last executing test programs: 17.718108197s ago: executing program 0 (id=493): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x4}, {0x2, 0x2}], {}, [], {0x10, 0x5}}, 0x3c, 0x2) ioctl$TCSETA(r0, 0x5406, &(0x7f00000010c0)={0x6, 0x8, 0x8001, 0x0, 0x0, "32f9ce731bc3e65c"}) getdents(0xffffffffffffffff, &(0x7f0000000500)=""/173, 0xad) 17.055386627s ago: executing program 0 (id=497): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x8000000004) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000690000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="40007a070a00128164b87023dcb1000085f2342d6312f77d8c375086e1ff1b8aeb5619a954cf82496bf7d2789e3bb6fc775c4030fc8e9552b35e5fa86d636a26422f96a455066e1161abac3aea3ac6ff7a854ae0e12e2b93e0c2a4f7784bbcdb191f31e1bf247b792103b389a2c59c37543d82eebb912eb7bf3c30a47369862228cb9225837bb6f39d42d8056efdb1e087be7b9e45068ba3601dab3f36dd50f5d37ff5b3fb86f49efc88d37319d8cd7692cce0"], 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") 15.552109441s ago: executing program 0 (id=504): r0 = open(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002780)=@newtaction={0x2b8, 0x30, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{0x2a4, 0x1, [@m_nat={0x54, 0x20, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x678e, 0x8, 0x401, 0x7}, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100, 0xff, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0x160, 0x1d, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x5, 0x5, 0x8, 0x5305ffdc}, 0x4}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xfffffffd}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0xd2, 0x6, "d88df9ef021ea236a7d1699029dc77d9fd00ce0c514fbb3a758813f82ddb3fe3880b43f994d2e04ea15db1e25efc934decf260e00dd17c6b46fbe19370874a3a9cb5378c0b2c4641a42c1d616920914def20b90a4be3c5b7698f247d7d8c404eefdacbc4dabb342372d24afd589f3ec6122c61b0e9a47e39d192630c65e3970d4c66c9d0d670fc04d957ef64620e5749ba417c5f994be77b301b1463476e75c9148c0784e719247a8785ed82b174e7bd3f243b68e6b1db9f1d0fbf454d5f8997045f663a488ca7e55b37d2d430fc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0xbc, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x8d, 0x6, "4d11ef01da7337625695ddc3d5012aa6f3638794346943b9ee757a1a4ac5f8ce5f6016d63b9db431952a32c8ea295bd8bea222698ce859490fd8784037c47670d89010426411cce59038883b69db801c8d08e1d6ea90e03c637d4dc6a17cefee6540c36dba3573d039f7b6e9fb810ecdc039c3105f3423c721e04c7b057f85097c23a753a9cfb0eba5"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x30, 0x13, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x2b8}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x10000000000}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000240)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$KVM_RESET_DIRTY_RINGS(r0, 0xaec7) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) socket$pppl2tp(0x18, 0x1, 0x1) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) 12.878382704s ago: executing program 0 (id=509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe2$9p(0x0, 0x4000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) timerfd_create(0xa, 0x80800) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111d00000ff030000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 11.963416888s ago: executing program 0 (id=516): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000001040)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0x21, 0xbf, {0xbf, 0x22, "90fbdfc8e14377e88a8170d3818af2814f21157760afdb27d42da3ceaed4f488cc512a6b1dfcc2e7b9f86bca164d1df5fad87a14c2ab5b110e871971117f64e64261612340179293d9b270664cbcf2efcfd37ab941e47da5ffd5e15ae495c63df338e333b2d64c91c90e307b7f87a40de8c42ac3de7bac6e0b8e953fd31e59d16c6f3a5e231a45704810f28d63b8361dd52cc3b81f668ea386d3526a072ff2a597241ac279b3540eb4ed689248ea295387ef5dcca6ef8413e76632cd24"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x0, 0xc, 0x9e, "0cc79785e190a49528bc70504653d5ead6ce6a96737c166767615444828b459c452c0b247fd3faf2fe57b6b42fb299cf75e7493892df0d09d20fd88fb12b1b1403aafc2285382a572c1b5daa580d3af5026faf1dd84c3122bcacc2c824672a4706884ce2122c7aafe7c2c05b17964271e8494a6836e00048687c72fb87401e07f158dcedb297e5f28bc8d900445ea258be5fce00ef1a27a3eed00ade0b13"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x2}}) 7.909128673s ago: executing program 0 (id=531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) get_robust_list(r0, &(0x7f00000004c0)=&(0x7f0000000480)={&(0x7f0000000340)={&(0x7f0000000300)}, 0x0, &(0x7f0000000440)={&(0x7f0000000380)}}, &(0x7f0000000540)=0x18) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r7, 0x31f, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) unshare(0x40020000) 6.522242786s ago: executing program 2 (id=541): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e21, 0x5, @remote, 0x5}, 0x1c) dup2(0xffffffffffffffff, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendto$inet(r2, &(0x7f0000000140)="46015b", 0x3, 0x8040, 0x0, 0x0) close(r2) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x36c, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x103282, 0x14) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) 6.421047117s ago: executing program 4 (id=542): syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x8, 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setrlimit(0xf, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x3e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x200, 0xc8, 0x8, 0x200, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xffffff00], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0x198, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1b, 0x2}}, @common=@ah={{0x30}, {[0x0, 0x4d5]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x100, 0x8, 0x8, '\x00', 'syz1\x00', {0xe}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) 5.361936634s ago: executing program 3 (id=545): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x59) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x11000000) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee01, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) (fail_nth: 1) 3.951689646s ago: executing program 4 (id=546): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffeffffff7fbf, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x20040040) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000191000/0x2000)=nil, 0x2000, 0x1000002, 0x11012, r2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_clone(0x440c7200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/time\x00') setns(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0380c20000000180c20000000800450000380000000000019078ac1e0001ac1414aa030090781200022825000000000000002e3300000000000000000000000022ebffff0000"], 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x2616, @host}, 0x10) keyctl$session_to_parent(0x12) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_buf(r10, 0x1, 0x1a, &(0x7f0000000040)=""/41, &(0x7f0000001400)=0x29) 3.695532501s ago: executing program 3 (id=548): fsopen(&(0x7f0000000000)='bpf\x00', 0x1) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x82, &(0x7f0000000140)={[{@user_xattr}, {@errors_remount}, {@noblock_validity}, {@test_dummy_encryption_v1}], [], 0x3d}, 0xfd, 0x464, &(0x7f0000001600)="$eJzs3M9vFFUcAPDvzLIF+VkVVH6o9Vck/qC0oHLwotHEgyYmekASD7UsBFnA0JoIIRaNwaPBeDceTfwLPOnF6Nmr3g0JMVxEL66Z2Zl2S3fbLt12K/v5JEvem3m7733nzRvevNltAANrJPsnidgaEb9l6TTPzmoUhbJyN29cmvz7xqXJJBqNt/5M8n1/3bg0WZYt37elyOxPI9LPktjbpt6pCxdPT9TrtfNFfnT6zAejUxcuPnvqzMTJ2sna2fEjRw4fGnvh+fHnehLntqytez4+t2/3a+9cfWPy6NX3fvkua+/WYn9rHL0yEiPzjmWrJ3pdWZ9ta0knG/rYELpSiYisu6r5+N8RlZjrvB3x6qd9bRywqhqNRmN7592XG8AdLImOuzYVFwjgjlT+R5/d/5avNZp6rAvXX2reAGVx3yxezT0bIi3KVG+5v+2l4WLd5Ojlf76OVVqHAABo9UM2/3mm3fxvOO5rKbc9Xw9uzlfujoh7IuLeiNgZEbsi8rL3R8QDXdY/ckt+4fwnvXZbgS1TNv97sXi2NX/+V8z+/m0MV4rctjz+anLiVL12sDgm+6O6McuPLVLHj6/8+kWnfSPF3K98ZfWXc8GiHdc2bJz/nuMT0xMri3rO9U/yW/yZhfHPPbnKUrsjYs9tfP6miDj11Lf7Ou1fOv5F9OA5U+ObiCeb/X85Fol/keeTo5uiXjs4Wp4Vrco7iCtvdqp/RfH3QNb/m9ue/7PxDyetz2unuq/jyu+fd7yn6eL8P1Zuyc7/oeTtPD1UbPtoYnr6/FjEUPL6wu3jc59W5svy17fuinis/fjPrnHZOZbFvzcispP4wYh4KCIeLtr+SEQ8GvlHtDNzMyJ+fvnx92dPhS7i7/CWnsr6//i8/o8l+r/7ROX0T993qn95/X84T+0vtizn+rfcBq7k2AEAAMD/RZp/Bz5JD8ym0/TAgeZ3+HfG5rR+bmr66RPnPjx7vPld+eGopuVK146W9dCxYm24zI/fkj9UrBt/Vbkrz28u1gaB/tnSYfxn/qj0u3XAqvN7LRhcxj8MLuMfBpfxD4NrueO/scrtANZeu/E/04d2AGvP/B8Gl/EPg8v4h8HVHP/H+t0MYG2t5Hf9EkskZnp8eIfWSVx5ItJ10Yx1kYhI8r+kv3ThajHu6rUv322m+t74Dol+XpUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6578AAAD//6nq3AI=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000008540)=[{{&(0x7f00000003c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000740)=""/144, 0x90}, {&(0x7f0000000800)=""/122, 0x7a}, {&(0x7f0000000280)=""/42, 0x2a}, {&(0x7f0000000880)=""/231, 0xe7}, {&(0x7f0000000980)=""/101, 0x65}, {&(0x7f0000000a00)=""/157, 0x9d}], 0x6}}, {{&(0x7f0000000b40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000bc0)=""/163, 0xa3}, {&(0x7f0000000300)=""/56, 0x38}, {&(0x7f0000000c80)=""/162, 0xa2}, {&(0x7f0000000d40)=""/207, 0xcf}, {&(0x7f0000000e40)=""/192, 0xc0}], 0x5, &(0x7f0000000f80)=""/89, 0x59}, 0xfffffff9}, {{&(0x7f0000002080)=@vsock, 0x80, &(0x7f0000000440)=[{&(0x7f0000002100)=""/98, 0x62}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/205, 0xcd}, {&(0x7f0000003280)=""/4096, 0x1000}], 0x4, &(0x7f0000000640)=""/50, 0x32}, 0x7d5}, {{&(0x7f0000004280)=@ieee802154, 0x80, &(0x7f0000001000)=[{&(0x7f0000008740)=""/144, 0x90}, {&(0x7f00000043c0)=""/69, 0x45}, {&(0x7f0000004440)=""/68, 0x44}], 0x3, &(0x7f00000044c0)=""/65, 0x41}, 0x7a56}, {{0x0, 0x0, &(0x7f0000005880)=[{&(0x7f0000004540)=""/4096, 0x1000}, {&(0x7f0000005540)=""/173, 0xad}, {&(0x7f0000005600)=""/41, 0x29}, {&(0x7f0000005640)=""/32, 0x20}, {&(0x7f0000005680)=""/251, 0xfb}, {&(0x7f0000005780)=""/91, 0x5b}, {&(0x7f0000005800)=""/91, 0x5b}], 0x7, &(0x7f0000005900)=""/47, 0x2f}, 0x82}, {{&(0x7f0000005940)=@nfc, 0x80, &(0x7f0000006d00)=[{&(0x7f00000059c0)=""/93, 0x5d}, {&(0x7f0000005a40)=""/139, 0x8b}, {&(0x7f0000005b00)=""/237, 0xed}, {&(0x7f0000005c00)=""/4096, 0x1000}, {&(0x7f0000006c00)=""/89, 0x59}, {&(0x7f0000006c80)=""/118, 0x76}], 0x6}, 0xb0}, {{&(0x7f0000006d80)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000007140)=[{&(0x7f0000006e00)=""/112, 0x70}, {&(0x7f0000006e80)=""/200, 0xc8}, {&(0x7f0000006f80)=""/68, 0x44}, {&(0x7f0000007000)=""/27, 0x1b}, {&(0x7f0000007040)=""/249, 0xf9}], 0x5, &(0x7f00000071c0)=""/210, 0xd2}, 0xdac}, {{&(0x7f00000072c0)=@nl=@proc, 0x80, &(0x7f0000008440)=[{&(0x7f0000007340)=""/27, 0x1b}, {&(0x7f0000007380)=""/93, 0x5d}, {&(0x7f0000007400)=""/11, 0xb}, {&(0x7f0000007440)=""/4096, 0x1000}], 0x4, &(0x7f0000008480)=""/171, 0xab}, 0x5}], 0x8, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r3, &(0x7f00000000c0)='./file1\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) getdents(r3, &(0x7f0000001080)=""/4090, 0xffa) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000240)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.69511239s ago: executing program 1 (id=549): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000700), 0x8c03, &(0x7f0000000240)={[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xb, 0xf84, 0x6}, 0x1c) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x3, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000000800)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="13b228a542cbaa78651b7f60940a12412b892f9fdbaa10268feb31018cf9140af3958a9b57e7d98717376d4c4e6724f160bbb943d232e65e66bc544d0a579ab726ec99fb2b00b62ae2040795576db422b60aab733753130b29c8dcf3e78b1b16c8bf73507352bda9778db6edbcce06f98f532dad5c71beadf7ffdc0c71fa30a58ec5febcbd148c3202ced6a48c0c40c732e79967cf51e0a46448267f63f3fbe550031a8cb25a6b2ba742bbf1fb19365e0cb424fb4b4ede3d1e9498cc9c58620f75ca3b3ab81c7b3527681d7abdaedf6b8f82"], 0x1, 0x2fb, &(0x7f0000000380)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_fuse_handle_req(r2, &(0x7f0000004140)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a30bf328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d12e7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13776204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edcd3f35cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) gettid() socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000700), 0x8c03, &(0x7f0000000240)={[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xb, 0xf84, 0x6}, 0x1c) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x3, 0x0, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000000800)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="13b228a542cbaa78651b7f60940a12412b892f9fdbaa10268feb31018cf9140af3958a9b57e7d98717376d4c4e6724f160bbb943d232e65e66bc544d0a579ab726ec99fb2b00b62ae2040795576db422b60aab733753130b29c8dcf3e78b1b16c8bf73507352bda9778db6edbcce06f98f532dad5c71beadf7ffdc0c71fa30a58ec5febcbd148c3202ced6a48c0c40c732e79967cf51e0a46448267f63f3fbe550031a8cb25a6b2ba742bbf1fb19365e0cb424fb4b4ede3d1e9498cc9c58620f75ca3b3ab81c7b3527681d7abdaedf6b8f82"], 0x1, 0x2fb, &(0x7f0000000380)="$eJzs3E1PE1scx/F/HyhtCZTFzb25JoYT3ehmAtW10hhIjE0kSI0PickAU206tmSmwdQY0ZVb44twQViyI1HeABt3unFj4oKNiQtZGMd0OkNpGUCgpQjfT0LmMOf8OmcOA/lPQ2f9zuvHxbyt5fWKhONKQiIiGyKDEhZfyNuG3XZMtnohF/u+fzx76+69G5lsdmxSqfHM1KW0Umpg6N2TZwlv2EqvrA0+WP+W/rL279r/67+mHhVsVbBVqVxRupouf67o06ahZgt2UVNqwjR021CFkm1Y9f5yvT9vlufmqkovzfYn5yzDtpVeqqqiUVWVsqpYVRV5qBdKStM01Z8U7CW3ODmpZw4YnmnzZNAhlpXRIyKS2NaTW+zKhAAAQFe11v9hUe2s/5fOrVb6bi8PePX/Siyo/r/8qf5aTfV/XEQC63//+IH1v76/+n97RXS6HKr+x/EwFNu2K9Ro1jqtjJ70fn9dL+8vDbsN6n8AAAAAAAAAAAAAAAAAAAAAAP4GG46Tchwn5W/9r14RiYuI/31ANCIiV7swZbTRIX7+OAEaH9yLDoiYr+Zz87n61huwKiKmGDIsKfnpXg+eWtv/5JGqGZT35oKXX5jPRdyeTF4Kbn5EUj3Smnec8evZsRFV15zvkeTWfFpS8k9wPh2Yj8mF81vymqTkw4yUxZRZdx6N/PMRpa7dzLbkE+44AAAAAABOAk1tCrx/17Sd+uv5zfvr1vcHIo376+HA+/OonIl299wBAAAAADgt7OrTom6ahrVLIyF7jzl4I9qhV/bP8E9T/v8y7DDmq/c84c4sgn/wpq64t3PPeL+I7GdZQvtYlh0aYTlIaqh2NuqwK+a/bVRbtKAxMjHaoWs1oNG08v+9efujfYe4suxfAe2ffGT3C6DnaP76AAAAADhKjaLf3zPa3QkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAKHcVj0rp9jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBx8TsAAP//A3v+lA==") (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000100)={'#! ', './file1'}, 0xb) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) fdatasync(r3) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) syz_fuse_handle_req(r2, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) gettid() (async) 3.638552242s ago: executing program 2 (id=550): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000052000000040000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x40300, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r4, 0x0, 0xee01) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000060000000600000000300000002000000000000130e0000001000000000000012050000000400000002000005070000000800000004000000e5000000100000000200000008000000050000000000000e02000000ad1196e1000000000100000d000000000500000001000000005f00200f0f6bf061cde2e0e6e5e82262e16467b9b9682f121e8fb582ed24aad4764beb97400828120974f54b5814051a030412d708a2998dbe76e8373ae8eb2be610ca61f585966e70b9f11e261eb54b12d0021567b9675bfeb203cf453641207f6a0f6c"], &(0x7f0000000780)=""/203, 0x7b, 0xcb, 0x0, 0x7ff, 0x0, @void, @value}, 0x28) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ppoll(&(0x7f0000000280)=[{r0, 0x9080}, {r3}, {r5, 0x200}], 0x3, 0x0, &(0x7f0000000340)={[0x4]}, 0x8) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@security={'security\x00', 0x64, 0x4, 0x310, 0x100000c, 0x158, 0x0, 0xc0, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x20, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x8004, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) socket(0x840000000002, 0x3, 0x100) (async) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffff3) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.627874232s ago: executing program 4 (id=551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xe2a4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c25"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x24040400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000280)={r1, 0x4001}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f0000000e40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000040)=""/30, &(0x7f0000000240), &(0x7f0000000280), 0x1, r0}, 0x38) 3.570335592s ago: executing program 2 (id=552): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc0000000, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000002c0)={'veth1_to_bond\x00', 0x200}) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r5, 0x0, &(0x7f0000001780)=""/4096}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r7, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x755, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xac, 0x170, 0x6, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xfffd, 0x7, 0x1, {0x22, 0xef0}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7f, 0x40}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 3.569663392s ago: executing program 1 (id=553): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe2$9p(0x0, 