last executing test programs: 7.550457803s ago: executing program 0 (id=1): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@grpquota}, {@init_itable}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x400}}, {@bh}, {@acl}]}, 0x1, 0x5a3, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x2}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) pwritev2(r0, 0x0, 0x0, 0x5412, 0x0, 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) unshare(0x24020400) socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, 0x0) 6.9234484s ago: executing program 0 (id=9): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, r0, 0x6, 0x973f, 0x81, 0x1}) 6.783314143s ago: executing program 0 (id=10): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000d00)={0x0, 0xc, 0x6, "e569904a7a8b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="1912c50000003989"], 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 6.628814029s ago: executing program 1 (id=14): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x9}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000000)=0x8, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.110045261s ago: executing program 1 (id=16): socket(0x2, 0xa, 0x300) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 6.100529244s ago: executing program 4 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) mkdir(&(0x7f0000000000)='dir0\x00', 0x80) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) 5.602557701s ago: executing program 2 (id=18): ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000540)={{0x0, 0xfffffffffffffff8, 0x6, 0x5, 0x2, 0xffffffff, 0x6, 0x4d3, 0x4, 0x80000000, 0x4, 0x1000, 0x2, 0xc0d6, 0x8000000000000000}}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001540)={r0, 0x81}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1900000004000000040000000100"], 0x1d) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast2}}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x30, r7, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x30}, 0x1, 0x0, 0x0, 0x40048d0}, 0x40000) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@empty, @local, 0xffffffffffffffff, "cae5c66b00e4bfdb8ea8fbabf2121dc8b1f8567a2939f7e3b4927f49a62f1a25", 0xfffffff5, 0x4, 0x8e, 0x9}, 0x3c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r8, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x3, &(0x7f0000000000)) 4.941952066s ago: executing program 4 (id=19): open(0x0, 0x108943, 0x148) open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x6) 4.880981901s ago: executing program 1 (id=20): mlockall(0x2) r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x1000) 4.745233023s ago: executing program 1 (id=21): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) 4.530629853s ago: executing program 2 (id=22): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x15, 0x0, 0x0, 0x3}, 0xf) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@ipv6_getroute={0x1c, 0x1a, 0x201, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x844) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000040)='asymmetric\x00', 0x0) add_key$fscrypt_v1(&(0x7f00000000c0), 0x0, &(0x7f0000000400)={0x0, "0aa7b1e22c93adc6defdb8817d68a8843ecddd497e60cc8d40dbcafa62b4a158b72eaf5d8bb1616a12da2a6e5c040d670ebea65386e2447589786d689cd325ef", 0x3d}, 0x48, r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, &(0x7f0000000080)='4', 0x1) 3.857351131s ago: executing program 2 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) getdents(r0, &(0x7f0000000bc0)=""/4096, 0x1000) 3.856747712s ago: executing program 4 (id=24): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prctl$PR_CAPBSET_READ(0x59616d61, 0xffffffff) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) 3.689256371s ago: executing program 2 (id=25): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000007c0)=0x2) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 3.476227431s ago: executing program 2 (id=26): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000400)=ANY=[], 0x204) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000140)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) 3.422326264s ago: executing program 2 (id=27): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7f) read$char_usb(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000400)=""/186, 0x110) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x0) 3.179380011s ago: executing program 1 (id=28): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x211, &(0x7f00000004c0)="$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") 3.100945939s ago: executing program 4 (id=29): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) 1.678145244s ago: executing program 4 (id=30): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r3, r3, 0x0, 0x1000000201005) 1.667773377s ago: executing program 0 (id=32): write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000300)=0x3ff, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x5f0}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x441) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) 1.514238503s ago: executing program 1 (id=33): syz_usb_connect(0x2, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e010000182402010202"], 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x44282, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) unshare(0x360304c0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) r1 = getpgid(0xffffffffffffffff) sched_setscheduler(r1, 0x6, &(0x7f0000000180)=0x20000005) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x400, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x81}}, {@minixdf}, {@bh}, {@delalloc}, {@dioread_nolock}, {@noquota}]}, 0xff, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0)={0xda, 0x0, 0x78b}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r5, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x102000000000000, 0x7, 0x2, 0x1, 0x8], 0xeeef0000, 0x4fb40}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xc00) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r0, &(0x7f0000000c80)=[{&(0x7f0000002300)=""/98, 