last executing test programs: 36.399536125s ago: executing program 2 (id=30): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000002280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f00000022c0)={&(0x7f0000002300)=@hci, 0x80, &(0x7f0000002380)=[{&(0x7f00000023c0)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r4, &(0x7f00000024c0)={0x0, 0xfffffff5, &(0x7f0000002500)=[{&(0x7f0000002540)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r4, &(0x7f0000002580)={&(0x7f00000025c0)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10, &(0x7f0000002600)=[{0x0, 0x22}, {&(0x7f0000002680)="69710c3e7b90", 0x6}, {&(0x7f00000026c0)="fc63ca7d52befaf0cb524af6c35c33618300722abc90eb53e6189d90f070", 0x1e}, {&(0x7f0000002700)="059bebd7ebd1d70b71a9e6834dfb9aa8261559e4fc6c1fd0463ede389d573ae12ac3efe9d5b4fc54027c6b50cdaa6a921b6d180d2303d3607fdc281d53f2e2b883785693614fc0bfacf44b96c2268c3ec2a3d69398b4142af8d0c15fc2009d9a0998c5d03778ed3c41651284764621e8fb3706924f3777171a1e87ffe7259f6e3637eb46867439ef34cfd40f22dd", 0x8e}, {&(0x7f00000027c0)="22273b181e1dfae7f5e1c4c8", 0xc}], 0x5, 0x0, 0x0, 0xc0090}, 0x4000000) read$FUSE(r2, &(0x7f0000000240)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80ffffff}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 34.243178234s ago: executing program 2 (id=42): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0xb0c8d8ad4c48b294, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r2 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000240), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = io_uring_setup(0xa0, &(0x7f0000000380)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=""/4095, 0x440000}], 0x100000000000011a) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000340)={0x1, 0x0, [{0x80000000, 0x0, 0x2, 0xfffffffd, 0x6, 0x0, 0x6}]}) 33.318973767s ago: executing program 2 (id=46): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x30, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000400), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5c6, &(0x7f0000000440)="$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") sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0xf7b3d38ce2f68b1e) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, &(0x7f00000001c0)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) connect$inet(r0, &(0x7f0000000a80)={0x2, 0x4e23, @loopback}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setns(0xffffffffffffffff, 0x4000000) sendto(r0, &(0x7f0000000ac0)="1db4d479c5faee911d50fbdf12a30d564a0e992d5f77ad426077a9f0ca1475183db32443011ff101251bcef8f165533aacd8c755793dc1ae99ad602c7cca2944de604d849a1e3b22905b0d26e9ff30b83f38a29b2530d22bdb0500000000000000e29408dd72f233eb4bc44f9c4e", 0x6e, 0x40010, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0xc2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x4c, 0x1e, 0x109, 0x1, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x6, 0x6, "6ed0"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) rmdir(&(0x7f0000000140)='./file1\x00') 30.758075571s ago: executing program 2 (id=49): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, r1, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffd}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x28, 0xe, [@tim={0x5, 0x22, {0x99, 0xd4, 0xb8, "644ab6611d36df614589fd6b817bdf9c3d9cd7af8d53b27f5561da10f2f964"}}]}]}, 0x50}}, 0x10) syz_mount_image$exfat(&(0x7f0000006ac0), &(0x7f00000080c0)='./bus\x00', 0x3814050, &(0x7f0000008100)=ANY=[], 0x41, 0x14fe, &(0x7f0000008140)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000009640)='./proc\x00', 0x0) mount(0x0, &(0x7f0000009680)='./proc\x00', &(0x7f00000096c0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000009700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000009740)='27', 0x2) openat(0xffffffffffffff9c, &(0x7f0000009780)='.\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000008100)={0x2, 0x4000000, 0xffffffff}, 0x10) sendmsg$nl_route(r3, &(0x7f0000009800)={0x0, 0x0, &(0x7f0000009840)={&(0x7f0000009880)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd29, 0x10080, {}, [@IFA_FLAGS={0x8, 0x8, 0x200}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000097c0)='./proc_dir\x00', 0x1ff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f00000004c0)={0x10000, 0x7fffffff}) move_mount(0xffffffffffffffff, &(0x7f00000003c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) bpf$MAP_CREATE(0x8001000000000000, &(0x7f0000000040)=@base={0x6, 0x4, 0x4096, 0x89, 0x0, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 27.500239633s ago: executing program 2 (id=62): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x30, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000400), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5c6, &(0x7f0000000440)="$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") sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0xf7b3d38ce2f68b1e) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, &(0x7f00000001c0)) bind$inet(r0, &(0x7f0000000a40)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) connect$inet(r0, &(0x7f0000000a80)={0x2, 0x4e23, @loopback}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setns(0xffffffffffffffff, 0x4000000) sendto(r0, &(0x7f0000000ac0)="1db4d479c5faee911d50fbdf12a30d564a0e992d5f77ad426077a9f0ca1475183db32443011ff101251bcef8f165533aacd8c755793dc1ae99ad602c7cca2944de604d849a1e3b22905b0d26e9ff30b83f38a29b2530d22bdb0500000000000000e29408dd72f233eb4bc44f9c4e", 0x6e, 0x40010, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x4c, 0x1e, 0x109, 0x1, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x6, 0x6, "6ed0"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) rmdir(&(0x7f0000000140)='./file1\x00') 27.374584097s ago: executing program 2 (id=64): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) sendto$inet(r3, 0x0, 0x0, 0x4008084, &(0x7f00000005c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x4004084, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2022, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xcb0cf000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) close_range(r1, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x4dec, &(0x7f00000003c0)={0x0, 0x54c4, 0x8, 0x0, 0x2ff}) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r6 = fcntl$getown(r0, 0x9) r7 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1a8) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) timer_delete(0x0) write(r8, &(0x7f0000000480)='7', 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ptrace(0x10, r7) wait4(r7, 0x0, 0x20000002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r9 = io_uring_setup(0xa91, &(0x7f0000000240)={0x0, 0x8161, 0x2, 0x3, 0x25c}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(r9, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x989680}, 0x0) ptrace$setopts(0x4200, r7, 0x0, 0x200013) rt_tgsigqueueinfo(r6, r7, 0x9, &(0x7f0000000000)={0x42, 0x1, 0x5}) 27.374215797s ago: executing program 32 (id=64): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) sendto$inet(r3, 0x0, 0x0, 0x4008084, &(0x7f00000005c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x4004084, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2022, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xcb0cf000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) close_range(r1, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x4dec, &(0x7f00000003c0)={0x0, 0x54c4, 0x8, 0x0, 0x2ff}) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r6 = fcntl$getown(r0, 0x9) r7 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1a8) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) timer_delete(0x0) write(r8, &(0x7f0000000480)='7', 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ptrace(0x10, r7) wait4(r7, 0x0, 0x20000002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r9 = io_uring_setup(0xa91, &(0x7f0000000240)={0x0, 0x8161, 0x2, 0x3, 0x25c}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(r9, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x989680}, 0x0) ptrace$setopts(0x4200, r7, 0x0, 0x200013) rt_tgsigqueueinfo(r6, r7, 0x9, &(0x7f0000000000)={0x42, 0x1, 0x5}) 15.925882734s ago: executing program 3 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)={0x34, 0x17, 0x1, {0x2b, './proc/sys/net/ipv6/conf/default/forwarding'}}, 0x34) write(r0, &(0x7f0000000440)='1', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f00000001c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x64}, [@ldst={0x5}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003280)={0x18, 0x4, &(0x7f0000002ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000852010"], &(0x7f0000002fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000031c0), &(0x7f0000003200)=[{0x4}]}, 0x90) 13.918631659s ago: executing program 3 (id=104): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x128048e, &(0x7f0000000140)={[{@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = syz_mount_image$fuse(0x0, &(0x7f0000000940)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000980)='./bus\x00', &(0x7f00000009c0), 0x8, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) fchmodat(r1, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) mkdirat(r0, &(0x7f0000000200)='./file1\x00', 0x33) chdir(&(0x7f00000000c0)='./bus\x00') symlinkat(&(0x7f0000000a80)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 13.562564915s ago: executing program 3 (id=107): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x4001, 0x8, 0x1000, 0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x70bd27, 0x27dfdffd, {}, [@IFA_LOCAL={0x14, 0x2, @private0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x660080d0}, 0x24080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x2008000, &(0x7f0000000740)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e00aba86f10c09218cdb78475c39a4b616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000200)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000500)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0xffffffff]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r4, 0x40106e80, &(0x7f0000000700)={0x6, 0x1}) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, ':^@@^'}, {0x20, ']'}], 0xa, "5618405e1ba504d627a127e397a49ebec49ba8e39124e68d93b73957b94da36ca8b6fa7eea06a1bc10f110fb"}, 0x3f) 13.41861586s ago: executing program 3 (id=108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, r1, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffd}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x28, 0xe, [@tim={0x5, 0x22, {0x99, 0xd4, 0xb8, "644ab6611d36df614589fd6b817bdf9c3d9cd7af8d53b27f5561da10f2f964"}}]}]}, 0x50}}, 0x10) syz_mount_image$exfat(&(0x7f0000006ac0), &(0x7f00000080c0)='./bus\x00', 0x3814050, &(0x7f0000008100)=ANY=[], 0x41, 0x14fe, &(0x7f0000008140)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000009640)='./proc\x00', 0x0) mount(0x0, &(0x7f0000009680)='./proc\x00', &(0x7f00000096c0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000009700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000009740)='27', 0x2) openat(0xffffffffffffff9c, &(0x7f0000009780)='.\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000008100)={0x2, 0x4000000, 0xffffffff}, 0x10) sendmsg$nl_route(r3, &(0x7f0000009800)={0x0, 0x0, &(0x7f0000009840)={&(0x7f0000009880)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd29, 0x10080, {}, [@IFA_FLAGS={0x8, 0x8, 0x200}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000097c0)='./proc_dir\x00', 0x1ff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x2125099, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000004c0)={0x10000, 0x7fffffff}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x9801) move_mount(r4, &(0x7f00000003c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) bpf$MAP_CREATE(0x8001000000000000, &(0x7f0000000040)=@base={0x6, 0x4, 0x4096, 0x89, 0x0, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 13.095346823s ago: executing program 3 (id=112): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800000097030000faffffff850000002d000000850000000800000095000000dc000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000480)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x4000, &(0x7f00000008c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b573262ed88dfec7618c03371693a5173bd0bf12d29c0180500a87e3789adea802a90933b243ca225dacfc27597d6e1ce3d9fdc12409748ba4fbde6f1d76e116fd437b79bbcea7fdc682fd0b90334eed137d03ce386950f5e50ff2516eb2b500a9b99e04f2a41864e44cb46101a23835877342485260d4510fa3240a2c9756d388e5861cdeaf4c88bca74fe3ce71eef72c"], 0xfd, 0x2c2, &(0x7f00000009c0)="$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") mkdir(&(0x7f0000000cc0)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000d00)='.\x00', &(0x7f0000000d40)='./bus\x00', &(0x7f0000000d80), 0xc002, 0x0) chdir(&(0x7f0000000dc0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file1\x00', 0x80342, 0xcc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000500), 0xa001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000540)={0x97f, 0x7168, 0x8001, 0x5, 0x7, 0x7, 0x651, 0x510000, 0x80, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0xc, 0x144, 0xcc3, 0x8000001, 0x1, 0x94d6, 0x9, 0xfffffffd, 0x8, 0xb, 0xfffffffffffffffc, 0x3, 0x40000000009}) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x20040001) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xd0, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x2c00c050}, 0x4004880) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="91400300000000002000128008000100736974001400028008000300ac1e010106000d0009000000140003006e6963"], 0x54}, 0x1, 0x0, 0x0, 0x24048c00}, 0x8010) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x13, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x200000}, 0x50) sendmmsg(r3, &(0x7f0000000400), 0x40000000000009f, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r0}, 0xc) 12.839436959s ago: executing program 3 (id=116): setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000480)={0x2, 0x4000000, 0xffffffff}, 0x10) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd29, 0x10080, {}, [@IFA_FLAGS={0x8, 0x8, 0x200}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x800) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa1c3, 0x6) r3 = socket(0x11, 0x3, 0x8000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f00000003c0)={[{@gid={'gid', 0x3d, r4}}]}) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='tracefs\x00', 0x0, &(0x7f0000000480)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r5, &(0x7f0000000580)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000600)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xdace2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f00000003c0), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f0000000440), 0x10106, 0x2, 0x0) gettid() mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2008800, &(0x7f0000000100)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r2, &(0x7f00000026c0)={0x2020}, 0x2020) 12.799494393s ago: executing program 33 (id=116): setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000480)={0x2, 0x4000000, 0xffffffff}, 0x10) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd29, 0x10080, {}, [@IFA_FLAGS={0x8, 0x8, 0x200}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x800) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa1c3, 0x6) r3 = socket(0x11, 0x3, 0x8000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f00000003c0)={[{@gid={'gid', 0x3d, r4}}]}) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='tracefs\x00', 0x0, &(0x7f0000000480)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r5, &(0x7f0000000580)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000600)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xdace2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f00000003c0), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f0000000440), 0x10106, 0x2, 0x0) gettid() mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2008800, &(0x7f0000000100)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r2, &(0x7f00000026c0)={0x2020}, 0x2020) 8.625161269s ago: executing program 5 (id=158): r0 = socket(0x28, 0xa, 0x8) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x8) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) mount(0x0, 0x0, 0x0, 0x2, 0x0) listen(r0, 0x0) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000000c0)=@nullb, r1, &(0x7f0000000600)) mkdir(&(0x7f0000000100)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000680)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESDEC], 0x8b) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0x9, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000140)={0x1, 0x1, 0x1b, 0x1a, 0x164, &(0x7f0000000180)}) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000001dc0)=0x13) syz_usb_connect(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12014101175129205705092006c7010201010902240001020010000904"], 