last executing test programs: 51.797833192s ago: executing program 0 (id=75): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@nouid32}, {@resgid}, {@bsdgroups}, {@usrjquota}]}, 0x5, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 49.67328967s ago: executing program 0 (id=82): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000002c0)='cpuacct.stat\x00', 0x275a, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) removexattr(&(0x7f0000002100)='./file0\x00', 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r7, 0x0, 0x80000000, 0x0) 48.519562801s ago: executing program 0 (id=86): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_procfs$userns(0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000240)) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0xa40c3, 0x20) unlink(&(0x7f00000001c0)='./control/file0\x00') rmdir(&(0x7f0000000280)='./control\x00') 46.90026988s ago: executing program 0 (id=89): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8b101b, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x9901) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 45.17458856s ago: executing program 0 (id=105): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000180), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r0 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0x80d8}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) open(&(0x7f0000000100)='./file1\x00', 0x400581, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x4000000}}], 0x400000000000172, 0x0) write$UHID_INPUT(r2, &(0x7f0000000680)={0x8, {"b0290ee75da9c185ce21549f6f712885506123cb515eea4d819318566d58731c5d4d0509555e171983f05501f0527b388e661db8a77b120bfaf97127daa5694974dda8f21d8a068404d93b346bad1847df838466466f8c68d4fc89f84bba834116951d076d8757b12e27633b30b4777a2bd218b6f68d02c90b8be76571b5128e9897b45a502e160cc456a58a39b728ec3f436e4040ddaa9d95d2fdb2b86d1c9890302fdc514ea5c06f4b887b703cf8b07e77ba3243d8a4c569206d222d308bfb32da34eb008c9c54f03047c72b273d5cb7ee4352e13c238d3b55d3b37d1a7cbbd24b1707bc46e9fa3777ee5a774de17e5752c805017a397ebd5beef30f1e68b03fd6990bef639cf67cfe1c4baaec74c86f31e0d805a53540f3b36593d6a6433c4cafb0692b571c7933c87d9d6286bccbf04c3fe9357f5f48d9d57576a41be8d3537115c975ed3d1b25569e719aab9ce5579c9e6b1c945262bf1fcf1be683b2f474216f225d53a7c1c6a736fcbf30bc2b0b4166896084d4f6cfb2b87ca867c5a3f37dfc2203e7b0c00458e5c8899f8bd744e22435c77e34531f019204464bea8bd5803534c9c1f9a9274bb584f91fef8e7674712fe8bff57283d33bdce1a3b7281310fb17e88d6f0c4931602352c972f77fc13c31f0d35dc78e32ae3f3cf6ec802dfa19f2b1fdbffe01ac375d05414b7d888d0029e90067b6cdc242ae531febf8fdbbc6e7ce69a7c4eac446a29f1a813b28db388f664a6461f53cd4dc2ef66ae3df41de21816e442642c8e8f3f3b065a1064a6567c046818ed51144d08b1a4c0efb87b33adf32a130f3b0ec36a3f49c00a7ebc620c24d5be73f01c36dab9d8f4d0e6684fb14dd19208413be3e8d0e08035697edc18048a02954dffda454334d1a78114abbe8779d58e724b4a8ce24a053091135a49d15f2aab9767fbf6df3e9ffb4edd541bfcd02392d5a35feb25f92c90f59e77ca35629cda5b044003e7d600524937bdfb74071239ae60e6c90581de2fb2cc7f2a5ea567b983097d2d964580b8e341c8d5f07e0211d33bce7f665e32bc49c3a59cf5b9b55d1fe5eefcb21d9dbaeb76951788fc1d601553eb2ea4cd06970b7ed0ac0722e11e558e774d22b15b4155dc6391c039e55913d03ff036b5322d12394bf5da4fc7f7b157c650e6f6b38ed1e5222aeaa40b905c46bbc1e6d99a361c38cb5b518b15f8be1a4fc540ba4dbd641f6b5845f44d7e65c4d6d5a2065fe7fef3e89a04a1e0cd3eaa795e4d14b55b2070119189dc1d3f1d27d5f2a11ff3d66b8fb803a47bf772d5d9b59c3b6f7f3c51fdaaa91db30180058e71a6b0ad9419c5358f1d51130c158fd761c81645406eb7f7c44cf4b18f075dbad0331fba86c478a1cdc638c3740d65262b7d456fc115ff74ecad955aa5bd37df82172643b9deeb269e30b945aff22b0370332e0f0b9acf9d0041bc804c2a18682580ebbb0505020e752116d0144aa3d321f55a175e47a6bced697307f7843467c393d45229576528eb70d79ca2d87407c3ff6f0ec811ceb1545bc1ca3fd2cb37382a759edf4c5ed483c2216600e7c4772bfdc0965965f28ab5b1e5cdc9b23d2834416d646ccb70fd05dffe9c13a13ba387b64c40345405d10bff8e57060d5bcdd9a454a7251a0176ec15f992b97e435a2087a761ffac41af2dab3dc77b3271a933e4d60b79ede8b3f9df8ecc37019c3c593b7fa57e8a7204e6dcfef32b5d5173b042b8a68ab9ed840fc8c6f746dcf727f02377e15207e9246045301e41e648afa31dc74aa0622959bece0cbff64d1533d65155b64f08ac3f428b10dce885a58aeea63c5a9ff129375735b4496aa73e586c1d56fc1d4e3ccff9f9283919b2ab9a9c37773837010415d74c1eeac18a8da18559d9650b0c992dfedbeed9ae860442873a4d91cb01d5745e5a0577274fb8aa23fa381359bac2f3fc1cbe3ec6263baf95c0bad72d64e4c326bce4d6ec2f40b46566f2c8a5c2a7d49ec609e3e527716ba3ce7b8e6d568d41c6e64f565ec765122ec0ab1836070f2391d6ba053315b50f2c076141a81be51cfa7f3643b0394cb16e84af13c8edfd541c4fd3dc4a9cc66311fb31df9d6d7e6a9efb8edfc069f7cac20d576df1bb29ff1589a4e43663f4cd2aa1336bc7cd97913804c1378117cffe3bee7d3687025fc402dc710e400bcb96da86fee9c0043e3b5c93ae2cf2685d074304fb8cb947e8fd845be73350b8521e9b8bc7ddc085f00a8632bcac367ee8d717d197384e3675e0c37c96c4a7f95a1fc8ab9d9333f633376eb8219edbd9898475b539492c8aaed5b60aea51a13fa7ee2b1fa54d185bb9481502fcd28979f96d94ffd8091ed411d23c99b4dc5b1087044849b92c200aeb83456662bccc693f456b02cd43903c07e19d98b07f2919fe9d3c946f8a5484db82e5c33ccaecf78ce0fcec9dbab79a969acee04cf005fd6180f2dbe91bef39db03241adbe77d76404e295e3b6623934e8a6a2d4284ed1c27d17f26b48c77f33216051f2c6e5289ce1554d2133318196cb53c65dc4c6a02b0f3d311e9f7247fb659a381a8b81fdc3814c24a3c7d64421925084b96d97a43ec1d49fbab7636a6dbf8b64b433e0047e05232036d29e5a9aa505fb640fe828f2e8be4df1c479a678034aec03c9d01cd3d30611e61dcabe02575c28f850a147164782ab20fd94a55c1f60b6a5444f8df8813fb821bb29b452bb3314d3c0685251485950c281f0a22e9f91e4b847666e8c21c5e11bec438c938ea6f34400132c0abc67fb8a4885565a0563b930fd7cee1c4228774b7c9452778d79fa401f2e1289712a1b7b3cb2f9c6dbd57a3b7292f56a1d6e7f5949ede971e69d93e0ec11eeee1f40ca4eca8bcb0d50560b973915c423e46a21a3eea838716d3eccf246f741788ea1cb613bb4efd26573462b98c75b6c42f788235b2d521c3d299776de344d64f5a100419c9eae2bcb810972b5733720ebe2aa159ad316095f1726b3f89a1f5151b03657f34e77d4ad26510fdd216527d6a7a6215a349fa3b93012fde7c98dd5407c7600821e0ea1b821960ac77727188a77d163ec92123434641f2ada4fd5aee139fc35fdc488b4fa1e5ede972756dfc2c573c4476558013bd65a5002c7fb0f89ab7fbb4e2ba6bf0a79280c32beabc55218bb8f1d112f43b665115f4b10766dfef323cb1c0250e6f9dda8c768b7cda962c1289c0d29f416e9a571c801239a65aea20a111b4a9ca1a63d03beacb3a4e345cf6d9e87ce4c49262ae1138acab4aef6aeb01a4937f6f1a0c97199a1156f0f885d6ba70cb45e597e5377162bf89e737c6fb619e24ecb034f7fd755edb69952478b84b6a4d5d296d16d5531c08636b537dd4ef2dd1906376ab00aec98213601a69ed16a8874e44328748315d57d4d746507c64593a130043df24a9d7ee58d0f22651f3ed7c73fa0f23dda04a26cb5e8ed2a3289c656ffd2c09819530adecddbd20170ced3585f2eb9f6836ec7bf193f9e0fb7373eeede5c4c27d924211e9acf169a919c850c2efd1b327278ae79d4f248fd39b824c36d4fa46d0a55aed808f7adb714dff4d1540c1a0db1692fba081602b383aa8daf5893a7ce5db92e6fb0bb2b90bdf654a7de2b47998204d1d9be614a405ab623dd2851ade05adf8f78e6f6d76ef92cae9bae836a9a0991c7b39ee13aa3d8a759057b3a2ff88feaa92063bbe2fbc90006cbbfb2a0e260c466dba4b89311d94f4270e323eddc048f4784aa1b1f59813c9b168b737637a350e4da9ac5a372000c1f784649b66f9f1cdd30e98f6ced2a2173e5be6e2ed46829d2cb4982b023a7bcdc85f20a21fbaf9077d98ca0cb973fcc5cdc605fe9e74b12ee2a2f1f8b0959641c4a2c0d540b05618f2ce7efe74430116cdd91978d5e24c0edaef4db4b8d9b14ba93aee61eb23c3af0d5925e6a1a61254a37f7a1b4c497e4a58387e931a9ec12a47d854e2a78eb4990869acadb7677cb0fe5b0936a021f60802a7e3967aa4c0c21fb67e8a570a6b4c27d9f107905d077c75321dfb7bf3fa6ef05e6e5eafa3a162eff82a76113617249955c01a2623fe6d14d1c65dfa0c0900e4386115eec0de54aa36c66efa4a00d770bbfea8800af601d8fba0a4dcff08e59fb33a1cacf74ca7391072c3de7d0446654ea22220e190cc17dd2c59d2e86cb147ca465ff23060d6f3ee90ded062a55df6b1e910e34d94b92ae1cc477772d6f17ae8ec47e198a1de66314ca10f4d4e433242bd6bd5c73e1d8018e5481d821dadedda14df7ad89c4b39ce1ce89d7fca3a57bbd17406bcb72dbfa34a023f9b6dea6a5be7f889da3277c4a09b83ace17a2c3735f59eba278bf6a03ac3f44aee7b309aac638da93aeb6b9ed42fdbb4326417f1bf994d4f947d2194ff8821a18e9542e9670e70eb2bef43a34a2c54cc215ee7ef7fd939cffda2fe7820b9cb5137d912d51ab5fb4260dcc9529e1c4343d59eeffbeffb1a21ce2628d28ceb4ff72a872e6356c092ae2b6d33e46e167eaa8ae7f0740f20a0fc3fc2266221572c6477998f7043524c5fbb673123db701be2d182fec77388661c8230dd82ff189ef4eca90318424b1a2e7841cbc75d20aa17c0674f4c1c9ad1eff55253371d68a01b345b8bfcdeace48bd69925a1f4a44c421f5ff0bc86c0d3b22cefdaa710a10a3f101cf6feffd6d3ae827a7f7ce04569cd3892eb833468916c8690004dda9f39f85e005ccf392ea634406950a9710014b491077dff09aad7d0ba51a934a85cf5be00414f073f745216f0d0265c73617355752d92ac0f5db016fd8082b32d65689e4a7ba7206e12f3d88117eac6dd13615a15c0d18c71c87d52cf21cb246bd4bc7539eda187ef7675cee28035df4117325a5266aef8546e50ffa5a7d265f2698262a4e9d85ed26dc0449da2b22e9ca768528b9c22d5406d88705e187c02ea297a17ebd2773728996726eae6db04595e12d8f5b429bf06eacb15248a2ab76801fd9910a60702762937d92cac9b73a9d1371d2f7ab0ca9ef0cdd62ca2b102ce4e8734aec097baf2e6c30422f3e3c937ef816cd46e03b8d810ca21434ba5614927ccdc942a0dc46f8c5a2a0e6506318a7bae8736a142af8c95047d626de9698ec92d96c24ee54803e925b06cf58b775190ea75883aa8fae8b38b0ede2e9fc9a685910ec36f97fe83f7d78a597555334eb1025a1866a2ed160cdd1b5487c8159ad15e4fc5465b8df00f71a84e2ab0af443788fed951df61213cc60a3c1415355772b8b0efa5400606d5597cdee95b2c825725b3b19cd958280c2dbdf78c1ae2d857f8a02bae613d9b4baff94d276b1a2f3d6d5fb6dbde573232cb255d03b967ffa9553d502427808f9988f682686e98ddd6bc7881011a0623172577ab531eccdac645beb6aefb042ceb50793d5dc68c72da3158c79d881b3358f35544f086e2d1c6d47e15e78645f3e24f32731f030281e33f8d43e3761a6f417c5f8c619c23aa2a96d2d2c29e114c7120eb16980fee1ddb0b3ce6b2fb7c18e79b429047ac9c285bd00a827f39a8d1bc520d895dab800f0042d9a1aee2dc5715646e2a69c32fd288a9505a7535ec0bcc311d74b5213925af85ef5743456538c7d02bf9e76f58fc39f5994028590ee57343b6ea52609896dac82dee82414f53b6fc570d51ac8881fae5602f68bd377b2be4bed5d252e7f639b20e710d2ae30608ae7f1b084bd6fedba2a73d6863bddda801bdb592d30a7f31f3b7940f1c8bfed0993eae54ce60f260495152596fec73f36bb31a5d71ab744328d14ad9743b61a55bbe81b950b0b5f", 0x1000}}, 0x1006) 45.140561851s ago: executing program 0 (id=94): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000000)={0x0, 0x3, 0x0, 0xb, 0xffffffffffffffff}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 45.006851794s ago: executing program 32 (id=94): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000000)={0x0, 0x3, 0x0, 0xb, 0xffffffffffffffff}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 14.074454677s ago: executing program 1 (id=168): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x76, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) 14.024923718s ago: executing program 1 (id=171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x20000002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 11.190741129s ago: executing program 1 (id=184): socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x204200, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$key(0xf, 0x3, 0x2) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x5) ptrace$pokeuser(0x6, r3, 0x358, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x1, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa8, 0xbc, 0xf, 0x40, 0x5ac, 0x30b, 0x7d4e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x3, 0xd3, 0x2, 0x0, [], [{{0x9, 0x5, 0x5, 0x3}}, {{0x9, 0x5, 0x8a, 0x3, 0x3ff}}]}}]}}]}}, 0x0) 10.620706469s ago: executing program 3 (id=180): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x8080d0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000580)=""/102392, 0x18ff8) gettid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0x18, 0xffffa888}]}, 0x24}}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)={0x0, 0x2, 0x9, 0x8a}) fcntl$lock(r3, 0x5, &(0x7f0000000080)={0x1, 0x2, 0x92, 