0x62}], 0x1, 0x3, 0x9, 0x0) 1.488381139s ago: executing program 0 (id=34): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000040000000f5ff"], 0x50) 1.328754987s ago: executing program 0 (id=35): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r4, 0x1) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) 553.840769ms ago: executing program 3 (id=38): socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffc}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0x2}]}, {0x0, [0x0, 0x5f, 0x2e, 0x25]}}, 0x0, 0x2a}, 0x20) r2 = syz_io_uring_setup(0x3765, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x0, 0x6}, &(0x7f0000000140), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x10) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) 530.954944ms ago: executing program 3 (id=39): bpf$PROG_LOAD(0x5, 0x0, 0x0) 445.099765ms ago: executing program 3 (id=40): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, 0x0, 0x0) 421.30529ms ago: executing program 3 (id=41): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netlink\x00') preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/200, 0xc8}], 0x1, 0x111, 0x0) 404.484054ms ago: executing program 3 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000180)='./bus\x00', &(0x7f0000000000), 0x200c002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 301.930119ms ago: executing program 3 (id=43): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x90, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x0, 0x20}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x6, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x88, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x6, 0x10, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffff601, 0x2, 0xf000, 0x6}, {0x6, 0x24, 0x1a, 0x1ff, 0xa}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}, @mdlm={0x15, 0x24, 0x12, 0xf6}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x40, 0x0, 0xfc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0xfd, 0x80}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x7, 0x8, 0x0, 0x8, 0x7}, 0x35, &(0x7f0000000280)={0x5, 0xf, 0x35, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "2bbdff4f4cccbe6ad43d2c065f273d25"}, @ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x0, 0xf000, 0x6, [0xff3f3f, 0xff0000, 0xff0f, 0xffc0]}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x7c3a}}]}) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000018c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x73, 0x10, 0xe, 0x10, 0x10, 0x10, 0x10, 0x12, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 0s ago: executing program 4 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='logfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/serial8250\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc49}]}]}, 0x5c}}, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r6, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={@remote, 0x2f, r6}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000040)={@local, r6}, 0x14) r7 = socket(0x10, 0x803, 0x0) r8 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x42, 0xc8, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x706}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_usb_connect$uac3(0x3, 0xea, &(0x7f0000000700)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0xe41, 0x4248, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd8, 0x3, 0x1, 0x10, 0x30, 0x4f, {0x8, 0xb, 0x2, 0x2, 0x1, 0x22, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x30, 0x5}, [@mixer_unit={0x7, 0x24, 0x5, 0x2, 0xb, "75ef"}, @source_unit={0xc, 0x24, 0xb, 0x17, 0x1, 0x9, 0x6, 0x5}, @mixer_unit={0x6, 0x24, 0x5, 0x6, 0x1, "f9"}, @power_domain={0xd, 0x24, 0x10, 0x0, 0x8, 0x6b67, 0x3, "c1dbe124"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xff, 0x5, 0x400, 0x5, 0xb3, 0xff, 0x7ff, 0x4}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x8}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x3, 0x1, 0x0, 0x3, "1c07"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x7c, 0x3b, {0xa, 0x25, 0x25, 0x8000, 0x2, 0xe816}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0xd6}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x18, 0x3, 0x2, 0x3, "ac"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x41, 0x4, 0xd, 0x4, "41e883", "6395ec"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x9, 0x4, {0xa, 0x25, 0x25, 0xfffffff8, 0x1c, 0x7}}}}}}}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x110, 0xc0, 0x7f, 0x4, 0x20, 0xf7}, 0xdc, &(0x7f0000000840)={0x5, 0xf, 0xdc, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x21, 0x5, 0x5, 0x0, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x49, 0x6, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x5d, 0x9, 0x4d}, @ptm_cap={0x3}, @generic={0xaa, 0x10, 0x2, "8d2784ca96f5204ee2a22d56e39e90dfd5f520917970a944fffdaf159c9c78596540edbd522966ed1f67f143116aa6953b99062c2f46faf8e6f16d77f7d4753824dbfffec712bde29348190c80ea741e53e0dc835eb3e15f285fc7fea2397e70db5d8a46629f49e5c19eb3fcef12ace9208fed9e725822c100e7902cc11bb82ca6a8c7bf538a257e5cdefdf023933736f6cbad1ce81688f241bab42f2676e0ab316cb59124e344"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4d, 0xbf, 0x8, 0x3, 0x1}]}, 0x7, [{0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x422}}, {0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="3003cc608f9056ba915edf85a644bb4a86e757bf6f3c2d459b0a7242d92257e2884d06008858efe880b902ba75463b75"]}, {0x56, &(0x7f00000009c0)=@string={0x56, 0x3, "4bd9b9046a4018e31a0d2e747dd890c1f3dbb70adeb0dcb08c191c055c2f0f57d14f23437ddb8657d22f3edd5026090a38deb9b6dfabc4308ddc524fed62998c4eeeff3504b7f588a1dfbc95d30baff465bf00f3"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x1403}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x140c}}, {0x76, &(0x7f0000000ac0)=@string={0x76, 0x3, "00842d6500993d106dc64b4ff78483cc0304292ed1e305044deec94d589129f9bb91329fdd991b9ad6ef046c2764eaa550a10b1c27fb4ea8fe9a778098aa9e329d72011ed580a64d39028d5085ab41a0722bc83a48ebaf255f5195176dd87b3a63b2bca99796ce97f2663593dbcd6b29e8208221"}}, {0x5d, &(0x7f0000000b40)=@string={0x5d, 