last executing test programs: 5.633247722s ago: executing program 2 (id=357): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.407646038s ago: executing program 4 (id=360): socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f00000001c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x5) userfaultfd(0x80001) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d82000000000000002240f7ffffff00"}) r2 = syz_open_pts(r1, 0x400) dup3(r2, r1, 0x0) r3 = eventfd2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10044, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r3, @ANYBLOB=',wfd', @ANYRESDEC=r2]) 5.252315772s ago: executing program 4 (id=361): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="401e7f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.247026602s ago: executing program 3 (id=362): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11298}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x3193}]}, 0x40}}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mlockall(0x7) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000400)) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r6, 0xffffffffffffffff, 0x8, 0x0, @void}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532322c70726976706f72742c00bb0fcf59af7beacda6e232ba000063a5c9a2d79959af66601e7cb64191ad5834669cb2c1fe9d217b00"]) 4.51379654s ago: executing program 2 (id=364): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000083c0)="c91443d5daaf04b192358b692f84d66c60492a57cffd585b0068ccde45d94ded1e86d3670791c21f8e0b2153d10d45d37b72ee2fa06ad61b0a9354045a8dae1bd1cfb49f3c11fe54c17eee632d95574681e6c472eb8a1beaf3a4b88561847a0a0f05fa4a26639d7e74a0c1c2790d6a59d4073b1c55539b7c21b8550efbd5f835c56642f4be57d170e36a6bf3a995f418554f0cab342769089d0777b28daad5c0c4ba56a0bd6c0515d9bf488fdcf49a9a7bbfcf5ad78733f8119f2568daefbd0985a9916c0d048e38765cc7bb1c82e0f3c81d98e7179ec782331bc3cfb2caf58a99668420795e6a00ef41dcf5283bbb61ebaedbb7a675be4fb2d11c31f9b76936d1112c68978c73f42e145b094490d748c1456a14c23fe25e2fdaeaaa7dc0d35dcc9bbfe86361f99f4d04090d1e66aa9714ee9f4608ad66c60f500bf06a1b5b90fbe2f6c42c4b5f337393b0bb201473712c48f898c514fff84c46b50d3aaf44578f41d312bb5a73526db7818617dcb938ebdb17f92423ca2cf7ea2c611483e0baff012fd97e28558317049e4fe2d27f72796d7260b33900cd61f984c087d3c54f6aa11e389a49069ef99ca86c279598b42dd3485f09fc7e119f707438498316cf2f2bc8a293eeb1a35635989327d4f6c9ba6b2d5b9b8ee89a1e13d538b954479663223bb704af6a63ee497734410ea43bfdb0ad3708cb7155df2432c44e8468a7b77b807d345c9b94fedadfdeba12f4b6d11d16fd6dd5fff6cf896d0f40785ffca538dae61d8a5ffee814e96628cd945553e788b8d915762ca3b40124149b3c186ddd5f7af5b75f4725444f2f7e54b999c93e8c5fd4d4fbd7a3b3d7e85df3053c866f1dd247cac6912ed8b0e491101ca5a0b999a21014b573ba3996c76065c9d8bebf431f8be6435837193efd6e5a565b2ced30d04355435f166b09f9dc91ee50412d0daf72b28ec14c505cb155de1a46362f140ac2b633fa42b12109f0a29fa8ba271d6fc2a77af3b16032ee46b3ddead76a481ef52f6bd25cab4494681f0abc2ffc60ebb36cffcc058a067fcdae6c9de670cd6fde6eb8086a65fc05df17cf69f654516ba30ee04a1427b40fb8e81fe46787d557046854ad342442bacd781c7a6063892402fb0d765397448991206b28193e20f285e50d9219ace39b311e572ebcd80702164315656e7fa92960d0fd28c6489406f0b3061218417548e7e78b8aaaf5a623eb47c92aebfebd1c78343bc781f184e0122a28f56b18832da5646ee8405fa2fc040ab30377c447b42d0bfdddc65e064ccdf1ad52a94309a819caeb523e22b25d1ba288b7f2c726290d50021b9839c5d3c471aadb08025d97619935a9880942cf653508a0b2c43838e5aada8b84d22042928dd372dedec14672266ddceb0744c7464ab282d7fbfb2767e891832aa25d1425b33a60c6894a8d5292fdd73e05a868b8e50cb1a412d1249a77ccfc3d3eb35a67221f80bb8960fd93ceb74e102f2a6946b50caae3ccb86a8ec441d6e58dbf24b3eb962c8a28cffeded9b7cf4a54f524a1ef49fbdc91e125aad65a54df6a0f10cd8799f48aa144f7aec977b4a347c5c9628c4805ecf71f305adc9e5ca7c1f313f9ea3e99b3590efd94d831e1ff5cd7a26b72281109547facfa3abac2cfc9177b117a3757b778e95b5069236abb25d8fb032c38d296f87388fdd364b491cb828732177a2c6bcaaf831d138c898bb60c0d9d8a02d8b4b8e7efa87d3ed66221ac52e31ba9c2da488b999eaf82994bc8f1ac29d5e60b8b1cdc30a1c9829aca1cd7881c8aaac9ede0f5d8b85538d2b13751cfc6b37587b0223b9f6b6dd9340753106b1eecdf4f63c51cc2c63a1f86235bad7602e115d1e0ed78a6b170b88eb9584d2098b187695627612189998171d245797391b2b79bb690a79dac4b769e3f18c4d49359f7b460d997c03c793f51a830d5b21faed2ae1c3eb0fce0cdadde3c789ec931b6397c2a2fb2eda87756fec031e5f50f07619130f8e39f1e00004a1f204e5d87780542bdedf0b1ca5168779ad7cb2ebf27e0a5d760a2492b4d92eab24f2bc9af0a3e51140c415a6f885d0faa38ee6dcffc41652b28e628b859db0e7a0f961e37c5806df137e68c5316667f36051eb05c971e208721fdb8a49b8c49f85114be9dd7288f4e95c5f6fb8c1bc1bc7d79f32ba5419d90130a0328ba70d10c770a1540718f7d890dba9c39a116623d492275a1268c91149bfe026ca1c6a458449d4004d653f4b0a234eacd1f4da495fd1f936b4b335f64514fc8091b1dab132f599e26cb127e25011efa30a922b5a3e8807db9a00a9cc732fd323708767c905c8a3cd53e2e8d377d3b43cb971cbd0e66e2e47f3d601d49e29941b2ea4d3c8b7f5698e1a633ebba00f6c178d6d04b9f1544f04cd173e2d49f129a8725a647e1a9e798b5581c6a461b585012a302353178188e55f8102a49343c9c370ee505d09e4be8580d95f5bf39267b00e93adb6b52b2029160d78ac271e4e0c70ed835484e80302b93efd599707d4d22c806476fd04d18ebd6a9bf88c11dc2c96041ac8c3e04ac0aa5d2ac6740972717b543fb871884a7a0434a433571fd621977777984ea9c06914be966da9f349cb1ef3a116c49f0c716eae1df118cd3d5b350b917c06d853c1e1514213f5a29071e42eecee264ff20529c53c3a060a18a680ade2a08b4549e6998f06e61e4f4c36d578e9ad83dd38d1eeb100e7ab023edb38426d5165b867b9507a6b644aa0322da335b208105f2e74a9841ea7c629ea20cef740f6364e9d84a4485d3bb6b5f4e14c7764f78b65c0647870638a8f618381ec0823faed0424a448f753a59fb22e5138e0ca537b6935befb99fc6eea2d9457c01345afbbaaf3a7a96a39478b222af322f86730d137c3f570b38c7363bb9a89bb4b3b8979b9afd232927becbc91c8d4a276febe47bacd4a84c0bfdd54e685080f2c3be0b1e37bc6d21b13b7b1bfd507880f6ad7fa39bf99eaf6b7088d758d9383e38326381088e9e3e792f75d682cf61cf1176953960b0e160b2a535495d52c28f14fa45ed7a3f91e219dcd05afdda2b7e6c1b742b29f6c5f62a040a5fe6606433fce7de757ed76372dfc0b1af9af10c0128bcd335eff1c6c9660b0893730c3ef8de6e50dba419b35d1766eb9a5dce4c2fa518f8e3e2a27855e04d06b89e97578a4406ac03f3314575143db5e43ae3d03a7e90a590b4c188a5acbe1cf23cd4cf60ca98248d4e740122a55ac6e463511b4c4cd47040aafc0bed7878348a4caad4d977671cf4ac319773767ee28f8ccc4c9deae531b029eff5345470f20865549b2f2c4089306304e13e42ca37fbca6839bbcd2f10bd20c81d44ab73ad5ffcc55f51b53efb00d3c68d8d8505e005247ba23e86a803b199f36447fd01f192994b2fa27c9db59ae66b56b30c1ae5cd717407068a9b13ca941b82db254f4ecdbd1751a3f8f1061031bb41af5c04a33ffc98509f456830cf3c94c14451f04d84844e41c618e82958710d07daeba666329b914f2cc7c1d34ffbf6b50620b7c78c25c5d82a5aadcc4d824b3b68c34231fa7c0befe5241c447f90111c55848feed9d1ee67f61095ec2c0b4ac82f5cf169201516082a804c9d1775990d430d21bc65877041905caf385918f44191c134e493d960724b28f01e79fbf3b99eac1e75fbc8ab8dcfdd98b573fa6d7e6a6ead6b15ed78e2a8d564f61d8c52be8104306c104146696e16c9e9bff79a5fc1d92326cf0f2ff5e5c5c252773f2bd2c554bc409aaec03055f71d439daebc1d8b06c9ca0e1fe4729e8e6119616e8fb861b1e2694d1df267cbc496ba4a87013c3317a16b4c1e369748507794a20ad06aad20e4dbfc1834d789d2a8e9395ddad33a74c6c7cf54e61e533cae228909536eba8020f0c3845d2063270cae4d8e8dd8cfe3f112c46751444546ced9f6434741656dcda2185be13eebcc0392c256f384fc16353e89cbdeef8fb2e3cadc1ed2142f3b6485dc2d540fe799d027413128f624aaf8bc1933d3a0e6a954931bfc914921dec7ec822a31ebb652d4f312ab4068cedc6203b0de98e60c5f82296a3482132b288ba0a8eabdd8ac40faf145928e7563dbcb14d0625c92b542860993bb0388d8390dae727ae4086d4de1b7fea9d79f4844374bcd67fa5e1a3a28cd6d8da3f171fcf9d13062bb149fde18917c6650cdfa2be8de33b556ad34fad454db13a446e8a7c40167117e884d874c786768975df0b201ea0077ba735d31d65a832dc122d13c6559601b83899af1f14808f55f077ad465ed61378c63abff3ad742691168fe1e31bfd0dbb9f43d364ddf0bb185f69e69110c9eb1ab808354fdd2cf571838d5ec63bac3d70ca40878dc3c3cea26adffd5a197206d7c80d6a86c202338e72f17dc7185e1df0cfefa9475a2156738f90c6410c1698d1a160fd396548323c796ec5dca3cd59e468ff6a14caf34b4fdb16f1c92acb6bff2e859f9de1266dea0d1828598319b40a3edef657be02188fc94490c1da088d3ec2f315d6b5bb2f262764b67ba321379f4c93bb3ef9bc7db0c0e5f1e680ebfa84463e904d5351ecf25d1d22a98f81f7a1fc4c4fee3934b7672661f0bcd94109706644d0fdac4b7933b5db2acf39b98c0a8106a7a757408404a4c299a077379458e2118fb0a53b798adc1b85d3eb20b539e572741b9855e44a545809f897dde06730145b5caefe9db1c321783450d25d38834532c3e372fa92a53ac9cb4330eaaf65fe1b69a66459058e02d20c6641b7d8edfa8e356baaeb011b61208ef36ed33235144c86d6ce65da89d66da06291d4acc05e3136559ab77a7c4ad229c5307b48ed642d96c28cd06c82dedd4a16ed90bceda81292120438fd5c47b7b41b2646fe0899643f896ddb2d11e7311f8a0cbb9bfa38106507e06f35b3052ad6b6a11ac5f0129bedc59d04aee3737ebbf10f97c80f1a4e3f51ac8ac4488ad9e3f685a7c0dd4074b07774f4efe4b9f2cba400ef49f73b12fc7d96d8f3283a1eaf8c003931fc24a9248e201ac31bb49226c37d535592e00308d86ba0765a7eda13b72686101d352fb959598038b8dec44a0f18e5c8ec089912d325880390ce5186d4585df46e5662987c164f0ccfb8f12f6144f91349051d3ffa35ba597d2b5920e279ca8e139dfe2ba9923c0190fd444c8bf12a627618791a8781d6b54470777e6a5dac8cb505ae1e534b0c3af7db010dd602b1459964e1e15a812f3b4c8038e6bc1dc568ba482ee4944582abeeda1ed012391706ddb1e0ce60efd15acde8283d3612de5d0cf76185ad3a1ce89488e1cea4009573b55a2766d100ecefc5d53c99876cfec65daea82f55cf9687ec70e45cfdba9fe69fc3a822c29ff4be34857bdcd4313fb23d1d01d8a79cbd0057eeb5c1c0b39f75d5a753a2e10bd0ebb91dab1312bdf1a984332d566ab56dfd838d285995bec8726c5d1358fe10b0b6aaa99b9d9b08894c1dbd06356e5c693ddebb9d8b306062defb160db9d8f02ae3df59697866f5adeb34c8c5b27b63b09675030f344197b3bff097b996819dec9059aaf5ec1a6c585a86d16528091543a9e6bca4d850b7963fd1e7d981814dedb165c1a6444ec0a21743a4de8845b386ad4e1e9c9f2873f6a353487d9a8f8f56ae1d0f69124ee56b5c2b2a48c78cc6ba6b313b889adf0acfaebb4e2dc71054a4992366a2b6ff1f5972d7d2f0e9e3b17d7fbe931f43871819dc6e6040ba239ebce2cfa424ff7344b8a880040321909dcd16956594f5d99fdd39ea5d7209b906d2601572c56c72db899f986185194fe5aab45f27d9ac12aa8600b3c2728ef2e589a6886d711edf4d7f95b2e10d9adde3009560ad754f9e7a52808720a973dc475f8177fd5b199b69925f03a44a8bd9f3c3369861802ce5ca4b40cb47d19e2e1bda1b054f16b66ac7b7c0e5205112e011d6957f1df50505003544631ff4385d8128d46838338930aebc0496348045a7c05abd7a56e1079947d3eb1c50e4d8be001d03d8973f8f08f2f21a415174173ccb90f7ab615be5036947e164a434c059637bfeebb8b9f2e87b9774a4595c71122c9fac74347488b9a054e2e7b9c45b7b12fcca0fe789db614c70d4149d44e50fb64aabccee7447288a5b865a60c2640171f89afecda2cb18b7ecea214bd32f43d5ff66e90741697d085f3ee9bfd8662a3cc570999bb151090160d3bf5bf1d85e896d66276cba7ed97f341f595b13c02ac2a1352aec7a5980de2c8f9d890951108947b7602dcf2bdd2aef680667572b87aadf7c54338492eae763df73e89e3c438c196da83d98bc65233a242e08894f2390d8714f0abb801d9e5c42f169555284b6cf079005b373e9938db71a93ee5945c2a43a06e3df580d372318b3d203503c6e968206d7db8116cca2f2a1fae7f5b5195bea92914d66516bc3ceb2d9dc4de59d0d52ab80910aba7ebb696c7deaddcf0fedf56e2a88c3496bb79897c6420a0ef1b03ad89c76b24f67ffd41c9227d464565457bb25f0b32c83e676b0a3284f2acbed39c6875871c5e866a8284f12e383f87f12dd9bbe3078c68b3711eaa9bc17a7ac8413a8ef486922eddf43f01625671b7c3d0a4c6c2dc38217b4135c8cb46df7d936aabfd253e95e0816dd1f92b257e2f96d2a259a320756ba77d99b709711326f2ea42def974d60f817a1f6779121dd32a1cb194c7809e4c8fd052ba357323436491ec45a49fa601ed373aadd2199e4483704fb2f4edd7bf2815b552fb84d09094cab9700b5125887ee508570217c16799bc11d9e3658de8d9812f30dc8078bbecaf887a6527686b026eea70229df1e61759adf19c1b96673419decb382ae29bd685c5f32120b2d56d3e97c9ef00a2c0598c2181b8fa53172312590a9549ff55dffb9070b042c74654b2ae56371b2a6bac8e2808a40fd5d6d0af184c035101394e347521467e0ddb962e0d63614cf1461ac7b9d744084e9f6f26c88d515dbb1b7392b8e9384b81f186224d5c09e266682d8044d8afb1bd6483962b03ed6884759d2647b8f174a6695a437a1f1aac3e6a2f8ca658ee8a8ae44a77393cec61a9f335a1e859825e73df4125828fbde19d3695125992ddb2826ffbc6c7cfbfdbae19ba864c4170c79cce408e8b280a7632c855d802029ebac8627fbd6fec1c3bd858411c969ca035992f2ab909c423158dffd0dd5a407b3e0c2d9b180440996e09e15f17b4e42f365371d9dd58c4609455253c44c2ba73f592e360ab5fcccdb6e90ae0c60ada9325c4824242c0d866e7dfbefe091067d5c7ff0432814f733591eb0096659738b34cfa8c6c988ec628f34fe08f31dc0156dc39866412932d045168f4f3a48f24fb3b884be1384845d496c3009626f1c41b0189e95c9055d24eb5a0390596f6ccf50d3727e607875a3b2cf076a277e12ac07ddc59da78ee16e1952706ac6a1a9ade80b867d889789c935d196cc4da67aa35ba80ef2077ee4dd69c5f31a0410f7fd0739303ddcdbff2f53e0a44ec5de0f062e533444bd946959a1d9c25b297b6fc7675ca4add9e24e8ff390e0375f3b15e1d3e8129007d743e384659f191bd23ffe02140fa64d5c6d75937b28d51afcaa9d207f57c878f2f54493025e9eff5b5ce0c997d11c9690262e38e1e83c7f1a0ed3f200d9d0472739d59dea3cc6e8783758e3e3201731cf27211267702594356345449b42fa64b64c6f00a8f26665524fe2208b1a7c5fbdc822ea611c1811526471e4f52ab5e3a43de8fd4eba2fb2796a206e348de9b0be78ded78204dc82d9e9adccbe408d7ff538aab3d663eab189927a9cd597388e8dc5063d2db42cd65415fa32d20288da017c9f94e788dfe7cc3a0f6b6ab06116ed3f72f3c048cb1e51abf308ed7169908d1ad5b7ab3a86a3316d164084f8d88c6f96142d888ccb158efa586015914c116db114aa82c44a55d4c33bd901dc34e820d3120d57def03ea4f01b263913cc02ca586b208506d149ef03a706fd5360a12b83acb7bf97ac1f1f85389d4fbfdcf38551e9dbce760a05e8e4023d85038570d3697b3e7de73aac9c7feb39b6ccd1a775c8ce01b08d7190e28866aa7bb8d0cff0fc45b452fcb6a290f98f4b5ec125224c8a93918b1f2888befba6de3d294ee1f13a9c56e92eaac0b8e6c6905e77a60ea7e1d1ed979b6b2606652e7d75750a065c57c7efb1ef5708719ef04e354bd861b15e0a1cbc7cfe65c8a3d9a2b790260d6e6eb60bd4e0fb3f040dfa27fa00797664122add0750a23a8b20fcd68b6be1e21620dda4bf0561f4c5ed74f41612a0676dcdbf669df3436cbf2ce253e69319e3ab36e6e6314f11e0d0882ee3d7f3d3b3dcfe3cd7f061e301369207545676e09801f9bc4bc4c3dcaf48e5320a4b3211051a7525868a0ac1278ed6fc9531ed89cf4205458acc05d5351bcab7ea50250b6cb4c6fdd0cd96f30cdc9a820f495d0a3e14eb6c493a85a87e3b7fb8e5f23431c3c5359f5802f1fc11ff71c3172c6b57b5587ab38579b79e328792edb7a81d60762bc6c88693a00712f811cab9b075a97535c904396dbd2fa0994ba9c9b06fe9c042cb6860d22844b94863bf7b68a1ab8639e4487b38d48e40da4a98dedd7d73ca4b575bf4c604a364a9247c2ea5e3b127ff42f9bce1d3d37c2428edab1708ebd71ac0e4a408a9c6eb97407a4a8b5e912e2c63fadd1abad9a772a96fc4666f7d2b604adbde6f1136de2adfe38994491ab0f34ff1fd20cb8034ad39aae4c5c0076da2e7a157764b770e1c5f35b6f323ce809b2e92be1345204021d74712368e0ef77056afd85f065bba085793c9b6950d3c3fc6c445afbdd5a80cf7b0bb13055fd486700be1500bdf8771e286a63962e56d4771ed5eefbf111ba7380f02d6f96eed174246820b73bd772689c072bb3d8e43ef96f5466dce5c9392e34b7176821d2f4df3dab4c6ef5e0238ffe61582812fdacc987fbb6d98cad5a2d7af0e4c8dd3f800cd75c38a515d4d4c7118c5f81c6f7504e7ae452370c56c4b7fb4daa65bf26919c12081485d09e9d142965320211f483ed2a0a6836fa2488a878eaf9653b0528c3680b75a1920a25b5c5c17548c7ceb9a1656a0cf6a404aec14f7ed8a1dcf8ed32e1cf94dc2f60b65aa102650b7a22d9e708c606ce8403ceb81434bd9938b2c4e5a8530a156a1df7d143b2da54071ba3e673ce11760f72c32273b7bcd9a48da2a6caeb4b782cf1c3a044c1731f3ad61ce32bbd0b52cbb187cb3ecc1e85a67ffe27cf86769a0d69fe293dd30f060b8a0f