0x4000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) timerfd_create(0xa, 0x80800) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2.921061563s ago: executing program 4 (id=554): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000480)="b1f30b9f56962a5dfbd629b3b460c856e589619a7c96bd6d8dc611be7a78ffffdc049f7e38e4faf3252d5f5046ff09", &(0x7f00000005c0)=""/150}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) gettid() io_setup(0x8, &(0x7f00000001c0)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x20) r3 = socket$inet(0x2, 0x6000000000000001, 0x0) fsopen(&(0x7f0000000000)='qnx6\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) recvmsg(r3, &(0x7f0000000700)={&(0x7f0000000780)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/86, 0x56}, {&(0x7f0000000880)=""/204, 0xcc}, {&(0x7f0000000980)=""/149, 0x95}, {&(0x7f0000000a40)=""/189, 0xbd}, {&(0x7f0000000680)=""/42, 0x2a}], 0x5, &(0x7f0000000b80)=""/72, 0x48}, 0x2001) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)}, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4cf1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000c00)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000540)={&(0x7f00007cb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/48, 0x30, 0x0, &(0x7f0000000500)=""/52, 0x34}, &(0x7f0000000580)=0x40) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 2.852996344s ago: executing program 3 (id=555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe2$9p(0x0, 0x4000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) timerfd_create(0xa, 0x80800) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111d00000ff030000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2.169744315s ago: executing program 1 (id=556): syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x8, 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setrlimit(0xf, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x3e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x200, 0xc8, 0x8, 0x200, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xffffff00], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0x198, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1b, 0x2}}, @common=@ah={{0x30}, {[0x0, 0x4d5]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x100, 0x8, 0x8, '\x00', 'syz1\x00', {0xe}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) 1.83432554s ago: executing program 4 (id=557): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@discard}, {@abort}, {@dioread_lock}, {@norecovery}, {@nombcache}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}, {@resuid}, {@init_itable_val}, {@jqfmt_vfsv1}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@index_on}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40000003, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f000001fb00)='./file1\x00', &(0x7f000001fb40)='./file2\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) unlink(&(0x7f0000000140)='./file1\x00') 1.690756723s ago: executing program 3 (id=558): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x59) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x11000000) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee01, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) (fail_nth: 2) 330.584134ms ago: executing program 3 (id=559): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000001740)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@jqfmt_vfsv0}, {@noblock_validity}, {@resgid}, {@sysvgroups}, {@usrquota}, {@usrquota}]}, 0x12, 0x4dc, &(0x7f0000000d80)="$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") mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, 0x0) (async) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, 0x0) mount$incfs(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) llistxattr(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000180)=@filename='./file2/file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ext3\x00', 0x4, 0x0) 286.755935ms ago: executing program 2 (id=560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xa, 0xb, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 198.390107ms ago: executing program 2 (id=561): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000008, &(0x7f0000000000)={[{@errors_remount}, {@bsdgroups}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000c80)='map_files\x00') getdents(r1, &(0x7f00000001c0)=""/35, 0x23) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x1}, 0x1}}, 0x10) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x0) (async) getdents64(r1, 0x0, 0x43) pwrite64(r0, &(0x7f0000000000)="06", 0x1, 0x709c) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)={0xd, 0x8005, 0x1, 0x1, 0x1, 0x0, [{0x9, 0x7, 0x1, '\x00', 0x4}]}) 194.185837ms ago: executing program 1 (id=562): socket(0x21, 0x1, 0x9) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x88, 0x4) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) syz_emit_ethernet(0x46, &(0x7f0000000580)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "04c2ad", 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x4e21, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0, @ANYRESOCT=r2, @ANYRES16=r0, @ANYRES64=r0, @ANYRESDEC=r2, @ANYRESHEX], 0x0) 155.194777ms ago: executing program 1 (id=563): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000100)={[{@huge_within_size}]}) chdir(&(0x7f0000000280)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x1040c) ftruncate(r2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.30414ms ago: executing program 4 (id=564): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xe2a4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x24040400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000280)={r1, 0x4001}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f0000000e40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000040)=""/30, &(0x7f0000000240), &(0x7f0000000280), 0x1, r0}, 0x38) 5.1608ms ago: executing program 1 (id=565): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00042aff010000dbdf250c000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040040}, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffee8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000340)=r4}, 0x20) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x20, 0x1, 0x1b, 0x200, {{0x14, 0x4, 0x0, 0x13, 0x50, 0x64, 0x0, 0xe, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x2f}, {[@rr={0x7, 0x17, 0x54, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x2b}, @loopback]}, @timestamp_prespec={0x44, 0x14, 0xee, 0x3, 0x0, [{@remote, 0xd4}, {@remote, 0x5}]}, @generic={0x86, 0xc, "bb6b495fd67fe6d423eb"}, @end, @end]}}}}}) (async) r9 = syz_open_dev$vcsn(&(0x7f0000000840), 0x1, 0x82) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x24, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x2, 0x1, 0x4, 0x7, 0x6, 0x80, 0x10}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}, @map_fd={0x18, 0x2, 0x1, 0x0, r6}, @generic={0x7, 0x9, 0xe, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x5, 0xf1, &(0x7f0000000600)=""/241, 0x41100, 0x8, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0xc, 0xa, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000880)=[r0, r0, r9, r0, r0], &(0x7f00000008c0)=[{0x1, 0x4, 0xa, 0x1}], 0x10, 0xff, @void, @value}, 0x94) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 3.73728ms ago: executing program 3 (id=566): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe2$9p(0x0, 0x4000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) timerfd_create(0xa, 0x80800) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 0s ago: executing program 2 (id=567): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7a, 0x63, 0xa, 0xff00}, [@call={0x55}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x8, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000ffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) readv(r3, &(0x7f0000000200)=[{&(0x7f0000000300)=""/136, 0x88}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000a00)=""/4096, &(0x7f0000000500)=0x1000) io_setup(0xc1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$can_bcm(r3, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000003c0)={"5daea7b34c979b7de15638e356c4c6e9", 0x0, 0x0, {0x5, 0xfffffff6}, {0x8, 0x7}, 0x7fff, [0x1363, 0x0, 0x2252, 0x48f, 0x8, 0x7, 0x8, 0x800000000000000, 0x100, 0x5, 0x868, 0x8, 0xf767a52, 0x3, 0x3, 0x6]}) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000240)=0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000004c0)="5499cdbe0672d0c753fdb343385dacc08ec76b35bf5502f4bdbd8ddbbadaa99c0ed36552f482a0744766ea0b05f5921bf078b41d", 0x34) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000900)={"ee34d3c2ac80ce92e2ba0474f60fc693", r6, r7, {0x7, 0xb3e3}, {0x9, 0x4}, 0x7f2, [0x5, 0x3aa, 0x0, 0x2, 0x9d0, 0x2709, 0xffffffffffff7f28, 0xeb8e, 0x10000, 0x2, 0xe, 0x9, 0x4, 0x4, 0xe0, 0xfb]}) r8 = accept$inet6(r2, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000005c0)=0x1c) connect$inet6(r8, &(0x7f0000001a00)={0xa, 0x4e21, 0x10, @private0, 0x9}, 0x1c) kernel console output (not intermixed with test programs): rawip_socket permissive=1 [ 78.577016][ T20] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 78.584405][ T626] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 78.657013][ T312] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 78.807041][ T699] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 78.827023][ T626] usb 4-1: Using ep0 maxpacket: 8 [ 78.831897][ T20] usb 2-1: Using ep0 maxpacket: 32 [ 78.897028][ T312] usb 5-1: Using ep0 maxpacket: 32 [ 78.947101][ T626] usb 4-1: config 4 has an invalid interface number: 244 but max is 0 [ 78.955223][ T20] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 78.963123][ T20] usb 2-1: config 0 has no interface number 0 [ 78.968995][ T626] usb 4-1: config 4 has no interface number 0 [ 78.974879][ T626] usb 4-1: config 4 interface 244 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1023 [ 78.984873][ T626] usb 4-1: config 4 interface 244 has no altsetting 0 [ 79.007049][ T699] usb 3-1: device descriptor read/8, error -71 [ 79.017130][ T312] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 79.025722][ T312] usb 5-1: config 0 has no interface number 0 [ 79.031798][ T312] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 528 [ 79.147130][ T626] usb 4-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa [ 79.156083][ T626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.163939][ T20] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 79.172790][ T626] usb 4-1: Product: syz [ 79.176701][ T626] usb 4-1: Manufacturer: syz [ 79.181191][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.188979][ T626] usb 4-1: SerialNumber: syz [ 79.193618][ T20] usb 2-1: Product: syz [ 79.197591][ T20] usb 2-1: Manufacturer: syz [ 79.201998][ T20] usb 2-1: SerialNumber: syz [ 79.213798][ T312] usb 5-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6 [ 79.223241][ T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.231476][ T20] usb 2-1: config 0 descriptor?? [ 79.236256][ T312] usb 5-1: Product: syz [ 79.240241][ T312] usb 5-1: Manufacturer: syz [ 79.240287][ T1160] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 79.244634][ T312] usb 5-1: SerialNumber: syz [ 79.256371][ T312] usb 5-1: config 0 descriptor?? [ 79.267755][ T20] smsc95xx v2.0.0 [ 79.277111][ T1174] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 79.287062][ T699] usb 3-1: device descriptor read/8, error -71 [ 79.297620][ T312] ftdi_sio 5-1:0.151: FTDI USB Serial Device converter detected [ 79.305460][ T312] usb 5-1: Detected FT-X [ 79.367031][ T370] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 79.407095][ T699] usb usb3-port1: unable to enumerate USB device [ 79.507084][ T312] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 79.527046][ T312] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 79.547039][ T312] ftdi_sio 5-1:0.151: GPIO initialisation failed: -71 [ 79.554027][ T312] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 79.564730][ T312] usb 5-1: USB disconnect, device number 7 [ 79.578808][ T312] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 79.588991][ T312] ftdi_sio 5-1:0.151: device disconnected [ 79.607031][ T370] usb 1-1: Using ep0 maxpacket: 32 [ 79.627340][ T30] audit: type=1400 audit(1745817862.772:545): avc: denied { read } for pid=1159 comm="syz.3.187" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.649952][ T30] audit: type=1400 audit(1745817862.772:546): avc: denied { open } for pid=1159 comm="syz.3.187" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.707092][ T20] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 79.717699][ T20] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 79.727079][ T370] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 79.735050][ T370] usb 1-1: config 0 has no interface number 0 [ 79.741154][ T370] usb 1-1: config 0 interface 151 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 528 [ 79.907445][ T370] usb 1-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6 [ 79.916391][ T370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.924447][ T370] usb 1-1: Product: syz [ 79.928454][ T370] usb 1-1: Manufacturer: syz [ 79.932835][ T370] usb 1-1: SerialNumber: syz [ 79.938034][ T370] usb 1-1: config 0 descriptor?? [ 79.957074][ T1179] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 79.977612][ T370] ftdi_sio 1-1:0.151: FTDI USB Serial Device converter detected [ 79.985571][ T370] usb 1-1: Detected FT-X [ 80.062578][ T1187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.192'. [ 80.177055][ T20] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 80.187643][ T370] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 80.194278][ T20] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 80.201366][ T20] usb 2-1: USB disconnect, device number 9 [ 80.207057][ T370] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 80.227058][ T370] ftdi_sio 1-1:0.151: GPIO initialisation failed: -71 [ 80.234265][ T370] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 80.243425][ T370] usb 1-1: USB disconnect, device number 12 [ 80.250430][ T370] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 80.260102][ T370] ftdi_sio 1-1:0.151: device disconnected [ 80.746337][ T30] audit: type=1400 audit(1745817863.882:547): avc: denied { read write } for pid=1193 comm="syz.1.195" name="uinput" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.769791][ T30] audit: type=1400 audit(1745817863.882:548): avc: denied { open } for pid=1193 comm="syz.1.195" path="/dev/uinput" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.803977][ T30] audit: type=1400 audit(1745817863.882:549): avc: denied { ioctl } for pid=1193 comm="syz.1.195" path="/dev/uinput" dev="devtmpfs" ino=254 ioctlcmd=0x55c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.881390][ T1201] loop4: detected capacity change from 0 to 1024 [ 80.987048][ T26] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 80.995869][ T1201] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.018686][ T30] audit: type=1400 audit(1745817864.162:550): avc: denied { read write } for pid=1200 comm="syz.4.197" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.047224][ T30] audit: type=1400 audit(1745817864.182:551): avc: denied { open } for pid=1200 comm="syz.4.197" path="/43/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.091985][ T1210] loop2: detected capacity change from 0 to 256 [ 81.132010][ T1210] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.277086][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 81.329174][ T626] ipheth 4-1:4.244: Unable to find endpoints [ 81.377413][ T626] usb 4-1: USB disconnect, device number 10 [ 81.397850][ T26] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 81.507313][ T26] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.518068][ T26] usb 1-1: config 0 has no interface number 0 [ 81.714802][ T26] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 81.788312][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.414819][ T26] usb 1-1: Product: syz [ 82.418956][ T26] usb 1-1: Manufacturer: syz [ 82.423357][ T26] usb 1-1: SerialNumber: syz [ 82.431501][ T26] usb 1-1: config 0 descriptor?? [ 82.565230][ T26] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 82.581166][ T1234] loop3: detected capacity change from 0 to 1024 [ 82.597580][ T26] usb 1-1: No valid video chain found. [ 82.657735][ T1234] EXT4-fs (loop3): Ignoring removed orlov option [ 82.665416][ T1236] loop2: detected capacity change from 0 to 1024 [ 82.671783][ T1234] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 82.710020][ T1234] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.763046][ T1234] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 82.771572][ T1236] EXT4-fs (loop2): Ignoring removed orlov option [ 82.778040][ T1236] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 82.785685][ T1234] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,sysvgroups,norecovery,dioread_nolock,orlov,debug,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 82.817016][ T543] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 82.824346][ T1236] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.867472][ T1236] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 82.875767][ T1236] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,sysvgroups,norecovery,dioread_nolock,orlov,debug,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 83.143470][ T1247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.207'. [ 83.227013][ T543] usb 5-1: Using ep0 maxpacket: 32 [ 83.347047][ T543] usb 5-1: config index 0 descriptor too short (expected 2084, got 36) [ 83.355263][ T543] usb 5-1: config 0 has too many interfaces: 207, using maximum allowed: 32 [ 83.363815][ T543] usb 5-1: config 0 has an invalid descriptor of length 67, skipping remainder of the config [ 83.373865][ T543] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 207 [ 83.557080][ T543] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 83.566007][ T26] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 83.585232][ T543] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.593433][ T543] usb 5-1: Product: syz [ 83.597625][ T543] usb 5-1: Manufacturer: syz [ 83.602075][ T543] usb 5-1: SerialNumber: syz [ 83.610975][ T543] usb 5-1: config 0 descriptor?? [ 83.763010][ T370] usb 1-1: USB disconnect, device number 13 [ 83.789849][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 83.789862][ T30] audit: type=1400 audit(1745817866.932:579): avc: denied { create } for pid=1260 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.853406][ T30] audit: type=1400 audit(1745817866.962:580): avc: denied { write } for pid=1260 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.875857][ T1263] netlink: 68 bytes leftover after parsing attributes in process `syz.0.212'. [ 83.900699][ T1263] device veth1_to_bond entered promiscuous mode [ 83.909869][ T30] audit: type=1400 audit(1745817866.962:581): avc: denied { read } for pid=1260 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.940871][ T1263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 83.961998][ T30] audit: type=1400 audit(1745817866.962:582): avc: denied { name_bind } for pid=1260 comm="syz.0.211" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 83.985029][ T1265] loop1: detected capacity change from 0 to 16 [ 83.987279][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.008632][ T30] audit: type=1400 audit(1745817866.962:583): avc: denied { node_bind } for pid=1260 comm="syz.0.211" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 84.022449][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.049283][ T30] audit: type=1400 audit(1745817866.992:584): avc: denied { ioctl } for pid=1262 comm="syz.0.212" path="socket:[20552]" dev="sockfs" ino=20552 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.070480][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.106293][ T26] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.130865][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.131503][ T1265] erofs: (device loop1): mounted with root inode @ nid 36. [ 84.142792][ T26] usb 4-1: config 0 descriptor?? [ 84.167596][ T1265] netlink: 'syz.1.213': attribute type 27 has an invalid length. [ 84.219191][ T1265] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.226258][ T1265] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.328187][ T370] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 84.391276][ T30] audit: type=1400 audit(1745817867.532:585): avc: denied { mount } for pid=1254 comm="syz.3.209" name="/" dev="ramfs" ino=19763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 84.460179][ T1267] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.467042][ T1267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.565243][ T1267] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.572128][ T1267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.590259][ T1274] loop3: detected capacity change from 0 to 1024 [ 84.620039][ T370] usb 1-1: device descriptor read/64, error -71 [ 84.627542][ T1267] device veth0_vlan left promiscuous mode [ 84.642830][ T1267] device veth0_vlan entered promiscuous mode [ 84.648776][ T26] usbhid 4-1:0.0: can't add hid device: -71 [ 84.654516][ T26] usbhid: probe of 4-1:0.0 failed with error -71 [ 84.667576][ T1274] EXT4-fs (loop3): Ignoring removed bh option [ 84.668528][ T1267] device veth1_macvtap left promiscuous mode [ 84.688732][ T26] usb 4-1: USB disconnect, device number 11 [ 84.696942][ T1274] EXT4-fs error (device loop3): ext4_quota_enable:6386: comm syz.3.214: inode #2304: comm syz.3.214: iget: illegal inode # [ 84.715489][ T1267] device veth1_macvtap entered promiscuous mode [ 84.730100][ T1274] EXT4-fs (loop3): Remounting filesystem read-only [ 84.736417][ T1274] EXT4-fs error (device loop3): ext4_quota_enable:6389: comm syz.3.214: Bad quota inode: 2304, type: 2 [ 84.751562][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.759096][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.765127][ T1274] EXT4-fs (loop3): Remounting filesystem read-only [ 84.766439][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.780794][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.788056][ T1274] EXT4-fs warning (device loop3): ext4_enable_quotas:6430: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 84.789409][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.811703][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.820027][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.828252][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.836158][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.844456][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.853033][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.861214][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 84.866710][ T1274] EXT4-fs (loop3): mount failed [ 84.869215][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.881697][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 84.901598][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.919807][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.939836][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.962778][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.982592][ T1274] capability: warning: `syz.3.214' uses deprecated v2 capabilities in a way that may be insecure [ 84.999636][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.016999][ T370] usb 1-1: device descriptor read/64, error -71 [ 85.023395][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 85.043492][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 85.060312][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 85.081091][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 85.098644][ T1265] syz.1.213 (1265) used greatest stack depth: 21152 bytes left [ 85.106109][ T1267] syz.1.213 (1267) used greatest stack depth: 19520 bytes left [ 85.187332][ T30] audit: type=1400 audit(1745817868.332:586): avc: denied { watch watch_reads } for pid=1278 comm="syz.1.215" path="/47/file0" dev="tmpfs" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.239626][ T30] audit: type=1400 audit(1745817868.352:587): avc: denied { execute } for pid=1278 comm="syz.1.215" name="file0" dev="tmpfs" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.297017][ T370] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 85.304557][ T30] audit: type=1400 audit(1745817868.352:588): avc: denied { execute_no_trans } for pid=1278 comm="syz.1.215" path="/47/file0" dev="tmpfs" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.328389][ T1282] netlink: 276 bytes leftover after parsing attributes in process `syz.1.216'. [ 85.357221][ T1282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.216'. [ 85.433852][ T626] usb 5-1: USB disconnect, device number 8 [ 85.607043][ T370] usb 1-1: device descriptor read/64, error -71 [ 85.794808][ T1274] loop3: detected capacity change from 0 to 131072 [ 85.837035][ T626] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 85.911205][ T1274] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 85.925096][ T1274] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 85.934356][ T1274] F2FS-fs (loop3): invalid crc value [ 85.941179][ T1274] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.978013][ T1274] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 85.984919][ T1274] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 86.007009][ T370] usb 1-1: device descriptor read/64, error -71 [ 86.124114][ T1297] loop2: detected capacity change from 0 to 1024 [ 86.130653][ T626] usb 5-1: device descriptor read/64, error -71 [ 86.137609][ T370] usb usb1-port1: attempt power cycle [ 86.229512][ T1297] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,noblock_validity,. Quota mode: none. [ 86.230250][ T1300] loop3: detected capacity change from 0 to 1024 [ 86.298196][ T1300] EXT4-fs (loop3): Ignoring removed orlov option [ 86.304566][ T1300] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 86.312905][ T1300] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 86.327667][ T1300] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 86.336034][ T1300] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,sysvgroups,norecovery,dioread_nolock,orlov,debug,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 86.387932][ T1308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'. [ 86.707049][ T626] usb 5-1: device descriptor read/64, error -71 [ 86.713297][ T370] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 86.887014][ T370] usb 1-1: device descriptor read/8, error -71 [ 86.987050][ T626] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 87.097116][ T370] usb 1-1: device descriptor read/8, error -71 [ 87.116801][ T1378] xt_hashlimit: size too large, truncated to 1048576 [ 87.116842][ T1325] xt_hashlimit: size too large, truncated to 1048576 [ 87.200129][ T1386] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 87.257016][ T626] usb 5-1: device descriptor read/64, error -71 [ 87.384511][ T1396] loop1: detected capacity change from 0 to 1024 [ 87.530472][ T1396] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,noblock_validity,. Quota mode: none. [ 87.587269][ T370] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 87.650255][ T1409] loop1: detected capacity change from 0 to 1024 [ 87.667110][ T626] usb 5-1: device descriptor read/64, error -71 [ 87.687045][ T370] usb 1-1: Using ep0 maxpacket: 32 [ 87.697494][ T1409] EXT4-fs (loop1): Ignoring removed orlov option [ 87.703770][ T1409] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 87.711071][ T1409] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.727811][ T1409] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 87.736047][ T1409] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,sysvgroups,norecovery,dioread_nolock,orlov,debug,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 87.787091][ T626] usb usb5-port1: attempt power cycle [ 87.817044][ T370] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 87.825054][ T370] usb 1-1: config 0 has no interface number 0 [ 87.831267][ T370] usb 1-1: config 0 interface 151 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 528 [ 88.425892][ T370] usb 1-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6 [ 88.461784][ T370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.476115][ T370] usb 1-1: Product: syz [ 88.522512][ T626] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 88.533978][ T370] usb 1-1: Manufacturer: syz [ 88.538484][ T370] usb 1-1: SerialNumber: syz [ 88.544874][ T370] usb 1-1: config 0 descriptor?? [ 88.567067][ T1313] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 88.587505][ T370] ftdi_sio 1-1:0.151: FTDI USB Serial Device converter detected [ 88.590482][ T1438] loop1: detected capacity change from 0 to 1024 [ 88.595548][ T370] usb 1-1: Detected FT-X [ 88.620826][ T1438] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,noblock_validity,. Quota mode: none. [ 88.647030][ T626] usb 5-1: device descriptor read/8, error -71 [ 88.688814][ T1452] 9pnet: Could not find request transport: fd$rfdno=0x0000000000000004 [ 88.773796][ T1458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.250'. [ 88.797047][ T370] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 88.823835][ T370] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 88.847119][ T370] ftdi_sio 1-1:0.151: GPIO initialisation failed: -71 [ 88.857050][ T626] usb 5-1: device descriptor read/8, error -71 [ 88.863360][ T370] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 88.882151][ T370] usb 1-1: USB disconnect, device number 17 [ 88.898278][ T370] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 88.910151][ T370] ftdi_sio 1-1:0.151: device disconnected [ 88.965955][ T1375] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 89.427250][ T1375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.496868][ T1375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.581073][ T1375] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 89.716715][ T1375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.820229][ T1375] usb 2-1: config 0 descriptor?? [ 90.147164][ T626] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 90.225295][ T1472] loop3: detected capacity change from 0 to 40427 [ 90.237038][ T626] usb 5-1: Using ep0 maxpacket: 32 [ 90.297644][ T1472] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 90.305277][ T1472] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 90.315916][ T1472] F2FS-fs (loop3): Found nat_bits in checkpoint [ 90.352162][ T1472] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 90.359064][ T1472] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.367051][ T626] usb 5-1: config index 0 descriptor too short (expected 2084, got 36) [ 90.375111][ T626] usb 5-1: config 0 has too many interfaces: 207, using maximum allowed: 32 [ 90.377057][ T1373] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 90.403567][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 90.403579][ T30] audit: type=1400 audit(1745817873.542:603): avc: denied { link } for pid=1471 comm="syz.3.255" name="file1" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 90.430902][ T626] usb 5-1: config 0 has an invalid descriptor of length 67, skipping remainder of the config [ 90.432059][ T1375] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 90.450927][ T626] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 207 [ 90.452314][ T1375] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 90.459922][ T370] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 90.647056][ T626] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 90.647069][ T1375] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 90.647133][ T1373] usb 3-1: Using ep0 maxpacket: 16 [ 90.656086][ T626] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.676947][ T626] usb 5-1: Product: syz [ 90.681062][ T626] usb 5-1: Manufacturer: syz [ 90.685463][ T626] usb 5-1: SerialNumber: syz [ 90.700327][ T626] usb 5-1: config 0 descriptor?? [ 90.714703][ T1484] loop3: detected capacity change from 0 to 1024 [ 90.727097][ T370] usb 1-1: Using ep0 maxpacket: 16 [ 90.768310][ T1484] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,noblock_validity,. Quota mode: none. [ 90.797059][ T1373] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.814323][ T1373] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.824823][ T1373] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 90.834104][ T1373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.843566][ T1373] usb 3-1: config 0 descriptor?? [ 90.857043][ T370] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 90.865047][ T370] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.875304][ T370] usb 1-1: config 0 has no interface number 0 [ 90.888722][ T30] audit: type=1400 audit(1745817874.032:604): avc: denied { read } for pid=1487 comm="syz.3.259" name="usbmon0" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 90.917258][ T30] audit: type=1400 audit(1745817874.032:605): avc: denied { open } for pid=1487 comm="syz.3.259" path="/dev/usbmon0" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 90.920163][ T1488] loop3: detected capacity change from 0 to 1024 [ 91.008343][ T1488] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.018920][ T1488] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.048978][ T30] audit: type=1400 audit(1745817874.192:606): avc: denied { map } for pid=1487 comm="syz.3.259" path="/56/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.072439][ T30] audit: type=1400 audit(1745817874.192:607): avc: denied { execute } for pid=1487 comm="syz.3.259" path="/56/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.108592][ T370] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 91.117688][ T30] audit: type=1400 audit(1745817874.222:608): avc: