last executing test programs: 9.617237806s ago: executing program 3 (id=55): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x102, 0x20) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, 0x0) 9.557374729s ago: executing program 0 (id=59): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) add_key(&(0x7f0000000080)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 7.999626357s ago: executing program 4 (id=61): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x15840b00}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb4, r1, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8000, 0x53}}}}, [@acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}], @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x70, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "5ead5c6991384ac1"}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xf}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "87b147becfc764ea"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "b2ac0eab027f22a4"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "af32ba846ad19d8a"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x77}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xd}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "a73bf1886f8cb5a4"}]}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x42}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24008000}, 0x20040042) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000680), 0x20400, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, &(0x7f0000000000)={0x3}) 7.94224883s ago: executing program 4 (id=62): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002140)=ANY=[@ANYBLOB="1c000000010401040000e26624ea00000a0000040500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4050) 7.687563393s ago: executing program 3 (id=63): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002140)=ANY=[@ANYBLOB="1c000000010401040000e26624ea00000a0000040500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socketpair$unix(0x1, 0x3, 0x0, 0x0) add_key(0x0, &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)='G', 0x1, 0xfffffffffffffffb) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4050) 7.679926924s ago: executing program 0 (id=64): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002140)=ANY=[@ANYBLOB="1c000000010401040000e26624ea00000a0000040500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socketpair$unix(0x1, 0x3, 0x0, 0x0) add_key(0x0, &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)='G', 0x1, 0xfffffffffffffffb) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4050) 6.248038546s ago: executing program 4 (id=65): syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') write$cgroup_int(r0, &(0x7f00000000c0)=0xdf9c, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000711018000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) syz_mount_image$exfat(&(0x7f0000001080), &(0x7f0000001040)='./file1\x00', 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='utf8,umask=00000000000000000100003,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c696f636861727365743d6575632d6a702c6572726f72733d72656d6f756e742d726f2c757466382c666d61736b3d30303030303030303030303030303030303030303133332c646d61736b3d30303030303030303030303030303030303030303030332c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c00e7f7a64e12768f24588c031e3a7d52e686581692b31c66f5320a14e587a7c28feef0f667bc0421879f8dd03f06fa51770cf06aece55ad1185a9caffc331fae3067bf"], 0x3, 0x152b, &(0x7f0000002f80)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==") timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={[0x3]}, 0x8}) chmod(&(0x7f0000000080)='./file0\x00', 0x121) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) close(r1) 5.812222137s ago: executing program 2 (id=67): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x2}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) 5.811174227s ago: executing program 0 (id=68): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r5, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0x3}, {&(0x7f0000000180)=""/172, 0x2000022c}], 0x2) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@dellink={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x22920, 0x2300}, [@IFLA_GROUP={0x8, 0x1b, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x94}, 0xc040) 5.725103061s ago: executing program 2 (id=70): r0 = syz_open_procfs(0x0, &(0x7f0000000840)='map_files\x00') lseek(r0, 0xa, 0x1) getdents(r0, 0x0, 0x51) 5.693853723s ago: executing program 1 (id=71): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 5.693480153s ago: executing program 2 (id=72): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r3 = dup(r2) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) 4.796900288s ago: executing program 0 (id=73): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket(0x10, 0x2, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x800, 0x6, @loopback, 0x80000001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r3 = syz_open_pts(r2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095", @ANYBLOB="ccdab718e671acfb795cb5b2c89e62dd62b8c7a0b1099b41250c03e7be7cba75ceee29c330b22b7802fa1733c907571087f2c567a701b4db19f13ac78ffdd6a114f952b09d63c25bd131e78910eaa55a17063d037b5f9b955536e0a03c83484b36ae768dea6d8a351f83568d3b9e630503715a27471a0f9a9b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) sendmmsg$inet(r4, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="b9", 0x1}], 0x1}}], 0x1, 0x0) dup3(r3, r2, 0x0) 4.279803794s ago: executing program 1 (id=74): r0 = fsopen(&(0x7f0000000600)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet(0x2, 0xa, 0x262) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x30000011}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x1a) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r8 = socket(0x28, 0x801, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x800080, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) fchdir(r1) open(&(0x7f0000000080)='.