7 = accept4(r2, &(0x7f0000000e40)=@qipcrtr, &(0x7f0000000ec0)=0x80, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) r8 = syz_open_procfs$pagemap(r3, &(0x7f0000000f00)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000fc0)={0x60, 0x1, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x1, &(0x7f0000000f40)=[{0xc, 0x3, 0x77}, {0x1, 0x7, 0x3}, {0x0, 0x8, 0x5}, {0x7, 0x81, 0x4}], 0x4, 0x3, 0x20, 0x6a, 0x1, 0x40}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000001040)) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000010c0), r7) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xcc, r9, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, &(0x7f0000001280)={r2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x11, 0x1b, &(0x7f0000001300)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x3}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @tail_call, @cb_func={0x18, 0x4, 0x4, 0x0, 0x2}, @generic={0x9, 0xa, 0x3, 0x4, 0x8}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2fb9}], &(0x7f0000001400)='GPL\x00', 0x585d, 0x1c, &(0x7f0000001440)=""/28, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001680)={0x5, 0xa, 0x5, 0xf}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000016c0)=[{0x4, 0x1, 0xe, 0xc}], 0x10, 0xff}, 0x94) 653.1µs ago: executing program 3 (id=714): syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @random="c59a1b746cda", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x10, 0x2c, 0xff, @remote, @local, {[@dstopts={0x88, 0x0, '\x00', [@pad1]}]}}}}}, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240), &(0x7f0000000000)='system_u:object_r:power_device_t:s0\x00', 0x24, 0x0) 0s ago: executing program 3 (id=715): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) statx(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x1000, 0x4, 0x0) (async) syz_fuse_handle_req(r0, &(0x7f0000006f00)="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", 0x2000, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x78, 0x0, 0x1, {0x262, 0x7fffffff, 0x0, {0x4, 0x5, 0x7fff, 0x80, 0x68, 0x0, 0xc, 0x0, 0x1, 0xa000, 0xff, 0x0, 0x0, 0x2, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1008002, &(0x7f0000000100)={[{@grpjquota}, {@discard}, {@noinit_itable}, {@nouid32}]}, 0x3, 0x5f9, &(0x7f00000024c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000007c0)) (async) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='./bus/file0\x00') (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, &(0x7f00000032c0)=""/4096, 0x1000}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x24) kernel console output (not intermixed with test programs): 0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.562913][ T28] audit: type=1400 audit(1764425557.094:273): avc: denied { write } for pid=1092 comm="syz.4.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.575799][ T336] usb 2-1: 0:2 : does not exist [ 68.590082][ T28] audit: type=1400 audit(1764425557.094:274): avc: denied { read } for pid=1092 comm="syz.4.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.615259][ T1112] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 68.615529][ T28] audit: type=1400 audit(1764425557.094:275): avc: denied { read write } for pid=1092 comm="syz.4.177" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.656772][ T28] audit: type=1400 audit(1764425557.094:276): avc: denied { open } for pid=1092 comm="syz.4.177" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.660935][ T288] EXT4-fs (loop3): unmounting filesystem. [ 68.680863][ T28] audit: type=1400 audit(1764425557.094:277): avc: denied { ioctl } for pid=1092 comm="syz.4.177" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.686351][ T399] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 68.712558][ T28] audit: type=1400 audit(1764425557.124:278): avc: denied { mount } for pid=1105 comm="syz.3.181" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.741978][ T28] audit: type=1400 audit(1764425557.154:279): avc: denied { read write } for pid=1105 comm="syz.3.181" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.768985][ T1112] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 68.911268][ T399] usb 3-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 68.921837][ T399] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 68.930833][ T399] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 68.939893][ T399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.948926][ T399] usb 3-1: config 0 descriptor?? [ 69.950112][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 69.997492][ T19] usb 2-1: USB disconnect, device number 4 [ 70.004285][ T285] EXT4-fs (loop1): unmounting filesystem. [ 70.130043][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 70.136514][ T24] usb 4-1: config 0 has no interfaces? [ 70.143706][ T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 70.153029][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.161055][ T24] usb 4-1: Product: syz [ 70.165329][ T24] usb 4-1: Manufacturer: syz [ 70.170054][ T24] usb 4-1: SerialNumber: syz [ 70.175497][ T24] r8152-cfgselector 4-1: config 0 descriptor?? [ 70.384077][ T1126] loop3: detected capacity change from 0 to 128 [ 70.420095][ T19] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 70.601559][ T19] usb 2-1: config 1 has an invalid descriptor of length 165, skipping remainder of the config [ 70.612011][ T19] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 70.622967][ T19] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.632521][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.640912][ T19] usb 2-1: Product: syz [ 70.645205][ T19] usb 2-1: Manufacturer: syz [ 70.650042][ T19] usb 2-1: SerialNumber: syz [ 70.656278][ T572] usb 4-1: config 0 descriptor?? [ 71.135906][ T1139] netlink: 25 bytes leftover after parsing attributes in process `syz.4.188'. [ 71.145606][ T1139] device 00XD entered promiscuous mode [ 71.154662][ T1139] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.188'. [ 71.164043][ T1139] 1XD: renamed from 00XD [ 71.170454][ T1139] device 01XD left promiscuous mode [ 71.313978][ T336] usb 3-1: USB disconnect, device number 5 [ 71.370089][ T396] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 71.550044][ T396] usb 1-1: Using ep0 maxpacket: 16 [ 71.556943][ T396] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 71.565595][ T396] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.576279][ T396] usb 1-1: config 0 has no interface number 0 [ 71.584470][ T396] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 71.593877][ T396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.602010][ T396] usb 1-1: Product: syz [ 71.606313][ T396] usb 1-1: Manufacturer: syz [ 71.610994][ T396] usb 1-1: SerialNumber: syz [ 71.616676][ T396] usb 1-1: config 0 descriptor?? [ 71.720087][ T336] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 71.900134][ T336] usb 3-1: Using ep0 maxpacket: 32 [ 71.919040][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.928885][ T1152] loop4: detected capacity change from 0 to 256 [ 71.933494][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.939896][ T1152] exfat: Deprecated parameter 'namecase' [ 71.952714][ T1152] exfat: Bad value for 'uid' [ 71.964168][ T336] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 71.973501][ T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.983920][ T336] usb 3-1: config 0 descriptor?? [ 72.005109][ T335] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.075326][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 72.075345][ T28] audit: type=1400 audit(1764425560.744:310): avc: denied { read write } for pid=1137 comm="syz.0.189" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 72.116833][ T28] audit: type=1400 audit(1764425560.784:311): avc: denied { open } for pid=1137 comm="syz.0.189" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 72.141322][ T28] audit: type=1400 audit(1764425560.784:312): avc: denied { ioctl } for pid=1137 comm="syz.0.189" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 72.229282][ T1157] loop4: detected capacity change from 0 to 256 [ 72.273479][ T28] audit: type=1326 audit(1764425560.924:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1151 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ffd8f749 code=0x7ffc0000 [ 72.447513][ T28] audit: type=1326 audit(1764425560.924:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1151 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ffd8f749 code=0x7ffc0000 [ 72.471521][ T28] audit: type=1326 audit(1764425560.924:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1151 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc7ffd8f749 code=0x7ffc0000 [ 72.495096][ T28] audit: type=1326 audit(1764425560.924:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1151 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ffd8f749 code=0x7ffc0000 [ 72.509244][ T336] savu 0003:1E7D:2D5A.0002: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 72.519029][ T28] audit: type=1326 audit(1764425560.924:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1151 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ffd8f749 code=0x7ffc0000 [ 72.554320][ T28] audit: type=1326 audit(1764425560.924:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1151 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc7ffd8f749 code=0x7ffc0000 [ 72.578242][ T28] audit: type=1326 audit(1764425560.924:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1151 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ffd8f749 code=0x7ffc0000 [ 72.693200][ T572] usb 4-1: can't set config #0, error -71 [ 72.693259][ T336] usb 4-1: USB disconnect, device number 3 [ 72.740428][ T1163] loop3: detected capacity change from 0 to 512 [ 72.791608][ T40] usb 3-1: USB disconnect, device number 6 [ 72.813098][ T1163] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 72.823665][ T1163] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.839227][ T1170] loop4: detected capacity change from 0 to 512 [ 72.870668][ T1170] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 72.880968][ T1170] ext4: Unknown parameter ' ' [ 72.886895][ T288] EXT4-fs (loop3): unmounting filesystem. [ 72.896368][ T286] EXT4-fs (loop4): unmounting filesystem. [ 72.961824][ T1177] loop3: detected capacity change from 0 to 1024 [ 72.978612][ T1177] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 72.988135][ T1177] EXT4-fs (loop3): orphan cleanup on readonly fs [ 72.995180][ T1177] EXT4-fs error (device loop3): ext4_free_blocks:6205: comm syz.3.199: Freeing blocks not in datazone - block = 0, count = 4096 [ 73.009091][ T1177] EXT4-fs (loop3): 1 orphan inode deleted [ 73.015462][ T1177] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 73.033229][ T288] EXT4-fs (loop3): unmounting filesystem. [ 73.047377][ T1181] netlink: 'syz.3.200': attribute type 5 has an invalid length. [ 73.081934][ T1186] loop3: detected capacity change from 0 to 1024 [ 73.318696][ T1186] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 73.341559][ T1191] loop2: detected capacity change from 0 to 1024 [ 73.347473][ T1186] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3836: comm syz.3.201: Allocating blocks 385-513 which overlap fs metadata [ 73.348494][ T1191] EXT4-fs: Ignoring removed nobh option [ 73.371437][ T295] usb 2-1: USB disconnect, device number 5 [ 73.376479][ T1186] EXT4-fs (loop3): pa ffff88811689f498: logic 16, phys. 129, len 24 [ 73.386085][ T1186] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 8 [ 73.404509][ T1191] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz.2.202: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 73.424141][ T1191] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.202: couldn't read orphan inode 11 (err -117) [ 73.439038][ T288] Trying to write to read-only block-device loop3 [ 73.439260][ T1191] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 73.450561][ T288] Trying to write to read-only block-device loop3 [ 73.470101][ T288] Trying to write to read-only block-device loop3 [ 73.477317][ T288] Trying to write to read-only block-device loop3 [ 73.484014][ T288] Trying to write to read-only block-device loop3 [ 73.490651][ T288] Trying to write to read-only block-device loop3 [ 73.491210][ T1191] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.202: Invalid block bitmap block 0 in block_group 0 [ 73.497253][ T288] Trying to write to read-only block-device loop3 [ 73.497284][ T288] Trying to write to read-only block-device loop3 [ 73.525874][ T288] Trying to write to read-only block-device loop3 [ 73.532677][ T288] Trying to write to read-only block-device loop3 [ 73.537165][ T1191] EXT4-fs error (device loop2): ext4_acquire_dquot:6803: comm syz.2.202: Failed to acquire dquot type 0 [ 73.551732][ T288] EXT4-fs (loop3): unmounting filesystem. [ 73.565822][ T287] EXT4-fs (loop2): unmounting filesystem. [ 73.831550][ T1197] loop2: detected capacity change from 0 to 128 [ 73.866078][ T1209] netlink: 52 bytes leftover after parsing attributes in process `syz.4.208'. [ 74.190400][ T396] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 74.202732][ T396] usb 1-1: No valid video chain found. [ 74.211842][ T1218] overlayfs: failed to resolve './bus': -2 [ 74.219197][ T1218] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 74.241138][ T396] usb 1-1: USB disconnect, device number 3 [ 74.329677][ T335] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 74.538747][ T1227] loop3: detected capacity change from 0 to 512 [ 74.569313][ T1225] netlink: 25 bytes leftover after parsing attributes in process `syz.2.213'. [ 74.569566][ T1227] /dev/loop3: Can't open blockdev [ 74.584066][ T1225] device 01XD entered promiscuous mode [ 74.595923][ T1225] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.213'. [ 74.605776][ T1225] 0XD: renamed from 01XD [ 74.612681][ T1225] device 00XD left promiscuous mode [ 74.614172][ T1227] loop3: detected capacity change from 0 to 256 [ 74.624735][ T1220] loop0: detected capacity change from 0 to 40427 [ 74.638899][ T1220] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 74.646979][ T1220] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 74.658495][ T1220] F2FS-fs (loop0): invalid crc value [ 74.665167][ T1220] F2FS-fs (loop0): Found nat_bits in checkpoint [ 74.681402][ T341] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 74.702337][ T1220] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 74.709599][ T1220] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 74.957441][ T1235] overlayfs: missing 'workdir' [ 75.688137][ T1242] loop2: detected capacity change from 0 to 512 [ 76.164328][ T1242] EXT4-fs (loop2): 1 orphan inode deleted [ 76.170489][ T1242] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 76.182410][ T1242] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.730161][ T707] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:84: Failed to release dquot