last executing test programs: 4m22.515766657s ago: executing program 4 (id=247): sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, 0x0, 0xb) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) splice(r3, 0x0, r6, 0x0, 0x80, 0x4) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4m21.100853069s ago: executing program 4 (id=253): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000014007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010008000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 4m21.020600141s ago: executing program 4 (id=255): openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 4m20.933664382s ago: executing program 4 (id=257): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x91905a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000dc0)='./file0/file0\x00', 0x0, 0x1145d10, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004480)={0x2020}, 0x2020) 4m20.822970943s ago: executing program 4 (id=261): madvise(&(0x7f00009c6000/0x1000)=nil, 0x1000, 0x80000000e) mremap(&(0x7f0000142000/0x1000)=nil, 0x1000, 0x800000, 0xd0990dba3498aa2e, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x2000018, &(0x7f0000000500)=ANY=[], 0xfe, 0x1c7, &(0x7f0000001100)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() prlimit64(r0, 0xc, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) r4 = syz_open_procfs(r0, 0x0) read(r4, &(0x7f0000006240)=""/4082, 0xff2) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 4m20.686487606s ago: executing program 4 (id=266): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@setneightbl={0x14, 0x43, 0x1, 0x70bd29, 0x25dfdbfc, {0x2}}, 0x14}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4m20.639399896s ago: executing program 32 (id=266): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@setneightbl={0x14, 0x43, 0x1, 0x70bd29, 0x25dfdbfc, {0x2}}, 0x14}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 16.691706363s ago: executing program 5 (id=985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x550}, 0x1, 0x0, 0x0, 0x800}, 0x890) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) rt_sigtimedwait(&(0x7f0000000100)={[0x7]}, &(0x7f0000000880), &(0x7f0000000900)={0x0, 0x989680}, 0x8) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x1, 0x0, &(0x7f0000000000)=0xf) 15.136995806s ago: executing program 5 (id=989): madvise(&(0x7f00009c6000/0x1000)=nil, 0x1000, 0x80000000e) mremap(&(0x7f0000142000/0x1000)=nil, 0x1000, 0x800000, 0xd0990dba3498aa2e, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x2000018, &(0x7f0000000500)=ANY=[], 0xfe, 0x1c7, &(0x7f0000001100)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() prlimit64(r0, 0xc, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) r4 = syz_open_procfs(r0, &(0x7f0000002140)='smaps_rollup\x00') read(r4, &(0x7f0000006240)=""/4082, 0xff2) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{0x0}], 0x1, 0x0) 12.531364677s ago: executing program 3 (id=994): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1, 0x363, &(0x7f0000000280)="$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") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 10.282626031s ago: executing program 2 (id=995): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) 9.686118591s ago: executing program 1 (id=997): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, &(0x7f0000000340)=0x700) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000000040)='./file0\x00', 0x208008de, &(0x7f00000004c0)=ANY=[], 0x82, 0x1503, &(0x7f0000000580)="$eJzs3AuYj1XXMPC99t43Y5L+TXIY9trr5p8G2yRJDgk5JEmSJDklJCZJEhJDTklDEnKcJIchJIdpTBrn8yHnpMkjTZKE5BT2d+np/Tzv0/O+fe9X3+e93lm/69qXvdz/tf7rnjXX3Pf9v66Z73uOqtu8Xq2mRCT+FPj7P8lCiBghxDAhxA1CiEAIUTGuYtyV4/kUJP+5N2F/rUfTrnUH7Fri+eduPP/cjeefu/H8czeef+7G88/deP65G8+fsdxs+5yiN/LKvYs//8/N+Pr/P0hOuclfbyx3c6//QgrPP3fj+eduPP/cjeefu/H8czee//98Nf+TYzz/3I3nz1hudq0/f+Z1bde1/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY7nPNXaSHEv+2vdV+MMcYYY4wxxhj76/i817oDxhhjjDHGGGOM/b8HQgoltAhEHpFXxIh8IlZcJ/KL60UBcYOIiBtFnLhJFBQ3i0KisCgiiop4UUwUF0agsIJEKEqIkiIqbhGlxK0iQZQWZURZ4UQ5kShuE+XF7aKCuENUFHeKSuIuUVlUEVVFNXG3qC7uETVETVFL3Ctqizqirqgn7hP1xf2igXhANBQPikbiIdFYPCyaiEdEU/GoaCYeE83F46KFeEK0FK1Ea9FGtP2/yn9Z9BWviH6iv0gWA8RA8aoYJAaLIWKoGCZeE8PF62KEeEOkiJFilHhTjBZviTHibTFWjBPjxTtigpgoJonJYoqYKlLFu2KaeE9MF++LGWKmmCVmizQxR8wVH4h5Yr5YID4UC8VHYpFYLJaIpSJdfCwyxDKRKT4Ry8WnIkusECvFKrFarBFrxTqxXmwQG8UmsVlsEVvFNrFdfCZ2iJ1il9gt9oi9Yp/4XOwXX4gD4kuRLb76L+af/af8XiBAgAQJGjTkgTwQAzEQC7GQH/JDASgAEYhAHMRBQSgIhaAQFIEiEA/xUByKAwICAUEJKAFRiEIpKAUJkABloAw4cJAIiVAebocKUAEqQkWoBJWgMlSBKlANqkF1qA41oAbUglpQG2pDXagL98F9cD80gAbQEBpCI2gEjaExNIEm0BSaQjNoBs2hObSAFtASWkJraA1toS20g3bQHtpDR+gInaATdIbOkARJ0BW6QjfoBt2hO/SAHtATekIv6A294WV4GV6BV6A/1JYDYCAMhEEwCIbAUBgKr8FweB1ehzcgBUbCKHgT3oS3YAycgbEwDsbDeKguJ8IkmAwkp0IqpMI0mAbTYTrMgJkwE2ZDGsyBuTAX5sF8mA8fwkL4CD6CxbAYlkI6pEMGLINMyITlcBayYAWshFWwGtbAalgH62EdbIRNsBG2wBbYBtvgM/gMdsJO2A27YS/shc/hc/gCvoAUyIZsOAgH4RAcgsNwGHIgB47AETgKR+EYHIPjcBxOwEk4BSfhNJyGM3AWzsE5uAAX4CK8GP9ts72lN6QIeYWWWuaReWSMjJGxMlbml/llAVlARmRExsk4WVAWlIVkIVlEFpHxMl4Wl8UlSpQkQ1lClogRQshSspRMkAmyjCwjnXQyUSbK8rK8rCAryIryTllJ3iUryyqyg6smq8nqsqOrIWvKWrKWrC3ryLqynqwn68v6soFsIBvKhrKRbCQby4dlEzkAhsCj8spkmsuR0EKOgpaylWwt28i34EnZTo6B9rKD7CifluNgLHSW7VySfFZ2lZOgm3xeToYXZA85FXrKl2Qv2Vv2kS/LvrK96yf7yxkwQA6Us2GQHCyHyKFyHtSRVyZWV74hU+RIOUq+KZfCW3KMfFuOlePkePmOnCAnyklyspwip8pU+a6cJt+T0+X7coacKWfJ2TJNzpFz5QdynpwvF8gP5UL5kVwkF8slcqlMlx/LDLlMZspP5HL5qcySK+RKuUqulmvkWrlOrpcb5Ea5SW6WW+RWuU1ul5/JHXKn3CV3yz1yr9wnP5f75RfygPxSZsuv5EH5N3lIfi0Py29kjvxWHpHfyaPye3lM/iCPyx/lCXlSnpI/ydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaDyqLwqRuVTseo6lV9drwqoG1RE3aji1E2qoLpZFVKFVRFVVMWrYqq4MgqVVaRCVUKVVFF1iyqlblUJqrQqo8oqp8qpRHWbKq9uVxXUHaqiulNVUnepyqqKqqqqqbtVdXWPqqFqqlrqXlVb1VF1VT11n6qv7lcN1AOqoXpQNVIPqcbqYdVEPaKaqkdVM/WYaq4eVy3UE6qlaqVaqzaqrXpStVNPqfaqg+qonlad1DOqs+qiktSzqqt6TnVTz6vu6gXVQ72oeqqXVC/VW/VRl9Rl5VU/1V8lqwFqoHpVDVKD1RA1VA1Tr6nh6nU1Qr2hUtRINUq9qUart9QY9bYaq8ap8eodNUFNVJPUZDVFTVWp6l01Tb2npqv31Qw1U81Ss1WamqOG/FZpwT/lD/jtqvuP+e/9i/wRv777NrVdfaZ2qJ1ql9qt9qi9ap/ap/ar/eqAOqCyVbY6qA6qQ+qQOqwOqxyVo46oI+qoOqqOqWPquDquTqiT6rz6SZ1WP6sz6qw6q86rC+qCuvjb10Bo0FIrrXWg8+i8Okbn07H6Op1fX68L6Bt0RN+o4/RNuqC+WRfShXURXVTH62K6uDYatdWkQ11Cl9RRfYsupW/VCbq0LqPLaqfL6UR925/O/6P+2uq2up1up9vr9rqj7qg76U66s+6sk3SS7qq76m66m+6uu+seuofuqXvqXrqX7qP76L66r+6n++lknawH6lf1ID1YD9FD9TD9mh6uh+sReoRO0Sl6lB6lR+vReoweo8fqsXq8Hq8n6Al6kp6kp+gpOlWn6ml6mp6up+sZeoaepWfpNJ2m5+q5ep6epxfoBXqhXqgX6UV6iV6i03W6ztAZOlNn6uV6uc7SK/QKvUqv0mv0Gr1Or9Mb9Aa9SW/SW/QWnaW36+16h96hd+ldeo/eo/fpfXq/3q8P6AM6W2frg/qgPqQP6cP6sM7ROfqIPqKP6qP6mD424Lg+rk/oE/qUPqVP69P6jD6jz+lz+oK+oC/qi/qyvnzlti+QgQx0oIM8QZ4gJogJYoPYIH+QPygQFAgiQSSIC+KCgsHNQaGgcFAkKBrEB8WC4oEJMLABBWFQIigZRINbglLBrUFCUDooE5QNXFAuSAxuC8oHtwcVgjuCisGdQaXgrqByUCWoGlQL7g6qB/cENYKaQa3g3qB2UCeoG9QL7gvqB/cHDYIHgobBg0Gj4KGgcfBw0CR4JGgaPBo0Cx4LmgePBy2CJ4KWQaugddAmaPuX1vf+TOGnXD/T3ySbAWagedUMMoPNEDPUDDOvmeHmdTPCvGFSzEgzyrxpRpu3zBjzthlrxpnx5h0zwUw0k8xkM8VMNanmXTPNvGemm/fNDDPTzDKzTZqZY+aaD8w8M98sMB+aheYjs8gsNkvMUpNuPjYZZpnJNJ+Y5eZTk2VWmJVmlVlt1py/UQiz3mwwG80ms9lsMVvNNrPdfGZ2mJ1ml9lt9pi9Zp/53Ow3X5gD5kuTbb4yB83fzCHztTlsvjE55ltzxHxnjprvzTHzgzlufjQnzElzyvxkTpufzRlz1pwz580F84u5aC6Zy8Zfubm/cnlHjRrzYB6MwRiMxVjMj/mxABbACEYwDuOwIBbEQlgIi2ARjMd4LI7F8QpCwhJYAqMYxVJYChMwActgGXToMBETsTyWxwpYAStiRayElbAyVsaqWBXvxrvxHrwHa2JNvBfvxTpYB+thPayP9bEBNsCG2BAbYSNsjI2xCTbBptgUm2EzbI7NsQW2wJbYEltja2yLbbEdtsP22B47YkfshJ2wM3bGJEzCrtgVu2E37I7dsQf2wJ7YE3thL+yDfbAv9sV+2A+TMRkH4kAchINwCA7BYTgMh+NwHIEjMAVTcBSOwtE4GsfgGByL43A8voMTcCJOwsk4BadiKqbiNJyG03E6zsAZOAtnYRqm4Vyci/NwHi7ABbgQF+IiXIRLcAmmYzpmYAZmYiYux+WYhVm4ElfialyNa3Etrsf1uBE34mbcjFtxK27H7bgDd+Au3IV7cA/uw324H/fjATyA2ZiNB/EgHsJDeBgPYw7m4BE8gkfxKB7DY3gcj+MJPIGn8BSextN4Bs/gOTyHF/AXvIiX8DJ6jLFSxNrrbH57vS1gb7AxNp/9x7iILWrjbTFb3BpbyBb+dzFaaxNsaVvGlrXOlrOJ9rbfxZVtFVvVVrN32+r2Hlvjd3F9e79tYB+wDe2Dtp6977c4769xI/uQbWwft03sE7apbWWb2Ta2uX3ctrBP2Ja2lW1t29hO9hnb2XaxSfZZ29U+97s4wy6z6+0Gu9FusvvtF/acPW+P2u/tBfuL7Wf722H2NTvcvm5H2Ddsih35u3i8fcdOsBPtJDvZTrFTfxfPsrNtmp1j59oP7Dw7/3dxuv3YLrSZdpFdbJfYpb/GV3rKtJ/Y5fZTm2VX2JV2lV1t19i1dt3/7nWV3WK32m12n/3c7rA77S672+6xe3+Nr5zHAfulzbZf2SP2O3vIfm0P22M2x377a3zl/I7ZH+xx+6M9YU/aU/Yne9r+bM/Ys7+e/5Vz/8lespett4KAJCnSFFAeyksxlI9i6TrKT9dTAbqBInQjxdFNVJBupkJUmIpQUYqnYlScDCFZIgqpBJWkKN1CpehWSqDSVIbKkqNylEi3UXm6nSrQHVSR7qRKdBdVpipUlarR3VSd7qEaVJNq0b1Um+pQXapH91F9up8a0APUkB6kRvQQNaaHqQk9Qk3pUWpGj1Fzepxa0BPUklpRa2pDbelJakdPUXvqQB3paepEz1Bn6kJJ9Cx1peeoGz1P3ekF6kEvUk96iXpRb+pDL1NfeoX6UX9KpgE0kF6lQTSYhtBQGkav0XB6nUbQG5RCI2kUvUmj6S0aQ2/TWBpH4+kdmkATaRJNpik0lVLpXTqb3qXIlXu9GTSTZtFsSqM5NJc+oHk0nxbQh7SQPqJFtJiW0FJKp48pg5ZRJn1Cy+lTyqIVtJJW0WpaQ2tpHa2nDbSRNtFm2kJbaRttp89oB+2kXbSb9tBe2kef0376gg7Ql5RNX9FB+hsdoq/pMH1DOfQtHaHv6Ch9T8foBzpOP9IJOkmn6Cc6TT/TGTpL5+g8XaBf6CJdosvkSYQQylCFOgzCPGHeMCbMF8aG14X5w+vDAuENYSS8MYwLbwoLhjeHhcLCYZGwaBgfFguLhybE0IYUhmGJsGQYDW8JS4W3hglh6bBMWDZ0YbkwMbwtLB/eHlYI7wgrhneGlcK7wsphlfDxB6uFd4fVw3vCGmHNsFZ4b1g7rBPWDeuF94X1w/vDBuEDYcPwwbBC+FDYOHw4bBI+EjYNHw2bhY+FzcPHwxbhE2HLsFXYOmwTtg2fDNuFT4Xtww5hx/DpsFP4TNg57BImhc+GXcPn/vB4cjggHBi+Gr4aev+AWhJdGk2PfhzNiC6LZkY/iS6PfhrNiq6Iroyuiq6Oromuja6Lro9uiG6Mbopujm6Jbo1ui3pfL69w4KRTTrvA5XF5XYzL52LddS6/u94VcDe4iLvRxbmbXEF3syvkCrsirqiLd8VccWccOuvIha6EK+mi7hZXyt3qElxpV8aVdc6Vc4mujWvr2rp27inX3nVwHd3T7mn3jHvGdXFd3LOuq3vOdXPPu+7uBdfDvehedC+5Xq636+Nedn3dK66f6++SXbIb6Aa6QW6QG+KGuGFumBvuhrsRboRLcSlulBvlRrvRbowb48a6sW68G+8muAlukpvkprgpLtWlumlumpvuprsZboab5Wa5NJfm5rq5bp6b5xa4BW5hwkK3yC1yS9wSl+7SXYbLcJku0y13y12Wy3Ir3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt8vtcnvcHrfP7XP73X53wB1w2S7bHXQH3SF3yB1237gc96074r5zR9337pj7wR13P7oT7qQ75X5yp93P7ow768658+6C+8VddJfcZeddauTdyLTIe5HpkfcjMyIzI7MisyNpkTmRuZEPIvMi8yMLIh9GFkY+iiyKLI4siSyNpEc+jmRElkUyI59Elkc+jWRFVkRWRlZFVkfWRLwvtiP0JXxJH/W3+FL+Vp/gS/syvqx3vpxP9Lf58v52X8Hf4Sv6O30lf5ev7Kv4qv4J39K38q19G9/WP+nb+ad8e9/Bd/RP+07+Gd/Zd/FJ/lnf1T/nu/nnfXf/gu/hX/Q9/Uu+l+/t+/iXfV//iu/n+/tkP8AP9K/6QX6wH+KH+mH+NT/cv+5H+Dd8ih/pR/k3/Wj/lh/j3/Zj/Tg/3r/jJ/iJfpKf7Kf4qT7Vv+un+ff8dP++n+Fn+ll+tk/zc/xc/4Gf5+f7Bf5Dv9B/5Bf5xX6JX+rT/cc+wy/zmf4Tv9x/6rP8Cr/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vb/Pb/Wd+h9/pd/ndfo/f6/f5z/1+/4U/4L/02f4rf9D/zR/yX/vD/huf47/1R/x3/qj/3h/zP/jj/kd/wp/0p/xP/rT/2Z/xZ/05f95f8L/4i/6Sv8y/s8YYY4wx9n9E/cHxAf/i/+Rv64qBQojrdxbN+eeamwv9fT9YxneKCCGe7d/z0X9btWsnJyf/9tosJYKSi4UQkav5ecTVeIXoKJ4RSaKDKP8v+xsse1+gP6gfvVOI2KuVfxUr/rn+7f9B/SefHp9RKTwX95/UXyxEQsmrOfnE1fhq/Qr/Qf3C7f6g/3xfpwrR/h9y8our8dX6ieIp8ZxI+nevZIwxxhhjjDHG/m6wrNr9j56frzyfx+urOXnF1fiPns8ZY4wxxhhjjDF27b3Qu0+XJ5OSOnTnzZ/Y1Pjv0QZvePOXba71TybGGGOMMcbYX+3qTf+17oQxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu9/n/8ObFrfY6MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYtfa/AgAA///mJjhh") mkdir(0x0, 0x1d1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r4, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 8.794455735s ago: executing program 0 (id=998): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x10000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x54f9, &(0x7f000000ab40)="$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") pipe(&(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400), 0xc, &(0x7f00000005c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x44081) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000440), 0x1000a) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000f00)='.\x00', 0xa1a438, &(0x7f0000000100)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) 8.083444456s ago: executing program 2 (id=999): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000022c0)=ANY=[@ANYBLOB="1800000000611960f8ff6da883dbc7e8aa5e9f0000000000950000000000000000efffffff000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006100)="d1f89c14e7f8640b43b1f1d1e00b2b0b3146d223d281c321953af4ade40d696d07f4b7d2ed1c1fd5691291056351901df48500519139568c88f49bb32801f1eb24b30efbab27313a3acab179fd6ce1f7150b0f0aae8cde4dd46b4f63cd60f647ea9bcf83f107e981a050f61f5d1bb5c7883f93269bba25e4122796c0f88ab27d913586d055f8c977ffcb05c85210f93cbad91499fedb2ab95e06bf009e54b422f66cef043560f4d77ae5c083cc67fcb0d3f10699aac8cceaf6d3b8f32e15555924edbc42b4ca3d2f4a92f5d30c18176c3abd17db4de2ef74472ffb637dd07460aeb7c882811c089217d88cbb5eec41d2be903e1c65cad2ad742f9ba8b512adab575f89d539492034ddfe4fd28205c8f27c52f0f631703d384634bfcad149ea9e842125062ac67006ca474be31f708b4f4f1e0c97a4eb2f26b671e172e251e8a6e9e1510bb74931aaf6b6ff84f8aefd63591f18f2ae8028985d78fcc5ed2d57bf595d3068e904387eeddd19bd359721a432bed0bff033cbca6acfddb6529fb11290bf1563b45034bd9b6c331091efef04303ca9942fcb64e56f3ff74d610e14c8f8a87e41582aebb272e5d6e945fdc7095bd181b93f13ddbdc18545f9cfc4db7f134c9ffa6add6727ab8755a06dca23d24a67658fda84321bb97fc475ace3b9912dad73f0ee6c8b2d6d58d7328ca63d1aeceb22a419fe4ec4c3b943051e9d276c559c33e6a45a97813bfcf80c7d79ebe04b1827878c4c8c2da2d598f9f3e444ae82f142716827dddcd94f8997d88a30be2a76432641125e28d5a0896b3e040a8b6805abc98da90844261468826b89f6cbac8d7b5eb6cd8a23f7c7ae9b99dfa6616f9dd10ac48e8c53a38ebfcee8c0ae1be1ee982515ce12a1ebf5d2d1902203007a9bd062c453845ce75f54dd07e3d8079e19b3b116dc51f7a07d005ba682da13b73e3854bb60059fb021b8f4b9430629d408b32ccd3678bf1dc149a3493c44b2a52a5572c128957e0db8a4a214848b64bea6733bb48fc17a4e42474e2b1f47b507d038bb87a3fc32e7bf471685a61f736a414772cc1825e9342c58768640c83486dbf058050dd6c8a9843c106d1a4efa5e5b36deae71448e55f4ef2721d2d210ce075bdc52c97bd6c097a9a4120a507f6c99cd9054579c250cd5b207684deadf75f2f8c54349a57500625be7577fd6c81ca72111935f577c74c2bd1e9419344e2a3563b5a7d6026722469a30a061d123b45f93027a01c7d38863589118d25e333c07f5c3eb85d4dde937d8f1421b72035f8733754ef4793acdc8d1362ef08ac1e9f0246bfb478647ada002f809a3e63433d031e6d5e4f86218ace6a6221103608705719c3106b4659c377f7e3b6ae1777075ea45a68df2004deb6ef742c5971c23d409278be94c5de68153d93d1a2378f1b1656786ec896b72de0da8259a6f181be8829f9cb7cb98ce0b169e734e4a240508952f6ce3ca984eef7e0cd549996147fe56a0bb1598f015ab955df145a51d783397366084e53455840d5688cb9b7d2cdf8abbfcdf850a7de4073eada567d6ca989611c4910e692e44677a857eec2b654f8dc66b2be192786dce3b9780f9806652bdef013304a43dba3f8d15e5105414f6d1fb2a57dea02211fa311b489088a9802e36d649ada97d72a216f54ca6da090a51c01f5638a04f364a3cbf24bb374f644fda38856a7e0f5c3c9cd7b00555d105daf57561379cf1d77bce66d12de44f202a866a43a7a05a6e0910a1f0ab5b1341d8ae992ae9d95fa2c876db1bcd3635d7851f03dde1eddae6dcf95b182edab72a0521c88c8c3a8c2ad3c6ec2cc44321ce1550d51476e95a18ae5fdab801ef4f5a7a56580261d850f392929061ae5808ba390b2f7d8fe7325df9c07c39faadeeb0ee1ed95db7ccf49c9b93fca83e06be745156d422c8b936d65b8e7e76d9eeb2bbf19c1f9a59b8ee6b55d594d4794a869b2d3b37b0b936866894f00e6a90c788c22e0fb87d0ac53ce75e519765647deee2862552c77ceb75d419627e0627067ba24571807cbfae0bd959fa95cb14c2812a1ce41f76d2ad620c55df55f473e56cb219f7b13bed8cc4a98dddfda9d3b9b5650754f73c34bf00496993a1c4056aeb44e4160c3e2090d733604b2b13f40ae346b726a31365b7a230d8f66665dcb726594280678a258f8ddddfe69d424d62abe910db05c0efa5e773d0f6d8ef8c4c49926b46568a7a1321d996eacabb2f716539a020e34a02afc3bfead458287dd2050000000000000068853637dba0b2eb5e5318750b63c829ab0145c02d6bc05aef4113ee0ea0ba97c44d74cedcc89adff648eb5d7fe932a7a76c772b1e2e36c148dd3be951cfa0cfe11bc58635b38708fa1ff88f949eb15f4a4a3de71c33e2915c799d8204d7d1f9cf7c13c608e6ddf29e12b409028ee5edf37353df7982f67a120ff1871001094b1a3148ed5f4f75d9372aa21b2bb6e02b470336a2c20efee8af866032acd6dc56d1fa7a84dc314cafea1a7bba5fbae89e037a4a5597d2eefd153406d67ddbb3b4eeed6d981b229c2c1b76347b05d20835ecc979b697a2981f6785df853d3d5ce07c624136c805d4dc6c7419d68afe2ad4822aea38da761742b33de8394bcd2462518b35c6ef265eb2a9b130e5a3d669b55d457f92500a7b69156475e001989d55547fc831edf2afe2290591e902858914af73ad4e87ddb8ea3a719f435fe1c2839a39fe088ccc863e7c82e96b66e1b6d32ddbdc42bf2f6076b9e93ed2ec4b6ba6fce5dd3a8f5b3aa105aecf72a5cc9108d02a0b923de2d490ad90aed3a45c46d4594948e7b3f3cc7d153f4b2837ca378fb4af215657f016fd9c66395b98357c1d12a655ce07268beccb35acb3f928c1522bea5df98a0337c751308bfb361e68f3775c75e020ac9570283119264d4f8916c143ccc28d8e0709df356de6b6f35fccde79a677606b5b4d846fdad7c271fc5c2ae5f5e2fbcd6fbf21508a2615ab8f0208e276164bce80fb886b648b4cb085c7922a829c2bccdd850cec329870c866f7923c2c1cd59d6c2653263f7aa1f13d84c82575a021793ef875954ce8737c98abee465e780ab64f1d23da92828e62908543850e5730099eb34f5e47dee740581f596413b8e2711bbfc9d25e4a35b57416a741a60ba650b52ae2189cdd125f64565544f9e75bd8c2cbd898ed2dbdd704ee40d1746715eab4155a51289cf7d89a19ab7a355609dff8111c94f6cdf94a94c667508d7201eab7e86569b8b08bca2291cf3fb166df68f6d6da05398e8a1c0c5c66ca3cee621727a77f19b92927569ba44709302c1102683f338150989d971ea6d0151b69865e540ad4e5a186ad9fc8ce57a56ad114487c5ad99c0beae0fd49927c52380de839cc952f8e41e167006573b4ffc39ebec8f9f9fb4168386a78fe52c00cf3c3be6dbcd4ab32ac7cb8fdd1bae70a5c3da6f555aa6c8e6bd7e668391bd5d87e39ee21f9035b0b14dd50b3c4e211794bfd7e8fbc48658044eab550f6b564d8f663c25ddb30233fb260e2d30bc9956f7293fd5532df2f74019f639c7313ca029280c513c2fc3c77dc4d0e7f5a9f273fda00349c28319743bc8f7eaeacc7f487bcf5866a55b2fa5b66e31964f090ac448a1ccd3b8cbc9735db5d7d1dd2f2bcdad1ee48b4f8a36688d8ddead1f166a5afb2efe12e943ce6ca41f1f45fe650536860881c28ff04a66ddce9cd19b4304c26e3238f114a1f4080999aaf6ff1f4b8b59ef5d54c10cd8a6598420949f1c0eff13259ba7da9f4c749b58f31f01627b780c2502cc6d1d82f68271e2bc945ddcb6784532e1aba414385096eeeb45afca0ddec570b16b476fbf7b4818275a05afe4beec9086e1c816ebf96608ed57a570c931577ca5b14c9359718b4b31b4789f291f5cb012f832e5763ba53521f58d3ee0a10930d3b4ea7747c5c751cfb476159287a9d371530e5d7cffa6ab09f049d2435960b0ad34f7890df22a3cfd6ce052b08409e67a1291f8459a59b988d7b97d2534f306d83656fd43313eebce1732837b6c22dc60a80d03c54b695b4efbf31381916c7da9644ef8e0f6739c98e7892ca89bf696715391c989c3bd53362e01b81d998e50e46fab088f9312465d200c034691b7e5dcb22ead3c3f3225f16a5588b2be09470e225290d8073dce5cd955d31e7acd452950505597f01c4b54a6f16f2e7d00ab182258f26e40bb70db783b2a10aae019f87708e1306e1957fcc081dac3659d603d4044c10b0a1fe61f4482e56d031d43fc355100a9dcf822db16d0895e554b439bd032e6103df725123da3fdd4a48b68863e6bb36e05343136e171d39d86168be30188bf1ebac4a1d748115167033149ac61bb4f8d4cad7f4c68c32de226b03fb42d24d5e37ba886fa357100644e64d869f6395e3d6d3768a30f53e2aca3688408807bd4818a2c5150f8ee770121a4a6402c7dc334a9ee5e876566d19867e45d4bdc73477ff7f543a23f38d5f0bf666219b0391e66457af4238c5bd9a05586333556f8972aca1def4507c4b073d1bc1c3051f0bf34f71673ccc1de9c69170c9fc5299ac733569cfde6a7bbb3cd60b601cfca16510bf7fbb26ffab3b674000844daf55fbf4ab48eade708cf7f5de901454acc8cc95c63fd2ee771bffaf19205e9a119b847931bcfb4c738e39701a3882cef4ff47b46b72ce26ac207a1ccaa253cd3ddae2b2eb61d5b9b3c8156928a169d7dbb2874b884c3b2097cb8ea92ce7fe70af90514c11887df33c4f7ec3d3ee6c327e7129b0188b0ca8c777451b17d8f489d547d711404bef72d1914f66a5676e9d716ede8c4282526419adb31d071d241db47a58bb55ee6ebcb67c82765a25e5e6fedc4c8d1d9b17e2b5bac5e0af3c63ea870ad8c5f9521390b660fc735d331e6eb326abde284256cdb381b4651d05f55807f4ad1b5b883bf6b55ee87285fad8de366f3248ae0b9c32bf85fc95d5bc19a716ac2a5f41e4e58d26bfdfa582be5d506f9929bfe7cea70184c81722ef7300f779d5d64c08a225a083d44ce75ced73f3a016f5047af67245bc8a81214024e905f383252cc0228085aa5fc184cbcb41db3eccede89480e0a1c1d1754cc3ffa53edc27c337ec86ae2f68c6225edb0027c1c5bf9aee1b94b62f6144e4631887272a36add32d908add308207559064cd61576f917db864845e5e89efcb27c80d259eb6fd5fca398da0c7e62fc423511bb8eb3969732c862de33448e95aa5e15d2028b84b3b8348a50abb39c5c10ac7fdc2034d1ceeae9870dc4486f48ac6aae573a775716ec380ed57665b9bf1c77f6869f720e428f8b94170b14c23786ff1cacf95a66ae631c70245bf264ce5078c3bddb4aaa7928eb6f1261d52e45ae5fde6f1b3bff90cd560c6c2f77ecfcf553db137051685c925be70def2be6c9bdd5825eac58d4c892a6d4ad5dcc078c6582ca140e5a75993e5ab7b487f31e5c601844f18f13039c099317f5e512eb9e054dcd8535106a9bd8977bf74254b68753b7f3a9b385d4a38ccaa17e029bd9ab4ff9b9b561b2a7e613ea05eb18a50fc231f32b79b9f32514469193a3d12269f58f3c932e501513e48e81774ad389275d9f00b4f8c677b8bb584b503201f83c7ad2e934e909f9ae1fc540f544dd2327fe1d8e3bb86984a252e2ffa88e2aed6d65a302d1883e51654fdb046d35270130fb9f8e4a4861d7278a07ee627fe272dcf99d294d7b1ce72f2f804cddfe4fa7aeb2c9543ef2665bf826c8