\x00', 0x480, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) 3.936590742s ago: executing program 3 (id=75): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xea5bc50b6199d77e) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xc0}}, 0x200000b0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a000000010"], 0xa0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x7fff, 0x2, 0x4, 0xefffffffffffffff, 0x400000, 0x0, 0x2000000, 0x0, 0x1d, 0x0, 0xffffffffffffffff, 0xfffffffffffffff8], 0x0, 0x302000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.910263463s ago: executing program 0 (id=76): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x276, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, &(0x7f000000c380)='./file3\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) io_setup(0x6, &(0x7f0000004680)=0x0) r2 = eventfd2(0x7ff, 0x801) io_submit(r1, 0x2, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x499, r0, 0x0, 0x0, 0x62, 0x0, 0x1, r2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000180)="f6", 0x1, 0x7fffffffffffffff}]) syz_usb_connect$uac1(0x5, 0x8c, &(0x7f0000001280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x32, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x24}, [@extension_unit={0x7, 0x24, 0x8, 0x2, 0x1, 0x3}, @processing_unit={0xa, 0x24, 0x7, 0x1, 0x1, 0x2, "cb3a80"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x0, 0x3, 0x1, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x8, 0x0, {0x7, 0x25, 0x1, 0x4, 0x80, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xf, 0xdd, 0xbc, {0x7, 0x25, 0x1, 0xc, 0x6, 0x4}}}}}}}}]}}, &(0x7f0000001540)={0x0, 0x0, 0x5, &(0x7f00000013c0)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) stat(&(0x7f0000000140)='./file2\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000100)='./file3\x00', 0x1029400, &(0x7f0000000440)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x30000000}}, {@allow_other}, {@default_permissions}], [{@dont_measure}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}, {@fsname={'fsname', 0x3d, '}\\,&-\\}@\xff}{&[^'}}, {@seclabel}]}}, 0x1, 0x0, &(0x7f0000000580)="7c5e19ba98f225b2bbc19d6e90844638a95d41b1661911ab7ee81463b93c6264c372bbe8bbffad32beea240fbbe459bb2f6d243d90a8c208d83f827b12fc2597af2b1e9c51b67e08f6f5532ad1be5b72b34ec63ca1c805fb040f0328eba05bcb9cf6b3ba45a956139767c75aab190b99208b23553b19e10b9fe77d99ff115b60a9abf762133bb704f9a9c903aa4f08") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) 2.956264891s ago: executing program 1 (id=77): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001700)={&(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10, 0x11}}], 0x10}, 0x4) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x8000c6, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x110) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rmdir(&(0x7f0000000000)='./file0\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x24020400) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x5}, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) 2.859665496s ago: executing program 3 (id=78): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) add_key(&(0x7f0000000080)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 2.361116061s ago: executing program 2 (id=79): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002140)=ANY=[@ANYBLOB="1c000000010401040000e26624ea00000a0000040500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$nl_netfilter(0x10, 0x3, 0xc) add_key(0x0, &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)='G', 0x1, 0xfffffffffffffffb) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4050) 2.342718682s ago: executing program 4 (id=80): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x102, 0x20) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, 0x0) 1.861173536s ago: executing program 3 (id=81): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c7", 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x880, &(0x7f0000000480)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@sys_tz}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x7}}, {@time_offset={'time_offset', 0x3d, 0x2a}}, {@errors_continue}, {@namecase}, {@utf8}, {@dmask={'dmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}]}, 0x1, 0x1557, &(0x7f0000004680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() syz_emit_ethernet(0x260, &(0x7f0000000b00)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x2, 0x6, "cb53f9", 0x22a, 0x2b, 0xff, @remote, @dev={0xfe, 0x80, '\x00', 0x39}, {[@fragment={0x2f, 0x0, 0x9, 0x1, 0x0, 0x4, 0x64}, @srh={0x16, 0xe, 0x4, 0x7, 0x9, 0x50, 0x5, [@loopback, @empty, @private1, @mcast2, @rand_addr=' \x01\x00', @mcast2, @local]}, @srh={0x32, 0x8, 0x4, 0x4, 0x1, 0x20, 0x9, [@empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @empty]}, @srh={0x32, 0x6, 0x4, 0x3, 0xfd, 0x8, 0x2884, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @local]}, @routing={0x0, 0x4, 0x1, 0x6e, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @srh={0x3b, 0x6, 0x4, 0x3, 0xb, 0x60, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @srh={0x21, 0x6, 0x4, 0x3, 0x9, 0x8, 0x3d, [@loopback, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x3a}]}, @srh={0x5c, 0x4, 0x4, 0x2, 0x7, 0x40, 0x3ff, [@private1, @private1={0xfc, 0x1, '\x00', 0x1}]}], "af816cc73a9f517df5b2bf54d6a1c177a5074be543fb1413738b20d079b39df73e38568acd512158eecb8e049062224b8b0b36551b4e070feadf99c291ac512342275fb867f5265a543d676b2cdb1b2959d4ff2845d49aa1afa618425dcf2386c7fea99a326ad25291b0"}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000000)='./bus\x00', 0x9128c0, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x1) brk(0x7ff877c47fff) setitimer(0x3, &(0x7f00000005c0)={{0x6, 0x9}}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000000)=0xfffffffc, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000"], 0x48}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.615953838s ago: executing program 1 (id=82): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4ea7, 0x0, @local, 0x1}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.268071576s ago: executing program 1 (id=83): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r4, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0x3}, {&(0x7f0000000180)=""/172, 0x2000022c}], 0x2) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@dellink={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x22920, 0x2300}, [@IFLA_GROUP={0x8, 0x1b, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x94}, 0xc040) 1.121298703s ago: executing program 4 (id=84): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 466.064556ms ago: executing program 2 (id=85): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@nombcache}]}, 0x3, 0x4d4, &(0x7f0000000180)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000020140001002bbd7000ffdbdf25020000fd", @ANYRES32=r1, @ANYBLOB="08000b00e000000108000200ac1414bb1400060008"], 0x60}}, 0x40010) 333.909243ms ago: executing program 1 (id=86): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket(0x10, 0x2, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x800, 0x6, @loopback, 0x80000001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r3 = syz_open_pts(r2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095", @ANYBLOB="ccdab718e671acfb795cb5b2c89e62dd62b8c7a0b1099b41250c03e7be7cba75ceee29c330b22b7802fa1733c907571087f2c567a701b4db19f13ac78ffdd6a114f952b09d63c25bd131e78910eaa55a17063d037b5f9b955536e0a03c83484b36ae768dea6d8a351f83568d3b9e630503715a27471a0f9a9b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) sendmmsg$inet(r4, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="b9", 