type 1 [ 76.785246][ T287] EXT4-fs (loop2): unmounting filesystem. [ 76.838236][ T707] Bluetooth: hci0: Frame reassembly failed (-84) [ 76.844151][ T1270] loop4: detected capacity change from 0 to 16 [ 76.851139][ T1270] erofs: Unknown parameter './bus' [ 76.865266][ T1275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.225'. [ 76.881798][ T341] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 76.978362][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.999707][ T1290] loop0: detected capacity change from 0 to 512 [ 77.006699][ T1290] EXT4-fs: Ignoring removed orlov option [ 77.013641][ T1290] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 77.081962][ T1291] loop2: detected capacity change from 0 to 128 [ 77.236741][ T1290] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.229: bad orphan inode 131083 [ 77.300215][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 77.300295][ T28] audit: type=1400 audit(1764425565.934:418): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 77.426018][ T1290] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 77.584152][ T1290] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.229: iget: bad extra_isize 1312 (inode size 256) [ 77.739418][ T28] audit: type=1400 audit(1764425566.164:419): avc: denied { mount } for pid=1294 comm="syz.1.230" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 77.843129][ T1290] overlayfs: upper fs needs to support d_type. [ 77.857822][ T284] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /58/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 77.878807][ T28] audit: type=1400 audit(1764425566.214:420): avc: denied { read } for pid=1294 comm="syz.1.230" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.907974][ T28] audit: type=1400 audit(1764425566.214:421): avc: denied { open } for pid=1294 comm="syz.1.230" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.937625][ T28] audit: type=1400 audit(1764425566.224:422): avc: denied { ioctl } for pid=1294 comm="syz.1.230" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.962685][ T28] audit: type=1400 audit(1764425566.514:423): avc: denied { mounton } for pid=1289 comm="syz.0.229" path="/58/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.986626][ T28] audit: type=1400 audit(1764425566.514:424): avc: denied { write } for pid=1289 comm="syz.0.229" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 78.008788][ T28] audit: type=1400 audit(1764425566.514:425): avc: denied { add_name } for pid=1289 comm="syz.0.229" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 78.029475][ T28] audit: type=1400 audit(1764425566.514:426): avc: denied { setattr } for pid=1289 comm="syz.0.229" name="work" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 78.041157][ T284] EXT4-fs (loop0): unmounting filesystem. [ 78.052433][ T28] audit: type=1400 audit(1764425566.514:427): avc: denied { remove_name } for pid=1289 comm="syz.0.229" name="#8" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 78.463670][ T1312] loop1: detected capacity change from 0 to 4096 [ 78.540122][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 78.582447][ T1312] EXT4-fs (loop1): Test dummy encryption mode enabled [ 78.711163][ T1312] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 78.780063][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 78.787507][ T24] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 78.798513][ T1312] System zones: 0-5 [ 78.855193][ T1312] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 78.880152][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 78.968421][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.200331][ T24] usb 3-1: config 0 has no interface number 0 [ 79.331460][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 79.355271][ T572] device bridge_slave_1 left promiscuous mode [ 79.368155][ T572] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.439580][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.448449][ T24] usb 3-1: Product: syz [ 79.453007][ T24] usb 3-1: Manufacturer: syz [ 79.460159][ T24] usb 3-1: SerialNumber: syz [ 79.465623][ T24] usb 3-1: config 0 descriptor?? [ 79.490678][ T24] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 79.497251][ T24] usb 3-1: No valid video chain found. [ 79.814879][ T1326] raw_sendmsg: syz.3.240 forgot to set AF_INET. Fix it! [ 79.824482][ T572] device bridge_slave_0 left promiscuous mode [ 79.837176][ T572] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.846424][ T572] device veth1_macvtap left promiscuous mode [ 79.853055][ T572] device veth0_vlan left promiscuous mode [ 80.270107][ T1333] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 80.279410][ T1333] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 80.291532][ T1333] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 80.306021][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.313420][ T1318] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.321836][ T1318] device bridge_slave_0 entered promiscuous mode [ 80.329350][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.337170][ T1318] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.351252][ T1318] device bridge_slave_1 entered promiscuous mode [ 80.392938][ T285] EXT4-fs (loop1): unmounting filesystem. [ 80.483598][ T1342] netlink: 25 bytes leftover after parsing attributes in process `syz.4.243'. [ 80.493418][ T1342] device 01XD entered promiscuous mode [ 80.504747][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.512004][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.519666][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.526913][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.535231][ T1342] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.243'. [ 80.544814][ T1342] 0XD: renamed from 01XD [ 80.551180][ T1342] device 00XD left promiscuous mode [ 80.608684][ T1352] loop1: detected capacity change from 0 to 128 [ 80.780551][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.872535][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.932485][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.961197][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.989428][ T24] usb 3-1: USB disconnect, device number 7 [ 82.027112][ T572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.045471][ T1357] loop2: detected capacity change from 0 to 512 [ 82.052613][ T572] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.059790][ T572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.085193][ T1357] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.099462][ T1359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.247'. [ 82.108843][ T1357] EXT4-fs: dax option not supported [ 82.114680][ T572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.124701][ T572] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.131913][ T572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.176937][ T1318] device veth0_vlan entered promiscuous mode [ 82.192306][ T1318] device veth1_macvtap entered promiscuous mode [ 82.206585][ T1359] loop4: detected capacity change from 0 to 512 [ 82.217378][ T1359] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.224699][ T1359] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 82.240270][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.248467][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.256580][ T1359] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8816e028, mo2=0002] [ 82.256727][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.266421][ T1359] EXT4-fs (loop4): orphan cleanup on readonly fs [ 82.273159][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.287954][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.288917][ T1359] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.247: bg 0: block 361: padding at end of block bitmap is not set [ 82.296735][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.313428][ T1359] EXT4-fs (loop4): Remounting filesystem read-only [ 82.319717][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.327490][ T1359] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 82.362935][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.372432][ T1369] loop1: detected capacity change from 0 to 128 [ 82.412403][ T1359] EXT4-fs (loop4): Remounting filesystem read-only [ 82.434859][ T1359] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.247: attempt to clear invalid blocks 33619980 len 1 [ 82.524431][ T1359] EXT4-fs (loop4): Remounting filesystem read-only [ 82.536286][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.655589][ T341] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 82.967308][ T1375] loop3: detected capacity change from 0 to 1024 [ 82.976082][ T1375] EXT4-fs: Ignoring removed orlov option [ 82.982177][ T1375] /dev/loop3: Can't open blockdev [ 83.180181][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 83.180201][ T28] audit: type=1400 audit(3528851651.452:444): avc: denied { mount } for pid=1370 comm="syz.3.249" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 83.210449][ T1359] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.247: invalid indirect mapped block 1811939328 (level 0) [ 83.235497][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.254181][ T1359] EXT4-fs (loop4): Remounting filesystem read-only [ 83.271226][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.289188][ T1359] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.247: invalid indirect mapped block 2185560079 (level 1) [ 83.304825][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.314270][ T28] audit: type=1400 audit(3528851651.452:445): avc: denied { mounton } for pid=1370 comm="syz.3.249" path="/54/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 83.347697][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.355758][ T1359] EXT4-fs (loop4): Remounting filesystem read-only [ 83.383241][ T1359] EXT4-fs (loop4): 1 truncate cleaned up [ 83.389405][ T1359] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 83.422760][ T28] audit: type=1400 audit(3528851651.922:446): avc: denied { mounton } for pid=1318 comm="syz-executor" path="/root/syzkaller.IJUgpa/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 83.468508][ T1374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.249'. [ 83.480766][ T28] audit: type=1400 audit(3528851651.922:447): avc: denied { mount } for pid=1318 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.481441][ T335] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 83.505268][ T28] audit: type=1400 audit(3528851651.922:448): avc: denied { mount } for pid=1318 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 83.524912][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.569168][ T1384] netlink: 'syz.5.236': attribute type 3 has an invalid length. [ 83.570076][ T28] audit: type=1400 audit(3528851651.922:449): avc: denied { mounton } for pid=1318 comm="syz-executor" path="/root/syzkaller.IJUgpa/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 83.630368][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.694395][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.728212][ T28] audit: type=1400 audit(3528851651.922:450): avc: denied { mounton } for pid=1318 comm="syz-executor" path="/root/syzkaller.IJUgpa/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=19358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 83.742695][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.800238][ T28] audit: type=1400 audit(3528851651.942:451): avc: denied { mounton } for pid=1318 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 83.825729][ T1389] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.252'. [ 83.857006][ T28] audit: type=1400 audit(3528851651.942:452): avc: denied { mounton } for pid=1318 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 83.902237][ T1377] loop2: detected capacity change from 0 to 40427 [ 83.910345][ T28] audit: type=1326 audit(3528851652.162:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1385 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829d58f749 code=0x7ffc0000 [ 83.945373][ T1377] F2FS-fs (loop2): invalid crc value [ 83.965632][ T1377] F2FS-fs (loop2): Found nat_bits in checkpoint [ 84.036573][ T1377] F2FS-fs (loop2): Start checkpoint disabled! [ 84.043731][ T1377] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 84.155297][ T1410] loop1: detected capacity change from 0 to 512 [ 84.165352][ T1410] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.196722][ T1410] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 84.455570][ T1410] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.258: bg 0: block 248: padding at end of block bitmap is not set [ 84.515815][ T1410] EXT4-fs error (device loop1): ext4_acquire_dquot:6803: comm syz.1.258: Failed to acquire dquot type 1 [ 84.547313][ T1416] loop5: detected capacity change from 0 to 4096 [ 84.557380][ T572] kworker/u4:5: attempt to access beyond end of device [ 84.557380][ T572] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 84.572672][ T1410] EXT4-fs (loop1): 1 truncate cleaned up [ 84.578555][ T1410] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 84.637177][ T1416] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 84.653875][ T1410] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.258: deleted inode referenced: 12 [ 84.716155][ T1420] loop2: detected capacity change from 0 to 1024 [ 84.750338][ T1420] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 84.761094][ T1410] EXT4-fs (loop1): shut down requested (0) [ 84.782195][ T1420] EXT4-fs (loop2): orphan cleanup on readonly fs [ 84.789031][ T1420] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz.2.260: Freeing blocks not in datazone - block = 0, count = 4096 [ 84.803293][ T1420] EXT4-fs (loop2): 1 orphan inode deleted [ 84.809068][ T1420] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 84.853098][ T285] EXT4-fs (loop1): unmounting filesystem. [ 84.955946][ T1318] EXT4-fs (loop5): unmounting filesystem. [ 85.150027][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 85.293740][ T1440] loop1: detected capacity change from 0 to 512 [ 85.340061][ T1440] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 85.340074][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 85.352400][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 85.373706][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.389149][ T1440] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.390021][ T24] usb 3-1: Product: syz [ 85.411347][ T24] usb 3-1: Manufacturer: syz [ 85.426389][ T24] usb 3-1: SerialNumber: syz [ 85.502820][ T24] r8152-cfgselector 3-1: config 0 descriptor?? [ 85.630827][ T1443] device pim6reg1 entered promiscuous mode [ 85.858039][ T286] EXT4-fs (loop4): unmounting filesystem. [ 85.918541][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 85.927718][ T24] r8152-cfgselector 3-1: bad CDC descriptors [ 85.935371][ T1445] loop4: detected capacity change from 0 to 512 [ 85.945727][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 85.953166][ T1445] EXT4-fs (loop4): Test dummy encryption mode enabled [ 85.963595][ T24] r8152-cfgselector 3-1: USB disconnect, device number 8 [ 85.980797][ T1445] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.011849][ T1445] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.266: bad orphan inode 131083 [ 86.025455][ T1445] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 86.051875][ T1445] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.266: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 86.194596][ T285] EXT4-fs (loop1): unmounting filesystem. [ 86.270129][ T286] EXT4-fs (loop4): unmounting filesystem. [ 86.301566][ T1460] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.269'. [ 86.407050][ T1466] loop1: detected capacity change from 0 to 512 [ 86.427274][ T1466] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.273: inode has both inline data and extents flags [ 86.440771][ T1466] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.273: couldn't read orphan inode 15 (err -117) [ 86.453825][ T1466] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 86.539878][ T287] EXT4-fs (loop2): unmounting filesystem. [ 86.562680][ T1473] syz.2.275[1473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.562731][ T1473] syz.2.275[1473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.575572][ T1473] netlink: 'syz.2.275': attribute type 1 has an invalid length. [ 86.580719][ T1474] syz.2.275[1474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.587228][ T1475] syz.2.275[1475] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.595175][ T1474] syz.2.275[1474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.293115][ T1479] fuse: Unknown parameter 'grogJ600000000000000000000' [ 88.526752][ T1475] syz.2.275[1475] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.530788][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 88.530804][ T28] audit: type=1400 audit(3528851657.052:494): avc: denied { ioctl } for pid=1472 comm="syz.2.275" path="socket:[19930]" dev="sockfs" ino=19930 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.584946][ T28] audit: type=1400 audit(3528851657.102:495): avc: denied { write } for pid=1481 comm="syz.4.277" name="config" dev="proc" ino=4026532540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 88.652455][ T345] Bluetooth: hci0: Frame reassembly failed (-84) [ 88.665862][ T1489] loop5: detected capacity change from 0 to 1024 [ 88.721306][ T1489] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.730160][ T1493] netlink: 'syz.4.281': attribute type 1 has an invalid length. [ 88.751010][ T1489] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a001c01c, mo2=0002] [ 88.763159][ T1493] loop4: detected capacity change from 0 to 512 [ 88.780044][ T295] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 88.794181][ T1489] System zones: 0-1, 3-36 [ 88.820658][ T1489] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 88.831618][ T1493] msdos filesystem being mounted at /53/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 88.927731][ T1487] loop3: detected capacity change from 0 to 512 [ 88.974253][ T295] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 88.985921][ T1487] /dev/loop3: Can't open blockdev [ 88.995179][ T295] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 89.011319][ T28] audit: type=1400 audit(3528851657.532:496): avc: denied { read write } for pid=1498 comm="syz.2.283" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 89.014843][ T295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.040157][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 89.186965][ T28] audit: type=1400 audit(3528851657.552:497): avc: denied { open } for pid=1498 comm="syz.2.283" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 89.417739][ T28] audit: type=1400 audit(3528851657.552:498): avc: denied { ioctl } for pid=1498 comm="syz.2.283" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 89.613651][ T295] usb 2-1: Product: syz [ 89.617870][ T295] usb 2-1: Manufacturer: syz [ 89.622871][ T295] usb 2-1: SerialNumber: syz [ 89.628147][ T285] EXT4-fs (loop1): unmounting filesystem. [ 89.647982][ T295] usb 2-1: can't set config #1, error -71 [ 89.670561][ T295] usb 2-1: USB disconnect, device number 6 [ 89.676172][ T28] audit: type=1400 audit(3528851657.552:499): avc: denied { create } for pid=1498 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 89.707463][ T28] audit: type=1400 audit(3528851657.612:500): avc: denied { mounton } for pid=1492 comm="syz.4.281" path="/53/file2/file0" dev="loop4" ino=1048613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 89.907272][ T1511] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.286'. [ 89.947627][ T28] audit: type=1400 audit(3528851658.462:501): avc: denied { execute_no_trans } for pid=1510 comm="syz.2.287" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.108671][ T28] audit: type=1400 audit(3528851658.562:502): avc: denied { block_suspend } for pid=1515 comm="syz.1.288" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 90.374385][ T28] audit: type=1400 audit(3528851658.892:503): avc: denied { append } for pid=1488 comm="syz.5.280" path="/6/bus/memory.events.local" dev="loop5" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 90.422229][ T1318] EXT4-fs (loop5): unmounting filesystem. [ 90.710172][ T474] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 90.716822][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 91.038345][ T1548] netlink: 'syz.3.294': attribute type 4 has an invalid length. [ 91.111292][ T1553] syz.1.299 (1553): attempted to duplicate a private mapping with mremap. This is not supported. [ 91.147190][ T1556] loop4: detected capacity change from 0 to 1024 [ 91.164381][ T1556] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 91.176262][ T1556] EXT4-fs (loop4): orphan cleanup on readonly fs [ 91.200271][ T1556] EXT4-fs warning (device loop4): ext4_enable_quotas:7055: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 91.215555][ T1556] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 91.222999][ T1556] EXT4-fs (loop4): 1 truncate cleaned up [ 91.230229][ T1556] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 91.244848][ T1556] EXT4-fs (loop4): unmounting filesystem. [ 91.292605][ T1562] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.300'. [ 91.760119][ T399] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 92.093299][ T1590] loop3: detected capacity change from 0 to 1024 [ 92.101362][ T1590] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.108507][ T1590] /dev/loop3: Can't open blockdev [ 92.190507][ T399] usb 6-1: Using ep0 maxpacket: 16 [ 92.200630][ T399] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.226843][ T1601] loop3: detected capacity change from 0 to 128 [ 92.233857][ T399] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.259700][ T1601] /dev/loop3: Can't open blockdev [ 92.260380][ T1596] loop2: detected capacity change from 0 to 256 [ 92.268178][ T399] usb 6-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 92.272273][ T1596] exfat: Deprecated parameter 'utf8' [ 92.287153][ T341] udevd[341]: incorrect ext4 checksum on /dev/loop3 [ 92.297437][ T1596] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 92.350498][ T1596] exfat filesystem being mounted at /51/file1 supports timestamps until 2107-12-31 (0x10391447f) [ 92.620146][ T1603] fuse: Unknown parameter '0xffffffffffffffff' [ 92.939723][ T399] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.952398][ T399] usb 6-1: config 0 descriptor?? [ 93.304534][ T1624] loop3: detected capacity change from 0 to 128 [ 93.385565][ T1575] bridge: RTM_NEWNEIGH with invalid ether address [ 93.398123][ T399] thrustmaster 0003:044F:B654.0003: hidraw0: USB HID v0.00 Device [HID 044f:b654] on usb-dummy_hcd.5-1/input0 [ 93.419436][ T399] thrustmaster 0003:044F:B654.0003: no inputs found [ 93.480115][ T6] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 93.616641][ T399] usb 6-1: USB disconnect, device number 2 [ 93.670077][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 93.676973][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.697641][ T6] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 93.716876][ T6] usb 3-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 93.736666][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 93.754610][ T6] usb 3-1: SerialNumber: syz [ 93.769224][ T6] usb 3-1: config 0 descriptor?? [ 93.783616][ T6] usb-storage 3-1:0.0: USB Mass Storage device detected [ 93.805772][ T6] usb-storage 3-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 93.983752][ T6] usb 3-1: USB disconnect, device number 9 [ 94.087880][ T341] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.165940][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 94.165967][ T28] audit: type=1326 audit(3528851662.682:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.5.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4858f749 code=0x7ffc0000 [ 94.208662][ T1641] loop5: detected capacity change from 0 to 2048 [ 94.217705][ T28] audit: type=1326 audit(3528851662.712:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.5.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea4858f749 code=0x7ffc0000 [ 94.242439][ T28] audit: type=1326 audit(3528851662.712:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.5.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4858f749 code=0x7ffc0000 [ 94.276168][ T1632] loop1: detected capacity change from 0 to 40427 [ 94.291183][ T1632] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 94.298769][ T28] audit: type=1326 audit(3528851662.712:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.5.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea4858f749 code=0x7ffc0000 [ 94.306291][ T1632] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 94.324051][ T28] audit: type=1326 audit(3528851662.712:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.5.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4858f749 code=0x7ffc0000 [ 94.333563][ T1641] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 94.358779][ T1632] F2FS-fs (loop1): invalid crc value [ 94.376319][ T28] audit: type=1326 audit(3528851662.712:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.5.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea4858f749 code=0x7ffc0000 [ 94.388971][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.403101][ T28] audit: type=1326 audit(3528851662.712:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.5.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4858f749 code=0x7ffc0000 [ 94.430831][ T1641] netlink: 4 bytes leftover after parsing attributes in process `syz.5.326'. [ 94.432471][ T28] audit: type=1326 audit(3528851662.712:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.5.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea4858f749 code=0x7ffc0000 [ 94.445424][ T1632] F2FS-fs (loop1): Found nat_bits in checkpoint [ 94.464764][ T28] audit: type=1326 audit(3528851662.712:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.5.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4858f749 code=0x7ffc0000 [ 94.464796][ T28] audit: type=1326 audit(3528851662.712:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.5.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fea4858f749 code=0x7ffc0000 [ 94.571985][ T1632] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 94.579385][ T1632] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 94.940664][ T1665] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.333'. [ 95.061088][ T1669] loop3: detected capacity change from 0 to 128 [ 95.564060][ T1318] EXT4-fs (loop5): unmounting filesystem. [ 96.169720][ T1695] loop3: detected capacity change from 0 to 256 [ 96.190454][ T1695] exfat: Unknown parameter 'io [ 96.190454][ T1695] charset' [ 96.660943][ T1697] loop2: detected capacity change from 0 to 40427 [ 96.670793][ T1697] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 96.678904][ T1697] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 96.691320][ T1697] F2FS-fs (loop2): invalid crc value [ 96.861259][ T1697] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.940466][ T1697] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 96.947832][ T1697] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 96.990538][ T1684] mmap: syz.5.336 (1684): VmData 17453056 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 97.047498][ T1696] syz.2.340: attempt to access beyond end of device [ 97.047498][ T1696] loop2: rw=2049, sector=77824, nr_sectors = 3656 limit=40427 [ 97.064514][ T1696] syz.2.340: attempt to access beyond end of device [ 97.064514][ T1696] loop2: rw=2049, sector=81480, nr_sectors = 440 limit=40427 [ 97.080567][ T1697] syz.2.340: attempt to access beyond end of device [ 97.080567][ T1697] loop2: rw=2049, sector=49152, nr_sectors = 24 limit=40427 [ 97.119584][ T1696] syz.2.340: attempt to access beyond end of device [ 97.119584][ T1696] loop2: rw=2049, sector=49176, nr_sectors = 3960 limit=40427 [ 97.135927][ T1696] syz.2.340: attempt to access beyond end of device [ 97.135927][ T1696] loop2: rw=2049, sector=53136, nr_sectors = 112 limit=40427 [ 97.165565][ T1696] syz.2.340: attempt to access beyond end of device [ 97.165565][ T1696] loop2: rw=2049, sector=57344, nr_sectors = 6464 limit=40427 [ 97.255303][ T287] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 97.255331][ T287] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 97.288788][ T287] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 97.299371][ T287] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 97.384789][ T1720] random: crng reseeded on system resumption [ 97.416486][ T1720] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.346'. [ 97.427473][ T287] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 97.427520][ T287] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 97.600399][ T287] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 97.621977][ T1725] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.348'. [ 98.615608][ T1729] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.677014][ T572] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 98.711329][ T572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.720853][ T572] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 98.729984][ T572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.738815][ T572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.747197][ T572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.756009][ T572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.765043][ T572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.921037][ T1742] loop1: detected capacity change from 0 to 128 [ 99.998943][ T1746] netlink: 'syz.5.354': attribute type 46 has an invalid length. [ 100.007567][ T1746] netlink: 44 bytes leftover after parsing attributes in process `syz.5.354'. [ 100.056250][ T1759] loop1: detected capacity change from 0 to 128 [ 100.058590][ T1760] loop4: detected capacity change from 0 to 512 [ 100.085959][ T1760] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.096471][ T1760] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 100.202718][ T1770] device bridge0 entered promiscuous mode [ 100.210086][ T1770] bridge0: port 3(macsec1) entered blocking state [ 100.216778][ T1770] bridge0: port 3(macsec1) entered disabled state [ 100.228326][ T1770] device bridge0 left promiscuous mode [ 100.241713][ T1769] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.361'. [ 100.371767][ T1759] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.454945][ T1759] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.625157][ T285] EXT4-fs (loop1): unmounting filesystem. [ 100.806871][ T1778] random: crng reseeded on system resumption [ 100.852582][ T1778] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.363'. [ 101.019998][ T1780] fuse: Unknown parameter 'grogJ600000000000000000000' [ 102.156364][ T28] kauditd_printk_skb: 104 callbacks suppressed [ 102.156381][ T28] audit: type=1400 audit(3529375958.671:677): avc: denied { bind } for pid=1753 comm="syz.2.357" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.204392][ T28] audit: type=1400 audit(3529375958.701:678): avc: denied { name_bind } for pid=1753 comm="syz.2.357" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 102.226365][ T28] audit: type=1400 audit(3529375958.701:679): avc: denied { node_bind } for pid=1753 comm="syz.2.357" saddr=10.1.1.