0x3, "9ba2a71dcd541809ee0e4675cee7a766e37cbf1467af945989727c1aada8f4b31787c51ff90b04b8d010f63073ceda3bbc323f085bcae54ab65e84e5f5409d7eefc813c98483bb5d96a72446e73deea7caa72f46654e1054875a49"}}]}) r9 = openat(r0, &(0x7f0000000340)='unbind\x00', 0x1, 0x189) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611008000000000063080eff000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x3}, 0x10}, 0x94) write(r9, &(0x7f0000000380)='s', 0x1) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c40)={0x0}) r13 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x30002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r11, 0x40182103, &(0x7f0000000400)={r12, 0x1, r13, 0x100, 0x80000}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.115' (ED25519) to the list of known hosts. [ 21.519085][ T28] audit: type=1400 audit(1790325838.835:64): avc: denied { mounton } for pid=280 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.523053][ T280] cgroup: Unknown subsys name 'net' [ 21.541914][ T28] audit: type=1400 audit(1790325838.835:65): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.569209][ T28] audit: type=1400 audit(1790325838.865:66): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.569681][ T280] cgroup: Unknown subsys name 'devices' [ 21.743190][ T280] cgroup: Unknown subsys name 'hugetlb' [ 21.748852][ T280] cgroup: Unknown subsys name 'rlimit' [ 21.854381][ T28] audit: type=1400 audit(1790325839.175:67): avc: denied { setattr } for pid=280 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.877622][ T28] audit: type=1400 audit(1790325839.175:68): avc: denied { mounton } for pid=280 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.902403][ T28] audit: type=1400 audit(1790325839.175:69): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.930794][ T282] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.939995][ T28] audit: type=1400 audit(1790325839.255:70): avc: denied { relabelto } for pid=282 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.961728][ T280] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.965637][ T28] audit: type=1400 audit(1790325839.255:71): avc: denied { write } for pid=282 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.999784][ T28] audit: type=1400 audit(1790325839.255:72): avc: denied { read } for pid=280 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.025446][ T28] audit: type=1400 audit(1790325839.255:73): avc: denied { open } for pid=280 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.907707][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.914887][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.922441][ T288] device bridge_slave_0 entered promiscuous mode [ 22.930583][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.937746][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.945221][ T288] device bridge_slave_1 entered promiscuous mode [ 22.994438][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.001601][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.009010][ T291] device bridge_slave_0 entered promiscuous mode [ 23.016351][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.023489][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.031087][ T291] device bridge_slave_1 entered promiscuous mode [ 23.102557][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.109685][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.117276][ T290] device bridge_slave_0 entered promiscuous mode [ 23.127327][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.134447][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.142067][ T290] device bridge_slave_1 entered promiscuous mode [ 23.179229][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.186341][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.193869][ T292] device bridge_slave_0 entered promiscuous mode [ 23.214754][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.221906][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.229541][ T292] device bridge_slave_1 entered promiscuous mode [ 23.242491][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.249661][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.257328][ T289] device bridge_slave_0 entered promiscuous mode [ 23.264554][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.271699][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.279082][ T289] device bridge_slave_1 entered promiscuous mode [ 23.453313][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.460400][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.467750][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.474857][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.492950][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.500035][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.507383][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.514449][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.525625][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.532748][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.540052][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.547149][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.563519][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.570628][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.577951][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.585028][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.595886][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.602993][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.610291][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.617363][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.660125][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.667638][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.675499][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.683337][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.690581][