last executing test programs: 1m11.403975783s ago: executing program 4 (id=29): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_freeze_timeout', 0x242, 0x145) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@deltaction={0x14, 0x31, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xfff3, 0xffff}, {0x8, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008880) sendmsg$nl_route_sched(r1, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) 1m10.012182901s ago: executing program 4 (id=33): rmdir(&(0x7f00000001c0)='./file0\x00') r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) unlink(&(0x7f0000000140)='./cgroup\x00') ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/80, &(0x7f0000000880)=""/91}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(0xffffffffffffffff, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0xffffffd7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x3fc}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xb000, 0x0, 0x401a932, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x9c28, 0x5}) 1m9.911692784s ago: executing program 4 (id=34): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0xffff, 0x0, 0x6859}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}]}, 0x44}}, 0x4008894) 1m9.856514065s ago: executing program 4 (id=35): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="7472a0c83daf8046a0c08dbf8444f35c5eb4592a436bd521efdd68ab48559be14c3a58f8d96a1635205fda1b76ce12669e65f2d990e6653bac925a6bc63579730a9c4e6f12fe6ec9450e50968c402a6698", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',k']) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001700)='/proc/consoles\x00', 0x0, 0x0) preadv(r5, &(0x7f0000003800)=[{&(0x7f0000003680)=""/119, 0x77}], 0x1, 0x7, 0x0) r6 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) r7 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r6, 0x0, 0x80) r10 = openat$cgroup_procs(r9, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000001c00), 0x12) r11 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet6_buf(r11, 0x29, 0x3d, &(0x7f0000000280)=""/166, &(0x7f0000000340)=0xa6) r12 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r12, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x98fd}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/65, 0x41}, {&(0x7f0000002640)=""/254, 0xfe}, {&(0x7f0000000280)=""/240, 0xf0}], 0x4}, 0x101}], 0x3, 0x20, 0x0) 1m8.905739864s ago: executing program 4 (id=40): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb005}, 0x4) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_emit_ethernet(0x36, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x8, 0x8, &(0x7f00000002c0)="fdff000000000200", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x50) 1m8.854113055s ago: executing program 4 (id=42): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_freeze_timeout', 0x242, 0x145) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@deltaction={0x14, 0x31, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x40000) sendmsg$nl_route_sched(r1, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) 52.606862139s ago: executing program 32 (id=42): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_freeze_timeout', 0x242, 0x145) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@deltaction={0x14, 0x31, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x40000) sendmsg$nl_route_sched(r1, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) 13.62683487s ago: executing program 3 (id=209): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file0\x00', 0x180c850, &(0x7f0000001100)=ANY=[@ANYBLOB='rodir,nonumtail=0,nonumtail=0,shortname=lower,rodir,iocharset=maciceland,shortname=win95,check=strict,codepage=863,rodir,utf8=0,iocharset=iso8859-3,\x00l'], 0x1, 0x387, &(0x7f0000000600)="$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") 9.21722015s ago: executing program 3 (id=219): write$binfmt_script(0xffffffffffffffff, &(0x7f00000030c0)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x30000, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 9.082822303s ago: executing program 3 (id=225): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f0000000200)=[@acquire, @acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) 9.045585054s ago: executing program 2 (id=227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="7472a0c83daf8046a0c08dbf8444f35c5eb4592a436bd521efdd68ab48559be14c3a58f8d96a1635205fda1b76ce12669e65f2d990e6653bac925a6bc63579730a9c4e6f12fe6ec9450e50968c402a6698", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',k']) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001700)='/proc/consoles\x00', 0x0, 0x0) preadv(r5, &(0x7f0000003800)=[{&(0x7f0000003680)=""/119, 0x77}], 0x1, 0x7, 0x0) r6 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) r7 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r6, 0x0, 0x80) r10 = openat$cgroup_procs(r9, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000001c00), 0x12) r11 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet6_buf(r11, 0x29, 0x3d, &(0x7f0000000280)=""/166, &(0x7f0000000340)=0xa6) recvmmsg(0xffffffffffffffff, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x98fd}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/65, 0x41}, {&(0x7f0000002640)=""/254, 0xfe}, {&(0x7f0000000280)=""/240, 0xf0}], 0x4}, 0x101}], 0x3, 0x20, 0x0) 8.779299309s ago: executing program 3 (id=229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="7472a0c83daf8046a0c08dbf8444f35c5eb4592a436bd521efdd68ab48559be14c3a58f8d96a1635205fda1b76ce12669e65f2d990e6653bac925a6bc63579730a9c4e6f12fe6ec9450e50968c402a6698", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',k']) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001700)='/proc/consoles\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) r5 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 7.77929409s ago: executing program 2 (id=230): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.494325668s ago: executing program 3 (id=233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x45c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x424, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_POLICE={0x418, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x2cc12c92, 0x3, 0x10, 0x2, 0x2, 0x2, 0xd, 0x5, 0x93, 0x7, 0x100, 0xff, 0x3, 0x5, 0xbde9, 0x9, 0xb5e5, 0x0, 0x7, 0x80, 0x4, 0x8, 0xc, 0x8, 0x4, 0x2, 0x2007, 0x7, 0x6, 0x4, 0xe1, 0x81, 0x4, 0x8, 0x6, 0x3ff, 0x3, 0x1, 0x8, 0x30000, 0x7, 0xfffffffb, 0x6, 0x0, 0x10, 0x9d82, 0xa95, 0x9, 0x8, 0x3, 0x0, 0x4, 0x6, 0xf1, 0x4, 0xc, 0x101, 0xa0, 0xf, 0x5, 0x8000, 0x6, 0x7f, 0x4, 0x9, 0x8, 0x4, 0xfe, 0x7, 0x0, 0x1ff, 0x800, 0x4, 0x2800, 0x7, 0x80000000, 0x2, 0x5, 0x7, 0xa, 0xf, 0x9, 0x460, 0x1, 0xd, 0x7, 0x5, 0x82d1, 0xffff, 0xffffff46, 0x64d, 0x7fd3, 0x0, 0x0, 0x4c, 0x7, 0x1, 0x6, 0x2, 0x2, 0x7, 0x913a, 0x1, 0xc, 0x0, 0x4, 0x7fffffff, 0x4, 0x1, 0x81, 0x3, 0x400, 0x7, 0xfffffffc, 0xa2a5, 0x3, 0xb64, 0x0, 0x8, 0xf, 0xfffffc00, 0xa, 0xb, 0x9, 0x80000001, 0x8, 0xcc, 0x1e1, 0xfffffffa, 0x3, 0x8, 0x8, 0x4, 0x670e, 0xf, 0x8001, 0x8001, 0x4fe35db7, 0x2, 0xa474, 0x8, 0x980, 0x9, 0xb8ec, 0x1, 0x4, 0x6, 0x0, 0x800, 0x6, 0x0, 0xfffffffb, 0x4fe, 0x7fff, 0x3de, 0x6e, 0x2, 0x4, 0x4, 0x0, 0x3, 0xbb49, 0x6, 0x80000001, 0x5, 0xa0, 0x9, 0x2, 0x8, 0xe2a, 0x7ff, 0x156fed0d, 0x40, 0x3ff, 0x3, 0x80000001, 0x7ff, 0x0, 0x89d, 0x3, 0xb, 0xc, 0x9, 0xe9, 0x6, 0x77, 0x7, 0x4, 0x3, 0x3, 0x2, 0x4, 0x6, 0x5, 0x3, 0x3, 0x7, 0x3, 0xfffffff8, 0x4, 0xfffffffa, 0x1002, 0x1ff, 0x5, 0x7, 0x0, 0x80, 0x1, 0x3, 0x9, 0x61d8, 0x7d3, 0x4, 0x9, 0x2, 0x66962822, 0x7, 0x9, 0xffff, 0x100, 0x9, 0x349, 0x1, 0x4, 0x9, 0x3, 0x1ff, 0xfffffff8, 0x6, 0x80000000, 0x1000, 0x2, 0x9, 0xdf45, 0x2, 0x6, 0x3, 0x4, 0x7fffffff, 0x2e, 0x3, 0xf4, 0x900000, 0x400000, 0x4, 0x7fff, 0x6, 0x1, 0x8, 0xff, 0x5f6, 0xacd, 0xfffffffa, 0x9]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x45c}, 0x1, 0x0, 0x0, 0xc804}, 0x0) 4.193966884s ago: executing program 3 (id=234): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x4, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000063f9ffbf00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x216c, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) futex(&(0x7f0000000040), 0x5, 0x1, 0x0, &(0x7f0000000140)=0x4, 0xc4fffffd) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0xa4000021) read(r2, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0xc03, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x60, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) readv(r4, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/68, 0x44}, {&(0x7f0000000140)=""/188, 0xbc}, {&(0x7f00000002c0)=""/244, 0xf4}, {&(0x7f00000003c0)=""/218, 0xda}, {&(0x7f00000004c0)=""/25, 0x19}, {&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f0000000780)=""/27, 0x1b}], 0x8) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, 0x0) 3.747813723s ago: executing program 2 (id=236): write$binfmt_script(0xffffffffffffffff, &(0x7f00000030c0)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x30000, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 3.731647673s ago: executing program 0 (id=238): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x4890) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000040)) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000600)={0x15, 0x65, 0xffff, 0x1d1f, 0x8, '9P2000.L'}, 0x15) 3.678364644s ago: executing program 1 (id=240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="7472a0c83daf8046a0c08dbf8444f35c5eb4592a436bd521efdd68ab48559be14c3a58f8d96a1635205fda1b76ce12669e65f2d990e6653bac925a6bc63579730a9c4e6f12fe6ec9450e50968c402a6698", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',k']) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001700)='/proc/consoles\x00', 0x0, 0x0) preadv(r5, &(0x7f0000003800)=[{&(0x7f0000003680)=""/119, 0x77}], 0x1, 0x7, 0x0) r6 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) r7 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r6, 0x0, 0x80) r10 = openat$cgroup_procs(r9, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000001c00), 0x12) r11 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet6_buf(r11, 0x29, 0x3d, &(0x7f0000000280)=""/166, &(0x7f0000000340)=0xa6) recvmmsg(0xffffffffffffffff, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x98fd}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/65, 0x41}, {&(0x7f0000002640)=""/254, 0xfe}, {&(0x7f0000000280)=""/240, 0xf0}], 0x4}, 0x101}], 0x3, 0x20, 0x0) 3.663095155s ago: executing program 5 (id=241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800cde163ee00000000000e00000000b7080000000000007b8af8ff00001400b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70201258163000800000018230000", @ANYRESDEC=r0, @ANYBLOB="000000000000006b090500000849c8025a000000a50000009500"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000380)={r0, 0x0, 0x21c0, 0x0, 0x3, 0x0, &(0x7f0000000340)=0xfffffffa}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.640389175s ago: executing program 2 (id=242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1477, 0x1007, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x20, 0x4}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x43f}}, {0x0, 0x0}, {0x0, 0x0}, {0xcc, &(0x7f0000000400)=@string={0xcc, 0x3, "7504fb54dcf0ed4207147781e1f8f41bf4195414738940368a7bb752e0e2de360e3a242dc9a9da7adcff6c9462bb746aee27d89de84eb6b7a078565b3779a8f3e74fa5cbd475ade7059d3f6f523773f7f264fede0adde243e428a7f1bdcbb871a0e9fe35bb6db24fa512ee9c017c99e2e49813cb129853fd0a625ff1aa027a43694b890054bae3bebbccfa5bf8472d2ebc32a004ba3510a527ba28ec60442cee2673e71a6c00d5223bf57a110de4af0209fefd0531f09d90125c3e4c42cf25b400abc4bd7eb25de73edc"}}]}) move_mount(r4, &(0x7f00000000c0)='./mnt\x00', r4, &(0x7f0000000100)='./mnt\x00', 0x137) socket$netlink(0x10, 0x3, 0x13) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x405, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x15, &(0x7f0000000040)={@mcast1}, 0x14) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r8, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/4082, 0xff2}, {&(0x7f0000001ac0)=""/14, 0xe}, {0x0, 0x18}], 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001200)) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x45c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x424, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_POLICE={0x418, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x2cc12c92, 