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 103.440419][ T1790] loop3: detected capacity change from 0 to 256 [ 103.447286][ T1790] /dev/loop3: Can't open blockdev [ 103.454209][ T1793] loop1: detected capacity change from 0 to 128 [ 103.501307][ T28] audit: type=1400 audit(3529375959.960:680): avc: denied { mounton } for pid=1783 comm="syz.3.366" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 104.111459][ T1801] loop4: detected capacity change from 0 to 512 [ 104.161331][ T1801] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 104.262215][ T1801] EXT4-fs (loop4): invalid journal inode [ 104.300110][ T1801] EXT4-fs (loop4): can't get journal size [ 104.314866][ T28] audit: type=1400 audit(3529375960.830:681): avc: denied { ioctl } for pid=1812 comm="syz.2.374" path="socket:[21246]" dev="sockfs" ino=21246 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.399452][ T1801] EXT4-fs (loop4): 1 truncate cleaned up [ 104.413968][ T1801] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 104.424627][ T28] audit: type=1400 audit(3529375960.930:682): avc: denied { create } for pid=1819 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 104.487472][ T286] EXT4-fs (loop4): unmounting filesystem. [ 104.506786][ T28] audit: type=1400 audit(3529375960.940:683): avc: denied { create } for pid=1819 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 104.527626][ T1828] netlink: 25 bytes leftover after parsing attributes in process `syz.5.365'. [ 104.623313][ T28] audit: type=1400 audit(3529375961.080:684): avc: denied { write } for pid=1814 comm="syz.1.375" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 104.646600][ T1828] device gretap0 entered promiscuous mode [ 104.676161][ T1835] loop1: detected capacity change from 0 to 2048 [ 104.690654][ T1828] random: crng reseeded on system resumption [ 104.821297][ T28] audit: type=1400 audit(3529375961.080:685): avc: denied { mount } for pid=1814 comm="syz.1.375" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 104.829859][ T1835] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 105.125603][ T1843] fuse: Bad value for 'fd' [ 105.897077][ T1844] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.378'. [ 106.236135][ T28] audit: type=1400 audit(3529375962.750:686): avc: denied { link } for pid=1834 comm="syz.1.380" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.259161][ T1835] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 106.339883][ T1850] loop2: detected capacity change from 0 to 256 [ 106.549746][ T1852] loop4: detected capacity change from 0 to 128 [ 106.589535][ T285] EXT4-fs (loop1): unmounting filesystem. [ 106.706226][ T1852] FAT-fs (loop4): Unrecognized mount option "0x0000000000000000" or missing value [ 107.100190][ T1856] loop1: detected capacity change from 0 to 1024 [ 107.159354][ T1856] EXT4-fs: Ignoring removed i_version option [ 107.166323][ T28] audit: type=1400 audit(3529375963.680:687): avc: denied { create } for pid=1848 comm="syz.4.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 107.212745][ T1856] EXT4-fs (loop1): Test dummy encryption mode enabled [ 107.250302][ T1856] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 107.263098][ T28] audit: type=1400 audit(3529375963.700:688): avc: denied { bind } for pid=1848 comm="syz.4.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 107.501702][ T1868] loop2: detected capacity change from 0 to 128 [ 107.676158][ T1869] netlink: 124 bytes leftover after parsing attributes in process `syz.1.384'. [ 108.872325][ T341] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 109.088777][ T1899] 9p filesystem being mounted at /21/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 109.200202][ T1910] loop4: detected capacity change from 0 to 256 [ 109.208959][ T28] audit: type=1326 audit(3529375965.720:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1907 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bd38f749 code=0x7ffc0000 [ 109.233654][ T1910] exFAT-fs (loop4): failed to read sector(0x278) [ 109.253595][ T28] audit: type=1326 audit(3529375965.720:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1907 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bd38f749 code=0x7ffc0000 [ 109.256442][ T1910] exFAT-fs (loop4): failed to load upcase table [ 109.287823][ T1910] exFAT-fs (loop4): failed to recognize exfat type [ 109.305929][ T28] audit: type=1326 audit(3529375965.750:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1907 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f06bd38f749 code=0x7ffc0000 [ 109.319205][ T1908] loop2: detected capacity change from 0 to 8192 [ 109.332136][ T28] audit: type=1326 audit(3529375965.750:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1907 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f06bd38f783 code=0x7ffc0000 [ 109.363358][ T1910] incfs: Backing dir is not set, filesystem can't be mounted. [ 109.371058][ T1910] incfs: mount failed -2 [ 109.379577][ T28] audit: type=1326 audit(3529375965.790:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1907 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f06bd38e1ff code=0x7ffc0000 [ 109.405538][ T28] audit: type=1326 audit(3529375965.820:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1907 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f06bd38f7d7 code=0x7ffc0000 [ 109.429863][ T28] audit: type=1326 audit(3529375965.820:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1907 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06bd38df90 code=0x7ffc0000 [ 109.433060][ T1908] loop2: p1 p2 p3 p4 [ 109.454489][ T28] audit: type=1326 audit(3529375965.820:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1907 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06bd38f34b code=0x7ffc0000 [ 109.464186][ T1908] loop2: p1 start 51379968 is beyond EOD, truncated [ 109.504601][ T1908] loop2: p2 start 4293394690 is beyond EOD, truncated [ 109.512995][ T1908] loop2: p3 size 100663552 extends beyond EOD, truncated [ 109.543022][ T1908] loop2: p4 size 50331648 extends beyond EOD, truncated [ 109.699939][ T341] udevd[341]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 109.713614][ T335] udevd[335]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 109.793454][ T1922] loop2: detected capacity change from 0 to 40427 [ 109.804407][ T1922] F2FS-fs (loop2): fault_injection options not supported [ 109.813395][ T1922] F2FS-fs (loop2): invalid crc value [ 109.821363][ T1922] F2FS-fs (loop2): Found nat_bits in checkpoint [ 109.832015][ T1845] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 109.851324][ T1922] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 109.877337][ T287] syz-executor: attempt to access beyond end of device [ 109.877337][ T287] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 110.011824][ T1845] usb 2-1: Using ep0 maxpacket: 16 [ 110.017843][ T1845] usb 2-1: unable to get BOS descriptor or descriptor too short [ 110.033082][ T1845] usb 2-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 110.044094][ T1845] usb 2-1: config 61 has 0 interfaces, different from the descriptor's value: 2 [ 110.056055][ T1845] usb 2-1: language id specifier not provided by device, defaulting to English [ 110.065765][ T1927] x_tables: duplicate underflow at hook 1 [ 110.073522][ T1845] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.083249][ T1845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.091534][ T1845] usb 2-1: Product: syz [ 110.100093][ T1927] loop2: detected capacity change from 0 to 256 [ 110.104009][ T1845] usb 2-1: Manufacturer: syz [ 110.111848][ T1845] usb 2-1: SerialNumber: syz [ 110.123316][ T1927] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 110.137532][ T1927] exfat filesystem being mounted at /76/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 110.161131][ T1927] exFAT-fs (loop2): hint_cluster is invalid (1) [ 110.169457][ T1927] syz.2.401: attempt to access beyond end of device [ 110.169457][ T1927] loop2: rw=2049, sector=34359738488, nr_sectors = 8 limit=256 [ 110.191872][ T1927] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 110.199773][ T1927] exFAT-fs (loop2): Filesystem has been set read-only [ 110.208394][ T1927] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 110.223177][ T1940] loop5: detected capacity change from 0 to 128 [ 110.262855][ T1927] exFAT-fs (loop2): error, failed to bmap (inode : ffff8881341f3670 iblock : 0, err : -5) [ 110.354536][ T341] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 110.443760][ T1927] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 110.590293][ T1927] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 111.068812][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 111.117359][ T1960] can0: slcan on ttyS3. [ 111.200265][ T1845] usb 2-1: USB disconnect, device number 7 [ 111.212215][ T1961] can0 (unregistered): slcan off ttyS3. [ 111.392229][ T1976] user requested TSC rate below hardware speed [ 111.408349][ T1976] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 111.450502][ T1982] random: crng reseeded on system resumption [ 111.476418][ T1982] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.411'. [ 111.504948][ T1966] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 111.517292][ T1966] SELinux: failed to load policy [ 111.572953][ T1983] loop5: detected capacity change from 0 to 512 [ 111.667670][ T1983] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 111.869868][ T1966] EXT4-fs error (device loop5): ext4_resize_begin:62: comm syz.5.410: resize_inode disabled but reserved GDT blocks non-zero [ 112.412852][ T2021] loop4: detected capacity change from 0 to 256 [ 112.420420][ T2021] vfat filesystem being mounted at /82/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 112.560210][ T2028] loop1: detected capacity change from 0 to 128 [ 115.184361][ T2029] Zero length message leads to an empty skb [ 115.442974][ T1990] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 115.571900][ T2033] IPv6: addrconf: prefix option has invalid lifetime [ 115.619512][ T1318] EXT4-fs (loop5): unmounting filesystem. [ 115.632051][ T1318] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5931: Corrupt filesystem [ 115.809619][ T1318] EXT4-fs error (device loop5): ext4_quota_off:7109: inode #3: comm syz-executor: mark_inode_dirty error [ 115.840695][ T1318] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5931: Corrupt filesystem [ 115.962064][ T1318] EXT4-fs error (device loop5): ext4_quota_off:7109: inode #4: comm syz-executor: mark_inode_dirty error [ 115.976943][ T2044] loop1: detected capacity change from 0 to 1024 [ 115.995610][ T2044] EXT4-fs: Ignoring removed orlov option [ 116.064337][ T2045] loop3: detected capacity change from 0 to 128 [ 116.240703][ T335] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 116.451819][ T2044] EXT4-fs: Mount option(s) incompatible with ext2 [ 117.645456][ T2049] loop2: detected capacity change from 0 to 256 [ 117.667225][ T2049] vfat filesystem being mounted at /82/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 117.848572][ T2056] loop4: detected capacity change from 0 to 512 [ 117.895747][ T2058] netlink: 60 bytes leftover after parsing attributes in process `syz.2.428'. [ 117.899687][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 117.899703][ T28] audit: type=1400 audit(3529375974.409:738): avc: denied { getopt } for pid=2053 comm="syz.2.428" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.931172][ T2056] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 117.940845][ T28] audit: type=1400 audit(3529375974.409:739): avc: denied { write } for pid=2053 comm="syz.2.428" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 117.965542][ T2056] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.008854][ T286] EXT4-fs (loop4): unmounting filesystem. [ 118.042856][ T2050] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 118.106320][ T2075] random: crng reseeded on system resumption [ 118.130120][ T2075] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.429'. [ 120.773368][ T2087] bridge0: port 3(vlan2) entered blocking state [ 120.786244][ T2091] loop1: detected capacity change from 0 to 256 [ 120.797761][ T2087] bridge0: port 3(vlan2) entered disabled state [ 120.815609][ T2091] FAT-fs (loop1): "posix" option is obsolete, not supported now [ 120.934862][ T2082] loop2: detected capacity change from 0 to 128 [ 120.945579][ T2106] 9p filesystem being mounted at /87/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 120.971425][ T28] audit: type=1400 audit(3529375982.478:740): avc: denied { getopt } for pid=2107 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 121.017264][ T2112] loop1: detected capacity change from 0 to 256 [ 121.024380][ T2112] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.035616][ T2112] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 121.078791][ T2112] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x44ede5da, utbl_chksum : 0xe619d30d) [ 121.092463][ T2112] exfat filesystem being mounted at /90/bus supports timestamps until 2107-12-31 (0x10391447f) [ 122.227541][ T2050] usb 2-1: device not accepting address 8, error -71 [ 122.242921][ T28] audit: type=1400 audit(3529375983.748:741): avc: denied { ioctl } for pid=2103 comm="syz.5.438" path="socket:[21923]" dev="sockfs" ino=21923 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.355371][ T28] audit: type=1400 audit(3529375983.848:742): avc: denied { getopt } for pid=2122 comm="syz.3.