ce0ca82dc7d4e57b7181b55a5d96ad83417b79376793235ed5a320a3ffac3a025aefa669450a6df20d830042034c0953836097c9461bc0d9c1446485692d1b9d5c991086f3f118a49bfe2a0888a5af8a868d880e31946dbd0c7ddcfcd27dcf5c62c9c5ff8fa9750d129f32e3c4f524eb3c31d5c9cb33fbcf52384a04a9f4faa216020e45be91181efeb7393d96b1f3ad8e9fadcffe49bec1bf36e70c2291475356ec5a416feb5d3b4f1331052271679d1186b338163682ac5b6bb79c64d6d0f8ddfec84d0d9870f45a64413f529c8dd93b358e66c9da2fd233e53b73ae2761f363ee69a38a0d7320a149c90c086e6a426abca5c461088747a2fb5006919ad7640aad79b1ec03cf6f49206f37382ad3105fcbd0e08d00815029d8cc3ca16472e58226f1def116bfab456c32a2a2323bb5a661eacb3b7c915d1eaa8c5aa8b1bf25c3a7bc9a2e047c499d8f2fbf2fe25606fc7f0ae5a539af68830b1955f82962f596e2ad0feb3e99b1982ffe3e553f102b4360b8e1d659575a8f713b8bb88d97dbcfd98f91c147a97e896646a47a43334569da8a01541b012063e0465c4122cb96b57484b0ab8c5f0c8f346c0766be69decf4e3ebef7f74f153ef8c6b6e9c5fe224e8f995f11c1867c5600cd7a345afacafec9076d4ccfca741fd41e445478a3b71a5f06b0d0cf596c755235408782a5e37abeb1f2dad79c83e59a1040c4b3b6a5a2acce9df0ebdb607c9c0549a4b16028595f7a9cd9da115dab0189f3d98b0dc2b8ddf6be4de2b38421a2071d91f14f8752c74df31fecb64de59dce09da2c3a1a2826446d982509baaa89b76379d8320bf3c1f76448e0ddc0889fe57ba756ab1403949cd2ca9ab520fa485576eca5acb471002a14a31e8d7f54c8c3edda8f416b0ae9d9fdfc445b54ed8fb34ed7c1d11b3c57a2c5ad92217ab2fdebafc195d09fee7a518e027ccf9d2e8de8cef1e0ad52144d82b65519495b8a5c314e85361adca8953dce587cf461a461dc9bbc0eb13a54144964930d80d8b4a015676f3efd10ccfd0ec5fe64deb93b5901b506581461bf2aaf04fa9f8118936c5e67e1cee60ccfc4f011ee2812eb9716af42b22c40d83c55d4e4c4838826cc34387a2085aa3e17219c78255ace7bb1fc30ec80676449084744c0887dc4e7696d25a544f3e4b365cc6ad800931d5787be99d678347ea4d6cdeab5662f6cbcb5fa80590e513c4ca96d73d378085026e0e7c71d968a670aefd48519e35beaeef9c67506db6f9b3edb62ef1b3b52b9c2db876b76101644e7dcf5a5056a8d916a0f69ea5bf096e7a4c2f8f1d0da29dbcef9d2ad1b82179ccd0ef95006b7a1d542a847e3e0f864d63434c15d6de4fecad18b788a867da5515e3d51871417bfd783d2dffd852953ea7113d3a61aac3c7c1a4efb449faa928456eb570e62d0ff9542a971b542d7c1fed9d633eb4a81499c105d0f73c5165badb54b0e83f8192d3d51d46ddd9908b04e9f57d5a4e6b65affee3799ae7cc51b4098f71e8ee947ffdeee4fd03095536376e1281ef8158fd1da4a39aebdad37fad75f6217bf45bfad16f2f1a80f5e8a3eea1141a56beb91319fe948bb44350a6e79959c140a5dad9955fb287aeba0a8a45d1fd8d692d30c96d01c9100e417082ae6edf62965fef7e190af60a99145925a307d1e11534d2a64484be3c6cd642432a2db66ba6d3ab1b7ea645edf4e54623d2ba0619bcc2a917cc2df8b0dbed096951947445ed5f08c626e1f9a5f566515bf106c48174f73587314b513962ed556fa7f16d8c6a953bcdda72f083a9b16357b3262c13cd500dfa09cc3d09240a7338514031768ea3053caa5166c8e4e090b3128464a88ccdc751d8ee1b3b1098997c9eaa2b3a13a47e43723a49e5d011dabb22c0d9605e48d5e26b90a47519536fd77c5260bc713e2b510fa6da698069f6c1df7a72462399d7dd288be19a0eab18adb072677268a306f19685c2d813564bab4ac90b7389c2fb87c0517e769577c081ced55572da71b40d18e4979b6b6290afcde4caa610166920549286dfa80197a10ff074b08d6b96c97110e36742fdbc5607f4c48ea9dd53301eecb5c25fce4eec9381b84e6b5af767c5bcca600149a3021c3f4aa237a0143363549a705c5768b5aa6ed51fd1ca9f0f9dd242f0df21f7c3eaf321fca97837d989ca101b5462d2dc248316c21339cb2b4e3451bb483390c09c958d474c6df2f2eac208ef704cbae5c9f6597c19ce48c4c9161c1b14622ed824b0e8669cbe6746051729fd2fcabb020190764a468c58ce369528bfca46cf8ec51ab69e711a53c4121476d2a5d2ceb19c332a5a86a52cabb246d2be739f361d97a6efc2c1d408b6f079ff5cbfdfa7ffb5da3af4611e42f876a44f8180ebadf8efe05645f3326fd1b1bb7f82753ee13e25c406469a6b103b9083ac06d590a48543240bca6e467eafc7069c97aa93a3a4ef61b6043383b6e990d174637d695893bd910f217c9c2465688eccd8a171cb5270fca2e002261f2e3e595f3484b67c0bbd7b50ea53a470e3935c0eafc6226521f0a15fc7cf5494b67fcfb705019a86a5972a9dd285bc50985947e42ca8519de25510db7ba6553419d4e368fe56c2a7acec8e77cd734f557a0f1b507e0869d2d5c9913c52fcd78b42b8f59ad3ae92226e292ea4439b5486629b739f4cca3d7f21cef79045427656fd1679dc5ab23686e13500dcb6284df60599ce81e2570d1cd5c7c2e0026640177bf1395fcf6e999acac08e3a993c3700ad891b1a68d5efc32a4b4f9cc8841e837e778c2500eb6cffc1b9970b2adf724839c7711ebbb2ee3e55f7aa97746d7538153589deafeef63eee6dfbd43fc72e0b763a0e4709da3deb26691303e99230a93c490029383b322099363ba3b2f76b4773c0c43907361b578cfb312cde55ea6de2f477c351ac82786d15b52f08a42385b2a3349116d34f8719264f79082d7c24165423a8e6764c53b922a0b3121cbb88976e6f53c455be77521bc1ad4997135ff24c520b2fa0002cbcc8eb8ee5cb33b1140dc811ee36816f47f23ff0b77d6680d597ec2fe77f5bfe1bb75c3eddb2356940c01e694da66d1c4fd78f7df5857111c01bb5e9954585e54086af287dc0ce861d921b378e9a2a9c9c5a37d9812595063643b1dae4afa57d884501ee0de2d7e39692ed5ecbd2ba1d9bf4e3f291cf0b1dfb809a2f915ae90bd5fbe76d5848752c298f34e69d8e95f6f3c8a8ef365d0927811b8a90c8f58836da07c058f71b01025af8c9829f761d71465d3d813e1e08a7d8f66dcb0f98daa19bb106fb9b25d49a35e8900e6de4502668cecbb9638c5b0d158317970e802be345ab3570f6a452e18da421fb4957429ec4b6c481b5393be9c7f1cea3d77ad1c935ce6cab01ed08f7f24e5b01d25105211d5e28b25d3a5fea30e3c4cd1289bc2606728f127574cdfed91d7c19d7381c3e532c92d7e532e74f3d24281cbf0f4e1908dd4f5cf145daeb21db6b34f2fe175aafd1c20224544c113f132cefe620bd99c5caff7b74d6acf8a1aae2fda5212ec64c80d647308439d5f90f6f481101599b539cd09a1bdfc510b6c9027c879f76bfd397dce9d3985ff01e62ee0455372960b68202412c6d5eb7b09c36f265b7b8b3822aa489dc169f8079e71dc96e0b75de2ade686761b067416e4915287dfdd6309946487a68115ee9d0bec73ffc63223e9463a30b819297d24824cb20724c6b524d58af1e03264e8e2b8dce59377c78dbd5ff5977782181aeaa8c2bd6d9f3d25ec566fa4a01eb5aeaeb6912acad55ca7336d28e305781bf128d6575dba16110d64c55ec9840f299e353fcc5628f248bd660f4dfa5f3a1bb7fbdac78ec727e87a134c98a98f405a4cd3773e79bd4f22bd3239a5fa8cd5806601e07241b25678f048b05bab6f8da56818f8dd9c97d001f4a7ea8beb3fa65ed7a951878bcef7e1da873e21ac6208cf0852c6cb297c10c84b74582bf59aaa11e7d8239997c9e7fd3c5bbee5b8466c17394fa61771aa10a3541f88419b16bb4fa36126745e99c292911d30ed0fa366dcd62c10879a6826609ab2b80b3a0c2de3d877805a564ce925916063c53d9698bb918eed2b49315fb83465a0db1a63a0528a887f5106dd054edbf381280989581c859a517573a6eb4946e0fcc61956fd5868fd37c788090fd7c3341028cf1bcb38ed595a4fd845ccd45558282c6e23d92d4268875f80ebad1c24f8d247595de2f8b83708b504f674447bc6fa1748b86fdfc971c9275baedda1348324c4dbde22d423744e2d537a4e28d95771b18302bc5d92f9e0ba6b1029a3e73761080a4e6e1b52a9ebe3538cb3e982586c23f0b0cfa78126198a0a496d96734880885e4aef7b35d90af287f9d5b18998fba69cf5a13b9153edc5f1c3cd0d181c1cecb4936a489f34682b056eaf5c57caea4a9ebd9fc7d842bc3850046f925dc430769863922ce5bea6709fa9bf7f21098097d7f47c74269b524c4194bceae0571fe968ebdda85a28fa5be7f794632189da179e248fde037a3ba3fd53845e42db45747caa6cebf574e9abb75e3b33c1096e40e0e845385d6f961c56fd1c71f92ae31a0c9088b2100b457cf2f8b33ac984fe79ceeb65fde350f9c6229433aa20d226aeb7677e0e7e8002e3e220fb74d4a1bc07ca43fa23fcf9cbabe7799b5b8daeb63b35923c4a92d2c636d36d58e719e6855b57445a26072d716aba7b653dfcdee115b3310b0c8af8649337597c1ac8bcee8b0533cb458d165b4ca4ee72c60a49f4a7061aab09449a318a6dc1d5b1a4f2a7f82c5af241e1f0cbe3e9fd5079e385ec86bc978ca82aaf1de5b470dcbb06b5f0360142857a0519583e3a77a6fbdadfff48de440bb5c3dcb2c3e6624800fa7898ab00242b7109809d58e5aa8a25705266d9bb04f165f843f1c61c23b41f010ad67f80aa8e455385cf3ff89073dc9434ce9be78993d6c73a8adf4db6b540e7a9f60d8dbcf3133a8f5c5c59f8378f2e5aad07f31707fb9834c66d6d0ded8a8b2d984ff5b6bfe70bb6479aecf208beb8f4da7b23957ce77d574993e1a44de0b3a5cb245f0ebf8ea32a22472270798defec3deeb94a4d025d1fe276612ebfe0f4e6e639de1300d47e542fb032150ab0aded71ba693817feb9cb43beb6f3074c2d7bfb77b9b2783e0335449c9a9775ccf9060ab2468a6644ebddd41f70add6d2d24fb9dd377c4f0dce3439283f22075ff3973e4e70e0bdcb53001be03800392084d6768c3e8f7fad09b192a497a36f602d07655d3e6a7ccab561ab92c79506e1e06aad05975accc9b8b48c41da8bc611d331717ee312d77403f9f66ee9a81fa4e624cca690540dca722986dc740a919597f7836ee95b554d3c34db3443ee5b6908f8623b2c82f32b65c3e8c20ee92825d9c82745bb5368ddda47036390910e26470b96cfd7c4e7b0df89f897153fd5ab4302de65fcda1f48206346d6051a94d8e0c32b959d914c218f54813811d13d99ef6259f54c0e635c04f875772b38524e94fae3a73109f60d0b00c96c1809f37e8fb37e61620690b07d726d388e9ae5dbc3a1c3557d1e4288da0622d77081ab4cd00ce22243824c363ad1be5cb0ceaad6336a797d8ca6d988c4373b3c00667d651452d50f81a830ac6ebb71559590181eea67dce1599d10000000000000000736dcc7c36782c1788cdc8d5c3820d68093ea84d56daaeaac19c19724ed7d3ebc1b8c1e3092839314dc6eddd99dc0eede13dbcb7fd22d401df8eb7f679a04f785006d3b4c4012bf78b7e43b1b355a9f6d04ca0e86c32d44f73fa514d1e2b14746400", 0x2000, 0x0) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 7.943857488s ago: executing program 1 (id=1000): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x54}}, 0x40080) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) 7.183829229s ago: executing program 2 (id=1001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0xa04, 0x11, 0x10ffef8, 0x15, 0xa, 0x20000050, 0xfffffffc, 0x0, 0xffffffffffffffff}) r5 = dup2(r4, r4) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000580)=0x7ff, 0x4) write$tun(r5, &(0x7f0000000040)=ANY=[], 0x46) 7.041953521s ago: executing program 5 (id=1002): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r1, 0x0, &(0x7f0000000000), 0x100000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e00)={r0}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x24000800, 0x0, 0x0) recvmmsg(r5, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/148, 0x94}}], 0x1, 0x2000, 0x0) 7.037227972s ago: executing program 1 (id=1003): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000180)={[{@shortname_winnt}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@utf8no}, {@shortname_win95}, {@numtail}, {@shortname_mixed}, {@uni_xlateno}, {@utf8}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@shortname_lower}, {@fat=@dmask={'dmask', 0x3d, 0x9}}]}, 0x1, 0x376, &(0x7f00000003c0)="$eJzs3U1oY1UbAOA3vWnSDnxfuxMFIboTtMzMTje2SAcGu1EJ/izE4HRUkiq0WGwX09aF4lJwqSt3CrpwIS5FUMSdC7cqyKi40NkNOHjk5uYmt03aqYNVis+zSE7fc95zzv0hub0kJ88sRvfSdFy+du1qzMzUor740GJcr8V8ZFHajXGNCTEA4HS4nlL8lgrHTKmd8JQAgBPWf/9/LiJaMV9EXv38qPbJuz8AnHqD//9nj2ozc1jFSycyJQDghI3d/797X3WjHtGIevlnvfKpAADgtHrsyaceXlqJeLTVmolYe32zvdmOB0b1S5fjhejFapyNubgRUVwo5A+1/uOFiyvLZ1ut1k78OB/tiJgaJLaLK4WlrJ/fjHMxF/OD/PxSI/XL2YWPVpbPtfoiYnenP36s1Tbb03FmMP63Z2J1dOFRdtJ/iri4sny+NeigvVbm70Tsje5b5PNfiLn4+tlhNymVn2BcWb5yrpz0KH+z3YxLw71w6B0QAAAAAAAAAAAAAAAAAAAAAAC4JQutofnh+jkpfy5WyllYmFDfXx+nyB+sD7RXrA+UmilS+vWV+9pvZLFvfaCD6/NsWkgQAAAAAAAAAAAAAAAAAAAAhja2GtHp9VbXN7a2u9XCzvrG1lRE5JEXv/zgs9kYbzOx0IgyUi+GaEYMh2gNht3udlJWZqUsYryfLB+8jLz38XDG1TZ517P9rZg4n+bhVb3e/+764e1R5M6s7PmPUZssJm9pVpnGgwd6Xvt/Mc2b76gJhfPVSHN89O9SSpXIa9X0K0+Pdxi1iPpxD1y1MBWHt0l54Yurz9/eHByRzqepcM+9c4/PvPXuz91OLx85+kewsb5xI3U7tbLxX9st+a4uI7UoCrXqmVA/Kn1vf6STffPLE3e8+dXxRk/VyMv5+XygTVZszofVrHJZi63tbj7NAz3PjtKnBw17q9MTTv6bFW7hmN72zifvp/T9T6NILB45xMjU2MtG7e959QEAAAAAAAAAAAAAAAAAAKoq3xUfGHzZd/qorPsfOfmZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA/Z/T7/5XC3m6UkYXYX7U71nhY+H0nxquaq+sbEY1/ezMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiP+zMAAP//2L5Sug==") bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) 6.746561986s ago: executing program 0 (id=1004): syz_open_dev$usbfs(0x0, 0x1ff, 0x402) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000340)) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x2, 0x1, 0x0, 0x5, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 6.715141537s ago: executing program 3 (id=1005): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) 5.82881253s ago: executing program 0 (id=1006): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x4000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x4000844) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) getresgid(&(0x7f0000000c80), 0x0, &(0x7f0000009240)) 5.793632791s ago: executing program 1 (id=1007): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) r0 = dup(0xffffffffffffffff) getuid() openat(0xffffffffffffff9c, 0x0, 0xa0242, 0x0) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) 5.384432647s ago: executing program 2 (id=1008): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x74}, {0x6}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0xde}, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x21, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) 5.381908157s ago: executing program 3 (id=1009): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x800, 0x8000}}}}}}]}, 0x48}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 5.276700669s ago: executing program 5 (id=1010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x62040200) 4.57050607s ago: executing program 1 (id=1011): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x13, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) setreuid(0xee01, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x42, &(0x7f0000000600)={[{@utf8no}, {@uni_xlateno}, {@fat=@nfs}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@numtail}, {@uni_xlate}, {@shortname_win95}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@uni_xlate}]}, 0x26, 0x336, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) link(&(0x7f0000000200)='./file1\x00', 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) 4.518121941s ago: executing program 2 (id=1012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) 4.387189383s ago: executing program 5 (id=1013): madvise(&(0x7f00009c6000/0x1000)=nil, 0x1000, 0x80000000e) mremap(&(0x7f0000142000/0x1000)=nil, 0x1000, 0x800000, 0xd0990dba3498aa2e, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x2000018, &(0x7f0000000500)=ANY=[], 0xfe, 0x1c7, &(0x7f0000001100)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() prlimit64(r0, 0xc, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) r4 = syz_open_procfs(r0, &(0x7f0000002140)='smaps_rollup\x00') read(r4, &(0x7f0000006240)=""/4082, 0xff2) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{0x0}], 0x1, 0x0) 1.719068433s ago: executing program 0 (id=1014): r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x1218088, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$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") flistxattr(r0, &(0x7f0000000000)=""/28, 0xfffffffffffffe54) write$binfmt_script(0xffffffffffffffff, &(0x7f000000e0c0), 0x10010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0xfffffffffffffde8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x88200, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000040)={0xe, 0x8, 0x7, 0xfffffff9, 0x10, "988c013813ca5a77498a9348d9cbf4c26878e3"}) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 1.716005794s ago: executing program 3 (id=1015): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x80000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000001880)={'veth1_to_batadv\x00', &(0x7f0000001800)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c00000000000000000004730068000000"], 0x40}, 0x0) 1.714868864s ago: executing program 2 (id=1016): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f00000005c0)="$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") r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = syz_open_procfs(0x0, &(0x7f0000001180)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(r1, 0x0, 0x800) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000b40)={{r0}, "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"}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 1.706979714s ago: executing program 3 (id=1017): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/158, 0x9e) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x1, 0x23e, &(0x7f00000007c0)="$eJzsmL9rFEEUx78ztzd3F4LGJoVNBANGNHu5PZQ0h0YQrESIP7BzMWs4b5OTywrmQNA/QDsLwcbCf8AiRSoL/whBCxUEi1xhYaPFyOzO7c3d6O2ylnmfYvjOzHs7772becWBIIhDy9cvPz8/u7R6/SyAWSyiote/lwDGEs0N+08vH5550br86u3HN++3jzzen/jcrBqkNFYYUJ1yvgPg3VoJUXpS6v1LiUU9WQBP9Q1wnNb6FuRRV+s74LipdQCG21rfN3QXDK57Au0wcO92w4177TBYUUNDDZ4ampPxDZ4ybOi5lFIyY39nt9/xwzDoGcLRe+NbJWvlr0IVa2IrPawzb9WvDIHBGkfLiI8bAQ5rs2LUrwGOhrZpgmFdr6+iAtd1RyUx8j/ujL5fGsv/oOKHdrZh0FOmamNatkpUE9H6kXgN83egbESm+xRxbLmIlx8uqXQu2ltzKBIGxr3KGG2pShaKMEOosmsRrzjZN++C/kELHHo1bxbPa/blziHmclR1TBTKYijmB/tV+2F/y3KXLPsIlv/+VHPFbDz04relhn6H/0/FlKhY7xT4sJf0D/ma4ZQO87eU0jH6Rz3aelDf2e0vt7f8zWAz2Pa85nkGPDnn1eNGpMYZq+0Z/bkW96cZo/+V/2EruMAjP4p6jWQUTKCGKOp58dwz3s/6XvdAaLcIVwCcTCaq4iL9Ysk6g4nEhse2Si3ZRgRBEARBEARBEARBEARBEIVYAIv/Bc3AuxZb/wkAAP//4TxUUw==") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x8b18, 0x0) 1.553341997s ago: executing program 0 (id=1018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0xa04, 0x11, 0x10ffef8, 0x15, 0xa, 0x20000050, 0xfffffffc, 0x0, 0xffffffffffffffff}) r5 = dup2(r4, r4) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000580)=0x7ff, 0x4) write$tun(r5, &(0x7f0000000040)=ANY=[], 0x46) 1.551687066s ago: executing program 1 (id=1019): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@generic='-']}, 0x18}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="0103000000000000000005000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x88004}, 0x40) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x7b}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x2c}]}}]}, 0x48}}, 0x0) 1.363404179s ago: executing program 5 (id=1020): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000"], 0xfe44, 0x0) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) epoll_wait(r3, &(0x7f0000001e40)=[{}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018f500000000000500"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1, 0x0, 0x0, @void, @value}, 0x28) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x2000080}, 0x4048000) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) 407.771654ms ago: executing program 3 (id=1021): openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x8a0f34, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000000b00)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0xfffffffffffffde8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0xa0}], 0x1, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty, 0xfffffffe}, 0x0, {[0xfffffffc]}}, 0x5c) 0s ago: executing program 0 (id=1022): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x40000000004) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): terface descriptor's value: 1 [ 83.658214][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 83.658229][ T28] audit: type=1326 audit(1743514935.600:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1604 comm="syz.3.379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f656958d169 code=0x0 [ 83.765291][ T300] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.776521][ T300] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 83.845812][ T300] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.881577][ T300] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.906104][ T300] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 83.917762][ T300] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.934362][ T300] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.946243][ T300] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 83.984193][ T300] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.018675][ T300] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.057654][ T300] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.067300][ T300] usb 6-1: Product: syz [ 84.078419][ T300] usb 6-1: Manufacturer: à – [ 84.084087][ T300] usb 6-1: SerialNumber: syz [ 84.405815][ T1622] netlink: 392 bytes leftover after parsing attributes in process `syz.2.382'. [ 84.462591][ T300] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 84.476109][ T300] cdc_ncm 6-1:1.0: bind() failure [ 84.682735][ T300] usb 6-1: USB disconnect, device number 2 [ 84.817129][ T1633] netlink: 72 bytes leftover after parsing attributes in process `syz.3.384'. [ 84.833997][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 84.847459][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 84.876705][ T1633] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 85.061490][ T28] audit: type=1400 audit(1743514937.010:462): avc: denied { create } for pid=1636 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 85.521482][ T1651] xt_hashlimit: size too large, truncated to 1048576 [ 85.798031][ T1659] netlink: 72 bytes leftover after parsing attributes in process `syz.0.391'. [ 85.817877][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.090261][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.097796][ C1] bridge0: topology change detected, propagating [ 86.104573][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.104701][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.111937][ C1] bridge0: topology change detected, propagating [ 87.386356][ T1685] netlink: 72 bytes leftover after parsing attributes in process `syz.0.401'. [ 87.397309][ T1685] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.905232][ T1696] netlink: 72 bytes leftover after parsing attributes in process `syz.5.402'. [ 87.916107][ T1696] device lo entered promiscuous mode [ 87.923027][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 87.933057][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 87.943748][ T1696] device tunl0 entered promiscuous mode [ 87.951624][ T1696] device gre0 entered promiscuous mode [ 87.959680][ T1696] device gretap0 entered promiscuous mode [ 87.967234][ T1696] device erspan0 entered promiscuous mode [ 87.975405][ T1696] device ip_vti0 entered promiscuous mode [ 87.983523][ T1696] device ip6_vti0 entered promiscuous mode [ 87.991751][ T1696] device sit0 entered promiscuous mode [ 87.999490][ T1696] device ip6tnl0 entered promiscuous mode [ 88.007243][ T1696] device ip6gre0 entered promiscuous mode [ 88.016957][ T1696] device syz_tun entered promiscuous mode [ 88.025101][ T1696] device ip6gretap0 entered promiscuous mode [ 88.034309][ T1696] device bridge0 entered promiscuous mode [ 88.043159][ T1696] device vcan0 entered promiscuous mode [ 88.049795][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.059386][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.067856][ T1696] device dummy0 entered promiscuous mode [ 88.074556][ T1696] device veth0 entered promiscuous mode [ 88.080670][ T1696] device veth1 entered promiscuous mode [ 88.087162][ T1696] device wg0 entered promiscuous mode [ 88.093363][ T1696] device wg1 entered promiscuous mode [ 88.099550][ T1696] device wg2 entered promiscuous mode [ 88.106308][ T1696] device veth0_to_bridge entered promiscuous mode [ 88.115709][ T1696] device veth0_to_bond entered promiscuous mode [ 88.122914][ T1696] device bond_slave_0 entered promiscuous mode [ 88.129876][ T1696] device veth1_to_bond entered promiscuous mode [ 88.137182][ T1696] device bond_slave_1 entered promiscuous mode [ 88.144437][ T1696] device veth0_to_team entered promiscuous mode [ 88.151625][ T1696] device team_slave_0 entered promiscuous mode [ 88.159189][ T1696] device veth1_to_team entered promiscuous mode [ 88.166074][ T1696] device team_slave_1 entered promiscuous mode [ 88.173120][ T1696] device veth0_to_batadv entered promiscuous mode [ 88.181149][ T1696] device batadv_slave_0 entered promiscuous mode [ 88.188655][ T1696] device veth1_to_batadv entered promiscuous mode [ 88.196712][ T1696] device batadv_slave_1 entered promiscuous mode [ 88.204875][ T1696] device xfrm0 entered promiscuous mode [ 88.211761][ T1696] device veth0_to_hsr entered promiscuous mode [ 88.218407][ T1696] device hsr_slave_0 entered promiscuous mode [ 88.225454][ T1696] device veth1_to_hsr entered promiscuous mode [ 88.232339][ T1696] device hsr_slave_1 entered promiscuous mode [ 88.240518][ T1696] device veth1_virt_wifi entered promiscuous mode [ 88.247771][ T1696] device veth0_virt_wifi entered promiscuous mode [ 88.255341][ T1696] device veth1_vlan entered promiscuous mode [ 88.263423][ T1696] device vlan0 entered promiscuous mode [ 88.269707][ T1696] device vlan1 entered promiscuous mode [ 88.276969][ T1696] device veth0_macvtap entered promiscuous mode [ 88.283983][ T1696] device macsec0 entered promiscuous mode [ 88.701387][ T1705] xt_hashlimit: size too large, truncated to 1048576 [ 88.938987][ T1714] syz.5.409[1714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.939076][ T1714] syz.5.409[1714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.155611][ T1721] netlink: 72 bytes leftover after parsing attributes in process `syz.2.411'. [ 89.184904][ T1721] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.451616][ T1726] loop1: detected capacity change from 0 to 512 [ 89.466138][ T1726] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.473300][ T1726] EXT4-fs: Ignoring removed bh option [ 89.479269][ T1726] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.666569][ T1726] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.962085][ T1726] EXT4-fs (loop1): 1 truncate cleaned up [ 90.032416][ T1726] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 90.220414][ T28] audit: type=1400 audit(1743514942.080:463): avc: denied { mount } for pid=1725 comm="syz.1.413" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 90.525794][ T1734] loop2: detected capacity change from 0 to 2048 [ 90.789298][ T560] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 90.791552][ T1720] syz.5.412 (1720) used greatest stack depth: 19256 bytes left [ 90.823294][ T1734] loop2: detected capacity change from 0 to 256 [ 90.907042][ T1742] overlayfs: failed to resolve './file1': -2 [ 90.962544][ T1734] exfat: Unknown parameter 'ÿÿ00000000000000000000' [ 91.276864][ T28] audit: type=1400 audit(1743514943.220:464): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 91.277961][ T292] EXT4-fs (loop1): unmounting filesystem. [ 91.312433][ T28] audit: type=1326 audit(1743514943.250:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1739 comm="syz.0.416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc43d98d169 code=0x0 [ 91.383160][ T1750] netlink: 72 bytes leftover after parsing attributes in process `syz.5.417'. [ 91.393706][ T1750] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 91.416382][ T1750] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.609349][ T28] audit: type=1400 audit(1743514943.260:466): avc: denied { read } for pid=1748 comm="syz.1.418" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.635577][ T28] audit: type=1400 audit(1743514943.260:467): avc: denied { open } for pid=1748 comm="syz.1.418" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.686884][ T28] audit: type=1400 audit(1743514943.260:468): avc: denied { ioctl } for pid=1748 comm="syz.1.418" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.713805][ T28] audit: type=1400 audit(1743514943.260:469): avc: denied { set_context_mgr } for pid=1748 comm="syz.1.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 91.735680][ T28] audit: type=1400 audit(1743514943.260:470): avc: denied { write } for pid=1748 comm="syz.1.418" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.758962][ T28] audit: type=1400 audit(1743514943.260:471): avc: denied { map } for pid=1748 comm="syz.1.418" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.784455][ T28] audit: type=1400 audit(1743514943.630:472): avc: denied { call } for pid=1748 comm="syz.1.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 92.170800][ T1774] xt_hashlimit: size too large, truncated to 1048576 [ 92.348237][ T1779] netlink: 72 bytes leftover after parsing attributes in process `syz.5.425'. [ 92.358235][ T1779] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 92.380144][ T1779] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.616449][ T1809] netlink: 60 bytes leftover after parsing attributes in process `syz.0.441'. [ 94.480384][ T304] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 96.313366][ T1830] loop5: detected capacity change from 0 to 2048 [ 97.311915][ T560] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 98.073840][ T300] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.097328][ T1830] loop5: detected capacity change from 0 to 256 [ 98.140173][ T1830] exfat: Unknown parameter 'ÿÿ00000000000000000000' [ 98.261516][ T300] usb 2-1: config 0 has an invalid interface number: 161 but max is 0 [ 98.276236][ T300] usb 2-1: config 0 has no interface number 0 [ 98.297155][ T300] usb 2-1: New USB device found, idVendor=0e8d, idProduct=0003, bcdDevice=c1.12 [ 98.325920][ T300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.350083][ T300] usb 2-1: Product: syz [ 98.410350][ T300] usb 2-1: Manufacturer: syz [ 98.414980][ T300] usb 2-1: SerialNumber: syz [ 98.434592][ T300] usb 2-1: config 0 descriptor?? [ 99.890425][ T300] usb 2-1: USB disconnect, device number 5 [ 99.937176][ T1869] loop2: detected capacity change from 0 to 512 [ 99.945687][ T1869] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.953214][ T1869] EXT4-fs: Ignoring removed i_version option [ 99.959928][ T1869] ext4: Unknown parameter 'permit_directio' [ 100.061596][ T560] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 100.642377][ T1881] overlayfs: failed to clone upperpath [ 100.961380][ T1884] loop1: detected capacity change from 0 to 128 [ 100.974470][ T1886] netlink: 36 bytes leftover after parsing attributes in process `syz.2.453'. [ 101.020316][ T560] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 101.835895][ T304] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.896472][ T1900] kvm: pic: non byte read [ 102.040300][ T304] usb 3-1: Using ep0 maxpacket: 8 [ 102.048643][ T304] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 102.413209][ T304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.421559][ T304] usb 3-1: Product: syz [ 102.425644][ T304] usb 3-1: Manufacturer: syz [ 102.430085][ T304] usb 3-1: SerialNumber: syz [ 102.448112][ T304] usb 3-1: config 0 descriptor?? [ 102.719108][ T304] usb 3-1: USB disconnect, device number 4 [ 103.301803][ T560] udevd[560]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 106.082417][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 106.082434][ T28] audit: type=1326 audit(1743514958.030:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1975 comm="syz.5.479" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef0738d169 code=0x0 [ 106.151137][ T28] audit: type=1400 audit(1743514958.100:475): avc: denied { read } for pid=1975 comm="syz.5.479" name="event2" dev="devtmpfs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 106.227366][ T28] audit: type=1400 audit(1743514958.120:476): avc: denied { open } for pid=1975 comm="syz.5.479" path="/dev/input/event2" dev="devtmpfs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 107.803023][ T1992] syz.3.481[1992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.803109][ T1992] syz.3.481[1992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.321781][ T1999] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 108.985492][ T2020] device wireguard0 entered promiscuous mode [ 111.232748][ T2053] loop5: detected capacity change from 0 to 512 [ 111.267822][ T39] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 111.423018][ T2053] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.500: invalid indirect mapped block 256 (level 2) [ 111.437614][ T2053] EXT4-fs (loop5): 2 truncates cleaned up [ 111.443337][ T2053] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 112.081403][ T39] usb 2-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config [ 112.109459][ T39] usb 2-1: too many endpoints for config 1 interface 0 altsetting 165: 159, using maximum allowed: 30 [ 112.157706][ T39] usb 2-1: config 1 interface 0 altsetting 165 has 0 endpoint descriptors, different from the interface descriptor's value: 159 [ 112.201336][ T39] usb 2-1: config 1 interface 0 has no altsetting 0 [ 112.227506][ T39] usb 2-1: string descriptor 0 read error: -22 [ 112.244397][ T1214] EXT4-fs (loop5): unmounting filesystem. [ 112.280019][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 112.323139][ T2063] loop5: detected capacity change from 0 to 128 [ 112.331530][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.892956][ T19] usb 2-1: USB disconnect, device number 6 [ 113.962887][ T2076] incfs: Error accessing: ./file0. [ 114.480935][ T2076] incfs: mount failed -20 [ 114.512046][ T2084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'. [ 114.534423][ T2084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.509'. [ 114.578936][ T2086] loop2: detected capacity change from 0 to 512 [ 114.602223][ T2086] EXT4-fs (loop2): Test dummy encryption mode enabled [ 114.629661][ T28] audit: type=1400 audit(1743514966.570:477): avc: denied { read } for pid=2087 comm="syz.1.511" dev="nsfs" ino=4026532290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 114.650525][ T2086] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.510: inline data xattr refers to an external xattr inode [ 114.650609][ T28] audit: type=1400 audit(1743514966.570:478): avc: denied { open } for pid=2087 comm="syz.1.511" path="net:[4026532290]" dev="nsfs" ino=4026532290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 114.691870][ T2086] EXT4-fs (loop2): Remounting filesystem read-only [ 114.704228][ T2086] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.510: couldn't read orphan inode 12 (err -117) [ 114.723293][ T2086] EXT4-fs (loop2): Remounting filesystem read-only [ 114.729957][ T2086] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 114.766891][ T2086] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 114.777240][ T2086] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.510: Directory hole found for htree leaf block 0 [ 114.790488][ T2086] EXT4-fs (loop2): Remounting filesystem read-only [ 114.798790][ T28] audit: type=1400 audit(1743514966.740:479): avc: denied { read append } for pid=2085 comm="syz.2.510" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 114.895504][ T2098] overlayfs: failed to resolve './file0': -2 [ 114.969613][ T28] audit: type=1400 audit(1743514966.740:480): avc: denied { open } for pid=2085 comm="syz.2.510" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 115.128575][ T28] audit: type=1400 audit(1743514966.740:481): avc: denied { ioctl } for pid=2085 comm="syz.2.510" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 115.166125][ T296] EXT4-fs (loop2): unmounting filesystem. [ 116.210810][ T2115] netlink: 72 bytes leftover after parsing attributes in process `syz.5.518'. [ 116.219554][ T2115] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 116.228622][ T2115] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.690401][ T28] audit: type=1400 audit(1743514968.550:482): avc: denied { ioctl } for pid=2122 comm="syz.3.521" path="socket:[22802]" dev="sockfs" ino=22802 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 117.453291][ T28] audit: type=1400 audit(1743514969.050:483): avc: denied { name_bind } for pid=2129 comm="syz.5.522" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 117.765491][ T2136] loop5: detected capacity change from 0 to 512 [ 117.780451][ T2136] EXT4-fs (loop5): Test dummy encryption mode enabled [ 117.807990][ T2136] EXT4-fs error (device loop5): ext4_find_inline_data_nolock:164: inode #12: comm syz.5.525: inline data xattr refers to an external xattr inode [ 117.832723][ T2136] EXT4-fs (loop5): Remounting filesystem read-only [ 117.839124][ T2136] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.525: couldn't read orphan inode 12 (err -117) [ 117.860394][ T2136] EXT4-fs (loop5): Remounting filesystem read-only [ 117.870337][ T2136] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 117.890006][ T2136] EXT4-fs error (device loop5): ext4_add_entry:2486: inode #2: comm syz.5.525: Directory hole found for htree leaf block 0 [ 117.931685][ T2136] EXT4-fs (loop5): Remounting filesystem read-only [ 117.938171][ T2124] loop2: detected capacity change from 0 to 40427 [ 117.953195][ T2124] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(15) root(3) [ 117.964430][ T2124] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 117.973551][ T2124] F2FS-fs (loop2): invalid crc value [ 118.055931][ T2124] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241045588246331391) [ 118.159743][ T2158] loop1: detected capacity change from 0 to 512 [ 118.398497][ T2158] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.527: invalid indirect mapped block 256 (level 2) [ 118.413515][ T2158] EXT4-fs (loop1): 2 truncates cleaned up [ 118.419247][ T2158] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 118.755116][ T2124] F2FS-fs (loop2): Inconsistent error blkaddr:4096, sit bitmap:0 [ 119.203379][ T1214] EXT4-fs (loop5): unmounting filesystem. [ 119.210992][ T2124] CPU: 1 PID: 2124 Comm: syz.2.520 Not tainted 6.1.129-syzkaller-00054-g3e6e324f5b47 #0 [ 119.220547][ T2124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.230443][ T2124] Call Trace: [ 119.233564][ T2124] [ 119.236347][ T2124] dump_stack_lvl+0x151/0x1b7 [ 119.240854][ T2124] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 119.246246][ T2124] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 119.252155][ T2124] ? irqentry_exit+0x30/0x40 [ 119.256584][ T2124] ? sysvec_reschedule_ipi+0x8f/0x170 [ 119.261786][ T2124] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 119.267253][ T2124] dump_stack+0x15/0x18 [ 119.271247][ T2124] __f2fs_is_valid_blkaddr+0xce2/0x1450 [ 119.277170][ T2124] f2fs_is_valid_blkaddr+0x25/0x30 [ 119.282120][ T2124] f2fs_get_node_info+0x806/0x1250 [ 119.287061][ T2124] ? workingset_activation+0x430/0x430 [ 119.292361][ T2124] ? f2fs_try_to_free_nats+0x300/0x300 [ 119.297652][ T2124] ? filemap_add_folio+0x18f/0x200 [ 119.302683][ T2124] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 119.308149][ T2124] ? __filemap_add_folio+0xdb0/0xdb0 [ 119.313271][ T2124] ? __filemap_get_folio+0x801/0xae0 [ 119.318401][ T2124] read_node_page+0x33a/0x650 [ 119.322916][ T2124] ? f2fs_ra_node_page+0x260/0x260 [ 119.327857][ T2124] ? __kasan_check_write+0x14/0x20 [ 119.332804][ T2124] ? __kasan_check_read+0x11/0x20 [ 119.337668][ T2124] ? pagecache_get_page+0xb3/0x110 [ 119.342614][ T2124] __get_node_page+0x154/0xb50 [ 119.347212][ T2124] f2fs_get_node_page+0x21/0x30 [ 119.351897][ T2124] f2fs_iget+0x70b/0x4ca0 [ 119.356239][ T2124] ? __kasan_check_write+0x14/0x20 [ 119.361168][ T2124] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 119.366462][ T2124] ? sysvec_reschedule_ipi+0x8f/0x170 [ 119.371685][ T2124] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 119.377316][ T2124] ? f2fs_build_stats+0x7c7/0xc90 [ 119.382185][ T2124] f2fs_fill_super+0x5404/0x6dc0 [ 119.386968][ T2124] ? kill_f2fs_super+0x3c0/0x3c0 [ 119.391717][ T2124] ? set_blocksize+0x1cb/0x360 [ 119.396321][ T2124] ? sb_set_blocksize+0xa8/0xf0 [ 119.401004][ T2124] mount_bdev+0x282/0x3b0 [ 119.405171][ T2124] ? kill_f2fs_super+0x3c0/0x3c0 [ 119.409943][ T2124] f2fs_mount+0x34/0x40 [ 119.413933][ T2124] legacy_get_tree+0xf1/0x190 [ 119.418446][ T2124] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 119.424441][ T2124] vfs_get_tree+0x88/0x290 [ 119.428687][ T2124] do_new_mount+0x2ba/0xb30 [ 119.433032][ T2124] ? do_move_mount_old+0x160/0x160 [ 119.437972][ T2124] ? security_capable+0x87/0xb0 [ 119.442673][ T2124] ? ns_capable+0x89/0xe0 [ 119.446844][ T2124] path_mount+0x671/0x1070 [ 119.451086][ T2124] ? user_path_at_empty+0x14e/0x1a0 [ 119.456118][ T2124] __se_sys_mount+0x2c4/0x3b0 [ 119.460642][ T2124] ? __x64_sys_mount+0xd0/0xd0 [ 119.465318][ T2124] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 119.471220][ T2124] __x64_sys_mount+0xbf/0xd0 [ 119.475644][ T2124] x64_sys_call+0x49d/0x9a0 [ 119.479986][ T2124] do_syscall_64+0x3b/0xb0 [ 119.484242][ T2124] ? clear_bhb_loop+0x55/0xb0 [ 119.488750][ T2124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.494512][ T2124] RIP: 0033:0x7f657c78e90a [ 