0x7ae}) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) close(r2) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) 10.237134186s ago: executing program 2 (id=181): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x76, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) 10.02750716s ago: executing program 2 (id=183): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a00)={[{@delalloc}, {@data_err_abort}, {@bsdgroups}, {@dioread_lock}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@errors_continue}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}]}, 0x1, 0x553, &(0x7f0000000480)="$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") setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000080)=0xe6be, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file1\x00') 10.02723043s ago: executing program 4 (id=185): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000180)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@data_err_abort}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4ab, &(0x7f0000000740)="$eJzs3M1vFOUfAPDvTF94p4UfP5UXpYrGRrSlBZWDBzSacDEx0QPerKUSpIChNRFCpBqDR+NfoB5NTDx58aSJMepJ41XvxoQYLqAHUzOzM+2U7pbt9mWV/XyS3T7PzDP7PN+ZeXafnaezAXSsgewpidgaEb9ERF8tO++VWqGs3M3rl8f/vH55PInZ2Rf/SPJyN65fHi+LltttKTKDaUT6XhJ769Q7dfHSmbHJyYkLRX54+uwbw1MXLz12+uzYqYlTE+dGjx49cnjkySdGH1+VOLO4bux5+/y+3cdf/vD58dl49fvPsvZuLdZX46jpX3GdAzEQs4X5pb3580MrfvV/l22VdNLdxoawLF0RkR2unrz/90VXzB+8vnju3bnMN21qILBmss+mHYuWdtX+9Mfc5xdwJ0r0cehQ5Sd+9v23fKzrAKTNrj2dPU/k8d8sHrU13ZFm32X7a9/Yuxpsf2yF9W+NiBMzf32UPaLudQgAgNX1VTb+ebTe+C+NuyrlthdzKP0RcTAidkbE/yJiV0T8PyIve3dE3LPM+gduyS8e//y0qaXAmpSN/54q5rYWjv/SokQyl9uWx9+TvHZ6cuJQsU8Go2dDlh9Zoo6vn/35g0brBirjv+yR1V+OBYt2/N69YeE2J8emx1YQ8gLX3onY010v/mRuJiDbA7sjYk8Lr5/ts9OPfLovS2/fsnj97eNfwirMM81+EvFw7fjPxC3xl5JaTY3mJ4c3xuTEoeHyrFjshx+vvlDN91TSC+Lf2FxMG1sNto7s+G+ue/4X8ZfdoJyvnVp+HVd/fb/hd5rFxz+JEzPVEsX5X3kXyM7/3uSlPN1bLHtrbHr6wkhEb7FgwfLR+W3LfFk+i3/wQP3+vzPi74+L7fZGRHYS3xsR90XE/qLt90fEAxFxYIn4v3vmwdeX3kMtnv+rIIv/5FLHP6I/qc7Xt5DoOvPtl43qb+7970ieGiyWNPP+12wDV7LvAAAA4L8izeegk3SoTFcuTu2Kzenk+anpgwPx5rmTtbnq/uhJyytdfZXroSPFteEyP3pL/nBE7Mj/02hTnh8aPz+5rZ2BA/m9Ogv6f6Tp0FBt3W+N/ukFuHMsax6tenfg51+sfmOAdeV+Tehc+j90Lv0fOpf+D52rXv+/EnGzDU0B1pnPf+hc+j90Lv0fOpf+Dx1p8S3x5Q8ttHKn/3xi5/EVbb7midm+NXnlmeVv1bVGkUb1RzsaJpKIaK2KSJcu09tE7W1LpLctc6zF3bKMxP4isSEimt3qyrrt1fa+LwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKyWfwIAAP///G/dSQ==") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x101, 0x300, 0x0, 0x101, 0x300}}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) mount$9p_fd(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@ignoreqv}, {@fscache}, {@mmap}, {@cache_loose}, {@mmap}, {@access_uid={'access', 0x3d, r7}}, {@version_9p2000}, {@version_9p2000}], [{@obj_user}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@dont_appraise}]}}) 10.02607586s ago: executing program 3 (id=186): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) modify_ldt$write(0x1, 0x0, 0xfffffffffffffe8a) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) epoll_create1(0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 7.978690986s ago: executing program 4 (id=188): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) readv(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000080, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='io.stat\x00', 0x275a, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x302, 0x0, 0x0, 0x0, 0x0}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1) r3 = getpid() process_vm_readv(r3, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 7.854584158s ago: executing program 1 (id=190): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000003c0)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@grpid}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7d3, &(0x7f0000000c80)="$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") 7.854365549s ago: executing program 3 (id=191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x10000000000}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x17a) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) sendfile(r5, r4, 0x0, 0x6) 7.037434693s ago: executing program 4 (id=192): syz_mount_image$fuse(0x0, 0x0, 0x38be40c, 0x0, 0x1, 0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r1}, 0x18) write$FUSE_DIRENTPLUS(r0, &(0x7f00000012c0)=ANY=[], 0xb0) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB=',wfdno', @ANYRESHEX=r0, @ANYBLOB=',privport,access', @ANYRESDEC]) lgetxattr(0x0, &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000"], 0x1, 0x17d, &(0x7f00000004c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket(0x1, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000140)={'sit0\x00', 0x0}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 6.188210749s ago: executing program 5 (id=193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013f0000000000950000000000000086a8e19bfc32559c9d3b354edcfd28d9ddac9449c48aaa678df05e82518a29aa9dfbe6c8821ea18738e47ca6bda491192b0d6e5b30958a5f1cd19910eb1de1d4b7332585e4fff3"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="020d0000090000000000000000040000"], 0x48}}, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x80047437, &(0x7f0000000140)=0x10) r6 = gettid() tkill(r6, 0x7) 6.181373249s ago: executing program 2 (id=194): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x76, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000003c0)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@grpid}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7d3, &(0x7f0000000c80)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file1', [], 0xa, "1a1487ed3ae3f1ee4669dcf3ce2b1197c9abd42bc24049f9ee69ad9bcbb8eb8f699efdc5af34184e59c196be10f96daf907168ec4cd76eba6b1fed3361e9883fe1a3"}, 0x4d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) 6.180035529s ago: executing program 3 (id=195): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x76, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000003c0)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@grpid}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7d3, &(0x7f0000000c80)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file1', [], 0xa, "1a1487ed3ae3f1ee4669dcf3ce2b1197c9abd42bc24049f9ee69ad9bcbb8eb8f699efdc5af34184e59c196be10f96daf907168ec4cd76eba6b1fed3361e9883fe1a3"}, 0x4d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) 5.049746059s ago: executing program 1 (id=196): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f0000000000)="17000000020001000003be8c5e687a8a12003200020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) 5.00047049s ago: executing program 5 (id=197): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) r3 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@private1, 0x1, r4}) r6 = socket(0xa, 0x1, 0x0) ioctl(r6, 0x8936, &(0x7f0000000000)) 4.96327919s ago: executing program 4 (id=198): recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) r2 = syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x1, 0x54f9, &(0x7f000000ab40)="$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") io_uring_enter(0xffffffffffffffff, 0x0, 0xfb68, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, 0x0) chdir(&(0x7f0000000000)='./file0\x00') llistxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='y\x105%\xa3\xd5\xfa\xd7\xfa\x17\xe9\x99\xa2\x89\x8e\xcd\xfd', 0x2) fcntl$addseals(r3, 0x409, 0x7) write(r3, &(0x7f0000000240)="d7", 0xfdef) execveat(r2, &(0x7f0000000180)='./file2\x00', &(0x7f0000001840)={[&(0x7f0000000200)=']%\x00', &(0x7f0000001800)='\x00']}, &(0x7f0000001900)={[&(0x7f0000001880)='incremental-fs\x00', &(0x7f00000018c0)='*$-\'\'\x00']}, 0x100) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000001940)={0x4, 0x0, [{0x252}, {0x970, 0x0, 0x5}, {0x2e5, 0x0, 0xd9f}, {0x2e5, 0x0, 0x92}]}) 4.40926537s ago: executing program 5 (id=199): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) modify_ldt$write(0x1, 0x0, 0xfffffffffffffe8a) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) epoll_create1(0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 4.40883786s ago: executing program 2 (id=200): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x47, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0x40841) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000180), 0x0}, 0x20) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x73, 0x141341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 3.445049118s ago: executing program 2 (id=203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(0x0, 0x14507e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) fallocate(r3, 0x0, 0x0, 0x1000f4) io_submit(0x0, 0x0, 0x0) 3.443516978s ago: executing program 1 (id=213): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000040)={[{@jqfmt_vfsv1}]}, 0xfe, 0x56c, &(0x7f0000000940)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) bind$unix(r0, &(0x7f00000000c0)=@file={0x0, './bus/file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) r2 = userfaultfd(0x80000) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x2000018, &(0x7f0000000500)=ANY=[], 0xfe, 0x1c7, &(0x7f0000001100)="$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") ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x20}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x4) 1.821971147s ago: executing program 4 (id=204): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000580)=0x7ff, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) socket$tipc(0x1e, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) mlock(&(0x7f00003ef000/0x3000)=nil, 0x3000) r3 = gettid() process_vm_writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/179, 0xb3}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f000083c000/0x3000)=nil, 0x3000, 0x1c4000, 0x3, &(0x7f00003bd000/0x2000)=nil) 1.704134209s ago: executing program 5 (id=205): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlockall(0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_getevents(0x0, 0x1, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x20}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.60608522s ago: executing program 4 (id=206): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x76, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000003c0)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@grpid}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7d3, &(0x7f0000000c80)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_freeze_timeout', 0x90200, 0xc) 1.573375421s ago: executing program 2 (id=207): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x76, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000003c0)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@grpid}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7d3, &(0x7f0000000c80)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file1', [], 0xa, "1a1487ed3ae3f1ee4669dcf3ce2b1197c9abd42bc24049f9ee69ad9bcbb8eb8f699efdc5af34184e59c196be10f96daf907168ec4cd76eba6b1fed3361e9883fe1a3"}, 0x4d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) 1.12426411s ago: executing program 3 (id=208): timer_create(0x0, &(0x7f0000000140)={0x0, 0x11}, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000907000/0x1000)=nil, 0x1000, 0xb) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x80fe, @empty}, 0x1c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x149a82, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 0s ago: executing program 5 (id=209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x400, 0x110) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a78", 