0x1}], 0x1}}], 0x1, 0x0) dup3(r3, r2, 0x0) 322.495983ms ago: executing program 3 (id=87): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002140)=ANY=[@ANYBLOB="1c000000010401040000e26624ea00000a0000040500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$nl_netfilter(0x10, 0x3, 0xc) add_key(0x0, &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)='G', 0x1, 0xfffffffffffffffb) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4050) 274.007356ms ago: executing program 4 (id=88): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@nombcache}]}, 0x3, 0x4d4, &(0x7f0000000180)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000140001002bbd7000ffdbdf25020000fd", @ANYRES32=r4, @ANYBLOB="08000b00e000000108000200ac1414bb1400060008"], 0x60}}, 0x40010) 192.213239ms ago: executing program 0 (id=89): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c023c0019000100000000001000000000000000000000000000000000000001200100000000000000000000000000004e22000bfffc00040a00800033000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 2 (id=90): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r3 = dup(r2) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) kernel console output (not intermixed with test programs): 773996291.696:63): avc: denied { siginh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 324.070964][ T269] sshd-session (269) used greatest stack depth: 21824 bytes left Warning: Permanently added '10.128.1.7' (ED25519) to the list of known hosts. [ 330.143479][ T28] audit: type=1400 audit(1773996606.466:64): avc: denied { mounton } for pid=274 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 330.154289][ T274] cgroup: Unknown subsys name 'net' [ 330.166114][ T28] audit: type=1400 audit(1773996606.476:65): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 330.193397][ T28] audit: type=1400 audit(1773996606.496:66): avc: denied { unmount } for pid=274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 330.193578][ T274] cgroup: Unknown subsys name 'devices' [ 330.304755][ T274] cgroup: Unknown subsys name 'hugetlb' [ 330.310371][ T274] cgroup: Unknown subsys name 'rlimit' [ 330.442620][ T28] audit: type=1400 audit(1773996606.756:67): avc: denied { setattr } for pid=274 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 330.465785][ T28] audit: type=1400 audit(1773996606.756:68): avc: denied { mounton } for pid=274 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 330.483763][ T276] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 330.490662][ T28] audit: type=1400 audit(1773996606.756:69): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 330.522134][ T28] audit: type=1400 audit(1773996606.826:70): avc: denied { relabelto } for pid=276 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 330.540748][ T274] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 330.547729][ T28] audit: type=1400 audit(1773996606.826:71): avc: denied { write } for pid=276 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 330.581915][ T28] audit: type=1400 audit(1773996606.846:72): avc: denied { read } for pid=274 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 330.607444][ T28] audit: type=1400 audit(1773996606.846:73): avc: denied { open } for pid=274 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 331.411699][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.430253][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.438127][ T283] device bridge_slave_0 entered promiscuous mode [ 331.450832][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.458017][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.465820][ T283] device bridge_slave_1 entered promiscuous mode [ 331.510427][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.517660][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.525119][ T282] device bridge_slave_0 entered promiscuous mode [ 331.553823][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.560872][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.568390][ T282] device bridge_slave_1 entered promiscuous mode [ 331.626778][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.633857][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.641382][ T292] device bridge_slave_0 entered promiscuous mode [ 331.648628][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.655783][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.663241][ T292] device bridge_slave_1 entered promiscuous mode [ 331.770125][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.777329][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.784762][ T288] device bridge_slave_0 entered promiscuous mode [ 331.803236][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.810271][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.817823][ T288] device bridge_slave_1 entered promiscuous mode [ 331.858308][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.865373][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.872635][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.879682][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.909837][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.917036][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.925084][ T289] device bridge_slave_0 entered promiscuous mode [ 331.932078][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.939175][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.946711][ T289] device bridge_slave_1 entered promiscuous mode [ 331.968378][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.975440][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.982697][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.989827][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.060970][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.068685][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.076114][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.083637][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.092139][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 332.099813][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.142456][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.150718][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.157749][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.180697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.188386][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.196618][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.203641][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.211039][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.219766][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.226799][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.251757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.259922][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.266953][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.275011][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.284130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.307268][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.315304][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.340860][ T282] device veth0_vlan entered promiscuous mode [ 332.351873][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.360935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.369102][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.376805][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.384697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.392527][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.400035][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.407780][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.423552][ T283] device veth0_vlan entered promiscuous mode [ 332.430971][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 332.438568][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.446464][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 332.455052][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.463459][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.470482][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.477929][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 332.486371][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.494598][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.501604][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.509120][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.536186][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 332.544485][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.554706][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 332.563272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.574790][ T283] device veth1_macvtap entered promiscuous mode [ 332.583899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 332.592190][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 332.600416][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 332.619318][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 332.627742][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 332.636261][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 332.644787][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 332.662831][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 332.670434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.678080][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 332.686400][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.694748][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.701754][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.709281][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 332.717568][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.725949][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.733000][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.740316][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.748718][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.765187][ T282] device veth1_macvtap entered promiscuous mode [ 332.774708][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.782483][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 332.790701][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 332.799288][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 332.807324][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 332.815430][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.823589][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 332.831575][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.839676][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.847406][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.858184][ T292] device veth0_vlan entered promiscuous mode [ 332.885344][ T282] request_module fs-gadgetfs succeeded, but still no fs? [ 332.895959][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 332.904639][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.912712][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 332.921383][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 332.929868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 332.938297][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 332.946786][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 332.954206][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.961573][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 332.970107][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.978374][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.985412][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.992942][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 333.001192][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 333.009909][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.016947][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.025059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 333.037838][ T292] device veth1_macvtap entered promiscuous mode [ 333.050506][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 333.059327][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 333.067693][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 333.076025][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 333.084626][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 333.093212][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 333.101100][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 333.111846][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 333.120207][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 333.127691][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 333.150570][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 333.161091][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 333.174260][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 333.182641][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 333.238280][ T288] device veth0_vlan entered promiscuous mode [ 333.252095][ T288] device veth1_macvtap entered promiscuous mode [ 333.275503][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 333.286179][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 333.294653][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 333.303750][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 333.313192][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 333.323103][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 333.373488][ T351] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 