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.406667][ T28] audit: type=1326 audit(3529375983.848:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2122 comm="syz.3.443" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc6ee78f749 code=0x0 [ 122.539300][ T28] audit: type=1400 audit(3529375984.048:744): avc: denied { create } for pid=2142 comm="syz.4.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.751130][ T28] audit: type=1400 audit(3529375984.158:745): avc: denied { unmount } for pid=2132 comm="syz.1.445" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 123.147278][ T19] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 123.462776][ T19] usb 6-1: Using ep0 maxpacket: 8 [ 123.469348][ T19] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.525507][ T19] usb 6-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 123.561709][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.606455][ T19] usb 6-1: config 0 descriptor?? [ 123.624157][ T19] usb 6-1: Found UVC 0.00 device (2801:0201) [ 123.631073][ T19] usb 6-1: No valid video chain found. [ 123.788639][ T28] audit: type=1400 audit(3529375985.298:746): avc: denied { map } for pid=2155 comm="syz.1.451" path="socket:[22900]" dev="sockfs" ino=22900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.907829][ T28] audit: type=1400 audit(3529375985.418:747): avc: denied { connect } for pid=2159 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.335234][ T2169] tipc: Enabling of bearer rejected, failed to enable media [ 124.484940][ T2166] loop3: detected capacity change from 0 to 1024 [ 124.593604][ T2166] /dev/loop3: Can't open blockdev [ 125.242794][ T19] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 125.361051][ T28] audit: type=1400 audit(3529375986.868:748): avc: denied { bind } for pid=2175 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 125.444056][ T19] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 125.452521][ T19] usb 4-1: config 179 has no interface number 0 [ 125.459148][ T28] audit: type=1400 audit(3529375986.958:749): avc: denied { listen } for pid=2183 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.479527][ T19] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 125.491027][ T19] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 125.522093][ T19] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 125.535152][ T19] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 125.546674][ T19] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 125.560552][ T19] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 125.560602][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.562592][ T2050] usb 6-1: USB disconnect, device number 3 [ 125.593732][ T2171] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 125.603615][ T19] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 125.609145][ T28] audit: type=1400 audit(3529375987.118:750): avc: denied { map } for pid=2187 comm="syz.2.461" path="socket:[22102]" dev="sockfs" ino=22102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 125.632859][ T19] xpad: probe of 4-1:179.65 failed with error -5 [ 125.677549][ T2193] netlink: 32 bytes leftover after parsing attributes in process `syz.4.463'. [ 125.687956][ T2192] netlink: 32 bytes leftover after parsing attributes in process `syz.4.463'. [ 125.742557][ T2198] loop2: detected capacity change from 0 to 2048 [ 125.794300][ T2198] loop2: p4 < > [ 125.813691][ T103] loop2: p4 < > [ 125.866970][ T28] audit: type=1400 audit(3529375987.378:751): avc: denied { remount } for pid=2204 comm="syz.1.466" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 125.873264][ T341] udevd[341]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 126.072963][ T28] audit: type=1400 audit(3529375987.588:752): avc: denied { lock } for pid=2196 comm="syz.4.464" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 126.234892][ T40] usb 4-1: USB disconnect, device number 4 [ 128.365035][ T2223] loop3: detected capacity change from 0 to 256 [ 128.372152][ T2223] exfat: Unknown parameter 'iochar' [ 128.469260][ T2223] netlink: 9 bytes leftover after parsing attributes in process `syz.3.468'. [ 128.479798][ T2223] device 01XD entered promiscuous mode [ 128.509594][ T341] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 130.124581][ T2249] device ip6gretap0 entered promiscuous mode [ 130.130724][ T2249] device macsec1 entered promiscuous mode [ 130.138117][ T2249] device ip6gretap0 left promiscuous mode [ 130.226025][ T2252] x_tables: duplicate underflow at hook 1 [ 130.235403][ T2252] loop2: detected capacity change from 0 to 256 [ 130.254253][ T2252] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 130.267600][ T2252] exfat filesystem being mounted at /94/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 130.295942][ T2252] exFAT-fs (loop2): hint_cluster is invalid (1) [ 130.307222][ T2252] syz.2.475: attempt to access beyond end of device [ 130.307222][ T2252] loop2: rw=2049, sector=34359738488, nr_sectors = 8 limit=256 [ 130.521345][ T2263] netlink: 76 bytes leftover after parsing attributes in process `syz.3.480'. [ 130.530779][ T2261] loop4: detected capacity change from 0 to 40427 [ 130.538376][ T2261] F2FS-fs (loop4): invalid crc value [ 130.588734][ T2261] F2FS-fs (loop4): Found nat_bits in checkpoint [ 130.611575][ T2261] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 130.624095][ T28] audit: type=1400 audit(3529375992.138:753): avc: denied { name_bind } for pid=2260 comm="syz.4.479" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 131.140982][ T28] audit: type=1400 audit(3529375992.648:754): avc: denied { audit_read } for pid=2262 comm="syz.3.480" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 131.173670][ T40] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 131.542851][ T40] usb 6-1: Using ep0 maxpacket: 8 [ 131.550508][ T40] usb 6-1: config 0 has no interfaces? [ 131.558890][ T40] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 132.114830][ T40] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.132919][ T28] audit: type=1400 audit(3529375993.618:755): avc: denied { read } for pid=2287 comm="syz.3.485" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 132.293673][ T286] syz-executor: attempt to access beyond end of device [ 132.293673][ T286] loop4: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 132.314819][ T40] usb 6-1: Product: syz [ 132.342147][ T40] usb 6-1: Manufacturer: syz [ 132.349987][ T28] audit: type=1400 audit(3529375993.618:756): avc: denied { open } for pid=2287 comm="syz.3.485" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 132.377159][ T40] usb 6-1: SerialNumber: syz [ 132.390241][ T40] usb 6-1: config 0 descriptor?? [ 132.398453][ T286] syz-executor: attempt to access beyond end of device [ 132.398453][ T286] loop4: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 132.423916][ T2293] netlink: 'syz.2.487': attribute type 4 has an invalid length. [ 132.424019][ T286] F2FS-fs (loop4): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 132.432113][ T286] F2FS-fs (loop4): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 132.440646][ T2293] netlink: 17 bytes leftover after parsing attributes in process `syz.2.487'. [ 132.522903][ T2292] netlink: 'syz.2.487': attribute type 4 has an invalid length. [ 132.534262][ T2292] netlink: 17 bytes leftover after parsing attributes in process `syz.2.487'. [ 132.562114][ T2295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.488'. [ 132.578615][ T2295] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.611894][ T2295] device bridge_slave_1 left promiscuous mode [ 132.619451][ T28] audit: type=1400 audit(3529375994.138:757): avc: denied { connect } for pid=2297 comm="syz.4.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.628540][ T2295] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.656527][ T28] audit: type=1400 audit(3529375994.138:758): avc: denied { write } for pid=2297 comm="syz.4.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.691169][ T2303] loop2: detected capacity change from 0 to 256 [ 132.700982][ T2303] FAT-fs (loop2): Unrecognized mount option "q7id=U0x000000000000ee01" or missing value [ 132.803206][ T2305] serio: Serial port ptm0 [ 132.815166][ T28] audit: type=1400 audit(3529375994.328:759): avc: denied { bind } for pid=2306 comm="syz.1.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.820696][ T2307] overlayfs: failed to clone lowerpath [ 132.835022][ T2308] overlayfs: failed to clone lowerpath [ 132.867045][ T2313] hub 9-0:1.0: USB hub found [ 132.871880][ T2313] hub 9-0:1.0: 1 port detected [ 132.894299][ T2315] loop3: detected capacity change from 0 to 2048 [ 132.906222][ T2315] /dev/loop3: Can't open blockdev [ 132.943351][ T2315] loop3: detected capacity change from 0 to 512 [ 132.963117][ T2315] EXT4-fs: Invalid want_extra_isize 2 [ 132.970865][ T28] audit: type=1400 audit(3529375994.478:760): avc: denied { map } for pid=2302 comm="syz.2.491" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.237668][ T2323] loop3: detected capacity change from 0 to 128 [ 134.080250][ T24] usb 6-1: USB disconnect, device number 4 [ 134.427608][ T341] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.456776][ T2336] loop5: detected capacity change from 0 to 256 [ 134.484606][ T2336] FAT-fs (loop5): Unrecognized mount option "umask=00000 00000000000136030" or missing value [ 134.528982][ T2336] loop5: detected capacity change from 0 to 256 [ 134.566623][ T2336] FAT-fs (loop5): Directory bread(block 64) failed [ 134.582861][ T2336] FAT-fs (loop5): Directory bread(block 65) failed [ 134.600550][ T2336] FAT-fs (loop5): Directory bread(block 66) failed [ 134.635773][ T2336] FAT-fs (loop5): Directory bread(block 67) failed [ 134.667274][ T2343] 9pnet_fd: Insufficient options for proto=fd [ 134.684612][ T2336] FAT-fs (loop5): Directory bread(block 68) failed [ 134.699540][ T2336] FAT-fs (loop5): Directory bread(block 69) failed [ 134.706597][ T2336] FAT-fs (loop5): Directory bread(block 70) failed [ 134.713790][ T2336] FAT-fs (loop5): Directory bread(block 71) failed [ 134.725447][ T2336] FAT-fs (loop5): Directory bread(block 72) failed [ 134.732019][ T2336] FAT-fs (loop5): Directory bread(block 73) failed [ 134.746852][ T2349] loop2: detected capacity change from 0 to 512 [ 134.761005][ T2336] vfat filesystem being mounted at /38/bus supports timestamps until 2107-12-31 (0x10391447e) [ 134.769911][ T28] audit: type=1400 audit(3529375996.278:761): avc: denied { create } for pid=2353 comm="syz.3.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 134.832876][ T28] audit: type=1400 audit(3529375996.328:762): avc: denied { setattr } for pid=2338 comm="syz.1.501" name="/" dev="configfs" ino=8271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.862361][ T2349] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 134.887146][ T2349] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.894564][ T2356] loop4: detected capacity change from 0 to 16 [ 134.920343][ T2356] erofs: (device loop4): mounted with root inode @ nid 36. [ 134.963358][ T2361] x_tables: duplicate underflow at hook 1 [ 134.969987][ T2356] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 134.972836][ T2361] loop3: detected capacity change from 0 to 256 [ 134.982956][ T2356] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 134.997955][ T2356] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 135.008734][ T2356] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 135.018699][ T2356] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 135.030053][ T2356] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 135.051671][ T2361] /dev/loop3: Can't open blockdev [ 135.064630][ T2349] tipc: Started in network mode [ 135.082863][ T2349] tipc: Node identity 0000000005, cluster identity 4711 [ 135.109216][ T2349] tipc: Enabling of bearer rejected, failed to enable media [ 135.169854][ T2349] netlink: 16 bytes leftover after parsing attributes in process `syz.2.505'. [ 135.335898][ T2378] loop4: detected capacity change from 0 to 128 [ 135.871305][ T287] EXT4-fs (loop2): unmounting filesystem. [ 136.446286][ T2383] FAULT_INJECTION: forcing a failure. [ 136.446286][ T2383] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 136.498215][ T2383] CPU: 0 PID: 2383 Comm: syz.5.516 Not tainted syzkaller #0 [ 136.505715][ T2383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 136.516241][ T2383] Call Trace: [ 136.519523][ T2383] [ 136.522539][ T2383] __dump_stack+0x21/0x24 [ 136.526886][ T2383] dump_stack_lvl+0xee/0x150 [ 136.531536][ T2383] ? __cfi_dump_stack_lvl+0x8/0x8 [ 136.536587][ T2383] ? _parse_integer+0x2a/0x40 [ 136.541456][ T2383] dump_stack+0x15/0x24 [ 136.545649][ T2383] should_fail_ex+0x3d4/0x520 [ 136.550433][ T2383] should_fail+0xb/0x10 [ 136.554713][ T2383] should_fail_usercopy+0x1a/0x20 [ 136.560104][ T2383] _copy_from_user+0x1e/0xc0 [ 136.564958][ T2383] ___sys_sendmsg+0x155/0x290 [ 136.569761][ T2383] ? __sys_sendmsg+0x270/0x270 [ 136.574704][ T2383] ? __kasan_check_write+0x14/0x20 [ 136.580004][ T2383] ? proc_fail_nth_write+0x17a/0x1f0 [ 136.585636][ T2383] ? vfs_write+0x9d6/0xca0 [ 136.590150][ T2383] ? __fdget+0x19c/0x220 [ 136.594400][ T2383] __x64_sys_sendmsg+0x1f0/0x2c0 [ 136.599426][ T2383] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 136.605014][ T2383] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 136.611265][ T2383] x64_sys_call+0x171/0x9a0 [ 136.615779][ T2383] do_syscall_64+0x4c/0xa0 [ 136.620281][ T2383] ? clear_bhb_loop+0x30/0x80 [ 136.625138][ T2383] ? clear_bhb_loop+0x30/0x80 [ 136.629994][ T2383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.635888][ T2383] RIP: 0033:0x7fea4858f749 [ 136.640303][ T2383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.660109][ T2383] RSP: 002b:00007fea493a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.668721][ T2383] RAX: ffffffffffffffda RBX: 00007fea487e5fa0 RCX: 00007fea4858f749 [ 136.676808][ T2383] RDX: 0000000000040814 RSI: 0000200000001200 RDI: 0000000000000003 [ 136.685065][ T2383] RBP: 00007fea493a7090 R08: 0000000000000000 R09: 0000000000000000 [ 136.693053][ T2383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.701113][ T2383] R13: 00007fea487e6038 R14: 00007fea487e5fa0 R15: 00007ffc37d784c8 [ 136.709351][ T2383] [ 136.871338][ T2399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.520'. [ 136.903934][ T2399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.520'. [ 136.925400][ T2399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.520'. [ 136.934601][ T2399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.520'. [ 137.034246][ T2406] loop4: detected capacity change from 0 to 4096 [ 137.047816][ T2406] EXT4-fs (loop4): Test dummy encryption mode enabled [ 137.062048][ T2410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.525'. [ 137.108037][ T2406] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 137.144486][ T2406] random: crng reseeded on system resumption [ 137.169518][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 137.169533][ T28] audit: type=1400 audit(3529375998.678:767): avc: denied { ioctl } for pid=2405 comm="syz.4.523" path="/dev/snapshot" dev="devtmpfs" ino=91 ioctlcmd=0x330f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 137.202976][ T396] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 137.223767][ T286] EXT4-fs (loop4): unmounting filesystem. [ 137.228924][ T2422] device pim6reg1 entered promiscuous mode [ 137.384382][ T396] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.405786][ T2425] device pim6reg1 entered promiscuous mode [ 137.409305][ T396] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 137.422588][ T396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.437168][ T396] usb 3-1: config 0 descriptor?? [ 137.508776][ T2434] fuse: Unknown parameter '|' [ 137.524338][ T2434] netlink: 44 bytes leftover after parsing attributes in process `syz.5.532'. [ 137.767646][ T396] usbhid 3-1:0.0: can't add hid device: -71 [ 138.689974][ T396] usbhid: probe of 3-1:0.0 failed with error -71 [ 138.840086][ T396] usb 3-1: USB disconnect, device number 10 [ 138.874301][ T2449] device veth1_macvtap left promiscuous mode [ 138.929348][ T28] audit: type=1400 audit(3529376000.438:768): avc: denied { setopt } for pid=2453 comm="syz.4.