denied { ioctl } for pid=1487 comm="syz.3.259" path="/dev/usbmon0" dev="devtmpfs" ino=151 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 91.127027][ T370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.150436][ T370] usb 1-1: Product: syz [ 91.154516][ T370] usb 1-1: Manufacturer: syz [ 91.158923][ T370] usb 1-1: SerialNumber: syz [ 91.168146][ T370] usb 1-1: config 0 descriptor?? [ 91.175526][ T1474] UDC core: couldn't find an available UDC or it's busy: -16 [ 91.183032][ T1474] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 91.217552][ T370] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 91.223714][ T370] usb 1-1: No valid video chain found. [ 91.270824][ T1496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.261'. [ 91.308232][ T30] audit: type=1326 audit(1745817874.452:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1453 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 91.334030][ T30] audit: type=1326 audit(1745817874.472:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1453 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 91.357296][ T30] audit: type=1326 audit(1745817874.472:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1453 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 91.380413][ T30] audit: type=1326 audit(1745817874.472:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1453 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 91.543973][ T1501] loop3: detected capacity change from 0 to 512 [ 92.344719][ T370] usb 5-1: USB disconnect, device number 12 [ 92.437080][ T1375] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 92.469631][ T312] usb 1-1: USB disconnect, device number 18 [ 92.497339][ T1516] loop0: detected capacity change from 0 to 512 [ 92.548339][ T1516] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 92.559536][ T1516] EXT4-fs (loop0): 1 truncate cleaned up [ 92.565012][ T1516] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 93.481222][ T1376] usb 3-1: USB disconnect, device number 10 [ 93.506482][ T1526] loop3: detected capacity change from 0 to 1024 [ 93.537983][ T1527] loop2: detected capacity change from 0 to 1024 [ 93.580452][ T1535] loop4: detected capacity change from 0 to 256 [ 93.618127][ T1375] usb 2-1: USB disconnect, device number 10 [ 93.636097][ T1526] EXT4-fs (loop3): Ignoring removed orlov option [ 93.644995][ T1535] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x6426003b, utbl_chksum : 0xe619d30d) [ 93.657184][ T1526] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 93.664279][ T1526] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.677747][ T1527] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,noblock_validity,. Quota mode: none. [ 93.740677][ T1526] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 93.749546][ T1526] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,sysvgroups,norecovery,dioread_nolock,orlov,debug,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 93.874704][ T1553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.275'. [ 93.944118][ T1552] loop2: detected capacity change from 0 to 512 [ 94.013393][ T1556] incfs: Backing dir is not set, filesystem can't be mounted. [ 94.021036][ T1556] incfs: mount failed -2 [ 94.596391][ T1561] loop3: detected capacity change from 0 to 1024 [ 94.870736][ T1561] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.881460][ T1561] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.899454][ T1561] netlink: 'syz.3.276': attribute type 1 has an invalid length. [ 95.340228][ T1571] loop1: detected capacity change from 0 to 256 [ 95.347631][ T1566] Bluetooth: hci0: Frame reassembly failed (-84) [ 95.363453][ T697] Bluetooth: hci0: Frame reassembly failed (-84) [ 95.512818][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 95.512833][ T30] audit: type=1400 audit(1745817878.652:634): avc: denied { audit_write } for pid=1570 comm="syz.1.279" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 95.539551][ T30] audit: type=1107 audit(1745817878.652:635): pid=1570 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='AdWJM`oa' [ 95.563376][ T1582] loop0: detected capacity change from 0 to 1024 [ 95.595789][ T30] audit: type=1400 audit(1745817878.732:636): avc: denied { map } for pid=1585 comm="syz.1.283" path="socket:[20403]" dev="sockfs" ino=20403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.620395][ T30] audit: type=1400 audit(1745817878.762:637): avc: denied { read write } for pid=1585 comm="syz.1.283" path="socket:[20403]" dev="sockfs" ino=20403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.684128][ T1582] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.709220][ T1582] EXT4-fs warning (device loop0): empty_inline_dir:1858: bad inline directory (dir #12) - no `..' [ 95.870127][ T1589] loop1: detected capacity change from 0 to 40427 [ 95.877168][ T1599] loop4: detected capacity change from 0 to 1024 [ 95.889374][ T1589] F2FS-fs (loop1): invalid crc value [ 95.905819][ T1589] F2FS-fs (loop1): Found nat_bits in checkpoint [ 95.988466][ T1599] EXT4-fs (loop4): Ignoring removed orlov option [ 96.006499][ T1599] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 96.029358][ T1589] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 96.036941][ T1599] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.219084][ T1599] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 96.241630][ T1599] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,sysvgroups,norecovery,dioread_nolock,orlov,debug,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 96.682520][ T1589] overlayfs: failed to resolve './file0': -2 [ 96.754649][ T1609] incfs: Backing dir is not set, filesystem can't be mounted. [ 96.762265][ T1609] incfs: mount failed -2 [ 97.106520][ T1615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.289'. [ 97.145126][ T1623] loop3: detected capacity change from 0 to 512 [ 97.146767][ T30] audit: type=1400 audit(1745817880.282:638): avc: denied { create } for pid=1621 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 97.170331][ T30] audit: type=1400 audit(1745817880.282:639): avc: denied { write } for pid=1621 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 97.199643][ T1624] loop4: detected capacity change from 0 to 512 [ 97.258759][ T1624] EXT4-fs (loop4): orphan cleanup on readonly fs [ 97.265409][ T1624] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.290: bg 0: block 248: padding at end of block bitmap is not set [ 97.279753][ T1624] Quota error (device loop4): write_blk: dquota write failed [ 97.286961][ T1624] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 97.296673][ T1624] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.290: Failed to acquire dquot type 1 [ 97.309261][ T1624] EXT4-fs (loop4): 1 truncate cleaned up [ 97.314911][ T1624] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 97.335929][ T293] attempt to access beyond end of device [ 97.335929][ T293] loop1: rw=2049, want=45112, limit=40427 [ 97.427010][ T1371] Bluetooth: hci0: command 0x1003 tx timeout [ 97.432947][ T1575] Bluetooth: hci0: sending frame failed (-49) [ 97.460423][ T30] audit: type=1400 audit(1745817880.602:640): avc: denied { write } for pid=1626 comm="syz.1.291" name="net" dev="proc" ino=21120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 97.481711][ T30] audit: type=1400 audit(1745817880.602:641): avc: denied { add_name } for pid=1626 comm="syz.1.291" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 97.926057][ T1640] Invalid ELF header magic: != ELF [ 98.056907][ T1649] loop4: detected capacity change from 0 to 256 [ 98.114114][ T1652] loop1: detected capacity change from 0 to 1024 [ 98.120746][ T1649] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 98.179210][ T1653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 98.188070][ T1653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.295'. [ 98.198214][ T1653] loop0: detected capacity change from 0 to 256 [ 98.210971][ T1649] exFAT-fs (loop4): hint_cluster is invalid (17) [ 98.355504][ T1652] EXT4-fs (loop1): Ignoring removed orlov option [ 98.367888][ T1652] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 98.375093][ T1652] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.397763][ T1652] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 98.412077][ T1652] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,sysvgroups,norecovery,dioread_nolock,orlov,debug,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 98.756251][ T1661] incfs: Backing dir is not set, filesystem can't be mounted. [ 98.764487][ T1661] incfs: mount failed -2 [ 99.547906][ T1369] Bluetooth: hci0: command 0x1001 tx timeout [ 99.553757][ T1575] Bluetooth: hci0: sending frame failed (-49) [ 99.595611][ T1667] loop1: detected capacity change from 0 to 256 [ 99.749988][ T1667] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 99.784801][ T1667] exFAT-fs (loop1): hint_cluster is invalid (17) [ 100.911816][ T1680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1680 comm=syz.1.304 [ 100.972472][ T1680] 9pnet: p9_errstr2errno: server reported unknown error  [ 101.016244][ T1685] Invalid ELF header magic: != ELF [ 101.028948][ T1687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.305'. [ 101.598171][ T1371] Bluetooth: hci0: command 0x1009 tx timeout [ 102.104662][ T1703] loop0: detected capacity change from 0 to 1024 [ 102.377651][ T1706] syz.1.309[1706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.379393][ T1706] syz.1.309[1706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.685656][ T1706] loop1: detected capacity change from 0 to 512 [ 104.955767][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 104.955782][ T30] audit: type=1400 audit(1745817885.512:654): avc: denied { integrity } for pid=1699 comm="syz.1.309" lockdown_reason="use of bpf to write user RAM" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 104.988070][ T30] audit: type=1400 audit(1745817886.312:655): avc: denied { append } for pid=1699 comm="syz.1.309" name="001" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 105.028518][ T1706] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 105.042242][ T1706] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.061796][ T1703] EXT4-fs (loop0): Ignoring removed orlov option [ 105.081216][ T1703] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 105.089150][ T1703] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.101546][ T1703] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0. [ 105.657099][ T1369] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 106.262030][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 106.397077][ T1369] usb 2-1: Using ep0 maxpacket: 32 [ 106.527059][ T1369] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 106.545114][ T1369] usb 2-1: config 0 has no interface number 0 [ 106.568085][ T1369] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 528 [ 106.587001][ T20] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 106.787043][ T1369] usb 2-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6 [ 106.805982][ T1369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.814056][ T1369] usb 2-1: Product: syz [ 106.818196][ T1369] usb 2-1: Manufacturer: syz [ 106.822597][ T1369] usb 2-1: SerialNumber: syz [ 106.827020][ T20] usb 5-1: Using ep0 maxpacket: 32 [ 106.832729][ T1747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.322'. [ 106.842540][ T1369] usb 2-1: config 0 descriptor?? [ 106.867050][ T1725] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 106.887801][ T1369] ftdi_sio 2-1:0.151: FTDI USB Serial Device converter detected [ 106.899035][ T1369] usb 2-1: Detected FT-X [ 106.947011][ T20] usb 5-1: config index 0 descriptor too short (expected 2084, got 36) [ 106.965125][ T20] usb 5-1: config 0 has too many interfaces: 207, using maximum allowed: 32 [ 106.985176][ T20] usb 5-1: config 0 has an invalid descriptor of length 67, skipping remainder of the config [ 107.015355][ T20] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 207 [ 107.107021][ T1369] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 107.127053][ T1369] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 107.147029][ T1369] ftdi_sio 2-1:0.151: GPIO initialisation failed: -71 [ 107.155299][ T1369] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 107.174614][ T1369] usb 2-1: USB disconnect, device number 11 [ 107.187025][ T20] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 107.195983][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.201951][ T1369] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 107.223898][ T20] usb 5-1: Product: syz [ 107.225411][ T1369] ftdi_sio 2-1:0.151: device disconnected [ 107.234072][ T20] usb 5-1: Manufacturer: syz [ 107.257004][ T20] usb 5-1: SerialNumber: syz [ 107.262073][ T20] usb 5-1: config 0 descriptor?? [ 107.527011][ T312] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 107.605667][ T1752] loop1: detected capacity change from 0 to 1024 [ 107.631577][ T1752] EXT4-fs (loop1): Ignoring removed orlov option [ 107.638246][ T1752] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 107.645420][ T1752] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.659605][ T1754] loop3: detected capacity change from 0 to 512 [ 107.678048][ T1752] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 107.686780][ T1752] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,sysvgroups,norecovery,dioread_nolock,orlov,debug,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 107.727676][ T1754] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.781673][ T1754] EXT4-fs (loop3): 1 truncate cleaned up [ 107.787541][ T1754] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 107.807536][ T312] usb 1-1: Using ep0 maxpacket: 16 [ 108.307121][ T1371] Bluetooth: hci0: command 0x1003 tx timeout [ 108.313567][ T1575] Bluetooth: hci0: sending frame failed (-49) [ 108.544788][ T20] usb 5-1: USB disconnect, device number 13 [ 108.598843][ T30] audit: type=1326 audit(1745817891.742:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1767 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 108.622900][ T30] audit: type=1326 audit(1745817891.742:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1767 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 108.628975][ T312] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.646307][ T30] audit: type=1326 audit(1745817891.742:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1767 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 108.656934][ T312] usb 1-1: config 0 has no interfaces? [ 108.684621][ T30] audit: type=1326 audit(1745817891.742:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1767 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 108.707919][ T30] audit: type=1326 audit(1745817891.742:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1767 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 108.733933][ T30] audit: type=1326 audit(1745817891.762:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1767 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 108.858899][ T30] audit: type=1326 audit(1745817891.762:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1767 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 108.913824][ T1779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1779 comm=syz.3.328 [ 109.016803][ T30] audit: type=1326 audit(1745817891.762:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1767 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 109.326592][ T1781] loop1: detected capacity change from 0 to 512 [ 109.587420][ T1786] loop3: detected capacity change from 0 to 512 [ 109.777825][ T1781] EXT4-fs (loop1): Unrecognized mount option "bsdgroups"orlov" or missing value [ 109.844677][ T312] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 109.853592][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.861658][ T312] usb 1-1: Product: syz [ 109.865653][ T312] usb 1-1: Manufacturer: syz [ 109.872375][ T312] usb 1-1: SerialNumber: syz [ 109.879999][ T312] usb 1-1: config 0 descriptor?? [ 110.110207][ T1790] loop4: detected capacity change from 0 to 512 [ 110.258037][ T1749] netlink: 'syz.0.324': attribute type 12 has an invalid length. [ 110.265706][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 110.265720][ T30] audit: type=1400 audit(1745817893.392:696): avc: denied { create } for pid=1748 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 110.299284][ T1749] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 110.311260][ T312] usb 1-1: USB disconnect, device number 19 [ 110.330189][ T30] audit: type=1400 audit(1745817893.442:697): avc: denied { mount } for pid=1748 comm="syz.0.324" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 110.426153][ T1368] Bluetooth: hci0: command 0x1001 tx timeout [ 110.432296][ T1575] Bluetooth: hci0: sending frame failed (-49) [ 110.912537][ T1795] loop3: detected capacity change from 0 to 512 [ 111.253279][ T1804] loop1: detected