334.491013][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 334.508748][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 334.526207][ T339] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 334.546213][ T339] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 334.567083][ T289] device veth0_vlan entered promiscuous mode [ 334.575524][ T339] syz.3.4 (339) used greatest stack depth: 20320 bytes left [ 334.590882][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 334.613371][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 334.644219][ T366] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 334.673468][ T289] device veth1_macvtap entered promiscuous mode [ 334.692680][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 334.701834][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 334.710220][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 334.719699][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 334.728042][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 334.736927][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 334.780267][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.059135][ T379] loop3: detected capacity change from 0 to 512 [ 335.065876][ T379] ======================================================= [ 335.065876][ T379] WARNING: The mand mount option has been deprecated and [ 335.065876][ T379] and is ignored by this kernel. Remove the mand [ 335.065876][ T379] option from the mount to silence this warning. [ 335.065876][ T379] ======================================================= [ 335.124028][ T379] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 335.330504][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 335.330523][ T28] audit: type=1400 audit(1773996611.476:126): avc: denied { create } for pid=374 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 335.359970][ T379] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 335.371291][ T28] audit: type=1400 audit(1773996611.486:127): avc: denied { connect } for pid=374 comm="syz.1.11" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 335.382377][ T379] EXT4-fs (loop3): 1 truncate cleaned up [ 335.391618][ T28] audit: type=1400 audit(1773996611.496:128): avc: denied { write } for pid=374 comm="syz.1.11" path="socket:[16688]" dev="sockfs" ino=16688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 335.421739][ T379] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 335.435710][ T28] audit: type=1400 audit(1773996611.756:129): avc: denied { mount } for pid=378 comm="syz.3.12" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 335.476320][ T28] audit: type=1400 audit(1773996611.796:130): avc: denied { create } for pid=378 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 335.484993][ T388] loop4: detected capacity change from 0 to 512 [ 335.503182][ T28] audit: type=1400 audit(1773996611.816:131): avc: denied { read write } for pid=378 comm="syz.3.12" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 335.507953][ T390] loop0: detected capacity change from 0 to 512 [ 335.526109][ T283] EXT4-fs (loop3): unmounting filesystem. [ 335.546502][ T28] audit: type=1400 audit(1773996611.816:132): avc: denied { open } for pid=378 comm="syz.3.12" path="/2/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 335.558670][ T388] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 335.595016][ T388] EXT4-fs (loop4): 1 truncate cleaned up [ 335.600777][ T388] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 335.615761][ T28] audit: type=1400 audit(1773996611.816:133): avc: denied { ioctl } for pid=378 comm="syz.3.12" path="/2/file1/file1" dev="loop3" ino=15 ioctlcmd=0x6629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 335.695269][ T28] audit: type=1400 audit(1773996611.936:134): avc: denied { setopt } for pid=387 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 335.715040][ T390] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 335.735288][ T390] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 335.745518][ T390] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.764759][ T28] audit: type=1400 audit(1773996612.086:135): avc: denied { write } for pid=389 comm="syz.0.15" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.778014][ T337] udevd[337]: incorrect ext4 checksum on /dev/loop0 [ 337.318817][ T292] EXT4-fs (loop4): unmounting filesystem. [ 337.349691][ T390] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.15: Unrecognised inode hash code 20 [ 337.513624][ T390] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.15: Corrupt directory, running e2fsck is recommended [ 337.551673][ T390] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.15: corrupted xattr block 33 [ 337.564718][ T390] EXT4-fs (loop0): Remounting filesystem read-only [ 337.590191][ T390] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 337.599511][ T390] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.15: corrupted xattr block 33 [ 339.579249][ T421] loop4: detected capacity change from 0 to 512 [ 339.597018][ T384] EXT4-fs error (device loop0): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 339.602611][ T421] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 339.678818][ T390] EXT4-fs (loop0): Remounting filesystem read-only [ 339.727527][ T421] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 339.729712][ T384] EXT4-fs (loop0): Remounting filesystem read-only [ 339.735568][ T421] System zones: 1-12 [ 339.742550][ T390] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 339.758171][ T421] EXT4-fs (loop4): 1 truncate cleaned up [ 339.763963][ T421] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 339.825359][ T390] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.15: Unrecognised inode hash code 20 [ 339.838073][ T390] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.15: Corrupt directory, running e2fsck is recommended [ 339.851576][ T390] EXT4-fs error (device loop0): ext4_validate_inode_bitmap:106: comm syz.0.15: Corrupt inode bitmap - block_group = 0, inode_bitmap = 18 [ 339.867716][ T390] EXT4-fs (loop0): Remounting filesystem read-only [ 339.869640][ T433] loop2: detected capacity change from 0 to 512 [ 339.887018][ T288] EXT4-fs (loop0): unmounting filesystem. [ 339.918152][ T433] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 340.001826][ T292] EXT4-fs (loop4): unmounting filesystem. [ 340.008785][ T433] EXT4-fs (loop2): 1 truncate cleaned up [ 340.014705][ T433] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 341.157943][ T289] EXT4-fs (loop2): unmounting filesystem. [ 341.173554][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 341.173624][ T28] audit: type=1400 audit(1773996617.446:150): avc: denied { write } for pid=439 comm="syz.4.28" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 