26ccd0287d0b8d941ee7410a7c6aa430add67c2dd60db292e24f294ce80b0321aaa4d054a6f5d9981e1d5e859b454f5005be082bd59baca5775eedb7994333c62c452ef7b2893e4d03a28c0e368928b4bdd6e31f52a83cd7e162975405fd128321e0a8e3e77fd93257b0c46b309e16203974382ced818faac3a02e74141e9ea36c4a1b98bd859fafce43b2984d856c832f61b1ca562cee96f5843adc14b35bec1ccdafedd214f1a344345373f3c9eccee8324950a23c3e77d55dbde9a7ac1b7804927affb8b0e1488dcd8919d227bd1f50a35abf25e3f120c25b0dfb4d85b4c2a2c69cf7047c76c45e4e901e7396140496f9a322c2c2ac777a27adff5a6daf32e852b1bac89f1086739a603cf0f6838f792351c08e38ab130e5a83aa5a4f2da19df131770a308d810eed0059a2e5546a2169b9d0119f6df7c18981f4b4f119c76fdaac031ce7551f25678b5c4d8815a7ea9565e63389fca6ea0bcd40e71ac72124113dc0041ce26a0c9979ff76d7f1f2c0cd2c16d8c7a36930b909ed7e2d4adfa8352b12b99bdcbc25b485f652539fab7ac983c1ae925967c15ba2345e45d6bafe13b3e9d7acf1a592422ea09c3a45f7fe24e235bd70b106cdaa665584e74cdaf9f39b804bc6c4e7f0bf572225acd4dfe010081b91c2d5970d4f43d2e1a0e05f84baaf50642991b3704034aed74572e6a4715b79276432d06660b39c989570fc0d5d0071a7c690658caee447370d3295db3b5dc625e697e1ca2675b5430b9969024835c7d001fbce86c5165c4fe8f2d46b883daaa3fbf42dc5cf61209379013896df740b9cc32638358ea8079a33f04197f650471086e67e5cf9779268d7973c73bbbde2f1c11e1a8e2b154aaa8b4b74f8a03f14ceb7afc4ba35e6620b7af89c969021d20cb260c1868f3fa432ce7e509db06001ae6540531b126c1e3a851acbf0a9c1354bece05c094d69d9bd87f99391e23306911383d2082997339daebd67d8a707c9b496a309b7921696f39a07864f31208802db7188881e346b41c34f4129fca9c6a13172a4dabfe791584d240fc03685057d53c08737aa1d486233318eb4545f2e8d18087705b9d3a7658564592f56aea3aee53d66c249988bf353853728553a1577062e24af533f47dc012ae90c5c085babc121be2993c063e203ab949a088041271ac0527c56edd4b7a87e98323a0137cd493aa05fe38d02754a66d89348b119e6200d5919bc366788eb67115fc57c4c1a9dd42c7411d6709ad82de8662a1849445b39beb2ba8f894860e41a054f61337179a9214b0884f3964c95ed2a4ab37de8038566bba76fbaa7502c0460558ff4bf4793ca68d78e50f384a81da4cfa23723747e906b82290e0b8ea07e3404bee0915800d4c3c07f94c43e7aafbc7a44d923de97963d0d1586bee06fc90aadbe5758fb9933ff7df346d62e082223741f5cb26ef953ca654ab983a72b30b296891c9e3f1ed5216b0e588eb25f5d4ccad6f96973cc2d26196bbd37c83266473071ccd84d9e3c74f22621e8bd60afa4bcad6c853c7591fe5d4298a954ea5006f682a7a65aeb26b230f3866a28a58bf532aca8fd5eaec64f442ac510a7df4114f00fd6ff7e02d77f8e72797222556959958c4c4d166c5af18a6e25588cac9871a3d5bb453889ff8d13db22024a997bf97a5afdf698b1deaff3101e27868d2de47b92c403ce82e15f3239d8923e8ca0c01e3781b5dd6121f57d2238dc3ff8a1bde3e371efd33838c552e43588042b360f55d7ca92f11987630364b263428e18601d7bf23f6432b3a9aa2c500cd9ac5f73cbe309443858a2806956b0cdcfc19904567bb1703641017c6199e768410e03d8ba603eb34249d567370202f39639ae8f6d52d9d5dbfc544c5b85ac8187095c63f1f613fe4af179fc5c837e6e0ccc21e62ac22ac045c4ac3b1ca6a4cbdbe29ea465240fc0aed1f0e086d7580bcf81d4e2a4d55a8e3bc57110e7cf1e1895df07974f0686dd2ea2b12bbfd64e7a9d0c62c662f0370e6ed495eeb2ee5029042147a1f2e5fcd6068b06567be893cb80e2cbb5fbb12847313811c13cf685698d5e2175959579e510279b9e959ac2c3f94fec653c6b521f8909d633ccedbc1109285ecbd52d27cd2891eaf354db2c966d1e3086718848433c12658fe7f6fbfef930b963139a63f6c4caee5a1964d3a038dd0db403c0a251d702c07a0fba4a3576ec6668a78e9e26efc6ad83a670a47608bf4207979bf196b3160c95e7ccc6406d46f529d34676b76d72396262e1448df051130a21484e0e977df1f7f0a259ac762eef9506877498b9998e1286d6294cf60b95352e81c3", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xb0, 0x0, 0x3, [{{0x4, 0x3, 0x7fffffff, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x800000004, 0x46a1, 0x6, 0x0, 0x6, 0x1, 0xa, 0x8000, 0xde, 0x0, r5, 0x8001, 0x80000000}}, {0x1, 0x1, 0x1, 0x32540194, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r6, 0x0, 0x0) fchdir(0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x12) 3.957899373s ago: executing program 4 (id=366): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x0) 3.940895534s ago: executing program 3 (id=367): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11298}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x3193}]}, 0x40}}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mlockall(0x7) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000400)) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x200001, 0x41) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r6, r7, 0x8, 0x0, @void}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532322c70726976706f72742c00bb0fcf59af7beacda6e232ba000063a5c9a2d79959af66601e7cb64191ad5834669cb2c1fe9d217b00"]) unshare(0x20000400) r8 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x204400, 0x0) flock(r8, 0xc) mount$bind(&(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x10ad840, 0x0) 3.938193374s ago: executing program 0 (id=368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.508865228s ago: executing program 2 (id=370): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) syz_clone3(&(0x7f0000000540)={0x81000000, 0x0, 0x0, 0x0, {0x3d}, &(0x7f00000001c0)=""/170, 0xaa, &(0x7f0000000380)=""/209, &(0x7f0000000280)=[0x0], 0x1}, 0x58) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x200000e1}, 0x4001010) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') 2.438110881s ago: executing program 0 (id=371): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:01.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vp-vdpa\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='vp-vdpa\x00', 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='0000:00:02.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='0000:00:03.0\x00', 0xd) openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)='0000:00:03.0\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000640)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/vhost-vdpa-0\x00', 0x2, 0x0) 2.293409344s ago: executing program 0 (id=373): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$XFS_IOC_FSBULKSTAT(0xffffffffffffffff, 0xc0205865, &(0x7f0000000280)={&(0x7f0000000340)=0x3, 0x2, 0x0, &(0x7f0000000cc0)}) r3 = request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) keyctl$instantiate(0xc, r3, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf250a0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) rt_sigpending(0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) 2.073041319s ago: executing program 1 (id=374): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.062072309s ago: executing program 3 (id=375): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x4, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2.003900681s ago: executing program 4 (id=376): r0 = syz_usb_connect$hid(0x1, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="401e7f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.954978562s ago: executing program 2 (id=377): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11298}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x3193}]}, 0x40}}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mlockall(0x7) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000400)) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r6, 0xffffffffffffffff, 0x8, 0x0, @void}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532322c70726976706f72742c00bb0fcf59af7beacda6e232ba000063a5c9a2d79959af66601e7cb64191ad5834669cb2c1fe9d217b00"]) 1.242092889s ago: executing program 0 (id=378): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/220, &(0x7f00000000c0)=""/80, &(0x7f0000000780)=""/82}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01002d"], 0x68}, 0x1, 0x0, 0x0, 0x800c000}, 0x20000c80) 1.173532351s ago: executing program 0 (id=379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 776.212111ms ago: executing program 3 (id=380): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 702.115203ms ago: executing program 4 (id=381): socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x5) userfaultfd(0x80001) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d82000000000000002240f7ffffff00"}) r2 = syz_open_pts(r1, 0x400) dup3(r2, r1, 0x0) r3 = eventfd2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10044, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r3, @ANYBLOB=',wfdno=', @ANYRESDEC=r2]) 701.959143ms ago: executing program 3 (id=382): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:01.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vp-vdpa\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='vp-vdpa\x00', 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='0000:00:02.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='0000:00:03.0\x00', 0xd) 674.015813ms ago: executing program 2 (id=383): mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1804002, 0x0) chdir(&(0x7f0000000040)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x82, 0x0) chdir(&(0x7f0000000100)='./file0\x00') listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8, 0x0) 665.572933ms ago: executing program 1 (id=384): syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5}, @IFLA_MACSEC_SCB={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000e01000700000000000000000000ffff0000000200000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x40040d4}, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@deltclass={0x8c, 0x29, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xc, 0x8}, {0xfff1, 0x1}, {0xb, 0x8}}, [@tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_qfq={{0x8}, {0x1c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x2}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x7}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x8}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_RATE={0x6, 0x5, {0x71, 0x2}}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_htb={{0x8}, {0x4}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x8c}}, 0x4000010) 617.756425ms ago: executing program 2 (id=385): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11298}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x3193}]}, 0x40}}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mlockall(0x7) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000400)) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x200001, 0x41) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r6, r7, 0x8, 0x0, @void}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532322c70726976706f72742c00bb0fcf59af7beacda6e232ba000063a5c9a2d79959af66601e7cb64191ad5834669cb2c1fe9d217b00"]) unshare(0x20000400) r8 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x204400, 0x0) flock(r8, 0xc) mount$bind(&(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x10ad840, 0x0) 617.268985ms ago: executing program 3 (id=386): syz_usb_connect(0x5, 0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500070e01000606060509000600040007000300390c2402050302060254df000a09240205000103", @ANYBLOB='aff'], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x1) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(r1, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e) socket$igmp6(0xa, 0x3, 0x2) ppoll(&(0x7f0000000040)=[{r0, 0x18}], 0x1, 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000000180), &(0x7f00000001c0)) 279.516653ms ago: executing program 0 (id=387): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) syz_clone3(&(0x7f0000000540)={0x81000000, 0x0, 0x0, 0x0, {0x3d}, &(0x7f00000001c0)=""/170, 0xaa, &(0x7f0000000380)=""/209, &(0x7f0000000280)=[0x0], 0x1}, 0x58) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x200000e1}, 0x4001010) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') 269.764383ms ago: executing program 4 (id=388): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$XFS_IOC_FSBULKSTAT(0xffffffffffffffff, 0xc0205865, &(0x7f0000000280)={&(0x7f0000000340)=0x3, 0x2, 0x0, &(0x7f0000000cc0)}) r3 = request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) keyctl$instantiate(0xc, r3, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf250a0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) rt_sigpending(0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) 192.139955ms ago: executing program 1 (id=389): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/220, &(0x7f00000000c0)=""/80, &(0x7f0000000780)=""/82}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01002d"], 0x68}, 0x1, 0x0, 0x0, 0x800c000}, 0x20000c80) 156.092965ms ago: executing program 1 (id=390): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:01.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vp-vdpa\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='vp-vdpa\x00', 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='0000:00:02.