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.933165][ T2449] device macsec0 entered promiscuous mode [ 139.038141][ T2464] netlink: 'syz.1.542': attribute type 2 has an invalid length. [ 139.140341][ T2466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.543'. [ 139.161805][ T2468] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 139.859422][ T2472] loop2: detected capacity change from 0 to 128 [ 140.122631][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 140.780768][ T28] audit: type=1400 audit(3529376002.278:769): avc: denied { bind } for pid=2469 comm="syz.1.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 140.803769][ T28] audit: type=1400 audit(3529376002.278:770): avc: denied { name_bind } for pid=2469 comm="syz.1.544" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 140.828754][ T28] audit: type=1400 audit(3529376002.278:771): avc: denied { node_bind } for pid=2469 comm="syz.1.544" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 140.877035][ T2478] netlink: 'syz.4.545': attribute type 27 has an invalid length. [ 140.891980][ T2478] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.899235][ T2478] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.906947][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 140.933557][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 140.949511][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 140.967468][ T24] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.978947][ T2484] tmpfs: Unknown parameter 'nnodes' [ 140.990655][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 141.002038][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.010336][ T2478] device veth0_vlan left promiscuous mode [ 141.011885][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.017567][ T2478] device veth0_vlan entered promiscuous mode [ 141.025484][ T24] usb 6-1: Product: syz [ 141.032511][ T2478] device veth1_macvtap left promiscuous mode [ 141.035862][ T24] usb 6-1: Manufacturer: syz [ 141.043419][ T2478] device veth1_macvtap entered promiscuous mode [ 141.054503][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.062159][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.070500][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.079069][ T707] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.082852][ T24] usb 6-1: SerialNumber: syz [ 141.086250][ T707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.106034][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.115344][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.124955][ T707] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.132036][ T707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.140386][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.149053][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 141.157610][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.166226][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 141.185968][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.215280][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.227656][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.241718][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.250980][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.260063][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.268878][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.278087][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.287215][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.296573][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.305413][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.314056][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.322449][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.331115][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.340573][ T24] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 141.342406][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.347775][ T24] usb 6-1: unit 8 not found! [ 141.356780][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.364392][ T24] usb 6-1: USB disconnect, device number 5 [ 141.374974][ T40] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 141.384428][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.402804][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.411403][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.422127][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.431945][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.455112][ T2507] loop4: detected capacity change from 0 to 128 [ 141.503775][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.663145][ T40] usb 3-1: Using ep0 maxpacket: 32 [ 141.773973][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 141.786101][ T40] usb 3-1: config 2 has an invalid interface number: 13 but max is 0 [ 141.935143][ T40] usb 3-1: config 2 has no interface number 0 [ 142.054151][ T40] usb 3-1: config 2 interface 13 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.466308][ T40] usb 3-1: config 2 interface 13 has no altsetting 0 [ 142.474777][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 142.484171][ T40] usb 3-1: New USB device found, idVendor=0499, idProduct=105a, bcdDevice=52.92 [ 142.542307][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.555535][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.565826][ T28] audit: type=1400 audit(3529376004.078:772): avc: denied { bind } for pid=2522 comm="syz.4.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.592619][ T28] audit: type=1400 audit(3529376004.098:773): avc: denied { write } for pid=2522 comm="syz.4.560" path="socket:[23866]" dev="sockfs" ino=23866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.596632][ T40] usb 3-1: Product: syz [ 142.620572][ T28] audit: type=1400 audit(3529376004.098:774): avc: denied { read write } for pid=2522 comm="syz.4.560" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 142.622978][ T40] usb 3-1: Manufacturer: syz [ 142.646962][ T28] audit: type=1400 audit(3529376004.098:775): avc: denied { open } for pid=2522 comm="syz.4.560" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 142.650795][ T40] usb 3-1: SerialNumber: syz [ 142.680404][ T2527] netlink: 96 bytes leftover after parsing attributes in process `syz.4.560'. [ 142.754046][ T396] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 142.765283][ T2529] overlayfs: failed to clone upperpath [ 142.804465][ T396] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 142.812965][ T396] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 142.900872][ T2543] loop4: detected capacity change from 0 to 128 [ 142.919819][ T40] usb 3-1: USB disconnect, device number 11 [ 142.945307][ T2543] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 142.954758][ T2543] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 143.000071][ T28] audit: type=1400 audit(3529376004.508:776): avc: denied { ioctl } for pid=2536 comm="syz.4.566" path="/114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop4" ino=12 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 143.036572][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 143.108953][ T396] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 143.292744][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 143.299287][ T24] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 143.307537][ T24] usb 6-1: config 0 has no interface number 0 [ 143.314134][ T24] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.325497][ T24] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 33573, setting to 1024 [ 143.337418][ T24] usb 6-1: config 0 interface 2 has no altsetting 0 [ 143.345827][ T24] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 143.355357][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.363658][ T24] usb 6-1: Product: syz [ 143.368067][ T24] usb 6-1: Manufacturer: syz [ 143.372775][ T24] usb 6-1: SerialNumber: syz [ 143.378896][ T24] usb 6-1: config 0 descriptor?? [ 143.405746][ T2554] loop3: detected capacity change from 0 to 512 [ 143.420677][ T2554] EXT4-fs: Ignoring removed nobh option [ 143.427222][ T2554] /dev/loop3: Can't open blockdev [ 143.586258][ T2518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.600524][ T2518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.621609][ T24] usb 6-1: USB disconnect, device number 6 [ 143.652256][ T2559] loop2: detected capacity change from 0 to 1024 [ 143.680240][ T2563] 9pnet_fd: Insufficient options for proto=fd [ 143.684408][ T2559] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 143.697914][ T286] EXT4-fs (loop4): unmounting filesystem. [ 143.764657][ T2574] FAULT_INJECTION: forcing a failure. [ 143.764657][ T2574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.780722][ T2574] CPU: 0 PID: 2574 Comm: syz.3.578 Not tainted syzkaller #0 [ 143.788334][ T2574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 143.798674][ T2574] Call Trace: [ 143.801976][ T2574] [ 143.805118][ T2574] __dump_stack+0x21/0x24 [ 143.809478][ T2574] dump_stack_lvl+0xee/0x150 [ 143.814268][ T2574] ? __cfi_dump_stack_lvl+0x8/0x8 [ 143.819324][ T2574] dump_stack+0x15/0x24 [ 143.823609][ T2574] should_fail_ex+0x3d4/0x520 [ 143.828343][ T2574] should_fail+0xb/0x10 [ 143.832543][ T2574] should_fail_usercopy+0x1a/0x20 [ 143.837686][ T2574] _copy_to_user+0x1e/0x90 [ 143.842104][ T2574] simple_read_from_buffer+0xe9/0x160 [ 143.847620][ T2574] proc_fail_nth_read+0x19a/0x210 [ 143.852754][ T2574] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 143.858553][ T2574] ? security_file_permission+0x94/0xb0 [ 143.864135][ T2574] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 143.869797][ T2574] vfs_read+0x26e/0x8c0 [ 143.873989][ T2574] ? __cfi_vfs_read+0x10/0x10 [ 143.878703][ T2574] ? __kasan_check_write+0x14/0x20 [ 143.884004][ T2574] ? mutex_lock+0x8d/0x1a0 [ 143.888457][ T2574] ? __cfi_mutex_lock+0x10/0x10 [ 143.893429][ T2574] ? __fdget_pos+0x2cd/0x380 [ 143.898133][ T2574] ? ksys_read+0x71/0x240 [ 143.902688][ T2574] ksys_read+0x140/0x240 [ 143.906969][ T2574] ? fput+0x154/0x1a0 [ 143.911264][ T2574] ? __cfi_ksys_read+0x10/0x10 [ 143.916223][ T2574] ? debug_smp_processor_id+0x17/0x20 [ 143.921796][ T2574] __x64_sys_read+0x7b/0x90 [ 143.926315][ T2574] x64_sys_call+0x2f/0x9a0 [ 143.930918][ T2574] do_syscall_64+0x4c/0xa0 [ 143.935520][ T2574] ? clear_bhb_loop+0x30/0x80 [ 143.940288][ T2574] ? clear_bhb_loop+0x30/0x80 [ 143.945068][ T2574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.950961][ T2574] RIP: 0033:0x7fc6ee78e15c [ 143.955376][ T2574] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 143.975156][ T2574] RSP: 002b:00007fc6ef6bc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.983669][ T2574] RAX: ffffffffffffffda RBX: 00007fc6ee9e5fa0 RCX: 00007fc6ee78e15c [ 143.992008][ T2574] RDX: 000000000000000f RSI: 00007fc6ef6bc0a0 RDI: 0000000000000003 [ 144.000676][ T2574] RBP: 00007fc6ef6bc090 R08: 0000000000000000 R09: 0000000000000000 [ 144.009193][ T2574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.017161][ T2574] R13: 00007fc6ee9e6038 R14: 00007fc6ee9e5fa0 R15: 00007fff74813218 [ 144.025140][ T2574] [ 144.091142][ T2582] overlayfs: failed to clone lowerpath [ 144.096795][ T28] audit: type=1400 audit(3529376005.598:777): avc: denied { mount } for pid=2580 comm="syz.1.580" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 144.121696][ T28] audit: type=1326 audit(3529376005.638:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2580 comm="syz.1.580" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f829d58f749 code=0x0 [ 144.240829][ T2592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 144.266701][ T2592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.579'. [ 144.333137][ T28] audit: type=1400 audit(3529376005.748:779): avc: denied { nlmsg_read } for pid=2575 comm="syz.4.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 144.522454][ T2605] loop5: detected capacity change from 0 to 128 [ 144.548639][ T2605] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 144.598961][ T2605] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.073824][ T2634] loop4: detected capacity change from 0 to 1024 [ 145.300686][ T341] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 145.311621][ T2633] loop4: detected capacity change from 0 to 128 [ 145.319025][ T28] audit: type=1400 audit(3529376006.828:780): avc: denied { associate } for pid=2626 comm="syz.4.591" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 145.351413][ T1318] EXT4-fs (loop5): unmounting filesystem. [ 145.490901][ T2644] loop5: detected capacity change from 0 to 512 [ 145.510234][ T2644] EXT4-fs (loop5): Test dummy encryption mode enabled [ 145.528989][ T2644] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 145.548823][ T2644] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 145.562884][ T2644] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 145.573328][ T2650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 145.600919][ T28] audit: type=1326 audit(3529376007.108:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2643 comm="syz.5.