341.351605][ T28] audit: type=1400 audit(1773996617.466:151): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 193) OK Stopping crond: stopped /usr/sbin/crond (pid 185) OK Stopping dhcpcd... [ 343.852042][ T28] audit: type=1400 audit(1773996620.166:152): avc: denied { write } for pid=454 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 stopped /sbin/dhcpcd (pid 140) [ 343.978129][ T492] loop4: detected capacity change from 0 to 512 [ 343.990076][ T28] audit: type=1400 audit(1773996620.166:153): avc: denied { read } for pid=454 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 343.994802][ T492] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 344.014550][ T28] audit: type=1400 audit(1773996620.246:154): avc: denied { search } for pid=482 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping network: [ 344.653631][ T492] EXT4-fs (loop4): 1 truncate cleaned up [ 344.994964][ T492] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 345.009608][ T28] audit: type=1400 audit(1773996620.306:155): avc: denied { read write } for pid=487 comm="syz.0.38" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 345.092964][ T28] audit: type=1400 audit(1773996620.306:156): avc: denied { open } for pid=487 comm="syz.0.38" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 345.116127][ T28] audit: type=1400 audit(1773996620.636:157): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 345.262854][ T28] audit: type=1400 audit(1773996621.326:158): avc: denied { mount } for pid=491 comm="syz.4.39" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 346.147609][ T292] EXT4-fs (loop4): unmounting filesystem. [ 346.262754][ C0] sched: RT throttling activated [ 347.729752][ T28] audit: type=1400 audit(1773996624.046:159): avc: denied { write } for pid=537 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 347.923173][ T28] audit: type=1400 audit(1773996624.106:160): avc: denied { create } for pid=541 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 349.955354][ T554] Invalid ELF header type: 3 != 1 [ 349.960575][ T28] audit: type=1400 audit(1773996626.256:161): avc: denied { write } for pid=141 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.046064][ T28] audit: type=1400 audit(1773996626.256:162): avc: denied { remove_name } for pid=141 comm="dhcpcd" name="sock" dev="tmpfs" ino=490 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.068523][ T28] audit: type=1400 audit(1773996626.256:163): avc: denied { unlink } for pid=141 comm="dhcpcd" name="sock" dev="tmpfs" ino=490 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 350.091010][ T28] audit: type=1400 audit(1773996626.256:164): avc: denied { setopt } for pid=548 comm="syz.1.51" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 350.111293][ T28] audit: type=1400 audit(1773996626.256:165): avc: denied { sys_module } for pid=548 comm="syz.1.51" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 351.083844][ T28] audit: type=1400 audit(1773996626.276:166): avc: denied { module_load } for pid=548 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 352.855083][ T572] loop3: detected capacity change from 0 to 512 [ 352.900674][ T572] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 352.928391][ T28] audit: type=1400 audit(1773996626.306:167): avc: denied { unlink } for pid=141 comm="dhcpcd" name="pid" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 354.371243][ T28] audit: type=1400 audit(1773996626.336:168): avc: denied { create } for pid=555 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 354.390393][ T28] audit: type=1400 audit(1773996626.336:169): avc: denied { read } for pid=548 comm="syz.1.51" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 354.422812][ T28] audit: type=1400 audit(1773996626.606:170): avc: denied { setopt } for pid=560 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 354.463596][ T28] audit: type=1400 audit(1773996630.766:171): avc: denied { append } for pid=589 comm="syz.4.61" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 OK [ 354.493684][ T572] EXT4-fs (loop3): 1 truncate cleaned up [ 354.499388][ T572] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 354.831614][ T283] EXT4-fs (loop3): unmounting filesystem. Stopping iptables: OK [ 356.292927][ T28] audit: type=1400 audit(1773996632.596:172): avc: denied { search } for pid=602 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.650705][ T610] loop4: detected capacity change from 0 to 256 Stopping system message bus: [ 356.691588][ T610] exfat: Deprecated parameter 'utf8' [ 356.728975][ T610] exfat: Deprecated parameter 'utf8' [ 356.757468][ T28] audit: type=1400 audit(1773996632.596:173): avc: denied { write } for pid=602 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.769900][ T610] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 357.635195][ T28] audit: type=1400 audit(1773996632.596:174): avc: denied { add_name } for pid=602 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.662287][ T28] audit: type=1400 audit(1773996632.596:175): avc: denied { create } for pid=602 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 358.943027][ T640] loop0: detected capacity change from 0 to 256 [ 358.984162][ T28] audit: type=1400 audit(1773996632.596:176): avc: denied { read open } for pid=602 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=880 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 359.278050][ T640] FAT-fs (loop0): "posix" option is obsolete, not supported now [ 359.435055][ T28] audit: type=1400 audit(1773996632.596:177): avc: denied { lock } for pid=602 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=880 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 359.487246][ T28] audit: type=1400 audit(1773996632.616:178): avc: denied { read } for pid=603 comm="syz.1.66" dev="nsfs" ino=4026532293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 359.517449][ T646] loop1: detected capacity change from 0 to 16 done [ 359.582087][ T646] erofs: (device loop1): mounted with root inode @ nid 36. [ 359.623052][ T28] audit: type=1400 audit(1773996632.616:179): avc: denied { open } for pid=603 comm="syz.1.66" path="net:[4026532293]" dev="nsfs" ino=4026532293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 359.673241][ T28] audit: type=1400 audit(1773996632.616:180): avc: denied { ioctl } for pid=603 comm="syz.1.66" path="socket:[15998]" dev="sockfs" ino=15998 ioctlcmd=0x9419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 359.718380][ T28] audit: type=1400 audit(1773996632.616:181): avc: denied { ioctl } for pid=603 comm="syz.1.66" path="socket:[16000]" dev="sockfs" ino=16000 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 359.883243][ T28] audit: type=1400 audit(1773996633.986:182): avc: denied { read } for pid=627 