capacity change from 0 to 1024 [ 111.265857][ T1804] EXT4-fs (loop1): Ignoring removed orlov option [ 111.272997][ T1804] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 111.273439][ T30] audit: type=1400 audit(1745817894.422:698): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 111.280405][ T1804] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.313225][ T1807] xt_hashlimit: max too large, truncated to 1048576 [ 111.332634][ T1804] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 111.341984][ T1804] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,sysvgroups,norecovery,dioread_nolock,orlov,debug,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 111.367011][ T1368] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 111.617706][ T1368] usb 5-1: Using ep0 maxpacket: 16 [ 111.687025][ T1373] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 111.747067][ T1368] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 111.755170][ T1368] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.765077][ T1368] usb 5-1: config 0 has no interface number 0 [ 111.927048][ T1373] usb 1-1: Using ep0 maxpacket: 16 [ 111.932028][ T1368] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 111.941100][ T1368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.949431][ T1368] usb 5-1: Product: syz [ 111.953411][ T1368] usb 5-1: Manufacturer: syz [ 111.957850][ T1368] usb 5-1: SerialNumber: syz [ 111.962844][ T1368] usb 5-1: config 0 descriptor?? [ 111.967710][ T1373] usb 1-1: no configurations [ 111.972020][ T1373] usb 1-1: can't read configurations, error -22 [ 112.017467][ T1368] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 112.023634][ T1368] usb 5-1: No valid video chain found. [ 112.127049][ T1373] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 112.154944][ T1827] loop1: detected capacity change from 0 to 512 [ 112.377064][ T1373] usb 1-1: Using ep0 maxpacket: 16 [ 112.385894][ T1827] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 112.427328][ T1373] usb 1-1: no configurations [ 112.431795][ T1373] usb 1-1: can't read configurations, error -22 [ 112.439276][ T1373] usb usb1-port1: attempt power cycle [ 112.467106][ T1369] Bluetooth: hci0: command 0x1009 tx timeout [ 112.857015][ T1373] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 112.967054][ T1373] usb 1-1: Using ep0 maxpacket: 16 [ 113.088496][ T1373] usb 1-1: no configurations [ 113.093066][ T1373] usb 1-1: can't read configurations, error -22 [ 113.165299][ T1834] loop3: detected capacity change from 0 to 512 [ 113.256314][ T1373] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 113.467044][ T1373] usb 1-1: Using ep0 maxpacket: 16 [ 113.507070][ T1373] usb 1-1: no configurations [ 113.511474][ T1373] usb 1-1: can't read configurations, error -22 [ 113.517646][ T1373] usb usb1-port1: unable to enumerate USB device [ 113.784578][ T30] audit: type=1326 audit(1745817896.882:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1838 comm="syz.1.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 113.931611][ T30] audit: type=1326 audit(1745817896.882:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1838 comm="syz.1.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 113.956431][ T30] audit: type=1326 audit(1745817896.882:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1838 comm="syz.1.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 113.985867][ T30] audit: type=1326 audit(1745817896.882:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1838 comm="syz.1.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 114.011209][ T30] audit: type=1326 audit(1745817896.882:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1838 comm="syz.1.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 114.035258][ T30] audit: type=1326 audit(1745817896.882:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1838 comm="syz.1.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 114.060048][ T30] audit: type=1326 audit(1745817896.882:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1838 comm="syz.1.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 114.131294][ T1375] usb 5-1: USB disconnect, device number 14 [ 114.207078][ T1373] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 114.664777][ T1858] loop1: detected capacity change from 0 to 1024 [ 114.677100][ T1373] usb 4-1: Using ep0 maxpacket: 32 [ 114.961132][ T1858] EXT4-fs (loop1): Ignoring removed orlov option [ 114.967930][ T1373] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 115.005174][ T1373] usb 4-1: config 0 has no interface number 0 [ 115.021302][ T1858] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 115.036002][ T1373] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 528 [ 115.234337][ T1373] usb 4-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6 [ 115.243368][ T1373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.277216][ T1373] usb 4-1: Product: syz [ 115.281318][ T1373] usb 4-1: Manufacturer: syz [ 115.285870][ T1373] usb 4-1: SerialNumber: syz [ 115.291174][ T1373] usb 4-1: config 0 descriptor?? [ 115.307061][ T1843] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 115.327628][ T1373] ftdi_sio 4-1:0.151: FTDI USB Serial Device converter detected [ 115.342775][ T1877] loop1: detected capacity change from 0 to 1024 [ 115.348533][ T1373] usb 4-1: Detected FT-X [ 115.353666][ T1877] EXT4-fs (loop1): Ignoring removed orlov option [ 115.359917][ T1877] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 115.366945][ T1877] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.387882][ T1877] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 115.396148][ T1877] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,sysvgroups,norecovery,dioread_nolock,orlov,debug,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 115.697893][ T1373] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 115.727467][ T1373] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 115.787549][ T1373] ftdi_sio 4-1:0.151: GPIO initialisation failed: -71 [ 115.840972][ T1373] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 115.853980][ T1883] loop4: detected capacity change from 0 to 1024 [ 115.858775][ T1373] usb 4-1: USB disconnect, device number 12 [ 115.866407][ T1373] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 115.875697][ T1373] ftdi_sio 4-1:0.151: device disconnected [ 115.898161][ T1883] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,noblock_validity,. Quota mode: none. [ 116.297354][ T1891] bridge0: port 3(gretap0) entered blocking state [ 116.303700][ T1891] bridge0: port 3(gretap0) entered disabled state [ 116.310407][ T1891] device gretap0 entered promiscuous mode [ 116.316054][ T1891] bridge0: port 3(gretap0) entered blocking state [ 116.322290][ T1891] bridge0: port 3(gretap0) entered forwarding state [ 116.431902][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 116.465913][ T30] audit: type=1400 audit(1745817899.292:729): avc: denied { map } for pid=1887 comm="syz.0.355" path="socket:[22650]" dev="sockfs" ino=22650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.488946][ T30] audit: type=1400 audit(1745817899.292:730): avc: denied { read write accept } for pid=1887 comm="syz.0.355" path="socket:[22650]" dev="sockfs" ino=22650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.514166][ T30] audit: type=1400 audit(1745817899.442:731): avc: denied { ioctl } for pid=1887 comm="syz.0.355" path="socket:[21880]" dev="sockfs" ino=21880 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.545908][ T30] audit: type=1400 audit(1745817899.682:732): avc: denied { read } for pid=1894 comm="syz.3.359" path="socket:[22668]" dev="sockfs" ino=22668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.557419][ T1897] loop4: detected capacity change from 0 to 128 [ 116.582157][ T1899] loop3: detected capacity change from 0 to 512 [ 116.623990][ T1899] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 116.635181][ T1899] EXT4-fs (loop3): 1 truncate cleaned up [ 116.640837][ T1899] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.051252][ T1897] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.175740][ T1897] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.930458][ T30] audit: type=1400 audit(1745817901.072:733): avc: denied { setattr } for pid=1896 comm="syz.4.356" path="/67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 118.030963][ T1934] loop3: detected capacity change from 0 to 1024 [ 118.037209][ T30] audit: type=1326 audit(1745817901.122:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1924 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c18c1969 code=0x7ffc0000 [ 118.037236][ T30] audit: type=1326 audit(1745817901.122:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1924 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86c18c1969 code=0x7ffc0000 [ 118.037257][ T30] audit: type=1326 audit(1745817901.122:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1924 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c18c1969 code=0x7ffc0000 [ 118.037279][ T30] audit: type=1326 audit(1745817901.122:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1924 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86c18c1969 code=0x7ffc0000 [ 118.037300][ T30] audit: type=1326 audit(1745817901.122:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1924 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c18c1969 code=0x7ffc0000 [ 118.187064][ T1937] loop4: detected capacity change from 0 to 2048 [ 118.222405][ T1919] loop0: detected capacity change from 0 to 40427 [ 118.267837][ T1919] SELinux: security_context_str_to_sid(u) failed for (dev ?, type ?) errno=-22 [ 118.278149][ T1937] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.288799][ T1934] EXT4-fs (loop3): Ignoring removed orlov option [ 118.288794][ T1937] ext4 filesystem being mounted at /68/bus/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.305883][ T1934] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 118.305917][ T1919] F2FS-fs (loop0): invalid crc value [ 118.318705][ T1934] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.331757][ T1919] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 118.354318][ T1934] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 118.365002][ T1934] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,sysvgroups,norecovery,dioread_nolock,orlov,debug,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 118.400008][ T1919] F2FS-fs (loop0): recover fsync data on readonly fs [ 118.406820][ T1919] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 118.414356][ T1919] SELinux: security_context_str_to_sid(u) failed for (dev loop0, type f2fs) errno=-22 [ 119.800178][ T1575] Bluetooth: hci0: sending frame failed (-49) [ 120.021904][ T1971] loop1: detected capacity change from 0 to 512 [ 120.110801][ T1971] EXT4-fs (loop1): Unrecognized mount option "smackfstransmute=(" or missing value [ 120.403255][ T20] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 120.436223][ T1971] syz.1.375 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 120.481351][ T1971] netlink: 96 bytes leftover after parsing attributes in process `syz.1.375'. [ 120.498307][ T1975] loop3: detected capacity change from 0 to 8192 [ 120.587468][ T1975] loop3: p1 p2[DM] p4 [ 120.597491][ T1975] loop3: p1 size 196608 extends beyond EOD, truncated [ 120.624826][ T1975] loop3: p2 start 4292936063 is beyond EOD, truncated [ 120.647004][ T20] usb 3-1: Using ep0 maxpacket: 32 [ 120.655234][ T1975] loop3: p4 size 50331648 extends beyond EOD, truncated [ 120.684812][ T101] loop3: p1 p2[DM] p4 [ 120.689397][ T101] loop3: p1 size 196608 extends beyond EOD, truncated [ 120.709306][ T101] loop3: p2 start 4292936063 is beyond EOD, truncated [ 120.715882][ T101] loop3: p4 size 50331648 extends beyond EOD, truncated [ 120.723084][ T1984] loop1: detected capacity change from 0 to 2048 [ 120.784080][ T617] udevd[617]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 120.794448][ T618] udevd[618]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 120.803942][ T20] usb 3-1: config index 0 descriptor too short (expected 2084, got 36) [ 120.812034][ T20] usb 3-1: config 0 has too many interfaces: 207, using maximum allowed: 32 [ 120.821069][ T1984] EXT4-fs (loop1): dax option not supported [ 120.830848][ T20] usb 3-1: config 0 has an invalid descriptor of length 67, skipping remainder of the config [ 120.841199][ T20] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 207 [ 120.912501][ T618] udevd[618]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 120.924482][ T617] udevd[617]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 120.943559][ T1984] loop1: detected capacity change from 0 to 256 [ 120.997176][ T1984] exfat: Deprecated parameter 'namecase' [ 121.027265][ T20] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 121.049935][ T1984] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 121.055921][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.099728][ T20] usb 3-1: Product: syz [ 121.103743][ T20] usb 3-1: Manufacturer: syz [ 121.117076][ T20] usb 3-1: SerialNumber: syz [ 121.136189][ T20] usb 3-1: config 0 descriptor?? [ 121.230962][ T1994] loop0: detected capacity change from 0 to 512 [ 121.287487][ T1994] EXT4-fs (loop0): Unrecognized mount option "obj_type=&!-" or missing value [ 121.307011][ T1373] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 121.577055][ T1373] usb 4-1: Using ep0 maxpacket: 32 [ 121.707063][ T1373] usb 4-1: config index 0 descriptor too short (expected 2084, got 36) [ 121.720338][ T1373] usb 4-1: config 0 has too many interfaces: 207, using maximum allowed: 32 [ 121.746247][ T1373] usb 4-1: config 0 has an invalid descriptor of length 67, skipping remainder of the config [ 121.784947][ T1373] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 207 [ 121.827073][ T1375] Bluetooth: hci0: command 0x1003 tx timeout [ 121.833021][ T1575] Bluetooth: hci0: sending frame failed (-49) [ 121.896914][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 121.903769][ T30] audit: type=1400 audit(1745817905.032:778): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 121.985366][ T2000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 121.997127][ T1373] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 122.016373][ T1373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.025440][ T1373] usb 4-1: Product: syz [ 122.033843][ T1373] usb 4-1: Manufacturer: syz [ 122.063130][ T1373] usb 4-1: SerialNumber: syz [ 122.087645][ T1373] usb 4-1: config 0 descriptor?? [ 122.329731][ T2004] loop0: detected capacity change from 0 to 512 [ 122.417263][ T2004] EXT4-fs (loop0): Ignoring removed orlov option [ 122.427113][ T2004] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.497414][ T2004] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.383: Attempting to read directory block (0) that is past i_size (256) [ 122.517602][ T2004] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 122.530770][ T2004] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,orlov,data_err=abort,init_itable,dioread_nolock,grpjquota=.oldalloc,errors=continue,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 122.829739][ T1373] usb 3-1: USB disconnect, device number 11 [ 123.157672][ T2017] loop2: detected capacity change from 0 to 512 [ 123.164317][ T1375] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 123.304196][ T2019] kernel profiling enabled (shift: 6) [ 123.527080][ T1375] usb 2-1: Using ep0 maxpacket: 16 [ 123.620442][ T2021] loop0: detected capacity change from 0 to 4096 [ 123.707278][ T1375] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 123.848457][ T1375] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.881132][ T2021] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.934617][ T2021] fs-verity: sha256 using implementation "sha256-avx2" [ 123.942281][ T30] audit: type=1400 audit(1745817907.072:779): avc: denied { ioctl } for pid=2018 comm="syz.0.387" path="/69/file1/file2" dev="loop0" ino=16 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 124.111656][ T2026] loop2: detected capacity change from 0 to 128 [ 124.127074][ T1375] usb 2-1: config 0 has no interface number 0 [ 124.145199][ T1373] Bluetooth: hci0: command 0x1001 tx timeout [ 124.151264][ T1575] Bluetooth: hci0: sending frame failed (-49) [ 124.237991][ T2026] attempt to access beyond end of device [ 124.237991][ T2026] loop2: rw=2049, want=1041, limit=128 [ 124.276116][ T30] audit: type=1400 audit(1745817907.412:780): avc: denied { connect } for pid=2024 comm="syz.2.