0x3, 0x10, 0x2, 0x2, 0x2, 0xd, 0x5, 0x93, 0x7, 0x100, 0xff, 0x3, 0x5, 0xbde9, 0x9, 0xb5e5, 0x0, 0x7, 0x80, 0x4, 0x8, 0xc, 0x8, 0x4, 0x2, 0x2007, 0x7, 0x6, 0x4, 0xe1, 0x81, 0x4, 0x8, 0x6, 0x3ff, 0x3, 0x1, 0x8, 0x30000, 0x7, 0xfffffffb, 0x6, 0x0, 0x10, 0x9d82, 0xa95, 0x9, 0x8, 0x3, 0x0, 0x4, 0x6, 0xf1, 0x4, 0xc, 0x101, 0xa0, 0xf, 0x5, 0x8000, 0x6, 0x7f, 0x4, 0x9, 0x8, 0x4, 0xfe, 0x7, 0x0, 0x1ff, 0x800, 0x4, 0x2800, 0x7, 0x80000000, 0x2, 0x5, 0x7, 0xa, 0xf, 0x9, 0x460, 0x1, 0xd, 0x7, 0x5, 0x82d1, 0xffff, 0xffffff46, 0x64d, 0x7fd3, 0x0, 0x0, 0x4c, 0x7, 0x1, 0x6, 0x2, 0x2, 0x7, 0x913a, 0x1, 0xc, 0x0, 0x4, 0x7fffffff, 0x4, 0x1, 0x81, 0x3, 0x400, 0x7, 0xfffffffc, 0xa2a5, 0x3, 0xb64, 0x0, 0x8, 0xf, 0xfffffc00, 0xa, 0xb, 0x9, 0x80000001, 0x8, 0xcc, 0x1e1, 0xfffffffa, 0x3, 0x8, 0x8, 0x4, 0x670e, 0xf, 0x8001, 0x8001, 0x4fe35db7, 0x2, 0xa474, 0x8, 0x980, 0x9, 0xb8ec, 0x1, 0x4, 0x6, 0x0, 0x800, 0x6, 0x0, 0xfffffffb, 0x4fe, 0x7fff, 0x3de, 0x6e, 0x2, 0x4, 0x4, 0x0, 0x3, 0xbb49, 0x6, 0x80000001, 0x5, 0xa0, 0x9, 0x2, 0x8, 0xe2a, 0x7ff, 0x156fed0d, 0x40, 0x3ff, 0x3, 0x80000001, 0x7ff, 0x0, 0x89d, 0x3, 0xb, 0xc, 0x9, 0xe9, 0x6, 0x77, 0x7, 0x4, 0x3, 0x3, 0x2, 0x4, 0x6, 0x5, 0x3, 0x3, 0x7, 0x3, 0xfffffff8, 0x4, 0xfffffffa, 0x1002, 0x1ff, 0x5, 0x7, 0x0, 0x80, 0x1, 0x3, 0x9, 0x61d8, 0x7d3, 0x4, 0x9, 0x2, 0x66962822, 0x7, 0x9, 0xffff, 0x100, 0x9, 0x349, 0x1, 0x4, 0x9, 0x3, 0x1ff, 0xfffffff8, 0x6, 0x80000000, 0x1000, 0x2, 0x9, 0xdf45, 0x2, 0x6, 0x3, 0x4, 0x7fffffff, 0x2e, 0x3, 0xf4, 0x900000, 0x400000, 0x4, 0x7fff, 0x6, 0x1, 0x8, 0xff, 0x5f6, 0xacd, 0xfffffffa, 0x9]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x45c}, 0x1, 0x0, 0x0, 0xc804}, 0x0) 3.547050327s ago: executing program 5 (id=243): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_freeze_timeout', 0x242, 0x145) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@deltaction={0x14, 0x31, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xfff3, 0xffff}, {0x8, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008880) sendmsg$nl_route_sched(r1, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) 2.278726333s ago: executing program 1 (id=244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x45c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x424, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_POLICE={0x418, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x2cc12c92, 0x3, 0x10, 0x2, 0x2, 0x2, 0xd, 0x5, 0x93, 0x7, 0x100, 0xff, 0x3, 0x5, 0xbde9, 0x9, 0xb5e5, 0x0, 0x7, 0x80, 0x4, 0x8, 0xc, 0x8, 0x4, 0x2, 0x2007, 0x7, 0x6, 0x4, 0xe1, 0x81, 0x4, 0x8, 0x6, 0x3ff, 0x3, 0x1, 0x8, 0x30000, 0x7, 0xfffffffb, 0x6, 0x0, 0x10, 0x9d82, 0xa95, 0x9, 0x8, 0x3, 0x0, 0x4, 0x6, 0xf1, 0x4, 0xc, 0x101, 0xa0, 0xf, 0x5, 0x8000, 0x6, 0x7f, 0x4, 0x9, 0x8, 0x4, 0xfe, 0x7, 0x0, 0x1ff, 0x800, 0x4, 0x2800, 0x7, 0x80000000, 0x2, 0x5, 0x7, 0xa, 0xf, 0x9, 0x460, 0x1, 0xd, 0x7, 0x5, 0x82d1, 0xffff, 0xffffff46, 0x64d, 0x7fd3, 0x0, 0x0, 0x4c, 0x7, 0x1, 0x6, 0x2, 0x2, 0x7, 0x913a, 0x1, 0xc, 0x0, 0x4, 0x7fffffff, 0x4, 0x1, 0x81, 0x3, 0x400, 0x7, 0xfffffffc, 0xa2a5, 0x3, 0xb64, 0x0, 0x8, 0xf, 0xfffffc00, 0xa, 0xb, 0x9, 0x80000001, 0x8, 0xcc, 0x1e1, 0xfffffffa, 0x3, 0x8, 0x8, 0x4, 0x670e, 0xf, 0x8001, 0x8001, 0x4fe35db7, 0x2, 0xa474, 0x8, 0x980, 0x9, 0xb8ec, 0x1, 0x4, 0x6, 0x0, 0x800, 0x6, 0x0, 0xfffffffb, 0x4fe, 0x7fff, 0x3de, 0x6e, 0x2, 0x4, 0x4, 0x0, 0x3, 0xbb49, 0x6, 0x80000001, 0x5, 0xa0, 0x9, 0x2, 0x8, 0xe2a, 0x7ff, 0x156fed0d, 0x40, 0x3ff, 0x3, 0x80000001, 0x7ff, 0x0, 0x89d, 0x3, 0xb, 0xc, 0x9, 0xe9, 0x6, 0x77, 0x7, 0x4, 0x3, 0x3, 0x2, 0x4, 0x6, 0x5, 0x3, 0x3, 0x7, 0x3, 0xfffffff8, 0x4, 0xfffffffa, 0x1002, 0x1ff, 0x5, 0x7, 0x0, 0x80, 0x1, 0x3, 0x9, 0x61d8, 0x7d3, 0x4, 0x9, 0x2, 0x66962822, 0x7, 0x9, 0xffff, 0x100, 0x9, 0x349, 0x1, 0x4, 0x9, 0x3, 0x1ff, 0xfffffff8, 0x6, 0x80000000, 0x1000, 0x2, 0x9, 0xdf45, 0x2, 0x6, 0x3, 0x4, 0x7fffffff, 0x2e, 0x3, 0xf4, 0x900000, 0x400000, 0x4, 0x7fff, 0x6, 0x1, 0x8, 0xff, 0x5f6, 0xacd, 0xfffffffa, 0x9]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x45c}, 0x1, 0x0, 0x0, 0xc804}, 0x0) 2.176602295s ago: executing program 1 (id=245): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x4004080) 1.775194633s ago: executing program 1 (id=246): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_freeze_timeout', 0x242, 0x145) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@deltaction={0x14, 0x31, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xfff3, 0xffff}, {0x8, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008880) sendmsg$nl_route_sched(r1, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) 1.298540733s ago: executing program 5 (id=247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="7472a0c83daf8046a0c08dbf8444f35c5eb4592a436bd521efdd68ab48559be14c3a58f8d96a1635205fda1b76ce12669e65f2d990e6653bac925a6bc63579730a9c4e6f12fe6ec9450e50968c402a6698", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',k']) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001700)='/proc/consoles\x00', 0x0, 0x0) preadv(r5, &(0x7f0000003800)=[{&(0x7f0000003680)=""/119, 0x77}], 0x1, 0x7, 0x0) r6 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) r7 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r6, 0x0, 0x80) r10 = openat$cgroup_procs(r9, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000001c00), 0x12) recvmmsg(0xffffffffffffffff, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x98fd}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/65, 0x41}, {&(0x7f0000002640)=""/254, 0xfe}, {&(0x7f0000000280)=""/240, 0xf0}], 0x4}, 0x101}], 0x3, 0x20, 0x0) 574.983928ms ago: executing program 5 (id=248): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x11, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000000000000000000feffffff8500000008000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000000500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 574.753728ms ago: executing program 0 (id=249): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 574.574088ms ago: executing program 5 (id=250): tgkill(0x0, 0x0, 0x21) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)={0x105002, 0x40, 0x1}, 0x18) fcntl$getown(r0, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004"], 0x50) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="140006"], 0x64}, 0x1, 0x0, 0x0, 0xc814}, 0x4000010) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) socket(0x840000000002, 0x3, 0xff) socket$inet6(0xa, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x4c00, 0x3) 574.492208ms ago: executing program 0 (id=251): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f0000000200)=[@acquire, @acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) 481.45436ms ago: executing program 0 (id=252): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f00000030c0)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x30000, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 481.19937ms ago: executing program 5 (id=253): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file0\x00', 0x180c850, &(0x7f0000001100)=ANY=[@ANYBLOB='rodir,nonumtail=0,nonumtail=0,shortname=lower,rodir,iocharset=maciceland,shortname=win95,check=strict,codepage=863,rodir,utf8=0,iocharset=iso8859-3,\x00l'], 0x1, 0x387, &(0x7f0000000600)="$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") 386.619102ms ago: executing program 0 (id=254): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x11, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000000000000000000feffffff8500000008000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000000500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pread64(r1, &(0x7f0000000380)=""/180, 0xb4, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 386.197212ms ago: executing program 0 (id=255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="7472a0c83daf8046a0c08dbf8444f35c5eb4592a436bd521efdd68ab48559be14c3a58f8d96a1635205fda1b76ce12669e65f2d990e6653bac925a6bc63579730a9c4e6f12fe6ec9450e50968c402a6698", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',k']) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001700)='/proc/consoles\x00', 0x0, 0x0) preadv(r5, &(0x7f0000003800)=[{&(0x7f0000003680)=""/119, 0x77}], 0x1, 0x7, 0x0) r6 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) r7 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r6, 0x0, 0x80) r10 = openat$cgroup_procs(r9, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000001c00), 0x12) r11 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet6_buf(r11, 0x29, 0x3d, &(0x7f0000000280)=""/166, &(0x7f0000000340)=0xa6) recvmmsg(0xffffffffffffffff, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x98fd}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/65, 0x41}, {&(0x7f0000002640)=""/254, 0xfe}, {&(0x7f0000000280)=""/240, 0xf0}], 0x4}, 0x101}], 0x3, 0x20, 0x0) 343.398172ms ago: executing program 2 (id=256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x45c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x424, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_POLICE={0x418, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x2cc12c92, 0x3, 0x10, 0x2, 0x2, 0x2, 0xd, 0x5, 0x93, 0x7, 0x100, 0xff, 0x3, 0x5, 0xbde9, 0x9, 0xb5e5, 0x0, 0x7, 0x80, 0x4, 0x8, 0xc, 0x8, 0x4, 0x2, 0x2007, 0x7, 0x6, 0x4, 0xe1, 0x81, 0x4, 0x8, 0x6, 0x3ff, 0x3, 0x1, 0x8, 0x30000, 0x7, 0xfffffffb, 0x6, 0x0, 0x10, 0x9d82, 0xa95, 0x9, 0x8, 0x3, 0x0, 0x4, 0x6, 0xf1, 0x4, 0xc, 0x101, 0xa0, 0xf, 0x5, 0x8000, 0x6, 0x7f, 0x4, 0x9, 0x8, 0x4, 0xfe, 0x7, 0x0, 0x1ff, 0x800, 0x4, 0x2800, 0x7, 0x80000000, 0x2, 0x5, 0x7, 0xa, 0xf, 0x9, 0x460, 0x1, 0xd, 0x7, 0x5, 0x82d1, 0xffff, 0xffffff46, 0x64d, 0x7fd3, 0x0, 0x0, 0x4c, 0x7, 0x1, 0x6, 0x2, 0x2, 0x7, 0x913a, 0x1, 0xc, 0x0, 0x4, 0x7fffffff, 0x4, 0x1, 0x81, 0x3, 0x400, 0x7, 0xfffffffc, 0xa2a5, 0x3, 0xb64, 0x0, 0x8, 0xf, 0xfffffc00, 0xa, 0xb, 0x9, 0x80000001, 0x8, 0xcc, 0x1e1, 0xfffffffa, 0x3, 0x8, 0x8, 0x4, 0x670e, 0xf, 0x8001, 0x8001, 0x4fe35db7, 0x2, 0xa474, 0x8, 0x980, 0x9, 0xb8ec, 0x1, 0x4, 0x6, 0x0, 0x800, 0x6, 0x0, 0xfffffffb, 0x4fe, 0x7fff, 0x3de, 0x6e, 0x2, 0x4, 0x4, 0x0, 0x3, 0xbb49, 0x6, 0x80000001, 0x5, 0xa0, 0x9, 0x2, 0x8, 0xe2a, 0x7ff, 0x156fed0d, 0x40, 0x3ff, 0x3, 0x80000001, 0x7ff, 0x0, 0x89d, 0x3, 0xb, 0xc, 0x9, 0xe9, 0x6, 0x77, 0x7, 0x4, 0x3, 0x3, 0x2, 0x4, 0x6, 0x5, 0x3, 0x3, 0x7, 0x3, 0xfffffff8, 0x4, 0xfffffffa, 0x1002, 0x1ff, 0x5, 0x7, 0x0, 0x80, 0x1, 0x3, 0x9, 0x61d8, 0x7d3, 0x4, 0x9, 0x2, 0x66962822, 0x7, 0x9, 0xffff, 0x100, 0x9, 0x349, 0x1, 0x4, 0x9, 0x3, 0x1ff, 0xfffffff8, 0x6, 0x80000000, 0x1000, 0x2, 0x9, 0xdf45, 0x2, 0x6, 0x3, 0x4, 0x7fffffff, 0x2e, 0x3, 0xf4, 0x900000, 0x400000, 0x4, 0x7fff, 0x6, 0x1, 0x8, 0xff, 0x5f6, 0xacd, 0xfffffffa, 0x9]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x45c}, 0x1, 0x0, 0x0, 0xc804}, 0x0) 337.207183ms ago: executing program 1 (id=257): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x4004080) 311.112893ms ago: executing program 2 (id=258): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_freeze_timeout', 0x242, 0x145) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@deltaction={0x14, 0x31, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xfff3, 0xffff}, {0x8, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008880) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) 0s ago: executing program 1 (id=259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="7472a0c83daf8046a0c08dbf8444f35c5eb4592a436bd521efdd68ab48559be14c3a58f8d96a1635205fda1b76ce12669e65f2d990e6653bac925a6bc63579730a9c4e6f12fe6ec9450e50968c402a6698", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',k']) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001700)='/proc/consoles\x00', 0x0, 0x0) preadv(r5, &(0x7f0000003800)=[{&(0x7f0000003680)=""/119, 0x77}], 0x1, 0x7, 0x0) r6 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) r7 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r6, 0x0, 0x80) r10 = openat$cgroup_procs(r9, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000001c00), 0x12) recvmmsg(0xffffffffffffffff, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x98fd}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/65, 0x41}, {&(0x7f0000002640)=""/254, 0xfe}, {&(0x7f0000000280)=""/240, 0xf0}], 0x4}, 0x101}], 0x3, 0x20, 0x0) kernel console output (not intermixed with test programs): rocess permissive=1 [ 14.637422][ T28] audit: type=1400 audit(1782886951.966:63): avc: denied { siginh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts. [ 21.720721][ T28] audit: type=1400 audit(1782886959.056:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.724316][ T278] cgroup: Unknown subsys name 'net' [ 21.748664][ T28] audit: type=1400 audit(1782886959.056:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.771158][ T28] audit: type=1400 audit(1782886959.086:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.772063][ T278] cgroup: Unknown subsys name 'devices' [ 21.911794][ T278] cgroup: Unknown subsys name 'hugetlb' [ 21.917450][ T278] cgroup: Unknown subsys name 'rlimit' [ 22.022627][ T28] audit: type=1400 audit(1782886959.356:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.045856][ T28] audit: type=1400 audit(1782886959.356:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.070648][ T28] audit: type=1400 audit(1782886959.356:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.094801][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.103652][ T28] audit: type=1400 audit(1782886959.446:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.129057][ T28] audit: type=1400 audit(1782886959.446:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.170229][ T28] audit: type=1400 audit(1782886959.506:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.195827][ T28] audit: type=1400 audit(1782886959.506:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.195862][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.200213][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.207298][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.215062][ T287] device bridge_slave_0 entered promiscuous mode [ 23.225303][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.232405][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.240012][ T287] device bridge_slave_1 entered promiscuous mode [ 23.250810][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.257889][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.265466][ T286] device bridge_slave_0 entered promiscuous mode [ 23.275429][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.282657][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.290115][ T286] device bridge_slave_1 entered promiscuous mode [ 23.307353][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.314465][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.322032][ T288] device bridge_slave_0 entered promiscuous mode [ 23.332018][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.339078][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.346552][ T288] device bridge_slave_1 entered promiscuous mode [ 23.385175][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.392332][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.399917][ T290] device bridge_slave_0 entered promiscuous mode [ 23.407017][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.414219][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.421665][ T290] device bridge_slave_1 entered promiscuous mode [ 23.460449][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.467547][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.475264][ T289] device bridge_slave_0 entered promiscuous mode [ 23.485313][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.492599][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.500160][ T289] device bridge_slave_1 entered promiscuous mode [ 23.669207][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.676327][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.683680][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.690733][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.723001][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.730098][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.737418][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.744481][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.758765][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.765867][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.773187][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.780255][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.813848][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.820968][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.828249][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.835321][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.850380][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.857470][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.864777][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.871826][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.895028][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.902454][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.910146][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.917440][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.924793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.932568][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.940002][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.947262][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.954613][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.961903][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.969234][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.000571][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.008901][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.016565][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.025008][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.032102][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.040470][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.048656][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.055728][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.063144][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.071394][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.078417][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.085910][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.094196][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.101267][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.108640][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.116896][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.123945][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.131400][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.139673][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.146720][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.172730][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.181197][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.189270][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.198449][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.206724][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.214395][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.222152][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.230669][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.238821][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.245895][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.253397][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.261855][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.270116][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.277153][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.290093][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.298310][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.321608][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.330338][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.338314][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.345990][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.353709][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.362018][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.370117][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.378452][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.386870][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.393948][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.401603][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.410267][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.418567][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.425663][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.434058][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.442468][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.461168][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.469872][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.478182][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.486592][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.495682][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.504207][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.513882][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.522071][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.537909][ T286] device veth0_vlan entered promiscuous mode [ 24.544878][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.553053][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.561530][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.569059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.578947][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.594697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.602867][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.611095][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.619271][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.626936][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.642205][ T287] device veth0_vlan entered promiscuous mode [ 24.651687][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.661273][ T286] device veth1_macvtap entered promiscuous mode [ 24.674552][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.689380][ T289] device veth0_vlan entered promiscuous mode [ 24.698070][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.706308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.713931][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.721923][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.730504][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.738835][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.747500][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.756622][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.764752][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.777542][ T290] device veth0_vlan entered promiscuous mode [ 24.787637][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.795262][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.802938][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.811055][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.819219][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.827748][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.836210][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.843760][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.854843][ T287] device veth1_macvtap entered promiscuous mode [ 24.863812][ T288] device veth0_vlan entered promiscuous mode [ 24.871187][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.879462][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.887961][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.895908][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.904367][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.915226][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.938749][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.947513][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.947855][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 24.959047][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.971605][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.985267][ T289] device veth1_macvtap entered promiscuous mode [ 24.992922][ T290] device veth1_macvtap entered promiscuous mode [ 25.002775][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.010873][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.019192][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.042819][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.057998][ T288] device veth1_macvtap entered promiscuous mode [ 