last executing test programs: 20.793905506s ago: executing program 4 (id=368): syz_mount_image$fuse(0x0, 0x0, 0x101001a, 0x0, 0xfb, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x14) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x328, 0x3a8, 0x3a8, 0x328, 0x3a8, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x41}, @local, [0xffffff00], [0xffffff00, 0xffffff00, 0xff000000], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0xfd, 0x2, 0x19}, 0x0, 0x228, 0x250, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0x8, 0x103, 0x0, 0x871004, 0x0, 0x80001, 0x7fffffff, 0x0, 0x0, 0xe0}}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@private1, @private1, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xff000000, 0xffffffff], 'dvmrp0\x00', 'pimreg\x00', {}, {0xff}, 0x67, 0xb7, 0x1, 0x41}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x5, 0x400000, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0xd9f}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000002c0)=ANY=[]) 19.63346133s ago: executing program 4 (id=374): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_INIT(r2, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x10, 0x74}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x40, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', 0x0, 0x0) 19.601342064s ago: executing program 4 (id=376): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/254, 0x37, 0xfe, 0x1}, 0x28) r4 = bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r4, &(0x7f0000000500), &(0x7f0000000200)=""/21}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200010, &(0x7f0000000240)={[{@resgid}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000340)='\"', 0x1, 0x4fed0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x24002, 0x47) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 17.552518255s ago: executing program 4 (id=381): r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_pidfd_open(r0, 0x0) umount2(0x0, 0x2) 17.335965576s ago: executing program 4 (id=382): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000030000000400010005"], 0x50) syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x521800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x2, 0x4002004c4, 0xffe, 0x0, 0x0, 0xfffffffffffffffd, 0x900f, 0x0, 0xd57b, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17.020319417s ago: executing program 4 (id=384): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) 16.721075366s ago: executing program 32 (id=384): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) 12.30880082s ago: executing program 1 (id=400): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x22402, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff2, 0xa}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x21, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 12.079581163s ago: executing program 0 (id=402): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000002, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f0000000280)="da1a0f38f15c00ba2000ed642e0f01c5360f01df0fc701dfdfad000f00d0baf80c0f98dbe1efbafc0c66ed64660f3809fe0f01c3", 0x34}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000080)=ANY=[]) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11.974804143s ago: executing program 1 (id=404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4562d067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r8}, 0x10) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x1410cc4, &(0x7f00000001c0)={[{@nodiscard}, {@journal_dev={'journal_dev', 0x3d, 0xf6}}, {@noquota}]}, 0x1, 0x78c, &(0x7f0000000800)="$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") 9.959239551s ago: executing program 1 (id=409): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 9.323235224s ago: executing program 1 (id=412): socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9.241993362s ago: executing program 0 (id=414): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) 9.241628562s ago: executing program 3 (id=415): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/254, 0x37, 0xfe, 0x1}, 0x28) r5 = bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r5, &(0x7f0000000500), &(0x7f0000000200)=""/21}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200010, &(0x7f0000000240)={[{@resgid}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000340)='\"', 