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.698060][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.705354][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.712848][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.720097][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.727458][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.735477][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.743035][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.765294][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.773208][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.781685][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.788717][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.811966][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.819496][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.827487][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.835853][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.842935][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.850426][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.859146][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.866335][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.873749][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.882058][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.889086][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.896542][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.904760][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.911828][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.924178][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.932402][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.954826][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.962533][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.969986][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.978627][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.987166][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.994253][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.001881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.010293][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.018526][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.025708][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.033373][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.041872][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.050030][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.057208][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.064743][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.073098][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.081293][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.089407][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.097573][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.106011][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.138310][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.147308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.155883][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.164126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.172380][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.180319][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.188934][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.197258][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.204316][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.212038][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.220085][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.228307][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.236765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.245127][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.252206][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.259807][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.268132][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.286118][ T292] device veth0_vlan entered promiscuous mode [ 24.292998][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.301600][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.309934][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.318612][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.327209][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.335546][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.343153][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.366850][ T288] device veth0_vlan entered promiscuous mode [ 24.374253][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.382529][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.390486][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.398911][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.407167][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.415747][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.424481][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.432527][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.440670][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.448953][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.457329][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.464927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.472539][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.480005][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.488618][ T291] device veth0_vlan entered promiscuous mode [ 24.503005][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.511559][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.522128][ T290] device veth0_vlan entered promiscuous mode [ 24.531986][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.539521][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.547289][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.555725][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.570855][ T288] device veth1_macvtap entered promiscuous mode [ 24.579341][ T292] device veth1_macvtap entered