25.074286][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.082901][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.186182][ T317] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.210898][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.256654][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.266308][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.276496][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.306649][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.316826][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.371003][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.432130][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.443918][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.460541][ T324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 26.439581][ C0] sched: RT throttling activated [ 26.479141][ T341] loop0: detected capacity change from 0 to 128 [ 26.523819][ T341] ======================================================= [ 26.523819][ T341] WARNING: The mand mount option has been deprecated and [ 26.523819][ T341] and is ignored by this kernel. Remove the mand [ 26.523819][ T341] option from the mount to silence this warning. [ 26.523819][ T341] ======================================================= [ 26.562241][ T343] loop2: detected capacity change from 0 to 512 [ 26.570666][ T343] EXT4-fs: Ignoring removed orlov option [ 26.576696][ T341] EXT4-fs (loop0): Test dummy encryption mode enabled [ 26.591547][ T343] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 26.604742][ T343] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 26.620607][ T341] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 26.629437][ T341] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 26.642091][ T343] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 26.660766][ T343] EXT4-fs (loop2): 1 truncate cleaned up [ 26.666903][ T341] IPv6: NLM_F_REPLACE set, but no existing node found! [ 26.673032][ T343] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 26.775852][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 26.775875][ T28] audit: type=1400 audit(1782886964.076:126): avc: denied { create } for pid=346 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 26.826637][ T24] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 26.929493][ T28] audit: type=1400 audit(1782886964.096:127): avc: denied { bind } for pid=346 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 26.999111][ T28] audit: type=1400 audit(1782886964.106:128): avc: denied { append } for pid=346 comm="syz.4.9" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 27.029819][ T28] audit: type=1400 audit(1782886964.176:129): avc: denied { write } for pid=342 comm="syz.2.8" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.054786][ T28] audit: type=1400 audit(1782886964.176:130): avc: denied { add_name } for pid=342 comm="syz.2.8" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.097256][ T28] audit: type=1400 audit(1782886964.176:131): avc: denied { create } for pid=342 comm="syz.2.8" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 27.101445][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 27.140256][ T28] audit: type=1400 audit(1782886964.186:132): avc: denied { remove_name } for pid=342 comm="syz.2.8" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.170430][ T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 27.183707][ T28] audit: type=1400 audit(1782886964.186:133): avc: denied { rename } for pid=342 comm="syz.2.8" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.206045][ T28] audit: type=1400 audit(1782886964.186:134): avc: denied { unlink } for pid=342 comm="syz.2.8" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 27.249150][ T28] audit: type=1400 audit(1782886964.186:135): avc: denied { rename } for pid=342 comm="syz.2.8" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 27.250071][ T24] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 27.301760][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.309794][ T24] usb 4-1: Product: syz [ 27.314049][ T24] usb 4-1: Manufacturer: syz [ 27.318660][ T24] usb 4-1: SerialNumber: syz [ 27.711433][ T361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11'. [ 27.920593][ T290] EXT4-fs (loop2): unmounting filesystem. [ 28.665207][ T365] netlink: 172 bytes leftover after parsing attributes in process `syz.1.13'. [ 28.699349][ T365] loop1: detected capacity change from 0 to 256 [ 28.719660][ T350] Bluetooth: hci0: command 0x1003 tx timeout [ 28.734322][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 28.974761][ T373] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14'. [ 29.358917][ T287] EXT4-fs (loop0): unmounting filesystem. [ 30.055323][ T24] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 30.109320][ T24] usb 4-1: unit 6 not found! [ 30.290647][ T24] usb 4-1: USB disconnect, device number 2 [ 31.269675][ T398] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20'. [ 33.837935][ T401] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21'. [ 34.392842][ T387] syz.0.15 (387) used greatest stack depth: 22152 bytes left [ 34.455835][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.539646][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 34.539665][ T28] audit: type=1400 audit(1782886971.846:155): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 34.588333][ T409] loop1: detected capacity change from 0 to 512 [ 34.626955][ T409] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.657305][ T409] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 34.675872][ T28] audit: type=1400 audit(1782886971.906:156): avc: denied { create } for pid=403 comm="syz.4.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.720820][ T409] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 34.741810][ T409] EXT4-fs (loop1): orphan cleanup on readonly fs [ 34.759191][ T28] audit: type=1400 audit(1782886971.906:157): avc: denied { write } for pid=403 comm="syz.4.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.779183][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.799850][ T409] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.24: Invalid block bitmap block 0 in block_group 0 [ 34.829895][ T409] Quota error (device loop1): write_blk: dquota write failed [ 34.841956][ T28] audit: type=1400 audit(1782886971.906:158): avc: denied { nlmsg_write } for pid=403 comm="syz.4.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.876722][ T413] Zero length message leads to an empty skb [ 34.888222][ T409] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 34.909748][ T409] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.24: Failed to acquire dquot type 1 [ 34.928307][ T28] audit: type=1400 audit(1782886972.146:159): avc: denied { create } for pid=411 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.955290][ T409] EXT4-fs (loop1): 1 orphan inode deleted [ 34.972115][ T399] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 34.982704][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 34.999746][ T24] usb 1-1: config index 0 descriptor too short (expected 198, got 134) [ 35.008271][ T399] EXT4-fs error (device loop1): ext4_release_dquot:6864: comm kworker/u4:6: Failed to release dquot type 1 [ 35.013985][ T28] audit: type=1400 audit(1782886972.146:160): avc: denied { read } for pid=411 comm="syz.2.25" path="socket:[15968]" dev="sockfs" ino=15968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.045045][ T409] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 35.059619][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.074027][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.074805][ T28] audit: type=1400 audit(1782886972.406:161): avc: denied { write } for pid=407 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.092465][ T24] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 35.112550][ T409] syz.1.24 (409) used greatest stack depth: 21760 bytes left [ 35.122206][ T286] EXT4-fs (loop1): unmounting filesystem. [ 35.128579][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.154391][ T24] usb 1-1: Product: syz [ 35.158686][ T24] usb 1-1: Manufacturer: syz [ 35.163632][ T24] usb 1-1: SerialNumber: syz [ 35.210091][ T421] netlink: 'syz.1.28': attribute type 6 has an invalid length. [ 35.217838][ T421] netlink: 92 bytes leftover after parsing attributes in process `syz.1.28'. [ 35.319644][ T337] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 35.470881][ T405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.479673][ T405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.493432][ T24] usb 1-1: 0:1 : does not exist [ 35.498945][ T24] usb 1-1: unit 0 not found! [ 35.501860][ T337] usb 4-1: unable to get BOS descriptor or descriptor too short [ 35.516053][ T337] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.526598][ T24] usb 1-1: USB disconnect, device number 2 [ 35.582700][ T426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.29'. [ 36.670770][ T417] loop2: detected capacity change from 0 to 131072 [ 36.716657][ T417] F2FS-fs (loop2): invalid crc value [ 36.743394][ T337] usb 4-1: New USB device found, idVendor=1477, idProduct=1007, bcdDevice= 0.40 [ 36.758673][ T337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.764755][ T417] F2FS-fs (loop2): Found nat_bits in checkpoint [ 36.767211][ T337] usb 4-1: SerialNumber: ѵ哻䋭ᐇ腷᯴᧴ᑔ襳㙀箊劷㛞㨎ⴤ꧉竚ￜ鑬뭢橴⟮鷘仨랶碠孖礷俧쮥痔鴅漿㝒擲䏢⣤쮽熸㗾涻侲እ鳮簁飤쬓頒ﵓ戊ʪ䍺䭩‰메뻣첻寺䟸⸭㊼Ҡ㖺ꔐ먧䑠猦᫧l⋕ᅺʯ︉׽邝尒䰾콂됥꬀뷄뉾 [ 36.855000][ T417] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 37.021580][ T337] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 37.046177][ T337] usb 4-1: USB disconnect, device number 3 [ 37.549762][ T6] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.630437][ T458] loop1: detected capacity change from 0 to 256 [ 37.638492][ T458] FAT-fs (loop1): Unrecognized mount option "codeage=869" or missing value [ 37.730948][ T6] usb 1-1: unable to get BOS descriptor or descriptor too short [ 37.771300][ T458] fuse: Bad value for 'fd' [ 37.777203][ T458] loop1: detected capacity change from 0 to 128 [ 37.783664][ T6] usb 1-1: config index 0 descriptor too short (expected 198, got 134) [ 37.793925][ T458] FAT-fs (loop1): Unrecognized mount option "I])Ӓ" or missing value [ 37.802575][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.819619][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.877118][ T6] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 37.892708][ T458] syz.1.39 (458) used greatest stack depth: 21096 bytes left [ 37.923888][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.935603][ T6] usb 1-1: Product: syz [ 37.940594][ T6] usb 1-1: Manufacturer: syz [ 37.945310][ T6] usb 1-1: SerialNumber: syz [ 38.122304][ T477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.42'. [ 46.958788][ T6] usb 1-1: 0:1 : does not exist [ 46.965650][ T6] usb 1-1: unit 0 not found! [ 46.978295][ T6] usb 1-1: USB disconnect, device number 3 [ 47.070143][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 47.070159][ T28] audit: type=1400 audit(1782886984.406:181): avc: denied { ioctl } for pid=484 comm="syz.2.46" path="socket:[16891]" dev="sockfs" ino=16891 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.141209][ T28] audit: type=1400 audit(1782886984.446:182): avc: denied { connect } for pid=484 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.161610][ T28] audit: type=1400 audit(1782886984.446:183): avc: denied { write } for pid=484 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.258941][ T497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.47'. [ 53.274130][ T495] tty tty4: ldisc open failed (-12), clearing slot 3 [ 54.192566][ T28] audit: type=1400 audit(1782886991.526:184): avc: denied { read append } for pid=501 comm="syz.3.52" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 54.343788][ T508] netlink: 532 bytes leftover after parsing attributes in process `syz.1.53'. [ 54.358211][ T28] audit: type=1400 audit(1782886991.526:185): avc: denied { open } for pid=501 comm="syz.3.52" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 54.420914][ T28] audit: type=1400 audit(1782886991.756:186): avc: denied { mounton } for pid=510 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 54.494078][ T510] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.501223][ T510] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.508933][ T510] device bridge_slave_0 entered