119.498732][ T2124] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.518395][ T2124] RSP: 002b:00007f657d52be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 119.526719][ T2124] RAX: ffffffffffffffda RBX: 00007f657d52bef0 RCX: 00007f657c78e90a [ 119.534530][ T2124] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00007f657d52beb0 [ 119.542351][ T2124] RBP: 0000200000000000 R08: 00007f657d52bef0 R09: 0000000000000008 [ 119.550150][ T2124] R10: 0000000000000008 R11: 0000000000000246 R12: 0000200000000180 [ 119.557963][ T2124] R13: 00007f657d52beb0 R14: 000000000000552d R15: 00002000000002c0 [ 119.565784][ T2124] [ 119.581443][ T292] EXT4-fs (loop1): unmounting filesystem. [ 119.696808][ T2124] F2FS-fs (loop2): Failed to read root inode [ 119.886737][ T2174] bridge0: port 3(gretap0) entered blocking state [ 119.893184][ T2174] bridge0: port 3(gretap0) entered disabled state [ 119.900032][ T2174] bridge0: port 3(gretap0) entered blocking state [ 119.906471][ T2174] bridge0: port 3(gretap0) entered listening state [ 119.933593][ T2174] device wireguard0 entered promiscuous mode [ 119.990673][ T2177] netlink: 72 bytes leftover after parsing attributes in process `syz.0.532'. [ 120.007584][ T2177] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.042114][ T2177] device bridge2 entered promiscuous mode [ 120.156375][ T2178] bridge0: port 3(gretap0) entered disabled state [ 120.355666][ T2186] device lo left promiscuous mode [ 120.368645][ T2186] device tunl0 left promiscuous mode [ 120.375209][ T2186] device gre0 left promiscuous mode [ 120.385022][ T2186] device gretap0 left promiscuous mode [ 120.412283][ T2186] device erspan0 left promiscuous mode [ 120.418572][ T2186] device ip_vti0 left promiscuous mode [ 120.425213][ T2186] device ip6_vti0 left promiscuous mode [ 120.431774][ T2186] device sit0 left promiscuous mode [ 120.438360][ T2186] device ip6tnl0 left promiscuous mode [ 120.444547][ T2186] device ip6gre0 left promiscuous mode [ 120.451980][ T2186] device syz_tun left promiscuous mode [ 120.458380][ T2186] device ip6gretap0 left promiscuous mode [ 120.473482][ T2186] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.911929][ T2186] device bridge0 left promiscuous mode [ 121.033838][ T2186] device vcan0 left promiscuous mode [ 121.041987][ T2186] device dummy0 left promiscuous mode [ 121.054573][ T2186] device veth0 left promiscuous mode [ 121.061006][ T2186] device veth1 left promiscuous mode [ 121.067013][ T2186] device wg0 left promiscuous mode [ 121.072891][ T2186] device wg1 left promiscuous mode [ 121.460622][ T2200] loop1: detected capacity change from 0 to 512 [ 121.474574][ T2200] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.553671][ T2186] device wg2 left promiscuous mode [ 121.574019][ T2200] EXT4-fs (loop1): orphan cleanup on readonly fs [ 121.583581][ T2200] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.537: bg 0: block 248: padding at end of block bitmap is not set [ 121.600150][ T2200] Quota error (device loop1): write_blk: dquota write failed [ 121.607529][ T2200] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 121.617400][ T2200] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.537: Failed to acquire dquot type 1 [ 121.631186][ T2200] EXT4-fs (loop1): 1 truncate cleaned up [ 121.638434][ T2200] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 121.722043][ T2186] device veth0_to_bridge left promiscuous mode [ 121.793520][ T2186] device veth0_to_bond left promiscuous mode [ 121.800136][ T2186] device bond_slave_0 left promiscuous mode [ 121.806652][ T2186] device veth1_to_bond left promiscuous mode [ 121.813451][ T2186] device bond_slave_1 left promiscuous mode [ 121.819872][ T2186] device veth0_to_team left promiscuous mode [ 121.941138][ T2186] device team_slave_0 left promiscuous mode [ 121.957858][ T2186] device veth1_to_team left promiscuous mode [ 122.410908][ T2186] device team_slave_1 left promiscuous mode [ 122.417552][ T2186] device veth0_to_batadv left promiscuous mode [ 122.424562][ T2186] device batadv_slave_0 left promiscuous mode [ 122.431885][ T2186] device veth1_to_batadv left promiscuous mode [ 122.438675][ T2186] device batadv_slave_1 left promiscuous mode [ 122.445898][ T2186] device xfrm0 left promiscuous mode [ 122.451974][ T2186] device veth0_to_hsr left promiscuous mode [ 123.401097][ T2186] device hsr_slave_0 left promiscuous mode [ 123.422232][ T2217] loop2: detected capacity change from 0 to 512 [ 123.488199][ T2186] device veth1_to_hsr left promiscuous mode [ 123.496166][ T2217] journal_path: Lookup failure for './file0' [ 123.500436][ T2186] device hsr_slave_1 left promiscuous mode [ 123.508225][ T292] EXT4-fs (loop1): unmounting filesystem. [ 123.509455][ T2217] EXT4-fs: error: could not find journal device path [ 123.521274][ T2186] device veth1_virt_wifi left promiscuous mode [ 123.528005][ T2186] device veth0_virt_wifi left promiscuous mode [ 123.535641][ T2186] device veth1_vlan left promiscuous mode [ 123.544989][ T2186] device vlan0 left promiscuous mode [ 123.550576][ T2186] device vlan1 left promiscuous mode [ 123.556941][ T2186] device veth0_macvtap left promiscuous mode [ 123.563933][ T2186] device macsec0 left promiscuous mode [ 123.590705][ T2222] loop5: detected capacity change from 0 to 512 [ 123.600184][ T2222] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 123.630185][ T2197] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 123.923233][ T2226] loop1: detected capacity change from 0 to 256 [ 124.689824][ T2225] xt_hashlimit: size too large, truncated to 1048576 [ 124.690626][ T560] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 124.715830][ T2230] device wireguard0 entered promiscuous mode [ 125.120190][ T2234] block device autoloading is deprecated and will be removed. [ 127.940991][ T2261] syz.1.553[2261] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.941078][ T2261] syz.1.553[2261] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.272885][ T2272] loop2: detected capacity change from 0 to 512 [ 132.723770][ T2272] EXT4-fs warning (device loop2): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop2. [ 132.873346][ T28] audit: type=1400 audit(1743514984.820:484): avc: denied { bind } for pid=2275 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.583625][ T2286] netlink: 72 bytes leftover after parsing attributes in process `syz.2.559'. [ 133.598754][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.882686][ T2304] fuse: Unknown parameter '0xffffffffffffffff' [ 135.010323][ T28] audit: type=1326 audit(1743514986.920:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2310 comm="syz.1.568" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d1ef8d169 code=0x0 [ 135.450281][ T2192] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 135.469012][ T2309] netlink: 72 bytes leftover after parsing attributes in process `syz.3.564'. [ 135.482332][ T2309] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 135.505936][ T2309] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 135.517948][ T2309] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 135.640367][ T2192] usb 3-1: Using ep0 maxpacket: 8 [ 135.646711][ T2192] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 135.660929][ T2192] usb 3-1: config 179 has no interface number 0 [ 135.667249][ T2192] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 135.685277][ T2192] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 135.707300][ T2192] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 135.719325][ T2192] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 135.729450][ T2192] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 135.810869][ T2192] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 135.820526][ T2192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.831032][ T2308] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.859863][ T2192] xpad: probe of 3-1:179.65 failed with error -5 [ 136.055018][ T19] usb 3-1: USB disconnect, device number 5 [ 136.477355][ T2339] netlink: 72 bytes leftover after parsing attributes in process `syz.5.574'. [ 136.486322][ T2339] device lo entered promiscuous mode [ 136.493402][ T2339] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 136.501147][ T2339] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 136.508931][ T2339] device tunl0 entered promiscuous mode [ 136.515559][ T2339] device gre0 entered promiscuous mode [ 136.522537][ T2339] device gretap0 entered promiscuous mode [ 136.529487][ T2339] device erspan0 entered promiscuous mode [ 136.536460][ T2339] device ip_vti0 entered promiscuous mode [ 136.543275][ T2339] device ip6_vti0 entered promiscuous mode [ 136.550393][ T2339] device sit0 entered promiscuous mode [ 136.559067][ T2339] device ip6tnl0 entered promiscuous mode [ 136.565975][ T2339] device ip6gre0 entered promiscuous mode [ 136.574598][ T2339] device syz_tun entered promiscuous mode [ 136.581741][ T2339] device ip6gretap0 entered promiscuous mode [ 136.589019][ T2339] device bridge0 entered promiscuous mode [ 136.595718][ T2339] device vcan0 entered promiscuous mode [ 136.601753][ T2339] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 136.608922][ T2339] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 136.616186][ T2339] device dummy0 entered promiscuous mode [ 136.623513][ T2339] device veth0 entered promiscuous mode [ 136.630130][ T2339] device veth1 entered promiscuous mode [ 136.637841][ T2339] device wg0 entered promiscuous mode [ 136.656864][ T2339] device wg1 entered promiscuous mode [ 136.677924][ T2339] device wg2 entered promiscuous mode [ 136.686698][ T2339] device veth0_to_bridge entered promiscuous mode [ 136.698740][ T2339] device veth0_to_bond entered promiscuous mode [ 136.707926][ T2339] device bond_slave_0 entered promiscuous mode [ 136.715573][ T2339] device veth1_to_bond entered promiscuous mode [ 136.724483][ T2339] device bond_slave_1 entered promiscuous mode [ 136.732175][ T2339] device veth0_to_team entered promiscuous mode [ 136.742329][ T2339] device team_slave_0 entered promiscuous mode [ 136.750111][ T2339] device veth1_to_team entered promiscuous mode [ 136.760635][ T2339] device team_slave_1 entered promiscuous mode [ 136.768316][ T2339] device veth0_to_batadv entered promiscuous mode [ 136.777711][ T2339] device batadv_slave_0 entered promiscuous mode [ 136.786660][ T2339] device veth1_to_batadv entered promiscuous mode [ 136.808677][ T2339] device batadv_slave_1 entered promiscuous mode [ 136.817346][ T2339] device xfrm0 entered promiscuous mode [ 136.824092][ T2339] device veth0_to_hsr entered promiscuous mode [ 136.831717][ T2339] device hsr_slave_0 entered promiscuous mode [ 136.837914][ T2339] device veth1_to_hsr entered promiscuous mode [ 136.844809][ T2339] device hsr_slave_1 entered promiscuous mode [ 136.851030][ T2339] device veth1_virt_wifi entered promiscuous mode [ 136.857789][ T2339] device veth0_virt_wifi entered promiscuous mode [ 136.864604][ T2339] device veth1_vlan entered promiscuous mode [ 136.871052][ T2339] device veth0_vlan left promiscuous mode [ 136.876598][ T2339] device veth0_vlan entered promiscuous mode [ 136.883905][ T2339] device vlan0 entered promiscuous mode [ 136.889895][ T2339] device vlan1 entered promiscuous mode [ 136.895793][ T2339] device veth1_macvtap left promiscuous mode [ 136.901653][ T2339] device veth1_macvtap entered promiscuous mode [ 136.908608][ T2339] device veth0_macvtap entered promiscuous mode [ 136.915401][ T2339] device macsec0 entered promiscuous mode [ 136.922494][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.960831][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.969476][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.980864][ T745] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.988667][ T745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.999888][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.014857][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 137.028489][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.045602][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 137.062627][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.077577][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.090838][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.103649][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.117529][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.132474][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.142155][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.151416][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.159918][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.170786][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.180654][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.201242][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.221186][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.233412][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.252763][ T2344] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 137.270112][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.279201][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.287803][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.296218][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.310615][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.324830][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.360454][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.371246][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 137.418125][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.679887][ T2362] loop2: detected capacity change from 0 to 256 [ 138.742066][ T28] audit: type=1326 audit(1743514990.690:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2356 comm="syz.0.580" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc43d98d169 code=0x0 [ 138.936308][ T2369] netlink: 72 bytes leftover after parsing attributes in process `syz.3.583'. [ 138.945327][ T2369] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 138.954508][ T2369] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 138.962204][ T2369] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 142.368257][ T2395] loop2: detected capacity change from 0 to 512 [ 142.640076][ T2395] EXT4-fs (loop2): 1 orphan inode deleted [ 142.646034][ T2395] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 142.657201][ T2395] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.559645][ T2403] loop1: detected capacity change from 0 to 512 [ 143.580500][ T1443] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 143.590103][ T1443] EXT4-fs error (device loop2): ext4_release_dquot:6805: comm kworker/u4:8: Failed to release dquot type 1 [ 143.791124][ T2403] EXT4-fs (loop1): Test dummy encryption mode enabled [ 144.061688][ T296] EXT4-fs (loop2): unmounting filesystem. [ 144.090540][ T2403] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 144.118244][ T2403] EXT4-fs (loop1): 1 truncate cleaned up [ 144.124061][ T2403] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 144.506151][ T292] EXT4-fs (loop1): unmounting filesystem. [ 149.540338][ T28] audit: type=1400 audit(1743515001.460:487): avc: denied { write } for pid=2447 comm="syz.2.602" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 149.700277][ T2192] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 149.883550][ T2192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 149.894923][ T2192] usb 2-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 149.904135][ T2192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.913120][ T2192] usb 2-1: config 0 descriptor?? [ 149.918408][ T2444] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 150.523440][ T2466] netlink: 72 bytes leftover after parsing attributes in process `syz.0.606'. [ 150.538885][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.872823][ T2192] wacom 0003:056A:0029.0001: unknown main item tag 0x3 [ 150.879838][ T2192] wacom 0003:056A:0029.0001: Unknown device_type for 'HID 056a:0029'. Assuming pen. [ 150.890111][ T2192] wacom 0003:056A:0029.0001: hidraw0: USB HID v1.01 Device [HID 056a:0029] on usb-dummy_hcd.1-1/input0 [ 150.902236][ T2192] input: Wacom Intuos5 S Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0029.0001/input/input4 [ 150.947420][ T28] audit: type=1400 audit(1743515002.890:488): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=612 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.977087][ T28] audit: type=1400 audit(1743515002.890:489): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=612 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.010580][ T28] audit: type=1400 audit(1743515002.960:490): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=612 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.066648][ T317] usb 2-1: USB disconnect, device number 7 [ 151.259019][ T2474] netlink: 72 bytes leftover after parsing attributes in process `syz.2.607'. [ 151.269442][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.973043][ T2497] bridge0: port 3(macsec1) entered blocking state [ 152.272166][ T2497] bridge0: port 3(macsec1) entered disabled state [ 152.379629][ T2501] netlink: 552 bytes leftover after parsing attributes in process `syz.1.611'. [ 152.388661][ T2501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'. [ 153.409082][ T28] audit: type=1400 audit(1743515005.350:491): avc: denied { read } for pid=2517 comm="syz.1.618" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 153.470092][ T2522] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 153.478914][ T2522] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 153.700456][ T28] audit: type=1400 audit(1743515005.380:492): avc: denied { open } for pid=2517 comm="syz.1.618" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 153.913519][ T2527] netlink: 72 bytes leftover after parsing attributes in process `syz.0.619'. [ 153.930674][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.352325][ T28] audit: type=1326 audit(1743515006.300:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2528 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657c78d169 code=0x7ffc0000 [ 154.421119][ T28] audit: type=1326 audit(1743515006.300:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2528 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657c78d169 code=0x7ffc0000 [ 154.492201][ T28] audit: type=1326 audit(1743515006.320:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2528 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f657c78d169 code=0x7ffc0000 [ 154.545960][ T28] audit: type=1326 audit(1743515006.320:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2528 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657c78d169 code=0x7ffc0000 [ 154.593609][ T28] audit: type=1326 audit(1743515006.320:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2528 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657c78d169 code=0x7ffc0000 [ 154.666561][ T28] audit: type=1326 audit(1743515006.320:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2528 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f657c78d169 code=0x7ffc0000 [ 154.725417][ T28] audit: type=1326 audit(1743515006.320:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2528 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657c78d169 code=0x7ffc0000 [ 154.779291][ T28] audit: type=1326 audit(1743515006.320:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2528 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657c78d169 code=0x7ffc0000 [ 154.779302][ T2541] loop1: detected capacity change from 0 to 256 [ 154.833450][ T28] audit: type=1326 audit(1743515006.320:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2528 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f657c78d169 code=0x7ffc0000 [ 154.882846][ T28] audit: type=1326 audit(1743515006.320:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2528 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657c78d169 code=0x7ffc0000 [ 154.931745][ T28] audit: type=1326 audit(1743515006.320:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2528 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f657c78d169 code=0x7ffc0000 [ 154.982625][ T28] audit: type=1326 audit(1743515006.320:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2528 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657c78d169 code=0x7ffc0000 [ 155.006678][ T28] audit: type=1326 audit(1743515006.320:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2528 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657c78d169 code=0x7ffc0000 [ 155.047854][ T28] audit: type=1326 audit(1743515006.320:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2528 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f657c78d169 code=0x7ffc0000 [ 155.177333][ T2547] loop2: detected capacity change from 0 to 256 [ 155.194398][ T2547] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 155.208193][ T2547] exFAT-fs (loop2): failed to load alloc-bitmap [ 155.216250][ T2547] exFAT-fs (loop2): failed to recognize exfat type [ 155.262925][ T2548] netlink: 72 bytes leftover after parsing attributes in process `syz.5.624'. [ 155.272015][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 155.288863][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 156.773359][ T2560] netlink: 40 bytes leftover after parsing attributes in process `syz.5.627'. [ 159.851194][ T2586] netlink: 72 bytes leftover after parsing attributes in process `syz.3.632'. [ 159.860402][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 159.893767][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 159.907120][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.277712][ T2588] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.513624][ T2639] loop5: detected capacity change from 0 to 128 [ 164.707760][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 164.707775][ T28] audit: type=1400 audit(1743515016.650:513): avc: denied { setopt } for pid=2631 comm="syz.3.