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='0000:00:03.0\x00', 0xd) write(0xffffffffffffffff, &(0x7f0000000480)='vp-vdpa\x00', 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)='0000:00:03.0\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000640)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/vhost-vdpa-0\x00', 0x2, 0x0) 92.652447ms ago: executing program 1 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000001c0)=0xa, 0x4) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 0s ago: executing program 1 (id=392): r0 = syz_usb_connect$hid(0x1, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="401e7f"], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts. [ 23.821781][ T24] audit: type=1400 audit(1784913422.720:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.825627][ T271] cgroup: Unknown subsys name 'net' [ 23.844996][ T24] audit: type=1400 audit(1784913422.720:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.872228][ T24] audit: type=1400 audit(1784913422.760:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.872746][ T271] cgroup: Unknown subsys name 'devices' [ 24.017880][ T271] cgroup: Unknown subsys name 'hugetlb' [ 24.023490][ T271] cgroup: Unknown subsys name 'rlimit' [ 24.163575][ T24] audit: type=1400 audit(1784913423.060:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.186868][ T24] audit: type=1400 audit(1784913423.060:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.211722][ T24] audit: type=1400 audit(1784913423.060:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.228999][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.243889][ T24] audit: type=1400 audit(1784913423.140:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.269385][ T24] audit: type=1400 audit(1784913423.140:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.301132][ T24] audit: type=1400 audit(1784913423.200:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.326653][ T24] audit: type=1400 audit(1784913423.200:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.326702][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.852065][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.859287][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.866802][ T279] device bridge_slave_0 entered promiscuous mode [ 24.873525][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.880619][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.888018][ T281] device bridge_slave_0 entered promiscuous mode [ 24.895582][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.902699][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.910124][ T281] device bridge_slave_1 entered promiscuous mode [ 24.916833][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.923874][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.931361][ T280] device bridge_slave_0 entered promiscuous mode [ 24.939367][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.946471][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.953892][ T280] device bridge_slave_1 entered promiscuous mode [ 24.963761][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.970868][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.978267][ T279] device bridge_slave_1 entered promiscuous mode [ 25.065635][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.072817][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.080324][ T283] device bridge_slave_0 entered promiscuous mode [ 25.090003][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.097154][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.104555][ T283] device bridge_slave_1 entered promiscuous mode [ 25.139904][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.147178][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.154559][ T282] device bridge_slave_0 entered promiscuous mode [ 25.161616][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.168694][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.176096][ T282] device bridge_slave_1 entered promiscuous mode [ 25.280415][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.287495][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.294803][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.301864][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.320889][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.327959][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.335223][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.342299][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.356103][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.363194][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.370480][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.377547][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.387780][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.394843][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.402146][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.409192][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.449871][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.457408][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.464599][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.472403][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.479862][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.487042][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.494161][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.501996][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.509387][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.517083][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.524462][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.539487][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.548068][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.555086][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.562550][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.570904][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.577966][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.585317][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.593829][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.600889][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.608349][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.616616][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.623653][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.650447][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.658361][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.667152][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.675290][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.682381][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.689993][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.698073][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.706227][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.713267][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.726867][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.734777][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.756648][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.765110][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.774064][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.782333][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.790327][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.812782][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.821003][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.828534][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.835982][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.845201][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.852287][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.860806][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.869234][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.876280][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.883617][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.892946][ T280] device veth0_vlan entered promiscuous mode [ 25.903277][ T281] device veth0_vlan entered promiscuous mode [ 25.910277][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.918456][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.926849][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.934257][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.950437][ T280] device veth1_macvtap entered promiscuous mode [ 25.960198][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.968616][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.977043][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.985015][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.993367][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.002042][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.010507][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.021858][ T283] device veth0_vlan entered promiscuous mode [ 26.034332][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.042276][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.050357][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.058388][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.065742][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.074092][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.082471][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.089982][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.099858][ T281] device veth1_macvtap entered promiscuous mode [ 26.107686][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.115954][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.124250][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.136457][ T283] device veth1_macvtap entered promiscuous mode [ 26.146057][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.153923][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.162160][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.171032][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.179548][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.187929][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.194946][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.202380][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.210599][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.218987][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.227377][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.235528][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.242592][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.250159][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.261013][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.269394][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.291129][ T280] request_module fs-gadgetfs succeeded, but still no fs? [ 26.298968][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.308148][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.316585][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.325290][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.333742][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.342266][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.354328][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.362859][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.372060][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.380190][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.388830][ T280] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 26.389868][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.406528][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.418533][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.426613][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.434605][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.442708][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.461754][ T279] device veth0_vlan entered promiscuous mode [ 26.487665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.496472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.506520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.514982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.526466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.534390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.547881][ T282] device veth0_vlan entered promiscuous mode [ 26.554361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.561937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.570607][ T279] device veth1_macvtap entered promiscuous mode [ 26.594781][ T311] @0Ù: renamed from bond_slave_1 [ 26.600927][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.609410][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.619428][ T282] device veth1_macvtap entered promiscuous mode [ 26.654273][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.664582][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.673778][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.682255][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.691226][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.699778][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.708442][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.717274][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.806428][ T304] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 27.046309][ T306] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.146356][ T5] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.176358][ T304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.187416][ T304] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 27.196914][ T304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.217207][ T304] usb 5-1: config 0 descriptor?? [ 27.396243][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 27.406352][ T306] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 27.417363][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.428343][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.438389][ T306] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 27.516281][ T5] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 27.524712][ T5] usb 1-1: config 0 has no interface number 0 [ 27.531157][ T306] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 27.540747][ T5] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 27.551251][ T306] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 27.559442][ T5] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 27.569595][ T306] usb 3-1: Manufacturer: syz [ 27.579048][ T306] usb 3-1: config 0 descriptor?? [ 27.697133][ T304] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 27.708666][ T304] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input4 [ 27.726490][ T5] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 27.739459][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.747963][ T5] usb 1-1: Product: syz [ 27.752193][ T5] usb 1-1: Manufacturer: syz [ 27.756902][ T5] usb 1-1: SerialNumber: syz [ 27.762378][ T5] usb 1-1: config 0 descriptor?? [ 27.786250][ T327] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 27.793242][ T327] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 27.796533][ T304] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 27.904029][ T337] usb 5-1: USB disconnect, device number 2 [ 28.008592][ T327] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 28.015639][ T327] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 28.023445][ T316] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.116264][ T306] usbhid 3-1:0.0: can't add hid device: -71 [ 28.122462][ T306] usbhid: probe of 3-1:0.0 failed with error -71 [ 28.129667][ T306] usb 3-1: USB disconnect, device number 2 [ 28.246354][ T5] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 28.409109][ T316] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.420140][ T316] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 28.434789][ T355] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.616262][ T316] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.625497][ T316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.633807][ T316] usb 2-1: Product: syz [ 28.638225][ T316] usb 2-1: Manufacturer: syz [ 28.642888][ T316] usb 2-1: SerialNumber: syz [ 28.696858][ T316] cdc_mbim 2-1:1.0: skipping garbage [ 28.891005][ T369] EXT4-fs (loop2): Ignoring removed orlov option [ 28.897505][ T369] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.910772][ T369] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 