promiscuous mode [ 24.587772][ T290] device veth1_macvtap entered promiscuous mode [ 24.594854][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.603695][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.614920][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.623424][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.633531][ T291] device veth1_macvtap entered promiscuous mode [ 24.644487][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.653076][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.668570][ T289] device veth0_vlan entered promiscuous mode [ 24.679988][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.688767][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.697498][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.705888][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.714977][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.723169][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.731458][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.739688][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.748362][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.755982][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.774322][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.782735][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.791230][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.799512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.808155][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.816882][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.825379][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.833957][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.854052][ T289] device veth1_macvtap entered promiscuous mode [ 24.865847][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 24.874510][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.933944][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.951318][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.964981][ T312] process 'syz.4.5' launched '/dev/fd/8' with NULL argv: empty string added [ 25.003272][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.024712][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.069014][ T327] loop0: detected capacity change from 0 to 1024 [ 25.083606][ T327] ======================================================= [ 25.083606][ T327] WARNING: The mand mount option has been deprecated and [ 25.083606][ T327] and is ignored by this kernel. Remove the mand [ 25.083606][ T327] option from the mount to silence this warning. [ 25.083606][ T327] ======================================================= [ 25.139442][ T334] overlayfs: missing 'lowerdir' [ 25.145710][ T327] EXT4-fs: Ignoring removed bh option [ 25.223245][ T327] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 25.269683][ T327] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.304639][ T327] EXT4-fs (loop0): shut down requested (0) [ 25.532269][ T327] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 25.635212][ T289] EXT4-fs (loop0): unmounting filesystem. [ 25.685525][ T344] loop0: detected capacity change from 0 to 1024 [ 25.692416][ T344] EXT4-fs: Ignoring removed bh option [ 25.732077][ T344] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 25.753629][ T344] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 25.807246][ T289] EXT4-fs (loop0): unmounting filesystem. [ 25.970611][ T358] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.044625][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 26.046558][ T341] syz.2.8 (341) used greatest stack depth: 20664 bytes left [ 26.081322][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 26.092635][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 26.111472][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 26.163930][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 26.434978][ T308] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.445250][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 26.471756][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 26.483778][ T368] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET) [ 26.490391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 26.501487][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 26.511843][ T19] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.521796][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 26.521811][ T28] audit: type=1400 audit(1790325843.845:138): avc: denied { name_bind } for pid=367 comm="syz.1.16" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 26.656470][ T308] usb 1-1: Using ep0 maxpacket: 16 [ 26.665642][ T28] audit: type=1400 audit(1790325843.975:139): avc: denied { write } for pid=369 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 26.780838][ T28] audit: type=1400 audit(1790325843.975:140): avc: denied { mount } for pid=369 comm="syz.4.17" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 26.991626][ T28] audit: type=1400 audit(1790325843.975:141): avc: denied { search } for pid=369 comm="syz.4.17" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 27.014579][ T28] audit: type=1400 audit(1790325843.975:142): avc: denied { read } for pid=369 comm="syz.4.17" name="trace" dev="tracefs" ino=13574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 27.015596][ T308] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 27.043354][ T28] audit: type=1400 audit(1790325843.975:143): avc: denied { open } for pid=369 comm="syz.4.17" path="/3/dir0/per_cpu/cpu0/trace" dev="tracefs" ino=13574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 27.079547][ T308] usb 1-1: config 0 has no interface number 0 [ 27.087005][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.102335][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.112226][ T308] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 27.130843][ T308] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 27.141869][ T19] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 27.160102][ T19] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 27.212356][ T19] usb 4-1: Manufacturer: syz [ 27.218584][ T308] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 27.228467][ T19] usb 4-1: config 0 descriptor?? [ 27.233538][ T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.242181][ T308] usb 1-1: Product: syz [ 27.246536][ T308] usb 1-1: Manufacturer: syz [ 27.254035][ T308] usb 1-1: SerialNumber: syz [ 27.606272][ T308] usb 1-1: config 0 descriptor?? [ 27.614648][ T349] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 27.622220][ T349] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 27.648294][ T28] audit: type=1400 audit(1790325844.755:144): avc: denied { name_bind } for pid=374 comm="syz.2.18" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 27.673774][ T28] audit: type=1400 audit(1790325844.955:145): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 27.821776][ T28] audit: type=1400 audit(1790325845.105:146): avc: denied { read } for pid=383 comm="syz.1.20" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 27.861043][ T28] audit: type=1400 audit(1790325845.105:147): avc: denied { open } for pid=383 comm="syz.1.20" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 27.944678][ T386] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 28.046382][ T388] loop1: detected capacity change from 0 to 512 [ 28.061574][ T388] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.082111][ T349] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 28.089711][ T349] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 28.092426][ T388] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 28.128047][ T388] EXT4-fs (loop1): 1 truncate cleaned up [ 28.139917][ T388] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 28.646233][ T394] syz.2.22 (394) used greatest stack depth: 18152 bytes left [ 28.780228][ T397] loop4: detected capacity change from 0 to 256 [ 28.886822][ T397] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 28.980954][ T60] syzkaller0: tun_net_xmit 76 [ 28.985935][ T60] syzkaller0: tun_net_xmit 48 [ 28.996853][ T308] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 29.008567][ T400] syzkaller0: create flow: hash 3197122835 index 1 [ 29.017131][ T60] syzkaller0: tun_net_xmit 76 [ 29.023401][ T399] syzkaller0: delete flow: hash 3197122835 index 1 [ 29.208620][ T19] uclogic 0003:256C:006D.0001: v1 frame probing failed: -71 [ 29.220797][ T19] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 29.230654][ T19] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 29.250912][ T19] usb 4-1: USB disconnect, device number 2 [ 29.404585][ T288] EXT4-fs (loop1): unmounting filesystem. [ 29.461149][ T362] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.511781][ T412] loop4: detected capacity change from 0 to 512 [ 29.527902][ T412] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 29.536154][ T412] System zones: 1-12 [ 29.540953][ T412] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.29: missing EA_INODE flag [ 29.552843][ T412] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.29: error while reading EA inode 12 err=-117 [ 29.566542][ T412] EXT4-fs (loop4): 1 orphan inode deleted [ 29.572515][ T412] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 29.709322][ T415] loop1: detected capacity change from 0 to 16 [ 29.753810][ T415] erofs: (device loop1): mounted with root inode @ nid 36. [ 29.765485][ T308] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 29.781102][ T362] usb 3-1: Using ep0 maxpacket: 32 [ 29.787446][ T308] asix: probe of 1-1:0.34 failed with error -71 [ 29.794661][ T362] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 30.896646][ T410] sched: RT throttling activated [ 30.929052][ T362] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 30.941007][ T308] usb 1-1: USB disconnect, device number 2 [ 31.047966][ T420] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 31.056027][ T420] Zero length message leads to an empty skb [ 31.062429][ T362] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 31.070638][ T362] usb 3-1: Product: syz [ 31.076617][ T362] usb 3-1: Manufacturer: syz [ 31.076743][ T292] EXT4-fs (loop4): unmounting filesystem. [ 31.081718][ T362] usb 3-1: SerialNumber: syz [ 31.370912][ T426] loop0: detected capacity change from 0 to 1024 [ 31.378070][ T426] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 31.388777][ T426] EXT4-fs (loop0): barriers disabled [ 31.394222][ T426] JBD2: no valid journal superblock found [ 31.400098][ T426] EXT4-fs (loop0): error loading journal [ 31.418384][ T362] usb 3-1: config 0 descriptor?? [ 31.423874][ T406] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 31.432484][ T362] hub 3-1:0.0: bad descriptor, ignoring hub [ 31.443161][ T362] hub: probe of 3-1:0.0 failed with error -5 [ 31.681089][ T310] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 31.835385][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 31.835418][ T28] audit: type=1400 audit(1790325849.155:161): avc: denied { create } for pid=437 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.838760][ T438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'. [ 31.844142][ T28] audit: type=1400 audit(1790325849.155:162): avc: denied { write } for pid=437 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.892639][ T28] audit: type=1400 audit(1790325849.215:163): avc: denied { read } for pid=437 comm="syz.3.37" dev="nsfs" ino=4026532547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.895620][ T310] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 31.914837][ T28] audit: type=1400 audit(1790325849.215:164): avc: denied { open } for pid=437 comm="syz.3.37" path="net:[4026532547]" dev="nsfs" ino=4026532547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.944882][ T28] audit: type=1400 audit(1790325849.215:165): avc: denied { create } for pid=437 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.964940][ T28] audit: type=1400 audit(1790325849.275:166): avc: denied { setopt } for pid=437 