0x1, 0x4fed0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x24002, 0x47) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 9.241387502s ago: executing program 0 (id=416): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 8.74914075s ago: executing program 5 (id=418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2129804, 0x0, 0x0, 0x0, &(0x7f0000000240)) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000340)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 7.645927248s ago: executing program 3 (id=420): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x6, 0x0, &(0x7f0000000000)="5ae02efc441a", 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000fc0)=@delchain={0x24, 0x65, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x7}, {0x1, 0xffff}, {0xb, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x44000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000100001042a", @ANYBLOB="9180030000000000280012800b0001006572"], 0x5c}, 0x1, 0x0, 0x0, 0x24048c00}, 0x10) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0xc0386723, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 7.645714458s ago: executing program 5 (id=421): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x34180081, 0xfff9, 0x1000, 0xfffffffe, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0xc00, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) read$FUSE(r1, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000200)='./file0\x00', r4, r5) 7.172796555s ago: executing program 5 (id=422): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000080)="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", 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.728756839s ago: executing program 0 (id=424): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x26042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x8000000000000, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6a, 0x400], 0xeeee8000, 0x2011c0}) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc5, 0x5d, 0x22, 0x8, 0xf65e, 0x3868, 0xc617, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3f, 0x0, 0x0, 0x8, 0x3, 0x50}}]}}]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.557039875s ago: executing program 2 (id=427): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) getresuid(&(0x7f0000000440), &(0x7f0000000400), &(0x7f00000004c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 6.356325305s ago: executing program 1 (id=428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4562d067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee000000000000", 0x53}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r8}, 0x10) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x1410cc4, &(0x7f00000001c0)={[{@nodiscard}, {@journal_dev={'journal_dev', 0x3d, 0xf6}}, {@noquota}]}, 0x1, 0x78c, &(0x7f0000000800)="$eJzs3c9rXNUeAPDvnSRNmva95MGD9+oqIGigNDExtgouKi5EsFDQtW2YTEPNJFMyk9KEgBYR3AgqLgRd2LU/6s6tP7b6X7gQS9W0mOJCIncyN500k2mSTjLV+XzgJufMvTPnfOf+OOfOPdwbQMcaSv/kIo5FxLtJxEDt9SQieqqp7ojT68utrizn0ymJtbWXf02qy9xeWc5H3XtSR2qZ/0fEt29FHM9tLbe8uDQzWSwW5mv50crspdHy4tKJi7OT04XpwtzJsYmJ8VNPnTrZulh//2Hp6I33Xnj8i9N/vPm/6+98l8TpOFqbVx9HqwzFUO076Um/wk2eb3VhbZa0uwLsSbprdq3v5XEsBqKrmgIA/slej4g1AKDDJNp/AOgw2e8At1eW89nU3l8kDtbN5yKibz3+7Prm+pzu2jW7vup10P7byaYrI0lEDLag/KGI+PirVz9Lp9in65AAjbxxNSLODw5tPf4nW8Ys7NYTTeYdqv0fis2DQxz/4OB8nfZ/nm7U/8tt9H+iQf+nNxs79oDu/Ywt+//hFhTSRNr/e7ZubNtqXfw1g1213L+qfb6e5MLFYiE9tv07IoajpzfNjzUpY/jWn7e2m1ff//vt/dc+jZXlfPX/htzP3b2b3zM1WZl8kJjr3bwa8Uh3o/iTjfWfbNP/Pdv0k/s2Ui8+8/ZH2y2Vxp/Gm02rW+KP2uik/bF2LeKxhuv/7oi2pOn4xNHq5jCabRQNfPnjh/3blV+//tMpLT87FzgI6frvbx7/YFI/XrO8+zK+vzbwzXbz7h9/4+3/UPJKNZ31I65MVirzYxGHkpe2vj5+971ZPls+jX/40TT+6fGIzft/s+0/PSc8v8P4u2/88vne49/sTt05eyuk8U/tav3vPnF9daZr7/Gn63+imhquvbKT499OK/gg3x0AAAAAAAAAAAAAAAAAAAAAAAAA7FQuIo5GkhvZSH+SGxlZf4b3f6M/VyyVK8cvlBbmpqL6rOzB6Mllt7ocqLsf6ljtfvhZfvye/JMR8Z+I+KD3cJLdR3GqzbEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQObIluf/56rP/0/91Nvu2gEA+6av3RUAAA6c9h8AOo/2HwA6j/YfADqP9h8AOo/2HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH129syZdFq7s7KcT/NTlxcXZkqXT0wVyjMjswv5kXxp/tLIdKk0XSyM5Euz9/u8Yql0aSLmFq6MVgrlymh5cencbGlhrnLu4uzkdOFcoedAogIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3SkvLs1MFouFeYk9JNYejmq0P9FV25welvocaCJ5OKrR4kSbD0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfxN/BQAA//8jBSR4") 