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000001e40)={0x3484, 0x0, 0x0, 0x7fff, 0x7, "db610000000000000000000008000000000100"}) 6.830121243s ago: executing program 5 (id=172): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x3, 0x32, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000180)={0x2c, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0}) ioctl(r1, 0x8914, &(0x7f0000000200)="7573623000000000000000000000000003") r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xd, 0xf574, 0x8, 0x5, 0xf8, "0ea537fbca6cfa2d672dc2b938d50ad17ebb6c", 0x5, 0xfff}) ioctl$VT_WAITACTIVE(r0, 0x5607) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x181002, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x2af, 0x8, "eca144f13d760700"}) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f00000000c0)={0x0, 0xfffffff9, 0x5, 0xb2, 0x10, "1b09000940000000ebffffe578000000001000"}) r6 = syz_open_pts(r5, 0x20800) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x44) setitimer(0x0, 0x0, 0x0) 6.622456834s ago: executing program 6 (id=175): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000940)={0xa, 0x4, 0x100, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x2c}, 0x44004) socket$nl_audit(0x10, 0x3, 0x9) 6.589281777s ago: executing program 6 (id=176): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d40)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000d80)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000e40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000f00), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x3}, 0x53, 0x10, &(0x7f0000000c40), 0xfffffffffffffd00}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB="b800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0552060000c9000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0d0202000000000008000400ff0700000800290007c7020060001a8096"], 0xb8}, 0x1, 0x0, 0x0, 0x84}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xffff, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000dc0)) sendmmsg$unix(r3, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000f00)="18", 0xfe37}], 0x1}}], 0x1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r1) clock_settime(0xfffffffb, 0x0) 6.36663208s ago: executing program 6 (id=177): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3008000, &(0x7f0000000080)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nobh}, {@nombcache}]}, 0x1, 0x56c, &(0x7f00000009c0)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f00000000c0)={0xa3, 0x0, 0xfffffffffffffffe}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f00000001c0)={0xa, 0x0, [{0x80000008, 0x2, 0x2, 0x5, 0x7, 0x10002, 0x3aa}, {0x2, 0x0, 0x6, 0x82e8, 0x200, 0x3, 0x6}, {0x7, 0x9, 0x5, 0x2, 0x0, 0x3, 0x1}, {0x80000019, 0x6, 0x6, 0x6, 0x8b9b, 0x7, 0x9c1c}, {0xb, 0x7fffffff, 0x0, 0xc9a9, 0x40000104, 0x5, 0x10000}, {0xd, 0x80000001, 0x3, 0x8001, 0x101, 0x39e, 0x2}, {0xb, 0x4, 0x1, 0x8, 0x807, 0x3, 0x2}, {0xb, 0x679, 0x5, 0x0, 0xf1, 0x0, 0x6}, {0x7, 0x7ff, 0x0, 0x18000000, 0x82e, 0x7, 0xe}, {0x3, 0x8, 0x1, 0xa, 0xffff8000, 0xd0b, 0xd9}]}) r3 = open(&(0x7f0000001d40)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000001d80)=0x20000088) 6.36636498s ago: executing program 6 (id=178): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x945f0d78363c9637, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000001040)='tmpfs\x00', 0x810085, 0x0) read$FUSE(r0, &(0x7f0000001080)={0x2020}, 0x2020) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffa) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x1) futex(0x0, 0xa, 0x801, 0x0, 0x0, 0xfffffffc) syz_open_dev$loop(&(0x7f00000000c0), 0x7, 0x10c062) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x3000) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f000038e000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x1000) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000003c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd3\'\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13@`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95w\x02\x00,\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfau\xfd\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0\x92\x04\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7z\x84\xb9\x0fB\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^1\xbc\x89\xe1\xeb\xf0tg\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xd9H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xbav\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&\xfb|\x01\x03\xfcr\x80N\x9f\xc7}\xd7\xf9=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xae\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0\xf3\x91\x0fS\f|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E8\xe4\x10\x06\x0eB\xf9\xc3\x83.\xc1\xf2D\xcb\xb4\xcb\x7f\\\x8f\xac\xaa\xc088G\x06\xb5\x82\xbe\b\x89l\xc2P:\xa1\xa8\x8f\xa3\xd6\x02$k\x11\x1f\xf8}\xde\x9b\xc4s\x9e\xe4#\f\x9fx\xf3\x01\xda\x8c\x13x\xac\x10\x04\xe0w\xbd\xba2pH\xb7I\xef\r6Ml\xb4v\xdb<\xae$\x8d\xcf\xefg0\xb2\xc2)vE8\x0er\xb5\x83\x1f$<\xac@s\xe7\x85\x06B\xf3\xbe`\xa5_\"j.RSK\x89\xc2P\x10\xa8:J\x8d\x1a\x80\xb4Jy\xaa\x7f\'G\xdb\xab\x94\xe3\xc0\xa7$\xc5\xe4\f\xd3\xb9\xcd\b\xa2T\x1cL\xf2aK\x02\f\x84#_\x0f\x8eo\xc14\xdcL\xf2\xc24\xf3\xa6\xae\'W\xe1\xa2\xdeC}\b\xc6\x98\x01\x92\xd9\xadon3k\xdc\rMrJ\xd8|E|U\xa1\x89\xfd\x95\xe9\x03\v\x05\xa9\xdacl\x10*\x8a\xef\xd2\xd4^-\xa4\xeb\xfeGq\x819d\xb6\xb5\xb5B&\x00%\xb5\x12\xbe\x9a\xe47\xe1\xafF\x9eQAle,\xb5L\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000c00)='\x00\x000\x10\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x000Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xcf\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcd\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\xad,y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91') 6.3625486s ago: executing program 6 (id=179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="b9f70800000f320f01d166b80d010f00d86466440f388016c744240000000000c744240200000000c7442406000000000f011c24b9800000c00f3235000100000f300f320f30b9800000c00f3235000800000f3066baf80cb8dc08cf8fef66bafc0c66b8007966ef", 0x68}], 0x1, 0x37, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000) 6.36166978s ago: executing program 6 (id=180): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f00000001c0)='hp', 0x2, 0xe7c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000280), 0x11000) syz_ublk_setup_io_uring(0xd, &(0x7f00000002c0)={0x0, 0x30b5, 0x1, 0x2, 0x154}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r5, r6, r7, &(0x7f0000000440)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x281}}}, &(0x7f0000000500)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000540)={0x0, 0x20fb83, 0x800, 0x0, 0x32c}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x107ffffe, 0x200, 0x1006, 0x200015a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x80, 0x10001, 0x30c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8bb, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x1, 0x2, 0xba}}], 0x1, &(0x7f0000000840)={0x2e, 0x14, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r8, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r12 = gettid() write$UHID_CREATE(r3, &(0x7f0000000a40)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000980)=""/187, 0xbb, 0xa67, 0x3ff, 0x10, 0xb, 0x7}}, 0x120) fcntl$setown(r2, 0x8, r12) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000340)={0x2, {0x2, 0x3bf, 0x8, 0x7}}) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x6) 4.256298876s ago: executing program 4 (id=193): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x4}, 0x50) (async) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_read_part_table(0x604, &(0x7f00000010c0)="$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") r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001700)={'wlan1\x00', 0x0}) bind$packet(r1, &(0x7f0000001740)={0x11, 0x11, r3, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) (async, rerun: 64) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000001780)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) (rerun: 64) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) (async) syz_mount_image$vfat(&(0x7f00000017c0), &(0x7f0000001800)='./file0\x00', 0x200008, &(0x7f0000001840)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001880)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=") r4 = openat(0xffffffffffffff9c, &(0x7f0000001c40)='./file1\x00', 0x1cd042, 0x224) io_setup(0x20fe, &(0x7f0000001c80)=0x0) io_submit(r5, 0x1, &(0x7f0000001cc0)=[&(0x7f0000001d00)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000001d40)='p', 0x1, 0x4}]) (async) close(0x3) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000100)=@get={0x1, &(0x7f00000000c0)=""/46, 0x10}) (async) fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) (async) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000500)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) (async) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x12) (async, rerun: 32) ioctl$UI_SET_SNDBIT(r8, 0x4004556a, 0x1) (rerun: 32) ioctl$UI_DEV_CREATE(r8, 0x5501) (async) write$uinput_user_dev(r7, &(0x7f0000001d80)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x4, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x5, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x7, 0x0, 0x5, 0xba, 0x1, 0x7fe, 0x7fff, 0x2, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x7, 0xb66, 0x2, 0xd5c4, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81319d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0xfffffffd, 0x5, 0xe46, 0xfffffb66, 0x80, 0x2, 0x84, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x807, 0x2, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008f, 0x10000, 0xfe4, 0x3ff], [0x2, 0xffffffff, 0x4, 0x3, 0x3, 0x20000010, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x1, 0xffffffff, 0x0, 0x9, 0x13, 0x10001, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x401, 0x4, 0xf, 0x7, 0x47, 0x7, 0x0, 0x11, 0xfffffffd, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0xe, 0x10001, 0x1, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x3, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb02d, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x2, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) 4.127477109s ago: executing program 4 (id=194): r0 = socket$inet6(0xa, 0x80002, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) io_uring_setup(0x4dee, &(0x7f00000000c0)={0x0, 0x54c4, 0x8, 0x0, 0x2ff}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) (async, rerun: 64) close_range(r1, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0xe32e}, 0x1c) (rerun: 32) 4.006653041s ago: executing program 4 (id=195): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x90}}, 0x0) syz_io_uring_setup(0xfff, &(0x7f0000000340)={0x0, 0x9a81, 0x400, 0x2, 0x14d}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) prlimit64(0x0, 0x6, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r0 = getpid() r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000600)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000680)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r3, &(0x7f000000e0c0)=""/102392, 0x18ff8) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000240)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7/file0\x00', 0x0) 3.811444291s ago: executing program 5 (id=196): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000e40), 0xa8080, 0x0) pwrite64(r0, 0x0, 0x0, 0x9) dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000010400000a9850b1790001000400"/28], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000e80)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000ec0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000f00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x38, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x40000129, 0x4, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6}, @exp_smc={0xfe, 0x5}]}}}}}}}, 0x0) 3.786442753s ago: executing program 5 (id=197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x80002c1, 0x2, 0x0) unshare(0x400) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xd, 0x23, 0x4, 0x2, 0x40, r4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r5}, &(0x7f0000000b80), &(0x7f0000000bc0)}, 0x20) 2.783683356s ago: executing program 5 (id=201): r0 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r2, 0x1}, 0xc) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)}, 0x2000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d80)) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0xa, 0xc, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x6, 0xc, &(0x7f0000001040)=ANY=[], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000001140)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x103902, 0x0) read(r5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8000, &(0x7f0000000080)={[{@debug}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4f9, &(0x7f0000000280)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file2\x00', 0xa4c42, 0x108) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) close(0x3) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000ac0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0xfffffffffffffd66, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000c80)=@generic={0x0, r10}, 0x18) close(0x3) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r0, 0x0, 0x0) fchdir(r11) 2.705784004s ago: executing program 4 (id=202): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x30, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000400), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5c6, &(0x7f0000000440)="$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") getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f00000001c0)) bind$inet(r0, &(0x7f0000000a40)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) connect$inet(r0, &(0x7f0000000a80)={0x2, 0x4e23, @loopback}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setns(0xffffffffffffffff, 0x4000000) sendto(r0, &(0x7f0000000ac0)="1db4d479c5faee911d50fbdf12a30d564a0e992d5f77ad426077a9f0ca1475183db32443011ff101251bcef8f165533aacd8c755793dc1ae99ad602c7cca2944de604d849a1e3b22905b0d26e9ff30b83f38a29b2530d22bdb0500000000000000e29408dd72f233eb4bc44f9c4e", 0x6e, 0x40010, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0xc2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x4c, 0x1e, 0x109, 0x1, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x6, 0x6, "6ed0"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) rmdir(&(0x7f0000000140)='./file1\x00') 2.175717048s ago: executing program 5 (id=207): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x3, 0x32, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000180)={0x2c, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0}) ioctl(r1, 0x8914, &(0x7f0000000200)="7573623000000000000000000000000003") r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xd, 0xf574, 0x8, 0x5, 0xf8, "0ea537fbca6cfa2d672dc2b938d50ad17ebb6c", 0x5, 0xfff}) ioctl$VT_WAITACTIVE(r0, 0x5607) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x181002, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x2af, 0x8, "eca144f13d760700"}) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f00000000c0)={0x0, 0xfffffff9, 0x5, 0xb2, 0x10, "1b09000940000000ebffffe578000000001000"}) r6 = syz_open_pts(r5, 0x20800) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x44) setitimer(0x0, 0x0, 0x0) 1.602042727s ago: executing program 4 (id=208): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d40)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000d80)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000e40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000f00), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x3}, 0x53, 0x10, &(0x7f0000000c40), 0xfffffffffffffd00}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xffff, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000dc0)) sendmmsg$unix(r5, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000f00)="18", 0xfe37}], 0x1}}], 0x1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r1) clock_settime(0xfffffffb, 0x0) 1.36781133s ago: executing program 1 (id=212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x80002c1, 0x2, 0x0) unshare(0x400) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xd, 0x23, 0x4, 0x2, 0x40}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r4}, &(0x7f0000000b80), &(0x7f0000000bc0)}, 0x20) 1.316458786s ago: executing program 0 (id=214): syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @empty, @mcast2={0xe}}}}}}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001440)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x1f, 0x18, &(0x7f0000001580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000d40), 0x8, 0x10, &(0x7f0000000d80)={0x3}, 0x10}, 