comm="syz.0.73" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 360.313678][ T28] audit: type=1400 audit(1773996633.986:183): avc: denied { open } for pid=627 comm="syz.0.73" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 360.686880][ T660] loop4: detected capacity change from 0 to 512 [ 360.753419][ T664] loop3: detected capacity change from 0 to 256 [ 360.801530][ T660] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 360.881728][ T664] exfat: Deprecated parameter 'namecase' [ 360.951539][ T664] exfat: Deprecated parameter 'utf8' [ 360.973723][ T28] audit: type=1400 audit(1773996634.506:184): avc: denied { execmem } for pid=631 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 361.008888][ T660] EXT4-fs (loop4): 1 truncate cleaned up [ 361.044602][ T664] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x0019abd0, checksum : 0x1119abd0) [ 361.060922][ T660] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 361.200607][ T664] exFAT-fs (loop3): invalid boot region [ 361.213076][ T28] audit: type=1400 audit(1773996634.596:185): avc: denied { read } for pid=627 comm="syz.0.73" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 361.262882][ T587] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 361.291424][ T664] exFAT-fs (loop3): failed to recognize exfat type [ 361.298762][ T292] EXT4-fs (loop4): unmounting filesystem. [ 361.888261][ T675] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 362.142128][ T679] loop2: detected capacity change from 0 to 512 [ 362.186486][ T283] ------------[ cut here ]------------ [ 362.191990][ T283] WARNING: CPU: 1 PID: 283 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 362.200020][ T283] Modules linked in: [ 362.203997][ T283] CPU: 1 PID: 283 Comm: syz-executor Not tainted syzkaller #0 [ 362.211459][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 Stopping klogd: [ 362.221679][ T283] RIP: 0010:drop_nlink+0xc5/0x110 [ 362.227961][ T283] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 e3 ae f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6b 70 ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 362.239070][ T679] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.85: invalid indirect mapped block 256 (level 2) [ 362.247615][ T283] RSP: 0018:ffffc9000baafab8 EFLAGS: 00010293 [ 362.247634][ T283] RAX: ffffffff81c5fb75 RBX: ffff88810f278fa0 RCX: ffff888121f03cc0 [ 362.247645][ T283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 362.247654][ T283] RBP: ffffc9000baafae0 R08: 0000000000000003 R09: 0000000000000004 [ 362.247664][ T283] R10: dffffc0000000000 R11: fffff52001755f48 R12: dffffc0000000000 [ 362.247674][ T283] R13: 1ffff11021e4f1fd R14: ffff88810f278fe8 R15: 0000000000000000 OK[ 362.261057][ T679] EXT4-fs (loop2): 2 truncates cleaned up [ 362.267260][ T283] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 362.311630][ T688] loop4: detected capacity change from 0 to 512 [ 362.312809][ T283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.323774][ T688] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.88: invalid indirect mapped block 256 (level 2) [ 362.328049][ T283] CR2: 0000200000007000 CR3: 000000011200b000 CR4: 00000000003506a0 [ 362.334904][ T688] EXT4-fs (loop4): 2 truncates cleaned up [ 362.347706][ T283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 362.347720][ T283] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 362.355757][ T688] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 362.361380][ T283] Call Trace: [ 362.361397][ T283] [ 362.369516][ T679] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 362.377385][ T283] shmem_rmdir+0x5b/0x90 [ 362.405502][ T283] vfs_rmdir+0x393/0x500 [ 362.409754][ T283] incfs_kill_sb+0x105/0x220 [ 362.414365][ T283] deactivate_locked_super+0xb5/0x120 [ 362.419738][ T283] deactivate_super+0xaf/0xe0 [ 362.424447][ T283] cleanup_mnt+0x474/0x500 Stopping acpid: [ 362.429009][ T283] __cleanup_mnt+0x19/0x20 [ 362.434680][ T283] task_work_run+0x1e1/0x250 [ 362.439276][ T283] ? __cfi_task_work_run+0x10/0x10 [ 362.444430][ T283] ? free_nsproxy+0x21f/0x270 [ 362.449112][ T283] do_exit+0xa35/0x2660 [ 362.453519][ T283] ? __cfi_do_exit+0x10/0x10 [ 362.458296][ T283] ? __kasan_check_write+0x14/0x20 [ 362.463458][ T283] ? _raw_spin_lock_irq+0x95/0xf0 [ 362.468487][ T283] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 362.474053][ T283] ? ksys_write+0x1e4/0x250 [ 362.478623][ T283] ? zap_other_threads+0x2c1/0x2f0 [ 362.483781][ T283] do_group_exit+0x210/0x2d0 [ 362.488379][ T283] __x64_sys_exit_group+0x3f/0x40 [ 362.493434][ T283] x64_sys_call+0x7b4/0x9a0 [ 362.497941][ T283] do_syscall_64+0x4c/0xa0 [ 362.502358][ T283] ? clear_bhb_loop+0x30/0x80 [ 362.502667][ T693] netlink: 'syz.4.88': attribute type 11 has an invalid length. [ 362.507074][ T283] ? clear_bhb_loop+0x30/0x80 [ 362.514743][ T693] netlink: 36 bytes leftover after parsing attributes in process `syz.4.88'. [ 362.519382][ T283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.534025][ T283] RIP: 0033:0x7f4eb9f9c799 [ 362.538448][ T283] Code: Unable to access opcode bytes at 0x7f4eb9f9c76f. [ 362.545487][ T283] RSP: 002b:00007ffd8b3ffb88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 362.553920][ T283] RAX: ffffffffffffffda RBX: 00007f4eba0320b0 RCX: 00007f4eb9f9c799 [ 362.562238][ T283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 362.570230][ T283] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f4eba032050 [ 362.578218][ T283] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8b400e40 [ 362.586212][ T283] R13: 00007f4eba032050 R14: 000055555b43c4e8 R15: 00007ffd8b401f10 [ 362.594202][ T283] [ 362.597220][ T283] ---[ end trace 0000000000000000 ]--- [ 362.603960][ T283] ================================================================== [ 362.604897][ T289] EXT4-fs (loop2): unmounting filesystem. [ 362.612013][ T283] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 362.623935][ T283] Write of size 4 at addr 0000000000000170 by task syz-executor/283 [ 362.631893][ T283] [ 362.634200][ T283] CPU: 1 PID: 283 Comm: syz-executor Tainted: G W syzkaller #0 [ 362.643110][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 362.653145][ T283] Call Trace: [ 362.656406][ T283] [ 362.659326][ T283] __dump_stack+0x21/0x24 [ 362.663642][ T283] dump_stack_lvl+0x110/0x170 [ 362.668299][ T283] ? __cfi_dump_stack_lvl+0x8/0x8 [ 362.673302][ T283] ? ihold+0x20/0x60 [ 362.677176][ T283] ? ihold+0x20/0x60 [ 362.681048][ T283] ? ihold+0x20/0x60 [ 362.684929][ T283] print_report+0x3d/0x60 [ 362.689240][ T283] kasan_report+0x122/0x150 [ 362.693722][ T283] ? ihold+0x20/0x60 [ 362.697596][ T283] kasan_check_range+0x249/0x2a0 [ 362.702511][ T283] __kasan_check_write+0x14/0x20 [ 362.707425][ T283] ihold+0x20/0x60 [ 362.711125][ T283] vfs_rmdir+0x25f/0x500 [ 