28.951564][ T369] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 28.960361][ T369] EXT4-fs (loop2): orphan cleanup on readonly fs [ 28.967418][ T369] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.21: inode #1: comm syz.2.21: iget: illegal inode # [ 28.980556][ T369] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.21: error while reading EA inode 1 err=-117 [ 28.993013][ T369] EXT4-fs (loop2): 1 orphan inode deleted [ 28.998790][ T369] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000954,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000000,orlov,inode_readahead_blks=0x0000000000008000,,errors=continue [ 29.023024][ T369] ====================================================== [ 29.023024][ T369] WARNING: the mand mount option is being deprecated and [ 29.023024][ T369] will be removed in v5.15! [ 29.023024][ T369] ====================================================== [ 29.049223][ T369] EXT4-fs error (device loop2): ext4_iget_extra_inode:4692: inode #12: comm syz.2.21: corrupted in-inode xattr [ 29.061186][ T24] kauditd_printk_skb: 48 callbacks suppressed [ 29.061198][ T24] audit: type=1400 audit(1784913427.930:122): avc: denied { mount } for pid=364 comm="syz.2.21" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.090850][ T344] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 29.098031][ T369] incfs: Error accessing: ./file0. [ 29.103230][ T369] incfs: mount failed -117 [ 29.136586][ T24] audit: type=1400 audit(1784913427.930:123): avc: denied { mounton } for pid=364 comm="syz.2.21" path="/4/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.297168][ T24] audit: type=1400 audit(1784913428.200:124): avc: denied { create } for pid=381 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.336246][ T5] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 29.355728][ T5] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 29.379916][ T24] audit: type=1400 audit(1784913428.220:125): avc: denied { connect } for pid=381 comm="syz.3.26" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.403263][ T24] audit: type=1400 audit(1784913428.230:126): avc: denied { setopt } for pid=381 comm="syz.3.26" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.423457][ T24] audit: type=1400 audit(1784913428.230:127): avc: denied { prog_load } for pid=381 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.442242][ T316] cdc_mbim 2-1:1.0: bind() failure [ 29.450025][ T24] audit: type=1400 audit(1784913428.230:128): avc: denied { write } for pid=381 comm="syz.3.26" laddr=::1 lport=60 faddr=::1 fport=20131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.473013][ T316] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 29.475129][ T5] asix: probe of 1-1:0.34 failed with error -71 [ 29.480936][ T24] audit: type=1400 audit(1784913428.310:129): avc: denied { create } for pid=385 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 29.505148][ T5] usb 1-1: USB disconnect, device number 2 [ 29.510867][ T316] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 29.527334][ T316] usb 2-1: USB disconnect, device number 2 [ 29.534222][ T24] audit: type=1400 audit(1784913428.430:130): avc: denied { write } for pid=385 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 29.559243][ T389] binder: 385:389 ioctl c0306201 0 returned -14 [ 29.566048][ T389] : renamed from bond_slave_0 [ 29.580903][ T24] audit: type=1400 audit(1784913428.460:131): avc: denied { create } for pid=385 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.876223][ T337] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 30.050498][ T428] netlink: 60 bytes leftover after parsing attributes in process `syz.1.44'. [ 30.070365][ T430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.45'. [ 30.079254][ T430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.45'. [ 30.088363][ T430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.45'. [ 30.236263][ T337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.247458][ T337] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 30.256821][ T337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.265603][ T337] usb 5-1: config 0 descriptor?? [ 30.436233][ T304] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.737162][ T337] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 30.753576][ T460] netlink: 60 bytes leftover after parsing attributes in process `syz.1.56'. [ 30.755308][ T337] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0002/input/input5 [ 30.834842][ T304] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.845801][ T304] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 30.858342][ T337] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 30.990246][ T20] usb 5-1: USB disconnect, device number 3 [ 31.006457][ T304] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.071313][ T304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.146271][ T304] usb 1-1: Product: syz [ 31.166027][ T304] usb 1-1: Manufacturer: syz [ 31.175685][ T304] usb 1-1: SerialNumber: syz [ 31.369438][ T304] cdc_mbim 1-1:1.0: skipping garbage [ 31.570381][ T437] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 31.936498][ T304] cdc_mbim 1-1:1.0: bind() failure [ 31.956255][ T304] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 31.976251][ T304] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 31.986784][ T304] usb 1-1: USB disconnect, device number 3 [ 32.186216][ T296] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.386280][ T501] IPv6: NLM_F_CREATE should be specified when creating new route [ 32.409722][ T501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'. [ 32.432775][ T505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.72'. [ 32.441727][ T505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.72'. [ 32.451190][ T505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.72'. [ 32.460865][ T506] xt_CT: No such helper "netbios-ns" [ 32.473790][ T506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3594 sclass=netlink_route_socket pid=506 comm=syz.4.71 [ 32.546252][ T296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.557865][ T296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.568048][ T296] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.581151][ T296] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.590395][ T296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.601765][ T296] usb 2-1: config 0 descriptor?? [ 33.146304][ T296] usbhid 2-1:0.0: can't add hid device: -71 [ 33.152473][ T296] usbhid: probe of 2-1:0.0 failed with error -71 [ 33.162387][ T296] usb 2-1: USB disconnect, device number 3 [ 33.327762][ T522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.78'. [ 33.548369][ T537] EXT4-fs (loop3): Ignoring removed bh option [ 33.560283][ T537] EXT4-fs (loop3): Ignoring removed bh option [ 33.587744][ T537] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,bh,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable, [ 33.617726][ T548] xt_CT: No such helper "netbios-ns" [ 33.623984][ T548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3594 sclass=netlink_route_socket pid=548 comm=syz.4.86 [ 33.628444][ T537] EXT4-fs error (device loop3): ext4_find_dest_de:2079: inode #12: block 7: comm syz.3.85: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 33.656720][ T537] EXT4-fs (loop3): Remounting filesystem read-only [ 33.863071][ T563] binder: 562:563 ioctl 4018620d 0 returned -22 [ 33.997433][ T569] IPv6: NLM_F_CREATE should be specified when creating new route [ 34.137302][ T574] EXT4-fs (loop0): Ignoring removed bh option [ 34.144758][ T574] EXT4-fs (loop0): Ignoring removed bh option [ 34.166208][ T53] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 34.177807][ T574] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,bh,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable, [ 34.214461][ T574] EXT4-fs error (device loop0): ext4_find_dest_de:2079: inode #12: block 7: comm syz.0.99: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 34.234235][ T574] EXT4-fs (loop0): Remounting filesystem read-only [ 34.463303][ T24] kauditd_printk_skb: 15 callbacks suppressed [ 34.463314][ T24] audit: type=1400 audit(1784913433.360:147): avc: denied { write } for pid=585 comm="syz.4.103" name="unix" dev="proc" ino=4026532568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 34.546272][ T53] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.556982][ T53] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 34.727323][ T53] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 34.736440][ T53] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 34.744730][ T53] usb 3-1: Manufacturer: syz [ 34.750346][ T53] usb 3-1: config 0 descriptor?? [ 36.324971][ T606] EXT4-fs (loop3): Ignoring removed bh option [ 36.331234][ T606] EXT4-fs (loop3): Ignoring removed bh option [ 36.367607][ T606] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,bh,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable, [ 36.422797][ T606] EXT4-fs error (device loop3): ext4_find_dest_de:2079: inode #12: block 7: comm syz.3.110: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 36.465244][ T606] EXT4-fs (loop3): Remounting filesystem read-only [ 36.606140][ C1] sched: RT throttling activated [ 36.640333][ T614] binder: 613:614 ioctl 4018620d 0 returned -22 [ 36.764611][ T620] __nla_validate_parse: 15 callbacks suppressed [ 36.764621][ T620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.115'. [ 36.781233][ T620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.115'. [ 36.790279][ T620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.115'. [ 36.827780][ T631] fuse: Bad value for 'fd' [ 36.833303][ T633] xt_CT: No such helper "netbios-ns" [ 36.839667][ T633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3594 sclass=netlink_route_socket pid=633 comm=syz.3.112 [ 36.867054][ T638] binder: 637:638 ioctl 4018620d 0 returned -22 [ 36.873656][ T24] audit: type=1400 audit(1784913435.770:148): avc: denied { append } for pid=637 comm="syz.1.119" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.320911][ T652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.125'. [ 37.367204][ T654] binder: 653:654 ioctl 4018620d 0 returned -22 [ 37.421748][ T659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.128'. [ 37.430752][ T659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.128'. [ 37.439859][ T659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.128'. [ 37.517907][ T666] binder: 665:666 ioctl 4018620d 0 returned -22 [ 37.533734][ T668] binder: 667:668 ioctl c0306201 200000000080 returned -14 [ 37.541941][ T24] audit: type=1400 audit(1784913436.450:149): avc: denied { map } for pid=667 comm="syz.1.132" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.548396][ T668] binder: 667:668 ioctl 4018620d 0 returned -22 [ 37.574207][ T668] binder: 667:668 ioctl c0306201 2000000003c0 returned -14 [ 37.633473][ T675] binder: 674:675 ioctl 40046205 0 returned -22 [ 37.669579][ T24] audit: type=1400 audit(1784913436.570:150): avc: denied { sys_admin } for pid=674 comm="syz.3.135" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 38.306788][ T53] usb 3-1: USB disconnect, device number 3 [ 38.843403][ T701] binder: 700:701 ioctl c0306201 200000000080 returned -14 [ 38.868490][ T701] binder: 700:701 ioctl c0306201 2000000003c0 returned -14 [ 38.926249][ T570] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 38.949732][ T705] binder: 704:705 ioctl 4018620d 0 returned -22 [ 39.115728][ T711] device syzkaller0 entered promiscuous mode [ 39.127346][ T24] audit: type=1400 audit(1784913438.030:151): avc: denied { read } for pid=710 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.148589][ T24] audit: type=1400 audit(1784913438.050:152): avc: denied { read } for pid=712 comm="syz.0.149" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.159610][ T711] tipc: Started in network mode [ 39.173373][ T24] audit: type=1400 audit(1784913438.050:153): avc: denied { open } for pid=712 comm="syz.0.149" path="/24/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.176286][ T711] tipc: Own node identity b2b36d61ea99, cluster identity 4711 [ 39.206976][ T711] tipc: Enabled bearer , priority 0 [ 39.224574][ T711] tipc: Resetting bearer [ 39.231213][ T710] tipc: Resetting bearer [ 39.237554][ T710] tipc: Disabling bearer [ 39.326266][ T570] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 39.334446][ T570] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.344773][ T570] usb 4-1: config 0 has no interface number 0 [ 39.700746][ T570] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 39.715670][ T570] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.724073][ T570] usb 4-1: Product: syz [ 39.728491][ T570] usb 4-1: Manufacturer: syz [ 39.733351][ T570] usb 4-1: SerialNumber: syz [ 39.744432][ T570] usb 4-1: config 0 descriptor?? [ 40.103173][ T24] audit: type=1400 audit(1784913439.000:154): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 40.321400][ T24] audit: type=1400 audit(1784913439.220:155): avc: denied { mmap_zero } for pid=740 comm="syz.4.