0x94) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x12) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001000)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000011c0)={0x1d, r4}, 0x10) sendmmsg$sock(r3, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)="0100000003000000640000000000000000000000000000000000000000000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)="0100000003000000640000000000000000000000000000000000000000000000000000000000000000000225c17d03000200000001000000020000", 0x3b}], 0x1}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x14, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000fe1f702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f80)={&(0x7f0000001680)={0x14c, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_NAT={0xd8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb3}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2c98b723641d4bb}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x82c9}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000180}, 0x0) 1.284601529s ago: executing program 0 (id=215): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0400000004000000040000000000010008080000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00_c%'], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, 0x0, 0x0}, 0x20) r1 = fsopen(&(0x7f0000000280)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000480)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000500)={[0x8, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x3, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x547d1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.218644896s ago: executing program 4 (id=216): r0 = socket$pptp(0x18, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000180)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000002c0)={0x44, &(0x7f00000003c0)={0x40, 0x11, 0xaa, "04531d9d5eb349fca34c21fe2515ebd64394c0e7162021b863bc69f85119d66bcc46f6209697607396773fcbd5bf96dc4581ec2bc66ad9846dde292d01b8a95e9c89efb5331719a35c7dc35202fad3ae05e1192671d9309d68ba4158d67123b4f9e952398f7d0adc37caca4efedaa87343ef1fc768998ecd53ac0fd8ddce9e166419631a200e0ff6aa7ba7d1b51dd81739a2603b05bb532c6e7982dfbec5cf215be799cb0e7c887a1b79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc_mnt\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc_mnt/driver/rtc\x00', 0x0, 0x0) read(r2, &(0x7f0000000500)=""/1000, 0x3e8) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0xc) umount2(&(0x7f0000000100)='./file0\x00', 0xc) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0001, 0x0) dup3(r3, r0, 0x80000) 1.160606012s ago: executing program 0 (id=217): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000001c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001c40), 0x8, 0x10, &(0x7f0000001c80), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000009c02000000000000000000b80000070000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) r3 = timerfd_create(0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0xe, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000051000085000000030000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000480)=""/4096}, 0x94) 506.436088ms ago: executing program 1 (id=218): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000e40), 0xa8080, 0x0) pwrite64(r0, 0x0, 0x0, 0x9) dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000010400000a9850b1790001000400"/28], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000e80)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000ec0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000f00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x38, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x40000129, 0x4, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6}, @exp_smc={0xfe, 0x5}]}}}}}}}, 0x0) 493.86625ms ago: executing program 1 (id=219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, r1, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffd}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x28, 0xe, [@tim={0x5, 0x22, {0x99, 0xd4, 0xb8, "644ab6611d36df614589fd6b817bdf9c3d9cd7af8d53b27f5561da10f2f964"}}]}]}, 0x50}}, 0x10) syz_mount_image$exfat(&(0x7f0000006ac0), &(0x7f00000080c0)='./bus\x00', 0x3814050, &(0x7f0000008100)=ANY=[], 0x41, 0x14fe, &(0x7f0000008140)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000009640)='./proc\x00', 0x0) mount(0x0, &(0x7f0000009680)='./proc\x00', &(0x7f00000096c0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000009700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000009740)='27', 0x2) openat(0xffffffffffffff9c, &(0x7f0000009780)='.\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000008100)={0x2, 0x4000000, 0xffffffff}, 0x10) sendmsg$nl_route(r3, &(0x7f0000009800)={0x0, 0x0, &(0x7f0000009840)={&(0x7f0000009880)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd29, 0x10080, {}, [@IFA_FLAGS={0x8, 0x8, 0x200}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x2125099, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000004c0)={0x10000, 0x7fffffff}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x9801) move_mount(r4, &(0x7f00000003c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) bpf$MAP_CREATE(0x8001000000000000, &(0x7f0000000040)=@base={0x6, 0x4, 0x4096, 0x89, 0x0, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 471.148492ms ago: executing program 1 (id=220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, r1, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffd}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x28, 0xe, [@tim={0x5, 0x22, {0x99, 0xd4, 0xb8, "644ab6611d36df614589fd6b817bdf9c3d9cd7af8d53b27f5561da10f2f964"}}]}]}, 0x50}}, 0x10) syz_mount_image$exfat(&(0x7f0000006ac0), &(0x7f00000080c0)='./bus\x00', 0x3814050, &(0x7f0000008100)=ANY=[], 0x41, 0x14fe, &(0x7f0000008140)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000009640)='./proc\x00', 0x0) mount(0x0, &(0x7f0000009680)='./proc\x00', &(0x7f00000096c0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000009700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000009740)='27', 0x2) openat(0xffffffffffffff9c, &(0x7f0000009780)='.\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000008100)={0x2, 0x4000000, 0xffffffff}, 0x10) sendmsg$nl_route(r3, &(0x7f0000009800)={0x0, 0x0, &(0x7f0000009840)={&(0x7f0000009880)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd29, 0x10080, {}, [@IFA_FLAGS={0x8, 0x8, 0x200}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000097c0)='./proc_dir\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x2125099, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000004c0)={0x10000, 0x7fffffff}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x9801) move_mount(r4, &(0x7f00000003c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) bpf$MAP_CREATE(0x8001000000000000, &(0x7f0000000040)=@base={0x6, 0x4, 0x4096, 0x89, 0x0, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 437.103875ms ago: executing program 1 (id=221): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x143042, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f00000008c0)={0x10}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x18e) ftruncate(r1, 0x200000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2000, 0xe7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r2, 0x0) write$FUSE_WRITE(r0, 0x0, 0x0) 379.130501ms ago: executing program 1 (id=222): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x1cb) fallocate(r0, 0x10, 0x800, 0x8000) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f00000000c0)) syz_usb_connect(0x3, 0xc7, &(0x7f0000000000)=ANY=[@ANYBLOB="12011002000000408680d20a0000000000010902b5000201008030080b00020e030000090400ed000e0100000d2401000134000000000001011224010000000000000000000000030000000924030201010003000c2405030100"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x404, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) keyctl$join(0x1, &(0x7f00000023c0)={'syz', 0x1}) syz_mount_image$erofs(&(0x7f0000002580), &(0x7f00000025c0)='./bus\x00', 0x0, &(0x7f0000002600)=ANY=[], 0xfe, 0x17d, &(0x7f0000002640)="$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") r4 = open_tree(0xffffffffffffff9c, &(0x7f00000027c0)='\x00', 0x89901) r5 = fspick(r4, &(0x7f0000002800)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r6 = request_key(&(0x7f0000002400)='keyring\x00', &(0x7f0000002440)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = socket(0x2, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r7, &(0x7f0000002840)=[{{&(0x7f00000028c0)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, 0x0}, 0x20000000}, {{&(0x7f0000002900)={0x2, 0x4e31, @local}, 0x10, &(0x7f0000002940)=[{&(0x7f0000002980)="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", 0x25b}], 0x1}}], 0x2, 0x0) keyctl$invalidate(0x15, r6) keyctl$read(0xb, r6, &(0x7f0000002480)=""/206, 0xce) write$FUSE_WRITE(r1, &(0x7f0000002380)={0x18, 0x0, r3, {0xffffff80}}, 0x18) 190.969561ms ago: executing program 0 (id=223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x51}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0xa002, 0xf6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f3f, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x2000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000100)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newsa={0x154, 0x10, 0x633, 0x10000000, 0x0, {{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@multicast2, 0x0, 0x32}, @in6=@private2, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x4000000, 0xffffffffffffffff}, {}, 0x0, 0x0, 0xa, 0x1}, [@encap={0x1c, 0x4, {0x1, 0x0, 0xfffd, @in6=@empty}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x7, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x2002}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 130.481287ms ago: executing program 0 (id=224): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000072000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x2800700, &(0x7f0000000400)={[], [{@seclabel}]}, 0x2, 0x460, &(0x7f0000000440)="$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") mount$incfs(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x404, 0x0) syz_mount_image$fuse(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', 0x820, &(0x7f0000000a00)=ANY=[], 0x4, 0x0, 0x0) stat(0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 0s ago: executing program 0 (id=225): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts. [ 22.460510][ T28] audit: type=1400 audit(1793062377.374:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.461592][ T278] cgroup: Unknown subsys name 'net' [ 22.483166][ T28] audit: type=1400 audit(1793062377.374:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.510428][ T28] audit: type=1400 audit(1793062377.394:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.510576][ T278] cgroup: Unknown subsys name 'devices' [ 22.651383][ T278] cgroup: Unknown subsys name 'hugetlb' [ 22.657002][ T278] cgroup: Unknown subsys name 'rlimit' [ 22.788574][ T28] audit: type=1400 audit(1793062377.694:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.811785][ T28] audit: type=1400 audit(1793062377.694:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.819935][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.836728][ T28] audit: type=1400 audit(1793062377.694:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.868451][ T28] audit: type=1400 audit(1793062377.754:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.893974][ T28] audit: type=1400 audit(1793062377.754:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.935720][ T28] audit: type=1400 audit(1793062377.844:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.961248][ T28] audit: type=1400 audit(1793062377.844:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.961301][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.782016][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.789066][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.796444][ T290] device bridge_slave_0 entered promiscuous mode [ 23.812683][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.819756][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.827002][ T290] device bridge_slave_1 entered promiscuous mode [ 23.842641][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.849841][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.857086][ T288] device bridge_slave_0 entered promiscuous mode [ 23.866523][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.873580][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.880925][ T288] device bridge_slave_1 entered promiscuous mode [ 23.897526][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.904643][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.912025][ T289] device bridge_slave_0 entered promiscuous mode [ 23.933368][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.940441][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.947682][ T287] device bridge_slave_0 entered promiscuous mode [ 23.954433][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.961470][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.968706][ T289] device bridge_slave_1 entered promiscuous mode [ 23.989831][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.996860][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.004282][ T287] device bridge_slave_1 entered promiscuous mode [ 24.032523][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.039575][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.047059][ T286] device bridge_slave_0 entered promiscuous mode [ 24.081094][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.088141][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.095633][ T286] device bridge_slave_1 entered promiscuous mode [ 24.235654][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.242725][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.250022][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.257034][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.267934][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.275014][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.282284][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.289306][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.313582][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.320625][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.327870][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.334901][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.348980][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.356038][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.363274][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.370296][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.383350][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.390393][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.397637][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.404661][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.435751][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.442961][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.451962][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.459100][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.466555][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.473720][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.480961][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.488122][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.495357][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.502516][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.509748][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.519070][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.527385][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.534407][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.544357][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.562800][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.570387][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.577749][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.586028][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.593064][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.600521][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.608592][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.615612][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.632856][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.641091][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.648945][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.656948][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.665297][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.672366][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.680498][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.688567][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.695607][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.702954][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.711174][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.718176][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.754757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.763684][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.772481][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.781508][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.788845][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.796607][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.804621][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.812656][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.820863][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.827883][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.835226][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.843423][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.850444][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.857792][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.865948][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.872989][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.880487][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.888599][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.895618][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.902928][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.910936][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.925577][ T288] device veth0_vlan entered promiscuous mode [ 24.936472][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.944775][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.953101][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.961655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.970075][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.978024][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.985962][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.993872][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.001890][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.009293][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.016935][ T290] device veth0_vlan entered promiscuous mode [ 25.027877][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.036301][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.053074][ T287] device veth0_vlan entered promiscuous mode [ 25.070587][ T288] device veth1_macvtap entered promiscuous mode [ 25.077351][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.086308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.094390][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.101949][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.109315][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.117543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.125656][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.133425][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.141471][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.149315][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.157396][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.165393][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.173690][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.183935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.192205][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.203625][ T289] device veth0_vlan entered promiscuous mode [ 25.216117][ T290] device veth1_macvtap entered promiscuous mode [ 25.222863][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.230629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.238395][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.246486][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.254448][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.262839][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.271177][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.279269][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.287633][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.295241][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.302662][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.310028][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.318282][ T286] device veth0_vlan entered promiscuous mode [ 25.329738][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.337944][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.353134][ T289] device veth1_macvtap entered promiscuous mode [ 25.364259][ T287] device veth1_macvtap entered promiscuous mode [ 25.371451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.380840][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.388933][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.397092][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.405332][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.414835][ T286] device veth1_macvtap entered promiscuous mode [ 25.426543][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.434999][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.452801][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 25.467313][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.476838][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.485621][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.494089][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.502522][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.511056][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.540390][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.549309][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.558078][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.566319][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.641865][ T322] sched: RT throttling activated [ 27.512294][ T323] loop0: detected capacity change from 0 to 2048 [ 27.558214][ T321] loop1: detected capacity change from 0 to 2048 [ 27.572634][ T326] loop4: detected capacity change from 0 to 2048 [ 27.579279][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 27.579369][ T28] audit: type=1400 audit(1793062382.424:114): avc: denied { write } for pid=314 comm="syz.0.1" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.655416][ T28] audit: type=1400 audit(1793062382.554:115): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 27.688319][ T28] audit: type=1400 audit(1793062382.564:116): avc: denied { read write } for pid=331 comm="syz.3.7" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 27.719081][ T28] audit: type=1400 audit(1793062382.564:117): avc: denied { open } for pid=331 comm="syz.3.7" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 27.746543][ T28] audit: type=1400 audit(1793062382.564:118): avc: denied { write } for pid=324 comm="syz.2.6" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.802285][ T335] netlink: 'syz.0.1': attribute type 9 has an invalid length. [ 27.809812][ T335] netlink: 'syz.0.1': attribute type 7 has an invalid length. [ 27.817286][ T335] netlink: 'syz.0.1': attribute type 8 has an invalid length. [ 27.862598][ T336] netlink: 'syz.1.2': attribute type 9 has an invalid length. [ 27.870171][ T336] netlink: 'syz.1.2': attribute type 7 has an invalid length. [ 27.877719][ T336] netlink: 'syz.1.2': attribute type 8 has an invalid length. [ 27.886592][ T337] netlink: 'syz.4.5': attribute type 9 has an invalid length. [ 27.894151][ T337] netlink: 'syz.4.5': attribute type 7 has an invalid length. [ 27.901642][ T337] netlink: 'syz.4.5': attribute type 8 has an invalid length. [ 28.318638][ T326] loop4: p1 < > p4 [ 28.324053][ T326] loop4: p4 size 722688 extends beyond EOD, truncated [ 28.340207][ T321] loop1: p1 < > p4 [ 28.345046][ T323] loop0: p1 < > p4 [ 28.349709][ T323] loop0: p4 size 722688 extends beyond EOD, truncated [ 28.357228][ T321] loop1: p4 size 722688 extends beyond EOD, truncated [ 28.417472][ T339] overlayfs: unrecognized mount option "obj_type=" or missing value [ 28.427355][ T28] audit: type=1400 audit(1793062382.594:119): avc: denied { read write } for pid=331 comm="syz.3.7" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 28.453980][ T332] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.475595][ T328] udevd[328]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 28.475601][ T333] udevd[333]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 28.495111][ T327] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 28.504771][ T329] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 28.528236][ T28] audit: type=1400 audit(1793062382.594:120): avc: denied { open } for pid=331 comm="syz.3.7" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 28.564897][ T333] udevd[333]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 28.575619][ T327] udevd[327]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 28.599531][ T28] audit: type=1400 audit(1793062382.684:121): avc: denied { create } for pid=314 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.616763][ T327] udevd[327]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 28.631785][ T329] udevd[329]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 28.669095][ T28] audit: type=1400 audit(1793062382.694:122): avc: denied { bind } for pid=314 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.690981][ T345] audit: audit_backlog=65 > audit_backlog_limit=64 [ 28.771379][ T339] loop1: detected capacity change from 0 to 40427 [ 28.785724][ T339] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 28.804553][ T339] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 28.822704][ T339] F2FS-fs (loop1): invalid crc value [ 28.834561][ T339] F2FS-fs (loop1): Found nat_bits in checkpoint [ 28.882247][ T339] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 28.889570][ T339] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 28.922995][ T339] fuse: Bad value for 'group_id' [ 28.999511][ T310] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.161938][ T362] netlink: 'syz.2.14': attribute type 3 has an invalid length. [ 29.180550][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.193088][ T362] ======================================================= [ 29.193088][ T362] WARNING: The mand mount option has been deprecated and [ 29.193088][ T362] and is ignored by this kernel. Remove the mand [ 29.193088][ T362] option from the mount to silence this warning. [ 29.193088][ T362] ======================================================= [ 29.195839][ T310] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 29.238124][ T310] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 29.248307][ T362] 9pnet_fd: Insufficient options for proto=fd [ 29.255612][ T310] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 29.275975][ T360] loop3: detected capacity change from 0 to 40427 [ 29.276293][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.290839][ T310] usb 1-1: Product: syz [ 29.295049][ T310] usb 1-1: Manufacturer: syz [ 29.297133][ T360] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 29.299794][ T310] usb 1-1: SerialNumber: syz [ 29.313152][ T360] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 29.325568][ T365] loop2: detected capacity change from 0 to 1024 [ 29.335998][ T360] F2FS-fs (loop3): invalid crc value [ 29.346979][ T366] loop1: detected capacity change from 0 to 512 [ 29.362976][ T365] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.381059][ T360] F2FS-fs (loop3): Found nat_bits in checkpoint [ 29.398112][ T366] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 29.411990][ T366] FAT-fs (loop1): count of clusters too big (2147483661) [ 29.419244][ T366] FAT-fs (loop1): Can't find a valid FAT filesystem [ 29.427368][ T365] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.436968][ T365] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.454165][ T360] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 29.465141][ T360] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 29.475775][ T365] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.15: lblock 0 mapped to illegal pblock 0 (length 1) [ 29.536855][ T310] snd-usb-audio: probe of 1-1:1.0 failed with error -12 [ 29.600416][ T360] syz.3.13: attempt to access beyond end of device [ 29.600416][ T360] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 29.624241][ T310] usb 1-1: USB disconnect, device number 2 [ 29.762264][ T377] loop4: detected capacity change from 0 to 1024 [ 29.837802][ T377] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 29.853981][ T377] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.895859][ T377] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.16: lblock 0 mapped to illegal pblock 0 (length 1) [ 29.935295][ T377] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 29.948169][ T366] syz.1.12 (366) used greatest stack depth: 21256 bytes left [ 29.959604][ T377] EXT4-fs (loop4): This should not happen!! Data will be lost [ 29.959604][ T377] [ 29.970008][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.026309][ T290] EXT4-fs (loop4): unmounting filesystem. [ 30.054920][ T383] device bridge0 entered promiscuous mode [ 30.105217][ T289] EXT4-fs (loop2): unmounting filesystem. [ 30.227047][ T10] kworker/u4:1: attempt to access beyond end of device [ 30.227047][ T10] loop3: rw=1, sector=77824, nr_sectors = 168 limit=40427 [ 30.369590][ T310] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.623505][ T310] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 30.680798][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.764066][ T310] usb 2-1: Product: syz [ 30.805583][ T310] usb 2-1: Manufacturer: syz [ 30.851734][ T310] usb 2-1: SerialNumber: syz [ 30.951433][ T310] ums-karma 2-1:1.0: USB Mass Storage device detected [ 31.225156][ T310] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 31.225156][ T310] Please send a copy of this message to and [ 31.634728][ T310] scsi host1: usb-storage 2-1:1.0 [ 32.031567][ T388] device batadv_slave_1 entered promiscuous mode [ 32.539960][ T387] device batadv_slave_1 left promiscuous mode [ 32.569369][ T310] usb 2-1: USB disconnect, device number 2 [ 32.694346][ T28] kauditd_printk_skb: 167 callbacks suppressed [ 32.694417][ T28] audit: type=1400 audit(1793062387.564:267): avc: denied { mounton } for pid=427 comm="syz.2.27" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 32.724289][ T24] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 32.865254][ T385] syz.4.18 (385) used greatest stack depth: 21064 bytes left [ 32.952648][ T28] audit: type=1400 audit(1793062387.564:268): avc: denied { remount } for pid=427 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.974462][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 32.999097][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.115055][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 33.159172][ T28] audit: type=1400 audit(1793062387.574:269): avc: denied { mount } for pid=427 comm="syz.2.27" name="/" dev="overlay" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.188328][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 33.230700][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.478217][ T28] audit: type=1400 audit(1793062388.014:270): avc: denied { block_suspend } for pid=434 comm="syz.4.29" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.536047][ T28] audit: type=1400 audit(1793062388.444:271): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 33.537628][ T24] usb 4-1: Found UVC 1.00 device (046d:0825) [ 33.557004][ T289] ------------[ cut here ]------------ [ 33.563453][ T24] usb 4-1: No valid video chain found. [ 33.568627][ T289] WARNING: CPU: 0 PID: 289 at fs/overlayfs/util.c:489 ovl_dir_modified+0x189/0x1c0 [ 33.568672][ T289] Modules linked in: [ 33.568682][ T289] CPU: 0 PID: 289 Comm: syz-executor Not tainted syzkaller #0 [ 33.568698][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 33.568707][ T289] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 33.568735][ T289] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 6e 78 a3 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e7 dc 5d ff <0f> 0b e9 17 ff ff ff e8 db dc 5d ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 33.568748][ T289] RSP: 0018:ffffc90000d17b60 EFLAGS: 00010293 [ 33.568763][ T289] RAX: ffffffff82139639 RBX: 1ffff110266b828e RCX: ffff888108e3e540 [ 33.568775][ T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.568783][ T289] RBP: ffffc90000d17b90 R08: ffff888133522ca7 R09: 1ffff110266a4594 [ 33.568793][ T289] R10: dffffc0000000000 R11: ffffed10266a4595 R12: ffff8881335c1440 [ 33.568804][ T289] R13: 0000000000000000 R14: ffff888133522c00 R15: ffff8881335c1470 [ 33.568814][ T289] FS: 0000555573cf0500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 33.576623][ T24] usb 4-1: USB disconnect, device number 2 [ 33.583566][ T289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.690926][ T439] loop1: detected capacity change from 0 to 256 [ 33.697430][ T289] CR2: 00007f279c9e86ec CR3: 000000013093f000 CR4: 