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.985825][ T310] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.005773][ T28] audit: type=1400 audit(1790325849.325:167): avc: denied { map } for pid=439 comm="syz.3.38" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16813 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.012202][ T310] usb 2-1: config 0 has no interface number 0 [ 32.030084][ T28] audit: type=1400 audit(1790325849.325:168): avc: denied { read write } for pid=439 comm="syz.3.38" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16813 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.061497][ T28] audit: type=1400 audit(1790325849.325:169): avc: denied { mount } for pid=439 comm="syz.3.38" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 32.072717][ T310] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 32.096259][ T28] audit: type=1400 audit(1790325849.365:170): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 32.098497][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.124647][ T310] usb 2-1: Product: syz [ 32.128925][ T310] usb 2-1: Manufacturer: syz [ 32.133889][ T310] usb 2-1: SerialNumber: syz [ 32.139638][ T310] usb 2-1: config 0 descriptor?? [ 32.150345][ T310] usb 2-1: Found UVC 0.00 device syz (046c:14e8) [ 32.161909][ T310] usb 2-1: No valid video chain found. [ 32.201050][ T448] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 32.209940][ T448] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 32.225810][ T290] ------------[ cut here ]------------ [ 32.231426][ T290] WARNING: CPU: 0 PID: 290 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 32.239375][ T290] Modules linked in: [ 32.243343][ T290] CPU: 0 PID: 290 Comm: syz-executor Not tainted syzkaller #0 [ 32.250830][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.261027][ T290] RIP: 0010:drop_nlink+0xc5/0x110 [ 32.266095][ T290] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 aa f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 1b 1c ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 32.285786][ T290] RSP: 0018:ffffc90000e97c60 EFLAGS: 00010293 [ 32.291939][ T290] RAX: ffffffff81c64e05 RBX: ffff88813a2d2a18 RCX: ffff888123586540 [ 32.299953][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.308114][ T290] RBP: ffffc90000e97c88 R08: 0000000000000003 R09: 0000000000000004 [ 32.316143][ T290] R10: dffffc0000000000 R11: fffff520001d2f7c R12: dffffc0000000000 [ 32.324184][ T290] R13: 1ffff1102745a54c R14: ffff88813a2d2a60 R15: 0000000000000000 [ 32.332207][ T290] FS: 0000555587fbf500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.341399][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.348021][ T290] CR2: 0000555587fe2948 CR3: 0000000130615000 CR4: 00000000003506b0 [ 32.356122][ T290] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.364212][ T290] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.372284][ T290] Call Trace: [ 32.375599][ T290] [ 32.378566][ T290] shmem_rmdir+0x5b/0x90 [ 32.382909][ T290] vfs_rmdir+0x381/0x4f0 [ 32.387195][ T290] incfs_kill_sb+0xfe/0x210 [ 32.391785][ T290] deactivate_locked_super+0xb5/0x120 [ 32.397204][ T290] deactivate_super+0xaf/0xe0 [ 32.401975][ T290] cleanup_mnt+0x45e/0x4e0 [ 32.406462][ T290] __cleanup_mnt+0x19/0x20 [ 32.410890][ T290] task_work_run+0x1e1/0x250 [ 32.415538][ T290] ? __cfi_task_work_run+0x10/0x10 [ 32.420691][ T290] ? __x64_sys_umount+0x12d/0x170 [ 32.421437][ T310] usb 3-1: USB disconnect, device number 2 [ 32.425786][ T290] ? __cfi___x64_sys_umount+0x10/0x10 [ 32.436986][ T290] exit_to_user_mode_loop+0x9b/0xb0 [ 32.442471][ T290] exit_to_user_mode_prepare+0x87/0xd0 [ 32.447966][ T290] syscall_exit_to_user_mode+0x1a/0x30 [ 32.453481][ T290] do_syscall_64+0x58/0xa0 [ 32.457938][ T290] ? clear_bhb_loop+0x30/0x80 [ 32.462713][ T290] ? clear_bhb_loop+0x30/0x80 [ 32.467428][ T290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.473374][ T290] RIP: 0033:0x7f467879f397 [ 32.477826][ T290] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 32.497571][ T290] RSP: 002b:00007ffee6659908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 32.506091][ T290] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f467879f397 [ 32.514133][ T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee66599c0 [ 32.522161][ T290] RBP: 00007ffee66599c0 R08: 00007ffee665a9c0 R09: 00000000ffffffff [ 32.530168][ T290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee665aa50 [ 32.538257][ T290] R13: 00007f46788344bb R14: 0000000000007dbd R15: 00007ffee665aa90 [ 32.546302][ T290] [ 32.549343][ T290] ---[ end trace 0000000000000000 ]--- [ 32.555444][ T290] ================================================================== [ 32.563565][ T290] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 32.570282][ T290] Write of size 4 at addr 0000000000000170 by task syz-executor/290 [ 32.578289][ T290] [ 32.580656][ T290] CPU: 0 PID: 290 Comm: syz-executor Tainted: G W syzkaller #0 [ 32.589621][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.600058][ T290] Call Trace: [ 32.603374][ T290] [ 32.606367][ T290] __dump_stack+0x21/0x24 [ 32.610740][ T290] dump_stack_lvl+0x110/0x170 [ 32.615470][ T290] ? __cfi_dump_stack_lvl+0x8/0x8 [ 32.620559][ T290] ? __cfi_call_rcu+0x10/0x10 [ 32.625280][ T290] ? ihold+0x20/0x60 [ 32.629222][ T290] ? ihold+0x20/0x60 [ 32.633156][ T290] print_report+0x3d/0x60 [ 32.637541][ T290] kasan_report+0x122/0x150 [ 32.642086][ T290] ? ihold+0x20/0x60 [ 32.646024][ T290] kasan_check_range+0x249/0x2a0 [ 32.651006][ T290] __kasan_check_write+0x14/0x20 [ 32.655983][ T290] ihold+0x20/0x60 [ 32.659743][ T290] vfs_rmdir+0x24c/0x4f0 [ 32.664033][ T290] incfs_kill_sb+0xfe/0x210 [ 32.668578][ T290] deactivate_locked_super+0xb5/0x120 [ 32.674000][ T290] deactivate_super+0xaf/0xe0 [ 32.678730][ T290] cleanup_mnt+0x45e/0x4e0 [ 32.683188][ T290] __cleanup_mnt+0x19/0x20 [ 32.687642][ T290] task_work_run+0x1e1/0x250 [ 32.692312][ T290] ? __cfi_task_work_run+0x10/0x10 [ 32.697458][ T290] ? __x64_sys_umount+0x12d/0x170 [ 32.702534][ T290] ? __cfi___x64_sys_umount+0x10/0x10 [ 32.707926][ T290] exit_to_user_mode_loop+0x9b/0xb0 [ 32.713161][ T290] exit_to_user_mode_prepare+0x87/0xd0 [ 32.715875][ T450] loop1: detected capacity change from 0 to 512 [ 32.718661][ T290] syscall_exit_to_user_mode+0x1a/0x30 [ 32.730405][ T290] do_syscall_64+0x58/0xa0 [ 32.734671][ T450] EXT4-fs: Ignoring removed bh option [ 32.734885][ T290] ? clear_bhb_loop+0x30/0x80 [ 32.744961][ T290] ? clear_bhb_loop+0x30/0x80 [ 32.749675][ T290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.755591][ T290] RIP: 0033:0x7f467879f397 [ 32.760027][ T290] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 32.779657][ T290] RSP: 002b:00007ffee6659908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 32.788097][ T290] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f467879f397 [ 32.796093][ T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee66599c0 [ 32.804084][ T290] RBP: 00007ffee66599c0 R08: 00007ffee665a9c0 R09: 00000000ffffffff [ 32.812072][ T290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee665aa50 [ 32.820069][ T290] R13: 00007f46788344bb R14: 0000000000007dbd R15: 00007ffee665aa90 [ 32.828067][ T290] [ 32.831100][ T290] ================================================================== [ 32.839611][ T290] Disabling lock debugging due to kernel taint [ 32.843408][ T450] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.846262][ T290] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 32.864907][ T290] #PF: supervisor write access in kernel mode [ 32.871031][ T290] #PF: error_code(0x0002) - not-present page [ 32.877031][ T290] PGD 133433067 P4D 133433067 PUD 0 [ 32.877397][ T450] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 32.882373][ T290] Oops: 0002 [#1] PREEMPT SMP KASAN [ 32.882394][ T290] CPU: 1 PID: 290 Comm: syz-executor Tainted: G B W syzkaller #0 [ 32.882415][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.882426][ T290] RIP: 0010:ihold+0x26/0x60 [ 32.891804][ T450] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.896485][ T290] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 81 13 ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 a1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 71 [ 32.896505][ T290] RSP: 0018:ffffc90000e97ca0 EFLAGS: 00010246 [ 32.956094][ T290] RAX: ffff888123586500 RBX: 0000000000000000 RCX: ffff888123586540 [ 32.964102][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.972113][ T290] RBP: ffffc90000e97cb0 R08: ffffffff87b767e7 R09: 1ffffffff0f6ecfc [ 32.980157][ T290] R10: dffffc0000000000 R11: fffffbfff0f6ecfd R12: ffff88813a2d2a24 [ 32.988172][ T290] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 32.991220][ T308] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 32.996216][ T290] FS: 0000555587fbf500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 32.996239][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.019257][ T290] CR2: 0000000000000170 CR3: 0000000130615000 CR4: 00000000003506a0 [ 33.027257][ T290] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.035273][ T290] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.043263][ T290] Call Trace: [ 33.046556][ T290] [ 33.049500][ T290] vfs_rmdir+0x24c/0x4f0 [ 33.053772][ T290] incfs_kill_sb+0xfe/0x210 [ 33.058294][ T290] deactivate_locked_super+0xb5/0x120 [ 33.063950][ T290] deactivate_super+0xaf/0xe0 [ 33.068653][ T290] cleanup_mnt+0x45e/0x4e0 [ 33.073084][ T290] __cleanup_mnt+0x19/0x20 [ 33.077525][ T290] task_work_run+0x1e1/0x250 [ 33.082177][ T290] ? __cfi_task_work_run+0x10/0x10 [ 33.087315][ T290] ? __x64_sys_umount+0x12d/0x170 [ 33.092387][ T290] ? __cfi___x64_sys_umount+0x10/0x10 [ 33.097785][ T290] exit_to_user_mode_loop+0x9b/0xb0 [ 33.103007][ T290] exit_to_user_mode_prepare+0x87/0xd0 [ 33.108573][ T290] syscall_exit_to_user_mode+0x1a/0x30 [ 33.114051][ T290] do_syscall_64+0x58/0xa0 [ 33.118483][ T290] ? clear_bhb_loop+0x30/0x80 [ 33.123178][ T290] ? clear_bhb_loop+0x30/0x80 [ 33.127878][ T290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.133784][ T290] RIP: 0033:0x7f467879f397 [ 33.138211][ T290] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 33.157830][ T290] RSP: 002b:00007ffee6659908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 33.166254][ T290] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f467879f397 [ 33.174253][ T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee66599c0 [ 33.182235][ T290] RBP: 00007ffee66599c0 R08: 00007ffee665a9c0 R09: 00000000ffffffff [ 33.190244][ T290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee665aa50 [ 33.198233][ T290] R13: 00007f46788344bb R14: 0000000000007dbd R15: 00007ffee665aa90 [ 33.206225][ T290] [ 33.209259][ T290] Modules linked in: [ 33.213193][ T290] CR2: 0000000000000170 [ 33.217374][ T290] ---[ end trace 0000000000000000 ]--- [ 33.222850][ T290] RIP: 0010:ihold+0x26/0x60 [ 33.227379][ T290] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 81 13 ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 a1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 71 [ 33.247006][ T290] RSP: 0018:ffffc90000e97ca0 EFLAGS: 00010246 [ 33.253105][ T290] RAX: ffff888123586500 RBX: 0000000000000000 RCX: ffff888123586540 [ 33.261092][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.269076][ T290] RBP: ffffc90000e97cb0 R08: ffffffff87b767e7 R09: 1ffffffff0f6ecfc [ 33.277092][ T290] R10: dffffc0000000000 R11: fffffbfff0f6ecfd R12: ffff88813a2d2a24 [ 33.285082][ T290] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 33.293072][ T290] FS: 0000555587fbf500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 33.302049][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.308670][ T290] CR2: 0000000000000170 CR3: 0000000130615000 CR4: 00000000003506a0 [ 33.316671][ T290] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.324663][ T290] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.332670][ T290] Kernel panic - not syncing: Fatal exception [ 33.339355][ T290] Kernel Offset: disabled [ 33.343692][ T290] Rebooting in 86400 seconds..