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4858f749 code=0x7ffc0000 [ 145.740300][ T1318] EXT4-fs (loop5): unmounting filesystem. [ 145.756291][ T2655] loop4: detected capacity change from 0 to 1024 [ 145.802850][ T352] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 145.852635][ T2656] loop2: detected capacity change from 0 to 128 [ 145.892137][ T2655] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 146.191295][ T286] EXT4-fs (loop4): unmounting filesystem. [ 146.225292][ T352] usb 4-1: device descriptor read/64, error -71 [ 146.266950][ T2672] loop2: detected capacity change from 0 to 128 [ 146.283776][ T2674] netlink: 'syz.1.604': attribute type 12 has an invalid length. [ 146.314617][ T2678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.605'. [ 146.327673][ T2672] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 146.339096][ T2672] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 146.426331][ T2687] random: crng reseeded on system resumption [ 146.451896][ T2687] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.602'. [ 146.479619][ T287] EXT4-fs (loop2): unmounting filesystem. [ 146.532917][ T352] usb 4-1: device descriptor read/64, error -71 [ 146.642969][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 146.787029][ T2694] loop5: detected capacity change from 0 to 1024 [ 146.801546][ T2694] EXT4-fs: Ignoring removed i_version option [ 146.808593][ T2694] ext4: Unknown parameter 'audit' [ 146.852832][ T352] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 146.892544][ T2696] x_tables: duplicate underflow at hook 1 [ 146.951333][ T2699] tmpfs: Unknown parameter 'nr~inodes' [ 146.960712][ T2699] overlayfs: unrecognized mount option "verity=on" or missing value [ 147.002855][ T352] usb 4-1: device descriptor read/64, error -71 [ 147.214651][ T2715] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 147.268553][ T2718] loop4: detected capacity change from 0 to 128 [ 147.273157][ T352] usb 4-1: device descriptor read/64, error -71 [ 147.292853][ T2718] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 147.304302][ T2718] ext4 filesystem being mounted at /124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.346064][ T2723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2723 comm=syz.1.619 [ 147.412524][ T286] EXT4-fs (loop4): unmounting filesystem. [ 147.418694][ T352] usb usb4-port1: attempt power cycle [ 147.462198][ T2736] fuse: Bad value for 'fd' [ 147.513818][ T2736] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 147.620875][ T2738] loop4: detected capacity change from 0 to 128 [ 148.042073][ T2741] loop2: detected capacity change from 0 to 512 [ 148.255188][ T2741] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 148.376830][ T2741] EXT4-fs (loop2): orphan cleanup on readonly fs [ 148.403676][ T2741] __quota_error: 31 callbacks suppressed [ 148.403697][ T2741] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 148.506521][ T2752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.629'. [ 148.526196][ T2741] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 148.635002][ T2754] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.628'. [ 148.646287][ T2741] EXT4-fs error (device loop2): ext4_acquire_dquot:6803: comm syz.2.624: Failed to acquire dquot type 1 [ 148.684157][ T2741] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.624: bg 0: block 40: padding at end of block bitmap is not set [ 148.713410][ T2741] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 148.736821][ T2761] loop5: detected capacity change from 0 to 1024 [ 148.753988][ T2741] EXT4-fs (loop2): 1 truncate cleaned up [ 148.760735][ T2741] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 148.831235][ T2761] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 148.888703][ T2741] device syz_tun entered promiscuous mode [ 148.895853][ T2741] device vlan2 entered promiscuous mode [ 148.958091][ T2767] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #16: comm syz.2.624: corrupted xattr block 31 [ 148.986844][ T2767] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 148.991165][ T2770] loop3: detected capacity change from 0 to 128 [ 149.003566][ T2767] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #16: comm syz.2.624: corrupted xattr block 31 [ 149.016963][ T2768] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #16: comm syz.2.624: corrupted xattr block 31 [ 149.029967][ T2768] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 149.040146][ T2767] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 149.040231][ T28] audit: type=1400 audit(3529376010.556:813): avc: denied { read } for pid=2740 comm="syz.2.624" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 149.091922][ T2770] /dev/loop3: Can't open blockdev [ 149.109139][ T2767] EXT4-fs error (device loop2): ext4_get_link:104: inode #16: comm syz.2.624: bad symlink. [ 149.109361][ T2768] EXT4-fs error (device loop2): ext4_get_link:104: inode #16: comm syz.2.624: bad symlink. [ 149.245323][ T287] EXT4-fs (loop2): unmounting filesystem. [ 149.323117][ T2774] x_tables: duplicate underflow at hook 1 [ 149.361157][ T1318] EXT4-fs (loop5): unmounting filesystem. [ 149.405929][ T2793] netlink: 92 bytes leftover after parsing attributes in process `syz.4.640'. [ 149.588690][ T2808] loop2: detected capacity change from 0 to 128 [ 149.597977][ T2808] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 150.172851][ T2808] ext4 filesystem being mounted at /118/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 150.378550][ T287] EXT4-fs (loop2): unmounting filesystem. [ 150.470598][ T2823] loop5: detected capacity change from 0 to 2048 [ 150.761530][ T2827] random: crng reseeded on system resumption [ 150.785916][ T2827] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.650'. [ 150.797188][ T2827] 0XD: renamed from 01XD [ 150.807925][ T2827] device 00XD left promiscuous mode [ 150.860860][ T2823] Alternate GPT is invalid, using primary GPT. [ 150.882782][ T2823] loop5: p1 p2 p3 [ 150.964943][ T2834] fuse: Unknown parameter '0x0000000000000004' [ 151.034864][ T2838] syz.2.652[2838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.035125][ T2838] syz.2.652[2838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.115275][ T28] audit: type=1400 audit(3529376012.626:814): avc: denied { ioctl } for pid=2833 comm="syz.2.652" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 151.452292][ T435] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 151.470794][ T28] audit: type=1400 audit(3529376012.976:815): avc: denied { relabelfrom } for pid=2845 comm="syz.3.655" name="" dev="pipefs" ino=24917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 151.470804][ T2846] SELinux: Context system_u:object_r:iptables_conf_t:s0 is not valid (left unmapped). [ 151.504293][ T28] audit: type=1400 audit(3529376013.016:816): avc: denied { relabelto } for pid=2845 comm="syz.3.655" name="" dev="pipefs" ino=24917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:iptables_conf_t:s0" [ 151.643503][ T435] usb 6-1: config 1 has an invalid descriptor of length 254, skipping remainder of the config [ 151.654733][ T435] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.665491][ T435] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 151.675079][ T435] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 151.683805][ T435] usb 6-1: SerialNumber: syz [ 152.035911][ T2867] loop2: detected capacity change from 0 to 512 [ 152.092713][ T335] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 152.428340][ T2871] loop4: detected capacity change from 0 to 128 [ 152.440777][ T2871] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 152.449725][ T2871] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.565769][ T28] audit: type=1326 audit(3529376014.076:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2878 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829d58f749 code=0x7ffc0000 [ 152.589777][ T28] audit: type=1326 audit(3529376014.076:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2878 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829d58f749 code=0x7ffc0000 [ 152.615028][ T28] audit: type=1326 audit(3529376014.076:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2878 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f829d58f749 code=0x7ffc0000 [ 152.639248][ T28] audit: type=1326 audit(3529376014.076:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2878 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829d58f749 code=0x7ffc0000 [ 152.666423][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 152.692427][ T2755] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 152.750031][ T286] EXT4-fs (loop4): unmounting filesystem. [ 152.772761][ T2883] loop4: detected capacity change from 0 to 1024 [ 152.790265][ T2883] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 152.803434][ T2883] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.952142][ T2755] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 153.089324][ T2888] loop2: detected capacity change from 0 to 40427 [ 153.099663][ T2888] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 153.107012][ T2888] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 153.117682][ T2888] F2FS-fs (loop2): Found nat_bits in checkpoint [ 153.159636][ T2888] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 153.167052][ T2888] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 153.218633][ T287] syz-executor: attempt to access beyond end of device [ 153.218633][ T287] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 153.347277][ T2900] loop2: detected capacity change from 0 to 128 [ 153.373497][ T2900] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 153.382667][ T2900] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.425822][ T287] EXT4-fs (loop2): unmounting filesystem. [ 153.465295][ T435] usb 6-1: 0:2 : does not exist [ 153.471307][ T435] usb 6-1: unit 5: unexpected type 0x0c [ 153.496285][ T435] usb 6-1: USB disconnect, device number 7 [ 154.106430][ T2911] loop5: detected capacity change from 0 to 512 [ 154.311970][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 155.765651][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 155.850393][ T2911] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 155.859454][ T2911] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.901963][ T2917] loop3: detected capacity change from 0 to 16 [ 155.920424][ T707] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: comm kworker/u4:84: lblock 0 mapped to illegal pblock 0 (length 6) [ 155.925312][ T2917] erofs: Unknown parameter '0000000000000000000018446744073709551615' [ 155.944231][ T707] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 155.959037][ T707] EXT4-fs (loop4): This should not happen!! Data will be lost [ 155.959037][ T707] [ 155.972783][ T707] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:84: lblock 8 mapped to illegal pblock 8 (length 8) [ 155.995367][ T707] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 156.010603][ T707] EXT4-fs (loop4): This should not happen!! Data will be lost [ 156.010603][ T707] [ 156.037277][ T2921] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 156.052895][ T1318] EXT4-fs (loop5): unmounting filesystem. [ 156.206935][ T2930] loop3: detected capacity change from 0 to 2048 [ 156.215964][ T2930] /dev/loop3: Can't open blockdev [ 156.358115][ T341] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 156.486280][ T286] EXT4-fs (loop4): unmounting filesystem. [ 156.568110][ T2944] loop5: detected capacity change from 0 to 128 [ 156.598177][ T2944] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 156.607945][ T2944] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 156.652618][ T1318] EXT4-fs (loop5): unmounting filesystem. [ 156.884285][ T2956] netlink: 96 bytes leftover after parsing attributes in process `syz.3.684'. [ 156.931056][ T2961] input: syz1 as /devices/virtual/input/input6 [ 156.939222][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 156.939245][ T28] audit: type=1400 audit(3529376018.457:859): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=1181 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.991648][ T28] audit: type=1400 audit(3529376018.457:860): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1181 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.026258][ T28] audit: type=1400 audit(3529376018.457:861): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1181 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.244116][ T2969] loop2: detected capacity change from 0 to 512 [ 157.279118][ T2969] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 157.339898][ T2973] incfs: Options parsing error. -22 [ 157.341453][ T28] audit: type=1400 audit(3529376018.847:862): avc: denied { append } for pid=2968 comm="syz.2.688" name="event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 157.388110][ T2973] incfs: mount failed -22 [ 157.435012][ T2981] device ip6gre2 entered promiscuous mode [ 157.450640][ T2983] loop3: detected capacity change from 0 to 128 [ 157.472556][ T2983] /dev/loop3: Can't open blockdev [ 157.571860][ T28] audit: type=1400 audit(3529376019.087:863): avc: denied { mounton } for pid=2987 comm="syz.1.694" path="/164/file0" dev="tmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 157.759244][ T2988] fuse: Bad value for 'fd' [ 157.838307][ T2993] 9pnet_fd: Insufficient options for proto=fd [ 158.013647][ T2997] overlayfs: missing 'workdir' [ 158.047216][ T28] audit: type=1400 audit(3529376019.557:864): avc: denied { ioctl } for pid=3000 comm="syz.3.698" path="socket:[25317]" dev="sockfs" ino=25317 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.047311][ T3001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.698'. [ 158.081871][ T3001] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.089214][ T3001] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.196367][ T28] audit: type=1400 audit(3529376019.677:865): avc: denied { call } for pid=3006 comm="syz.3.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 158.216561][ T28] audit: type=1400 audit(3529376019.707:866): avc: denied { create } for pid=3009 comm="syz.5.