0x18, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) close(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.48' (ED25519) to the list of known hosts. [ 22.958428][ T23] audit: type=1400 audit(1743707025.370:66): avc: denied { mounton } for pid=342 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.960187][ T342] cgroup1: Unknown subsys name 'net' [ 22.981883][ T23] audit: type=1400 audit(1743707025.370:67): avc: denied { mount } for pid=342 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.987657][ T342] cgroup1: Unknown subsys name 'net_prio' [ 23.015561][ T342] cgroup1: Unknown subsys name 'devices' [ 23.023493][ T23] audit: type=1400 audit(1743707025.430:68): avc: denied { unmount } for pid=342 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.219137][ T342] cgroup1: Unknown subsys name 'hugetlb' [ 23.226250][ T342] cgroup1: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 23.369993][ T23] audit: type=1400 audit(1743707025.780:69): avc: denied { setattr } for pid=342 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=10691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.391512][ T346] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.394687][ T23] audit: type=1400 audit(1743707025.780:70): avc: denied { mounton } for pid=342 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.429365][ T23] audit: type=1400 audit(1743707025.780:71): avc: denied { mount } for pid=342 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.452802][ T23] audit: type=1400 audit(1743707025.810:72): avc: denied { relabelto } for pid=346 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.479614][ T23] audit: type=1400 audit(1743707025.810:73): avc: denied { write } for pid=346 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.479713][ T342] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.505527][ T23] audit: type=1400 audit(1743707025.830:74): avc: denied { read } for pid=342 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.542722][ T23] audit: type=1400 audit(1743707025.830:75): avc: denied { open } for pid=342 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.124059][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.131552][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.139785][ T357] device bridge_slave_0 entered promiscuous mode [ 24.148621][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.156006][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.163689][ T357] device bridge_slave_1 entered promiscuous mode [ 24.229735][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.236908][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.245131][ T353] device bridge_slave_0 entered promiscuous mode [ 24.268711][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.276141][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.283607][ T353] device bridge_slave_1 entered promiscuous mode [ 24.300124][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.307299][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.315519][ T355] device bridge_slave_0 entered promiscuous mode [ 24.337047][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.344375][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.352358][ T355] device bridge_slave_1 entered promiscuous mode [ 24.389514][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.397146][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.404519][ T354] device bridge_slave_0 entered promiscuous mode [ 24.416227][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.423346][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.431770][ T354] device bridge_slave_1 entered promiscuous mode [ 24.509740][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.516723][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.524540][ T356] device bridge_slave_0 entered promiscuous mode [ 24.554826][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.562828][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.570456][ T356] device bridge_slave_1 entered promiscuous mode [ 24.672426][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.679767][ T357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.687071][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.694130][ T357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.723406][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.730623][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.738409][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.745550][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.757478][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.765399][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.773012][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.780091][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.818609][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.826396][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.833880][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.841450][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.872326][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.879389][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.887058][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.894021][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.914675][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.921974][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.929705][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.937416][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.944426][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.952350][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.960102][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.967807][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.975371][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.983190][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.991688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.000054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.030631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.040273][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.047614][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.056368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.065339][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.072622][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.099799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.109781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.119039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.127725][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.135256][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.143645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.152184][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.159891][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.184413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.193621][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.200841][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.209174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.217375][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.224985][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.233146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.241469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.249660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.257937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.294520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.302699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.311816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.321789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.331670][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.340679][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.349882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.359419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.369786][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.377136][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.384996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.394227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.402894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.411382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.420716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.428722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.436303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.444705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.453811][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.460765][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.468782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.477852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.486569][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.493614][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.518949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.527109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.535376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.544245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.553423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.562452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.572152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.581076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.606446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.614416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.625139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.634177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.642730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.651994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.660324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.678413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.686542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.694914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.722936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.731797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.740988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.750026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.767086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.776001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.784638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.793270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.817846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.827113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.834949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.857536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.865999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.874609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.883635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.892407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.901179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.909956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.927306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.936353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.959035][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.966409][ T353] request_module fs-gadgetfs succeeded, but still no fs? [ 