00000000003506b0 [ 33.697448][ T289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.697458][ T289] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.727601][ T289] Call Trace: [ 33.730908][ T289] [ 33.733841][ T289] ovl_do_remove+0x6d3/0xa60 [ 33.738442][ T289] ? ovl_set_redirect+0x6b0/0x6b0 [ 33.742757][ T439] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.743496][ T289] ? selinux_inode_rmdir+0x22/0x30 [ 33.759131][ T289] ovl_rmdir+0x1a/0x20 [ 33.763227][ T289] vfs_rmdir+0x381/0x4f0 [ 33.767478][ T289] incfs_kill_sb+0xfe/0x210 [ 33.772011][ T289] deactivate_locked_super+0xb5/0x120 [ 33.774409][ T439] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 33.777388][ T289] deactivate_super+0xaf/0xe0 [ 33.777412][ T289] cleanup_mnt+0x45e/0x4e0 [ 33.794943][ T289] __cleanup_mnt+0x19/0x20 [ 33.799359][ T289] task_work_run+0x1e1/0x250 [ 33.801738][ T439] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 33.803973][ T289] ? __cfi_task_work_run+0x10/0x10 [ 33.821036][ T289] ? __x64_sys_umount+0x12d/0x170 [ 33.826063][ T289] ? __cfi___x64_sys_umount+0x10/0x10 [ 33.831467][ T289] exit_to_user_mode_loop+0x9b/0xb0 [ 33.836662][ T289] exit_to_user_mode_prepare+0x87/0xd0 [ 33.842156][ T289] syscall_exit_to_user_mode+0x1a/0x30 [ 33.847618][ T289] do_syscall_64+0x58/0xa0 [ 33.852061][ T289] ? clear_bhb_loop+0x30/0x80 [ 33.856745][ T289] ? clear_bhb_loop+0x30/0x80 [ 33.861455][ T289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.867352][ T289] RIP: 0033:0x7f421e7a0797 [ 33.871789][ T289] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 33.879072][ T28] audit: type=1400 audit(1793062388.784:272): avc: denied { write } for pid=437 comm="syz.1.31" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.891403][ T289] RSP: 002b:00007ffc844f83c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 33.891423][ T289] RAX: 0000000000000000 RBX: 00007f421e835f63 RCX: 00007f421e7a0797 [ 33.891433][ T289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc844f8480 [ 33.891444][ T289] RBP: 00007ffc844f8480 R08: 00007ffc844f9480 R09: 00000000ffffffff [ 33.945052][ T289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc844f9510 [ 33.951806][ T28] audit: type=1400 audit(1793062388.834:273): avc: denied { add_name } for pid=437 comm="syz.1.31" name="proc" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.953062][ T289] R13: 00007f421e835f63 R14: 00000000000082cb R15: 00007ffc844f9550 [ 33.973507][ T28] audit: type=1400 audit(1793062388.834:274): avc: denied { associate } for pid=437 comm="syz.1.31" name="proc" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 33.981204][ T289] [ 33.981211][ T289] ---[ end trace 0000000000000000 ]--- [ 34.012189][ T28] audit: type=1400 audit(1793062388.834:275): avc: denied { mounton } for pid=437 comm="syz.1.31" path="/5/bus/proc" dev="loop1" ino=1048645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.035543][ T28] audit: type=1400 audit(1793062388.854:276): avc: denied { remove_name } for pid=288 comm="syz-executor" name="file0" dev="loop1" ino=1048650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.149590][ T447] loop4: detected capacity change from 0 to 2048 [ 34.178636][ T444] SELinux: Context system_u:object_r:ldconfig_cache_t:s0 is not valid (left unmapped). [ 34.220217][ T447] loop4: p1 < > p4 [ 34.227423][ T447] loop4: p4 size 722688 extends beyond EOD, truncated [ 34.276139][ T447] validate_nla: 3 callbacks suppressed [ 34.276155][ T447] netlink: 'syz.4.32': attribute type 9 has an invalid length. [ 34.289304][ T447] netlink: 'syz.4.32': attribute type 7 has an invalid length. [ 34.296898][ T447] netlink: 'syz.4.32': attribute type 8 has an invalid length. [ 34.322945][ T289] ------------[ cut here ]------------ [ 34.328422][ T289] WARNING: CPU: 1 PID: 289 at fs/overlayfs/util.c:489 ovl_dir_modified+0x189/0x1c0 [ 34.337823][ T289] Modules linked in: [ 34.341742][ T289] CPU: 1 PID: 289 Comm: syz-executor Tainted: G W syzkaller #0 [ 34.350686][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 34.360757][ T289] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 34.366446][ T289] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 6e 78 a3 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e7 dc 5d ff <0f> 0b e9 17 ff ff ff e8 db dc 5d ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 34.386076][ T289] RSP: 0000:ffffc90000d17b60 EFLAGS: 00010293 [ 34.392151][ T289] RAX: ffffffff82139639 RBX: 1ffff110266b828e RCX: ffff888108e3e540 [ 34.400140][ T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.408104][ T289] RBP: ffffc90000d17b90 R08: ffff888133522ca7 R09: 1ffff110266a4594 [ 34.416082][ T289] R10: dffffc0000000000 R11: ffffed10266a4595 R12: ffff8881335c1440 [ 34.424076][ T289] R13: 0000000000000000 R14: ffff888133522c00 R15: ffff8881335c1470 [ 34.432056][ T289] FS: 0000555573cf0500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 34.440992][ T289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.447573][ T289] CR2: 00007f6a9b7ecc40 CR3: 000000013093f000 CR4: 00000000003506a0 [ 34.455553][ T289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.463531][ T289] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.471510][ T289] Call Trace: [ 34.474778][ T289] [ 34.477701][ T289] ovl_do_remove+0x6d3/0xa60 [ 34.482333][ T289] ? ovl_set_redirect+0x6b0/0x6b0 [ 34.487356][ T289] ? selinux_inode_rmdir+0x22/0x30 [ 34.492483][ T289] ovl_rmdir+0x1a/0x20 [ 34.496549][ T289] vfs_rmdir+0x381/0x4f0 [ 34.500805][ T289] incfs_kill_sb+0x18f/0x210 [ 34.505394][ T289] deactivate_locked_super+0xb5/0x120 [ 34.510788][ T289] deactivate_super+0xaf/0xe0 [ 34.515486][ T289] cleanup_mnt+0x45e/0x4e0 [ 34.519938][ T289] __cleanup_mnt+0x19/0x20 [ 34.524353][ T289] task_work_run+0x1e1/0x250 [ 34.528948][ T289] ? __cfi_task_work_run+0x10/0x10 [ 34.534078][ T289] ? __x64_sys_umount+0x12d/0x170 [ 34.539101][ T289] ? __cfi___x64_sys_umount+0x10/0x10 [ 34.544481][ T289] exit_to_user_mode_loop+0x9b/0xb0 [ 34.549719][ T289] exit_to_user_mode_prepare+0x87/0xd0 [ 34.555182][ T289] syscall_exit_to_user_mode+0x1a/0x30 [ 34.560654][ T289] do_syscall_64+0x58/0xa0 [ 34.565068][ T289] ? clear_bhb_loop+0x30/0x80 [ 34.569783][ T289] ? clear_bhb_loop+0x30/0x80 [ 34.574459][ T289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 34.580364][ T289] RIP: 0033:0x7f421e7a0797 [ 34.584795][ T289] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 34.604417][ T289] RSP: 002b:00007ffc844f83c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 34.612839][ T289] RAX: 0000000000000000 RBX: 00007f421e835f63 RCX: 00007f421e7a0797 [ 34.620816][ T289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc844f8480 [ 34.628804][ T289] RBP: 00007ffc844f8480 R08: 00007ffc844f9480 R09: 00000000ffffffff [ 34.636874][ T289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc844f9510 [ 34.644871][ T289] R13: 00007f421e835f63 R14: 00000000000082cb R15: 00007ffc844f9550 [ 34.652857][ T289] [ 34.655867][ T289] ---[ end trace 0000000000000000 ]--- [ 34.770183][ T449] binder: 448:449 ioctl c0306201 0 returned -14 [ 34.867914][ T456] loop4: detected capacity change from 0 to 1024 [ 34.899793][ T456] EXT4-fs: Ignoring removed bh option [ 34.939904][ T456] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 35.109523][ T19] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 35.175554][ T469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 35.225628][ T469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 35.301574][ T19] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 35.321479][ T19] usb 2-1: config 0 interface 0 has no altsetting 0 [ 35.335686][ T19] usb 2-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 35.349618][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.360306][ T19] usb 2-1: config 0 descriptor?? [ 35.366635][ T452] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 35.375888][ T19] usbhid 2-1:0.0: can't add hid device: -22 [ 35.388001][ T475] loop3: detected capacity change from 0 to 1024 [ 35.390800][ T19] usbhid: probe of 2-1:0.0 failed with error -22 [ 35.429872][ T475] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 35.442761][ T475] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.459153][ T475] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.39: lblock 0 mapped to illegal pblock 0 (length 1) [ 35.479608][ T475] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 35.510231][ T475] EXT4-fs (loop3): This should not happen!! Data will be lost [ 35.510231][ T475] [ 35.534125][ T286] EXT4-fs (loop3): unmounting filesystem. [ 35.559505][ T19] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 35.587961][ T480] fuse: Bad value for 'user_id' [ 35.594412][ T480] netlink: 27 bytes leftover after parsing attributes in process `syz.3.40'. [ 35.741057][ T19] usb 1-1: not running at top speed; connect to a high speed hub [ 35.753604][ T19] usb 1-1: config 1 has an invalid descriptor of length 44, skipping remainder of the config [ 35.772243][ T19] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 35.788414][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.807536][ T19] usb 1-1: Found UVC 1.00 device (046d:0825) [ 35.816857][ T19] usb 1-1: No streaming interface found for terminal 2. [ 35.926312][ T290] EXT4-fs (loop4): unmounting filesystem. [ 36.029516][ T6] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 36.210957][ T6] usb 4-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 36.220086][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.290727][ T498] loop1: detected capacity change from 0 to 512 [ 36.301451][ T498] EXT4-fs warning (device loop1): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 36.316307][ T498] EXT4-fs (loop1): mount failed [ 36.431482][ T6] net1080 4-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.3-1, NetChip TurboCONNECT, 76:9a:92:59:dc:5e [ 36.521836][ T6] usb 1-1: USB disconnect, device number 3 [ 36.783141][ T520] loop2: detected capacity change from 0 to 2048 [ 36.820881][ T520] loop2: p1 < > p4 [ 36.830682][ T520] loop2: p4 size 722688 extends beyond EOD, truncated [ 36.880632][ T102] loop2: p1 < > p4 [ 36.886376][ T102] loop2: p4 size 722688 extends beyond EOD, truncated [ 37.815252][ T401] usb 2-1: USB disconnect, device number 3 [ 37.892848][ T528] syz.3.41 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 37.990924][ T530] loop4: detected capacity change from 0 to 2048 [ 38.345593][ T531] loop1: detected capacity change from 0 to 16 [ 39.005794][ T531] erofs: (device loop1): mounted with root inode @ nid 36. [ 39.140879][ T520] netlink: 'syz.2.46': attribute type 9 has an invalid length. [ 39.148457][ T520] netlink: 'syz.2.46': attribute type 7 has an invalid length. [ 39.156575][ T520] netlink: 'syz.2.46': attribute type 8 has an invalid length. [ 39.156781][ T535] netlink: 'syz.4.48': attribute type 9 has an invalid length. [ 39.156794][ T535] netlink: 'syz.4.48': attribute type 7 has an invalid length. [ 39.156803][ T535] netlink: 'syz.4.48': attribute type 8 has an invalid length. [ 39.182599][ T6] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 39.204235][ T291] usb 4-1: USB disconnect, device number 3 [ 39.230475][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 39.230488][ T28] audit: type=1400 audit(1793062394.134:316): avc: denied { map } for pid=538 comm="syz.3.51" path="socket:[17024]" dev="sockfs" ino=17024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 39.266354][ T543] loop2: detected capacity change from 0 to 256 [ 39.274421][ T28] audit: type=1400 audit(1793062394.134:317): avc: denied { name_bind } for pid=538 comm="syz.3.51" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 39.295619][ T291] net1080 4-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.3-1, NetChip TurboCONNECT [ 39.311037][ T543] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.329087][ T543] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 39.354645][ T543] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 39.576404][ T6] usb 1-1: Using ep0 maxpacket: 8 [ 39.587895][ T554] loop3: detected capacity change from 0 to 2048 [ 40.110514][ T28] audit: type=1400 audit(1793062395.004:318): avc: denied { append } for pid=540 comm="syz.4.50" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 40.134004][ T554] loop3: p1 < > p4 [ 40.142167][ T554] loop3: p4 size 722688 extends beyond EOD, truncated [ 40.164542][ T554] netlink: 'syz.3.52': attribute type 9 has an invalid length. [ 40.172150][ T554] netlink: 'syz.3.52': attribute type 7 has an invalid length. [ 40.179715][ T554] netlink: 'syz.3.52': attribute type 8 has an invalid length. [ 40.189492][ T401] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 40.666021][ T6] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 40.676217][ T543] FAULT_INJECTION: forcing a failure. [ 40.676217][ T543] name failslab, interval 1, probability 0, space 0, times 0 [ 40.689540][ T543] CPU: 1 PID: 543 Comm: syz.2.49 Tainted: G W syzkaller #0 [ 40.696162][ T6] usb 1-1: can't read configurations, error -71 [ 40.698142][ T543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 40.714405][ T543] Call Trace: [ 40.717682][ T543] [ 40.720612][ T543] __dump_stack+0x21/0x24 [ 40.724947][ T543] dump_stack_lvl+0x110/0x170 [ 40.729626][ T543] ? __cfi_dump_stack_lvl+0x8/0x8 [ 40.734652][ T543] ? rtnetlink_rcv_msg+0x1b9/0xde0 [ 40.739772][ T543] dump_stack+0x15/0x24 [ 40.743929][ T543] should_fail_ex+0x3bf/0x510 [ 40.748669][ T543] __should_failslab+0xac/0xf0 [ 40.753441][ T543] should_failslab+0x9/0x20 [ 40.757957][ T543] kmem_cache_alloc_node+0x42/0x330 [ 40.763165][ T543] ? __alloc_skb+0xe8/0x4a0 [ 40.765415][ T573] loop0: detected capacity change from 0 to 512 [ 40.767674][ T543] __alloc_skb+0xe8/0x4a0 [ 40.778307][ T543] netlink_ack+0x373/0x1160 [ 40.782819][ T543] ? __cfi_avc_has_perm+0x10/0x10 [ 40.787846][ T543] ? __cfi_netlink_ack+0x10/0x10 [ 40.792781][ T543] ? selinux_nlmsg_lookup+0x39d/0x440 [ 40.798157][ T543] netlink_rcv_skb+0x27e/0x450 [ 40.802936][ T543] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 40.808382][ T543] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 40.814001][ T543] ? __netlink_lookup+0x387/0x3b0 [ 40.819010][ T543] rtnetlink_rcv+0x1c/0x20 [ 40.823407][ T543] netlink_unicast+0x8c1/0xa60 [ 40.828154][ T543] netlink_sendmsg+0x8b9/0xbd0 [ 40.832906][ T543] ? __cfi_netlink_sendmsg+0x10/0x10 [ 40.838176][ T543] ? security_socket_sendmsg+0x93/0xb0 [ 40.843619][ T543] ? __cfi_netlink_sendmsg+0x10/0x10 [ 40.848972][ T543] ____sys_sendmsg+0x5fb/0x9c0 [ 40.853718][ T543] ? __sys_sendmsg_sock+0x40/0x40 [ 40.858722][ T543] ? import_iovec+0x7c/0xb0 [ 40.863207][ T543] ___sys_sendmsg+0x2a2/0x360 [ 40.867863][ T543] ? __sys_sendmsg+0x290/0x290 [ 40.872610][ T543] ? security_file_alloc+0x33/0x130 [ 40.877803][ T543] ? __fdget+0x19c/0x220 [ 40.882044][ T543] __x64_sys_sendmsg+0x20d/0x2e0 [ 40.886968][ T543] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 40.892415][ T543] ? __kasan_check_write+0x14/0x20 [ 40.897514][ T543] ? fpregs_restore_userregs+0x128/0x260 [ 40.903139][ T543] ? switch_fpu_return+0xe/0x10 [ 40.907975][ T543] x64_sys_call+0x171/0x9a0 [ 40.912464][ T543] do_syscall_64+0x4c/0xa0 [ 40.916876][ T543] ? clear_bhb_loop+0x30/0x80 [ 40.921540][ T543] ? clear_bhb_loop+0x30/0x80 [ 40.926203][ T543] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 40.932085][ T543] RIP: 0033:0x7f421e79f559 [ 40.936485][ T543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.956074][ T543] RSP: 002b:00007f421f6a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.964474][ T543] RAX: ffffffffffffffda RBX: 00007f421ea25fa0 RCX: 00007f421e79f559 [ 40.972431][ T543] RDX: 0000000000000800 RSI: 0000200000009800 RDI: 0000000000000007 [ 40.980384][ T543] RBP: 00007f421e836b20 R08: 0000000000000000 R09: 0000000000000000 [ 40.988336][ T543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.996285][ T543] R13: 00007f421ea26038 R14: 00007f421ea25fa0 R15: 00007ffc844f9158 [ 41.004238][ T543] [ 41.010878][ T573] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 41.023969][ T573] EXT4-fs (loop0): 1 truncate cleaned up [ 41.030776][ T573] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 41.049661][ T401] usb 2-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 41.073566][ T401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.075329][ T28] audit: type=1400 audit(1793062395.984:319): avc: denied { mounton } for pid=579 comm="syz.3.55" path="/11/file0" dev="tmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 41.104952][ T28] audit: type=1400 audit(1793062395.994:320): avc: denied { getopt } for pid=581 comm="syz.4.58" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.128171][ T287] EXT4-fs (loop0): unmounting filesystem. [ 41.141463][ T28] audit: type=1400 audit(1793062396.054:321): avc: denied { create } for pid=579 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 41.162390][ T28] audit: type=1400 audit(1793062396.074:322): avc: denied { read } for pid=579 