promiscuous mode [ 54.516348][ T510] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.523573][ T510] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.531990][ T510] device bridge_slave_1 entered promiscuous mode [ 54.557690][ T28] audit: type=1400 audit(1782886991.886:187): avc: denied { read } for pid=501 comm="syz.3.52" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.582714][ T28] audit: type=1400 audit(1782886991.916:188): avc: denied { open } for pid=501 comm="syz.3.52" path="/dev/input/event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.606869][ T28] audit: type=1400 audit(1782886991.916:189): avc: denied { ioctl } for pid=501 comm="syz.3.52" path="/dev/input/event0" dev="devtmpfs" ino=260 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.659206][ T510] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.666330][ T510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.669698][ T6] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 54.673865][ T510] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.688016][ T510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.709959][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.717722][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.733491][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.771472][ T510] device veth0_vlan entered promiscuous mode [ 54.786267][ T510] device veth1_macvtap entered promiscuous mode [ 54.817070][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.825715][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.835493][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.844286][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.852794][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.860921][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.868742][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.878552][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.889279][ T337] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 54.897504][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.904647][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.912322][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.920745][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.922374][ T6] usb 1-1: unable to get BOS descriptor or descriptor too short [ 54.927843][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.937231][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.943958][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.962294][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.008942][ T518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.54'. [ 56.440683][ T6] usb 1-1: New USB device found, idVendor=1477, idProduct=1007, bcdDevice= 0.40 [ 56.449897][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.457908][ T6] usb 1-1: SerialNumber: ѵ哻䋭ᐇ腷᯴᧴ᑔ襳㙀箊劷㛞㨎ⴤ꧉竚ￜ鑬뭢橴⟮鷘仨랶碠孖礷俧쮥痔鴅漿㝒擲䏢⣤쮽熸㗾涻侲እ鳮簁飤쬓頒ﵓ戊ʪ䍺䭩‰메뻣첻寺䟸⸭㊼Ҡ㖺ꔐ먧䑠猦᫧l⋕ᅺʯ︉׽邝尒䰾콂됥꬀뷄뉾 [ 57.197484][ T6] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 57.206095][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.206125][ T6] usb 1-1: USB disconnect, device number 4 [ 57.851296][ T550] fuse: Unknown parameter 'group_iW' [ 57.936161][ T28] audit: type=1400 audit(1782886995.186:190): avc: denied { mounton } for pid=546 comm="syz.0.59" path="/9/file0" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 58.113102][ T337] usb 2-1: unable to get BOS descriptor or descriptor too short [ 58.121274][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 58.129105][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 58.136482][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 58.145351][ T337] usb 2-1: unable to read config index 0 descriptor/start: -32 [ 58.153098][ T337] usb 2-1: chopping to 0 config(s) [ 58.158238][ T337] usb 2-1: can't read configurations, error -32 [ 58.165203][ T545] loop2: detected capacity change from 0 to 128 [ 58.174269][ T540] netlink: 24 bytes leftover after parsing attributes in process `syz.5.56'. [ 58.184478][ T550] loop0: detected capacity change from 0 to 512 [ 58.234469][ T553] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 58.253495][ T545] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 58.263193][ T499] device bridge_slave_1 left promiscuous mode [ 58.272482][ T451] udevd[451]: incorrect ext4 checksum on /dev/loop2 [ 58.279245][ T545] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.307596][ T499] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.312767][ T553] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x5a [ 58.324271][ T550] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 58.333186][ T550] System zones: 0-2, 18-18, 34-34 [ 58.338569][ T499] device bridge_slave_0 left promiscuous mode [ 58.345572][ T550] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.59: bg 0: block 248: padding at end of block bitmap is not set [ 58.355281][ T499] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.368337][ T550] Quota error (device loop0): write_blk: dquota write failed [ 58.371216][ T28] audit: type=1400 audit(1782886995.706:191): avc: denied { write } for pid=552 comm="syz.1.61" name="tcp" dev="proc" ino=4026532325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 58.375901][ T550] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 58.408026][ T550] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.59: Failed to acquire dquot type 1 [ 58.617014][ T553] loop1: detected capacity change from 0 to 1024 [ 58.706271][ T553] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 58.724127][ T499] device veth1_macvtap left promiscuous mode [ 58.745432][ T499] device veth0_vlan left promiscuous mode [ 58.776825][ T550] EXT4-fs (loop0): 1 truncate cleaned up [ 58.782779][ T550] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 58.792692][ T550] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.806195][ T550] EXT4-fs (loop0): unmounting filesystem. [ 58.810021][ T307] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 58.906621][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 58.915311][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.924008][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 58.932598][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.941403][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.950885][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.959266][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.968488][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.977297][ T539] tipc: Started in network mode [ 58.982294][ T539] tipc: Node identity 46f3e57f7d97, cluster identity 4711 [ 58.989515][ T539] tipc: Enabled bearer , priority 0 [ 58.998995][ T538] tipc: Disabling bearer [ 59.011164][ T307] usb 6-1: unable to get BOS descriptor or descriptor too short [ 59.019844][ T307] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.059116][ T290] EXT4-fs (loop2): unmounting filesystem. [ 59.068190][ T307] usb 6-1: New USB device found, idVendor=1477, idProduct=1007, bcdDevice= 0.40 [ 59.125165][ T307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.157627][ T307] usb 6-1: SerialNumber: ѵ哻䋭ᐇ腷᯴᧴ᑔ襳㙀箊劷㛞㨎ⴤ꧉竚ￜ鑬뭢橴⟮鷘仨랶碠孖礷俧쮥痔鴅漿㝒擲䏢⣤쮽熸㗾涻侲እ鳮簁飤쬓頒ﵓ戊ʪ䍺䭩‰메뻣첻寺䟸⸭㊼Ҡ㖺ꔐ먧䑠猦᫧l⋕ᅺʯ︉׽邝尒䰾콂됥꬀뷄뉾 [ 59.192714][ T571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 59.417785][ T577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.65'. [ 59.614068][ T307] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 59.707707][ T307] usb 6-1: USB disconnect, device number 2 [ 60.449055][ T569] loop2: detected capacity change from 0 to 4096 [ 60.616592][ T569] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 60.651469][ T28] audit: type=1400 audit(1782886997.986:192): avc: denied { read write } for pid=568 comm="syz.2.63" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.664875][ T583] loop3: detected capacity change from 0 to 128 [ 60.697419][ T583] EXT4-fs (loop3): Test dummy encryption mode enabled [ 60.704450][ T28] audit: type=1400 audit(1782886997.986:193): avc: denied { open } for pid=568 comm="syz.2.63" path="/12/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.727416][ T28] audit: type=1400 audit(1782886998.016:194): avc: denied { ioctl } for pid=568 comm="syz.2.63" path="/12/file1/file1" dev="loop2" ino=15 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.745668][ T583] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 60.752140][ T28] audit: type=1400 audit(1782886998.026:195): avc: denied { ioctl } for pid=568 comm="syz.2.63" path="socket:[17148]" dev="sockfs" ino=17148 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.789745][ T583] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.833939][ T321] Bluetooth: hci0: Frame reassembly failed (-84) [ 60.860338][ T583] IPv6: NLM_F_REPLACE set, but no existing node found! [ 60.901406][ T290] EXT4-fs (loop2): unmounting filesystem. [ 62.300350][ T593] syz.1.69 (593) used greatest stack depth: 19624 bytes left [ 62.569244][ T618] loop2: detected capacity change from 0 to 128 [ 62.596935][ T618] EXT4-fs (loop2): Test dummy encryption mode enabled [ 62.624711][ T618] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 62.639765][ T618] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.660091][ T604] loop0: detected capacity change from 0 to 4096 [ 62.683515][ T499] Bluetooth: hci1: Frame reassembly failed (-84) [ 62.685300][ T618] IPv6: NLM_F_REPLACE set, but no existing node found! [ 62.702583][ T604] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 62.833716][ T287] EXT4-fs (loop0): unmounting filesystem. [ 62.879615][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 62.880047][ T620] Bluetooth: hci0: command 0x1003 tx timeout [ 62.892935][ T583] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 62.941055][ T289] EXT4-fs (loop3): unmounting filesystem. [ 63.117055][ T629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.78'. [ 64.626767][ T28] audit: type=1400 audit(1782887001.946:196): avc: denied { read } for pid=634 comm="syz.5.81" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 64.627991][ T641] loop5: detected capacity change from 0 to 256 [ 64.701345][ T28] audit: type=1400 audit(1782887001.946:197): avc: denied { open } for pid=634 comm="syz.5.81" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 64.724915][ T350] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 64.731178][ T624] Bluetooth: hci1: command 0x1003 tx timeout [ 64.764475][ T641] FAT-fs (loop5): Directory bread(block 64) failed [ 64.771187][ T641] FAT-fs (loop5): Directory bread(block 65) failed [ 64.777914][ T641] FAT-fs (loop5): Directory bread(block 66) failed [ 64.784527][ T641] FAT-fs (loop5): Directory bread(block 67) failed [ 64.791236][ T641] FAT-fs (loop5): Directory bread(block 68) failed [ 64.797828][ T641] FAT-fs (loop5): Directory bread(block 69) failed [ 64.804612][ T641] FAT-fs (loop5): Directory bread(block 70) failed [ 64.811215][ T641] FAT-fs (loop5): Directory bread(block 71) failed [ 64.817918][ T641] FAT-fs (loop5): Directory bread(block 72) failed [ 64.824566][ T641] FAT-fs (loop5): Directory bread(block 73) failed [ 65.002923][ T290] EXT4-fs (loop2): unmounting filesystem. [ 65.013984][ T28] audit: type=1400 audit(1782887001.956:198): avc: denied { ioctl } for pid=634 comm="syz.5.81" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 65.309599][ T24] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 65.329618][ T337] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 65.486060][ T28] audit: type=1400 audit(1782887002.816:199): avc: denied { attach_queue } for pid=649 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 65.507111][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 65.512360][ T337] usb 3-1: unable to get BOS descriptor or descriptor too short [ 65.516153][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.524293][ T337] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.540305][ T24] usb 4-1: New USB device found, idVendor=1477, idProduct=1007, bcdDevice= 0.40 [ 65.550855][ T337] usb 3-1: New USB device found, idVendor=1477, idProduct=1007, bcdDevice= 0.40 [ 65.551981][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.569035][ T24] usb 4-1: SerialNumber: ѵ哻䋭ᐇ腷᯴᧴ᑔ襳㙀箊劷㛞㨎ⴤ꧉竚ￜ鑬뭢橴⟮鷘仨랶碠孖礷俧쮥痔鴅漿㝒擲䏢⣤쮽熸㗾涻侲እ鳮簁飤쬓頒ﵓ戊ʪ䍺䭩‰메뻣첻寺䟸⸭㊼Ҡ㖺ꔐ먧䑠猦᫧l⋕ᅺʯ︉׽邝尒䰾콂됥꬀뷄뉾 [ 65.578190][ T337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.607382][ T337] usb 3-1: SerialNumber: ѵ哻䋭ᐇ腷᯴᧴ᑔ襳㙀箊劷㛞㨎ⴤ꧉竚ￜ鑬뭢橴⟮鷘仨랶碠孖礷俧쮥痔鴅漿㝒擲䏢⣤쮽熸㗾涻侲እ鳮簁飤쬓頒ﵓ戊ʪ䍺䭩‰메뻣첻寺䟸⸭㊼Ҡ㖺ꔐ먧䑠猦᫧l⋕ᅺʯ︉׽邝尒䰾콂됥꬀뷄뉾 [ 65.811487][ T24] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 65.821996][ T24] usb 4-1: USB disconnect, device number 4 [ 65.848176][ T337] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 65.865425][ T337] usb 3-1: USB disconnect, device number 2 [ 65.867299][ T655] loop1: detected capacity change from 0 to 4096 [ 65.885299][ T655] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 65.937630][ T286] EXT4-fs (loop1): unmounting filesystem. [ 65.956142][ T660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.89'. [ 65.966458][ T660] device ip6gre1 entered promiscuous mode [ 65.977262][ T660] netlink: 'syz.1.89': attribute type 6 has an invalid length. [ 65.984943][ T660] netlink: 72 bytes leftover after parsing attributes in process `syz.1.89'. [ 65.995469][ T28] audit: type=1400 audit(1782887003.336:200): avc: denied { create } for pid=659 comm="syz.1.89" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.017328][ T28] audit: type=1400 audit(1782887003.336:201): avc: denied { write } for pid=659 comm="syz.1.89" name="file2" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.043287][ T28] audit: type=1400 audit(1782887003.336:202): avc: denied { open } for pid=659 comm="syz.1.89" path="/17/file2" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.065695][ T28] audit: type=1400 audit(1782887003.336:203): avc: denied { ioctl } for pid=659 comm="syz.1.89" path="/17/file2" dev="tmpfs" ino=114 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.089501][ T28] audit: type=1400 audit(1782887003.346:204): avc: denied { unlink } for pid=286 comm="syz-executor" name="file2" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.166859][ T28] audit: type=1400 audit(1782887003.496:205): avc: denied { write } for pid=665 comm="syz.5.