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.307124][ T1375] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 124.322946][ T2024] attempt to access beyond end of device [ 124.322946][ T2024] loop2: rw=524288, want=369, limit=128 [ 124.337939][ T1375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.355820][ T1375] usb 2-1: Product: syz [ 124.365853][ T1375] usb 2-1: Manufacturer: syz [ 124.372071][ T2026] attempt to access beyond end of device [ 124.372071][ T2026] loop2: rw=524288, want=1041, limit=128 [ 124.390455][ T1375] usb 2-1: SerialNumber: syz [ 124.396927][ T2026] attempt to access beyond end of device [ 124.396927][ T2026] loop2: rw=0, want=1033, limit=128 [ 124.407684][ T2026] attempt to access beyond end of device [ 124.407684][ T2026] loop2: rw=0, want=1033, limit=128 [ 124.411315][ T1375] usb 2-1: config 0 descriptor?? [ 124.418230][ T2026] attempt to access beyond end of device [ 124.418230][ T2026] loop2: rw=0, want=1033, limit=128 [ 124.434095][ T2026] attempt to access beyond end of device [ 124.434095][ T2026] loop2: rw=0, want=1033, limit=128 [ 124.444643][ T2026] attempt to access beyond end of device [ 124.444643][ T2026] loop2: rw=0, want=1033, limit=128 [ 124.455323][ T2026] attempt to access beyond end of device [ 124.455323][ T2026] loop2: rw=0, want=1033, limit=128 [ 124.456048][ T2027] attempt to access beyond end of device [ 124.456048][ T2027] loop2: rw=0, want=153, limit=128 [ 124.476843][ T1375] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 124.483776][ T1375] usb 2-1: No valid video chain found. [ 124.517650][ T626] usb 4-1: USB disconnect, device number 13 [ 124.891257][ T2032] loop0: detected capacity change from 0 to 512 [ 124.902688][ T2034] loop3: detected capacity change from 0 to 512 [ 125.307780][ T30] audit: type=1400 audit(1745817908.452:781): avc: denied { map } for pid=2036 comm="syz.2.391" path="/proc/189/net/vlan/vlan0" dev="proc" ino=4026532489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 125.331708][ T30] audit: type=1400 audit(1745817908.452:782): avc: denied { execute } for pid=2036 comm="syz.2.391" path="/proc/189/net/vlan/vlan0" dev="proc" ino=4026532489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 126.272987][ T1375] Bluetooth: hci0: command 0x1009 tx timeout [ 126.611483][ T626] usb 2-1: USB disconnect, device number 12 [ 126.658299][ T2053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.394'. [ 126.857657][ T2056] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 128.069536][ T626] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 128.191068][ T30] audit: type=1400 audit(1745817911.332:783): avc: denied { execute } for pid=2077 comm="syz.3.401" name="file0" dev="tmpfs" ino=603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 128.221452][ T2078] syz.3.401[2078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.224266][ T2078] loop3: detected capacity change from 0 to 512 [ 128.287267][ T30] audit: type=1400 audit(1745817911.432:784): avc: denied { mounton } for pid=2077 comm="syz.3.401" path="/97/file0" dev="tmpfs" ino=603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 128.290964][ T2078] EXT4-fs (loop3): #blocks per group too big: 466944 [ 128.310060][ T626] usb 2-1: Using ep0 maxpacket: 32 [ 128.370841][ T2082] loop0: detected capacity change from 0 to 512 [ 128.447072][ T626] usb 2-1: config index 0 descriptor too short (expected 2084, got 36) [ 128.455134][ T626] usb 2-1: config 0 has too many interfaces: 207, using maximum allowed: 32 [ 128.467142][ T2082] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 128.498845][ T2086] loop3: detected capacity change from 0 to 256 [ 128.504968][ T626] usb 2-1: config 0 has an invalid descriptor of length 67, skipping remainder of the config [ 128.518286][ T2082] EXT4-fs (loop0): 1 truncate cleaned up [ 128.523738][ T2082] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 128.544686][ T626] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 207 [ 128.627938][ T30] audit: type=1400 audit(1745817911.772:785): avc: denied { rename } for pid=2079 comm="syz.0.402" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 128.737098][ T626] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 128.751055][ T626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.769026][ T626] usb 2-1: Product: syz [ 128.777135][ T626] usb 2-1: Manufacturer: syz [ 128.786809][ T626] usb 2-1: SerialNumber: syz [ 128.800547][ T626] usb 2-1: config 0 descriptor?? [ 128.876986][ T1374] Bluetooth: hci1: command 0x1003 tx timeout [ 128.882883][ T2060] Bluetooth: hci1: sending frame failed (-49) [ 129.467869][ T2092] syz.3.404[2092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.467947][ T2092] syz.3.404[2092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.507286][ T30] audit: type=1400 audit(1745817912.652:786): avc: denied { create } for pid=2091 comm="syz.3.404" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 129.645660][ T30] audit: type=1400 audit(1745817912.782:787): avc: denied { unlink } for pid=291 comm="syz-executor" name="file0" dev="tmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 129.971958][ T2101] loop4: detected capacity change from 0 to 512 [ 130.007803][ T2101] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 130.019805][ T2101] EXT4-fs (loop4): 1 truncate cleaned up [ 130.025268][ T2101] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 130.450559][ T312] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 130.587463][ T2107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.408'. [ 130.736980][ T312] usb 1-1: Using ep0 maxpacket: 16 [ 130.857058][ T312] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 130.865099][ T312] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.875333][ T312] usb 1-1: config 0 has no interface number 0 [ 130.908074][ T2112] loop4: detected capacity change from 0 to 512 [ 130.937745][ T2112] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 130.947514][ T1374] Bluetooth: hci1: command 0x1001 tx timeout [ 130.953426][ T47] Bluetooth: hci1: sending frame failed (-49) [ 130.955562][ T2112] EXT4-fs (loop4): 1 truncate cleaned up [ 130.965095][ T2112] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 130.970887][ T626] usb 2-1: USB disconnect, device number 13 [ 131.060841][ T2120] syz.1.412[2120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.060986][ T2120] syz.1.412[2120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.069356][ T312] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 131.092381][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.100241][ T312] usb 1-1: Product: syz [ 131.104190][ T312] usb 1-1: Manufacturer: syz [ 131.108657][ T312] usb 1-1: SerialNumber: syz [ 131.113725][ T312] usb 1-1: config 0 descriptor?? [ 131.128642][ T2123] loop1: detected capacity change from 0 to 512 [ 131.266344][ T2123] EXT4-fs (loop1): Ignoring removed orlov option [ 131.281546][ T2123] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.413: casefold flag without casefold feature [ 131.294756][ T2123] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.413: couldn't read orphan inode 15 (err -117) [ 131.308345][ T2123] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,orlov,,errors=continue. Quota mode: writeback. [ 131.342563][ T312] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 131.350091][ T30] audit: type=1400 audit(1745817914.482:788): avc: denied { map } for pid=2122 comm="syz.1.413" path="/93/file0/blkio.bfq.avg_queue_size" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 131.387974][ T312] usb 1-1: No valid video chain found. [ 131.400007][ T30] audit: type=1326 audit(1745817914.532:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2130 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c18c1969 code=0x7ffc0000 [ 131.406925][ T2131] loop3: detected capacity change from 0 to 512 [ 131.424791][ T30] audit: type=1326 audit(1745817914.532:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2130 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f86c18c1969 code=0x7ffc0000 [ 131.452223][ T30] audit: type=1326 audit(1745817914.532:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2130 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f86c18c19a3 code=0x7ffc0000 [ 131.475216][ T30] audit: type=1326 audit(1745817914.542:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2130 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f86c18c041f code=0x7ffc0000 [ 131.498775][ T2131] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 131.616072][ T2135] overlayfs: workdir and upperdir must be separate subtrees [ 131.726997][ T20] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 131.866067][ T2142] loop4: detected capacity change from 0 to 1024 [ 131.880605][ T2142] EXT4-fs (loop4): Ignoring removed nobh option [ 131.886763][ T2142] EXT4-fs (loop4): Ignoring removed bh option [ 131.892823][ T2142] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.908247][ T2142] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,data_err=abort,barrier=0x0000000000000007,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,. Quota mode: writeback. [ 132.188155][ T697] Bluetooth: hci0: Frame reassembly failed (-84) [ 132.225818][ T2148] loop4: detected capacity change from 0 to 256 [ 132.234112][ T2148] 9pnet: p9_fd_create_tcp (2148): problem binding to privport [ 132.241497][ T20] usb 2-1: Using ep0 maxpacket: 32 [ 132.367017][ T20] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 132.375155][ T20] usb 2-1: config 0 has no interface number 0 [ 132.381169][ T20] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 528 [ 132.547094][ T20] usb 2-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6 [ 132.556080][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.564060][ T20] usb 2-1: Product: syz [ 132.568209][ T20] usb 2-1: Manufacturer: syz [ 132.572661][ T20] usb 2-1: SerialNumber: syz [ 132.581486][ T20] usb 2-1: config 0 descriptor?? [ 132.597036][ T2133] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 132.607071][ T312] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 132.619028][ T20] ftdi_sio 2-1:0.151: FTDI USB Serial Device converter detected [ 132.628282][ T20] usb 2-1: Detected FT-X [ 132.847031][ T20] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 132.853682][ T312] usb 5-1: Using ep0 maxpacket: 32 [ 132.869119][ T1180] usb 1-1: USB disconnect, device number 24 [ 132.886430][ T20] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 132.907158][ T20] ftdi_sio 2-1:0.151: GPIO initialisation failed: -71 [ 132.915805][ T20] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 132.934457][ T20] usb 2-1: USB disconnect, device number 14 [ 132.942548][ T20] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 132.957873][ T20] ftdi_sio 2-1:0.151: device disconnected [ 132.977010][ T312] usb 5-1: config index 0 descriptor too short (expected 2084, got 36) [ 132.985884][ T312] usb 5-1: config 0 has too many interfaces: 207, using maximum allowed: 32 [ 132.995668][ T312] usb 5-1: config 0 has an invalid descriptor of length 67, skipping remainder of the config [ 133.005910][ T312] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 207 [ 133.027062][ T626] Bluetooth: hci1: command 0x1009 tx timeout [ 133.073371][ T2167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'. [ 133.177037][ T312] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 133.186167][ T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.194209][ T312] usb 5-1: Product: syz [ 133.198377][ T312] usb 5-1: Manufacturer: syz [ 133.202808][ T312] usb 5-1: SerialNumber: syz [ 133.211189][ T312] usb 5-1: config 0 descriptor?? [ 134.261114][ T1375] Bluetooth: hci0: command 0x1003 tx timeout [ 134.269184][ T2175] loop0: detected capacity change from 0 to 1024 [ 134.278600][ T2060] Bluetooth: hci0: sending frame failed (-49) [ 134.447431][ T2175] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,noblock_validity,. Quota mode: none. [ 134.659495][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 134.659508][ T30] audit: type=1326 audit(1745817917.802:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2177 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 134.699899][ T30] audit: type=1326 audit(1745817917.842:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2177 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 134.723599][ T30] audit: type=1326 audit(1745817917.842:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2177 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 134.748339][ T30] audit: type=1326 audit(1745817917.842:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2177 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 134.773032][ T30] audit: type=1326 audit(1745817917.842:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2177 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 134.796299][ T30] audit: type=1326 audit(1745817917.842:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2177 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 134.840579][ T30] audit: type=1326 audit(1745817917.842:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2177 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 134.864108][ T30] audit: type=1326 audit(1745817917.842:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2177 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 134.888727][ T30] audit: type=1326 audit(1745817917.842:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2177 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 134.912054][ T30] audit: type=1326 audit(1745817917.842:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2177 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a55cbb969 code=0x7ffc0000 [ 135.436858][ T2192] loop1: detected capacity change from 0 to 1024 [ 135.467582][ T2192] EXT4-fs (loop1): Ignoring removed nobh option [ 135.473660][ T2192] EXT4-fs (loop1): Ignoring removed bh option [ 135.496990][ T2192] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.548056][ T2192] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,data_err=abort,barrier=0x0000000000000007,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,. Quota mode: writeback. [ 135.832874][ T20] usb 5-1: USB disconnect, device number 15 [ 135.997011][ T312] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 136.096998][ T1375] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 136.246993][ T312] usb 2-1: Using ep0 maxpacket: 16 [ 136.307054][ T1374] Bluetooth: hci0: command 0x1001 tx timeout [ 136.313096][ T2060] Bluetooth: hci0: sending frame failed (-49) [ 136.367075][ T312] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 136.375097][ T312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.385085][ T312] usb 2-1: config 0 has no interface number 0 [ 136.487107][ T1375] usb 1-1: config 9 has an invalid interface number: 79 but max is 2 [ 136.495171][ T1375] usb 1-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 136.503763][ T1375] usb 1-1: config 9 has an invalid interface number: 93 but max is 2 [ 136.511645][ T1375] usb 1-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 136.521533][ T1375] usb 1-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 136.530292][ T1375] usb 1-1: config 9 has no interface number 0 [ 136.536159][ T1375] usb 1-1: config 9 has no interface number 1 [ 136.631277][ T2208] loop4: detected capacity change from 0 to 4096 [ 136.643022][ T1375] usb 1-1: config 9 interface 79 altsetting 3 has an invalid endpoint with address 0x0, skipping [ 136.653669][ T1375] usb 1-1: config 9 interface 79 altsetting 3 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 136.665429][ T1375] usb 1-1: config 9 interface 79 altsetting 3 endpoint 0xD has an invalid bInterval 238, changing to 11 [ 136.679020][ T1375] usb 1-1: config 9 interface 79 altsetting 3 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 136.690697][ T1375] usb 1-1: config 9 interface 79 altsetting 3 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 136.728308][ T1375] usb 1-1: config 9 interface 79 altsetting 3 bulk endpoint 0xC has invalid maxpacket 32 [ 136.738958][ T1375] usb 1-1: config 9 interface 79 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 136.750158][ T1375] usb 1-1: config 9 interface 79 altsetting 3 endpoint 0x6 has invalid maxpacket 528, setting to 64 [ 136.762675][ T1375] usb 1-1: config 9 interface 93 altsetting 8 has an invalid endpoint with address 0x9F, skipping [ 136.774339][ T1375] usb 1-1: config 9 interface 93 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 136.811451][ T1375] usb 1-1: config 9 interface 79 has no altsetting 0 [ 136.823452][ T2208] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.949702][ T1375] usb 1-1: config 9 interface 93 has no altsetting 0 [ 137.167065][ T1375] usb 1-1: New USB device found, idVendor=10c4, idProduct=8382, bcdDevice=ec.c2 [ 137.176069][ T1375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.184099][ T1375] usb 1-1: Product: 걌⬸吶ต浱ᬬ䳺븠⦖ꅠ趡奖굉⠝ｇ뢹优눌謏氜䆲늸蕄静ਝꬥ荒慑㐙㉴⪘偀䊮ꍦ祫׸츢裸ꤵ榐ꯦ嚐ⵃ㫶䒊䀣 [ 137.200443][ T1375] usb 1-1: Manufacturer: Љ [ 137.204755][ T1375] usb 1-1: SerialNumber: 仸謦嫓傦牴뻭⫉z怜巣뽷艄፭䭦擓첮ካ⹃࣍㪟퐊꫶୒텤ꗛ侻䤢餤鞦넟쁻졂⛗䅕᠂雛굌騨࿷늨딲４좌⧈ꘗ೫ᚗ楁೰蝇툼乡謘ꢔ碿驅흎躞獿⬛홡䮻 [ 137.247158][ T312] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 137.247193][ T2202] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 137.256170][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.274016][ T312] usb 2-1: Product: syz [ 137.278158][ T312] usb 2-1: Manufacturer: syz [ 137.282580][ T312] usb 2-1: SerialNumber: syz [ 137.287757][ T312] usb 2-1: config 0 descriptor?? [ 137.331442][ T312] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 137.337834][ T312] usb 2-1: No valid video chain found. [ 137.397031][ T1374] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 137.657038][ T1374] usb 3-1: Using ep0 maxpacket: 16 [ 137.787182][ T1374] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 137.795403][ T1374] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.806972][ T1374] usb 3-1: config 0 has no interface number 0 [ 137.963207][ T1375] usb 1-1: USB disconnect, device number 25 [ 137.978338][ T1374] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 137.995741][ T1374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.056836][ T1374] usb 3-1: Product: syz [ 138.062205][ T1374] usb 3-1: Manufacturer: syz [ 138.066911][ T1374] usb 3-1: SerialNumber: syz [ 138.093273][ T1374] usb 3-1: config 0 descriptor?? [ 138.199088][ T1374] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 138.205417][ T1374] usb 3-1: No valid video chain found. [ 138.387015][ T1180] Bluetooth: hci0: command 0x1009 tx timeout [ 138.545643][ T2224] loop0: detected capacity change from 0 to 512 [ 138.627452][ T2224] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 138.638599][ T2224] EXT4-fs (loop0): 1 truncate cleaned up [ 138.644081][ T2224] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 138.729882][ T1374] usb 2-1: USB disconnect, device number 15 [ 140.164275][ T1374] usb 3-1: USB disconnect, device number 12 [ 140.205473][ T2260] loop2: detected capacity change from 0 to 1024 [ 141.360281][ T2260] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,noblock_validity,. Quota mode: none. [ 141.486998][ T1180] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 141.616993][ T20] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 141.957049][ T1180] usb 2-1: Using ep0 maxpacket: 32 [ 142.222400][ T1180] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 142.230441][ T1180] usb 2-1: config 0 has no interface number 0 [ 142.236317][ T1180] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 528 [ 142.266978][ T20] usb 1-1: Using ep0 maxpacket: 16 [ 142.387084][ T20] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 142.395192][ T20] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.405216][ T1180] usb 2-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6 [ 142.414238][ T20] usb 1-1: config 0 has no interface number 0 [ 142.420177][ T1180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.427830][ T2293] loop2: detected capacity change from 0 to 512 [ 142.428083][ T1180] usb 2-1: Product: syz [ 142.438169][ T1180] usb 2-1: Manufacturer: syz [ 142.442676][ T1180] usb 2-1: SerialNumber: syz [ 142.448739][ T1180] usb 2-1: config 0 descriptor?? [ 142.467043][ T2265] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 142.487670][ T2293] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 142.487733][ T1180] ftdi_sio 2-1:0.151: FTDI USB Serial Device converter detected [ 142.499468][ T2293] EXT4-fs (loop2): 1 truncate cleaned up [ 142.505429][ T1180] usb 2-1: Detected FT-X [ 142.510450][ T2293] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 142.597048][ T20] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 142.605898][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.613882][ T20] usb 1-1: Product: syz [ 142.617867][ T20] usb 1-1: Manufacturer: syz [ 142.622270][ T20] usb 1-1: SerialNumber: syz [ 143.555160][ T20] usb 1-1: config 0 descriptor?? [ 143.561185][ T1180] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 143.573438][ T2301] Invalid ELF header magic: != ELF [ 143.583209][ T2303] loop1: detected capacity change from 0 to 512 [ 143.589387][ T1180] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 143.607567][ T20] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 143.613751][ T20] usb 1-1: No valid video chain found. [ 143.619767][ T1180] ftdi_sio 2-1:0.151: GPIO initialisation failed: -71 [ 143.637615][ T1180] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 143.671175][ T1180] usb 2-1: USB disconnect, device number 16 [ 143.678954][ T2303] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.732620][ T2311] loop3: detected capacity change from 0 to 1024 [ 143.742845][ T2303] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.752163][ T1180] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 143.762631][ T1180] ftdi_sio 2-1:0.151: device disconnected [ 144.133253][ T2311] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,noblock_validity,. Quota mode: none. [ 144.646782][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 144.646796][ T30] audit: type=1400 audit(1745817927.782:895): avc: denied { write } for pid=2327 comm="syz.4.467" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 144.866390][ T2331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.469'. [ 146.243535][ T1180] usb 1-1: USB disconnect, device number 26 [ 146.295204][ T2348] loop1: detected capacity change from 0 to 128 [ 146.306358][ T2352] loop0: detected capacity change from 0 to 512 [ 146.337935][ T2357] loop3: detected capacity change from 0 to 1024 [ 146.395412][ T2352] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 146.408878][ T2352] EXT4-fs (loop0): 1 truncate cleaned up [ 146.414340][ T2352] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 146.435131][ T2357] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,noblock_validity,. Quota mode: none. [ 147.103833][ T2363] loop4: detected capacity change from 0 to 512 [ 147.875359][ T2373] loop2: detected capacity change from 0 to 1024 [ 147.979826][ T2373] EXT4-fs (loop2): Ignoring removed nobh option [ 148.099194][ T2373] EXT4-fs (loop2): Ignoring removed bh option [ 148.433940][ T2373] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.781451][ T2373] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,data_err=abort,barrier=0x0000000000000007,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,. Quota mode: writeback. [ 148.984738][ T2391] loop4: detected capacity change from 0 to 256 [ 149.091850][ T2396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.483'. [ 149.117646][ T2391] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 149.133207][ T2391] exFAT-fs (loop4): hint_cluster is invalid (17) [ 149.527991][ T2398] loop3: detected capacity change from 0 to 512 [ 150.140654][ T2408] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 150.152670][ T30] audit: type=1400 audit(1745817933.292:896): avc: denied { map } for pid=2406 comm="syz.1.487" path="socket:[23909]" dev="sockfs" ino=23909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 150.646474][ T1369] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 150.807904][ T30] audit: type=1400 audit(1745817933.952:897): avc: denied { name_bind } for pid=2418 comm="syz.1.491" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 150.833628][ T2421] loop3: detected capacity change from 0 to 1024 [ 150.881737][ T2407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2407 comm=syz.0.488 [ 150.948489][ T2421] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,noblock_validity,. Quota mode: none. [ 151.056997][ T1369] usb 3-1: Using ep0 maxpacket: 16 [ 151.139691][ T2433] loop4: detected capacity change from 0 to 1024 [ 151.161040][ T2434] loop0: detected capacity change from 0 to 1024 [ 151.174220][ T2433] EXT4-fs (loop4): Ignoring removed orlov option [ 151.180705][ T2433] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 151.189665][ T2433] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 151.205922][ T2434] EXT4-fs (loop0): Ignoring removed nobh option [ 151.219528][ T2434] EXT4-fs (loop0): Ignoring removed bh option [ 151.225475][ T2434] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 151.237969][ T2433] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 151.246481][ T2433] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,sysvgroups,norecovery,dioread_nolock,orlov,debug,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 151.275162][ T2434] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,data_err=abort,barrier=0x0000000000000007,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,. Quota mode: writeback. [ 151.354249][ T1369] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 151.503542][ T2444] FAULT_INJECTION: forcing a failure. [ 151.503542][ T2444] name failslab, interval 1, probability 0, space 0, times 0 [ 151.516107][ T2444] CPU: 1 PID: 2444 Comm: syz.4.494 Not tainted 5.15.180-syzkaller-android13-5.15.180_r00 #0 [ 151.525936][ T2444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 151.535828][ T2444] Call Trace: [ 151.538953][ T2444] [ 151.541738][ T2444] __dump_stack+0x21/0x30 [ 151.545895][ T2444] dump_stack_lvl+0xee/0x150 [ 151.550321][ T2444] ? show_regs_print_info+0x20/0x20 [ 151.555356][ T2444] ? memset+0x35/0x40 [ 151.559182][ T2444] dump_stack+0x15/0x20 [ 151.563177][ T2444] should_fail+0x3c1/0x510 [ 151.567422][ T2444] __should_failslab+0xa4/0xe0 [ 151.572021][ T2444] should_failslab+0x9/0x20 [ 151.576359][ T2444] slab_pre_alloc_hook+0x3b/0xe0 [ 151.581135][ T2444] ? __alloc_file+0x28/0x2a0 [ 151.585562][ T2444] kmem_cache_alloc+0x44/0x260 [ 151.590160][ T2444] __alloc_file+0x28/0x2a0 [ 151.594415][ T2444] alloc_empty_file+0x97/0x180 [ 151.599017][ T2444] path_openat+0xf3/0x2f10 [ 151.603279][ T2444] ? __kasan_check_write+0x14/0x20 [ 151.608216][ T2444] ? push_rt_task+0x35f/0x5b0 [ 151.612733][ T2444] ? update_rt_migration+0x3a0/0x3a0 [ 151.617848][ T2444] ? _raw_spin_unlock+0x4d/0x70 [ 151.622539][ T2444] ? update_rt_migration+0x3a0/0x3a0 [ 151.627665][ T2444] ? finish_task_switch+0x16b/0x780 [ 151.632694][ T2444] ? __switch_to_asm+0x3a/0x60 [ 151.637289][ T2444] ? __schedule+0xb76/0x14c0 [ 151.641721][ T2444] ? do_filp_open+0x3e0/0x3e0 [ 151.646225][ T2444] ? release_firmware_map_entry+0x190/0x190 [ 151.651957][ T2444] ? expand_files+0x791/0x8f0 [ 151.656468][ T2444] do_filp_open+0x1b3/0x3e0 [ 151.660807][ T2444] ? vfs_tmpfile+0x2d0/0x2d0 [ 151.665251][ T2444] do_sys_openat2+0x14c/0x7b0 [ 151.669777][ T2444] ? do_sys_open+0xe0/0xe0 [ 151.674003][ T2444] ? ksys_write+0x1eb/0x240 [ 151.678346][ T2444] __x64_sys_openat+0x136/0x160 [ 151.683036][ T2444] x64_sys_call+0x219/0x9a0 [ 151.687370][ T2444] do_syscall_64+0x4c/0xa0 [ 151.691625][ T2444] ? clear_bhb_loop+0x35/0x90 [ 151.696134][ T2444] ? clear_bhb_loop+0x35/0x90 [ 151.700650][ T2444] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.706375][ T2444] RIP: 0033:0x7fe5ba54c969 [ 151.710629][ T2444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.730156][ T2444] RSP: 002b:00007fe5b8b73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 151.738399][ T2444] RAX: ffffffffffffffda RBX: 00007fe5ba774160 RCX: 00007fe5ba54c969 [ 151.746210][ T2444] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 151.754025][ T2444] RBP: 00007fe5b8b73090 R08: 0000000000000000 R09: 0000000000000000 [ 151.761833][ T2444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.769644][ T2444] R13: 0000000000000000 R14: 00007fe5ba774160 R15: 00007ffd5c861ec8 [ 151.777463][ T2444] [ 151.903788][ T1369] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.913910][ T1369] usb 3-1: config 0 has no interface number 0 [ 152.207084][ T1369] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 152.226193][ T1369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.244459][ T1369] usb 3-1: Product: syz [ 152.253740][ T1369] usb 3-1: Manufacturer: syz [ 152.263632][ T1369] usb 3-1: SerialNumber: syz [ 152.311346][ T1369] usb 3-1: config 0 descriptor?? [ 152.394276][ T1369] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 152.407084][ T1369] usb 3-1: No valid video chain found. [ 152.478017][ T2472] loop3: detected capacity change from 0 to 256 [ 153.542378][ T2480] loop1: detected capacity change from 0 to 512 [ 154.085761][ T1369] usb 3-1: USB disconnect, device number 13 [ 154.137318][ T2480] EXT4-fs (loop1): 1 orphan inode deleted [ 154.143140][ T2480] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 154.154397][ T2480] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.267270][ T2486] loop4: detected capacity change from 0 to 512 [ 155.293479][ T2492] loop2: detected capacity change from 0 to 1024 [ 155.301017][ T2472] FAT-fs (loop3): Directory bread(block 64) failed [ 155.312932][ T2472] FAT-fs (loop3): Directory bread(block 65) failed [ 155.319341][ T2472] FAT-fs (loop3): Directory bread(block 66) failed [ 155.325637][ T2472] FAT-fs (loop3): Directory bread(block 67) failed [ 155.331972][ T2472] FAT-fs (loop3): Directory bread(block 68) failed [ 155.338333][ T2472] FAT-fs (loop3): Directory bread(block 69) failed [ 155.344636][ T2472] FAT-fs (loop3): Directory bread(block 70) failed [ 155.351012][ T2472] FAT-fs (loop3): Directory bread(block 71) failed [ 155.357548][ T2472] FAT-fs (loop3): Directory bread(block 72) failed [ 155.363908][ T2472] FAT-fs (loop3): Directory bread(block 73) failed [ 155.446590][ T2492] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,noblock_validity,. Quota mode: none. [ 155.559740][ T2486] loop4: detected capacity change from 0 to 512 [ 155.657009][ T30] audit: type=1326 audit(1745817938.772:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2482 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f5d38969 code=0x7ffc0000 [ 155.723799][ T30] audit: type=1326 audit(1745817938.772:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2482 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f5d38969 code=0x7ffc0000 [ 155.749595][ T2498] loop1: detected capacity change from 0 to 40427 [ 155.770711][ T30] audit: type=1326 audit(1745817938.772:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2482 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78f5d38969 code=0x7ffc0000 [ 155.771400][ T2486] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.845061][ T2498] F2FS-fs (loop1): invalid crc value [ 155.857118][ T30] audit: type=1326 audit(1745817938.772:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2482 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f5d38969 code=0x7ffc0000 [ 155.880891][ T2498] F2FS-fs (loop1): Found nat_bits in checkpoint [ 155.886008][ T2503] loop2: detected capacity change from 0 to 1024 [ 155.923546][ T2486] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.934836][ T2498] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 156.015922][ T2503] EXT4-fs (loop2): Ignoring removed orlov option [ 156.027883][ T2486] syz.4.505[2486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.032507][ T293] handle_bad_sector: 7323 callbacks suppressed [ 156.032522][ T293] attempt to access beyond end of device [ 156.032522][ T293] loop1: rw=2049, want=45104, limit=40427 [ 156.087371][ T2503] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 156.099319][ T2503] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.266700][ T30] audit: type=1326 audit(1745817938.772:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2482 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f5d38969 code=0x7ffc0000 [ 156.321081][ T30] audit: type=1326 audit(1745817938.772:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2482 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f78f5d38969 code=0x7ffc0000 [ 156.328478][ T2503] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 156.354927][ T30] audit: type=1326 audit(1745817938.772:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2482 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f5d38969 code=0x7ffc0000 [ 156.356000][ T2503] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,sysvgroups,norecovery,dioread_nolock,orlov,debug,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 156.407111][ T30] audit: type=1326 audit(1745817938.772:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2482 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f5d38969 code=0x7ffc0000 [ 156.460311][ T30] audit: type=1326 audit(1745817939.462:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2484 comm="syz.4.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ba54c969 code=0x7ffc0000 [ 156.483683][ T30] audit: type=1326 audit(1745817939.462:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2484 comm="syz.4.