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 40.652284][ T24] audit: type=1400 audit(1784913439.550:156): avc: denied { relabelfrom } for pid=749 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 40.724583][ T752] device syzkaller0 entered promiscuous mode [ 40.734387][ T24] audit: type=1400 audit(1784913439.580:157): avc: denied { relabelto } for pid=749 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 40.766888][ T752] tipc: Started in network mode [ 40.773069][ T752] tipc: Own node identity 7eeb3bbbe659, cluster identity 4711 [ 40.781447][ T752] tipc: Enabled bearer , priority 0 [ 40.803183][ T752] tipc: Resetting bearer [ 40.809814][ T751] tipc: Resetting bearer [ 40.818501][ T751] tipc: Disabling bearer [ 41.147116][ T761] xt_CT: No such helper "netbios-ns" [ 41.153345][ T761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3594 sclass=netlink_route_socket pid=761 comm=syz.0.164 [ 41.560166][ T769] EXT4-fs (loop0): Ignoring removed orlov option [ 41.585551][ T769] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.630851][ T769] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 41.654514][ T769] EXT4-fs (loop0): orphan cleanup on readonly fs [ 41.682289][ T769] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.166: inode #1: comm syz.0.166: iget: illegal inode # [ 41.735733][ T570] usb 4-1: USB disconnect, device number 2 [ 41.778956][ T769] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.166: error while reading EA inode 1 err=-117 [ 41.816388][ T769] EXT4-fs (loop0): 1 orphan inode deleted [ 41.842333][ T769] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000954,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000000,orlov,inode_readahead_blks=0x0000000000008000,,errors=continue [ 41.933180][ T769] EXT4-fs error (device loop0): ext4_iget_extra_inode:4692: inode #12: comm syz.0.166: corrupted in-inode xattr [ 41.947223][ T769] incfs: Error accessing: ./file0. [ 41.952402][ T769] incfs: mount failed -117 [ 42.313617][ T24] audit: type=1400 audit(1784913441.160:158): avc: denied { prog_run } for pid=777 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 42.987126][ T790] device syzkaller0 entered promiscuous mode [ 43.016490][ T790] tipc: Enabled bearer , priority 0 [ 43.037290][ T790] tipc: Resetting bearer [ 43.043790][ T789] tipc: Resetting bearer [ 43.064780][ T789] tipc: Disabling bearer [ 43.175664][ T798] xt_CT: No such helper "netbios-ns" [ 43.181964][ T798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3594 sclass=netlink_route_socket pid=798 comm=syz.2.175 [ 43.367331][ T807] binder: 806:807 ioctl 40046205 0 returned -22 [ 43.442919][ T811] device syzkaller0 entered promiscuous mode [ 43.576310][ T570] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 43.673415][ T822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3594 sclass=netlink_route_socket pid=822 comm=syz.2.184 [ 43.946264][ T570] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 43.959706][ T570] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.985456][ T570] usb 2-1: config 0 has no interface number 0 [ 44.156302][ T570] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 44.171669][ T570] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.192351][ T570] usb 2-1: Product: syz [ 44.203843][ T570] usb 2-1: Manufacturer: syz [ 44.215551][ T829] binder: 828:829 ioctl 4018620d 0 returned -22 [ 44.216884][ T570] usb 2-1: SerialNumber: syz [ 44.242158][ T570] usb 2-1: config 0 descriptor?? [ 44.696316][ T5] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 44.718371][ T846] device bridge0 entered promiscuous mode [ 44.776446][ T337] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 44.786271][ T24] audit: type=1400 audit(1784913443.610:159): avc: denied { read } for pid=842 comm="syz.3.193" dev="nsfs" ino=4026532295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.816270][ T24] audit: type=1400 audit(1784913443.610:160): avc: denied { open } for pid=842 comm="syz.3.193" path="net:[4026532295]" dev="nsfs" ino=4026532295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.099492][ T849] EXT4-fs (loop4): Ignoring removed bh option [ 45.105694][ T849] EXT4-fs (loop4): Ignoring removed bh option [ 45.117387][ T849] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,bh,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable, [ 45.141025][ T24] audit: type=1400 audit(1784913444.040:161): avc: denied { create } for pid=848 comm="syz.4.194" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.161509][ T849] EXT4-fs error (device loop4): ext4_find_dest_de:2079: inode #12: block 7: comm syz.4.194: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 45.181384][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.182249][ T849] EXT4-fs (loop4): Remounting filesystem read-only [ 45.192784][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.208777][ T5] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 45.218016][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.229513][ T5] usb 3-1: config 0 descriptor?? [ 45.326277][ T337] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 45.337574][ T337] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.347568][ T337] usb 1-1: config 0 interface 0 has no altsetting 0 [ 45.354216][ T337] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 45.363319][ T337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.372088][ T337] usb 1-1: config 0 descriptor?? [ 45.544408][ T728] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 45.667405][ T864] EXT4-fs (loop3): Ignoring removed orlov option [ 45.673909][ T864] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.689359][ T864] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 45.697988][ T864] EXT4-fs (loop3): orphan cleanup on readonly fs [ 45.704717][ T864] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.198: inode #1: comm syz.3.198: iget: illegal inode # [ 45.718549][ T5] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 45.729118][ T5] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0003/input/input6 [ 45.741135][ T864] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.198: error while reading EA inode 1 err=-117 [ 45.754987][ T864] EXT4-fs (loop3): 1 orphan inode deleted [ 45.760975][ T864] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000954,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000000,orlov,inode_readahead_blks=0x0000000000008000,,errors=continue [ 45.799397][ T864] EXT4-fs error (device loop3): ext4_iget_extra_inode:4692: inode #12: comm syz.3.198: corrupted in-inode xattr [ 45.814292][ T24] audit: type=1400 audit(1784913444.720:162): avc: denied { read } for pid=80 comm="acpid" name="event3" dev="devtmpfs" ino=566 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.839563][ T5] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 45.865423][ T864] incfs: Error accessing: ./file0. [ 45.877355][ T24] audit: type=1400 audit(1784913444.720:163): avc: denied { open } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=566 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.907034][ T24] audit: type=1400 audit(1784913444.720:164): avc: denied { ioctl } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=566 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.916465][ T864] incfs: mount failed -117 [ 45.936302][ T337] usbhid 1-1:0.0: can't add hid device: -71 [ 45.936445][ T728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.943363][ T337] usbhid: probe of 1-1:0.0 failed with error -71 [ 45.977155][ T337] usb 1-1: USB disconnect, device number 4 [ 46.010664][ T728] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 46.021111][ T728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.031898][ T314] usb 3-1: USB disconnect, device number 4 [ 46.050623][ T728] usb 5-1: config 0 descriptor?? [ 46.421672][ T570] usb 2-1: USB disconnect, device number 4 [ 46.476035][ T875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3594 sclass=netlink_route_socket pid=875 comm=syz.0.200 [ 46.846378][ T728] usbhid 5-1:0.0: can't add hid device: -71 [ 46.855321][ T728] usbhid: probe of 5-1:0.0 failed with error -71 [ 46.865955][ T728] usb 5-1: USB disconnect, device number 4 [ 46.911206][ T887] EXT4-fs (loop2): Ignoring removed bh option [ 46.917512][ T887] EXT4-fs (loop2): Ignoring removed bh option [ 46.944676][ T887] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,bh,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable, [ 46.982071][ T24] audit: type=1400 audit(1784913445.880:165): avc: denied { mount } for pid=886 comm="syz.2.205" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.027387][ T887] EXT4-fs error (device loop2): ext4_find_dest_de:2079: inode #12: block 7: comm syz.2.205: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 47.061534][ T24] audit: type=1400 audit(1784913445.950:166): avc: denied { load_policy } for pid=891 comm="syz.1.206" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 47.090826][ T887] EXT4-fs (loop2): Remounting filesystem read-only [ 47.103611][ T892] SELinux: failed to load policy [ 47.115830][ T24] audit: type=1400 audit(1784913446.010:167): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.301914][ T904] device bridge0 entered promiscuous mode [ 47.556230][ T296] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 47.727028][ T570] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 47.984230][ T926] EXT4-fs (loop1): Ignoring removed bh option [ 47.990470][ T570] usb 4-1: Using ep0 maxpacket: 32 [ 47.995864][ T926] EXT4-fs (loop1): Ignoring removed bh option [ 48.028605][ T926] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,bh,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable, [ 48.060035][ T926] EXT4-fs error (device loop1): ext4_find_dest_de:2079: inode #12: block 7: comm syz.1.217: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 48.079923][ T926] EXT4-fs (loop1): Remounting filesystem read-only [ 48.412501][ T935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3594 sclass=netlink_route_socket pid=935 comm=syz.2.219 [ 48.426080][ T570] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 48.442781][ T570] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.453716][ T570] usb 4-1: config 0 has no interface number 0 [ 48.462860][ T570] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 48.473565][ T570] usb 4-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 48.490105][ T296] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 48.500325][ T296] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.508313][ T570] usb 4-1: config 0 interface 196 has no altsetting 0 [ 48.518911][ T296] usb 1-1: config 0 has no interface number 0 [ 48.676228][ T570] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 48.716360][ T296] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 48.730678][ T570] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.739291][ T570] usb 4-1: Product: syz [ 48.743659][ T570] usb 4-1: Manufacturer: syz [ 48.748665][ T570] usb 4-1: SerialNumber: syz [ 48.749792][ T296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.755277][ T570] usb 4-1: config 0 descriptor?? [ 48.771151][ T937] EXT4-fs (loop1): Ignoring removed orlov option [ 48.783191][ T296] usb 1-1: Product: syz [ 48.786453][ T937] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.795466][ T296] usb 1-1: Manufacturer: syz [ 48.806317][ T296] usb 1-1: SerialNumber: syz [ 48.821335][ T937] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 48.833725][ T296] usb 1-1: config 0 descriptor?? [ 48.840463][ T937] EXT4-fs (loop1): orphan cleanup on readonly fs [ 48.866628][ T937] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.218: inode #1: comm syz.1.218: iget: illegal inode # [ 48.887971][ T937] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.218: error while reading EA inode 1 err=-117 [ 48.912762][ T937] EXT4-fs (loop1): 1 orphan inode deleted [ 48.924754][ T937] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000954,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000000,orlov,inode_readahead_blks=0x0000000000008000,,errors=continue [ 48.992550][ T937] EXT4-fs error (device loop1): ext4_iget_extra_inode:4692: inode #12: comm syz.1.218: corrupted in-inode xattr [ 49.028396][ T570] ipheth 4-1:0.196: Unable to find endpoints [ 49.114528][ T937] incfs: Error accessing: ./file0. [ 49.284639][ T937] incfs: mount failed -117 [ 50.284429][ T959] SELinux: failed to load policy [ 50.317417][ T961] tipc: Started in network mode [ 50.322419][ T961] tipc: Own node identity 7a74628f1656, cluster identity 4711 [ 50.330449][ T961] tipc: Enabled bearer , priority 0 [ 50.338776][ T5] usb 4-1: USB disconnect, device number 3 [ 50.349235][ T961] tipc: Resetting bearer [ 50.360202][ T960] tipc: Disabling bearer [ 50.366986][ T296] usb 1-1: USB disconnect, device number 5 [ 51.434321][ T24] audit: type=1400 audit(1784913450.330:168): avc: denied { create } for pid=983 comm="syz.1.233" dev="anon_inodefs" ino=19734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.650792][ T997] xt_CT: No such helper "netbios-ns" [ 53.769525][ T997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3594 sclass=netlink_route_socket pid=997 comm=syz.2.235 [ 54.230145][ T1012] fuse: Bad value for 'group_id' [ 54.614754][ T24] audit: type=1400 audit(1784913453.510:169): avc: denied { read write } for pid=1015 comm="syz.3.241" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.718334][ T24] audit: type=1400 audit(1784913453.620:170): avc: denied { open } for pid=1015 comm="syz.3.241" path="/dev/uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.897217][ T1018] SELinux: failed to load policy [ 55.183560][ T1027] EXT4-fs (loop4): Ignoring removed orlov option [ 55.190098][ T1027] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.208459][ T1016] EXT4-fs (loop3): 1 truncate cleaned up [ 55.214276][ T1016] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue [ 55.606388][ T1027] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 55.615452][ T1027] EXT4-fs (loop4): orphan cleanup on readonly fs [ 55.622895][ T1027] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.244: inode #1: comm syz.4.244: iget: illegal inode # [ 55.631948][ T1016] overlayfs: './file2' not a directory [ 55.636837][ T24] audit: type=1400 audit(1784913454.530:171): avc: denied { read write } for pid=1015 comm="syz.3.241" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.674715][ T24] audit: type=1400 audit(1784913454.530:172): avc: denied { open } for pid=1015 comm="syz.3.241" path="/49/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.836644][ T1027] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.244: error while reading EA inode 1 err=-117 [ 55.849577][ T1027] EXT4-fs (loop4): 1 orphan inode deleted [ 55.855351][ T1027] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000954,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000000,orlov,inode_readahead_blks=0x0000000000008000,,errors=continue [ 55.879096][ T1027] EXT4-fs error (device loop4): ext4_iget_extra_inode:4692: inode #12: comm syz.4.244: corrupted in-inode xattr [ 55.891445][ T1027] incfs: Error accessing: ./file0. [ 55.896645][ T1027] incfs: mount failed -117 [ 58.499619][ T1059] fuse: Bad value for 'group_id' [ 58.626930][ T1067] xt_CT: No such helper "netbios-ns" [ 58.633270][ T1067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3594 sclass=netlink_route_socket pid=1067 comm=syz.3.253 [ 58.734815][ T1068] 9pnet: Insufficient options for proto=fd [ 58.797248][ T1072] SELinux: policydb string ( does not match my string SE Linux [ 58.814129][ T1072] SELinux: failed to load policy [ 58.996809][ T570] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 59.007482][ T1074] EXT4-fs (loop4): Ignoring removed orlov option [ 59.014061][ T1074] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.026697][ T1074] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 