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.831971][ T666] loop5: detected capacity change from 0 to 256 [ 68.118086][ T666] exfat: Unknown parameter '0xffffffffffffffff0177777777777777777777700000000000000000000000' [ 68.165035][ T678] loop3: detected capacity change from 0 to 128 [ 68.181300][ T678] EXT4-fs (loop3): Test dummy encryption mode enabled [ 68.189997][ T425] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 68.205475][ T666] loop5: detected capacity change from 0 to 512 [ 68.212518][ T425] I/O error, dev loop5, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 68.290899][ T686] loop2: detected capacity change from 0 to 256 [ 68.314207][ T686] FAT-fs (loop2): Directory bread(block 64) failed [ 68.320880][ T686] FAT-fs (loop2): Directory bread(block 65) failed [ 68.327643][ T686] FAT-fs (loop2): Directory bread(block 66) failed [ 68.334245][ T686] FAT-fs (loop2): Directory bread(block 67) failed [ 68.340993][ T686] FAT-fs (loop2): Directory bread(block 68) failed [ 68.347581][ T686] FAT-fs (loop2): Directory bread(block 69) failed [ 68.354391][ T686] FAT-fs (loop2): Directory bread(block 70) failed [ 68.360995][ T686] FAT-fs (loop2): Directory bread(block 71) failed [ 68.367734][ T686] FAT-fs (loop2): Directory bread(block 72) failed [ 68.374334][ T686] FAT-fs (loop2): Directory bread(block 73) failed [ 68.482158][ T686] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=686 comm=syz.2.96 [ 68.641668][ T678] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 68.673285][ T678] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.683867][ T19] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 68.729751][ T321] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.737862][ T678] IPv6: NLM_F_REPLACE set, but no existing node found! [ 68.821350][ T689] loop1: detected capacity change from 0 to 4096 [ 68.826501][ T28] audit: type=1400 audit(1782887006.156:206): avc: denied { read } for pid=665 comm="syz.5.92" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 68.863615][ T28] audit: type=1400 audit(1782887006.166:207): avc: denied { open } for pid=665 comm="syz.5.92" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 68.890495][ T689] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 68.900063][ T19] usb 1-1: unable to get BOS descriptor or descriptor too short [ 68.923588][ T19] usb 1-1: config index 0 descriptor too short (expected 198, got 134) [ 68.939681][ T28] audit: type=1400 audit(1782887006.186:208): avc: denied { ioctl } for pid=665 comm="syz.5.92" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 68.946370][ T19] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.982076][ T19] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.999743][ T19] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 69.031295][ T286] EXT4-fs (loop1): unmounting filesystem. [ 69.064734][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.072866][ T19] usb 1-1: Product: syz [ 69.077247][ T19] usb 1-1: Manufacturer: syz [ 69.082042][ T19] usb 1-1: SerialNumber: syz [ 69.580285][ T28] audit: type=1400 audit(1782887006.616:209): avc: denied { mount } for pid=697 comm="syz.5.102" name="/" dev="ramfs" ino=17706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 69.748912][ T19] usb 1-1: 0:1 : does not exist [ 69.787909][ T19] usb 1-1: unit 0 not found! [ 69.804132][ T19] usb 1-1: USB disconnect, device number 5 [ 69.938519][ T712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.105'. [ 69.950924][ T712] device ip6gre1 entered promiscuous mode [ 69.998458][ T712] netlink: 'syz.2.105': attribute type 6 has an invalid length. [ 70.006466][ T712] netlink: 72 bytes leftover after parsing attributes in process `syz.2.105'. [ 70.031125][ T716] loop1: detected capacity change from 0 to 128 [ 70.038170][ T716] EXT4-fs (loop1): Test dummy encryption mode enabled [ 70.055395][ T716] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 70.070811][ T451] udevd[451]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.086813][ T716] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.114191][ T399] Bluetooth: hci1: Frame reassembly failed (-84) [ 70.122125][ T716] IPv6: NLM_F_REPLACE set, but no existing node found! [ 70.208652][ T721] loop2: detected capacity change from 0 to 4096 [ 70.219177][ T721] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 70.264640][ T290] EXT4-fs (loop2): unmounting filesystem. [ 70.799624][ T350] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.799656][ T349] Bluetooth: hci0: command 0x1003 tx timeout [ 70.932496][ T289] EXT4-fs (loop3): unmounting filesystem. [ 71.021720][ T733] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 71.026476][ T28] audit: type=1400 audit(1782887008.356:210): avc: denied { create } for pid=732 comm="syz.5.114" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 71.219295][ T28] audit: type=1400 audit(1782887008.526:211): avc: denied { associate } for pid=732 comm="syz.5.114" name="bus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 71.307580][ T28] audit: type=1400 audit(1782887008.536:212): avc: denied { rmdir } for pid=510 comm="syz-executor" name="bus" dev="tmpfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 71.440652][ T19] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 72.159611][ T45] Bluetooth: hci1: command 0x1003 tx timeout [ 72.159641][ T624] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 72.279358][ T286] EXT4-fs (loop1): unmounting filesystem. [ 72.963916][ T19] usb 1-1: Using ep0 maxpacket: 32 [ 73.312799][ T19] usb 1-1: device descriptor read/all, error -71 [ 73.479607][ T28] audit: type=1400 audit(1782887010.796:213): avc: denied { ioctl } for pid=783 comm="syz.2.131" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.528037][ T28] audit: type=1400 audit(1782887010.796:214): avc: denied { set_context_mgr } for pid=783 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 75.399198][ T790] loop2: detected capacity change from 0 to 4096 [ 75.461641][ T790] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 76.484752][ T290] EXT4-fs (loop2): unmounting filesystem. [ 76.623670][ T838] device bridge1 entered promiscuous mode [ 76.795074][ T852] loop5: detected capacity change from 0 to 512 [ 78.144719][ T28] audit: type=1400 audit(1782887015.476:215): avc: denied { unlink } for pid=851 comm="syz.5.154" name="#1" dev="tmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.269648][ T337] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.957063][ T884] device bridge2 entered promiscuous mode [ 78.975530][ T864] loop3: detected capacity change from 0 to 4096 [ 79.239684][ T864] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 79.601445][ T289] EXT4-fs (loop3): unmounting filesystem. [ 79.999635][ T337] usb 3-1: Using ep0 maxpacket: 32 [ 80.007117][ T337] usb 3-1: device descriptor read/all, error -71 [ 80.096097][ T898] netlink: 24 bytes leftover after parsing attributes in process `syz.0.167'. [ 81.455284][ T909] loop2: detected capacity change from 0 to 512 [ 81.543157][ T919] device bridge3 entered promiscuous mode [ 81.551362][ T425] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 82.168515][ T933] loop5: detected capacity change from 0 to 4096 [ 82.324217][ T337] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 82.361594][ T933] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 82.515852][ T510] EXT4-fs (loop5): unmounting filesystem. [ 82.549659][ T337] usb 3-1: Using ep0 maxpacket: 32 [ 82.556064][ T337] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 82.613528][ T337] usb 3-1: config 0 has no interface number 0 [ 82.638267][ T337] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 82.674514][ T337] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 82.716461][ T337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.737963][ T337] usb 3-1: Product: syz [ 82.746853][ T337] usb 3-1: Manufacturer: syz [ 82.756788][ T337] usb 3-1: SerialNumber: syz [ 82.773137][ T337] usb 3-1: config 0 descriptor?? [ 82.783424][ T921] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 82.966127][ T945] netlink: 24 bytes leftover after parsing attributes in process `syz.5.183'. [ 83.021113][ T921] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 83.430166][ T921] futex_wake_op: syz.2.178 tries to shift op by -1; fix this program [ 83.494496][ T28] audit: type=1400 audit(1782887020.826:216): avc: denied { watch watch_reads } for pid=920 comm="syz.2.178" path="/39" dev="tmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.953973][ T961] binder: 958:961 ioctl 4018620d 0 returned -22 [ 84.050125][ T965] loop3: detected capacity change from 0 to 512 [ 84.324096][ T974] netlink: 24 bytes leftover after parsing attributes in process `syz.5.192'. [ 84.521060][ T983] loop1: detected capacity change from 0 to 256 [ 88.435273][ T983] FAT-fs (loop1): Directory bread(block 64) failed [ 88.441917][ T983] FAT-fs (loop1): Directory bread(block 65) failed [ 88.448624][ T983] FAT-fs (loop1): Directory bread(block 66) failed [ 88.455211][ T983] FAT-fs (loop1): Directory bread(block 67) failed [ 88.461988][ T983] FAT-fs (loop1): Directory bread(block 68) failed [ 88.468603][ T983] FAT-fs (loop1): Directory bread(block 69) failed [ 88.475224][ T983] FAT-fs (loop1): Directory bread(block 70) failed [ 88.481809][ T983] FAT-fs (loop1): Directory bread(block 71) failed [ 88.488406][ T983] FAT-fs (loop1): Directory bread(block 72) failed [ 88.495505][ T983] FAT-fs (loop1): Directory bread(block 73) failed [ 88.549634][ T337] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 88.576266][ T337] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 88.587090][ T337] asix: probe of 3-1:0.188 failed with error -71 [ 88.595880][ T337] usb 3-1: USB disconnect, device number 4 [ 88.694396][ T997] binder: 996:997 ioctl 4018620d 0 returned -22 [ 88.839636][ T987] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 89.151766][ T987] usb 6-1: unable to get BOS descriptor or descriptor too short [ 89.187165][ T987] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.199761][ T994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.198'. [ 89.332387][ T987] usb 6-1: New USB device found, idVendor=1477, idProduct=1007, bcdDevice= 0.40 [ 92.804311][ T987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.813020][ T987] usb 6-1: SerialNumber: ѵ哻䋭ᐇ腷᯴᧴ᑔ襳㙀箊劷㛞㨎ⴤ꧉竚ￜ鑬뭢橴⟮鷘仨랶碠孖礷俧쮥痔鴅漿㝒擲䏢⣤쮽熸㗾涻侲እ鳮簁飤쬓頒ﵓ戊ʪ䍺䭩‰메뻣첻寺䟸⸭㊼Ҡ㖺ꔐ먧䑠猦᫧l⋕ᅺʯ︉׽邝尒䰾콂됥꬀뷄뉾 [ 92.878972][ T987] usb 6-1: can't set config #1, error -71 [ 92.900453][ T1012] loop0: detected capacity change from 0 to 512 [ 92.926469][ T987] usb 