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 41.271240][ T591] loop0: detected capacity change from 0 to 2048 [ 41.636259][ T596] netlink: 'syz.0.60': attribute type 9 has an invalid length. [ 41.643890][ T596] netlink: 'syz.0.60': attribute type 7 has an invalid length. [ 41.651487][ T596] netlink: 'syz.0.60': attribute type 8 has an invalid length. [ 42.201233][ T592] loop4: detected capacity change from 0 to 16 [ 42.214404][ T592] erofs: (device loop4): mounted with root inode @ nid 36. [ 42.223649][ T592] syz.4.59: attempt to access beyond end of device [ 42.223649][ T592] loop4: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 42.237273][ T592] syz.4.59: attempt to access beyond end of device [ 42.237273][ T592] loop4: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 42.317227][ T401] net1080 2-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.1-1, NetChip TurboCONNECT, f2:fe:8e:89:08:2f [ 42.333862][ T28] audit: type=1400 audit(1793062397.104:323): avc: denied { write } for pid=583 comm="syz.4.59" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 42.360749][ T580] loop3: detected capacity change from 0 to 512 [ 42.367639][ T28] audit: type=1400 audit(1793062397.274:324): avc: denied { mounton } for pid=579 comm="syz.3.55" path="/11/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 42.413167][ T580] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 42.422256][ T580] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.434417][ T580] EXT4-fs (loop3): unmounting filesystem. [ 42.440213][ T327] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 42.467078][ T28] audit: type=1400 audit(1793062397.374:325): avc: denied { mount } for pid=601 comm="syz.0.61" name="/" dev="ramfs" ino=17410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 42.769516][ T397] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 42.951864][ T397] usb 5-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 42.960980][ T397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.968970][ T397] usb 5-1: Product: syz [ 42.973154][ T397] usb 5-1: Manufacturer: syz [ 42.977744][ T397] usb 5-1: SerialNumber: syz [ 43.337455][ T626] loop3: detected capacity change from 0 to 512 [ 43.495767][ T627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.574819][ T626] EXT4-fs warning (device loop3): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 43.591953][ T626] EXT4-fs (loop3): mount failed [ 43.658609][ T627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.518436][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 44.518448][ T28] audit: type=1326 audit(1793062399.424:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=630 comm="syz.0.67" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe790b9f559 code=0x7fc00000 [ 47.598165][ T28] audit: type=1400 audit(1793062402.504:334): avc: denied { create } for pid=620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 47.618516][ T6] usb 2-1: USB disconnect, device number 4 [ 47.618879][ T6] net1080 2-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.1-1, NetChip TurboCONNECT [ 47.685573][ T652] loop1: detected capacity change from 0 to 128 [ 48.675714][ T660] loop0: detected capacity change from 0 to 16 [ 48.682805][ T660] erofs: (device loop0): mounted with root inode @ nid 36. [ 48.722066][ T657] syz.0.72: attempt to access beyond end of device [ 48.722066][ T657] loop0: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 48.735858][ T657] syz.0.72: attempt to access beyond end of device [ 48.735858][ T657] loop0: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 48.740044][ T397] usb 5-1: Can't get UAC3 power state for id 10 [ 48.757916][ T286] ------------[ cut here ]------------ [ 48.763028][ T397] usb 5-1: 2:0: failed to get current value for ch 0 (-32) [ 48.763407][ T286] WARNING: CPU: 0 PID: 286 at fs/overlayfs/util.c:489 ovl_dir_modified+0x189/0x1c0 [ 48.779113][ T397] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 48.779864][ T286] Modules linked in: [ 48.779875][ T286] CPU: 0 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 48.790924][ T397] snd-usb-audio: probe of 5-1:1.0 failed with error -32 [ 48.791309][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 48.813955][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.817183][ T286] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 48.838394][ T286] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 6e 78 a3 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e7 dc 5d ff <0f> 0b e9 17 ff ff ff e8 db dc 5d ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 48.858011][ T286] RSP: 0018:ffffc9000c2cfb60 EFLAGS: 00010293 [ 48.864195][ T286] RAX: ffffffff82139639 RBX: 1ffff11022d938f4 RCX: ffff8881232fbcc0 [ 48.872189][ T286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.880186][ T286] RBP: ffffc9000c2cfb90 R08: ffff8881335221af R09: 1ffff110266a4435 [ 48.888198][ T286] R10: dffffc0000000000 R11: ffffed10266a4436 R12: ffff888116c9c770 [ 48.896195][ T286] R13: 0000000000000000 R14: ffff888133522108 R15: ffff888116c9c7a0 [ 48.904185][ T286] FS: 000055555e30c500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 48.913179][ T286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.919783][ T286] CR2: 00007fe790becc40 CR3: 000000012e924000 CR4: 00000000003506b0 [ 48.927752][ T286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.935724][ T286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.943724][ T286] Call Trace: [ 48.946982][ T286] [ 48.949913][ T286] ovl_do_remove+0x6d3/0xa60 [ 48.954506][ T286] ? ovl_set_redirect+0x6b0/0x6b0 [ 48.959531][ T286] ? selinux_inode_rmdir+0x22/0x30 [ 48.964654][ T286] ovl_rmdir+0x1a/0x20 [ 48.968699][ T286] vfs_rmdir+0x381/0x4f0 [ 48.972967][ T286] incfs_kill_sb+0xfe/0x210 [ 48.977465][ T286] deactivate_locked_super+0xb5/0x120 [ 48.982846][ T286] deactivate_super+0xaf/0xe0 [ 48.987518][ T286] cleanup_mnt+0x45e/0x4e0 [ 48.991931][ T286] __cleanup_mnt+0x19/0x20 [ 48.996356][ T286] task_work_run+0x1e1/0x250 [ 49.000946][ T286] ? __cfi_task_work_run+0x10/0x10 [ 49.006087][ T286] ? __x64_sys_umount+0x12d/0x170 [ 49.011113][ T286] ? __cfi___x64_sys_umount+0x10/0x10 [ 49.016479][ T286] exit_to_user_mode_loop+0x9b/0xb0 [ 49.021678][ T286] exit_to_user_mode_prepare+0x87/0xd0 [ 49.027130][ T286] syscall_exit_to_user_mode+0x1a/0x30 [ 49.032604][ T286] do_syscall_64+0x58/0xa0 [ 49.037013][ T286] ? clear_bhb_loop+0x30/0x80 [ 49.041695][ T286] ? clear_bhb_loop+0x30/0x80 [ 49.046366][ T286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 49.052276][ T286] RIP: 0033:0x7f39c8fa0797 [ 49.056688][ T286] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 49.076300][ T286] RSP: 002b:00007ffd17b7f888 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 49.084725][ T286] RAX: 0000000000000000 RBX: 00007f39c9035f63 RCX: 00007f39c8fa0797 [ 49.092698][ T286] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd17b7f940 [ 49.100687][ T286] RBP: 00007ffd17b7f940 R08: 00007ffd17b80940 R09: 00000000ffffffff [ 49.108636][ T286] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd17b809d0 [ 49.116622][ T286] R13: 00007f39c9035f63 R14: 000000000000be06 R15: 00007ffd17b80a10 [ 49.124615][ T286] [ 49.127611][ T286] ---[ end trace 0000000000000000 ]--- [ 49.134440][ T286] ------------[ cut here ]------------ [ 49.139930][ T286] WARNING: CPU: 1 PID: 286 at fs/overlayfs/util.c:489 ovl_dir_modified+0x189/0x1c0 [ 49.149242][ T286] Modules linked in: [ 49.153156][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 49.162132][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 49.172208][ T286] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 49.177853][ T286] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 6e 78 a3 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e7 dc 5d ff <0f> 0b e9 17 ff ff ff e8 db dc 5d ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 49.183122][ T545] usb 5-1: USB disconnect, device number 2 [ 49.197498][ T286] RSP: 0018:ffffc9000c2cfb60 EFLAGS: 00010293 [ 49.209351][ T286] RAX: ffffffff82139639 RBX: 1ffff11022d938f4 RCX: ffff8881232fbcc0 [ 49.217428][ T286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.225445][ T286] RBP: ffffc9000c2cfb90 R08: ffff8881335221af R09: 1ffff110266a4435 [ 49.231492][ T329] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 49.233429][ T286] R10: dffffc0000000000 R11: ffffed10266a4436 R12: ffff888116c9c770 [ 49.250469][ T652] loop1: detected capacity change from 0 to 256 [ 49.250856][ T286] R13: 0000000000000000 R14: ffff888133522108 R15: ffff888116c9c7a0 [ 49.257173][ T329] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 49.265027][ T286] FS: 000055555e30c500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 49.274947][ T329] Buffer I/O error on dev loop1, logical block 0, async page read [ 49.283071][ T286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.292970][ T28] audit: type=1400 audit(1793062404.204:335): avc: denied { mount } for pid=651 comm="syz.1.73" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 49.297421][ T286] CR2: 000055898205fda8 CR3: 000000012e924000 CR4: 00000000003506a0 [ 49.326919][ T286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.334912][ T286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.342915][ T286] Call Trace: [ 49.346186][ T286] [ 49.349126][ T286] ovl_do_remove+0x6d3/0xa60 [ 49.353728][ T286] ? ovl_set_redirect+0x6b0/0x6b0 [ 49.358759][ T286] ? selinux_inode_rmdir+0x22/0x30 [ 49.363884][ T286] ovl_rmdir+0x1a/0x20 [ 49.367947][ T286] vfs_rmdir+0x381/0x4f0 [ 49.372191][ T286] incfs_kill_sb+0x18f/0x210 [ 49.376786][ T286] deactivate_locked_super+0xb5/0x120 [ 49.382174][ T286] deactivate_super+0xaf/0xe0 [ 49.386859][ T286] cleanup_mnt+0x45e/0x4e0 [ 49.391309][ T286] __cleanup_mnt+0x19/0x20 [ 49.395716][ T286] task_work_run+0x1e1/0x250 [ 49.400317][ T286] ? __cfi_task_work_run+0x10/0x10 [ 49.405421][ T286] ? __x64_sys_umount+0x12d/0x170 [ 49.410450][ T286] ? __cfi___x64_sys_umount+0x10/0x10 [ 49.415817][ T286] exit_to_user_mode_loop+0x9b/0xb0 [ 49.421015][ T286] exit_to_user_mode_prepare+0x87/0xd0 [ 49.426465][ T286] syscall_exit_to_user_mode+0x1a/0x30 [ 49.431923][ T286] do_syscall_64+0x58/0xa0 [ 49.436368][ T286] ? clear_bhb_loop+0x30/0x80 [ 49.441049][ T286] ? clear_bhb_loop+0x30/0x80 [ 49.445745][ T286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 49.451638][ T286] RIP: 0033:0x7f39c8fa0797 [ 49.456048][ T286] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 49.475662][ T286] RSP: 002b:00007ffd17b7f888 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 49.484080][ T286] RAX: 0000000000000000 RBX: 00007f39c9035f63 RCX: 00007f39c8fa0797 [ 49.492091][ T286] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd17b7f940 [ 49.500107][ T286] RBP: 00007ffd17b7f940 R08: 00007ffd17b80940 R09: 00000000ffffffff [ 49.508058][ T286] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd17b809d0 [ 49.516026][ T286] R13: 00007f39c9035f63 R14: 000000000000be06 R15: 00007ffd17b80a10 [ 49.524000][ T286] [ 49.526998][ T286] ---[ end trace 0000000000000000 ]--- [ 49.586900][ T620] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.619506][ T620] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.710783][ T680] loop0: detected capacity change from 0 to 2048 [ 49.740768][ T620] device bridge_slave_0 entered promiscuous mode [ 49.756103][ T620] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.793712][ T620] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.830395][ T680] loop0: p1 < > p4 [ 49.838803][ T680] loop0: p4 size 722688 extends beyond EOD, truncated [ 49.935285][ T620] device bridge_slave_1 entered promiscuous mode [ 50.038432][ T680] netlink: 'syz.0.76': attribute type 9 has an invalid length. [ 50.046230][ T680] netlink: 'syz.0.76': attribute type 7 has an invalid length. [ 50.053879][ T680] netlink: 'syz.0.76': attribute type 8 has an invalid length. [ 50.112985][ T682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 50.149651][ T397] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 50.349575][ T397] usb 5-1: Using ep0 maxpacket: 16 [ 50.356568][ T397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.691218][ T397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.701463][ T397] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 50.716096][ T397] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 50.725512][ T397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.731324][ T28] audit: type=1400 audit(1793062405.644:336): avc: denied { setopt } for pid=687 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.753029][ T397] usb 5-1: config 0 descriptor?? [ 50.766340][ T394] device bridge_slave_1 left promiscuous mode [ 50.772575][ T394] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.780807][ T394] device bridge_slave_0 left promiscuous mode [ 50.786914][ T28] audit: type=1400 audit(1793062405.674:337): avc: denied { ioctl } for pid=687 comm="syz.1.79" path="socket:[17529]" dev="sockfs" ino=17529 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.811384][ T394] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.819504][ T394] device veth1_macvtap left promiscuous mode [ 50.825556][ T28] audit: type=1400 audit(1793062405.674:338): avc: denied { bind } for pid=687 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.844510][ T394] device veth0_vlan left promiscuous mode [ 50.850433][ T28] audit: type=1400 audit(1793062405.674:339): avc: denied { write } for pid=687 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.015372][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.029863][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.046471][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.056890][ T696] loop0: detected capacity change from 0 to 256 [ 51.060680][ T674] loop3: detected capacity change from 0 to 131072 [ 51.063904][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.070949][ T674] F2FS-fs (loop3): invalid crc value [ 51.090444][ T696] exfat: Deprecated parameter 'utf8' [ 51.097790][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.104857][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.109887][ T696] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 51.112475][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.133086][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.141337][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.148367][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.156426][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.164182][ T674] F2FS-fs (loop3): Found nat_bits in checkpoint [ 51.165667][ T397] microsoft 0003:045E:07DA.0001: item 0 4 0 8 parsing failed [ 51.178153][ T397] microsoft 0003:045E:07DA.0001: parse failed [ 51.184656][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.192507][ T397] microsoft: probe of 0003:045E:07DA.0001 failed with error -22 [ 51.200597][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.220568][ T674] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 51.234279][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.255880][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.267807][ T28] audit: type=1400 audit(1793062406.174:340): avc: denied { append } for pid=672 comm="syz.3.74" name="file1" dev="loop3" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.269217][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.298486][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.306146][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.316653][ T620] device veth0_vlan entered promiscuous mode [ 51.329405][ T620] device veth1_macvtap entered promiscuous mode [ 51.350608][ T28] audit: type=1400 audit(1793062406.264:341): avc: denied { mounton } for pid=620 comm="syz-executor" path="/root/syzkaller.FCKq5N/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 51.360810][ T710] serio: Serial port ttyS3 [ 51.404652][ T28] audit: type=1326 audit(1793062406.314:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=670 comm="syz.4.75" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9b79f559 code=0x7ffc0000 [ 51.412501][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.439174][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.453487][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.459783][ T28] audit: type=1326 audit(1793062406.354:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=670 comm="syz.4.75" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9b79f559 code=0x7ffc0000 [ 51.462208][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.486108][ T28] audit: type=1326 audit(1793062406.354:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=670 comm="syz.4.75" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9b79f559 code=0x7ffc0000 [ 51.494972][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.518657][ T28] audit: type=1326 audit(1793062406.354:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=670 comm="syz.4.75" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9b79f559 