362.715348][ T283] incfs_kill_sb+0x105/0x220 [ 362.719920][ T283] deactivate_locked_super+0xb5/0x120 [ 362.725272][ T283] deactivate_super+0xaf/0xe0 [ 362.729941][ T283] cleanup_mnt+0x474/0x500 [ 362.734345][ T283] __cleanup_mnt+0x19/0x20 [ 362.738739][ T283] task_work_run+0x1e1/0x250 [ 362.743310][ T283] ? __cfi_task_work_run+0x10/0x10 [ 362.748401][ T283] ? free_nsproxy+0x21f/0x270 [ 362.753056][ T283] do_exit+0xa35/0x2660 [ 362.757198][ T283] ? __cfi_do_exit+0x10/0x10 [ 362.761768][ T283] ? __kasan_check_write+0x14/0x20 [ 362.766854][ T283] ? _raw_spin_lock_irq+0x95/0xf0 [ 362.771861][ T283] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 362.777387][ T283] ? ksys_write+0x1e4/0x250 [ 362.781864][ T283] ? zap_other_threads+0x2c1/0x2f0 [ 362.786957][ T283] do_group_exit+0x210/0x2d0 [ 362.791528][ T283] __x64_sys_exit_group+0x3f/0x40 [ 362.796533][ T283] x64_sys_call+0x7b4/0x9a0 [ 362.801020][ T283] do_syscall_64+0x4c/0xa0 [ 362.805422][ T283] ? clear_bhb_loop+0x30/0x80 [ 362.810077][ T283] ? clear_bhb_loop+0x30/0x80 [ 362.814820][ T283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.820694][ T283] RIP: 0033:0x7f4eb9f9c799 [ 362.825092][ T283] Code: Unable to access opcode bytes at 0x7f4eb9f9c76f. [ 362.832082][ T283] RSP: 002b:00007ffd8b3ffb88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 362.840468][ T283] RAX: ffffffffffffffda RBX: 00007f4eba0320b0 RCX: 00007f4eb9f9c799 [ 362.848416][ T283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 362.856365][ T283] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f4eba032050 [ 362.864318][ T283] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8b400e40 [ 362.872267][ T283] R13: 00007f4eba032050 R14: 000055555b43c4e8 R15: 00007ffd8b401f10 [ 362.880567][ T283] [ 362.883565][ T283] ================================================================== [ 362.891639][ T587] usb 1-1: device not accepting address 2, error -71 [ 362.989325][ T283] Disabling lock debugging due to kernel taint [ 362.995719][ T283] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 363.003519][ T283] #PF: supervisor write access in kernel mode [ 363.009576][ T283] #PF: error_code(0x0002) - not-present page [ 363.015543][ T283] PGD 11dea9067 P4D 11dea9067 PUD 0 [ 363.020829][ T283] Oops: 0002 [#1] PREEMPT SMP KASAN [ 363.026033][ T283] CPU: 1 PID: 283 Comm: syz-executor Tainted: G B W syzkaller #0 [ 363.034964][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 363.045046][ T283] RIP: 0010:ihold+0x26/0x60 [ 363.049561][ T283] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 d1 67 ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 20 a6 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 c1 [ 363.069165][ T283] RSP: 0018:ffffc9000baafaf8 EFLAGS: 00010246 [ 363.075233][ T283] RAX: ffff888121f03c00 RBX: 0000000000000000 RCX: ffff888121f03cc0 [ 363.083203][ T283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 363.091149][ T283] RBP: ffffc9000baafb08 R08: ffffffff87b727e7 R09: 1ffffffff0f6e4fc [ 363.099098][ T283] R10: dffffc0000000000 R11: fffffbfff0f6e4fd R12: ffff88810f278fac [ 363.107052][ T283] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 363.114999][ T283] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 363.123911][ T283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.130474][ T283] CR2: 0000000000000170 CR3: 000000011200b000 CR4: 00000000003506a0 [ 363.138427][ T283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 363.146386][ T283] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 363.154348][ T283] Call Trace: [ 363.157613][ T283] [ 363.160525][ T283] vfs_rmdir+0x25f/0x500 [ 363.164754][ T283] incfs_kill_sb+0x105/0x220 [ 363.169331][ T283] deactivate_locked_super+0xb5/0x120 [ 363.174685][ T283] deactivate_super+0xaf/0xe0 [ 363.179344][ T283] cleanup_mnt+0x474/0x500 [ 363.183740][ T283] __cleanup_mnt+0x19/0x20 [ 363.188133][ T283] task_work_run+0x1e1/0x250 [ 363.192704][ T283] ? __cfi_task_work_run+0x10/0x10 [ 363.197798][ T283] ? free_nsproxy+0x21f/0x270 [ 363.202459][ T283] do_exit+0xa35/0x2660 [ 363.206595][ T283] ? __cfi_do_exit+0x10/0x10 [ 363.211166][ T283] ? __kasan_check_write+0x14/0x20 [ 363.216255][ T283] ? _raw_spin_lock_irq+0x95/0xf0 [ 363.221263][ T283] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 363.226789][ T283] ? ksys_write+0x1e4/0x250 [ 363.231270][ T283] ? zap_other_threads+0x2c1/0x2f0 [ 363.236381][ T283] do_group_exit+0x210/0x2d0 [ 363.240951][ T283] __x64_sys_exit_group+0x3f/0x40 [ 363.245957][ T283] x64_sys_call+0x7b4/0x9a0 [ 363.250436][ T283] do_syscall_64+0x4c/0xa0 [ 363.254829][ T283] ? clear_bhb_loop+0x30/0x80 [ 363.259482][ T283] ? clear_bhb_loop+0x30/0x80 [ 363.264134][ T283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.270005][ T283] RIP: 0033:0x7f4eb9f9c799 [ 363.274394][ T283] Code: Unable to access opcode bytes at 0x7f4eb9f9c76f. [ 363.281385][ T283] RSP: 002b:00007ffd8b3ffb88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 363.289858][ T283] RAX: ffffffffffffffda RBX: 00007f4eba0320b0 RCX: 00007f4eb9f9c799 [ 363.297807][ T283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 363.305753][ T283] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f4eba032050 [ 363.313700][ T283] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8b400e40 [ 363.321646][ T283] R13: 00007f4eba032050 R14: 000055555b43c4e8 R15: 00007ffd8b401f10 [ 363.329599][ T283] [ 363.332595][ T283] Modules linked in: [ 363.336479][ T283] CR2: 0000000000000170 [ 363.340605][ T283] ---[ end trace 0000000000000000 ]--- [ 363.346031][ T283] RIP: 0010:ihold+0x26/0x60 [ 363.350515][ T283] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 d1 67 ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 20 a6 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 c1 [ 363.370095][ T283] RSP: 0018:ffffc9000baafaf8 EFLAGS: 00010246 [ 363.376136][ T283] RAX: ffff888121f03c00 RBX: 0000000000000000 RCX: ffff888121f03cc0 [ 363.384083][ T283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 363.392028][ T283] RBP: ffffc9000baafb08 R08: ffffffff87b727e7 R09: 1ffffffff0f6e4fc [ 363.399977][ T283] R10: dffffc0000000000 R11: fffffbfff0f6e4fd R12: ffff88810f278fac [ 363.407925][ T283] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 363.415874][ T283] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 363.424779][ T283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.431369][ T283] CR2: 0000000000000170 CR3: 000000011200b000 CR4: 00000000003506a0 [ 363.439321][ T283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 363.447271][ T283] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 363.455223][ T283] Kernel panic - not syncing: Fatal exception [ 363.461593][ T283] Kernel Offset: disabled [ 363.465897][ T283] Rebooting in 86400 seconds.. serialport: VM disconnected.