6-1: USB disconnect, device number 3 [ 93.462740][ T1032] loop3: detected capacity change from 0 to 256 [ 93.521060][ T1032] FAT-fs (loop3): Directory bread(block 64) failed [ 93.527680][ T1032] FAT-fs (loop3): Directory bread(block 65) failed [ 93.534409][ T1032] FAT-fs (loop3): Directory bread(block 66) failed [ 93.541058][ T1032] FAT-fs (loop3): Directory bread(block 67) failed [ 93.547797][ T1032] FAT-fs (loop3): Directory bread(block 68) failed [ 93.554447][ T1032] FAT-fs (loop3): Directory bread(block 69) failed [ 93.561178][ T1032] FAT-fs (loop3): Directory bread(block 70) failed [ 93.567772][ T1032] FAT-fs (loop3): Directory bread(block 71) failed [ 93.574440][ T1032] FAT-fs (loop3): Directory bread(block 72) failed [ 93.581060][ T1032] FAT-fs (loop3): Directory bread(block 73) failed [ 93.669730][ T307] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 93.795951][ T1037] binder: 1036:1037 ioctl 4018620d 0 returned -22 [ 93.929647][ T307] usb 1-1: Using ep0 maxpacket: 32 [ 97.532616][ T307] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 97.557678][ T307] usb 1-1: can't read configurations, error -71 [ 97.575072][ T1062] loop3: detected capacity change from 0 to 512 [ 97.675607][ T1072] binder: BINDER_SET_CONTEXT_MGR already set [ 97.683150][ T1072] binder: 1071:1072 ioctl 4018620d 200000004a80 returned -16 [ 97.770324][ T1078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.222'. [ 102.048300][ T24] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 102.616784][ T1101] loop5: detected capacity change from 0 to 256 [ 102.655714][ T1101] FAT-fs (loop5): Directory bread(block 64) failed [ 102.662500][ T1101] FAT-fs (loop5): Directory bread(block 65) failed [ 102.669178][ T1101] FAT-fs (loop5): Directory bread(block 66) failed [ 102.675882][ T1101] FAT-fs (loop5): Directory bread(block 67) failed [ 102.682605][ T1101] FAT-fs (loop5): Directory bread(block 68) failed [ 102.689202][ T1101] FAT-fs (loop5): Directory bread(block 69) failed [ 102.695982][ T1101] FAT-fs (loop5): Directory bread(block 70) failed [ 102.702603][ T1101] FAT-fs (loop5): Directory bread(block 71) failed [ 102.709324][ T1101] FAT-fs (loop5): Directory bread(block 72) failed [ 102.715936][ T1101] FAT-fs (loop5): Directory bread(block 73) failed [ 103.013160][ T1110] loop2: detected capacity change from 0 to 512 [ 103.026984][ T321] Bluetooth: hci0: Frame reassembly failed (-84) [ 103.038137][ T1115] binder: BINDER_SET_CONTEXT_MGR already set [ 103.044364][ T1115] binder: 1114:1115 ioctl 4018620d 200000004a80 returned -16 [ 103.061660][ T1090] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.475007][ T987] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 104.139830][ T987] usb 4-1: Using ep0 maxpacket: 32 [ 104.146855][ T987] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 104.156386][ T987] usb 4-1: config 0 has no interface number 0 [ 104.163485][ T987] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 104.182078][ T987] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 104.200828][ T1130] netlink: 24 bytes leftover after parsing attributes in process `syz.5.243'. [ 104.267591][ T987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.276583][ T987] usb 4-1: Product: syz [ 104.281469][ T987] usb 4-1: Manufacturer: syz [ 104.286354][ T987] usb 4-1: SerialNumber: syz [ 104.295059][ T987] usb 4-1: config 0 descriptor?? [ 104.301889][ T1106] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 104.529018][ T1106] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 104.961799][ T1138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.246'. [ 105.039675][ T624] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 105.039715][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 105.069879][ T1112] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 105.228916][ T1106] futex_wake_op: syz.3.234 tries to shift op by -1; fix this program [ 106.091601][ T1152] netlink: 20 bytes leftover after parsing attributes in process `syz.5.250'. [ 106.121162][ T1154] binder: BINDER_SET_CONTEXT_MGR already set [ 106.129163][ T1152] device ip6gre1 entered promiscuous mode [ 106.135774][ T1154] binder: 1153:1154 ioctl 4018620d 200000004a80 returned -16 [ 106.147512][ T1152] netlink: 'syz.5.250': attribute type 6 has an invalid length. [ 106.170574][ T1152] netlink: 72 bytes leftover after parsing attributes in process `syz.5.250'. [ 106.188882][ T1157] loop0: detected capacity change from 0 to 512 [ 106.419604][ T337] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 106.446479][ T1171] loop5: detected capacity change from 0 to 256 [ 106.743224][ T1171] FAT-fs (loop5): Directory bread(block 64) failed [ 106.749878][ T1171] FAT-fs (loop5): Directory bread(block 65) failed [ 106.756960][ T1171] FAT-fs (loop5): Directory bread(block 66) failed [ 106.763621][ T1171] FAT-fs (loop5): Directory bread(block 67) failed [ 106.770257][ T1171] FAT-fs (loop5): Directory bread(block 68) failed [ 106.776849][ T1171] FAT-fs (loop5): Directory bread(block 69) failed [ 106.783576][ T1171] FAT-fs (loop5): Directory bread(block 70) failed [ 106.790294][ T1171] FAT-fs (loop5): Directory bread(block 71) failed [ 106.796917][ T1171] FAT-fs (loop5): Directory bread(block 72) failed [ 106.804277][ T1171] FAT-fs (loop5): Directory bread(block 73) failed [ 106.823518][ T987] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 106.849611][ T987] asix: probe of 4-1:0.188 failed with error -32 [ 106.873352][ T987] usb 4-1: USB disconnect, device number 5 [ 106.944886][ T1178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.258'. [ 107.119565][ C1] ================================================================== [ 107.127781][ C1] BUG: KASAN: use-after-free in __run_timers+0x341/0x9b0 [ 107.134872][ C1] Write of size 8 at addr ffff888119968a00 by task syz.1.259/1175 [ 107.142693][ C1] [ 107.145055][ C1] CPU: 1 PID: 1175 Comm: syz.1.259 Not tainted syzkaller #0 [ 107.152359][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 107.162458][ C1] Call Trace: [ 107.165768][ C1] [ 107.168646][ C1] __dump_stack+0x21/0x24 [ 107.173008][ C1] dump_stack_lvl+0x110/0x170 [ 107.177717][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 107.182763][ C1] ? __cfi_trigger_load_balance+0x10/0x10 [ 107.188515][ C1] ? __run_timers+0x341/0x9b0 [ 107.193220][ C1] print_address_description+0x71/0x200 [ 107.198793][ C1] print_report+0x4a/0x60 [ 107.203139][ C1] kasan_report+0x122/0x150 [ 107.207674][ C1] ? __run_timers+0x341/0x9b0 [ 107.212382][ C1] __asan_report_store8_noabort+0x17/0x20 [ 107.218127][ C1] __run_timers+0x341/0x9b0 [ 107.222664][ C1] ? calc_index+0x200/0x200 [ 107.227204][ C1] ? __kasan_check_read+0x11/0x20 [ 107.232258][ C1] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 107.237933][ C1] run_timer_softirq+0x6a/0xf0 [ 107.242720][ C1] handle_softirqs+0x1d7/0x600 [ 107.247508][ C1] __irq_exit_rcu+0x52/0xf0 [ 107.252036][ C1] irq_exit_rcu+0x9/0x10 [ 107.256303][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 107.261970][ C1] [ 107.264922][ C1] [ 107.267871][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 107.273895][ C1] RIP: 0010:finish_task_switch+0x173/0x7c0 [ 107.279734][ C1] Code: 80 3c 2b 00 74 08 4c 89 f7 e8 99 8a 69 00 4d 8b 2e 4d 85 ed 0f 85 cd 00 00 00 4c 89 e7 e8 55 9a b3 03 fb 49 8d 9f 48 0b 00 00 <48> 89 d8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 0f b6 04 28 [ 107.299364][ C1] RSP: 0000:ffffc90006cef6c8 EFLAGS: 00000282 [ 107.305465][ C1] RAX: 0000000080000001 RBX: ffff88810921dc48 RCX: 0000000000000000 [ 107.313476][ C1] RDX: 0000000000000001 RSI: ffffffff85ca6840 RDI: 00000000ffffffff [ 107.321476][ C1] RBP: ffffc90006cef710 R08: ffff88811d859447 R09: 1ffff11023b0b288 [ 107.329466][ C1] R10: dffffc0000000000 R11: ffffed1023b0b289 R12: ffff8881f6f37d80 [ 107.337545][ C1] R13: 0000000000000000 R14: ffff8881f6f388e0 R15: ffff88810921d100 [ 107.345565][ C1] ? finish_task_switch+0x16b/0x7c0 [ 107.350792][ C1] ? switch_mm_irqs_off+0x730/0x960 [ 107.356015][ C1] __schedule+0xbea/0x14b0 [ 107.360460][ C1] ? release_firmware_map_entry+0x190/0x190 [ 107.366379][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 107.371788][ C1] preempt_schedule_irq+0xaa/0x120 [ 107.376960][ C1] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 107.382715][ C1] ? __kasan_check_write+0x14/0x20 [ 107.387847][ C1] ? folio_unlock+0x4f/0x60 [ 107.392373][ C1] raw_irqentry_exit_cond_resched+0x29/0x30 [ 107.398291][ C1] irqentry_exit+0x37/0x40 [ 107.402734][ C1] sysvec_reschedule_ipi+0x78/0x80 [ 107.407887][ C1] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 107.413377][ C1] RIP: 0010:handle_mm_fault+0x3db/0x26b0 [ 107.419032][ C1] Code: 00 00 00 31 f6 e8 d5 2e 0b 00 4c 8b 74 24 28 4c 89 b4 24 e0 00 00 00 4d 8d a6 88 00 00 00 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 e7 e8 db 2b 0b 00 4d 8b 24 24 4d 85 e4 74 49 e8 1d a1 [ 107.438662][ C1] RSP: 0000:ffffc90006cef9a0 EFLAGS: 00000246 [ 107.444756][ C1] RAX: 1ffff1102205a7df RBX: 1ffff1102205a7d0 RCX: 0000000000000000 [ 107.452751][ C1] RDX: 0000000000000068 RSI: 0000000000000000 RDI: ffffc90006cefaf0 [ 107.460743][ C1] RBP: ffffc90006cefb70 R08: ffffc90006cefaef R09: ffffc90006cefa88 [ 107.468732][ C1] R10: dffffc0000000000 R11: fffff52000d9df5e R12: ffff8881102d3ef8 [ 107.476733][ C1] R13: dffffc0000000000 R14: ffff8881102d3e70 R15: 1ffff1102205a7d2 [ 107.484736][ C1] ? __cfi_handle_mm_fault+0x10/0x10 [ 107.490054][ C1] __get_user_pages+0x34b/0xdb0 [ 107.494931][ C1] ? populate_vma_page_range+0x120/0x120 [ 107.500591][ C1] ? userfaultfd_unmap_complete+0x28f/0x310 [ 107.506511][ C1] __mm_populate+0x2ea/0x430 [ 107.511131][ C1] ? __cfi___mm_populate+0x10/0x10 [ 107.516289][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 107.521691][ C1] vm_mmap_pgoff+0x271/0x3f0 [ 107.526323][ C1] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 107.531457][ C1] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 107.537553][ C1] ? sysvec_reschedule_ipi+0x78/0x80 [ 107.542865][ C1] ksys_mmap_pgoff+0xf6/0x1d0 [ 107.547572][ C1] __x64_sys_mmap+0xfa/0x110 [ 107.552179][ C1] x64_sys_call+0x8fd/0x9a0 [ 107.556720][ C1] do_syscall_64+0x4c/0xa0 [ 107.561164][ C1] ? clear_bhb_loop+0x30/0x80 [ 107.565860][ C1] ? clear_bhb_loop+0x30/0x80 [ 107.570557][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.576477][ C1] RIP: 0033:0x7fad80b9de59 [ 107.580932][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.600565][ C1] RSP: 002b:00007fad81a9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 107.609026][ C1] RAX: ffffffffffffffda RBX: 00007fad80e26090 RCX: 00007fad80b9de59 [ 107.617039][ C1] RDX: b635773f06ebbeeb RSI: 0000000000b36000 RDI: 0000200000000000 [ 107.625041][ C1] RBP: 00007fad80c33e6f R08: ffffffffffffffff R09: 0000000000000000 [ 107.633046][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 107.641049][ C1] R13: 00007fad80e26128 R14: 00007fad80e26090 R15: 00007ffcf7c5eef8 [ 107.649053][ C1] [ 107.652094][ C1] [ 107.654459][ C1] Allocated by task 1112: [ 107.658818][ C1] kasan_set_track+0x4b/0x70 [ 107.663442][ C1] kasan_save_alloc_info+0x1f/0x30 [ 107.668582][ C1] __kasan_kmalloc+0x95/0xb0 [ 107.673203][ C1] __kmalloc+0xb4/0x1e0 [ 107.677388][ C1] hci_alloc_dev_priv+0x27/0x1bd0 [ 107.682447][ C1] hci_uart_tty_ioctl+0x3c4/0xa40 [ 107.687515][ C1] tty_ioctl+0x8ef/0xc60 [ 107.691796][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 107.696502][ C1] __x64_sys_ioctl+0x7b/0x90 [ 107.701123][ C1] x64_sys_call+0x58b/0x9a0 [ 107.705659][ C1] do_syscall_64+0x4c/0xa0 [ 107.710107][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.716036][ C1] [ 107.718374][ C1] Freed by task 1112: [ 107.722381][ C1] kasan_set_track+0x4b/0x70 [ 107.727039][ C1] kasan_save_free_info+0x2b/0x40 [ 107.732091][ C1] ____kasan_slab_free+0x132/0x180 [ 107.737243][ C1] __kasan_slab_free+0x11/0x20 [ 107.742042][ C1] slab_free_freelist_hook+0xc2/0x190 [ 107.747445][ C1] __kmem_cache_free+0xb7/0x1b0 [ 107.752328][ C1] kfree+0x6f/0xf0 [ 107.756077][ C1] hci_release_dev+0x12a3/0x13b0 [ 107.761055][ C1] bt_host_release+0x82/0x90 [ 107.765680][ C1] device_release+0xa4/0x1d0 [ 107.770300][ C1] kobject_put+0x19d/0x280 [ 107.774758][ C1] put_device+0x1f/0x30 [ 107.778940][ C1] hci_dev_cmd+0x279/0x740 [ 107.783386][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 107.788102][ C1] sock_do_ioctl+0x114/0x330 [ 107.792732][ C1] sock_ioctl+0x475/0x700 [ 