25.967566][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.006816][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.017178][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.058708][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.071680][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.097025][ T377] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.154974][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.164337][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.173785][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.182417][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.191276][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.200481][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.231854][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.242085][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.252719][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.263264][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.273256][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.286685][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.385537][ T401] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 29.289466][ T424] device syzkaller0 entered promiscuous mode [ 29.303316][ T23] kauditd_printk_skb: 55 callbacks suppressed [ 29.303327][ T23] audit: type=1400 audit(1743707031.710:131): avc: denied { prog_run } for pid=423 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.383647][ T23] audit: type=1400 audit(1743707031.720:132): avc: denied { relabelfrom } for pid=423 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 29.464470][ T23] audit: type=1400 audit(1743707031.720:133): avc: denied { relabelto } for pid=423 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 29.555515][ T23] audit: type=1400 audit(1743707031.760:134): avc: denied { accept } for pid=416 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.718287][ T23] audit: type=1400 audit(1743707032.130:135): avc: denied { map_read map_write } for pid=423 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.759802][ T23] audit: type=1400 audit(1743707032.170:136): avc: denied { create } for pid=436 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.786140][ T419] F2FS-fs (loop0): invalid crc value [ 29.804155][ T419] F2FS-fs (loop0): Found nat_bits in checkpoint [ 29.841470][ T437] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 29.876522][ T437] EXT4-fs (loop2): invalid journal inode [ 29.886303][ T437] EXT4-fs (loop2): can't get journal size [ 29.890374][ T417] syz.1.14 (417) used greatest stack depth: 21272 bytes left [ 29.910600][ T419] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 29.925777][ T23] audit: type=1400 audit(1743707032.330:137): avc: denied { mount } for pid=418 comm="syz.0.13" name="/" dev="loop0" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.942262][ T437] EXT4-fs (loop2): 1 truncate cleaned up [ 29.953663][ T437] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 30.007175][ T23] audit: type=1400 audit(1743707032.420:138): avc: denied { write } for pid=436 comm="syz.2.16" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.063907][ T23] audit: type=1400 audit(1743707032.420:139): avc: denied { add_name } for pid=436 comm="syz.2.16" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.118250][ T447] mmap: syz.4.18 (447) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 30.155717][ T23] audit: type=1400 audit(1743707032.420:140): avc: denied { create } for pid=436 comm="syz.2.16" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.850096][ T5] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 30.863435][ T355] attempt to access beyond end of device [ 30.863435][ T355] loop0: rw=2049, want=45104, limit=40427 [ 31.026614][ T464] device pim6reg1 entered promiscuous mode [ 31.170409][ T456] syz.1.19 (456) used greatest stack depth: 20888 bytes left [ 31.215824][ T5] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 31.229176][ T5] usb 3-1: config 179 has no interface number 0 [ 31.242150][ T5] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 31.267012][ T5] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 31.291119][ T5] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 31.344821][ T5] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 31.356792][ T5] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 31.371093][ T5] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 31.380320][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.155983][ T453] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 32.162980][ T453] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 33.925021][ T345] usb 3-1: USB disconnect, device number 2 [ 33.965687][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 34.591226][ T23] kauditd_printk_skb: 11 callbacks suppressed [ 34.591237][ T23] audit: type=1400 audit(1743707037.000:152): avc: denied { create } for pid=513 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.665738][ T23] audit: type=1400 audit(1743707037.030:153): avc: denied { append } for pid=146 comm="syslogd" name="messages" dev="tmpfs" ino=483 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.706851][ T23] audit: type=1400 audit(1743707037.030:154): avc: denied { open } for pid=146 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=483 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.731847][ T497] F2FS-fs (loop4): invalid crc value [ 34.764318][ T23] audit: type=1400 audit(1743707037.030:155): avc: denied { getattr } for pid=146 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=483 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.789027][ T497] F2FS-fs (loop4): Found nat_bits in checkpoint [ 34.835947][ T23] audit: type=1400 audit(1743707037.050:156): avc: denied { create } for pid=513 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.922754][ T501] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 34.941614][ T23] audit: type=1400 audit(1743707037.050:157): avc: denied { setopt } for pid=513 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.945999][ T497] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 34.989183][ T23] audit: type=1400 audit(1743707037.050:158): avc: denied { ioctl } for pid=513 comm="syz.2.35" path="socket:[13312]" dev="sockfs" ino=13312 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.032574][ T23] audit: type=1400 audit(1743707037.120:159): avc: denied { mounton } for pid=496 comm="syz.4.29" path="/8/file1" dev="tmpfs" ino=14338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.082626][ T23] audit: type=1400 audit(1743707037.490:160): avc: denied { setopt } for pid=496 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.141018][ T23] audit: type=1400 audit(1743707037.510:161): avc: denied { write } for pid=496 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.302711][ T357] attempt to access beyond end of device [ 35.302711][ T357] loop4: rw=2049, want=45104, limit=40427 [ 35.305861][ T501] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.352951][ T501] usb 3-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 35.373826][ T501] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.400281][ T501] usb 3-1: config 0 descriptor?? [ 35.967951][ T501] elecom 0003:056E:00FC.0001: unknown main item tag 0x0 [ 35.979634][ T501] elecom 0003:056E:00FC.0001: unknown main item tag 0x0 [ 35.995089][ T501] elecom 0003:056E:00FC.0001: item fetching failed at offset 2/5 [ 36.224665][ T501] elecom: probe of 0003:056E:00FC.0001 failed with error -22 [ 36.480242][ T454] usb 3-1: USB disconnect, device number 3 [ 36.613768][ T548] ====================================================== [ 36.613768][ T548] WARNING: the mand mount option is being deprecated and [ 36.613768][ T548] will be removed in v5.15! [ 36.613768][ T548] ====================================================== [ 36.818832][ T551] EXT4-fs (loop0): Ignoring removed bh option [ 36.906210][ T551] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 36.921710][ T551] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #3: block 2: comm syz.0.43: lblock 2 mapped to illegal pblock 2 (length 1) [ 36.936910][ T551] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #3: block 48: comm syz.0.43: lblock 0 mapped to illegal pblock 48 (length 1) [ 36.952108][ T551] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6102: Corrupt filesystem [ 36.962754][ T551] EXT4-fs warning (device loop0): ext4_evict_inode:304: couldn't mark inode dirty (err -117) [ 36.973391][ T551] EXT4-fs (loop0): 1 orphan inode deleted [ 36.979068][ T551] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue [ 37.035469][ T102] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.094665][ T551] EXT4-fs (loop0): re-mounted. Opts: [ 37.210164][ T548] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a802c11c, mo2=0002] [ 37.329856][ T548] System zones: 0-2, 18-18, 34-34 [ 37.364910][ T548] EXT4-fs (loop1): orphan cleanup on readonly fs [ 37.778020][ T548] EXT4-fs (loop1): 1 truncate cleaned up [ 37.784399][ T548] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,norecovery,debug,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue [ 38.046965][ T548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.44'. [ 38.065729][ T548] tipc: Started in network mode [ 38.075010][ T548] tipc: Own node identity 7ffd39, cluster identity 5 [ 38.085728][ T548] tipc: 32-bit node address hash set to 7ffd39 [ 38.102785][ T567] device pim6reg1 entered promiscuous mode [ 38.147528][ T574] netlink: 'syz.1.44': attribute type 3 has an invalid length. [ 38.323507][ T579] device syzkaller0 entered promiscuous mode [ 39.488338][ T603] ip6t_REJECT: ECHOREPLY is not supported [ 39.748773][ T597] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue [ 40.372176][ T597] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.57: bg 0: block 234: padding at end of block bitmap is not set [ 40.387553][ T597] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 40.405761][ T597] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.405761][ T597] [ 40.609933][ T613] EXT4-fs (loop2): Ignoring removed bh option [ 40.680663][ T613] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 40.695493][ T613] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #3: block 2: comm syz.2.60: lblock 2 mapped to illegal pblock 2 (length 1) [ 40.711096][ T613] __quota_error: 10 callbacks suppressed [ 40.711127][ T613] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 40.725559][ T613] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #3: block 48: comm syz.2.60: lblock 0 mapped to illegal pblock 48 (length 1) [ 40.743364][ T613] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 40.752719][ T613] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6102: Corrupt filesystem [ 40.764857][ T613] EXT4-fs warning (device loop2): ext4_evict_inode:304: couldn't mark inode dirty (err -117) [ 40.775982][ T613] EXT4-fs (loop2): 1 orphan inode deleted [ 40.781748][ T613] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue [ 40.799688][ T9] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 40.951548][ T590] F2FS-fs (loop3): invalid crc value [ 41.116576][ T9] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 41.144261][ T590] F2FS-fs (loop3): Found nat_bits in checkpoint [ 41.310738][ T613] EXT4-fs (loop2): re-mounted. Opts: [ 41.475803][ T23] audit: type=1400 audit(1743707043.820:167): avc: denied { map } for pid=595 comm="syz.4.57" path="/14/file0/hugetlb.2MB.usage_in_bytes" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.558762][ T590] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 41.646637][ T23] audit: type=1400 audit(1743707043.820:168): avc: denied { write } for pid=595 comm="syz.4.57" path="/14/file0/hugetlb.2MB.usage_in_bytes" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.216143][ T23] audit: type=1400 audit(1743707044.470:169): avc: denied { shutdown } for pid=623 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.238443][ T354] attempt to access beyond end of device [ 42.238443][ T354] loop3: rw=2049, want=45104, limit=40427 [ 42.239894][ T23] audit: type=1400 audit(1743707044.470:170): avc: denied { read } for pid=623 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.341948][ T639] capability: warning: `syz.2.63' uses deprecated v2 capabilities in a way that may be insecure [ 43.763412][ T23] audit: type=1400 audit(1743707046.170:171): avc: denied { create } for pid=661 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 44.016521][ T23] audit: type=1400 audit(1743707046.420:172): avc: denied { write } for pid=661 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 44.048472][ T665] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.055653][ T665] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.101335][ T665] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.108836][ T665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.116118][ T665] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.122951][ T665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.140450][ T665] device bridge0 entered promiscuous mode [ 44.191342][ T665] debugfs: Directory 'vcpu2' with parent '665-13' already present! [ 44.352410][ T674] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 44.499677][ T23] audit: type=1400 audit(1743707046.910:173): avc: denied { getopt } for pid=676 comm="syz.4.74" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.825216][ T680] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 45.093953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.277549][ T695] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 45.297658][ T695] EXT4-fs (loop1): invalid journal inode [ 45.335836][ T695] EXT4-fs (loop1): can't get journal size [ 45.436948][ T695] EXT4-fs (loop1): 1 truncate cleaned up [ 45.442672][ T695] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 47.545686][ T559] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 47.671876][ T23] kauditd_printk_skb: 1 callbacks suppressed [ 47.671887][ T23] audit: type=1400 audit(1743707050.080:175): avc: denied { create } for pid=731 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.717827][ T735] overlayfs: failed to resolve './file1': -2 [ 47.735747][ T23] audit: type=1400 audit(1743707050.110:176): avc: denied { setopt } for pid=731 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.766950][ T23] audit: type=1400 audit(1743707050.110:177): avc: denied { write } for pid=731 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.004366][ T559] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 48.017199][ T559] usb 2-1: config 179 has no interface number 0 [ 48.027684][ T559] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 49.106673][ T559] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 49.119006][ T559] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 49.130851][ T559] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 49.223918][ T751] overlayfs: missing 'lowerdir' [ 49.267858][ T559] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 49.513840][ T559] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 49.524719][ T559] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.709987][ T23] audit: type=1400 audit(2000000000.470:178): avc: denied { create } for pid=757 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.743972][ T559] usb 2-1: can't set config #179, error -71 [ 49.856177][ T23] audit: type=1400 audit(2000000000.570:179): avc: denied { unmount } for pid=755 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.893898][ T559] usb 2-1: USB disconnect, device number 2 [ 50.940196][ T769] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 51.013076][ T23] audit: type=1400 audit(2000000001.770:180): avc: denied { name_bind } for pid=771 comm="syz.2.96" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 51.710900][ T777] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.729233][ T777] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.729908][ T777] device bridge_slave_0 entered promiscuous mode [ 51.730817][ T777] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.730824][ T777] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.743015][ T777] device bridge_slave_1 entered promiscuous mode [ 52.300517][ T23] audit: type=1326 audit(2000000003.060:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=794 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad367a4169 code=0x7ffc0000 [ 52.523762][ T23] audit: type=1326 audit(2000000003.090:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=794 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fad367a4169 code=0x7ffc0000 [ 52.553218][ T789] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 52.615973][ T23] audit: type=1326 audit(2000000003.090:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=794 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad367a4169 code=0x7ffc0000 [ 52.668261][ T23] audit: type=1326 audit(2000000003.100:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=794 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad367a4169 code=0x7ffc0000 [ 52.721448][ T23] audit: type=1326 audit(2000000003.130:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=794 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fad367a4169 code=0x7ffc0000 [ 52.756900][ T23] audit: type=1326 audit(2000000003.130:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=794 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad367a4169 code=0x7ffc0000 [ 52.781999][ T23] audit: type=1326 audit(2000000003.140:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=794 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fad367a4169 code=0x7ffc0000 [ 52.807491][ T23] audit: type=1326 audit(2000000003.250:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=794 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad367a4169 code=0x7ffc0000 [ 52.844692][ T23] audit: type=1326 audit(2000000003.250:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=794 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad367a4169 code=0x7ffc0000 [ 52.872604][ T789] EXT4-fs error (device loop1): __ext4_iget:5217: inode #12: block 2: comm syz.1.100: invalid block [ 52.886909][ T807] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 52.910439][ T807] EXT4-fs (loop3): invalid journal inode [ 52.920738][ T800] EXT4-fs error (device loop2): ext4_fill_super:4612: inode #2: comm syz.2.103: casefold flag without casefold feature [ 52.931821][ T807] EXT4-fs (loop3): can't get journal size [ 52.940802][ T800] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 52.952598][ T800] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 52.956431][ T23] audit: type=1326 audit(2000000003.260:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=794 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fad3679b127 code=0x7ffc0000 [ 52.985282][ T800] audit: audit_backlog=65 > audit_backlog_limit=64 [ 53.006695][ T800] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 53.014524][ T807] EXT4-fs (loop3): 1 truncate cleaned up [ 53.020509][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.026043][ T23] audit: type=1326 audit(2000000003.260:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=794 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fad36740359 code=0x7ffc0000 [ 53.028387][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.059628][ T807] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 53.060640][ T23] audit: type=1326 audit(2000000003.260:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=794 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad367a4169 code=0x7ffc0000 [ 53.104483][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.113807][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.123809][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.131460][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.139998][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.148606][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.176717][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.183918][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.207088][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.244114][ T356] ------------[ cut here ]------------ [ 53.249685][ T356] WARNING: CPU: 0 PID: 356 at fs/overlayfs/util.c:453 ovl_dir_modified+0x45c/0x570 [ 53.253286][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.259035][ T356] Modules linked in: [ 53.259053][ T356] CPU: 0 PID: 356 Comm: syz-executor Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 53.259058][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.259077][ T356] RIP: 0010:ovl_dir_modified+0x45c/0x570 [ 53.259086][ T356] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 dc 20 ae ff 49 ff 45 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 94 36 7e ff <0f> 0b e9 91 fd ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 30 fc ff [ 53.259091][ T356] RSP: 0018:ffff8881d6787b48 EFLAGS: 00010293 [ 53.259099][ T356] RAX: ffffffff81e6146c RBX: 0000000000000000 RCX: ffff8881f0d01f80 [ 53.259112][ T356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.267599][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.271022][ T356] RBP: ffff8881c9e09000 R08: ffffffff81e611f6 R09: ffffed10393f58f3 [ 53.291168][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.296375][ T356] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 53.296381][ T356] R13: ffff8881c9fac6f0 R14: ffff8881c9fac740 R15: ffff8881c9e09030 [ 53.296389][ T356] FS: 00005555793c0500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 53.296395][ T356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.296401][ T356] CR2: 00007f757ec70000 CR3: 00000001d64d0000 CR4: 00000000003406b0 [ 53.296411][ T356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.296416][ T356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.296419][ T356] Call Trace: [ 53.296437][ T356] ? __warn+0x162/0x250 [ 53.296448][ T356] ? report_bug+0x3a1/0x4e0 [ 53.296458][ T356] ? ovl_dir_modified+0x45c/0x570 [ 53.296473][ T356] ? ovl_dir_modified+0x45c/0x570 [ 53.319950][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.323109][ T356] ? do_invalid_op+0x6e/0x110 [ 53.339106][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.339887][ T356] ? invalid_op+0x1e/0x30 [ 53.348430][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.355609][ T356] ? ovl_dir_modified+0x1e6/0x570 [ 53.372940][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.380590][ T356] ? ovl_dir_modified+0x45c/0x570 [ 53.380602][ T356] ? ovl_dir_modified+0x45c/0x570 [ 53.380610][ T356] ? ovl_dir_modified+0x45c/0x570 [ 53.380618][ T356] ? ovl_path_type+0x18e/0x2f0 [ 53.380627][ T356] ovl_do_remove+0x6f0/0xc80 [ 53.380647][ T356] ? ovl_set_redirect+0x5f0/0x5f0 [ 53.399682][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.405152][ T356] ? security_inode_rmdir+0xca/0x110 [ 53.421641][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.421760][ T356] vfs_rmdir+0x285/0x3c0 [ 53.425446][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.428864][ T356] incfs_kill_sb+0x105/0x200 [ 53.428876][ T356] deactivate_locked_super+0xa8/0x110 [ 53.428885][ T356] deactivate_super+0x1e2/0x2a0 [ 53.428893][ T356] ? vfs_submount+0xb0/0xb0 [ 53.428901][ T356] ? deactivate_locked_super+0x110/0x110 [ 53.428909][ T356] ? fast_dput+0x7a/0x280 [ 53.428918][ T356] cleanup_mnt+0x44e/0x500 [ 53.428930][ T356] task_work_run+0x140/0x170 [ 53.428942][ T356] exit_to_usermode_loop+0x190/0x1a0 [ 53.428951][ T356] prepare_exit_to_usermode+0x199/0x200 [ 53.428976][ T356] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 53.428986][ T356] RIP: 0033:0x7fad367a5497 [ 53.428998][ T356] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 53.429004][ T356] RSP: 002b:00007ffce632ae38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 53.429013][ T356] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fad367a5497 [ 53.429018][ T356] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce632aef0 [ 53.429023][ T356] RBP: 00007ffce632aef0 R08: 0000000000000000 R09: 0000000000000000 [ 53.429029][ T356] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffce632bfe0 [ 53.429034][ T356] R13: 00007fad3682508c R14: 000000000000cf4c R15: 00007ffce632d0b0 [ 53.429048][ T356] ---[ end trace 203a7213f3609718 ]--- [ 53.435476][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.446734][ T356] ------------[ cut here ]------------ [ 53.700545][ T356] WARNING: CPU: 0 PID: 356 at fs/overlayfs/util.c:453 ovl_dir_modified+0x45c/0x570 [ 53.710016][ T356] Modules linked in: [ 53.713752][ T356] CPU: 0 PID: 356 Comm: syz-executor Tainted: G W 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 53.725031][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.735351][ T356] RIP: 0010:ovl_dir_modified+0x45c/0x570 [ 53.741196][ T356] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 dc 20 ae ff 49 ff 45 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 94 36 7e ff <0f> 0b e9 91 fd ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 30 fc ff [ 53.761989][ T356] RSP: 0018:ffff8881d6787b48 EFLAGS: 00010293 [ 53.768073][ T356] RAX: ffffffff81e6146c RBX: 0000000000000000 RCX: ffff8881f0d01f80 [ 53.776142][ T356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.784435][ T356] RBP: ffff8881c9e09000 R08: ffffffff81e611f6 R09: ffffed10393f58f3 [ 53.792418][ T356] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 53.800403][ T356] R13: ffff8881c9fac6f0 R14: ffff8881c9fac740 R15: ffff8881c9e09030 [ 53.808473][ T356] FS: 00005555793c0500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 53.817568][ T356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.824480][ T356] CR2: 00007f757ec70000 CR3: 00000001d64d0000 CR4: 00000000003406b0 [ 53.832443][ T356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.841146][ T356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.849057][ T356] Call Trace: [ 53.852404][ T356] ? __warn+0x162/0x250 [ 53.856474][ T356] ? report_bug+0x3a1/0x4e0 [ 53.860994][ T356] ? ovl_dir_modified+0x45c/0x570 [ 53.866248][ T356] ? ovl_dir_modified+0x45c/0x570 [ 53.871080][ T356] ? do_invalid_op+0x6e/0x110 [ 53.875596][ T356] ? invalid_op+0x1e/0x30 [ 53.879840][ T356] ? ovl_dir_modified+0x1e6/0x570 [ 53.885091][ T356] ? ovl_dir_modified+0x45c/0x570 [ 53.889950][ T356] ? ovl_dir_modified+0x45c/0x570 [ 53.894904][ T356] ? ovl_dir_modified+0x45c/0x570 [ 53.899760][ T356] ? ovl_path_type+0x18e/0x2f0 [ 53.904362][ T356] ovl_do_remove+0x6f0/0xc80 [ 53.909139][ T356] ? ovl_set_redirect+0x5f0/0x5f0 [ 53.913993][ T356] ? security_inode_rmdir+0xca/0x110 [ 53.919331][ T356] vfs_rmdir+0x285/0x3c0 [ 53.923497][ T356] incfs_kill_sb+0x18d/0x200 [ 53.928153][ T356] deactivate_locked_super+0xa8/0x110 [ 53.933746][ T356] deactivate_super+0x1e2/0x2a0 [ 53.938386][ T356] ? vfs_submount+0xb0/0xb0 [ 53.942929][ T356] ? deactivate_locked_super+0x110/0x110 [ 53.948393][ T356] ? fast_dput+0x7a/0x280 [ 53.952750][ T356] cleanup_mnt+0x44e/0x500 [ 53.957249][ T356] task_work_run+0x140/0x170 [ 53.961761][ T356] exit_to_usermode_loop+0x190/0x1a0 [ 53.966994][ T356] prepare_exit_to_usermode+0x199/0x200 [ 53.972472][ T356] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 53.978338][ T356] RIP: 0033:0x7fad367a5497 [ 53.982716][ T356] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 54.002875][ T356] RSP: 002b:00007ffce632ae38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 54.011472][ T356] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fad367a5497 [ 54.019806][ T356] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce632aef0 [ 54.027548][ T356] RBP: 00007ffce632aef0 R08: 0000000000000000 R09: 0000000000000000 [ 54.036043][ T356] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffce632bfe0 [ 54.044122][ T356] R13: 00007fad3682508c R14: 000000000000cf4c R15: 00007ffce632d0b0 [ 54.052012][ T356] ---[ end trace 203a7213f3609719 ]--- [ 54.063673][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.193806][ T102] device bridge_slave_1 left promiscuous mode [ 54.202824][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.218006][ T102] device bridge_slave_0 left promiscuous mode [ 54.224533][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.298414][ T820] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 54.555691][ T711] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 54.616980][ T824] EXT4-fs (loop2): Invalid want_extra_isize 11 [ 54.628188][ T817] F2FS-fs (loop1): invalid crc value [ 54.699467][ T817] F2FS-fs (loop1): Found nat_bits in checkpoint [ 54.747894][ T817] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 54.802781][ T835] netlink: 'syz.2.107': attribute type 16 has an invalid length. [ 54.810963][ T835] netlink: 'syz.2.107': attribute type 17 has an invalid length. [ 54.917332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 55.004734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.013637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 55.022247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.030791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.040252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.049439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.065811][ T711] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 55.065956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.075131][ T711] usb 4-1: config 179 has no interface number 0 [ 55.102572][ T711] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 55.116389][ T711] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 55.128514][ T711] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 55.142003][ T711] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 55.153300][ T837] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,bsdgroups,dioread_lock,resuid=0x0000000000000000,max_dir_size_kb=0x000000000000000a,data_err=ignore,grpquota,noblock_validity,user_xattr,errors=continue,max_dir_size_kb=0x0000000000000009,,errors=continue [ 55.186300][ T711] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 55.200652][ T711] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 55.210077][ T711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.274013][ T353] attempt to access beyond end of device [ 55.274013][ T353] loop1: rw=2049, want=45104, limit=40427 [ 55.286152][ T813] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 55.292975][ T813] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 56.601568][ T13] usb 4-1: USB disconnect, device number 2 [ 56.616323][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 58.225007][ T867] EXT4-fs (loop3): Ignoring removed oldalloc option [ 59.962716][ T867] EXT4-fs (loop3): orphan cleanup on readonly fs [ 59.971453][ T867] __quota_error: 83 callbacks suppressed [ 59.971466][ T867] Quota error (device loop3): find_tree_dqentry: Getting block too big (196613 >= 6) [ 60.193694][ T867] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 60.204384][ T867] EXT4-fs (loop3): 1 truncate cleaned up [ 60.210593][ T867] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 60.357986][ T23] audit: type=1400 audit(2000000011.120:275): avc: denied { setopt } for pid=890 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.537395][ T887] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 60.546157][ T887] System zones: 0-2, 18-18, 34-35 [ 60.558555][ T887] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 60.569758][ T887] ext4 filesystem being mounted at /3/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 60.683692][ T892] FAT-fs (loop2): Directory bread(block 64) failed [ 60.726585][ T873] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 60.780281][ T892] FAT-fs (loop2): Directory bread(block 65) failed [ 60.797121][ T872] EXT4-fs error (device loop4): __ext4_iget:5217: inode #12: block 2: comm syz.4.116: invalid block [ 60.798905][ T892] FAT-fs (loop2): Directory bread(block 66) failed [ 60.823223][ T892] FAT-fs (loop2): Directory bread(block 67) failed [ 60.831226][ T892] FAT-fs (loop2): Directory bread(block 68) failed [ 60.838529][ T892] FAT-fs (loop2): Directory bread(block 69) failed [ 60.845571][ T892] FAT-fs (loop2): Directory bread(block 70) failed [ 60.853200][ T892] FAT-fs (loop2): Directory bread(block 71) failed [ 60.862188][ T892] FAT-fs (loop2): Directory bread(block 72) failed [ 60.868893][ T892] FAT-fs (loop2): Directory bread(block 73) failed [ 60.915841][ T884] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 60.993072][ T23] audit: type=1400 audit(2000000011.750:276): avc: denied { create } for pid=883 comm="syz.5.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.016391][ T23] audit: type=1400 audit(2000000011.780:277): avc: denied { connect } for pid=883 comm="syz.5.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.041319][ T23] audit: type=1400 audit(2000000011.800:278): avc: denied { remove_name } for pid=146 comm="syslogd" name="messages" dev="tmpfs" ino=483 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.064856][ T23] audit: type=1400 audit(2000000011.800:279): avc: denied { rename } for pid=146 comm="syslogd" name="messages" dev="tmpfs" ino=483 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.088792][ T23] audit: type=1400 audit(2000000011.800:280): avc: denied { create } for pid=146 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.222421][ T23] audit: type=1400 audit(2000000011.980:281): avc: denied { connect } for pid=890 comm="syz.2.126" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.601627][ T884] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 61.743605][ T884] usb 4-1: config 0 has no interface number 0 [ 61.757026][ T884] usb 4-1: config 0 interface 66 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 61.827845][ T884] usb 4-1: config 0 interface 66 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.980245][ T929] EXT4-fs (loop4): Ignoring removed oldalloc option [ 62.200447][ T884] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 62.491609][ T884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.558566][ T884] usb 4-1: config 0 descriptor?? [ 62.579133][ T929] EXT4-fs (loop4): orphan cleanup on readonly fs [ 62.592573][ T933] attempt to access beyond end of device [ 62.592573][ T933] loop2: rw=2049, want=260, limit=256 [ 62.613874][ T929] Quota error (device loop4): find_tree_dqentry: Getting block too big (196613 >= 6) [ 62.626559][ T929] EXT4-fs (loop4): 1 truncate cleaned up [ 62.633949][ T929] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 64.819538][ T937] F2FS-fs (loop5): invalid crc value [ 64.837448][ T937] F2FS-fs (loop5): Found nat_bits in checkpoint [ 64.885763][ T884] usbhid 4-1:0.66: can't add hid device: -71 [ 64.896450][ T884] usbhid: probe of 4-1:0.66 failed with error -71 [ 64.915780][ T884] usb 4-1: USB disconnect, device number 3 [ 64.929929][ T937] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 65.672977][ T375] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 65.795841][ T884] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 65.813606][ T971] EXT4-fs (loop2): orphan cleanup on readonly fs [ 65.824346][ T971] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.134: bg 0: block 248: padding at end of block bitmap is not set [ 65.840865][ T971] __quota_error: 4 callbacks suppressed [ 65.840876][ T971] Quota error (device loop2): write_blk: dquota write failed [ 65.853920][ T971] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 65.866703][ T971] EXT4-fs (loop2): 1 truncate cleaned up [ 65.873707][ T971] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 65.929557][ T23] audit: type=1400 audit(2000000016.660:285): avc: denied { read append } for pid=967 comm="syz.2.134" name="ppp" dev="devtmpfs" ino=353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.740017][ T971] syz.2.134 (971) used greatest stack depth: 20664 bytes left [ 67.042352][ T18] cfg80211: failed to load regulatory.db [ 67.064885][ T23] audit: type=1400 audit(2000000016.660:286): avc: denied { open } for pid=967 comm="syz.2.134" path="/dev/ppp" dev="devtmpfs" ino=353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 67.267789][ T884] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.281072][ T884] usb 4-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 67.290301][ T884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.316020][ T375] usb 6-1: device descriptor read/all, error -71 [ 67.447203][ T884] usb 4-1: config 0 descriptor?? [ 67.615699][ T979] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue [ 67.627493][ T979] ext4 filesystem being mounted at /26/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 67.755166][ T23] audit: type=1400 audit(2000000018.510:287): avc: denied { create } for pid=975 comm="syz.1.145" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 69.070886][ T884] usbhid 4-1:0.0: can't add hid device: -71 [ 69.084691][ T884] usbhid: probe of 4-1:0.0 failed with error -71 [ 69.150584][ T884] usb 4-1: USB disconnect, device number 4 [ 69.367539][ T999] EXT4-fs (loop1): Ignoring removed oldalloc option [ 69.499984][ T999] EXT4-fs (loop1): orphan cleanup on readonly fs [ 69.509748][ T999] Quota error (device loop1): find_tree_dqentry: Getting block too big (196613 >= 6) [ 69.520551][ T999] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 69.532032][ T999] EXT4-fs (loop1): 1 truncate cleaned up [ 69.538061][ T999] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 71.005615][ C1] sched: RT throttling activated [ 71.041839][ T1007] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue [ 71.281011][ T1012] EXT4-fs (loop2): Ignoring removed oldalloc option [ 71.492169][ T1012] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.500812][ T1012] Quota error (device loop2): find_tree_dqentry: Getting block too big (196613 >= 6) [ 71.510371][ T1012] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 71.521621][ T1012] EXT4-fs (loop2): 1 truncate cleaned up [ 71.529181][ T1012] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 71.923714][ T1021] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue [ 72.369584][ T1007] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 72.739489][ T23] audit: type=1400 audit(2000000023.500:288): avc: denied { rename } for pid=1006 comm="syz.4.139" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.891539][ T1046] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 73.261376][ T1046] EXT4-fs (loop5): invalid journal inode [ 73.268012][ T1046] EXT4-fs (loop5): can't get journal size [ 73.275107][ T1046] EXT4-fs (loop5): 1 truncate cleaned up [ 73.296130][ T1046] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 74.035688][ T18] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 74.615803][ T18] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 74.624758][ T18] usb 6-1: config 179 has no interface number 0 [ 74.633609][ T18] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 75.021661][ T1095] EXT4-fs (loop3): Ignoring removed oldalloc option [ 75.962514][ T18] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 75.975627][ T18] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 75.987682][ T18] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 75.999696][ T18] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 76.013536][ T18] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 76.023348][ T18] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.531857][ T1095] EXT4-fs: failed to create workqueue [ 78.538027][ T1095] EXT4-fs (loop3): mount failed [ 78.625768][ T1107] EXT4-fs (loop4): Ignoring removed bh option [ 78.685253][ T1107] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 78.708264][ T1107] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #3: block 2: comm syz.4.162: lblock 2 mapped to illegal pblock 2 (length 1) [ 78.723106][ T1107] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 78.731292][ T1107] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #3: block 48: comm syz.4.162: lblock 0 mapped to illegal pblock 48 (length 1) [ 78.746703][ T1107] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 78.755798][ T1107] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6102: Corrupt filesystem [ 78.766686][ T1107] EXT4-fs warning (device loop4): ext4_evict_inode:304: couldn't mark inode dirty (err -117) [ 78.777322][ T1107] EXT4-fs (loop4): 1 orphan inode deleted [ 78.783008][ T1107] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue [ 78.919197][ T7] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 78.991637][ T7] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 79.038857][ T1107] EXT4-fs (loop4): re-mounted. Opts: [ 79.375996][ T1113] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue [ 79.815827][ T18] usb 6-1: can't set config #179, error -71 [ 79.824839][ T18] usb 6-1: USB disconnect, device number 4 [ 80.320177][ T1131] EXT4-fs (loop5): Ignoring removed oldalloc option [ 80.929265][ T1127] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue [ 80.999242][ T1131] EXT4-fs (loop5): orphan cleanup on readonly fs [ 81.012619][ T1131] Quota error (device loop5): find_tree_dqentry: Getting block too big (196613 >= 6) [ 81.022296][ T1131] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 81.034141][ T1131] EXT4-fs (loop5): 1 truncate cleaned up [ 81.041197][ T1131] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 81.985468][ T23] audit: type=1400 audit(2000000032.740:289): avc: denied { create } for pid=1141 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.178839][ T1160] EXT4-fs (loop5): Ignoring removed bh option [ 84.197765][ T1160] EXT4-fs (loop5): dax option not supported [ 84.875718][ T23] audit: type=1400 audit(2000000035.630:290): avc: denied { read write } for pid=1165 comm="syz.3.175" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 84.909737][ T23] audit: type=1400 audit(2000000035.630:291): avc: denied { open } for pid=1165 comm="syz.3.175" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.133923][ T23] audit: type=1400 audit(2000000035.830:292): avc: denied { create } for pid=1170 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.169475][ T1168] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 85.179973][ T23] audit: type=1400 audit(2000000035.880:293): avc: denied { ioctl } for pid=1170 comm="syz.1.184" path="socket:[17869]" dev="sockfs" ino=17869 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.226856][ T1168] System zones: 0-2, 18-18, 34-35 [ 85.246379][ T1168] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 85.257402][ T1168] ext4 filesystem being mounted at /37/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 85.309634][ T1187] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue [ 85.347090][ T1180] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 85.437321][ T1180] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 85.452268][ T1180] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #11: comm syz.2.177: invalid indirect mapped block 4278190080 (level 0) [ 85.467001][ T1180] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #11: comm syz.2.177: invalid indirect mapped block 1 (level 1) [ 85.469843][ T879] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.481234][ T1180] EXT4-fs (loop2): 1 truncate cleaned up [ 85.493779][ T1180] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,min_batch_time=0x0000000000000008,data=ordered,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000,errors=continue [ 85.540252][ T23] audit: type=1400 audit(2000000036.300:294): avc: denied { ioctl } for pid=1166 comm="syz.4.176" path="socket:[18466]" dev="sockfs" ino=18466 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 85.632450][ T1198] attempt to access beyond end of device [ 85.632450][ T1198] loop3: rw=2049, want=260, limit=256 [ 85.885940][ T879] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 85.898286][ T879] usb 2-1: config 0 has no interface number 0 [ 85.905598][ T879] usb 2-1: config 0 interface 251 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 85.955825][ T879] usb 2-1: config 0 interface 251 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.976868][ T879] usb 2-1: config 0 interface 251 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 86.088132][ T1215] EXT4-fs (loop4): #blocks per group too big: 24576 [ 86.165944][ T879] usb 2-1: New USB device found, idVendor=05ac, idProduct=030b, bcdDevice=7d.4e [ 86.183916][ T879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.198357][ T1214] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,bsdgroups,dioread_lock,resuid=0x0000000000000000,max_dir_size_kb=0x000000000000000a,data_err=ignore,grpquota,noblock_validity,user_xattr,errors=continue,max_dir_size_kb=0x0000000000000009,,errors=continue [ 86.251829][ T879] usb 2-1: Product: syz [ 86.256085][ T879] usb 2-1: Manufacturer: syz [ 86.260965][ T879] usb 2-1: SerialNumber: syz [ 86.413843][ T879] usb 2-1: config 0 descriptor?? [ 88.853644][ T879] usb 2-1: USB disconnect, device number 3 [ 89.191756][ T23] audit: type=1400 audit(2000000039.950:295): avc: denied { create } for pid=1237 comm="syz.3.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.908080][ T1236] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue [ 90.067595][ T1248] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 90.138976][ T23] audit: type=1400 audit(2000000040.890:296): avc: denied { write } for pid=1258 comm="syz.5.