59.035002][ T1074] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.041687][ T1074] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.258: inode #1: comm syz.4.258: iget: illegal inode # [ 59.054965][ T1074] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.258: error while reading EA inode 1 err=-117 [ 59.067703][ T1074] EXT4-fs (loop4): 1 orphan inode deleted [ 59.073481][ T1074] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000954,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000000,orlov,inode_readahead_blks=0x0000000000008000,,errors=continue [ 59.098818][ T1074] EXT4-fs error (device loop4): ext4_iget_extra_inode:4692: inode #12: comm syz.4.258: corrupted in-inode xattr [ 59.111279][ T1074] incfs: Error accessing: ./file0. [ 59.116635][ T1074] incfs: mount failed -117 [ 59.356233][ T570] usb 2-1: device descriptor read/64, error -71 [ 59.537613][ T1091] fuse: Bad value for 'group_id' [ 59.737768][ T1094] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 59.805442][ T570] usb 2-1: device descriptor read/64, error -71 [ 59.812344][ T1094] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 59.830668][ T1094] JBD2: no valid journal superblock found [ 59.836996][ T1094] EXT4-fs (loop4): error loading journal [ 60.296642][ T570] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 60.563244][ T1114] xt_hashlimit: size too large, truncated to 1048576 [ 60.566353][ T570] usb 2-1: device descriptor read/64, error -71 [ 60.638971][ T1115] 9pnet: Insufficient options for proto=fd [ 61.040054][ T570] usb 2-1: device descriptor read/64, error -71 [ 61.053776][ T1123] xt_CT: No such helper "netbios-ns" [ 61.062414][ T1123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3594 sclass=netlink_route_socket pid=1123 comm=syz.0.272 [ 61.106837][ T1122] EXT4-fs (loop2): Ignoring removed orlov option [ 61.113230][ T1122] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.126916][ T1122] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 61.135341][ T1122] EXT4-fs (loop2): orphan cleanup on readonly fs [ 61.141956][ T1122] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.274: inode #1: comm syz.2.274: iget: illegal inode # [ 61.154966][ T1122] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.274: error while reading EA inode 1 err=-117 [ 61.167220][ T570] usb usb2-port1: attempt power cycle [ 61.172702][ T1122] EXT4-fs (loop2): 1 orphan inode deleted [ 61.178465][ T1122] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000954,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000000,orlov,inode_readahead_blks=0x0000000000008000,,errors=continue [ 61.202530][ T1122] EXT4-fs error (device loop2): ext4_iget_extra_inode:4692: inode #12: comm syz.2.274: corrupted in-inode xattr [ 61.214644][ T1122] incfs: Error accessing: ./file0. [ 61.219844][ T1122] incfs: mount failed -117 [ 61.287734][ T1128] SELinux: policydb string ( does not match my string SE Linux [ 61.303084][ T1128] SELinux: failed to load policy [ 61.424746][ T1132] Zero length message leads to an empty skb [ 61.641616][ T570] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 61.756214][ T570] usb 2-1: device descriptor read/8, error -71 [ 63.364130][ T570] usb 2-1: device descriptor read/8, error -71 [ 64.466071][ T1153] 9pnet: Insufficient options for proto=fd [ 64.576078][ T1166] xt_hashlimit: size too large, truncated to 1048576 [ 64.877037][ T1178] xt_CT: No such helper "netbios-ns" [ 64.883303][ T1178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3594 sclass=netlink_route_socket pid=1178 comm=syz.0.289 [ 64.896820][ T1177] SELinux: policydb string ( does not match my string SE Linux [ 64.921498][ T1177] SELinux: failed to load policy [ 66.207509][ T1208] 9pnet: Insufficient options for proto=fd [ 66.289033][ T1214] 9pnet: Insufficient options for proto=fd [ 67.011412][ T1216] fuse: Bad value for 'fd' [ 69.165957][ T1229] xt_CT: No such helper "netbios-ns" [ 69.190021][ T1229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3594 sclass=netlink_route_socket pid=1229 comm=syz.4.306 [ 70.566311][ T296] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 70.786319][ T728] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 71.156292][ T728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.167312][ T728] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 71.176553][ T728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.185574][ T728] usb 1-1: config 0 descriptor?? [ 71.266235][ T296] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 71.277503][ T296] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.287767][ T296] usb 2-1: config 0 interface 0 has no altsetting 0 [ 71.294396][ T296] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 71.303866][ T296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.312475][ T296] usb 2-1: config 0 descriptor?? [ 71.953966][ T1285] 9pnet: Insufficient options for proto=fd [ 72.226527][ T24] audit: type=1400 audit(1784913471.130:173): avc: denied { mount } for pid=1287 comm="syz.4.323" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 72.249261][ T303] blk_update_request: I/O error, dev sda, sector 655670 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 72.260642][ T303] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2030 starting block 81959) [ 72.272215][ T303] Buffer I/O error on device sda1, logical block 81920 [ 72.279404][ T303] blk_update_request: I/O error, dev sda, sector 663846 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 72.290824][ T303] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2030 starting block 82982) [ 72.302401][ T303] Buffer I/O error on device sda1, logical block 82942 [ 72.309382][ T303] Buffer I/O error on device sda1, logical block 82943 [ 72.316371][ T303] blk_update_request: I/O error, dev sda, sector 667894 op 0x1:(WRITE) flags 0x0 phys_seg 8 prio class 0 [ 72.327703][ T303] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2030 starting block 83494) [ 72.339259][ T303] Buffer I/O error on device sda1, logical block 83448 [ 72.345937][ T24] audit: type=1400 audit(1784913471.250:174): avc: denied { mount } for pid=1287 comm="syz.4.323" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 72.346158][ T303] Buffer I/O error on device sda1, logical block 83449 [ 72.346174][ T303] Buffer I/O error on device sda1, logical block 83450 [ 72.382007][ T303] Buffer I/O error on device sda1, logical block 83451 [ 72.388903][ T303] Buffer I/O error on device sda1, logical block 83452 [ 72.395764][ T303] Buffer I/O error on device sda1, logical block 83453 [ 72.402664][ T303] Buffer I/O error on device sda1, logical block 83454 [ 72.409633][ T303] blk_update_request: I/O error, dev sda, sector 672054 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 72.420878][ T303] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2032 starting block 84007) [ 72.432615][ T303] blk_update_request: I/O error, dev sda, sector 680214 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 72.443905][ T303] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2032 starting block 85030) [ 72.455638][ T303] blk_update_request: I/O error, dev sda, sector 684254 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 72.466924][ T303] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2032 starting block 85542) [ 72.478457][ T303] blk_update_request: I/O error, dev sda, sector 688438 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 72.489702][ T303] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2035 starting block 86055) [ 72.501213][ T303] blk_update_request: I/O error, dev sda, sector 696614 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 72.512436][ T303] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2035 starting block 87078) [ 72.523958][ T303] blk_update_request: I/O error, dev sda, sector 700582 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 0 [ 72.535198][ T303] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2035 starting block 87579) [ 72.546743][ T303] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2035 starting block 87590) [ 72.558326][ T303] blk_update_request: I/O error, dev sda, sector 704822 op 0x1:(WRITE) flags 0x0 phys_seg 5 prio class 0 [ 72.576100][ T1288] Buffer I/O error on dev sda1, logical block 130, lost async page write [ 72.584663][ T1288] Buffer I/O error on dev sda1, logical block 64973, lost async page write [ 72.593483][ T296] usbhid 2-1:0.0: can't add hid device: -71 [ 72.599600][ T296] usbhid: probe of 2-1:0.0 failed with error -71 [ 72.607013][ T296] usb 2-1: USB disconnect, device number 9 [ 72.614309][ T58] Aborting journal on device sda1-8. [ 72.619760][ T37] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 72.628548][ T58] JBD2: Error -5 detected when updating journal superblock for sda1-8. [ 72.670759][ T1288] JBD2: Error while async write back metadata bh 130. [ 72.674502][ T1288] JBD2: Error while async write back metadata bh 64973. [ 72.733585][ T1283] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 72.749084][ T1283] EXT4-fs (sda1): I/O error while writing superblock [ 72.755853][ T1283] EXT4-fs error (device sda1): ext4_journal_check_start:83: Detected aborted journal [ 72.766289][ T1283] EXT4-fs (sda1): Remounting filesystem read-only [ 72.769267][ T1291] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 72.781043][ T1291] EXT4-fs (sda1): I/O error while writing superblock [ 72.787784][ T1291] EXT4-fs error (device sda1): ext4_journal_check_start:83: Detected aborted journal [ 72.992245][ T24] audit: type=1400 audit(1784913471.830:175): avc: denied { read } for pid=1291 comm="syz.1.324" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 73.033449][ T24] audit: type=1400 audit(1784913471.830:176): avc: denied { open } for pid=1291 comm="syz.1.324" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 73.114955][ T1301] EXT4-fs (loop3): Ignoring removed orlov option [ 73.121821][ T1301] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.147365][ T24] audit: type=1400 audit(1784913472.050:177): avc: denied { name_bind } for pid=1304 comm="syz.1.327" src=20262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 73.174605][ T1301] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 73.183378][ T1301] EXT4-fs (loop3): orphan cleanup on readonly fs [ 73.190707][ T1301] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.326: inode #1: comm syz.3.326: iget: illegal inode # [ 73.203754][ T1301] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.326: error while reading EA inode 1 err=-117 [ 73.216516][ T1301] EXT4-fs (loop3): 1 orphan inode deleted [ 73.222293][ T1301] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000954,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000000,orlov,inode_readahead_blks=0x0000000000008000,,errors=continue [ 73.246550][ T1301] EXT4-fs error (device loop3): ext4_iget_extra_inode:4692: inode #12: comm syz.3.326: corrupted in-inode xattr [ 73.259051][ T1301] incfs: Error accessing: ./file0. [ 73.264246][ T1301] incfs: mount failed -117 [ 73.564278][ T1288] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 73.624591][ T728] usbhid 1-1:0.0: can't add hid device: -71 [ 73.647037][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #259: comm udevd: reading directory lblock 0 [ 73.663522][ T728] usbhid: probe of 1-1:0.0 failed with error -71 [ 73.664797][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #264: comm udevd: reading directory lblock 0 [ 73.682327][ T728] usb 1-1: USB disconnect, device number 6 [ 73.699186][ T271] ------------[ cut here ]------------ [ 73.704934][ T271] bdi-(unknown) not registered [ 73.709893][ T271] WARNING: CPU: 0 PID: 271 at fs/fs-writeback.c:2321 __mark_inode_dirty+0x650/0x960 [ 73.719625][ T271] Modules linked in: [ 73.723560][ T271] CPU: 0 PID: 271 Comm: syz-executor Not tainted syzkaller #0 [ 73.731106][ T271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 73.741229][ T271] RIP: 0010:__mark_inode_dirty+0x650/0x960 [ 73.747093][ T271] Code: fc ff df 41 80 7c 05 00 00 74 08 4c 89 ff e8 a7 f4 ec ff 49 8b 3f e8 0f af de ff 48 c7 c7 e0 61 29 85 48 89 c6 e8 70 c0 c6 02 <0f> 0b e9 2f fe ff ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 8e fc ff [ 73.766752][ T271] RSP: 0000:ffffc90000b277d8 EFLAGS: 00010246 [ 73.773002][ T271] RAX: 8bc37ed0025cbc00 RBX: 1ffff110234864b4 RCX: ffff88811dbfa780 [ 73.777293][ T24] audit: type=1400 audit(1784913472.670:178): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 73.781177][ T271] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 73.807211][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #264: comm udevd: reading directory lblock 0 [ 73.809054][ T271] RBP: ffffc90000b27820 R08: ffffc90000b27167 R09: fffff52000164e60 [ 73.828243][ T271] R10: dffffc0000000000 R11: fffff52000164e2d R12: ffff88810aab4068 [ 73.835097][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #264: comm udevd: reading directory lblock 0 [ 73.836268][ T271] R13: 1ffff1102155680c R14: 0000000000000000 R15: ffff88810aab4060 [ 73.836277][ T271] FS: 0000555578874500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 73.836306][ T271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.864088][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #1642: comm udevd: reading directory lblock 0 [ 73.864587][ T271] CR2: 00007f04b2117020 CR3: 000000011dcf4000 CR4: 00000000003506b0 [ 73.880705][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #1480: comm udevd: reading directory lblock 0 [ 73.882566][ T271] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.882595][ T271] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.918024][ T271] Call Trace: [ 73.921349][ T271] mark_buffer_dirty+0x21b/0x330 [ 73.926339][ T271] __block_commit_write+0x1ab/0x240 [ 73.931568][ T271] block_page_mkwrite+0x239/0x270 [ 73.936664][ T271] ? ext4_da_release_space+0x420/0x420 [ 73.942142][ T271] ext4_page_mkwrite+0xb02/0x12f0 [ 73.947220][ T271] ? ext4_change_inode_journal_flag+0x5e0/0x5e0 [ 73.953510][ T271] wp_page_shared+0x45f/0x740 [ 73.958249][ T271] do_wp_page+0xb68/0xd00 [ 73.962603][ T271] handle_pte_fault+0xbc3/0x3910 [ 73.967588][ T271] handle_mm_fault+0xf86/0x1720 [ 73.972458][ T271] ? fsnotify_clear_child_dentry_flag+0xe0/0xe0 [ 73.978755][ T271] ? can_reuse_spf_vma+0xe0/0xe0 [ 73.983712][ T271] ? vfs_write+0xaeb/0xd70 [ 73.988190][ T271] ? __kasan_check_write+0x14/0x20 [ 73.993317][ T271] ? down_read_trylock+0x106/0x160 [ 73.998484][ T271] ? __init_rwsem+0x1c0/0x1c0 [ 74.003181][ T271] ? vmacache_update+0xb7/0x120 [ 74.008082][ T271] ? find_vma+0x13b/0x150 [ 74.012428][ T271] do_user_addr_fault+0x576/0xe20 [ 74.017528][ T271] ? do_kern_addr_fault+0x80/0x80 [ 74.022573][ T271] ? debug_smp_processor_id+0x17/0x20 [ 74.028009][ T271] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 74.034090][ T271] exc_page_fault+0x5a/0xc0 [ 74.038687][ T271] ? asm_exc_page_fault+0x8/0x30 [ 74.043645][ T271] asm_exc_page_fault+0x1e/0x30 [ 74.048536][ T271] RIP: 0033:0x7f04b8e83e87 [ 74.052971][ T271] Code: ce 48 ff c7 48 01 fe 48 8d 54 11 80 0f 1f 80 00 00 00 00 c5 fe 6f 0e c5 fe 6f 56 20 c5 fe 6f 5e 40 c5 fe 6f 66 60 48 83 ee 80 fd 7f 0f c5 fd 7f 57 20 c5 fd 7f 5f 40 c5 fd 7f 67 60 48 83 ef [ 74.072623][ T271] RSP: 002b:00007ffc5c375cd8 EFLAGS: 00010203 [ 74.078746][ T271] RAX: 00007f04b2117000 RBX: 0000555578893550 RCX: 00007f04b2117000 [ 74.086772][ T271] RDX: 00007f04b21172ae RSI: 0000555578890e80 RDI: 00007f04b2117020 [ 74.094759][ T271] RBP: 00007ffc5c375cf0 R08: 0000000000000000 R09: 0000000000000000 [ 74.102784][ T271] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555578889470 [ 74.110808][ T271] R13: 0000000000004800 R14: 0000000000000001 R15: 0000000000000000 [ 74.118832][ T271] ---[ end trace 2784efc4012632ef ]--- [ 74.164345][ T24] audit: type=1400 audit(1784913473.060:179): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 74.195711][ T24] audit: type=1400 audit(1784913473.090:180): avc: denied { mount } for pid=1312 comm="syz.4.330" name="/" dev="configfs" ino=1124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 74.222641][ T24] audit: type=1400 audit(1784913473.090:181): avc: denied { search } for pid=1312 comm="syz.4.330" name="/" dev="configfs" ino=1124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.245743][ T24] audit: type=1400 audit(1784913473.090:182): avc: denied { write } for pid=1312 comm="syz.4.330" name="usb_gadget" dev="configfs" ino=1125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.536205][ T5] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 74.599555][ T1326] fuse: Bad value for 'fd' [ 74.887144][ T271] ------------[ cut here ]------------ [ 74.892668][ T271] bdi-(unknown) not registered [ 74.897604][ T271] WARNING: CPU: 1 PID: 271 at fs/fs-writeback.c:2321 __mark_inode_dirty+0x650/0x960 [ 74.906985][ T271] Modules linked in: [ 74.910909][ T271] CPU: 1 PID: 271 Comm: syz-executor Tainted: G W syzkaller #0 [ 74.919825][ T271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.929941][ T271] RIP: 0010:__mark_inode_dirty+0x650/0x960 [ 74.935769][ T271] Code: fc ff df 41 80 7c 05 00 00 74 08 4c 89 ff e8 a7 f4 ec ff 49 8b 3f e8 0f af de ff 48 c7 c7 e0 61 29 85 48 89 c6 e8 70 c0 c6 02 <0f> 0b e9 2f fe ff ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 8e fc ff [ 74.955415][ T271] RSP: 0000:ffffc90000b277d8 EFLAGS: 00010246 [ 74.961517][ T271] RAX: 8bc37ed0025cbc00 RBX: 1ffff110234801c0 RCX: ffff88811dbfa780 [ 74.969517][ T271] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 74.977545][ T271] RBP: ffffc90000b27820 R08: ffffc90000b27167 R09: fffff52000164e60 [ 74.985536][ T271] R10: dffffc0000000000 R11: fffff52000164e2d R12: ffff88810aab4068 [ 74.993558][ T271] R13: 1ffff1102155680c R14: 0000000000000000 R15: ffff88810aab4060 [ 75.001690][ T271] FS: 0000555578874500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 75.010695][ T271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.017301][ T271] CR2: 00007f04b3d0f4d0 CR3: 000000011dcf4000 CR4: 00000000003506a0 [ 75.025282][ T271] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.033280][ T271] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.041275][ T271] Call Trace: [ 75.044583][ T271] mark_buffer_dirty+0x21b/0x330 [ 75.049541][ T271] __block_commit_write+0x1ab/0x240 [ 75.054753][ T271] block_page_mkwrite+0x239/0x270 [ 75.059804][ T271] ? ext4_da_release_space+0x420/0x420 [ 75.065271][ T271] ext4_page_mkwrite+0xb02/0x12f0 [ 75.070343][ T271] ? __schedule+0xc0b/0x13e0 [ 75.074957][ T271] ? ext4_change_inode_journal_flag+0x5e0/0x5e0 [ 75.081231][ T271] ? __kasan_check_write+0x14/0x20 [ 75.086370][ T271] ? __switch_to+0x53e/0x10a0 [ 75.091067][ T271] wp_page_shared+0x45f/0x740 [ 75.095755][ T271] do_wp_page+0xb68/0xd00 [ 75.100288][ T271] handle_pte_fault+0xbc3/0x3910 [ 75.105239][ T271] handle_mm_fault+0xf86/0x1720 [ 75.110116][ T271] ? can_reuse_spf_vma+0xe0/0xe0 [ 75.115202][ T271] ? preempt_schedule_irq+0xca/0x120 [ 75.120547][ T271] ? __kasan_check_write+0x14/0x20 [ 75.125675][ T271] ? down_read_trylock+0x106/0x160 [ 75.130812][ T271] ? __init_rwsem+0x1c0/0x1c0 [ 75.135505][ T271] ? vmacache_update+0xb7/0x120 [ 75.140377][ T271] ? find_vma+0x13b/0x150 [ 75.144724][ T271] do_user_addr_fault+0x576/0xe20 [ 75.149775][ T271] ? do_kern_addr_fault+0x80/0x80 [ 75.154813][ T271] ? __kasan_check_read+0x11/0x20 [ 75.159886][ T271] ? asm_sysvec_reschedule_ipi+0xa/0x20 [ 75.165446][ T271] exc_page_fault+0x5a/0xc0 [ 75.169986][ T271] ? asm_exc_page_fault+0x8/0x30 [ 75.174935][ T271] asm_exc_page_fault+0x1e/0x30 [ 75.179811][ T271] RIP: 0033:0x7f04b8d87023 [ 75.184246][ T271] Code: 85 0e 01 00 00 be 04 00 00 00 48 89 df e8 45 b9 fe ff 48 8b 43 40 83 43 30 04 48 89 df be 08 00 00 00 48 8d 50 fc 48 89 53 40 <89> 68 fc 8b 6b 30 e8 22 b9 fe ff 48 8b 43 48 be 06 00 00 00 89 28 [ 75.203910][ T271] RSP: 002b:00007ffc5c375b00 EFLAGS: 00010216 [ 75.210002][ T271] RAX: 00007f04b3d0f4d4 RBX: 00007ffc5c375c30 RCX: 0000000000000000 [ 75.218010][ T271] RDX: 00007f04b3d0f4d0 RSI: 0000000000000008 RDI: 00007ffc5c375c30 [ 75.226021][ T271] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 75.234022][ T271] R10: 00007ffc5c375c10 R11: 0000000000000000 R12: 0000000000000000 [ 75.242016][ T271] R13: 0000000000007b2c R14: ffffffffffff84d4 R15: 0000000000000000 [ 75.250013][ T271] ---[ end trace 2784efc4012632f0 ]--- [ 75.587280][ T271] ------------[ cut here ]------------ [ 75.592851][ T271] bdi-(unknown) not registered [ 75.597833][ T271] WARNING: CPU: 1 PID: 271 at fs/fs-writeback.c:2321 __mark_inode_dirty+0x650/0x960 [ 75.606296][ T296] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 75.607308][ T271] Modules linked in: [ 75.618646][ T271] CPU: 1 PID: 271 Comm: syz-executor Tainted: G W syzkaller #0 [ 75.627600][ T271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 75.637780][ T271] RIP: 0010:__mark_inode_dirty+0x650/0x960 [ 75.643590][ T271] Code: fc ff df 41 80 7c 05 00 00 74 08 4c 89 ff e8 a7 f4 ec ff 49 8b 3f e8 0f af de ff 48 c7 c7 e0 61 29 85 48 89 c6 e8 70 c0 c6 02 <0f> 0b e9 2f fe ff ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 8e fc ff [ 75.663290][ T271] RSP: 0000:ffffc90000b277d8 EFLAGS: 00010246 [ 75.669474][ T271] RAX: 8bc37ed0025cbc00 RBX: 1ffff110234804b4 RCX: ffff88811dbfa780 [ 75.677531][ T271] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 75.685515][ T271] RBP: ffffc90000b27820 R08: ffffc90000b27167 R09: fffff52000164e60 [ 75.693563][ T271] R10: dffffc0000000000 R11: fffff52000164e2d R12: ffff88810aab4068 [ 75.701559][ T271] R13: 1ffff1102155680c R14: 0000000000000000 R15: ffff88810aab4060 [ 75.709556][ T271] FS: 0000555578874500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 75.718503][ T271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.725094][ T271] CR2: 00007f04b4517000 CR3: 000000011dcf4000 CR4: 00000000003506a0 [ 75.733104][ T271] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.741132][ T271] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.749127][ T271] Call Trace: [ 75.752436][ T271] mark_buffer_dirty+0x21b/0x330 [ 75.757415][ T271] __block_commit_write+0x1ab/0x240 [ 75.762622][ T271] block_page_mkwrite+0x239/0x270 [ 75.767686][ T271] ? ext4_da_release_space+0x420/0x420 [ 75.773153][ T271] ext4_page_mkwrite+0xb02/0x12f0 [ 75.778271][ T271] ? ext4_change_inode_journal_flag+0x5e0/0x5e0 [ 75.784524][ T271] wp_page_shared+0x45f/0x740 [ 75.789243][ T271] do_wp_page+0xb68/0xd00 [ 75.793597][ T271] handle_pte_fault+0xbc3/0x3910 [ 75.798620][ T271] handle_mm_fault+0xf86/0x1720 [ 75.803485][ T271] ? fsnotify_clear_child_dentry_flag+0xe0/0xe0 [ 75.809782][ T271] ? can_reuse_spf_vma+0xe0/0xe0 [ 75.814727][ T271] ? vfs_write+0xaeb/0xd70 [ 75.819169][ T271] ? __kasan_check_write+0x14/0x20 [ 75.824301][ T271] ? down_read_trylock+0x106/0x160 [ 75.829462][ T271] ? __init_rwsem+0x1c0/0x1c0 [ 75.834147][ T271] ? vmacache_update+0xb7/0x120 [ 75.839027][ T271] ? find_vma+0x13b/0x150 [ 75.843372][ T271] do_user_addr_fault+0x576/0xe20 [ 75.848444][ T271] ? do_kern_addr_fault+0x80/0x80 [ 75.853492][ T271] ? debug_smp_processor_id+0x17/0x20 [ 75.858902][ T271] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 75.864981][ T271] exc_page_fault+0x5a/0xc0 [ 75.869513][ T271] ? asm_exc_page_fault+0x8/0x30 [ 75.874474][ T271] asm_exc_page_fault+0x1e/0x30 [ 75.879365][ T271] RIP: 0033:0x7f04b8e83dd6 [ 75.883805][ T271] Code: 81 fa 80 00 00 00 76 ad c5 fe 6f 56 40 c5 fe 6f 5e 60 c5 fe 6f 64 16 e0 c5 fe 6f 6c 16 c0 c5 fe 6f 74 16 a0 c5 fe 6f 7c 16 80 fe 7f 07 c5 fe 7f 4f 20 c5 fe 7f 57 40 c5 fe 7f 5f 60 c5 fe 7f [ 75.903627][ T271] RSP: 002b:00007ffc5c375cd8 EFLAGS: 00010202 [ 75.909743][ T271] RAX: 00007f04b4517000 RBX: 0000555578888230 RCX: 0000000000000003 [ 75.917739][ T271] RDX: 00000000000000d8 RSI: 00005555788888b0 RDI: 00007f04b4517000 [ 75.925727][ T271] RBP: 00007ffc5c375cf0 R08: 00007f04b9107e20 R09: 0000000000000000 [ 75.933736][ T271] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555578889190 [ 75.941731][ T271] R13: 0000000000000008 R14: 0000000000000001 R15: 0000000000000000 [ 75.949727][ T271] ---[ end trace 2784efc4012632f1 ]--- [ 76.096250][ T296] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 76.679076][ T1343] EXT4-fs (loop2): Ignoring removed orlov option [ 76.685676][ T1343] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 76.758126][ T1343] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 76.768528][ T1343] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.776403][ T1343] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.341: inode #1: comm syz.2.341: iget: illegal inode # [ 76.790280][ T1343] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.341: error while reading EA inode 1 err=-117 [ 77.175298][ T1343] EXT4-fs (loop2): 1 orphan inode deleted [ 77.181101][ T1343] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000954,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000000,orlov,inode_readahead_blks=0x0000000000008000,,errors=continue [ 77.205466][ T1343] EXT4-fs error (device loop2): ext4_iget_extra_inode:4692: inode #12: comm syz.2.341: corrupted in-inode xattr [ 77.217617][ T1343] incfs: Error accessing: ./file0. [ 77.222786][ T1343] incfs: mount failed -117 [ 77.227780][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #259: comm udevd: reading directory lblock 0 [ 77.239264][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #264: comm udevd: reading directory lblock 0 [ 77.250757][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #264: comm udevd: reading directory lblock 0 [ 77.262201][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #264: comm udevd: reading directory lblock 0 [ 77.332413][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 77.343280][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.386092][ T296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.399042][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.415859][ T296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.434069][ T296] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 77.448056][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 77.496302][ T5] usb 5-1: string descriptor 0 read error: -71 [ 77.502613][ T296] usb 4-1: string descriptor 0 read error: -71 [ 77.509315][ T5] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 77.522848][ T296] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 77.534249][ T5] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 77.542871][ T296] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 77.548642][ T1361] xt_CT: No such helper "netbios-ns" [ 77.558817][ T1361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3594 sclass=netlink_route_socket pid=1361 comm=syz.4.344 [ 77.570804][ T296] usb 4-1: config 0 descriptor?? [ 77.577015][ T5] usb 5-1: config 0 descriptor?? [ 77.596281][ T296] usb 4-1: can't set config #0, error -71 [ 77.602131][ T5] usb 5-1: can't set config #0, error -71 [ 77.613159][ T5] usb 5-1: USB disconnect, device number 5 [ 77.619216][ T337] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 77.627264][ T296] usb 4-1: USB disconnect, device number 4 [ 77.672184][ T1360] EXT4-fs (loop0): Test dummy encryption mode enabled [ 77.701732][ T1360] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 77.720306][ T1360] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 77.728626][ T1360] System zones: 0-5 [ 77.733646][ T1360] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008, [ 77.775132][ T1366] EXT4-fs (loop2): Test dummy encryption mode enabled [ 77.782577][ T1366] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 77.793261][ T1360] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 77.804976][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 77.804989][ T24] audit: type=1400 audit(1784913476.700:188): avc: denied { write } for pid=1359 comm="syz.0.348" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 77.832795][ T1366] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 77.840990][ T1366] System zones: 0-5 [ 77.845010][ T24] audit: type=1400 audit(1784913476.710:189): avc: denied { add_name } for pid=1359 comm="syz.0.348" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 77.866334][ T1366] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008, [ 77.889287][ T24] audit: type=1400 audit(1784913476.710:190): avc: denied { setattr } for pid=1359 comm="syz.0.348" name="work" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 77.911067][ T24] audit: type=1400 audit(1784913476.760:191): avc: denied { remove_name } for pid=1359 comm="syz.0.348" name="#1" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 77.933068][ T24] audit: type=1400 audit(1784913476.760:192): avc: denied { rename } for pid=1359 comm="syz.0.348" name="#1" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.954870][ T24] audit: type=1400 audit(1784913476.760:193): avc: denied { unlink } for pid=1359 comm="syz.0.348" name="#1" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.976875][ T24] audit: type=1400 audit(1784913476.760:194): avc: denied { unlink } for pid=1359 comm="syz.0.348" name="#2" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.987249][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.998777][ T24] audit: type=1400 audit(1784913476.800:195): avc: denied { remove_name } for pid=1359 comm="syz.0.348" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.031942][ T24] audit: type=1400 audit(1784913476.800:196): avc: denied { rename } for pid=1359 comm="syz.0.348" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.054314][ T24] audit: type=1400 audit(1784913476.800:197): avc: denied { unlink } for pid=1359 comm="syz.0.348" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.070455][ T337] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 78.100027][ T1376] overlayfs: conflicting lowerdir path [ 78.105692][ T337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.129988][ T337] usb 2-1: config 0 descriptor?? [ 78.200265][ T1380] xt_CT: No such helper "netbios-ns" [ 78.590112][ T1382] EXT4-fs (loop0): Test dummy encryption mode enabled [ 78.597232][ T1382] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 79.406405][ T1382] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 79.426929][ T1382] System zones: 0-5 [ 79.456365][ T1382] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008, [ 79.899154][ T1416] 9pnet: Insufficient options for proto=fd [ 80.578376][ T95] EXT4-fs error: 2 callbacks suppressed [ 80.578401][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #259: comm udevd: reading directory lblock 0 [ 80.736700][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #264: comm udevd: reading directory lblock 0 [ 80.772451][ T1425] xt_CT: No such helper "netbios-ns" [ 80.782771][ T1425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3594 sclass=netlink_route_socket pid=1425 comm=syz.1.363 [ 81.265822][ T179] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #121: comm crond: reading directory lblock 0 [ 81.288491][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #264: comm udevd: reading directory lblock 0 [ 81.305773][ T179] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #116: comm crond: reading directory lblock 0 [ 81.316529][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #264: comm udevd: reading directory lblock 0 [ 82.606618][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #1642: comm udevd: reading directory lblock 0 [ 82.620784][ T1442] device syzkaller0 entered promiscuous mode [ 82.626891][ T337] usbhid 2-1:0.0: can't add hid device: -71 [ 82.632988][ T337] usbhid: probe of 2-1:0.0 failed with error -71 [ 82.640391][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #1480: comm udevd: reading directory lblock 0 [ 82.702258][ T1442] tipc: Enabled bearer , priority 0 [ 82.710898][ T1442] tipc: Resetting bearer [ 82.718344][ T1441] tipc: Resetting bearer [ 82.724790][ T1441] tipc: Disabling bearer [ 82.770843][ T1433] EXT4-fs (loop4): Test dummy encryption mode enabled [ 82.787897][ T1433] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 82.830494][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 82.830508][ T24] audit: type=1400 audit(1784913481.730:204): avc: denied { append } for pid=1444 comm="syz.1.369" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 82.869337][ T1433] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 82.932738][ T1433] System zones: 0-5 [ 82.940564][ T1452] device syzkaller0 entered promiscuous mode [ 82.986870][ T1433] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008, [ 83.017306][ T1452] tipc: Enabled bearer , priority 0 [ 83.042668][ T1452] tipc: Resetting bearer [ 83.057688][ T1451] tipc: Resetting bearer [ 83.065586][ T1459] binder: 1455:1459 ioctl c0306201 0 returned -14 [ 83.096981][ T1451] tipc: Disabling bearer [ 83.107587][ T1459] : renamed from bond_slave_0 [ 83.180363][ T337] usb 2-1: USB disconnect, device number 10 [ 84.482794][ T1477] tipc: Enabled bearer , priority 0 [ 84.530261][ T1477] tipc: Resetting bearer [ 84.576953][ T1483] 9pnet: Insufficient options for proto=fd [ 84.591208][ T24] audit: type=1400 audit(1784913483.490:205): avc: denied { write } for pid=1485 comm="syz.2.383" name="/" dev="incremental-fs" ino=436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.637796][ T1476] tipc: Disabling bearer [ 84.657224][ T282] ------------[ cut here ]------------ [ 84.663003][ T282] WARNING: CPU: 1 PID: 282 at fs/inode.c:304 drop_nlink+0xc5/0x110 [ 84.672346][ T24] audit: type=1400 audit(1784913483.520:206): avc: denied { add_name } for pid=1485 comm="syz.2.383" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.693807][ T282] Modules linked in: [ 84.697892][ T282] CPU: 1 PID: 282 Comm: syz-executor Tainted: G W syzkaller #0 [ 84.706990][ T282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 84.784293][ T1493] device bridge0 entered promiscuous mode [ 84.827322][ T24] audit: type=1400 audit(1784913483.520:207): avc: denied { associate } for pid=1485 comm="syz.2.383" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.933968][ T282] RIP: 0010:drop_nlink+0xc5/0x110 [ 84.940763][ T282] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 33 fd f1 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 fb 85 b7 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 84.997064][ T282] RSP: 0018:ffffc90000c17cf8 EFLAGS: 00010293 [ 85.003179][ T282] RAX: ffffffff81ad1d65 RBX: ffff88810f7e8060 RCX: ffff888125ab2780 [ 85.011252][ T24] audit: type=1400 audit(1784913483.520:208): avc: denied { mounton } for pid=1485 comm="syz.2.383" path="/80/bus/file0" dev="incremental-fs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.045361][ T282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.055201][ T1499] binder: 1496:1499 ioctl c0306201 0 returned -14 [ 85.061863][ T1499] : renamed from bond_slave_0 [ 85.065664][ T282] RBP: ffffc90000c17d20 R08: 0000000000000003 R09: 0000000000000004 [ 85.088015][ T282] R10: dffffc0000000000 R11: fffff52000182f90 R12: dffffc0000000000 [ 85.097595][ T282] R13: 1ffff11021efd015 R14: ffff88810f7e80a8 R15: 0000000000000000 [ 85.105768][ T282] FS: 000055557f9d8500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 85.115173][ T282] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.122251][ T282] CR2: 00007feeb713bff8 CR3: 0000000125e1c000 CR4: 00000000003506b0 [ 85.130821][ T282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.146919][ T316] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 85.150088][ T282] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.162804][ T282] Call Trace: [ 85.176220][ T282] shmem_rmdir+0x5b/0x90 [ 85.180671][ T282] vfs_rmdir+0x1ab/0x3c0 [ 85.185039][ T282] incfs_kill_sb+0xf7/0x200 [ 85.199527][ T282] deactivate_locked_super+0xa0/0x100 [ 85.205719][ T282] deactivate_super+0xaf/0xe0 [ 85.210839][ T282] cleanup_mnt+0x44f/0x500 [ 85.215314][ T282] __cleanup_mnt+0x19/0x20 [ 85.219846][ T282] task_work_run+0x127/0x190 [ 85.224512][ T282] exit_to_user_mode_loop+0xcb/0xe0 [ 85.229967][ T282] exit_to_user_mode_prepare+0x76/0xa0 [ 85.235506][ T282] syscall_exit_to_user_mode+0x1d/0x40 [ 85.241288][ T282] do_syscall_64+0x3d/0x40 [ 85.245989][ T282] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 85.252109][ T282] RIP: 0033:0x7fd1a80ca0d7 [ 85.256647][ T282] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 85.276386][ T282] RSP: 002b:00007fff98669828 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 85.284883][ T282] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd1a80ca0d7 [ 85.293491][ T282] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff986698e0 [ 85.301576][ T282] RBP: 00007fff986698e0 R08: 00007fff9866a8e0 R09: 00000000ffffffff [ 85.309717][ T282] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff9866a970 [ 85.317772][ T282] R13: 00007fd1a815e30a R14: 0000000000014a6e R15: 00007fff9866a9b0 [ 85.325834][ T282] ---[ end trace 2784efc4012632f2 ]--- [ 85.331416][ T282] ================================================================== [ 85.339511][ T282] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 85.345762][ T282] Write of size 4 at addr 0000000000000170 by task syz-executor/282 [ 85.353744][ T282] [ 85.356101][ T282] CPU: 0 PID: 282 Comm: syz-executor Tainted: G W syzkaller #0 [ 85.364955][ T282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 85.375027][ T282] Call Trace: [ 85.378334][ T282] __dump_stack+0x21/0x24 [ 85.382682][ T282] dump_stack_lvl+0x1a7/0x208 [ 85.387377][ T282] ? thaw_kernel_threads+0x220/0x220 [ 85.392678][ T282] ? show_regs_print_info+0x18/0x18 [ 85.397889][ T282] ? _raw_spin_lock+0x94/0xf0 [ 85.402604][ T282] ? _raw_spin_trylock_bh+0x150/0x150 [ 85.407994][ T282] ? ihold+0x20/0x60 [ 85.411902][ T282] kasan_report+0xbd/0x140 [ 85.416338][ T282] ? ihold+0x20/0x60 [ 85.420336][ T282] kasan_check_range+0x249/0x2a0 [ 85.425284][ T282] __kasan_check_write+0x14/0x20 [ 85.430251][ T282] ihold+0x20/0x60 [ 85.433993][ T282] vfs_rmdir+0x2d5/0x3c0 [ 85.438246][ T282] incfs_kill_sb+0xf7/0x200 [ 85.442769][ T282] deactivate_locked_super+0xa0/0x100 [ 85.448154][ T282] deactivate_super+0xaf/0xe0 [ 85.452842][ T282] cleanup_mnt+0x44f/0x500 [ 85.457365][ T282] __cleanup_mnt+0x19/0x20 [ 85.461794][ T282] task_work_run+0x127/0x190 [ 85.466394][ T282] exit_to_user_mode_loop+0xcb/0xe0 [ 85.471609][ T282] exit_to_user_mode_prepare+0x76/0xa0 [ 85.477080][ T282] syscall_exit_to_user_mode+0x1d/0x40 [ 85.482562][ T282] do_syscall_64+0x3d/0x40 [ 85.487168][ T282] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 85.493071][ T282] RIP: 0033:0x7fd1a80ca0d7 [ 85.497503][ T282] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 85.517118][ T282] RSP: 002b:00007fff98669828 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 85.525548][ T282] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd1a80ca0d7 [ 85.533538][ T282] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff986698e0 [ 85.541533][ T282] RBP: 00007fff986698e0 R08: 00007fff9866a8e0 R09: 00000000ffffffff [ 85.549521][ T282] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff9866a970 [ 85.557509][ T282] R13: 00007fd1a815e30a R14: 0000000000014a6e R15: 00007fff9866a9b0 [ 85.565500][ T282] ================================================================== [ 85.573580][ T282] Disabling lock debugging due to kernel taint [ 85.580322][ T282] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 85.588143][ T282] #PF: supervisor write access in kernel mode [ 85.594207][ T282] #PF: error_code(0x0002) - not-present page [ 85.600197][ T282] PGD 128eb6067 P4D 128eb6067 PUD 0 [ 85.605497][ T282] Oops: 0002 [#1] PREEMPT SMP KASAN [ 85.610704][ T282] CPU: 0 PID: 282 Comm: syz-executor Tainted: G B W syzkaller #0 [ 85.619640][ T282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 85.629713][ T282] RIP: 0010:ihold+0x26/0x60 [ 85.634219][ T282] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 11 7e b7 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 20 f5 f1 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 91 [ 85.653939][ T282] RSP: 0018:ffffc90000c17d38 EFLAGS: 00010246 [ 85.660010][ T282] RAX: ffff888125ab2700 RBX: 0000000000000000 RCX: ffff888125ab2780 [ 85.667988][ T282] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 00000000ffffffff [ 85.675974][ T282] RBP: ffffc90000c17d48 R08: 0000000000000003 R09: 0000000000000004 [ 85.683947][ T282] R10: dffffc0000000000 R11: fffffbfff0dcf648 R12: dffffc0000000000 [ 85.691929][ T282] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 85.699910][ T282] FS: 000055557f9d8500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 85.708840][ T282] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.715427][ T282] CR2: 0000000000000170 CR3: 0000000125e1c000 CR4: 00000000003506b0 [ 85.723400][ T282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.731375][ T282] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.739351][ T282] Call Trace: [ 85.742685][ T282] vfs_rmdir+0x2d5/0x3c0 [ 85.746954][ T282] incfs_kill_sb+0xf7/0x200 [ 85.751468][ T282] deactivate_locked_super+0xa0/0x100 [ 85.756851][ T282] deactivate_super+0xaf/0xe0 [ 85.761538][ T282] cleanup_mnt+0x44f/0x500 [ 85.765959][ T282] __cleanup_mnt+0x19/0x20 [ 85.770397][ T282] task_work_run+0x127/0x190 [ 85.775013][ T282] exit_to_user_mode_loop+0xcb/0xe0 [ 85.780223][ T282] exit_to_user_mode_prepare+0x76/0xa0 [ 85.785686][ T282] syscall_exit_to_user_mode+0x1d/0x40 [ 85.791155][ T282] do_syscall_64+0x3d/0x40 [ 85.795609][ T282] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 85.801511][ T282] RIP: 0033:0x7fd1a80ca0d7 [ 85.805939][ T282] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 85.825562][ T282] RSP: 002b:00007fff98669828 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 85.834008][ T282] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd1a80ca0d7 [ 85.841991][ T282] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff986698e0 [ 85.849972][ T282] RBP: 00007fff986698e0 R08: 00007fff9866a8e0 R09: 00000000ffffffff [ 85.857949][ T282] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff9866a970 [ 85.866012][ T282] R13: 00007fd1a815e30a R14: 0000000000014a6e R15: 00007fff9866a9b0 [ 85.874101][ T282] Modules linked in: [ 85.878023][ T282] CR2: 0000000000000170 [ 85.882191][ T282] ---[ end trace 2784efc4012632f3 ]--- [ 85.887672][ T282] RIP: 0010:ihold+0x26/0x60 [ 85.892282][ T282] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 11 7e b7 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 20 f5 f1 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 91 [ 85.911895][ T282] RSP: 0018:ffffc90000c17d38 EFLAGS: 00010246 [ 85.917980][ T282] RAX: ffff888125ab2700 RBX: 0000000000000000 RCX: ffff888125ab2780 [ 85.925962][ T282] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 00000000ffffffff [ 85.933959][ T282] RBP: ffffc90000c17d48 R08: 0000000000000003 R09: 0000000000000004 [ 85.942084][ T282] R10: dffffc0000000000 R11: fffffbfff0dcf648 R12: dffffc0000000000 [ 85.950064][ T282] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 85.958048][ T282] FS: 000055557f9d8500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 85.966978][ T282] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.973576][ T282] CR2: 0000000000000170 CR3: 0000000125e1c000 CR4: 00000000003506b0 [ 85.981555][ T282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.989533][ T282] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.997508][ T282] Kernel panic - not syncing: Fatal exception [ 86.003862][ T282] Kernel Offset: disabled [ 86.008195][ T282] Rebooting in 86400 seconds..