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 167.118604][ T2657] loop1: detected capacity change from 0 to 512 [ 167.145688][ T2657] ext4: Unknown parameter 'euid' [ 168.718981][ T2675] loop5: detected capacity change from 0 to 2048 [ 168.816008][ T2675] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 168.953233][ T2675] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.655: bg 0: block 234: padding at end of block bitmap is not set [ 168.970511][ T2675] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 860 with error 28 [ 168.982831][ T2675] EXT4-fs (loop5): This should not happen!! Data will be lost [ 168.982831][ T2675] [ 168.992353][ T2675] EXT4-fs (loop5): Total free blocks count 0 [ 169.053150][ T2683] netlink: 40 bytes leftover after parsing attributes in process `syz.0.656'. [ 169.120284][ T2675] EXT4-fs (loop5): Free/Dirty block details [ 169.149357][ T2675] EXT4-fs (loop5): free_blocks=0 [ 169.326932][ T2675] EXT4-fs (loop5): dirty_blocks=864 [ 169.332076][ T2675] EXT4-fs (loop5): Block reservation details [ 169.337934][ T2675] EXT4-fs (loop5): i_reserved_data_blocks=54 [ 169.512769][ T2688] loop2: detected capacity change from 0 to 1024 [ 170.831608][ T1214] EXT4-fs (loop5): unmounting filesystem. [ 171.653232][ T28] audit: type=1400 audit(1743515023.600:514): avc: denied { create } for pid=2702 comm="syz.5.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 171.678224][ T2703] loop5: detected capacity change from 0 to 256 [ 171.707174][ T2703] FAT-fs (loop5): Unrecognized mount option "shortname=lowerAiocharset=cp949" or missing value [ 171.855681][ T28] audit: type=1400 audit(1743515023.800:515): avc: denied { create } for pid=2709 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 171.858070][ T2710] loop2: detected capacity change from 0 to 256 [ 171.970379][ T39] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 172.162323][ T39] usb 2-1: config 0 has an invalid interface number: 72 but max is 0 [ 172.185570][ T39] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.207063][ T39] usb 2-1: config 0 has no interface number 0 [ 172.219803][ T39] usb 2-1: New USB device found, idVendor=12d1, idProduct=d03d, bcdDevice=2f.07 [ 172.238758][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.259535][ T39] usb 2-1: config 0 descriptor?? [ 172.553990][ T2718] loop5: detected capacity change from 0 to 256 [ 172.572541][ T2718] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 172.584891][ T2718] exFAT-fs (loop5): failed to load alloc-bitmap [ 172.594743][ T2718] exFAT-fs (loop5): failed to recognize exfat type [ 173.244172][ T2732] loop2: detected capacity change from 0 to 256 [ 173.939030][ T39] usb 2-1: string descriptor 0 read error: -71 [ 173.960708][ T39] cdc_mbim 2-1:0.72: skipping garbage [ 173.966057][ T39] cdc_mbim 2-1:0.72: CDC Union missing and no IAD found [ 173.980248][ T39] cdc_mbim 2-1:0.72: bind() failure [ 174.000666][ T39] usb 2-1: USB disconnect, device number 8 [ 175.699609][ T1041] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 176.160703][ T28] audit: type=1400 audit(1743515028.110:516): avc: denied { read write } for pid=2764 comm="syz.1.675" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 176.227740][ T28] audit: type=1400 audit(1743515028.140:517): avc: denied { open } for pid=2764 comm="syz.1.675" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 176.531076][ T2772] loop5: detected capacity change from 0 to 256 [ 177.148298][ T2785] loop1: detected capacity change from 0 to 256 [ 177.166879][ T2785] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 177.179647][ T2785] exFAT-fs (loop1): failed to load alloc-bitmap [ 177.186124][ T2785] exFAT-fs (loop1): failed to recognize exfat type [ 177.257120][ T2789] loop2: detected capacity change from 0 to 256 [ 177.344821][ T2789] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 177.510339][ T28] audit: type=1400 audit(1743515029.360:518): avc: denied { mounton } for pid=2781 comm="syz.2.680" path="/137/file0/file0" dev="loop2" ino=1048608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.205922][ T28] audit: type=1400 audit(1743515031.150:519): avc: denied { remove_name } for pid=296 comm="syz-executor" name=".index" dev="loop2" ino=1048609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.256690][ T28] audit: type=1400 audit(1743515031.150:520): avc: denied { rmdir } for pid=296 comm="syz-executor" name=".index" dev="loop2" ino=1048609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.340440][ T2797] loop1: detected capacity change from 0 to 512 [ 179.350011][ T2797] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.359141][ T2797] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 179.484342][ T2797] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 179.492373][ T2797] System zones: 1-12 [ 179.570526][ T2797] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.683: corrupted in-inode xattr [ 179.583771][ T2797] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.683: couldn't read orphan inode 15 (err -117) [ 179.598160][ T2797] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 180.004234][ T28] audit: type=1400 audit(1743515031.180:521): avc: denied { unlink } for pid=296 comm="syz-executor" name="file0" dev="loop2" ino=1048615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 180.650767][ T292] EXT4-fs (loop1): unmounting filesystem. [ 180.699266][ T28] audit: type=1400 audit(1743515032.640:522): avc: denied { bind } for pid=2807 comm="syz.1.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 180.739078][ T28] audit: type=1400 audit(1743515032.670:523): avc: denied { listen } for pid=2807 comm="syz.1.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 180.804464][ T2812] loop1: detected capacity change from 0 to 512 [ 180.834926][ T2812] EXT4-fs: Ignoring removed i_version option [ 180.840899][ T2812] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.842863][ T39] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 180.854717][ T28] audit: type=1400 audit(1743515032.670:524): avc: denied { accept } for pid=2807 comm="syz.1.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 180.884296][ T2812] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 180.896660][ T2812] EXT4-fs (loop1): 1 truncate cleaned up [ 180.902339][ T2812] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 181.333668][ T39] usb 3-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config [ 181.405699][ T39] usb 3-1: too many endpoints for config 1 interface 0 altsetting 165: 159, using maximum allowed: 30 [ 181.505073][ T39] usb 3-1: config 1 interface 0 altsetting 165 has 0 endpoint descriptors, different from the interface descriptor's value: 159 [ 181.550046][ T39] usb 3-1: config 1 interface 0 has no altsetting 0 [ 181.612610][ T39] usb 3-1: string descriptor 0 read error: -22 [ 181.618826][ T39] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 181.627942][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.695925][ T28] audit: type=1400 audit(1743515033.640:525): avc: denied { bind } for pid=2822 comm="syz.0.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 181.733638][ T292] EXT4-fs (loop1): unmounting filesystem. [ 181.742496][ T28] audit: type=1400 audit(1743515033.670:526): avc: denied { setopt } for pid=2822 comm="syz.0.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 181.914577][ T19] usb 3-1: USB disconnect, device number 6 [ 182.435974][ T2835] loop1: detected capacity change from 0 to 512 [ 182.545424][ T2835] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 184.410489][ T2835] EXT4-fs (loop1): orphan cleanup on readonly fs [ 184.418887][ T2835] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 184.428329][ T2835] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 184.437587][ T2835] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.693: Failed to acquire dquot type 1 [ 184.452652][ T2835] EXT4-fs (loop1): 1 truncate cleaned up [ 184.458602][ T2835] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 185.298716][ T292] EXT4-fs (loop1): unmounting filesystem. [ 188.591488][ T28] audit: type=1400 audit(1743515040.540:527): avc: denied { setattr } for pid=2872 comm="syz.1.701" name="NETLINK" dev="sockfs" ino=24134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.934051][ T2882] loop5: detected capacity change from 0 to 4096 [ 188.957746][ T2882] EXT4-fs (loop5): Test dummy encryption mode enabled [ 188.966306][ T2882] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 189.034783][ T28] audit: type=1400 audit(1743515040.980:528): avc: denied { accept } for pid=2876 comm="syz.3.704" path="socket:[24163]" dev="sockfs" ino=24163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.570444][ T1214] EXT4-fs (loop5): unmounting filesystem. [ 189.616271][ T2895] loop1: detected capacity change from 0 to 256 [ 189.994572][ T2904] device ipip0 entered promiscuous mode [ 191.820275][ T2837] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 191.980997][ T28] audit: type=1400 audit(1743515043.930:529): avc: denied { create } for pid=2914 comm="syz.2.714" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 192.586498][ T2837] usb 6-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config [ 192.599740][ T2837] usb 6-1: too many endpoints for config 1 interface 0 altsetting 165: 159, using maximum allowed: 30 [ 192.617773][ T2837] usb 6-1: config 1 interface 0 altsetting 165 has 0 endpoint descriptors, different from the interface descriptor's value: 159 [ 192.631048][ T2837] usb 6-1: config 1 interface 0 has no altsetting 0 [ 192.641452][ T2837] usb 6-1: string descriptor 0 read error: -71 [ 192.654177][ T2837] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 192.663607][ T2837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.679775][ T2837] usb 6-1: can't set config #1, error -71 [ 192.690795][ T2837] usb 6-1: USB disconnect, device number 4 [ 192.865890][ T28] audit: type=1400 audit(1743515044.810:530): avc: denied { unlink } for pid=296 comm="syz-executor" name="file0" dev="tmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 193.191949][ T2935] loop5: detected capacity change from 0 to 1024 [ 194.257243][ T2939] loop5: detected capacity change from 0 to 128 [ 195.488740][ T2964] loop2: detected capacity change from 0 to 256 [ 195.511039][ T2964] FAT-fs (loop2): Unrecognized mount option "utfDàêutf8=0" or missing value [ 195.610011][ T2439] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 198.725490][ T3005] loop5: detected capacity change from 0 to 128 [ 199.721382][ T3025] loop5: detected capacity change from 0 to 256 [ 199.843463][ T3007] loop2: detected capacity change from 0 to 40427 [ 199.869944][ T3007] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 199.877705][ T3007] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 200.093604][ T3007] F2FS-fs (loop2): Found nat_bits in checkpoint [ 200.197968][ T3007] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 200.205232][ T3007] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 200.340245][ T316] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 200.452331][ T3037] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 200.463540][ T3037] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 201.735524][ T316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.746537][ T316] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 201.766502][ T316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.833125][ T316] usb 6-1: config 0 descriptor?? [ 202.406671][ T316] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 202.427031][ T316] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0002/input/input7 [ 202.513937][ T316] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 203.164402][ T317] usb 6-1: USB disconnect, device number 5 [ 203.630293][ T3061] loop2: detected capacity change from 0 to 16 [ 203.639715][ T3061] erofs: (device loop2): mounted with root inode @ nid 36. [ 204.047110][ T3067] loop1: detected capacity change from 0 to 128 [ 204.771835][ T3068] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 204.780610][ T3068] overlayfs: missing 'lowerdir' [ 206.760393][ T3084] ip6t_rpfilter: unknown options [ 207.811325][ T3099] loop2: detected capacity change from 0 to 1024 [ 207.861593][ T3099] EXT4-fs: Ignoring removed orlov option [ 207.873643][ T3099] EXT4-fs: Ignoring removed nobh option [ 207.895780][ T3099] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 207.979184][ T3099] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 208.777753][ T296] EXT4-fs (loop2): unmounting filesystem. [ 209.974114][ T3121] loop2: detected capacity change from 0 to 512 [ 209.986906][ T3121] EXT4-fs: Ignoring removed mblk_io_submit option [ 210.020503][ T3121] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 210.184701][ T3121] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 210.192835][ T3121] System zones: 1-12 [ 210.328240][ T3121] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.761: corrupted in-inode xattr [ 210.341672][ T3121] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.761: couldn't read orphan inode 15 (err -117) [ 210.355198][ T3121] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 211.401682][ T3132] netlink: 72 bytes leftover after parsing attributes in process `syz.3.762'. [ 211.411232][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 211.441348][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 211.454304][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 211.693310][ T296] EXT4-fs (loop2): unmounting filesystem. [ 212.476017][ T3145] loop1: detected capacity change from 0 to 512 [ 212.531037][ T3145] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.768: Parent and EA inode have the same ino 15 [ 212.626867][ T3145] EXT4-fs (loop1): 1 orphan inode deleted [ 212.650943][ T3145] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 212.677213][ T28] audit: type=1400 audit(1743515064.620:531): avc: denied { mounton } for pid=3144 comm="syz.1.768" path="/142/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 212.718122][ T3160] loop5: detected capacity change from 0 to 1024 [ 212.724743][ T3160] EXT4-fs: Ignoring removed orlov option [ 212.730552][ T3145] overlayfs: unrecognized mount option "/" or missing value [ 212.737496][ T3156] futex_wake_op: syz.0.780 tries to shift op by 32; fix this program [ 212.746222][ T3160] EXT4-fs (loop5): Test dummy encryption mode enabled [ 213.286410][ T3160] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 214.019080][ T1214] EXT4-fs (loop5): unmounting filesystem. [ 214.400699][ T3176] loop5: detected capacity change from 0 to 8192 [ 215.426983][ T28] audit: type=1400 audit(1743515067.050:532): avc: denied { append } for pid=3175 comm="syz.5.774" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 215.674267][ T292] EXT4-fs (loop1): unmounting filesystem. [ 216.217188][ T3197] netlink: 72 bytes leftover after parsing attributes in process `syz.1.778'. [ 216.235806][ T3197] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 216.522574][ T3200] loop5: detected capacity change from 0 to 1024 [ 216.553142][ T3200] EXT4-fs: Ignoring removed orlov option [ 216.559085][ T3200] EXT4-fs (loop5): Test dummy encryption mode enabled [ 216.586840][ T3200] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 216.901833][ T28] audit: type=1400 audit(1743515068.850:533): avc: denied { relabelfrom } for pid=3199 comm="syz.5.779" name="" dev="pipefs" ino=25611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 216.937057][ T3213] loop1: detected capacity change from 0 to 2048 [ 217.265019][ T3220] loop1: detected capacity change from 0 to 16 [ 217.700821][ T3220] erofs: (device loop1): mounted with root inode @ nid 36. [ 217.889114][ T28] audit: type=1400 audit(1743515069.830:534): avc: denied { lock } for pid=3224 comm="syz.3.786" path="socket:[25624]" dev="sockfs" ino=25624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 218.038171][ T1214] EXT4-fs (loop5): unmounting filesystem. [ 218.113811][ T3235] loop1: detected capacity change from 0 to 512 [ 218.151293][ T3235] EXT4-fs (loop1): Test dummy encryption mode enabled [ 218.157958][ T3235] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 218.534581][ T3235] EXT4-fs (loop1): 1 truncate cleaned up [ 218.540297][ T3235] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 218.624916][ T3235] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 219.337538][ T292] EXT4-fs (loop1): unmounting filesystem. [ 219.350453][ T3247] loop2: detected capacity change from 0 to 256 [ 219.500473][ T3247] exfat: Bad value for 'fmask' [ 221.799276][ T3270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 223.564218][ T28] audit: type=1326 audit(1743515075.510:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3244 comm="syz.2.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657c78d169 code=0x7ffc0000 [ 223.900369][ T3287] netlink: 72 bytes leftover after parsing attributes in process `syz.3.799'. [ 223.910059][ T3287] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 223.950818][ T3287] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 223.963736][ T3287] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 224.916653][ T28] audit: type=1326 audit(1743515075.540:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3244 comm="syz.2.