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.253021][ T1248] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress, in[46, 4050] out[9000] [ 90.263736][ T1248] ------------[ cut here ]------------ [ 90.269175][ T1248] WARNING: CPU: 1 PID: 1248 at fs/erofs/decompressor.c:174 z_erofs_lz4_decompress+0x962/0xd00 [ 90.279520][ T1248] Modules linked in: [ 90.283927][ T1248] CPU: 1 PID: 1248 Comm: syz.4.192 Tainted: G W 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 90.295687][ T1248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 90.305718][ T1248] RIP: 0010:z_erofs_lz4_decompress+0x962/0xd00 [ 90.312086][ T1248] Code: c0 0f 85 21 03 00 00 45 8b 0c 24 48 89 df 48 c7 c6 4f fc 5b 85 48 c7 c2 60 d3 f7 84 8b 5c 24 24 89 d9 45 89 e8 e8 3e ec fe ff <0f> 0b 89 d8 48 c7 c7 c0 d3 f7 84 48 c7 c6 e0 d3 f7 84 ba 02 00 00 [ 90.331845][ T1248] RSP: 0018:ffff8881e2416928 EFLAGS: 00010246 [ 90.337928][ T1248] RAX: 732af331e304f000 RBX: 000000000000002e RCX: 732af331e304f000 [ 90.345850][ T1248] RDX: ffffc90002146000 RSI: 000000000000262d RDI: 000000000000262e [ 90.353840][ T1248] RBP: ffff8881e28fafd2 R08: ffffffff814d6db2 R09: 0000000000000003 [ 90.357777][ T23] audit: type=1400 audit(2000000040.970:297): avc: denied { map } for pid=1247 comm="syz.4.192" path="/41/file1/file2" dev="loop4" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.361963][ T1248] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881e2416f40 [ 90.393576][ T1248] R13: 0000000000000fd2 R14: 1ffff1103c482de8 R15: dffffc0000000000 [ 90.401476][ T1248] FS: 00007fb013ad66c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 90.410244][ T1248] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.417008][ T1248] CR2: 0000000000000002 CR3: 00000001cbb2b000 CR4: 00000000003406a0 [ 90.425084][ T1248] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 90.432882][ T1248] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 90.440909][ T1248] Call Trace: [ 90.444192][ T1248] ? __warn+0x162/0x250 [ 90.448200][ T1248] ? report_bug+0x3a1/0x4e0 [ 90.452597][ T1248] ? z_erofs_lz4_decompress+0x962/0xd00 [ 90.457965][ T1248] ? z_erofs_lz4_decompress+0x962/0xd00 [ 90.463365][ T1248] ? do_invalid_op+0x6e/0x110 [ 90.468284][ T1248] ? invalid_op+0x1e/0x30 [ 90.472618][ T1248] ? wake_up_klogd+0xb2/0xf0 [ 90.477081][ T1248] ? z_erofs_lz4_decompress+0x962/0xd00 [ 90.482543][ T1248] ? z_erofs_lz4_decompress+0x962/0xd00 [ 90.488816][ T1248] ? z_erofs_lz4_prepare_destpages+0x690/0x690 [ 90.495288][ T1248] z_erofs_decompress+0xbab/0xfc0 [ 90.500376][ T1248] z_erofs_vle_unzip_all+0x1147/0x1bf0 [ 90.506135][ T1248] ? z_erofs_onlinepage_endio+0x140/0x140 [ 90.511781][ T1248] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 90.517362][ T1248] ? _raw_spin_lock+0x1b0/0x1b0 [ 90.522181][ T1248] ? prepare_to_wait_event+0x3c1/0x420 [ 90.527900][ T1248] ? autoremove_wake_function+0xf0/0xf0 [ 90.533957][ T1248] ? finish_wait+0xa5/0x1a0 [ 90.538370][ T1248] z_erofs_submit_and_unzip+0x12d2/0x13d0 [ 90.544361][ T1248] ? z_erofs_attach_page+0x4d7/0x710 [ 90.549486][ T1248] ? z_erofs_do_read_page+0x2580/0x2580 [ 90.555038][ T1248] ? init_wait_entry+0xd0/0xd0 [ 90.559650][ T1248] ? z_erofs_vle_normalaccess_readpages+0xc70/0xc70 [ 90.566672][ T1248] z_erofs_vle_normalaccess_readpages+0x901/0xc70 [ 90.573200][ T1248] ? z_erofs_vle_normalaccess_readpage+0x630/0x630 [ 90.579846][ T1248] ? preempt_schedule_irq+0xe7/0x140 [ 90.585147][ T1248] ? retint_kernel+0x1b/0x1b [ 90.589779][ T1248] ? z_erofs_vle_normalaccess_readpage+0x630/0x630 [ 90.596216][ T1248] ? read_pages+0x106/0x400 [ 90.600956][ T1248] ? z_erofs_vle_normalaccess_readpage+0x630/0x630 [ 90.607371][ T1248] read_pages+0x119/0x400 [ 90.611543][ T1248] ? __do_page_cache_readahead+0x4f0/0x4f0 [ 90.617910][ T1248] __do_page_cache_readahead+0x448/0x4f0 [ 90.623465][ T1248] ? read_cache_pages_invalidate_pages+0x1b0/0x1b0 [ 90.629803][ T1248] ? __count_memcg_events+0x97/0x210 [ 90.635005][ T1248] filemap_fault+0xb5d/0x16b0 [ 90.640039][ T1248] ? generic_file_read_iter+0x21f0/0x21f0 [ 90.645650][ T1248] handle_mm_fault+0x33b4/0x4920 [ 90.650686][ T1248] ? finish_fault+0x230/0x230 [ 90.655424][ T1248] ? switch_mm_irqs_off+0x6b5/0xab0 [ 90.660840][ T1248] ? down_read_trylock+0x179/0x1d0 [ 90.665918][ T1248] __do_page_fault+0x509/0xbb0 [ 90.670517][ T1248] page_fault+0x2f/0x40 [ 90.674800][ T1248] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 90.681307][ T1248] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 90.701363][ T1248] RSP: 0018:ffff8881e2417b88 EFLAGS: 00050206 [ 90.707255][ T1248] RAX: ffffffff822d6e01 RBX: 0000200000000168 RCX: 0000000000000005 [ 90.715701][ T1248] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffff8881e2417c00 [ 90.723898][ T1248] RBP: ffff8881e2417cb0 R08: dffffc0000000000 R09: ffffed103c482f85 [ 90.732248][ T1248] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000028 [ 90.740027][ T1248] R13: 00007ffffffff000 R14: ffff8881e2417c00 R15: 0000200000000140 [ 90.748335][ T1248] ? _copy_from_user+0x51/0xe0 [ 90.753194][ T1248] _copy_from_user+0x90/0xe0 [ 90.757646][ T1248] sock_ioctl+0x647/0x760 [ 90.761974][ T1248] ? sock_poll+0x310/0x310 [ 90.766583][ T1248] ? __x64_sys_ioctl+0x85/0x110 [ 90.771260][ T1248] ? sock_poll+0x310/0x310 [ 90.775703][ T1248] do_vfs_ioctl+0x742/0x1720 [ 90.780157][ T1248] ? __rcu_read_unlock+0x110/0x110 [ 90.785254][ T1248] ? ioctl_preallocate+0x250/0x250 [ 90.790223][ T1248] ? __fget+0x407/0x490 [ 90.794579][ T1248] ? fget_many+0x20/0x20 [ 90.798841][ T1248] ? retint_kernel+0x1b/0x1b [ 90.803660][ T1248] ? security_file_ioctl+0x7d/0xa0 [ 90.808689][ T1248] __x64_sys_ioctl+0xd4/0x110 [ 90.813327][ T1248] do_syscall_64+0xca/0x1c0 [ 90.817951][ T1248] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 90.823929][ T1248] RIP: 0033:0x7fb01546c169 [ 90.828591][ T1248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.848776][ T1248] RSP: 002b:00007fb013ad6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.857389][ T1248] RAX: ffffffffffffffda RBX: 00007fb015684fa0 RCX: 00007fb01546c169 [ 90.865363][ T1248] RDX: 0000200000000140 RSI: 00000000000089f6 RDI: 0000000000000005 [ 90.873388][ T1248] RBP: 00007fb0154ed2a0 R08: 0000000000000000 R09: 0000000000000000 [ 90.881300][ T1248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.889559][ T1248] R13: 0000000000000000 R14: 00007fb015684fa0 R15: 00007ffe09cbcf38 [ 90.897959][ T1248] ---[ end trace 203a7213f360971a ]--- [ 90.999036][ T1262] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue [ 91.046388][ T1254] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue [ 91.113773][ T1262] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.194: bg 0: block 234: padding at end of block bitmap is not set [ 91.194541][ T1262] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 91.219067][ T23] audit: type=1400 audit(2000000041.980:298): avc: denied { write } for pid=1275 comm="syz.4.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.267541][ T1262] EXT4-fs (loop2): This should not happen!! Data will be lost [ 91.267541][ T1262] [ 91.451362][ T23] audit: type=1400 audit(2000000042.210:299): avc: denied { read } for pid=1275 comm="syz.4.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.692116][ T1254] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.195: bg 0: block 234: padding at end of block bitmap is not set [ 92.064743][ T1254] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 92.161967][ T1254] EXT4-fs (loop3): This should not happen!! Data will be lost [ 92.161967][ T1254] [ 92.613898][ T1277] F2FS-fs (loop4): journaled quota format not specified [ 92.709062][ T1292] EXT4-fs (loop5): Unrecognized mount option "uid=00000000000000000000" or missing value [ 94.147746][ T1300] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue [ 94.160526][ T1312] hub 5-0:1.0: USB hub found [ 94.165324][ T1312] hub 5-0:1.0: 1 port detected [ 94.259400][ T23] audit: type=1400 audit(2000000045.020:300): avc: denied { write } for pid=1290 comm="syz.5.201" name="event2" dev="devtmpfs" ino=10722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 94.284648][ T23] audit: type=1400 audit(2000000045.020:301): avc: denied { open } for pid=1290 comm="syz.5.201" path="/dev/input/event2" dev="devtmpfs" ino=10722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 94.310124][ T23] audit: type=1400 audit(2000000045.020:302): avc: denied { ioctl } for pid=1290 comm="syz.5.201" path="/dev/input/event2" dev="devtmpfs" ino=10722 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 96.019520][ T23] audit: type=1400 audit(2000000046.430:303): avc: denied { name_bind } for pid=1327 comm="syz.3.208" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 196.295555][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 196.302305][ C1] rcu: 1-....: (1 GPs behind) idle=20e/1/0x4000000000000002 softirq=6143/6150 fqs=4485 last_accelerate: aebe/d681, Nonlazy posted: ..D [ 196.316249][ C1] (t=10000 jiffies g=6177 q=2676) [ 196.321382][ C1] NMI backtrace for cpu 1 [ 196.325712][ C1] CPU: 1 PID: 1328 Comm: syz.3.208 Tainted: G W 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 196.337030][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.347405][ C1] Call Trace: [ 196.350531][ C1] [ 196.353403][ C1] dump_stack+0x1d8/0x241 [ 196.357583][ C1] ? panic+0x89d/0x89d [ 196.361589][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 196.367018][ C1] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 196.372660][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 196.377347][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 196.383619][ C1] nmi_trigger_cpumask_backtrace+0x28c/0x2d0 [ 196.389959][ C1] rcu_dump_cpu_stacks+0x183/0x280 [ 196.394960][ C1] rcu_sched_clock_irq+0xc5e/0x13f0 [ 196.399936][ C1] update_process_times+0x147/0x1b0 [ 196.404968][ C1] tick_sched_timer+0x22d/0x3c0 [ 196.409656][ C1] ? tick_setup_sched_timer+0x460/0x460 [ 196.415040][ C1] __hrtimer_run_queues+0x3e9/0xb90 [ 196.420273][ C1] ? hrtimer_interrupt+0x890/0x890 [ 196.425302][ C1] ? ktime_get+0xf9/0x130 [ 196.429471][ C1] ? ktime_get_update_offsets_now+0x26c/0x280 [ 196.435701][ C1] hrtimer_interrupt+0x38a/0x890 [ 196.440698][ C1] smp_apic_timer_interrupt+0x110/0x490 [ 196.446239][ C1] apic_timer_interrupt+0xf/0x20 [ 196.451393][ C1] [ 196.454765][ C1] RIP: 0010:_raw_spin_unlock_irq+0x45/0x60 [ 196.460624][ C1] Code: 08 00 74 0c 48 c7 c7 90 3c eb 85 e8 05 02 3d fd 48 83 3d 5d 09 94 01 00 74 29 48 89 df e8 53 d4 f4 fc 66 90 fb bf 01 00 00 00 86 be ed fc 65 8b 05 3b 5a ab 7b 85 c0 74 02 5b c3 e8 c4 20 a9 [ 196.480210][ C1] RSP: 0018:ffff8881cba07c20 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 196.488732][ C1] RAX: 0000000000000001 RBX: ffff8881e4b2abc0 RCX: dffffc0000000000 [ 196.497017][ C1] RDX: ffffc90001d45000 RSI: 000000000007ffff RDI: 0000000000000001 [ 196.505097][ C1] RBP: 0000000000000000 R08: ffffffff813e99a9 R09: ffffed1039740fc4 [ 196.513456][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881e10865f0 [ 196.521266][ C1] R13: dffffc0000000000 R14: 0000000000000011 R15: 0000000004000000 [ 196.529387][ C1] ? get_signal+0x1339/0x1440 [ 196.533962][ C1] get_signal+0x137e/0x1440 [ 196.538400][ C1] do_signal+0xb0/0x11f0 [ 196.542617][ C1] ? _copy_from_user+0xa6/0xe0 [ 196.547413][ C1] ? restore_altstack+0x274/0x400 [ 196.553190][ C1] ? _raw_spin_unlock_irq+0x4a/0x60 [ 196.558444][ C1] ? signal_fault+0x1e0/0x1e0 [ 196.563042][ C1] ? restore_sigcontext+0x3fe/0x4c0 [ 196.568132][ C1] ? __ia32_sys_rt_sigreturn+0x17d/0x210 [ 196.573564][ C1] ? setup_sigcontext+0x3f0/0x3f0 [ 196.578414][ C1] exit_to_usermode_loop+0xc0/0x1a0 [ 196.583449][ C1] prepare_exit_to_usermode+0x199/0x200 [ 196.588929][ C1] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 196.594767][ C1] RIP: 0033:0x7f504a2c9169 [ 196.599073][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.619289][ C1] RSP: 002b:00007f50489330e8 EFLAGS: 00000246 [ 196.625539][ C1] RAX: fffffffffffffffc RBX: 00007f504a4e1fa8 RCX: 00007f504a2c9169 [ 196.633447][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f504a4e1fa8 [ 196.641333][ C1] RBP: 00007f504a4e1fa0 R08: 0000000000000000 R09: 0000000000000000 [ 196.649275][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f504a4e1fac [ 196.657246][ C1] R13: 0000000000000000 R14: 00007ffe4beb7f50 R15: 00007ffe4beb8038