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe5ba54c969 code=0x7ffc0000 [ 156.652305][ T2518] xt_CT: No such helper "syz0" [ 156.843539][ T2530] loop2: detected capacity change from 0 to 256 [ 158.676992][ T1373] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 158.782317][ T2550] loop1: detected capacity change from 0 to 1024 [ 158.810758][ T2559] Invalid ELF header magic: != ELF [ 158.825048][ T2561] loop4: detected capacity change from 0 to 512 [ 158.851387][ T2561] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 158.869438][ T2561] EXT4-fs (loop4): 1 truncate cleaned up [ 158.869854][ T2550] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,noblock_validity,. Quota mode: none. [ 158.874927][ T2561] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 158.987101][ T1373] usb 1-1: Using ep0 maxpacket: 16 [ 159.036989][ T1369] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 159.162420][ T1373] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 159.170510][ T1373] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.180343][ T1373] usb 1-1: config 0 has no interface number 0 [ 159.255927][ T2572] loop1: detected capacity change from 0 to 16 [ 159.337032][ T1369] usb 4-1: Using ep0 maxpacket: 32 [ 159.407057][ T1373] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 159.416016][ T1373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.423931][ T1373] usb 1-1: Product: syz [ 159.427992][ T1373] usb 1-1: Manufacturer: syz [ 159.432327][ T1373] usb 1-1: SerialNumber: syz [ 159.437589][ T1373] usb 1-1: config 0 descriptor?? [ 159.457094][ T1369] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 159.465064][ T1369] usb 4-1: config 0 has no interface number 0 [ 159.471026][ T1369] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 528 [ 159.481382][ T1373] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 159.487595][ T1373] usb 1-1: No valid video chain found. [ 159.598328][ T2574] loop2: detected capacity change from 0 to 512 [ 159.657108][ T1369] usb 4-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6 [ 159.666020][ T1369] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.673947][ T1369] usb 4-1: Product: syz [ 159.678426][ T1369] usb 4-1: Manufacturer: syz [ 159.684366][ T1369] usb 4-1: SerialNumber: syz [ 159.694681][ T1369] usb 4-1: config 0 descriptor?? [ 159.701169][ T2574] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000005,. Quota mode: writeback. [ 159.715262][ T2574] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.725548][ T2554] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 159.737545][ T1369] ftdi_sio 4-1:0.151: FTDI USB Serial Device converter detected [ 159.745246][ T1369] usb 4-1: Detected FT-X [ 159.834236][ T2574] loop2: detected capacity change from 0 to 256 [ 159.840803][ T2574] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.851251][ T2574] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 160.087165][ T1369] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 160.159609][ T2574] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 160.172475][ T1369] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 160.197121][ T1369] ftdi_sio 4-1:0.151: GPIO initialisation failed: -71 [ 160.204344][ T1369] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 160.214752][ T1369] usb 4-1: USB disconnect, device number 14 [ 160.221497][ T1369] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 160.231528][ T1369] ftdi_sio 4-1:0.151: device disconnected [ 160.427018][ T370] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 160.904196][ T1369] usb 1-1: USB disconnect, device number 27 [ 161.885267][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 161.984078][ T2603] loop2: detected capacity change from 0 to 16 [ 162.026310][ T2610] loop3: detected capacity change from 0 to 1024 [ 162.047028][ T370] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.056703][ T2610] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,noblock_validity,. Quota mode: none. [ 162.057079][ T370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D is Bulk; changing to Interrupt [ 162.080914][ T370] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 162.110112][ T370] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 162.137968][ T370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.168818][ T370] usb 2-1: config 0 descriptor?? [ 162.197278][ T2584] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 162.328824][ T2637] loop2: detected capacity change from 0 to 256 [ 162.387409][ T2637] FAT-fs (loop2): Unrecognized mount option "heck=relaxed" or missing value [ 162.439641][ T370] usb 2-1: USB disconnect, device number 17 [ 164.258130][ T2657] FAULT_INJECTION: forcing a failure. [ 164.258130][ T2657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.271060][ T2657] CPU: 1 PID: 2657 Comm: syz.3.545 Not tainted 5.15.180-syzkaller-android13-5.15.180_r00 #0 [ 164.280906][ T2657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 164.290802][ T2657] Call Trace: [ 164.293924][ T2657] [ 164.296698][ T2657] __dump_stack+0x21/0x30 [ 164.300868][ T2657] dump_stack_lvl+0xee/0x150 [ 164.305293][ T2657] ? show_regs_print_info+0x20/0x20 [ 164.310326][ T2657] dump_stack+0x15/0x20 [ 164.314319][ T2657] should_fail+0x3c1/0x510 [ 164.318573][ T2657] should_fail_usercopy+0x1a/0x20 [ 164.323433][ T2657] _copy_from_user+0x20/0xd0 [ 164.327857][ T2657] __copy_msghdr_from_user+0xaf/0x5e0 [ 164.333067][ T2657] ? update_rt_migration+0x3a0/0x3a0 [ 164.338184][ T2657] ? _raw_spin_unlock+0x4d/0x70 [ 164.342873][ T2657] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 164.347991][ T2657] ? __switch_to_asm+0x3a/0x60 [ 164.352595][ T2657] ? __schedule+0xb76/0x14c0 [ 164.357024][ T2657] ___sys_sendmsg+0x156/0x260 [ 164.361535][ T2657] ? __sys_sendmsg+0x250/0x250 [ 164.366130][ T2657] ? preempt_schedule_irq+0xbb/0x110 [ 164.371256][ T2657] ? irqentry_exit_cond_resched+0x29/0x30 [ 164.376815][ T2657] ? __fdget+0x1a1/0x230 [ 164.380887][ T2657] __sys_sendmmsg+0x278/0x480 [ 164.385398][ T2657] ? __kasan_check_write+0x14/0x20 [ 164.390350][ T2657] ? __ia32_sys_sendmsg+0x2a0/0x2a0 [ 164.395383][ T2657] ? __schedule+0xb76/0x14c0 [ 164.399813][ T2657] ? __kasan_check_write+0x14/0x20 [ 164.404760][ T2657] __x64_sys_sendmmsg+0xa0/0xb0 [ 164.409442][ T2657] x64_sys_call+0x6c6/0x9a0 [ 164.413780][ T2657] do_syscall_64+0x4c/0xa0 [ 164.418032][ T2657] ? clear_bhb_loop+0x35/0x90 [ 164.422548][ T2657] ? clear_bhb_loop+0x35/0x90 [ 164.427058][ T2657] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.432787][ T2657] RIP: 0033:0x7f86c18c1969 [ 164.437039][ T2657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.456480][ T2657] RSP: 002b:00007f86bfee8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 164.464726][ T2657] RAX: ffffffffffffffda RBX: 00007f86c1ae9160 RCX: 00007f86c18c1969 [ 164.472541][ T2657] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 164.480348][ T2657] RBP: 00007f86bfee8090 R08: 0000000000000000 R09: 0000000000000000 [ 164.488159][ T2657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.495970][ T2657] R13: 0000000000000000 R14: 00007f86c1ae9160 R15: 00007ffe95051c28 [ 164.503789][ T2657] [ 164.970917][ T1369] Bluetooth: hci0: command 0x1003 tx timeout [ 164.976869][ T1575] Bluetooth: hci0: sending frame failed (-49) [ 165.099217][ T2664] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.106241][ T2664] IPv6: NLM_F_CREATE should be set when creating new route [ 165.118358][ T2666] loop3: detected capacity change from 0 to 512 [ 165.130110][ T2668] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 165.137159][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 165.137173][ T30] audit: type=1400 audit(1745817948.272:925): avc: denied { map } for pid=2658 comm="syz.4.546" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 165.139434][ T2668] SELinux: duplicate or incompatible mount options [ 165.185176][ T30] audit: type=1400 audit(1745817948.322:926): avc: denied { getopt } for pid=2658 comm="syz.4.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.210855][ T2666] EXT4-fs (loop3): Test dummy encryption mode enabled [ 165.234721][ T2666] EXT4-fs (loop3): Unrecognized mount option "=" or missing value [ 165.239381][ T2672] loop4: detected capacity change from 0 to 1024 [ 165.328091][ T2672] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,noblock_validity,. Quota mode: none. [ 165.719783][ T1369] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 165.820922][ T30] audit: type=1400 audit(1745817948.942:927): avc: denied { remount } for pid=2665 comm="syz.3.548" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 165.843033][ T30] audit: type=1400 audit(1745817948.962:928): avc: denied { bind } for pid=2665 comm="syz.3.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.077055][ T1369] usb 3-1: Using ep0 maxpacket: 16 [ 166.777187][ T1369] usb 3-1: unable to get BOS descriptor or descriptor too short [ 167.041289][ T2703] loop4: detected capacity change from 0 to 1024 [ 167.300441][ T1372] Bluetooth: hci0: command 0x1001 tx timeout [ 167.338758][ T1575] Bluetooth: hci0: sending frame failed (-49) [ 167.357850][ T2710] FAULT_INJECTION: forcing a failure. [ 167.357850][ T2710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.370769][ T2710] CPU: 1 PID: 2710 Comm: syz.3.558 Not tainted 5.15.180-syzkaller-android13-5.15.180_r00 #0 [ 167.380631][ T2710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 167.390521][ T2710] Call Trace: [ 167.393642][ T2710] [ 167.396421][ T2710] __dump_stack+0x21/0x30 [ 167.400586][ T2710] dump_stack_lvl+0xee/0x150 [ 167.405012][ T2710] ? show_regs_print_info+0x20/0x20 [ 167.410048][ T2710] ? sysvec_reschedule_ipi+0x78/0x80 [ 167.415170][ T2710] dump_stack+0x15/0x20 [ 167.419164][ T2710] should_fail+0x3c1/0x510 [ 167.423414][ T2710] should_fail_usercopy+0x1a/0x20 [ 167.428372][ T2710] _copy_from_user+0x20/0xd0 [ 167.432801][ T2710] iovec_from_user+0x1bc/0x2f0 [ 167.437401][ T2710] ? __copy_msghdr_from_user+0x302/0x5e0 [ 167.442869][ T2710] __import_iovec+0x71/0x400 [ 167.447310][ T2710] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 167.452417][ T2710] import_iovec+0x7c/0xb0 [ 167.456585][ T2710] ___sys_sendmsg+0x1b9/0x260 [ 167.461092][ T2710] ? __sys_sendmsg+0x250/0x250 [ 167.465872][ T2710] ? __fdget+0x1a1/0x230 [ 167.469945][ T2710] __sys_sendmmsg+0x278/0x480 [ 167.474459][ T2710] ? __ia32_sys_sendmsg+0x2a0/0x2a0 [ 167.479491][ T2710] ? bpf_perf_event_read+0x150/0x1e0 [ 167.484615][ T2710] ? __kasan_check_read+0x11/0x20 [ 167.489471][ T2710] ? preempt_schedule_irq+0xbb/0x110 [ 167.494598][ T2710] ? irqentry_exit+0x37/0x40 [ 167.499023][ T2710] ? sysvec_reschedule_ipi+0x78/0x80 [ 167.504142][ T2710] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 167.509618][ T2710] __x64_sys_sendmmsg+0xa0/0xb0 [ 167.514297][ T2710] x64_sys_call+0x6c6/0x9a0 [ 167.518634][ T2710] do_syscall_64+0x4c/0xa0 [ 167.522889][ T2710] ? clear_bhb_loop+0x35/0x90 [ 167.527400][ T2710] ? clear_bhb_loop+0x35/0x90 [ 167.531916][ T2710] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.537647][ T2710] RIP: 0033:0x7f86c18c1969 [ 167.541899][ T2710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.561339][ T2710] RSP: 002b:00007f86bfee8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 167.569580][ T2710] RAX: ffffffffffffffda RBX: 00007f86c1ae9160 RCX: 00007f86c18c1969 [ 167.577393][ T2710] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 167.585206][ T2710] RBP: 00007f86bfee8090 R08: 0000000000000000 R09: 0000000000000000 [ 167.593020][ T2710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.600828][ T2710] R13: 0000000000000000 R14: 00007f86c1ae9160 R15: 00007ffe95051c28 [ 167.608644][ T2710] [ 168.510510][ T2703] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,abort,dioread_lock,norecovery,nombcache,lazytime,noload,usrquota,noauto_da_alloc,resuid=0x0000000000000000,init_itable=0x0000000000000000,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 168.567988][ T2713] loop3: detected capacity change from 0 to 512 [ 168.613086][ T2720] loop2: detected capacity change from 0 to 512 [ 168.629940][ T2713] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 168.643621][ T2703] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 168.648345][ T30] audit: type=1400 audit(1745817951.782:929): avc: denied { create } for pid=2722 comm="syz.1.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 168.652326][ T2703] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 168.682405][ T2720] EXT4-fs (loop2): Unrecognized mount option "" or missing value [ 168.690181][ T2703] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 168.695410][ T2713] EXT4-fs (loop3): 1 orphan inode deleted [ 168.708094][ T2713] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,jqfmt=vfsv0,noblock_validity,resgid=0x0000000000000000,sysvgroups,usrquota,usrquota,. Quota mode: writeback. [ 168.728133][ T1369] usb 3-1: unable to read config index 0 descriptor/all [ 168.734891][ T1369] usb 3-1: can't read configurations, error -71 [ 168.741307][ T2713] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.782387][ T30] audit: type=1400 audit(1745817951.922:930): avc: denied { mounton } for pid=2712 comm="syz.3.559" path="/128/file1/file0" dev="incremental-fs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.820473][ T291] ------------[ cut here ]------------ [ 168.829360][ T291] kernel BUG at fs/namei.c:2933! [ 168.834467][ T291] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 168.840353][ T291] CPU: 1 PID: 291 Comm: syz-executor Not tainted 5.15.180-syzkaller-android13-5.15.180_r00 #0 [ 168.850418][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 168.860325][ T291] RIP: 0010:may_delete+0x701/0x710 [ 168.865262][ T291] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 00 54 f5 ff e9 77 fe ff ff e8 76 e6 b6 ff 0f 0b e8 6f e6 b6 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 168.884702][ T291] RSP: 0018:ffffc900009e7c90 EFLAGS: 00010293 [ 168.890603][ T291] RAX: ffffffff81b1b731 RBX: ffff888112036660 RCX: ffff88811e39cf00 [ 168.898417][ T291] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 168.906230][ T291] RBP: ffffc900009e7cf8 R08: 0000000000000004 R09: 0000000000000003 [ 168.914036][ T291] R10: fffff5200013cf74 R11: 1ffff9200013cf74 R12: dffffc0000000000 [ 168.921849][ T291] R13: 0000000000000001 R14: ffff88810ccb2580 R15: 1ffff11022406ccc [ 168.929669][ T291] FS: 0000555558428500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 168.938427][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.944849][ T291] CR2: 00007f9db249abac CR3: 0000000125f9b000 CR4: 00000000003506a0 [ 168.952666][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 168.960470][ T291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 168.968289][ T291] Call Trace: [ 168.971407][ T291] [ 168.974192][ T291] vfs_rmdir+0x32/0x460 [ 168.978178][ T291] incfs_kill_sb+0x105/0x220 [ 168.982604][ T291] deactivate_locked_super+0xa0/0x100 [ 168.987813][ T291] deactivate_super+0xaf/0xe0 [ 168.992327][ T291] cleanup_mnt+0x446/0x500 [ 168.996579][ T291] __cleanup_mnt+0x19/0x20 [ 169.000832][ T291] task_work_run+0x127/0x190 [ 169.005258][ T291] exit_to_user_mode_loop+0xd0/0xe0 [ 169.010290][ T291] exit_to_user_mode_prepare+0x5a/0xa0 [ 169.015583][ T291] syscall_exit_to_user_mode+0x1a/0x30 [ 169.020877][ T291] do_syscall_64+0x58/0xa0 [ 169.025129][ T291] ? clear_bhb_loop+0x35/0x90 [ 169.029643][ T291] ? clear_bhb_loop+0x35/0x90 [ 169.034159][ T291] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.039886][ T291] RIP: 0033:0x7f86c18c2c97 [ 169.044140][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 169.063579][ T291] RSP: 002b:00007ffe9504fdc8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 169.071824][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f86c18c2c97 [ 169.079639][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe9504fe80 [ 169.087452][ T291] RBP: 00007ffe9504fe80 R08: 0000000000000000 R09: 0000000000000000 [ 169.095260][ T291] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffe95050f70 [ 169.103184][ T291] R13: 00007f86c194389d R14: 0000000000029355 R15: 00007ffe95052040 [ 169.110996][ T291] [ 169.113867][ T291] Modules linked in: [ 169.117819][ T291] ---[ end trace 3e5af112c3cbdab1 ]--- [ 169.123094][ T291] RIP: 0010:may_delete+0x701/0x710 [ 169.134687][ T291] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 00 54 f5 ff e9 77 fe ff ff e8 76 e6 b6 ff 0f 0b e8 6f e6 b6 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 169.154208][ T291] RSP: 0018:ffffc900009e7c90 EFLAGS: 00010293 [ 169.160925][ T291] RAX: ffffffff81b1b731 RBX: ffff888112036660 RCX: ffff88811e39cf00 [ 169.168859][ T291] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 169.176749][ T291] RBP: ffffc900009e7cf8 R08: 0000000000000004 R09: 0000000000000003 [ 169.184556][ T291] R10: fffff5200013cf74 R11: 1ffff9200013cf74 R12: dffffc0000000000 [ 169.192423][ T291] R13: 0000000000000001 R14: ffff88810ccb2580 R15: 1ffff11022406ccc [ 169.200296][ T291] FS: 0000555558428500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 169.209147][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.213380][ T2743] loop4: detected capacity change from 0 to 1024 [ 169.215618][ T291] CR2: 00007ffd5c862148 CR3: 0000000125f9b000 CR4: 00000000003506b0 [ 169.230686][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 169.238525][ T291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 169.246330][ T291] Kernel panic - not syncing: Fatal exception [ 169.252426][ T291] Kernel Offset: disabled [ 169.256558][ T291] Rebooting in 86400 seconds..