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657c78d169 code=0x7ffc0000 [ 225.073716][ T3299] device wg2 left promiscuous mode [ 227.815554][ T3324] loop1: detected capacity change from 0 to 128 [ 227.829548][ T3324] FAT-fs (loop1): Directory bread(block 162) failed [ 227.838149][ T3324] FAT-fs (loop1): Directory bread(block 163) failed [ 227.849520][ T3324] FAT-fs (loop1): Directory bread(block 164) failed [ 227.860227][ T3324] FAT-fs (loop1): Directory bread(block 165) failed [ 227.872881][ T3324] FAT-fs (loop1): Directory bread(block 166) failed [ 227.887616][ T3324] FAT-fs (loop1): Directory bread(block 167) failed [ 227.901337][ T3324] FAT-fs (loop1): Directory bread(block 168) failed [ 227.913988][ T3324] FAT-fs (loop1): Directory bread(block 169) failed [ 229.505193][ T3343] netlink: 72 bytes leftover after parsing attributes in process `syz.2.811'. [ 229.517973][ T3343] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 229.536281][ T3343] device syztnl2 entered promiscuous mode [ 230.047499][ T3350] loop2: detected capacity change from 0 to 512 [ 230.070158][ T3350] EXT4-fs: Ignoring removed orlov option [ 230.106564][ T3350] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.813: casefold flag without casefold feature [ 230.139456][ T3350] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.813: couldn't read orphan inode 15 (err -117) [ 230.177510][ T3350] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 230.229988][ T3356] tc_dump_action: action bad kind [ 230.300254][ T39] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 230.396608][ T296] EXT4-fs (loop2): unmounting filesystem. [ 230.528389][ T39] usb 6-1: Using ep0 maxpacket: 16 [ 230.776457][ T39] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 230.796238][ T39] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.812153][ T39] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.824258][ T39] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.833239][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.841008][ T39] usb 6-1: Product: syz [ 230.844983][ T39] usb 6-1: Manufacturer: syz [ 230.849393][ T39] usb 6-1: SerialNumber: syz [ 231.059832][ T39] usb 6-1: 0:2 : does not exist [ 231.067616][ T39] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 231.078363][ T39] usb 6-1: USB disconnect, device number 6 [ 231.296345][ T2439] udevd[2439]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 231.435658][ T3376] loop1: detected capacity change from 0 to 2048 [ 231.456506][ T3376] EXT4-fs: Ignoring removed mblk_io_submit option [ 231.462871][ T3376] EXT4-fs: dax option not supported [ 231.832153][ T3376] loop1: detected capacity change from 0 to 256 [ 231.838474][ T3376] exfat: Deprecated parameter 'namecase' [ 231.857411][ T3376] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 232.042106][ T3383] loop5: detected capacity change from 0 to 128 [ 232.141759][ T3383] FAT-fs (loop5): Directory bread(block 162) failed [ 232.148486][ T3383] FAT-fs (loop5): Directory bread(block 163) failed [ 232.395558][ T3383] FAT-fs (loop5): Directory bread(block 164) failed [ 232.416123][ T3383] FAT-fs (loop5): Directory bread(block 165) failed [ 232.443705][ T3383] FAT-fs (loop5): Directory bread(block 166) failed [ 232.450159][ T3383] FAT-fs (loop5): Directory bread(block 167) failed [ 232.456822][ T3383] FAT-fs (loop5): Directory bread(block 168) failed [ 232.473511][ T3383] FAT-fs (loop5): Directory bread(block 169) failed [ 233.614085][ T3405] netlink: 72 bytes leftover after parsing attributes in process `syz.0.825'. [ 233.631512][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 233.861784][ T3407] loop1: detected capacity change from 0 to 256 [ 233.883902][ T3407] exfat: Deprecated parameter 'namecase' [ 233.912709][ T3407] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 236.161247][ T3428] netlink: 72 bytes leftover after parsing attributes in process `syz.2.831'. [ 236.200229][ T3428] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.320433][ T3439] xt_CT: No such helper "snmp" [ 238.308893][ T3434] 9pnet_fd: Insufficient options for proto=fd [ 238.408032][ T3452] incfs: Error accessing: ./file0. [ 238.413252][ T3452] incfs: mount failed -2 [ 238.435703][ T3452] device vlan2 entered promiscuous mode [ 240.664278][ T3451] netlink: 72 bytes leftover after parsing attributes in process `syz.3.838'. [ 240.780228][ T3451] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 240.799802][ T3451] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 240.817895][ T3451] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 240.917268][ T3469] loop2: detected capacity change from 0 to 1024 [ 240.926016][ T3469] EXT4-fs: Ignoring removed bh option [ 240.933478][ T3469] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 241.014958][ T3451] device wg2 entered promiscuous mode [ 241.196998][ T3469] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 241.320272][ T28] audit: type=1400 audit(1743515093.200:537): avc: denied { append } for pid=3465 comm="syz.2.840" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 242.030237][ T28] audit: type=1400 audit(1743515093.200:538): avc: denied { open } for pid=3465 comm="syz.2.840" path="/172/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 242.055943][ T296] EXT4-fs (loop2): unmounting filesystem. [ 242.155722][ T3458] netlink: 'syz.0.849': attribute type 27 has an invalid length. [ 242.166741][ T3458] device lo left promiscuous mode [ 242.175947][ T3458] device tunl0 left promiscuous mode [ 242.196429][ T3458] device gre0 left promiscuous mode [ 242.222671][ T3458] device gretap0 left promiscuous mode [ 242.284760][ T3458] device erspan0 left promiscuous mode [ 242.310503][ T3458] device ip_vti0 left promiscuous mode [ 242.320788][ T3458] device ip6_vti0 left promiscuous mode [ 242.330983][ T3458] device sit0 left promiscuous mode [ 242.477647][ T3458] device ip6tnl0 left promiscuous mode [ 242.493905][ T3458] device ip6gre0 left promiscuous mode [ 242.560271][ T28] audit: type=1400 audit(1743515094.500:539): avc: denied { read } for pid=3474 comm="syz.2.841" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 242.610771][ T3458] device syz_tun left promiscuous mode [ 242.620251][ T28] audit: type=1400 audit(1743515094.540:540): avc: denied { open } for pid=3474 comm="syz.2.841" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 242.644051][ T3458] device ip6gretap0 left promiscuous mode [ 242.649635][ T28] audit: type=1400 audit(1743515094.560:541): avc: denied { ioctl } for pid=3474 comm="syz.2.841" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 242.678944][ T3458] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.686058][ T3458] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.705529][ T3458] device bridge0 left promiscuous mode [ 242.716962][ T3458] device vcan0 left promiscuous mode [ 242.727825][ T3458] device dummy0 left promiscuous mode [ 242.739304][ T3458] device veth0 left promiscuous mode [ 242.757877][ T3458] device veth1 left promiscuous mode [ 242.771663][ T3458] device wg0 left promiscuous mode [ 242.782001][ T3458] device wg1 left promiscuous mode [ 242.792904][ T3458] device wg2 left promiscuous mode [ 242.803683][ T3458] device veth0_to_bridge left promiscuous mode [ 242.818137][ T3458] device veth1_to_bridge left promiscuous mode [ 242.835818][ T3458] device veth0_to_bond left promiscuous mode [ 242.842496][ T3458] device bond_slave_0 left promiscuous mode [ 242.848886][ T3458] device veth1_to_bond left promiscuous mode [ 242.855571][ T3458] device bond_slave_1 left promiscuous mode [ 242.862044][ T3458] device veth0_to_team left promiscuous mode [ 242.868635][ T3458] device team_slave_0 left promiscuous mode [ 242.875624][ T3458] device veth1_to_team left promiscuous mode [ 242.882468][ T3458] device team_slave_1 left promiscuous mode [ 242.888901][ T3458] device veth0_to_batadv left promiscuous mode [ 242.896256][ T3458] device batadv_slave_0 left promiscuous mode [ 242.924495][ T3458] device veth1_to_batadv left promiscuous mode [ 243.304393][ T3458] device batadv_slave_1 left promiscuous mode [ 243.331182][ T3458] device xfrm0 left promiscuous mode [ 243.342781][ T3458] device veth0_to_hsr left promiscuous mode [ 243.350632][ T28] audit: type=1400 audit(1743515095.300:542): avc: denied { unlink } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 243.381479][ T3458] device hsr_slave_0 left promiscuous mode [ 243.400012][ T3458] device veth1_to_hsr left promiscuous mode [ 243.415779][ T3458] device hsr_slave_1 left promiscuous mode [ 243.428042][ T3458] device veth1_virt_wifi left promiscuous mode [ 243.450595][ T3458] device veth0_virt_wifi left promiscuous mode [ 243.462110][ T3458] device veth1_vlan left promiscuous mode [ 243.474282][ T3458] device vlan0 left promiscuous mode [ 243.480307][ T3458] device vlan1 left promiscuous mode [ 243.491494][ T3458] device veth0_macvtap left promiscuous mode [ 243.504445][ T3458] device macsec0 left promiscuous mode [ 243.515547][ T3458] device bridge1 left promiscuous mode [ 243.532273][ T3458] device bridge2 left promiscuous mode [ 243.561620][ T3478] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 243.573537][ T3478] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.580445][ T3478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.588975][ T3478] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.595881][ T3478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.764388][ T3478] device veth0_vlan left promiscuous mode [ 244.800642][ T3478] device veth0_vlan entered promiscuous mode [ 244.875758][ T3478] device veth1_macvtap left promiscuous mode [ 244.882697][ T3478] device veth1_macvtap entered promiscuous mode [ 244.903493][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.912069][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.919534][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.928199][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.938294][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.252626][ T3506] loop2: detected capacity change from 0 to 512 [ 245.259052][ T3506] EXT4-fs: Ignoring removed i_version option [ 245.447692][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.456696][ T3506] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 245.546897][ T3508] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 245.565317][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.862772][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.881465][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.901685][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.917376][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.937799][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.946835][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.955548][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.964713][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.972563][ T3502] loop1: detected capacity change from 0 to 40427 [ 246.077371][ T3502] F2FS-fs (loop1): Found nat_bits in checkpoint [ 246.149461][ T3502] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 246.748650][ T28] audit: type=1400 audit(1743515098.690:543): avc: denied { remount } for pid=3501 comm="syz.1.847" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 247.172618][ T292] syz-executor: attempt to access beyond end of device [ 247.172618][ T292] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 248.021155][ T3543] loop1: detected capacity change from 0 to 16 [ 248.031008][ T3543] erofs: (device loop1): mounted with root inode @ nid 36. [ 248.063430][ T3543] syz.1.856: attempt to access beyond end of device [ 248.063430][ T3543] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 249.863116][ T3560] netlink: 40 bytes leftover after parsing attributes in process `syz.2.860'. [ 252.358409][ T3582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.865'. [ 252.367119][ T3582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.865'. [ 253.336734][ T3601] netlink: 72 bytes leftover after parsing attributes in process `syz.0.868'. [ 253.345893][ T3601] device lo entered promiscuous mode [ 253.368213][ T3601] device tunl0 entered promiscuous mode [ 253.379573][ T3601] device gre0 entered promiscuous mode [ 253.392320][ T3601] device gretap0 entered promiscuous mode [ 253.405046][ T3601] device erspan0 entered promiscuous mode [ 253.417665][ T3601] device ip_vti0 entered promiscuous mode [ 253.430475][ T3601] device ip6_vti0 entered promiscuous mode [ 253.442636][ T3601] device sit0 entered promiscuous mode [ 253.456160][ T3601] device ip6tnl0 entered promiscuous mode [ 253.468553][ T3601] device ip6gre0 entered promiscuous mode [ 253.480843][ T3601] device syz_tun entered promiscuous mode [ 253.494080][ T3601] device ip6gretap0 entered promiscuous mode [ 253.506947][ T3601] device bridge0 entered promiscuous mode [ 253.513143][ T3601] device vcan0 entered promiscuous mode [ 253.518597][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.525692][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.532845][ T3601] device dummy0 entered promiscuous mode [ 253.538839][ T3601] device veth0 entered promiscuous mode [ 253.544932][ T3601] device veth1 entered promiscuous mode [ 253.550816][ T3601] device wg0 entered promiscuous mode [ 253.556341][ T3601] device wg1 entered promiscuous mode [ 253.561917][ T3601] device wg2 entered promiscuous mode [ 253.567514][ T3601] device veth0_to_bridge entered promiscuous mode [ 253.574790][ T3601] device veth1_to_bridge entered promiscuous mode [ 253.582000][ T3601] device veth0_to_bond entered promiscuous mode [ 253.588496][ T3601] device bond_slave_0 entered promiscuous mode [ 253.594905][ T3601] device veth1_to_bond entered promiscuous mode [ 253.601415][ T3601] device bond_slave_1 entered promiscuous mode [ 253.607775][ T3601] device veth0_to_team entered promiscuous mode [ 253.614366][ T3601] device team_slave_0 entered promiscuous mode [ 253.621120][ T3601] device veth1_to_team entered promiscuous mode [ 253.627631][ T3601] device team_slave_1 entered promiscuous mode [ 253.634106][ T3601] device veth0_to_batadv entered promiscuous mode [ 253.640881][ T3601] device batadv_slave_0 entered promiscuous mode [ 253.647564][ T3601] device veth1_to_batadv entered promiscuous mode [ 253.654233][ T3601] device batadv_slave_1 entered promiscuous mode [ 253.660849][ T3601] device xfrm0 entered promiscuous mode [ 253.668348][ T3601] device veth0_to_hsr entered promiscuous mode [ 253.674911][ T3601] device hsr_slave_0 entered promiscuous mode [ 253.681281][ T3601] device veth1_to_hsr entered promiscuous mode [ 253.687719][ T3601] device hsr_slave_1 entered promiscuous mode [ 253.694105][ T3601] device veth1_virt_wifi entered promiscuous mode [ 253.700833][ T3601] device veth0_virt_wifi entered promiscuous mode [ 253.707614][ T3601] device veth1_vlan entered promiscuous mode [ 253.714673][ T3601] device vlan0 entered promiscuous mode [ 253.720566][ T3601] device vlan1 entered promiscuous mode [ 253.726872][ T3601] device veth0_macvtap entered promiscuous mode [ 253.733423][ T3601] device macsec0 entered promiscuous mode [ 253.739460][ T3601] device bridge1 entered promiscuous mode [ 253.745472][ T3601] device bridge2 entered promiscuous mode [ 255.398568][ T3617] loop2: detected capacity change from 0 to 512 [ 259.495751][ T3617] EXT4-fs (loop2): Test dummy encryption mode enabled [ 259.502391][ T3617] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 259.538199][ T3617] EXT4-fs: failed to create workqueue [ 259.543448][ T3617] EXT4-fs (loop2): mount failed [ 260.186453][ T3633] loop5: detected capacity change from 0 to 512 [ 260.380535][ T3633] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.878: inode #1: comm syz.5.878: iget: illegal inode # [ 260.521729][ T3633] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.878: error while reading EA inode 1 err=-117 [ 260.566100][ T3633] EXT4-fs (loop5): 1 orphan inode deleted [ 260.571764][ T3633] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 262.150599][ T3660] netlink: 72 bytes leftover after parsing attributes in process `syz.2.882'. [ 262.167742][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 262.772676][ T1214] EXT4-fs (loop5): unmounting filesystem. [ 263.724443][ T3674] loop5: detected capacity change from 0 to 256 [ 263.799291][ T3671] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 264.158304][ T3691] loop1: detected capacity change from 0 to 256 [ 264.169144][ T3691] exfat: Unknown parameter '' [ 264.174997][ T39] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 264.206765][ T3692] loop2: detected capacity change from 0 to 256 [ 264.360212][ T39] usb 6-1: Using ep0 maxpacket: 16 [ 264.369605][ T39] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 264.378980][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.387740][ T39] usb 6-1: Product: syz [ 264.393345][ T39] usb 6-1: Manufacturer: syz [ 264.397807][ T39] usb 6-1: SerialNumber: syz [ 264.424704][ T39] usb 6-1: config 0 descriptor?? [ 264.440654][ T39] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 264.450552][ T39] usb 6-1: Detected FT232H [ 266.209079][ T3707] loop2: detected capacity change from 0 to 512 [ 266.215482][ T3707] ext4: Bad value for 'sb' [ 267.005617][ T39] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 267.023497][ T39] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 267.068913][ T39] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 267.145673][ T2475] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 267.190444][ T39] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 267.228968][ T39] usb 6-1: USB disconnect, device number 7 [ 267.515341][ T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 267.741742][ T39] ftdi_sio 6-1:0.0: device disconnected [ 267.747400][ T28] audit: type=1400 audit(1743515119.690:544): avc: denied { accept } for pid=3722 comm="syz.2.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 268.838764][ T3730] netlink: 96 bytes leftover after parsing attributes in process `syz.0.897'. [ 268.959861][ T6] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 268.990553][ T3731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.899'. [ 269.030392][ T28] audit: type=1400 audit(1743515120.980:545): avc: denied { write } for pid=3727 comm="syz.5.899" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 269.055376][ T3731] random: crng reseeded on system resumption [ 269.144504][ T28] audit: type=1400 audit(1743515121.010:546): avc: denied { ioctl } for pid=3727 comm="syz.5.899" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 269.171282][ T6] usb 3-1: config 1 interface 0 altsetting 144 endpoint 0x1 is Bulk; changing to Interrupt [ 269.184429][ T6] usb 3-1: config 1 interface 0 altsetting 144 endpoint 0x82 is Bulk; changing to Interrupt [ 269.549564][ T6] usb 3-1: config 1 interface 0 has no altsetting 0 [ 269.567613][ T6] usb 3-1: string descriptor 0 read error: -22 [ 269.573688][ T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 269.600198][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.613993][ T3724] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 269.621151][ T3724] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 269.682617][ T28] audit: type=1326 audit(1743515121.630:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3736 comm="syz.0.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43d98d169 code=0x7ffc0000 [ 269.724082][ T28] audit: type=1326 audit(1743515121.660:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3736 comm="syz.0.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43d98d169 code=0x7ffc0000 [ 269.765777][ T28] audit: type=1326 audit(1743515121.660:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3736 comm="syz.0.