107.797099][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 107.801798][ C1] __x64_sys_ioctl+0x7b/0x90 [ 107.806419][ C1] x64_sys_call+0x58b/0x9a0 [ 107.810952][ C1] do_syscall_64+0x4c/0xa0 [ 107.815400][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.821331][ C1] [ 107.823675][ C1] Last potentially related work creation: [ 107.829408][ C1] kasan_save_stack+0x3a/0x60 [ 107.834127][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 107.839542][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 107.845380][ C1] insert_work+0x51/0x300 [ 107.849734][ C1] __queue_work+0x9d0/0xd50 [ 107.854280][ C1] queue_work_on+0xde/0x150 [ 107.858816][ C1] __hci_cmd_sync_sk+0xaa8/0xd80 [ 107.863778][ C1] hci_cmd_sync_status+0x53/0x120 [ 107.868832][ C1] hci_dev_cmd+0x357/0x740 [ 107.873266][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 107.877980][ C1] sock_do_ioctl+0x114/0x330 [ 107.882604][ C1] sock_ioctl+0x475/0x700 [ 107.886970][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 107.891668][ C1] __x64_sys_ioctl+0x7b/0x90 [ 107.896296][ C1] x64_sys_call+0x58b/0x9a0 [ 107.900814][ C1] do_syscall_64+0x4c/0xa0 [ 107.905239][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.911155][ C1] [ 107.913471][ C1] Second to last potentially related work creation: [ 107.920050][ C1] kasan_save_stack+0x3a/0x60 [ 107.924756][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 107.930126][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 107.935930][ C1] insert_work+0x51/0x300 [ 107.940260][ C1] __queue_work+0x9d0/0xd50 [ 107.944774][ C1] queue_work_on+0xde/0x150 [ 107.949303][ C1] hci_cmd_timeout+0x191/0x200 [ 107.954081][ C1] process_one_work+0x717/0xc30 [ 107.958945][ C1] worker_thread+0xa4d/0x11d0 [ 107.963621][ C1] kthread+0x281/0x320 [ 107.967688][ C1] ret_from_fork+0x1f/0x30 [ 107.972111][ C1] [ 107.974431][ C1] The buggy address belongs to the object at ffff888119968000 [ 107.974431][ C1] which belongs to the cache kmalloc-8k of size 8192 [ 107.988479][ C1] The buggy address is located 2560 bytes inside of [ 107.988479][ C1] 8192-byte region [ffff888119968000, ffff88811996a000) [ 108.001927][ C1] [ 108.004246][ C1] The buggy address belongs to the physical page: [ 108.010662][ C1] page:ffffea0004665a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119968 [ 108.020917][ C1] head:ffffea0004665a00 order:3 compound_mapcount:0 compound_pincount:0 [ 108.029254][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 108.035333][ C1] raw: 4000000000010200 ffffea0004dcc400 dead000000000002 ffff888100043500 [ 108.043911][ C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 108.052483][ C1] page dumped because: kasan: bad access detected [ 108.058886][ C1] page_owner tracks the page as allocated [ 108.064589][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 417, tgid 416 (syz.2.27), ts 37410455366, free_ts 37044589577 [ 108.086044][ C1] post_alloc_hook+0x1f5/0x210 [ 108.090809][ C1] prep_new_page+0x1c/0x110 [ 108.095312][ C1] get_page_from_freelist+0x2ca9/0x2d20 [ 108.100856][ C1] __alloc_pages+0x1fa/0x610 [ 108.105469][ C1] alloc_slab_page+0x6e/0xf0 [ 108.110058][ C1] new_slab+0x98/0x3e0 [ 108.114122][ C1] ___slab_alloc+0x70f/0xb70 [ 108.118713][ C1] __slab_alloc+0x5e/0xa0 [ 108.123041][ C1] __kmem_cache_alloc_node+0x204/0x2d0 [ 108.128503][ C1] __kmalloc+0xa4/0x1e0 [ 108.132655][ C1] read_all_xattrs+0xf7/0x690 [ 108.137331][ C1] __f2fs_setxattr+0x1ec/0x1340 [ 108.142185][ C1] f2fs_setxattr+0x217/0x470 [ 108.146779][ C1] f2fs_initxattrs+0xa1/0x110 [ 108.151454][ C1] security_inode_init_security+0x295/0x3c0 [ 108.157341][ C1] f2fs_init_security+0x34/0x40 [ 108.162214][ C1] page last free stack trace: [ 108.166885][ C1] free_unref_page_prepare+0x80c/0x820 [ 108.172342][ C1] free_unref_page+0x93/0x530 [ 108.177019][ C1] __free_pages+0x67/0x100 [ 108.181471][ C1] __free_slab+0xc7/0x1a0 [ 108.185793][ C1] __unfreeze_partials+0x15a/0x190 [ 108.190902][ C1] put_cpu_partial+0xa9/0x100 [ 108.195580][ C1] __slab_free+0x1c4/0x280 [ 108.199995][ C1] ___cache_free+0xbf/0xd0 [ 108.204409][ C1] qlist_free_all+0xc6/0x140 [ 108.208995][ C1] kasan_quarantine_reduce+0x14a/0x170 [ 108.214449][ C1] __kasan_slab_alloc+0x24/0x80 [ 108.219296][ C1] slab_post_alloc_hook+0x4f/0x2d0 [ 108.224406][ C1] kmem_cache_alloc+0x166/0x320 [ 108.229254][ C1] getname_flags+0xba/0x510 [ 108.233754][ C1] __se_sys_newfstatat+0x127/0x440 [ 108.238878][ C1] __x64_sys_newfstatat+0x9b/0xb0 [ 108.243901][ C1] [ 108.246216][ C1] Memory state around the buggy address: [ 108.251836][ C1] ffff888119968900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.259890][ C1] ffff888119968980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.267940][ C1] >ffff888119968a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.275986][ C1] ^ [ 108.280046][ C1] ffff888119968a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.288096][ C1] ffff888119968b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.296145][ C1] ================================================================== [ 108.304209][ C1] Disabling lock debugging due to kernel taint [ 108.310569][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 108.322303][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 108.330729][ C1] CPU: 1 PID: 1175 Comm: syz.1.259 Tainted: G B syzkaller #0 [ 108.339510][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 108.349605][ C1] RIP: 0010:__queue_work+0x582/0xd50 [ 108.354916][ C1] Code: b4 00 00 00 e8 7f 4d 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 ed e7 b8 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 00 d8 6e 00 49 8b 3e e8 88 e3 b8 03 [ 108.374549][ C1] RSP: 0000:ffffc900001b0c78 EFLAGS: 00010046 [ 108.380622][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88810921d100 [ 108.388599][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 108.396571][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb [ 108.404544][ C1] R10: dffffc0000000000 R11: ffffed102332d139 R12: ffff8881199689c8 [ 108.412546][ C1] R13: ffff88811d38cc00 R14: 0000000000000000 R15: 000000007fffffff [ 108.420523][ C1] FS: 00007fad81a9c6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 108.429454][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.436037][ C1] CR2: 0000200000212030 CR3: 000000013247c000 CR4: 00000000003506a0 [ 108.444014][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 108.451990][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 108.459967][ C1] Call Trace: [ 108.463243][ C1] [ 108.466106][ C1] delayed_work_timer_fn+0x61/0x80 [ 108.471272][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 108.477088][ C1] call_timer_fn+0x46/0x2a0 [ 108.481600][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 108.487412][ C1] __run_timers+0x672/0x9b0 [ 108.491971][ C1] ? calc_index+0x200/0x200 [ 108.496503][ C1] ? __kasan_check_read+0x11/0x20 [ 108.501545][ C1] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 108.507196][ C1] run_timer_softirq+0x6a/0xf0 [ 108.511970][ C1] handle_softirqs+0x1d7/0x600 [ 108.516757][ C1] __irq_exit_rcu+0x52/0xf0 [ 108.521311][ C1] irq_exit_rcu+0x9/0x10 [ 108.525565][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 108.531208][ C1] [ 108.534144][ C1] [ 108.537092][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 108.543100][ C1] RIP: 0010:finish_task_switch+0x173/0x7c0 [ 108.548908][ C1] Code: 80 3c 2b 00 74 08 4c 89 f7 e8 99 8a 69 00 4d 8b 2e 4d 85 ed 0f 85 cd 00 00 00 4c 89 e7 e8 55 9a b3 03 fb 49 8d 9f 48 0b 00 00 <48> 89 d8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 0f b6 04 28 [ 108.568538][ C1] RSP: 0000:ffffc90006cef6c8 EFLAGS: 00000282 [ 108.574619][ C1] RAX: 0000000080000001 RBX: ffff88810921dc48 RCX: 0000000000000000 [ 108.582618][ C1] RDX: 0000000000000001 RSI: ffffffff85ca6840 RDI: 00000000ffffffff [ 108.590593][ C1] RBP: ffffc90006cef710 R08: ffff88811d859447 R09: 1ffff11023b0b288 [ 108.598575][ C1] R10: dffffc0000000000 R11: ffffed1023b0b289 R12: ffff8881f6f37d80 [ 108.606555][ C1] R13: 0000000000000000 R14: ffff8881f6f388e0 R15: ffff88810921d100 [ 108.614576][ C1] ? finish_task_switch+0x16b/0x7c0 [ 108.619814][ C1] ? switch_mm_irqs_off+0x730/0x960 [ 108.625270][ C1] __schedule+0xbea/0x14b0 [ 108.629711][ C1] ? release_firmware_map_entry+0x190/0x190 [ 108.635616][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 108.641034][ C1] preempt_schedule_irq+0xaa/0x120 [ 108.646173][ C1] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 108.651915][ C1] ? __kasan_check_write+0x14/0x20 [ 108.657027][ C1] ? folio_unlock+0x4f/0x60 [ 108.661532][ C1] raw_irqentry_exit_cond_resched+0x29/0x30 [ 108.667439][ C1] irqentry_exit+0x37/0x40 [ 108.671871][ C1] sysvec_reschedule_ipi+0x78/0x80 [ 108.677021][ C1] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 108.682511][ C1] RIP: 0010:handle_mm_fault+0x3db/0x26b0 [ 108.688203][ C1] Code: 00 00 00 31 f6 e8 d5 2e 0b 00 4c 8b 74 24 28 4c 89 b4 24 e0 00 00 00 4d 8d a6 88 00 00 00 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 e7 e8 db 2b 0b 00 4d 8b 24 24 4d 85 e4 74 49 e8 1d a1 [ 108.707834][ C1] RSP: 0000:ffffc90006cef9a0 EFLAGS: 00000246 [ 108.713927][ C1] RAX: 1ffff1102205a7df RBX: 1ffff1102205a7d0 RCX: 0000000000000000 [ 108.721898][ C1] RDX: 0000000000000068 RSI: 0000000000000000 RDI: ffffc90006cefaf0 [ 108.729878][ C1] RBP: ffffc90006cefb70 R08: ffffc90006cefaef R09: ffffc90006cefa88 [ 108.737853][ C1] R10: dffffc0000000000 R11: fffff52000d9df5e R12: ffff8881102d3ef8 [ 108.745852][ C1] R13: dffffc0000000000 R14: ffff8881102d3e70 R15: 1ffff1102205a7d2 [ 108.753836][ C1] ? __cfi_handle_mm_fault+0x10/0x10 [ 108.759128][ C1] __get_user_pages+0x34b/0xdb0 [ 108.764009][ C1] ? populate_vma_page_range+0x120/0x120 [ 108.769685][ C1] ? userfaultfd_unmap_complete+0x28f/0x310 [ 108.775597][ C1] __mm_populate+0x2ea/0x430 [ 108.780198][ C1] ? __cfi___mm_populate+0x10/0x10 [ 108.785310][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 108.790703][ C1] vm_mmap_pgoff+0x271/0x3f0 [ 108.795314][ C1] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 108.800428][ C1] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 108.806495][ C1] ? sysvec_reschedule_ipi+0x78/0x80 [ 108.811789][ C1] ksys_mmap_pgoff+0xf6/0x1d0 [ 108.816475][ C1] __x64_sys_mmap+0xfa/0x110 [ 108.821067][ C1] x64_sys_call+0x8fd/0x9a0 [ 108.825575][ C1] do_syscall_64+0x4c/0xa0 [ 108.829991][ C1] ? clear_bhb_loop+0x30/0x80 [ 108.834677][ C1] ? clear_bhb_loop+0x30/0x80 [ 108.839363][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.845267][ C1] RIP: 0033:0x7fad80b9de59 [ 108.849684][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.869314][ C1] RSP: 002b:00007fad81a9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 108.877736][ C1] RAX: ffffffffffffffda RBX: 00007fad80e26090 RCX: 00007fad80b9de59 [ 108.885716][ C1] RDX: b635773f06ebbeeb RSI: 0000000000b36000 RDI: 0000200000000000 [ 108.893692][ C1] RBP: 00007fad80c33e6f R08: ffffffffffffffff R09: 0000000000000000 [ 108.901668][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 108.909646][ C1] R13: 00007fad80e26128 R14: 00007fad80e26090 R15: 00007ffcf7c5eef8 [ 108.917628][ C1] [ 108.920657][ C1] Modules linked in: [ 108.924558][ C1] ---[ end trace 0000000000000000 ]--- [ 108.930035][ C1] RIP: 0010:__queue_work+0x582/0xd50 [ 108.935328][ C1] Code: b4 00 00 00 e8 7f 4d 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 ed e7 b8 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 00 d8 6e 00 49 8b 3e e8 88 e3 b8 03 [ 108.954935][ C1] RSP: 0000:ffffc900001b0c78 EFLAGS: 00010046 [ 108.961014][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88810921d100 [ 108.968985][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 108.976953][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb [ 108.984926][ C1] R10: dffffc0000000000 R11: ffffed102332d139 R12: ffff8881199689c8 [ 108.992898][ C1] R13: ffff88811d38cc00 R14: 0000000000000000 R15: 000000007fffffff [ 109.000872][ C1] FS: 00007fad81a9c6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 109.009890][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.016475][ C1] CR2: 0000200000212030 CR3: 000000013247c000 CR4: 00000000003506a0 [ 109.024460][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.032429][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 109.040448][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 109.048215][ C1] Kernel Offset: disabled [ 109.052543][ C1] Rebooting in 86400 seconds..