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 158.239372][ T3013] loop5: detected capacity change from 0 to 256 [ 158.768785][ T3014] netlink: 48 bytes leftover after parsing attributes in process `syz.1.699'. [ 159.091746][ T3013] FAT-fs (loop5): bogus number of FAT sectors [ 159.113725][ T3013] FAT-fs (loop5): Can't find a valid FAT filesystem [ 159.180951][ T3024] loop2: detected capacity change from 0 to 128 [ 159.195746][ T3024] vfat filesystem being mounted at /130/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 159.356712][ T3030] loop3: detected capacity change from 0 to 8192 [ 160.518538][ T3041] FAULT_INJECTION: forcing a failure. [ 160.518538][ T3041] name failslab, interval 1, probability 0, space 0, times 0 [ 160.551356][ T3041] CPU: 0 PID: 3041 Comm: syz.2.712 Not tainted syzkaller #0 [ 160.558874][ T3041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 160.569223][ T3041] Call Trace: [ 160.572766][ T3041] [ 160.575725][ T3041] __dump_stack+0x21/0x24 [ 160.580170][ T3041] dump_stack_lvl+0xee/0x150 [ 160.584782][ T3041] ? __cfi_dump_stack_lvl+0x8/0x8 [ 160.590087][ T3041] ? ____fput+0x15/0x20 [ 160.594263][ T3041] ? exit_to_user_mode_loop+0x9b/0xb0 [ 160.599745][ T3041] ? exit_to_user_mode_prepare+0x87/0xd0 [ 160.605388][ T3041] ? syscall_exit_to_user_mode+0x1a/0x30 [ 160.611055][ T3041] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.617157][ T3041] dump_stack+0x15/0x24 [ 160.621500][ T3041] should_fail_ex+0x3d4/0x520 [ 160.626284][ T3041] __should_failslab+0xac/0xf0 [ 160.631153][ T3041] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 160.637163][ T3041] should_failslab+0x9/0x20 [ 160.641679][ T3041] __kmem_cache_alloc_node+0x3d/0x2c0 [ 160.647065][ T3041] ? __cfi_mutex_lock+0x10/0x10 [ 160.651939][ T3041] ? delete_node+0x2f4/0xa60 [ 160.656813][ T3041] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 160.662818][ T3041] __kmalloc+0xa1/0x1e0 [ 160.667103][ T3041] ? __cfi___bpf_trace_kfree+0x10/0x10 [ 160.672587][ T3041] tracepoint_probe_unregister+0x1e6/0x8b0 [ 160.678419][ T3041] bpf_probe_unregister+0x61/0x70 [ 160.683638][ T3041] bpf_raw_tp_link_release+0x63/0x90 [ 160.688946][ T3041] bpf_link_free+0x13a/0x390 [ 160.693584][ T3041] ? bpf_link_put_deferred+0x20/0x20 [ 160.699007][ T3041] ? security_file_free+0xd8/0xf0 [ 160.704067][ T3041] bpf_link_release+0x15f/0x170 [ 160.709021][ T3041] ? __cfi_bpf_link_release+0x10/0x10 [ 160.714418][ T3041] __fput+0x1fc/0x8f0 [ 160.718532][ T3041] ____fput+0x15/0x20 [ 160.722563][ T3041] task_work_run+0x1db/0x240 [ 160.727275][ T3041] ? __cfi_task_work_run+0x10/0x10 [ 160.732435][ T3041] ? __cfi___close_range+0x10/0x10 [ 160.737593][ T3041] exit_to_user_mode_loop+0x9b/0xb0 [ 160.742998][ T3041] exit_to_user_mode_prepare+0x87/0xd0 [ 160.748661][ T3041] syscall_exit_to_user_mode+0x1a/0x30 [ 160.754354][ T3041] do_syscall_64+0x58/0xa0 [ 160.758832][ T3041] ? clear_bhb_loop+0x30/0x80 [ 160.763567][ T3041] ? clear_bhb_loop+0x30/0x80 [ 160.764341][ T3039] loop4: detected capacity change from 0 to 40427 [ 160.768362][ T3041] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.781203][ T3041] RIP: 0033:0x7f06bd38f749 [ 160.785829][ T3041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.805897][ T3041] RSP: 002b:00007f06be18a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 160.814777][ T3041] RAX: 0000000000000000 RBX: 00007f06bd5e5fa0 RCX: 00007f06bd38f749 [ 160.818337][ T28] audit: type=1400 audit(3529376022.277:867): avc: denied { accept } for pid=3042 comm="syz.3.713" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 160.823045][ T3041] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 160.823064][ T3041] RBP: 00007f06be18a090 R08: 0000000000000000 R09: 0000000000000000 [ 160.823075][ T3041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.823085][ T3041] R13: 00007f06bd5e6038 R14: 00007f06bd5e5fa0 R15: 00007ffe471757a8 [ 160.860329][ T3039] F2FS-fs (loop4): invalid crc value [ 160.867559][ T3041] [ 160.886874][ T3041] CFI failure at __traceiter_kfree+0x34/0x50 (target: tp_stub_func+0x0/0x10; expected type: 0x8682d211) [ 160.887005][ T639] CFI failure at __traceiter_kfree+0x34/0x50 (target: tp_stub_func+0x0/0x10; expected type: 0x8682d211) [ 160.898120][ T3041] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 160.898139][ T3041] CPU: 1 PID: 3041 Comm: syz.2.712 Not tainted syzkaller #0 [ 160.898158][ T3041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 160.898169][ T3041] RIP: 0010:__traceiter_kfree+0x34/0x50 [ 160.898190][ T3041] Code: 8b 3d c0 54 ca 05 4d 85 ff 74 2e 48 89 d3 49 89 f6 49 8b 07 49 8b 7f 08 4c 89 f6 48 89 da 41 ba ef 2d 7d 79 44 03 50 fc 74 02 <0f> 0b ff d0 49 83 7f 18 00 4d 8d 7f 18 75 d8 31 c0 5b 41 5e 41 5f [ 160.898205][ T3041] RSP: 0018:ffffc90000c97c00 EFLAGS: 00010213 [ 160.898223][ T3041] RAX: ffffffff817144c0 RBX: ffff888132cc1380 RCX: ffff88811c788000 [ 160.898245][ T3041] RDX: ffff888132cc1380 RSI: ffffffff81812005 RDI: ffffc90000d7b000 [ 160.898259][ T3041] RBP: ffffc90000c97c18 R08: dffffc0000000000 R09: ffffed1022407e01 [ 160.898273][ T3041] R10: 000000001ebd94fb R11: ffffffff81811ff0 R12: 1ffff11026598273 [ 160.898287][ T3041] R13: dffffc0000000000 R14: ffffffff81812005 R15: ffff8881093f2440 [ 160.898301][ T3041] FS: 00007f06be18a6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 160.898318][ T3041] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.898332][ T3041] CR2: 00007f4db0620000 CR3: 0000000121741000 CR4: 00000000003506a0 [ 160.898350][ T3041] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 160.898362][ T3041] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 160.898374][ T3041] Call Trace: [ 160.898379][ T3041] [ 160.898388][ T3041] ? bpf_raw_tp_link_dealloc+0x15/0x20 [ 160.898383][ C0] CFI failure at __traceiter_kfree+0x34/0x50 (target: tp_stub_func+0x0/0x10; expected type: 0x8682d211) [ 160.898412][ T3041] kfree+0xc9/0xf0 [ 160.898437][ T3041] bpf_raw_tp_link_dealloc+0x15/0x20 [ 160.898452][ T3041] bpf_link_free+0x321/0x390 [ 160.898472][ T3041] ? bpf_link_put_deferred+0x20/0x20 [ 160.898492][ T3041] ? security_file_free+0xd8/0xf0 [ 160.898511][ T3041] bpf_link_release+0x15f/0x170 [ 160.898524][ T3041] ? __cfi_bpf_link_release+0x10/0x10 [ 160.898537][ T3041] __fput+0x1fc/0x8f0 [ 160.898556][ T3041] ____fput+0x15/0x20 [ 160.898571][ T3041] task_work_run+0x1db/0x240 [ 160.898589][ T3041] ? __cfi_task_work_run+0x10/0x10 [ 160.898606][ T3041] ? __cfi___close_range+0x10/0x10 [ 160.898620][ T3041] exit_to_user_mode_loop+0x9b/0xb0 [ 160.898636][ T3041] exit_to_user_mode_prepare+0x87/0xd0 [ 160.898651][ T3041] syscall_exit_to_user_mode+0x1a/0x30 [ 160.898673][ T3041] do_syscall_64+0x58/0xa0 [ 160.898688][ T3041] ? clear_bhb_loop+0x30/0x80 [ 160.898708][ T3041] ? clear_bhb_loop+0x30/0x80 [ 160.898727][ T3041] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.898745][ T3041] RIP: 0033:0x7f06bd38f749 [ 160.898757][ T3041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.898769][ T3041] RSP: 002b:00007f06be18a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 160.898785][ T3041] RAX: 0000000000000000 RBX: 00007f06bd5e5fa0 RCX: 00007f06bd38f749 [ 160.898796][ T3041] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 160.898805][ T3041] RBP: 00007f06be18a090 R08: 0000000000000000 R09: 0000000000000000 [ 160.898815][ T3041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.898824][ T3041] R13: 00007f06bd5e6038 R14: 00007f06bd5e5fa0 R15: 00007ffe471757a8 [ 160.898837][ T3041] [ 160.898841][ T3041] Modules linked in: [ 160.898848][ T3041] ---[ end trace 0000000000000000 ]--- [ 160.898857][ T3041] RIP: 0010:__traceiter_kfree+0x34/0x50 [ 160.898849][ C0] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 160.898878][ T3041] Code: 8b 3d c0 54 ca 05 4d 85 ff 74 2e 48 89 d3 49 89 f6 49 8b 07 49 8b 7f 08 4c 89 f6 48 89 da 41 ba ef 2d 7d 79 44 03 50 fc 74 02 <0f> 0b ff d0 49 83 7f 18 00 4d 8d 7f 18 75 d8 31 c0 5b 41 5e 41 5f [ 160.898877][ C0] CPU: 0 PID: 639 Comm: kworker/u4:31 Tainted: G D syzkaller #0 [ 160.898894][ T3041] RSP: 0018:ffffc90000c97c00 EFLAGS: 00010213 [ 160.898909][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 160.898909][ T3041] RAX: ffffffff817144c0 RBX: ffff888132cc1380 RCX: ffff88811c788000 [ 160.898924][ T3041] RDX: ffff888132cc1380 RSI: ffffffff81812005 RDI: ffffc90000d7b000 [ 160.898922][ C0] Workqueue: netns cleanup_net [ 160.898937][ T3041] RBP: ffffc90000c97c18 R08: dffffc0000000000 R09: ffffed1022407e01 [ 160.898952][ T3041] R10: 000000001ebd94fb R11: ffffffff81811ff0 R12: 1ffff11026598273 [ 160.898958][ C0] [ 160.898965][ T3041] R13: dffffc0000000000 R14: ffffffff81812005 R15: ffff8881093f2440 [ 160.898963][ C0] RIP: 0010:__traceiter_kfree+0x34/0x50 [ 160.898980][ T3041] FS: 00007f06be18a6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 160.898993][ C0] Code: 8b 3d c0 54 ca 05 4d 85 ff 74 2e 48 89 d3 49 89 f6 49 8b 07 49 8b 7f 08 4c 89 f6 48 89 da 41 ba ef 2d 7d 79 44 03 50 fc 74 02 <0f> 0b ff d0 49 83 7f 18 00 4d 8d 7f 18 75 d8 31 c0 5b 41 5e 41 5f [ 160.898997][ T3041] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.899009][ C0] RSP: 0018:ffffc90000007b40 EFLAGS: 00010213 [ 160.899012][ T3041] CR2: 00007f4db0620000 CR3: 0000000121741000 CR4: 00000000003506a0 [ 160.899023][ C0] [ 160.899026][ T3041] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 160.899027][ C0] RAX: ffffffff817144c0 RBX: 0000000000000000 RCX: ffff88811d94e540 [ 160.899038][ T3041] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 160.899043][ C0] RDX: 0000000000000000 RSI: ffffffff8234885c RDI: ffffc90000d7b000 [ 160.899052][ T3041] Kernel panic - not syncing: Fatal exception [ 160.899056][ C0] RBP: ffffc90000007b58 R08: 0000000000000004 R09: 0000000000000003 [ 160.899068][ C0] R10: 000000001ebd94fb R11: 1ffff92000000f60 R12: dffffc0000000000 [ 160.899080][ C0] R13: ffff888116d2c7a8 R14: ffffffff8234885c R15: ffff8881093f2440 [ 160.899093][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 160.899107][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.899120][ C0] CR2: 00007f4db0620000 CR3: 00000001333e7000 CR4: 00000000003506b0 [ 160.899136][ C0] Call Trace: [ 160.899141][ C0] [ 160.899147][ C0] ? security_task_free+0xac/0xd0 [ 160.899173][ C0] kfree+0xc9/0xf0 [ 160.899194][ C0] security_task_free+0xac/0xd0 [ 160.899213][ C0] __put_task_struct+0xfb/0x3c0 [ 160.899232][ C0] ? delayed_put_task_struct+0x64/0x1c0 [ 160.899254][ C0] delayed_put_task_struct+0x6c/0x1c0 [ 160.899274][ C0] ? __cfi_delayed_put_task_struct+0x10/0x10 [ 160.899295][ C0] rcu_do_batch+0x515/0xb90 [ 160.899314][ C0] ? rcu_core+0xe70/0xe70 [ 160.899327][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 160.899345][ C0] ? note_gp_changes+0x129/0x220 [ 160.899368][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 160.899387][ C0] rcu_core+0x5a5/0xe70 [ 160.899402][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 160.899417][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 160.899440][ C0] ? run_rebalance_domains+0xf7/0x1c0 [ 160.899457][ C0] rcu_core_si+0x9/0x10 [ 160.899475][ C0] handle_softirqs+0x1d7/0x600 [ 160.899498][ C0] ? irqtime_account_irq+0xc4/0x240 [ 160.899520][ C0] __irq_exit_rcu+0x52/0xf0 [ 160.899536][ C0] irq_exit_rcu+0x9/0x10 [ 160.899551][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 160.899572][ C0] [ 160.899577][ C0] [ 160.899582][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 160.899603][ C0] RIP: 0010:vprintk_emit+0x148/0x410 [ 160.899622][ C0] Code: 00 00 00 bf 01 00 00 00 e8 d5 2c f5 ff e8 50 14 00 00 89 c3 31 ff 89 c6 e8 a5 a3 19 00 85 db 4c 8b 2c 24 74 0c e8 78 9f 19 00 d3 02 00 00 eb 45 48 c7 c3 00 ae ee 86 48 c7 c7 00 ae ee 86 be [ 160.899635][ C0] RSP: 0018:ffffc90010277320 EFLAGS: 00000293 [ 160.899648][ C0] RAX: ffffffff81568ab0 RBX: 0000000000000200 RCX: ffff88811d94e540 [ 160.899659][ C0] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 160.899669][ C0] RBP: ffffc900102773c8 R08: 0000000000000004 R09: 0000000000000003 [ 160.899679][ C0] R10: fffff5200204ee54 R11: 1ffff9200204ee54 R12: dffffc0000000000 [ 160.899691][ C0] R13: 1ffff9200204ee68 R14: 00000000ffffffff R15: 0000000000000065 [ 160.899704][ C0] ? vprintk_emit+0x300/0x410 [ 160.899723][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 160.899741][ C0] ? insn_get_modrm+0x4b6/0x790 [ 160.899760][ C0] vprintk_default+0x26/0x30 [ 160.899777][ C0] vprintk+0x7a/0x80 [ 160.899796][ C0] _printk+0xcc/0x118 [ 160.899816][ C0] ? insn_get_displacement+0x406/0xa00 [ 160.899834][ C0] ? __get_immv+0x273/0x700 [ 160.899850][ C0] ? __traceiter_kfree+0x34/0x50 [ 160.899867][ C0] ? __cfi_tp_stub_func+0x10/0x10 [ 160.899885][ C0] ? __cfi__printk+0x8/0x8 [ 160.899906][ C0] ? drop_sysctl_table+0xda/0x410 [ 160.899923][ C0] ? __traceiter_kfree+0x34/0x50 [ 160.899939][ C0] report_cfi_failure+0x6b/0x80 [ 160.899954][ C0] handle_cfi_failure+0x238/0x290 [ 160.899972][ C0] ? __cfi_handle_cfi_failure+0x10/0x10 [ 160.899990][ C0] ? drop_sysctl_table+0x2de/0x410 [ 160.900007][ C0] ? __set_printk_clr_event+0x80/0x80 [ 160.900029][ C0] ? __cfi_tp_stub_func+0x10/0x10 [ 160.900048][ C0] ? bpf_ringbuf_reserve+0x68/0x70 [ 160.900069][ C0] ? __traceiter_kfree+0x34/0x50 [ 160.900086][ C0] handle_bug+0x4b/0x80 [ 160.900103][ C0] exc_invalid_op+0x1b/0x50 [ 160.900120][ C0] asm_exc_invalid_op+0x1b/0x20 [ 160.900139][ C0] RIP: 0010:__traceiter_kfree+0x34/0x50 [ 160.900157][ C0] Code: 8b 3d c0 54 ca 05 4d 85 ff 74 2e 48 89 d3 49 89 f6 49 8b 07 49 8b 7f 08 4c 89 f6 48 89 da 41 ba ef 2d 7d 79 44 03 50 fc 74 02 <0f> 0b ff d0 49 83 7f 18 00 4d 8d 7f 18 75 d8 31 c0 5b 41 5e 41 5f [ 160.900169][ C0] RSP: 0018:ffffc900102777b8 EFLAGS: 00010213 [ 160.900182][ C0] RAX: ffffffff817144c0 RBX: ffff88811dd88000 RCX: ffff88811d94e540 [ 160.900194][ C0] RDX: ffff88811dd88000 RSI: ffffffff8450ee1d RDI: ffffc90000d7b000 [ 160.900206][ C0] RBP: ffffc900102777d0 R08: dffffc0000000000 R09: ffffed103ee04f52 [ 160.900218][ C0] R10: 000000001ebd94fb R11: 1ffff1103ee04f51 R12: ffff88811c5904a8 [ 160.900230][ C0] R13: ffff888118a6e900 R14: ffffffff8450ee1d R15: ffff8881093f2440 [ 160.900241][ C0] ? addrconf_ifdown+0x15ed/0x1910 [ 160.900258][ C0] ? __cfi_tp_stub_func+0x10/0x10 [ 160.900276][ C0] ? addrconf_ifdown+0x15ed/0x1910 [ 160.900292][ C0] ? __traceiter_kfree+0x38/0x50 [ 160.900308][ C0] ? addrconf_ifdown+0x15ed/0x1910 [ 160.900322][ C0] kfree+0xc9/0xf0 [ 160.900343][ C0] addrconf_ifdown+0x15ed/0x1910 [ 160.900360][ C0] ? addrconf_cleanup+0x130/0x130 [ 160.900375][ C0] ? __kasan_check_write+0x14/0x20 [ 160.900390][ C0] ? mutex_unlock+0x89/0x220 [ 160.900409][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 160.900427][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 160.900444][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 160.900462][ C0] addrconf_notify+0x39f/0xe40 [ 160.900478][ C0] ? ip6mr_device_event+0x1e7/0x200 [ 160.900509][ C0] raw_notifier_call_chain+0xa1/0x110 [ 160.900532][ C0] unregister_netdevice_many+0xf8f/0x1820 [ 160.900569][ C0] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 160.900595][ C0] ? unregister_netdevice_queue+0x1aa/0x360 [ 160.900616][ C0] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 160.900639][ C0] sit_exit_batch_net+0x60a/0x650 [ 160.900658][ C0] ? irqentry_exit+0x37/0x40 [ 160.900680][ C0] ? __cfi_sit_exit_batch_net+0x10/0x10 [ 160.900700][ C0] ? cleanup_net+0x557/0xb00 [ 160.900720][ C0] ? __cfi_sit_exit_batch_net+0x10/0x10 [ 160.900746][ C0] cleanup_net+0x62d/0xb00 [ 160.900767][ C0] ? __cfi_cleanup_net+0x10/0x10 [ 160.900788][ C0] process_one_work+0x71f/0xc40 [ 160.900807][ C0] worker_thread+0xa29/0x11f0 [ 160.900826][ C0] kthread+0x281/0x320 [ 160.900842][ C0] ? __cfi_worker_thread+0x10/0x10 [ 160.900857][ C0] ? __cfi_kthread+0x10/0x10 [ 160.900873][ C0] ret_from_fork+0x1f/0x30 [ 160.900894][ C0] [ 160.900900][ C0] Modules linked in: [ 160.901193][ T3041] Kernel Offset: disabled [ 162.081678][ T3041] Rebooting in 86400 seconds..