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc43d98d169 code=0x7ffc0000 [ 269.825220][ T28] audit: type=1326 audit(1743515121.660:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3736 comm="syz.0.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43d98d169 code=0x7ffc0000 [ 269.850784][ T28] audit: type=1326 audit(1743515121.660:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3736 comm="syz.0.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43d98d169 code=0x7ffc0000 [ 269.874176][ T28] audit: type=1326 audit(1743515121.660:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3736 comm="syz.0.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc43d98d169 code=0x7ffc0000 [ 270.472046][ T3742] netlink: 72 bytes leftover after parsing attributes in process `syz.5.902'. [ 270.480938][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 270.489907][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 270.501559][ T3742] device xfrm1 entered promiscuous mode [ 270.541363][ T28] audit: type=1326 audit(1743515122.490:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3736 comm="syz.0.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43d98d169 code=0x7ffc0000 [ 271.729196][ T39] usb 3-1: USB disconnect, device number 7 [ 271.756809][ T3761] loop2: detected capacity change from 0 to 16 [ 271.799039][ T3761] erofs: (device loop2): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 271.825182][ T3761] erofs: (device loop2): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 271.854568][ T3761] erofs: (device loop2): mounted with root inode @ nid 36. [ 272.994022][ T3767] block device autoloading is deprecated and will be removed. [ 277.095698][ T3798] loop1: detected capacity change from 0 to 512 [ 277.205005][ T3798] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 277.438995][ T3798] EXT4-fs (loop1): 1 truncate cleaned up [ 277.444574][ T3798] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 278.888752][ T3813] loop5: detected capacity change from 0 to 256 [ 279.628149][ T292] EXT4-fs (loop1): unmounting filesystem. [ 280.569939][ T3837] netlink: 72 bytes leftover after parsing attributes in process `syz.1.920'. [ 280.581032][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 280.594042][ T3837] device syztnl0 entered promiscuous mode [ 280.660526][ T1214] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000099) [ 280.668184][ T1214] FAT-fs (loop5): Filesystem has been set read-only [ 281.148471][ T3844] loop5: detected capacity change from 0 to 512 [ 281.163701][ T3844] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 281.192682][ T3844] EXT4-fs (loop5): 1 truncate cleaned up [ 281.200238][ T3844] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 281.345534][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 281.345632][ T28] audit: type=1326 audit(1743515133.280:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43d98d169 code=0x7ffc0000 [ 281.567798][ T28] audit: type=1326 audit(1743515133.280:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43d98d169 code=0x7ffc0000 [ 281.606873][ T28] audit: type=1326 audit(1743515133.280:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc43d98d169 code=0x7ffc0000 [ 281.644379][ T28] audit: type=1326 audit(1743515133.280:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43d98d169 code=0x7ffc0000 [ 281.673199][ T28] audit: type=1326 audit(1743515133.280:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43d98d169 code=0x7ffc0000 [ 281.697159][ T28] audit: type=1326 audit(1743515133.290:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fc43d98d169 code=0x7ffc0000 [ 281.720424][ T316] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 281.737030][ T28] audit: type=1326 audit(1743515133.290:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43d98d169 code=0x7ffc0000 [ 281.813759][ T28] audit: type=1326 audit(1743515133.290:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43d98d169 code=0x7ffc0000 [ 282.130933][ T28] audit: type=1326 audit(1743515133.290:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fc43d98d169 code=0x7ffc0000 [ 282.154087][ T28] audit: type=1326 audit(1743515133.290:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43d98d169 code=0x7ffc0000 [ 282.570188][ T316] usb 6-1: Using ep0 maxpacket: 16 [ 282.576326][ T316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.601211][ T316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.618062][ T316] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 282.644331][ T316] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 282.662538][ T316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.712787][ T316] usb 6-1: config 0 descriptor?? [ 284.051187][ T3877] usb usb8: usbfs: process 3877 (syz.1.932) did not claim interface 0 before use [ 284.214234][ T316] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 284.248651][ T316] HID 045e:07da: Invalid code 30091 type 1 [ 284.254485][ T316] HID 045e:07da: Invalid code 30092 type 1 [ 284.264853][ T316] HID 045e:07da: Invalid code 30093 type 1 [ 284.272734][ T316] HID 045e:07da: Invalid code 30094 type 1 [ 284.280745][ T316] HID 045e:07da: Invalid code 30095 type 1 [ 284.288987][ T316] HID 045e:07da: Invalid code 30096 type 1 [ 284.671319][ T316] HID 045e:07da: Invalid code 30097 type 1 [ 285.262133][ T316] HID 045e:07da: Invalid code 30098 type 1 [ 285.290073][ T3893] loop1: detected capacity change from 0 to 256 [ 285.490196][ T316] HID 045e:07da: Invalid code 30099 type 1 [ 285.495860][ T316] HID 045e:07da: Invalid code 30100 type 1 [ 285.509051][ T316] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 285.517323][ T316] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 285.528554][ T316] microsoft 0003:045E:07DA.0003: no inputs found [ 285.705515][ T316] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 285.736587][ T316] usb 6-1: USB disconnect, device number 8 [ 285.753571][ T3893] FAT-fs (loop1): Directory bread(block 64) failed [ 285.766529][ T1214] EXT4-fs (loop5): unmounting filesystem. [ 285.778834][ T3893] FAT-fs (loop1): Directory bread(block 65) failed [ 285.810946][ T3893] FAT-fs (loop1): Directory bread(block 66) failed [ 285.836303][ T3893] FAT-fs (loop1): Directory bread(block 67) failed [ 285.858612][ T3893] FAT-fs (loop1): Directory bread(block 68) failed [ 285.871329][ T3893] FAT-fs (loop1): Directory bread(block 69) failed [ 285.884987][ T3893] FAT-fs (loop1): Directory bread(block 70) failed [ 285.898725][ T3893] FAT-fs (loop1): Directory bread(block 71) failed [ 285.912446][ T3893] FAT-fs (loop1): Directory bread(block 72) failed [ 285.934694][ T3893] FAT-fs (loop1): Directory bread(block 73) failed [ 287.068954][ T3911] syz.0.940[3911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 287.070015][ T3911] syz.0.940[3911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 287.153900][ T3911] xt_CT: You must specify a L4 protocol and not use inversions on it [ 290.257772][ T3933] loop5: detected capacity change from 0 to 256 [ 290.297679][ T3933] FAT-fs (loop5): Directory bread(block 64) failed [ 290.304223][ T3933] FAT-fs (loop5): Directory bread(block 65) failed [ 290.310812][ T3933] FAT-fs (loop5): Directory bread(block 66) failed [ 290.317271][ T3933] FAT-fs (loop5): Directory bread(block 67) failed [ 290.323908][ T3933] FAT-fs (loop5): Directory bread(block 68) failed [ 290.330383][ T3933] FAT-fs (loop5): Directory bread(block 69) failed [ 290.337072][ T3933] FAT-fs (loop5): Directory bread(block 70) failed [ 290.343542][ T3933] FAT-fs (loop5): Directory bread(block 71) failed [ 290.350174][ T3933] FAT-fs (loop5): Directory bread(block 72) failed [ 290.356569][ T3933] FAT-fs (loop5): Directory bread(block 73) failed [ 290.495147][ T3933] bridge0: port 2(vlan2) entered blocking state [ 290.501305][ T3933] bridge0: port 2(vlan2) entered disabled state [ 291.409106][ T3935] loop2: detected capacity change from 0 to 40427 [ 291.520295][ T3935] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(15) root(3) [ 291.535942][ T3935] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 291.552331][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 291.552347][ T28] audit: type=1400 audit(1743515143.500:665): avc: denied { ioctl } for pid=3950 comm="syz.1.950" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 291.564915][ T3935] F2FS-fs (loop2): invalid crc value [ 291.589783][ T3935] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241045588246331391) [ 292.208280][ T3935] F2FS-fs (loop2): Inconsistent error blkaddr:4096, sit bitmap:0 [ 292.215972][ T3935] CPU: 0 PID: 3935 Comm: syz.2.943 Not tainted 6.1.129-syzkaller-00054-g3e6e324f5b47 #0 [ 292.225521][ T3935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 292.235417][ T3935] Call Trace: [ 292.238541][ T3935] [ 292.241312][ T3935] dump_stack_lvl+0x151/0x1b7 [ 292.245827][ T3935] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 292.251211][ T3935] ? down_read_trylock+0x319/0x7d0 [ 292.256153][ T3935] dump_stack+0x15/0x18 [ 292.260147][ T3935] __f2fs_is_valid_blkaddr+0xce2/0x1450 [ 292.265531][ T3935] f2fs_is_valid_blkaddr+0x25/0x30 [ 292.270474][ T3935] f2fs_get_node_info+0x806/0x1250 [ 292.275421][ T3935] ? workingset_activation+0x430/0x430 [ 292.280859][ T3935] ? f2fs_try_to_free_nats+0x300/0x300 [ 292.286120][ T3935] ? filemap_add_folio+0x18f/0x200 [ 292.291082][ T3935] ? __filemap_add_folio+0xdb0/0xdb0 [ 292.296183][ T3935] ? xas_load+0x38f/0x3b0 [ 292.300348][ T3935] read_node_page+0x33a/0x650 [ 292.304864][ T3935] ? f2fs_ra_node_page+0x260/0x260 [ 292.309812][ T3935] ? __kasan_check_write+0x14/0x20 [ 292.314781][ T3935] ? __kasan_check_read+0x11/0x20 [ 292.319617][ T3935] ? pagecache_get_page+0xb3/0x110 [ 292.324565][ T3935] __get_node_page+0x154/0xb50 [ 292.329167][ T3935] f2fs_get_node_page+0x21/0x30 [ 292.333853][ T3935] f2fs_iget+0x70b/0x4ca0 [ 292.338018][ T3935] ? __kasan_check_write+0x14/0x20 [ 292.342963][ T3935] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 292.348262][ T3935] ? kasan_save_alloc_info+0x1f/0x30 [ 292.353379][ T3935] ? __kasan_kmalloc+0x9c/0xb0 [ 292.357992][ T3935] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 292.363743][ T3935] ? f2fs_build_stats+0x7c7/0xc90 [ 292.368604][ T3935] f2fs_fill_super+0x5404/0x6dc0 [ 292.373431][ T3935] ? kill_f2fs_super+0x3c0/0x3c0 [ 292.378150][ T3935] ? set_blocksize+0x1cb/0x360 [ 292.382746][ T3935] ? sb_set_blocksize+0xa8/0xf0 [ 292.387445][ T3935] mount_bdev+0x282/0x3b0 [ 292.391607][ T3935] ? kill_f2fs_super+0x3c0/0x3c0 [ 292.396378][ T3935] f2fs_mount+0x34/0x40 [ 292.400368][ T3935] legacy_get_tree+0xf1/0x190 [ 292.404883][ T3935] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 292.410872][ T3935] vfs_get_tree+0x88/0x290 [ 292.415123][ T3935] do_new_mount+0x2ba/0xb30 [ 292.419495][ T3935] ? do_move_mount_old+0x160/0x160 [ 292.424416][ T3935] ? security_capable+0x87/0xb0 [ 292.429095][ T3935] ? ns_capable+0x89/0xe0 [ 292.433263][ T3935] path_mount+0x671/0x1070 [ 292.437513][ T3935] ? user_path_at_empty+0x14e/0x1a0 [ 292.442556][ T3935] __se_sys_mount+0x2c4/0x3b0 [ 292.447063][ T3935] ? __x64_sys_mount+0xd0/0xd0 [ 292.451681][ T3935] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 292.457565][ T3935] __x64_sys_mount+0xbf/0xd0 [ 292.461994][ T3935] x64_sys_call+0x49d/0x9a0 [ 292.466335][ T3935] do_syscall_64+0x3b/0xb0 [ 292.470589][ T3935] ? clear_bhb_loop+0x55/0xb0 [ 292.475098][ T3935] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.480831][ T3935] RIP: 0033:0x7f657c78e90a [ 292.485216][ T3935] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.504652][ T3935] RSP: 002b:00007f657d50ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 292.512893][ T3935] RAX: ffffffffffffffda RBX: 00007f657d50aef0 RCX: 00007f657c78e90a [ 292.520717][ T3935] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00007f657d50aeb0 [ 292.528515][ T3935] RBP: 0000200000000000 R08: 00007f657d50aef0 R09: 0000000000000008 [ 292.536328][ T3935] R10: 0000000000000008 R11: 0000000000000246 R12: 0000200000000180 [ 292.544140][ T3935] R13: 00007f657d50aeb0 R14: 000000000000552d R15: 00002000000002c0 [ 292.552044][ T3935] [ 292.570347][ T3935] F2FS-fs (loop2): Failed to read root inode [ 292.880807][ T3968] netlink: 72 bytes leftover after parsing attributes in process `syz.0.952'. [ 292.916699][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 293.497662][ T3967] loop5: detected capacity change from 0 to 512 [ 293.533925][ T3967] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 293.642331][ T3967] EXT4-fs (loop5): orphan cleanup on readonly fs [ 293.652093][ T3967] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 293.661639][ T3967] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 293.670969][ T3967] EXT4-fs error (device loop5): ext4_acquire_dquot:6782: comm syz.5.953: Failed to acquire dquot type 1 [ 293.684932][ T3967] EXT4-fs (loop5): 1 truncate cleaned up [ 293.691010][ T3967] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 294.929159][ T28] audit: type=1326 audit(1743515146.870:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 295.034058][ T28] audit: type=1326 audit(1743515146.900:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 295.146243][ T28] audit: type=1326 audit(1743515146.900:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 295.408740][ T1214] EXT4-fs (loop5): unmounting filesystem. [ 295.415628][ T28] audit: type=1326 audit(1743515146.900:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 296.475849][ T28] audit: type=1326 audit(1743515146.900:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 296.562464][ T28] audit: type=1326 audit(1743515146.900:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 297.612826][ T28] audit: type=1326 audit(1743515146.900:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 297.639292][ T28] audit: type=1326 audit(1743515146.910:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 297.665247][ T28] audit: type=1326 audit(1743515146.910:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 297.692670][ T28] audit: type=1326 audit(1743515146.910:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 297.734560][ T4004] loop2: detected capacity change from 0 to 256 [ 297.878319][ T4004] FAT-fs (loop2): Directory bread(block 64) failed [ 297.884919][ T4004] FAT-fs (loop2): Directory bread(block 65) failed [ 297.894900][ T4004] FAT-fs (loop2): Directory bread(block 66) failed [ 297.902830][ T4004] FAT-fs (loop2): Directory bread(block 67) failed [ 297.916618][ T4004] FAT-fs (loop2): Directory bread(block 68) failed [ 297.924900][ T4004] FAT-fs (loop2): Directory bread(block 69) failed [ 297.937017][ T4004] FAT-fs (loop2): Directory bread(block 70) failed [ 297.949431][ T4004] FAT-fs (loop2): Directory bread(block 71) failed [ 297.964024][ T4004] FAT-fs (loop2): Directory bread(block 72) failed [ 297.973618][ T4004] FAT-fs (loop2): Directory bread(block 73) failed [ 299.621479][ T4003] bridge0: port 3(vlan2) entered blocking state [ 299.627582][ T4003] bridge0: port 3(vlan2) entered disabled state [ 299.647278][ T28] audit: type=1326 audit(1743515146.910:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 299.650791][ T4009] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 299.671237][ T28] audit: type=1326 audit(1743515147.120:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 299.702645][ T28] audit: type=1326 audit(1743515147.120:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 299.711818][ T4008] loop5: detected capacity change from 0 to 256 [ 299.731865][ T28] audit: type=1326 audit(1743515147.330:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 299.750619][ T4009] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 299.763671][ T28] audit: type=1326 audit(1743515147.330:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 299.870535][ T4008] FAT-fs (loop5): Directory bread(block 64) failed [ 299.882345][ T4008] FAT-fs (loop5): Directory bread(block 65) failed [ 299.893522][ T4008] FAT-fs (loop5): Directory bread(block 66) failed [ 299.904848][ T4008] FAT-fs (loop5): Directory bread(block 67) failed [ 299.911694][ T4008] FAT-fs (loop5): Directory bread(block 68) failed [ 299.918167][ T4008] FAT-fs (loop5): Directory bread(block 69) failed [ 299.949485][ T4008] FAT-fs (loop5): Directory bread(block 70) failed [ 299.956204][ T4008] FAT-fs (loop5): Directory bread(block 71) failed [ 299.965825][ T4008] FAT-fs (loop5): Directory bread(block 72) failed [ 299.972437][ T4008] FAT-fs (loop5): Directory bread(block 73) failed [ 300.460191][ T316] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 300.546978][ T4029] loop5: detected capacity change from 0 to 1024 [ 300.585723][ T4029] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 300.594782][ T4029] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.671373][ T316] usb 2-1: Using ep0 maxpacket: 16 [ 300.671794][ T4034] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 300.691142][ T4034] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 300.692398][ T316] usb 2-1: config index 0 descriptor too short (expected 42, got 18) [ 300.703491][ T4034] EXT4-fs (loop5): This should not happen!! Data will be lost [ 300.703491][ T4034] [ 300.720925][ T4034] EXT4-fs (loop5): Total free blocks count 0 [ 300.721142][ T316] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 300.726665][ T4034] EXT4-fs (loop5): Free/Dirty block details [ 300.726682][ T4034] EXT4-fs (loop5): free_blocks=4293918720 [ 300.726697][ T4034] EXT4-fs (loop5): dirty_blocks=48 [ 300.726708][ T4034] EXT4-fs (loop5): Block reservation details [ 300.726732][ T4034] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 300.739425][ T316] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 300.906708][ T316] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 300.916302][ T316] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 300.924696][ T316] usb 2-1: Product: syz [ 300.928846][ T316] usb 2-1: SerialNumber: syz [ 300.965118][ T316] r8152-cfgselector 2-1: config 0 descriptor?? [ 301.010975][ T316] hub 2-1:0.0: bad descriptor, ignoring hub [ 301.016722][ T316] hub: probe of 2-1:0.0 failed with error -5 [ 301.017211][ T1214] EXT4-fs (loop5): unmounting filesystem. [ 301.297162][ T4042] overlayfs: failed to resolve './file0': -2 [ 301.873670][ T4049] tipc: Can't bind to reserved service type 1 [ 304.130011][ T4059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.974'. [ 304.216250][ T316] r8152-cfgselector 2-1: Unknown version 0x0000 [ 304.230586][ T316] r8152-cfgselector 2-1: Unknown version 0x0000 [ 304.270865][ T316] r8152-cfgselector 2-1: USB disconnect, device number 9 [ 304.290740][ T4061] loop5: detected capacity change from 0 to 40427 [ 305.154127][ T4061] F2FS-fs (loop5): Found nat_bits in checkpoint [ 305.220228][ T4061] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 305.700492][ T4082] loop2: detected capacity change from 0 to 512 [ 305.750647][ T4079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.978'. [ 305.759480][ T4079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.978'. [ 307.028420][ T4082] __quota_error: 2 callbacks suppressed [ 307.028449][ T4082] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 307.044150][ T4082] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 307.053398][ T4082] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.979: Failed to acquire dquot type 0 [ 307.069058][ T4082] EXT4-fs (loop2): Remounting filesystem read-only [ 307.075670][ T4082] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 307.085981][ T4082] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 307.095231][ T4082] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.979: Failed to acquire dquot type 0 [ 307.114119][ T4082] EXT4-fs (loop2): Remounting filesystem read-only [ 307.121964][ T4082] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 307.132286][ T4082] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 307.141556][ T4082] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.979: Failed to acquire dquot type 0 [ 307.155380][ T4082] EXT4-fs (loop2): Remounting filesystem read-only [ 307.162125][ T4082] EXT4-fs (loop2): 1 orphan inode deleted [ 307.167747][ T4082] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 307.176942][ T4082] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.243353][ T28] audit: type=1400 audit(1743515159.190:683): avc: denied { bind } for pid=4077 comm="syz.2.