code=0x7ffc0000 [ 51.581004][ T671] capability: warning: `syz.4.75' uses 32-bit capabilities (legacy support in use) [ 51.602939][ T24] usb 5-1: USB disconnect, device number 3 [ 51.759586][ T397] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 51.942932][ T397] usb 6-1: unable to get BOS descriptor or descriptor too short [ 51.951521][ T397] usb 6-1: not running at top speed; connect to a high speed hub [ 51.961695][ T397] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.972180][ T397] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 51.981855][ T397] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 51.997078][ T397] usb 6-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 52.006910][ T397] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 52.015342][ T397] usb 6-1: Product: syz [ 52.020236][ T397] usb 6-1: Manufacturer: syz [ 52.053686][ T397] usb 6-1: Found UVC 1.00 device syz (8086:0ad2) [ 52.060239][ T397] usb 6-1: No valid video chain found. [ 52.274491][ T713] loop5: detected capacity change from 0 to 1024 [ 52.294344][ T713] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 52.314231][ T291] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 52.363657][ T713] fuse: Unknown parameter 'ŒÈou" ' [ 52.444678][ T730] xt_hashlimit: size too large, truncated to 1048576 [ 52.639367][ T737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.89'. [ 52.688879][ T716] usb 6-1: USB disconnect, device number 2 [ 53.152541][ T741] loop0: detected capacity change from 0 to 512 [ 53.460253][ T741] EXT4-fs: Ignoring removed i_version option [ 53.512990][ T736] syz.4.88 (736) used greatest stack depth: 19808 bytes left [ 53.562874][ T741] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #3: comm syz.0.91: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 53.619700][ T741] EXT4-fs error (device loop0): ext4_quota_enable:7039: comm syz.0.91: Bad quota inode: 3, type: 0 [ 53.643086][ T752] netlink: 'syz.1.92': attribute type 9 has an invalid length. [ 53.650775][ T752] netlink: 'syz.1.92': attribute type 7 has an invalid length. [ 53.658315][ T752] netlink: 'syz.1.92': attribute type 8 has an invalid length. [ 53.679198][ T754] ip_tables: iptables: counters copy to user failed while replacing table [ 53.698084][ T741] EXT4-fs warning (device loop0): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 53.748896][ T741] EXT4-fs (loop0): mount failed [ 53.899534][ T291] usb 4-1: device not accepting address 4, error -71 [ 53.959712][ T760] ptp ptp0: new virtual clock ptp1 [ 53.975230][ T760] ptp ptp0: new virtual clock ptp2 [ 53.996120][ T760] ptp ptp0: new virtual clock ptp3 [ 54.015799][ T760] ptp ptp0: new virtual clock ptp4 [ 54.026874][ T760] ptp ptp0: guarantee physical clock free running syzkaller syzkaller login: [ 54.158289][ T763] ptp ptp0: delete virtual clock ptp4 [ 54.220143][ T763] ptp ptp0: delete virtual clock ptp3 [ 54.454759][ T763] ptp ptp0: delete virtual clock ptp2 [ 54.729570][ T310] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 55.259191][ T763] ptp ptp0: guarantee physical clock free running [ 55.330064][ T782] fuse: Bad value for 'fd' [ 55.769534][ T28] kauditd_printk_skb: 171 callbacks suppressed [ 55.769549][ T28] audit: type=1400 audit(2000000000.280:517): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 55.999057][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 56.029818][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.325803][ T789] loop3: detected capacity change from 0 to 1024 [ 56.331672][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.341911][ T310] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 56.369609][ T310] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 56.378655][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.414477][ T793] loop3: detected capacity change from 0 to 128 [ 56.432759][ T310] usb 1-1: config 0 descriptor?? [ 56.481625][ T28] audit: type=1400 audit(2000000001.000:518): avc: denied { bind } for pid=795 comm="syz.5.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.503005][ T791] loop7: detected capacity change from 0 to 16384 [ 56.536552][ T798] loop3: detected capacity change from 0 to 256 [ 56.553497][ T28] audit: type=1400 audit(2000000001.070:519): avc: denied { mount } for pid=799 comm="syz.5.109" name="/" dev="configfs" ino=14311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 56.588833][ T800] loop5: detected capacity change from 0 to 128 [ 56.592794][ T798] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.609532][ T28] audit: type=1400 audit(2000000001.100:520): avc: denied { search } for pid=799 comm="syz.5.109" name="/" dev="configfs" ino=14311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.610220][ T798] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 56.642336][ T794] support for cryptoloop has been removed. Use dm-crypt instead. [ 56.651644][ T28] audit: type=1400 audit(2000000001.100:521): avc: denied { write } for pid=799 comm="syz.5.109" name="usb_gadget" dev="configfs" ino=14312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.668286][ T798] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 56.684664][ T802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=802 comm=syz.4.106 [ 56.691252][ T28] audit: type=1400 audit(2000000001.100:522): avc: denied { add_name } for pid=799 comm="syz.5.109" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.717624][ T794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.106'. [ 56.746971][ T794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.106'. [ 56.759302][ T28] audit: type=1400 audit(2000000001.100:523): avc: denied { create } for pid=799 comm="syz.5.109" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 56.779132][ T28] audit: type=1400 audit(2000000001.100:524): avc: denied { read write } for pid=799 comm="syz.5.109" name="report_length" dev="configfs" ino=17948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 56.808572][ T28] audit: type=1400 audit(2000000001.100:525): avc: denied { open } for pid=799 comm="syz.5.109" path="/5/config/usb_gadget/g1/functions/hid.usb0/report_length" dev="configfs" ino=17948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 56.862849][ T310] microsoft 0003:045E:07DA.0002: item 0 4 0 8 parsing failed [ 56.868645][ T28] audit: type=1400 audit(2000000001.230:526): avc: denied { unmount } for pid=620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 56.874080][ T310] microsoft 0003:045E:07DA.0002: parse failed [ 56.912609][ T310] microsoft: probe of 0003:045E:07DA.0002 failed with error -22 [ 56.964308][ T814] loop4: detected capacity change from 0 to 512 [ 56.971301][ T814] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 57.134380][ T310] usb 1-1: USB disconnect, device number 6 [ 57.173034][ T824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.118'. [ 57.233064][ T828] loop4: detected capacity change from 0 to 128 [ 57.243501][ T828] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 57.252688][ T828] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.283801][ T830] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.290851][ T830] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.298134][ T830] device bridge_slave_0 entered promiscuous mode [ 57.305096][ T830] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.312317][ T830] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.319796][ T830] device bridge_slave_1 entered promiscuous mode [ 57.358998][ T830] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.366053][ T830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.373320][ T830] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.380349][ T830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.395797][ T290] EXT4-fs (loop4): unmounting filesystem. [ 57.410098][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.417737][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.425348][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.435711][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.444545][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.448419][ T838] loop4: detected capacity change from 0 to 256 [ 57.451599][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.471083][ T838] FAT-fs (loop4): Directory bread(block 64) failed [ 57.477715][ T838] FAT-fs (loop4): Directory bread(block 65) failed [ 57.484346][ T838] FAT-fs (loop4): Directory bread(block 66) failed [ 57.491126][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.491205][ T838] FAT-fs (loop4): Directory bread(block 67) failed [ 57.499316][ T394] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.505742][ T838] FAT-fs (loop4): Directory bread(block 68) failed [ 57.512653][ T394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.519203][ T838] FAT-fs (loop4): Directory bread(block 69) failed [ 57.533110][ T838] FAT-fs (loop4): Directory bread(block 70) failed [ 57.539798][ T838] FAT-fs (loop4): Directory bread(block 71) failed [ 57.539985][ T8] device bridge_slave_1 left promiscuous mode [ 57.546390][ T838] FAT-fs (loop4): Directory bread(block 72) failed [ 57.552601][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.559062][ T838] FAT-fs (loop4): Directory bread(block 73) failed [ 57.572639][ T8] device bridge_slave_0 left promiscuous mode [ 57.578802][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.586984][ T8] device veth1_macvtap left promiscuous mode [ 57.593602][ T8] device veth0_vlan left promiscuous mode [ 57.682613][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.803387][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.942392][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.950903][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.969295][ T830] device veth0_vlan entered promiscuous mode [ 57.976497][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.986613][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.005044][ T830] device veth1_macvtap entered promiscuous mode [ 58.011725][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.019304][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.027028][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.035337][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.044268][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.053028][ T855] futex_wake_op: syz.1.127 tries to shift op by 144; fix this program [ 58.070026][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.078471][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.087075][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.096088][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.136229][ T858] loop6: detected capacity change from 0 to 128 [ 58.164260][ T858] netlink: 'syz.6.117': attribute type 4 has an invalid length. [ 58.600514][ T878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 58.991349][ T896] FAULT_INJECTION: forcing a failure. [ 58.991349][ T896] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.004517][ T896] CPU: 1 PID: 896 Comm: syz.5.142 Tainted: G W syzkaller #0 [ 59.013203][ T896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 59.023266][ T896] Call Trace: [ 59.026531][ T896] [ 59.029457][ T896] __dump_stack+0x21/0x24 [ 59.033790][ T896] dump_stack_lvl+0x110/0x170 [ 59.038475][ T896] ? __cfi_dump_stack_lvl+0x8/0x8 [ 59.043504][ T896] dump_stack+0x15/0x24 [ 59.047669][ T896] should_fail_ex+0x3bf/0x510 [ 59.052355][ T896] should_fail+0xb/0x10 [ 59.056515][ T896] should_fail_usercopy+0x1a/0x20 [ 59.061544][ T896] _copy_from_user+0x1e/0xc0 [ 59.066133][ T896] __sys_bpf+0x2a0/0x850 [ 59.070373][ T896] ? bpf_link_show_fdinfo+0x330/0x330 [ 59.075745][ T896] ? __cfi_ksys_write+0x10/0x10 [ 59.080590][ T896] ? debug_smp_processor_id+0x17/0x20 [ 59.085952][ T896] __x64_sys_bpf+0x7c/0x90 [ 59.090352][ T896] x64_sys_call+0x488/0x9a0 [ 59.094839][ T896] do_syscall_64+0x4c/0xa0 [ 59.099235][ T896] ? clear_bhb_loop+0x30/0x80 [ 59.103896][ T896] ? clear_bhb_loop+0x30/0x80 [ 59.108556][ T896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 59.114432][ T896] RIP: 0033:0x7f162f19f559 [ 59.118835][ T896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.138419][ T896] RSP: 002b:00007f162ffc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.146818][ T896] RAX: ffffffffffffffda RBX: 00007f162f425fa0 RCX: 00007f162f19f559 [ 59.154772][ T896] RDX: 0000000000000094 RSI: 0000200000001140 RDI: 0000000000000005 [ 59.162727][ T896] RBP: 00007f162ffc1090 R08: 0000000000000000 R09: 0000000000000000 [ 59.170677][ T896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.178629][ T896] R13: 00007f162f426038 R14: 00007f162f425fa0 R15: 00007ffdb84e2f58 [ 59.186584][ T896] [ 59.337750][ T908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.145'. [ 59.463746][ T905] loop4: detected capacity change from 0 to 40427 [ 59.492930][ T905] netlink: 'syz.4.146': attribute type 4 has an invalid length. [ 59.506058][ T905] netlink: 'syz.4.146': attribute type 4 has an invalid length. [ 59.637825][ T915] 9pnet_fd: Insufficient options for proto=fd [ 59.668178][ T915] loop4: detected capacity change from 0 to 8192 [ 59.688418][ T915] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.707434][ T918] capability: warning: `syz.1.149' uses deprecated v2 capabilities in a way that may be insecure [ 59.730697][ T327] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 60.800362][ T936] netlink: 'syz.1.154': attribute type 1 has an invalid length. [ 60.814456][ T942] FAULT_INJECTION: forcing a failure. [ 60.814456][ T942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.827522][ T942] CPU: 0 PID: 942 Comm: syz.4.156 Tainted: G W syzkaller #0 [ 60.836190][ T942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 60.846248][ T942] Call Trace: [ 60.849518][ T942] [ 60.852459][ T942] __dump_stack+0x21/0x24 [ 60.856791][ T942] dump_stack_lvl+0x110/0x170 [ 60.861463][ T942] ? __cfi_dump_stack_lvl+0x8/0x8 [ 60.866480][ T942] dump_stack+0x15/0x24 [ 60.870629][ T942] should_fail_ex+0x3bf/0x510 [ 60.875303][ T942] should_fail+0xb/0x10 [ 60.879451][ T942] should_fail_usercopy+0x1a/0x20 [ 60.884466][ T942] _copy_from_user+0x1e/0xc0 [ 60.889055][ T942] __sys_bpf+0x2a0/0x850 [ 60.893297][ T942] ? bpf_link_show_fdinfo+0x330/0x330 [ 60.898666][ T942] ? __cfi_ksys_write+0x10/0x10 [ 60.903513][ T942] ? debug_smp_processor_id+0x17/0x20 [ 60.908888][ T942] __x64_sys_bpf+0x7c/0x90 [ 60.913294][ T942] x64_sys_call+0x488/0x9a0 [ 60.917794][ T942] do_syscall_64+0x4c/0xa0 [ 60.922204][ T942] ? clear_bhb_loop+0x30/0x80 [ 60.926884][ T942] ? clear_bhb_loop+0x30/0x80 [ 60.931555][ T942] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.937454][ T942] RIP: 0033:0x7f6a9b79f559 [ 60.941865][ T942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.961467][ T942] RSP: 002b:00007f6a9c675028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.969876][ T942] RAX: ffffffffffffffda RBX: 00007f6a9ba26180 RCX: 00007f6a9b79f559 [ 60.977841][ T942] RDX: 0000000000000020 RSI: 0000200000001000 RDI: 0000000000000009 [ 60.985807][ T942] RBP: 00007f6a9c675090 R08: 0000000000000000 R09: 0000000000000000 [ 60.993773][ T942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.001734][ T942] R13: 00007f6a9ba26218 R14: 00007f6a9ba26180 R15: 00007ffd99fa5998 [ 61.009707][ T942] [ 61.048872][ T942] netlink: 'syz.4.156': attribute type 1 has an invalid length. [ 61.409536][ T28] kauditd_printk_skb: 129 callbacks suppressed [ 61.409553][ T28] audit: type=1400 audit(2000000005.910:656): avc: denied { mount } for pid=945 comm="syz.1.159" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 61.548599][ T941] netlink: 4 bytes leftover after parsing attributes in process `syz.6.157'. [ 61.558650][ T952] FAULT_INJECTION: forcing a failure. [ 61.558650][ T952] name failslab, interval 1, probability 0, space 0, times 0 [ 61.571316][ T952] CPU: 0 PID: 952 Comm: syz.4.161 Tainted: G W syzkaller #0 [ 61.579980][ T952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 61.590017][ T952] Call Trace: [ 61.593297][ T952] [ 61.596208][ T952] __dump_stack+0x21/0x24 [ 61.600520][ T952] dump_stack_lvl+0x110/0x170 [ 61.605178][ T952] ? __cfi_dump_stack_lvl+0x8/0x8 [ 61.610179][ T952] dump_stack+0x15/0x24 [ 61.614310][ T952] should_fail_ex+0x3bf/0x510 [ 61.618966][ T952] __should_failslab+0xac/0xf0 [ 61.623717][ T952] should_failslab+0x9/0x20 [ 61.628199][ T952] __kmem_cache_alloc_node+0x3d/0x2d0 [ 61.633561][ T952] ? sidtab_sid2str_get+0x137/0x2c0 [ 61.638768][ T952] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 61.644845][ T952] ? sidtab_sid2str_get+0x137/0x2c0 [ 61.650063][ T952] __kmalloc_node_track_caller+0xa1/0x1e0 [ 61.650935][ T28] audit: type=1400 audit(2000000006.150:657): avc: denied { map } for pid=953 comm="syz.0.162" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 61.655789][ T952] kmemdup+0x2b/0x60 [ 61.655810][ T952] sidtab_sid2str_get+0x137/0x2c0 [ 61.687444][ T952] security_sid_to_context_core+0x2ac/0x480 [ 61.693355][ T952] security_sid_to_context_force+0x36/0x40 [ 61.699194][ T952] selinux_inode_init_security+0x66c/0x970 [ 61.704985][ T952] ? __cfi_selinux_inode_init_security+0x10/0x10 [ 61.711294][ T952] ? get_cached_acl+0x2a0/0x2f0 [ 61.716123][ T952] ? debug_smp_processor_id+0x17/0x20 [ 61.721475][ T952] ? __cfi_get_cached_acl+0x10/0x10 [ 61.726653][ T952] security_inode_init_security+0x183/0x3c0 [ 61.732530][ T952] ? __cfi_shmem_initxattrs+0x10/0x10 [ 61.737903][ T952] ? __cfi_security_inode_init_security+0x10/0x10 [ 61.739618][ T37] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.744301][ T952] ? __kasan_check_write+0x14/0x20 [ 61.744324][ T952] ? set_cached_acl+0xdd/0x180 [ 61.744345][ T952] ? simple_acl_create+0x191/0x1c0 [ 61.766664][ T952] shmem_mknod+0xb8/0x1d0 [ 61.770977][ T952] ? shmem_mkdir+0x17/0x60 [ 61.775374][ T952] shmem_mkdir+0x2f/0x60 [ 61.779598][ T952] vfs_mkdir+0x39c/0x580 [ 61.783824][ T952] do_mkdirat+0x174/0x4d0 [ 61.788131][ T952] __x64_sys_mkdirat+0x89/0xa0 [ 61.792872][ T952] x64_sys_call+0x73d/0x9a0 [ 61.797354][ T952] do_syscall_64+0x4c/0xa0 [ 61.801746][ T952] ? clear_bhb_loop+0x30/0x80 [ 61.806401][ T952] ? clear_bhb_loop+0x30/0x80 [ 61.811054][ T952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 61.816922][ T952] RIP: 0033:0x7f6a9b79e3c7 [ 61.821313][ T952] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.840895][ T952] RSP: 002b:00007f6a9c6b6e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 61.849286][ T952] RAX: ffffffffffffffda RBX: 00007f6a9c6b6ee0 RCX: 00007f6a9b79e3c7 [ 61.857234][ T952] RDX: 00000000000001ff RSI: 0000200000000300 RDI: 00000000ffffff9c [ 61.865185][ T952] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.873134][ T952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000300 [ 61.881084][ T952] R13: 00007f6a9c6b6ea0 R14: 0000000000000000 R15: 0000000000000000 [ 61.889035][ T952] [ 61.944714][ T963] loop6: detected capacity change from 0 to 256 [ 61.969550][ T37] usb 6-1: Using ep0 maxpacket: 32 [ 61.975981][ T37] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 61.998998][ T28] audit: type=1400 audit(2000000006.510:658): avc: denied { read } for pid=962 comm="syz.6.166" path="socket:[19633]" dev="sockfs" ino=19633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.024213][ T37] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 62.033839][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 62.041929][ T37] usb 6-1: Product: syz [ 62.046310][ T37] usb 6-1: Manufacturer: syz [ 62.246729][ T37] usb 6-1: SerialNumber: syz [ 62.252777][ T974] loop6: detected capacity change from 0 to 256 [ 62.253117][ T37] asix: probe of 6-1:2.0 failed with error -22 [ 62.275545][ T28] audit: type=1400 audit(2000000006.790:659): avc: denied { unmount } for pid=973 comm="syz.6.169" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.494982][ T974] fuse: Bad value for 'fd' [ 62.513534][ T716] usb 6-1: USB disconnect, device number 3 [ 62.563577][ T291] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 63.240910][ T291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.268061][ T291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.289971][ T291] usb 5-1: New USB device found, idVendor=0926, idProduct=3233, bcdDevice= 0.40 [ 63.299074][ T291] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 63.320487][ T291] usb 5-1: Manufacturer: syz [ 63.327663][ T291] usb 5-1: config 0 descriptor?? [ 63.516092][ T998] netlink: 4 bytes leftover after parsing attributes in process `syz.6.176'. [ 63.611046][ T28] audit: type=1400 audit(2000000008.130:660): avc: denied { map } for pid=1006 comm="syz.6.180" path="socket:[19340]" dev="sockfs" ino=19340 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 63.674896][ T1018] Zero length message leads to an empty skb [ 63.760984][ T291] usbhid 5-1:0.0: can't add hid device: -71 [ 63.767035][ T291] usbhid: probe of 5-1:0.0 failed with error -71 [ 63.775935][ T291] usb 5-1: USB disconnect, device number 4 [ 64.614363][ T28] audit: type=1400 audit(2000000009.130:661): avc: denied { mounton } for pid=1028 comm="syz.4.185" path="/36/dev/sda1" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.672528][ T1031] loop4: detected capacity change from 0 to 1024 [ 64.682163][ T28] audit: type=1400 audit(2000000009.160:662): avc: denied { mounton } for pid=1028 comm="syz.4.185" path="/36/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 64.719939][ T1031] EXT4-fs: Ignoring removed i_version option [ 64.736149][ T1031] EXT4-fs: test_dummy_encryption requires encrypt feature [ 64.821977][ T1035] loop0: detected capacity change from 0 to 1024 [ 64.835013][ T1035] EXT4-fs: Ignoring removed bh option [ 64.840801][ T1035] EXT4-fs: Ignoring removed bh option [ 64.850947][ T1035] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 64.861401][ T28] audit: type=1400 audit(2000000009.380:663): avc: denied { mounton } for pid=1034 comm="syz.0.188" path="/32/control/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.861602][ T1035] overlayfs: failed to resolve './bus': -2 [ 64.885982][ T1033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'. [ 64.952877][ T1042] loop4: detected capacity change from 0 to 512 [ 65.022918][ T28] audit: type=1400 audit(2000000009.480:664): avc: denied { write } for pid=1030 comm="syz.4.186" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 65.084980][ T1042] input: syz0 as /devices/virtual/input/input4 [ 65.221693][ T1035] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 7: comm syz.0.188: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 65.395193][ T28] audit: type=1400 audit(2000000009.490:665): avc: denied { create } for pid=1034 comm="syz.0.188" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.685323][ T1054] overlayfs: missing 'lowerdir' [ 65.739635][ T1043] loop0: detected capacity change from 1024 to 0 [ 65.758153][ T1056] loop4: detected capacity change from 0 to 2048 [ 65.799896][ T1056] loop4: p2 < > p4 [ 65.804209][ T1056] loop4: p4 size 262144 extends beyond EOD, truncated [ 65.817782][ T329] udevd[329]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 65.828278][ T327] udevd[327]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 66.029520][ T716] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 66.242942][ T716] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 66.253965][ T716] usb 1-1: config 0 interface 0 has no altsetting 0 [ 66.260931][ T716] usb 1-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 66.274709][ T716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.286582][ T716] usb 1-1: config 0 descriptor?? [ 66.292086][ T1035] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 66.718441][ T716] hid-generic 0003:28DE:1205.0003: unknown main item tag 0x3 [ 66.753983][ T716] hid-generic 0003:28DE:1205.0003: unknown main item tag 0x0 [ 66.820923][ T716] hid-generic 0003:28DE:1205.0003: unknown main item tag 0x0 [ 66.887653][ T716] hid-generic 0003:28DE:1205.0003: unknown main item tag 0x0 [ 66.953339][ T716] hid-generic 0003:28DE:1205.0003: unknown main item tag 0x0 [ 67.012959][ T716] hid-generic 0003:28DE:1205.0003: unknown main item tag 0x0 [ 67.099541][ T716] hid-generic 0003:28DE:1205.0003: unknown main item tag 0x0 [ 67.122226][ T716] hid-generic 0003:28DE:1205.0003: unknown main item tag 0x0 [ 67.147041][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 67.147052][ T28] audit: type=1400 audit(2000000011.660:675): avc: denied { ioctl } for pid=1084 comm="syz.1.200" path="socket:[20483]" dev="sockfs" ino=20483 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.182508][ T716] hid-generic 0003:28DE:1205.0003: hidraw0: USB HID v0.04 Device [HID 28de:1205] on usb-dummy_hcd.0-1/input0 [ 67.198190][ T1087] loop5: detected capacity change from 0 to 512 [ 67.204877][ T1085] netlink: 'syz.1.200': attribute type 8 has an invalid length. [ 67.221353][ T716] usb 1-1: USB disconnect, device number 7 [ 67.227406][ T1087] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.265412][ T1087] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec018, mo2=0002] [ 67.265636][ T1088] fido_id[1088]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 67.307148][ T1087] System zones: 0-2, 18-18, 34-35 [ 67.345706][ T1108] loop4: detected capacity change from 0 to 2048 [ 67.369818][ T1087] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 67.389433][ T1087] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.400154][ T1108] loop4: p1 < > p4 [ 67.404462][ T1108] loop4: p4 size 722688 extends beyond EOD, truncated [ 67.542843][ T1108] netlink: 'syz.4.202': attribute type 9 has an invalid length. [ 67.550529][ T1108] netlink: 'syz.4.202': attribute type 7 has an invalid length. [ 67.558566][ T1108] netlink: 'syz.4.202': attribute type 8 has an invalid length. [ 67.851139][ T287] EXT4-fs (loop0): unmounting filesystem. [ 67.865167][ T620] EXT4-fs (loop5): unmounting filesystem. [ 68.526769][ T28] audit: type=1400 audit(2000000013.040:676): avc: denied { execute } for pid=1119 comm="syz.1.209" path="/54/file1" dev="tmpfs" ino=322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.529810][ T1126] loop0: detected capacity change from 0 to 1024 [ 68.561326][ T1126] EXT4-fs: dax option not supported [ 68.572331][ T1130] tmpfs: Bad value for 'nr_blocks' [ 68.588041][ T1128] fuse: Unknown parameter '' [ 68.592839][ T1126] fuse: Unknown parameter '' [ 68.608477][ T1135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'. [ 68.621725][ T1137] binder: 1134:1137 unknown command 352321536 [ 68.627899][ T1137] binder: 1134:1137 ioctl c0306201 200000001e00 returned -22 [ 68.655541][ T28] audit: type=1400 audit(2000000013.160:677): avc: denied { connect } for pid=1138 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.942463][ T28] audit: type=1400 audit(2000000013.460:678): avc: denied { mounton } for pid=1147 comm="syz.0.217" path="/38/file1" dev="tmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.079565][ T37] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 69.259534][ T37] usb 5-1: Using ep0 maxpacket: 16 [ 69.266545][ T37] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 69.275862][ T37] usb 5-1: config 0 has no interface number 0 [ 69.282575][ T37] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 69.293322][ T37] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 69.306025][ T37] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 69.315784][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.324294][ T37] usb 5-1: Product: syz [ 69.328759][ T37] usb 5-1: Manufacturer: syz [ 69.334040][ T37] usb 5-1: SerialNumber: syz [ 69.342083][ T37] usb 5-1: config 0 descriptor?? [ 69.347818][ T1144] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 69.359275][ T1144] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 69.570751][ T1144] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 69.578000][ T1144] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 69.789528][ T37] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 69.840084][ T28] audit: type=1400 audit(2000000014.360:679): avc: denied { getopt } for pid=1165 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.849573][ T1166] loop0: detected capacity change from 0 to 512 [ 69.869400][ T1166] EXT4-fs error (device loop0): ext4_xattr_inode_iget:397: comm syz.0.224: Parent and EA inode have the same ino 15 [ 69.881935][ T1166] EXT4-fs (loop0): 1 orphan inode deleted [ 69.887662][ T1166] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 69.897691][ T28] audit: type=1400 audit(2000000014.410:680): avc: denied { remount } for pid=1165 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.921376][ T287] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 69.941944][ T28] audit: type=1400 audit(2000000014.460:681): avc: denied { remove_name } for pid=287 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.965206][ T287] ------------[ cut here ]------------ [ 69.965293][ T28] audit: type=1400 audit(2000000014.460:682): avc: denied { unlink } for pid=287 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 69.970755][ T287] kernel BUG at fs/namei.c:2962! [ 69.998934][ T28] audit: type=1400 audit(2000000014.460:683): avc: denied { rmdir } for pid=287 comm="syz-executor" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 69.999366][ T287] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 70.020942][ T37] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 70.026673][ T287] CPU: 0 PID: 287 Comm: syz-executor Tainted: G W syzkaller #0 [ 70.036788][ T28] audit: type=1400 audit(2000000014.520:684): avc: denied { ioctl } for pid=1143 comm="syz.4.216" path="socket:[19897]" dev="sockfs" ino=19897 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.045528][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 70.045538][ T287] RIP: 0010:may_delete+0x727/0x730 [ 70.045563][ T287] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 82 fe ff ff 48 89 df e8 4a dd f3 ff e9 75 fe ff ff e8 00 42 ae ff 0f 0b e8 f9 41 ae ff <0f> 0b 0f 1f 80 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 e1 41 [ 70.045576][ T287] RSP: 0018:ffffc90000e37c58 EFLAGS: 00010293 [ 70.045589][ T287] RAX: ffffffff81c33127 RBX: ffff888116c61dd0 RCX: ffff888108e38000 [ 70.045600][ T287] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 70.045609][ T287] RBP: ffffc90000e37cb0 R08: 0000000000000003 R09: 0000000000000004 [ 70.045618][ T287] R10: dffffc0000000000 R11: fffff520001c6f68 R12: 1ffff11022d8c3ba [ 70.045627][ T287] R13: 0000000000000001 R14: ffff888111392690 R15: dffffc0000000000 [ 70.045638][ T287] FS: 0000555587abc500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 70.070844][ T37] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 70.080223][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.080239][ T287] CR2: 0000555587ae7988 CR3: 000000012fa19000 CR4: 00000000003506b0 [ 70.080254][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.080265][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.085665][ T37] asix: probe of 5-1:0.34 failed with error -61 [ 70.104936][ T287] Call Trace: [ 70.104945][ T287] [ 70.104953][ T287] vfs_rmdir+0x2f/0x4f0 [ 70.104977][ T287] ? incfs_kill_sb+0xec/0x210 [ 70.104998][ T287] incfs_kill_sb+0xfe/0x210 [ 70.105015][ T287] deactivate_locked_super+0xb5/0x120 [ 70.105034][ T287] deactivate_super+0xaf/0xe0 [ 70.105053][ T287] cleanup_mnt+0x45e/0x4e0 [ 70.105068][ T287] __cleanup_mnt+0x19/0x20 [ 70.105082][ T287] task_work_run+0x1e1/0x250 [ 70.105098][ T287] ? __cfi_task_work_run+0x10/0x10 [ 70.105116][ T287] ? __x64_sys_umount+0x12d/0x170 [ 70.259371][ T287] ? __cfi___x64_sys_umount+0x10/0x10 [ 70.264743][ T287] exit_to_user_mode_loop+0x9b/0xb0 [ 70.269929][ T287] exit_to_user_mode_prepare+0x87/0xd0 [ 70.275379][ T287] syscall_exit_to_user_mode+0x1a/0x30 [ 70.280873][ T287] do_syscall_64+0x58/0xa0 [ 70.285270][ T287] ? clear_bhb_loop+0x30/0x80 [ 70.289934][ T287] ? clear_bhb_loop+0x30/0x80 [ 70.294594][ T287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.300472][ T287] RIP: 0033:0x7fe790ba0797 [ 70.304870][ T287] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 70.324473][ T287] RSP: 002b:00007ffe4641fab8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 70.332869][ T287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe790ba0797 [ 70.340826][ T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4641fb70 [ 70.348778][ T287] RBP: 00007ffe4641fb70 R08: 00007ffe46420b70 R09: 00000000ffffffff [ 70.356731][ T287] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe46420c60 [ 70.364682][ T287] R13: 00007fe790c35f63 R14: 000000000001110a R15: 00007ffe46421d30 [ 70.372639][ T287] [ 70.375656][ T287] Modules linked in: [ 70.380366][ T287] ---[ end trace 0000000000000000 ]--- [ 70.385993][ T287] RIP: 0010:may_delete+0x727/0x730 [ 70.391666][ T287] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 82 fe ff ff 48 89 df e8 4a dd f3 ff e9 75 fe ff ff e8 00 42 ae ff 0f 0b e8 f9 41 ae ff <0f> 0b 0f 1f 80 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 e1 41 [ 70.411356][ T287] RSP: 0018:ffffc90000e37c58 EFLAGS: 00010293 [ 70.417472][ T287] RAX: ffffffff81c33127 RBX: ffff888116c61dd0 RCX: ffff888108e38000 [ 70.425520][ T287] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 70.433546][ T287] RBP: ffffc90000e37cb0 R08: 0000000000000003 R09: 0000000000000004 [ 70.441669][ T287] R10: dffffc0000000000 R11: fffff520001c6f68 R12: 1ffff11022d8c3ba [ 70.449715][ T287] R13: 0000000000000001 R14: ffff888111392690 R15: dffffc0000000000 [ 70.457728][ T287] FS: 0000555587abc500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 70.466702][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.473334][ T287] CR2: 00007fcee2df62f8 CR3: 000000012fa19000 CR4: 00000000003506b0 [ 70.481368][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.489329][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.497423][ T287] Kernel panic - not syncing: Fatal exception [ 70.503711][ T287] Kernel Offset: disabled [ 70.508015][ T287] Rebooting in 86400 seconds..