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 307.402265][ T4093] loop1: detected capacity change from 0 to 128 [ 307.429095][ T28] audit: type=1400 audit(1743515159.190:684): avc: denied { setopt } for pid=4077 comm="syz.2.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 308.022737][ T4093] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 308.040449][ T4093] ext4 filesystem being mounted at /180/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 308.122237][ T4105] syz.0.984[4105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.122690][ T4105] syz.0.984[4105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.499225][ T296] EXT4-fs (loop2): unmounting filesystem. [ 309.263443][ T292] EXT4-fs (loop1): unmounting filesystem. [ 309.270481][ T28] audit: type=1400 audit(1743515160.880:685): avc: denied { getopt } for pid=4107 comm="syz.5.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 309.384066][ T4115] loop2: detected capacity change from 0 to 1024 [ 309.472523][ T4120] loop5: detected capacity change from 0 to 256 [ 309.920851][ T4115] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 310.200639][ T4133] syz.2.986[4133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.201286][ T4133] syz.2.986[4133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.944785][ T4142] syz.0.990[4142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.955982][ T4142] syz.0.990[4142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.992706][ T296] EXT4-fs (loop2): unmounting filesystem. [ 311.337281][ T4145] overlayfs: failed to clone upperpath [ 312.022169][ T4150] loop2: detected capacity change from 0 to 512 [ 312.155692][ T4150] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 312.164984][ T4150] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.313510][ T296] EXT4-fs (loop2): unmounting filesystem. [ 314.659263][ T4172] netlink: 24 bytes leftover after parsing attributes in process `syz.0.996'. [ 315.463357][ T4178] loop1: detected capacity change from 0 to 256 [ 315.634298][ T4178] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 316.875502][ T4188] tipc: Started in network mode [ 316.880437][ T4188] tipc: Node identity ac14140f, cluster identity 4711 [ 316.887989][ T4188] tipc: Enabled bearer , priority 10 [ 317.375992][ T28] audit: type=1400 audit(1743515169.310:686): avc: denied { remount } for pid=4180 comm="syz.0.998" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 317.548726][ T4195] loop1: detected capacity change from 0 to 256 [ 317.590786][ T4195] FAT-fs (loop1): Directory bread(block 64) failed [ 317.597157][ T4195] FAT-fs (loop1): Directory bread(block 65) failed [ 317.630226][ T4195] FAT-fs (loop1): Directory bread(block 66) failed [ 317.636721][ T4195] FAT-fs (loop1): Directory bread(block 67) failed [ 317.654779][ T4195] FAT-fs (loop1): Directory bread(block 68) failed [ 317.668772][ T4195] FAT-fs (loop1): Directory bread(block 69) failed [ 317.682757][ T4195] FAT-fs (loop1): Directory bread(block 70) failed [ 317.695625][ T4195] FAT-fs (loop1): Directory bread(block 71) failed [ 317.709685][ T4195] FAT-fs (loop1): Directory bread(block 72) failed [ 317.722736][ T4195] FAT-fs (loop1): Directory bread(block 73) failed [ 318.089431][ T300] tipc: Node number set to 2886997007 [ 319.218862][ T28] audit: type=1326 audit(1743515171.160:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4219 comm="syz.2.1008" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f657c78d169 code=0x0 [ 319.764835][ T4224] overlayfs: failed to clone upperpath [ 319.978511][ T4233] loop1: detected capacity change from 0 to 256 [ 320.024123][ T4233] FAT-fs (loop1): Directory bread(block 64) failed [ 320.039337][ T4233] FAT-fs (loop1): Directory bread(block 65) failed [ 320.075755][ T4233] FAT-fs (loop1): Directory bread(block 66) failed [ 320.087404][ T4233] FAT-fs (loop1): Directory bread(block 67) failed [ 320.098594][ T4233] FAT-fs (loop1): Directory bread(block 68) failed [ 320.109147][ T4233] FAT-fs (loop1): Directory bread(block 69) failed [ 320.135178][ T4233] FAT-fs (loop1): Directory bread(block 70) failed [ 320.157431][ T4233] FAT-fs (loop1): Directory bread(block 71) failed [ 320.163900][ T4233] FAT-fs (loop1): Directory bread(block 72) failed [ 320.170325][ T4233] FAT-fs (loop1): Directory bread(block 73) failed [ 320.649968][ T4241] loop5: detected capacity change from 0 to 256 [ 321.027510][ T4248] loop2: detected capacity change from 0 to 1024 [ 322.834192][ T28] audit: type=1326 audit(1743515173.180:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.3.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 322.886962][ T28] audit: type=1326 audit(1743515173.180:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.3.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 322.912790][ T28] audit: type=1326 audit(1743515173.210:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.3.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 322.936260][ T28] audit: type=1326 audit(1743515173.210:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.3.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 322.970234][ T28] audit: type=1326 audit(1743515173.210:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.3.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 322.997544][ T28] audit: type=1326 audit(1743515173.220:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.3.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 323.067246][ T4248] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 323.086609][ T4248] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.091077][ T28] audit: type=1326 audit(1743515173.230:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.3.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 323.158954][ T4265] loop1: detected capacity change from 0 to 2048 [ 323.173006][ T28] audit: type=1326 audit(1743515173.230:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.3.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 323.216567][ T28] audit: type=1326 audit(1743515173.270:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.3.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 323.236212][ T4265] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 323.239832][ T28] audit: type=1326 audit(1743515173.270:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.3.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656958d169 code=0x7ffc0000 [ 324.113482][ T4248] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 324.128239][ T4248] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 324.140443][ T4248] EXT4-fs (loop2): This should not happen!! Data will be lost [ 324.140443][ T4248] [ 324.149921][ T4248] EXT4-fs (loop2): Total free blocks count 0 [ 324.155720][ T4248] EXT4-fs (loop2): Free/Dirty block details [ 324.161446][ T4248] EXT4-fs (loop2): free_blocks=4293918720 [ 324.162028][ T4277] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1020'. [ 324.166947][ T4248] EXT4-fs (loop2): dirty_blocks=48 [ 324.166966][ T4248] EXT4-fs (loop2): Block reservation details [ 324.166978][ T4248] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 324.520237][ T4279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1019'. [ 324.572443][ T296] EXT4-fs (loop2): unmounting filesystem. [ 324.576590][ T39] ================================================================== [ 324.585913][ T39] BUG: KASAN: use-after-free in kernfs_get+0x21/0x90 [ 324.592517][ T39] Read of size 4 at addr ffff88811ee8b320 by task kworker/1:1/39 [ 324.600059][ T39] [ 324.602228][ T39] CPU: 1 PID: 39 Comm: kworker/1:1 Not tainted 6.1.129-syzkaller-00054-g3e6e324f5b47 #0 [ 324.611777][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 324.621759][ T39] Workqueue: events flush_stashed_error_work [ 324.627584][ T39] Call Trace: [ 324.630702][ T39] [ 324.633479][ T39] dump_stack_lvl+0x151/0x1b7 [ 324.633775][ T6] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 324.637989][ T39] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 324.650580][ T39] ? _printk+0xd1/0x111 [ 324.654568][ T39] ? __virt_addr_valid+0x242/0x2f0 [ 324.659607][ T39] print_report+0x158/0x4e0 [ 324.663945][ T39] ? __virt_addr_valid+0x242/0x2f0 [ 324.668892][ T39] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 324.674964][ T39] ? kernfs_get+0x21/0x90 [ 324.679140][ T39] kasan_report+0x13c/0x170 [ 324.683474][ T39] ? kernfs_get+0x21/0x90 [ 324.687641][ T39] kasan_check_range+0x294/0x2a0 [ 324.692418][ T39] __kasan_check_read+0x11/0x20 [ 324.697101][ T39] kernfs_get+0x21/0x90 [ 324.701094][ T39] sysfs_notify+0x9a/0xd0 [ 324.705257][ T39] ext4_notify_error_sysfs+0x25/0x30 [ 324.710376][ T39] flush_stashed_error_work+0x2fe/0x320 [ 324.715759][ T39] ? pwq_dec_nr_in_flight+0x191/0x3d0 [ 324.720966][ T39] process_one_work+0x73d/0xcb0 [ 324.725658][ T39] worker_thread+0xa60/0x1260 [ 324.730171][ T39] kthread+0x26d/0x300 [ 324.734069][ T39] ? worker_clr_flags+0x1a0/0x1a0 [ 324.738933][ T39] ? kthread_blkcg+0xd0/0xd0 [ 324.743374][ T39] ret_from_fork+0x1f/0x30 [ 324.747612][ T39] [ 324.750480][ T39] [ 324.752647][ T39] Allocated by task 4248: [ 324.756815][ T39] kasan_set_track+0x4b/0x70 [ 324.761245][ T39] kasan_save_alloc_info+0x1f/0x30 [ 324.766185][ T39] __kasan_slab_alloc+0x6c/0x80 [ 324.770872][ T39] slab_post_alloc_hook+0x53/0x2c0 [ 324.775815][ T39] kmem_cache_alloc+0x175/0x320 [ 324.780518][ T39] __kernfs_new_node+0xdb/0x700 [ 324.785194][ T39] kernfs_new_node+0x130/0x230 [ 324.789795][ T39] kernfs_create_dir_ns+0x44/0x130 [ 324.794740][ T39] sysfs_create_dir_ns+0x185/0x390 [ 324.799689][ T39] kobject_add_internal+0x635/0xbf0 [ 324.804723][ T39] kobject_init_and_add+0x120/0x190 [ 324.809760][ T39] ext4_register_sysfs+0xbf/0x2c0 [ 324.814615][ T39] ext4_fill_super+0x796e/0x8450 [ 324.819390][ T39] get_tree_bdev+0x440/0x680 [ 324.823823][ T39] ext4_get_tree+0x1c/0x20 [ 324.828086][ T39] vfs_get_tree+0x88/0x290 [ 324.832324][ T39] do_new_mount+0x2ba/0xb30 [ 324.836661][ T39] path_mount+0x671/0x1070 [ 324.840911][ T39] __se_sys_mount+0x2c4/0x3b0 [ 324.845428][ T39] __x64_sys_mount+0xbf/0xd0 [ 324.849854][ T39] x64_sys_call+0x49d/0x9a0 [ 324.854195][ T39] do_syscall_64+0x3b/0xb0 [ 324.858446][ T39] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.864176][ T39] [ 324.866355][ T39] Freed by task 296: [ 324.870086][ T39] kasan_set_track+0x4b/0x70 [ 324.870674][ T6] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 324.874499][ T39] kasan_save_free_info+0x2b/0x40 [ 324.886654][ T39] ____kasan_slab_free+0x131/0x180 [ 324.891603][ T39] __kasan_slab_free+0x11/0x20 [ 324.896198][ T39] kmem_cache_free+0x291/0x560 [ 324.900807][ T39] kernfs_put+0x392/0x520 [ 324.904965][ T39] __kobject_del+0x10f/0x300 [ 324.909400][ T39] kobject_del+0x45/0x60 [ 324.913473][ T39] ext4_unregister_sysfs+0x91/0xa0 [ 324.918418][ T39] ext4_put_super+0x7d/0xd60 [ 324.922845][ T39] generic_shutdown_super+0x14f/0x370 [ 324.928743][ T39] kill_block_super+0x7e/0xe0 [ 324.933259][ T39] deactivate_locked_super+0xad/0x110 [ 324.938465][ T39] deactivate_super+0xbe/0xf0 [ 324.942983][ T39] cleanup_mnt+0x485/0x510 [ 324.947232][ T39] __cleanup_mnt+0x19/0x20 [ 324.951609][ T39] task_work_run+0x24d/0x2e0 [ 324.956035][ T39] exit_to_user_mode_loop+0x94/0xa0 [ 324.961074][ T39] exit_to_user_mode_prepare+0x5a/0xa0 [ 324.966367][ T39] syscall_exit_to_user_mode+0x26/0x130 [ 324.971745][ T39] do_syscall_64+0x47/0xb0 [ 324.975997][ T39] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.980453][ T6] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 324.981730][ T39] [ 324.981737][ T39] The buggy address belongs to the object at ffff88811ee8b320 [ 324.981737][ T39] which belongs to the cache kernfs_node_cache of size 136 [ 325.005597][ T39] The buggy address is located 0 bytes inside of [ 325.005597][ T39] 136-byte region [ffff88811ee8b320, ffff88811ee8b3a8) [ 325.018529][ T39] [ 325.020695][ T39] The buggy address belongs to the physical page: [ 325.026943][ T39] page:ffffea00047ba2c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11ee8b [ 325.030353][ T6] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 325.037014][ T39] flags: 0x4000000000000200(slab|zone=1) [ 325.049779][ T39] raw: 4000000000000200 ffffea0004c2b780 dead00000000000b ffff8881002ab800 [ 325.058287][ T39] raw: 0000000000000000 0000000000140014 00000001ffffffff 0000000000000000 [ 325.066701][ T39] page dumped because: kasan: bad access detected [ 325.072963][ T39] page_owner tracks the page as allocated [ 325.078504][ T39] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 601, tgid 600 (syz.1.85), ts 39249892155, free_ts 39134173128 [ 325.096163][ T39] post_alloc_hook+0x213/0x220 [ 325.100757][ T39] prep_new_page+0x1b/0x110 [ 325.105103][ T39] get_page_from_freelist+0x3a98/0x3b10 [ 325.110475][ T39] __alloc_pages+0x234/0x610 [ 325.114900][ T39] alloc_slab_page+0x6c/0xf0 [ 325.119329][ T39] new_slab+0x90/0x3e0 [ 325.123234][ T39] ___slab_alloc+0x6f9/0xb80 [ 325.127663][ T39] __slab_alloc+0x5d/0xa0 [ 325.131824][ T39] kmem_cache_alloc+0x1be/0x320 [ 325.136514][ T39] __kernfs_new_node+0xdb/0x700 [ 325.141203][ T39] kernfs_new_node+0x130/0x230 [ 325.145799][ T39] __kernfs_create_file+0x4a/0x270 [ 325.150751][ T39] sysfs_add_file_mode_ns+0x1c8/0x270 [ 325.155960][ T39] internal_create_group+0x545/0xed0 [ 325.161254][ T39] sysfs_create_groups+0x5b/0x130 [ 325.166107][ T39] device_add_attrs+0xe1/0x5f0 [ 325.170709][ T39] page last free stack trace: [ 325.175220][ T39] free_unref_page_prepare+0x9f1/0xa00 [ 325.180525][ T39] free_unref_page_list+0xf1/0x7b0 [ 325.185470][ T39] release_pages+0xef9/0xf50 [ 325.189893][ T39] free_pages_and_swap_cache+0x8a/0xa0 [ 325.195185][ T39] tlb_finish_mmu+0x1e0/0x3f0 [ 325.199699][ T39] exit_mmap+0x45b/0xbb0 [ 325.203775][ T39] __mmput+0x95/0x310 [ 325.207592][ T39] mmput+0x56/0x170 [ 325.211239][ T39] do_exit+0xb24/0x2b80 [ 325.215233][ T39] do_group_exit+0x21a/0x2d0 [ 325.219661][ T39] __x64_sys_exit_group+0x3f/0x40 [ 325.224519][ T39] x64_sys_call+0x610/0x9a0 [ 325.228860][ T39] do_syscall_64+0x3b/0xb0 [ 325.233115][ T39] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.238840][ T39] [ 325.241013][ T39] Memory state around the buggy address: [ 325.246483][ T39] ffff88811ee8b200: 00 00 00 fc fc fc fc fc fc fc fc 00 00 00 00 00 [ 325.254378][ T39] ffff88811ee8b280: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 325.262280][ T39] >ffff88811ee8b300: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb [ 325.270175][ T39] ^ [ 325.275126][ T39] ffff88811ee8b380: fb fb fb fb fb fc fc fc fc fc fc fc fc 00 00 00 [ 325.283024][ T39] ffff88811ee8b400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 325.290919][ T39] ================================================================== [ 325.299033][ T6] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 325.306438][ T39] Disabling lock debugging due to kernel taint [ 325.318198][ T39] general protection fault, probably for non-canonical address 0xe08c9c2b8000002f: 0000 [#1] PREEMPT SMP KASAN [ 325.329756][ T39] KASAN: maybe wild-memory-access in range [0x0465015c00000178-0x0465015c0000017f] [ 325.339022][ T39] CPU: 1 PID: 39 Comm: kworker/1:1 Tainted: G B 6.1.129-syzkaller-00054-g3e6e324f5b47 #0 [ 325.350033][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 325.359933][ T39] Workqueue: events flush_stashed_error_work [ 325.365743][ T39] RIP: 0010:kernfs_find_and_get_ns+0x52/0x110 [ 325.371642][ T39] Code: 08 48 89 f8 48 c1 e8 03 42 80 3c 30 00 74 05 e8 c4 bb d3 ff 49 8b 5d 08 48 85 db 49 0f 44 dd 48 83 c3 50 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 9f bb d3 ff 4c 8b 33 49 83 c6 60 [ 325.391089][ T39] RSP: 0018:ffffc9000028fc68 EFLAGS: 00010202 [ 325.397000][ T39] RAX: 008ca02b8000002f RBX: 0465015c00000178 RCX: ffffffff81e988dc [ 325.404798][ T39] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88811ee8b328 [ 325.412627][ T39] RBP: ffffc9000028fc90 R08: dffffc0000000000 R09: 0000000000000003 [ 325.423088][ T39] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffffffff85d4daa0 [ 325.430896][ T39] R13: ffff88811ee8b320 R14: dffffc0000000000 R15: 0000000000000000 [ 325.438704][ T39] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 325.447575][ T39] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 325.453982][ T39] CR2: 0000001b2e313ff8 CR3: 000000012d75c000 CR4: 00000000003506a0 [ 325.461800][ T39] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 325.469864][ T39] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 325.477691][ T39] Call Trace: [ 325.480804][ T39] [ 325.483579][ T39] ? __die_body+0x62/0xb0 [ 325.487834][ T39] ? die_addr+0x9f/0xd0 [ 325.491822][ T39] ? exc_general_protection+0x317/0x4c0 [ 325.497212][ T39] ? kernfs_get+0x21/0x90 [ 325.501477][ T39] ? asm_exc_general_protection+0x27/0x30 [ 325.507031][ T39] ? kernfs_find_and_get_ns+0x3c/0x110 [ 325.512329][ T39] ? kernfs_find_and_get_ns+0x52/0x110 [ 325.517642][ T39] ? kernfs_find_and_get_ns+0x3c/0x110 [ 325.522932][ T39] sysfs_notify+0x73/0xd0 [ 325.527080][ T39] ext4_notify_error_sysfs+0x25/0x30 [ 325.532199][ T39] flush_stashed_error_work+0x2fe/0x320 [ 325.537581][ T39] ? pwq_dec_nr_in_flight+0x191/0x3d0 [ 325.542890][ T39] process_one_work+0x73d/0xcb0 [ 325.547568][ T39] worker_thread+0xa60/0x1260 [ 325.552085][ T39] kthread+0x26d/0x300 [ 325.555980][ T39] ? worker_clr_flags+0x1a0/0x1a0 [ 325.560842][ T39] ? kthread_blkcg+0xd0/0xd0 [ 325.565269][ T39] ret_from_fork+0x1f/0x30 [ 325.569526][ T39] [ 325.572385][ T39] Modules linked in: [ 325.610279][ T6] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 325.628795][ T292] EXT4-fs (loop1): unmounting filesystem. [ 325.739817][ T39] ---[ end trace 0000000000000000 ]--- [ 325.745244][ T39] RIP: 0010:kernfs_find_and_get_ns+0x52/0x110 [ 325.752031][ T39] Code: 08 48 89 f8 48 c1 e8 03 42 80 3c 30 00 74 05 e8 c4 bb d3 ff 49 8b 5d 08 48 85 db 49 0f 44 dd 48 83 c3 50 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 9f bb d3 ff 4c 8b 33 49 83 c6 60 [ 325.771596][ T39] RSP: 0018:ffffc9000028fc68 EFLAGS: 00010202 [ 325.777552][ T39] RAX: 008ca02b8000002f RBX: 0465015c00000178 RCX: ffffffff81e988dc [ 325.785444][ T39] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88811ee8b328 [ 325.793324][ T39] RBP: ffffc9000028fc90 R08: dffffc0000000000 R09: 0000000000000003 [ 325.801106][ T39] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffffffff85d4daa0 [ 325.808918][ T39] R13: ffff88811ee8b320 R14: dffffc0000000000 R15: 0000000000000000 [ 325.861736][ T39] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 325.879980][ T39] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 325.887433][ T39] CR2: 0000001b2fe0fff8 CR3: 000000010bc95000 CR4: 00000000003506a0 [ 325.928302][ T39] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 325.973561][ T39] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 326.003332][ T6] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 326.035892][ T39] Kernel panic - not syncing: Fatal exception [ 326.042089][ T39] Kernel Offset: disabled [ 326.046234][ T39] Rebooting in 86400 seconds..