6.347970106s ago: executing program 3 (id=429): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/254, 0x37, 0xfe, 0x1}, 0x28) r5 = bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r5, &(0x7f0000000500), &(0x7f0000000200)=""/21}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200010, &(0x7f0000000240)={[{@resgid}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000340)='\"', 0x1, 0x4fed0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x24002, 0x47) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 4.629616795s ago: executing program 2 (id=430): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0), 0x12) 4.438077254s ago: executing program 3 (id=431): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/254, 0x37, 0xfe, 0x1}, 0x28) r5 = bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r5, &(0x7f0000000500), &(0x7f0000000200)=""/21}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200010, &(0x7f0000000240)={[{@resgid}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000340)='\"', 0x1, 0x4fed0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x24002, 0x47) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 4.433975255s ago: executing program 2 (id=432): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 4.385575769s ago: executing program 5 (id=433): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) open(0x0, 0x60840, 0x0) readlink(0x0, 0x0, 0x0) getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000001c0)) 4.306938847s ago: executing program 2 (id=434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4562d067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r8}, 0x10) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x1410cc4, &(0x7f00000001c0)={[{@nodiscard}, {@journal_dev={'journal_dev', 0x3d, 0xf6}}, {@noquota}]}, 0x1, 0x78c, &(0x7f0000000800)="$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") 4.279673009s ago: executing program 1 (id=435): r0 = io_uring_setup(0x54d1, &(0x7f00000001c0)={0x0, 0xf04d, 0x1, 0xfffffffc, 0x211}) close(r0) r1 = socket(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) sendmmsg(r1, &(0x7f0000014140)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000700)="a3", 0x1}], 0x1}}], 0x1, 0x20) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/145, 0x91}], 0x1) 195.871391ms ago: executing program 3 (id=436): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0xfcfa, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 195.441841ms ago: executing program 5 (id=437): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r4, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="5001000000000000ffffffffffffff7f03000000000000000201000000000000070000000000000008000000000000000900000006000000030000000000000008000000000000003193000000000000050000000000000009000000000000000900000000000000c03b0000080000000a0000000060000004000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0800000005000000000000000400000029fb000009000000c902000001000000020000002a0000000000005b00000000000000000300000000000000040000000000000003000000000000000020000001040000000000000000000080a8000000000000060000000000000003000000000000000500000000000000960300000000000000000000040000000700000000100000ce9cd926", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200000003000000000000000500000000000000090000000000000001000000"], 0x0, 0x0, 0x0}) r5 = syz_open_dev$hidraw(0x0, 0x0, 0x14a042) preadv(r5, 0x0, 0x0, 0x33, 0x2) 144.471556ms ago: executing program 2 (id=438): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 65.554584ms ago: executing program 0 (id=439): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r1) 65.058464ms ago: executing program 2 (id=440): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$eJzs3E9rXOUaAPDnnCZtb5t7Jxfu4uJKqFih9iRN1a6EiOtCoR+ghslJCDnJhMykNjFg68KFIKgI/ulGv4EbRXBT+h0UwZ2CC0FrGheCi8iZzEx1OpOObdKR+vvBmfO875kzz/vMHF7mwLwTwD/W4+VDEjEWERciotLqTyPicDM6GnF193m3tzar21ub1SR2di7eSsrTmn3t10pa++PRPCX+HxE3RyNOvXZ33vr6xuJMUeSrrfZEY2llor6+cXphaWY+n8+XpyYnz559burZZyb3rdY3X/nkpzc+f/HLD88t/fb8radnk5hu1h1ddeyn3fdkNKa7+pcPItkQJcMeAAAAAym/5x+KiJHmt9RKHGpGAAAAwKNk58gOAAAA8MhLYtgjAAAAAA5W+3cAt7c2q+3tYf7+4McXImL8ztri7U7+keYa4oijMRoRx7aTP61MSHZPgwdy9VpE3Jjucf0nrevv/nWvXLdG+u/nRjn/TPea/9LO/BM95p+R9n8nPKD2/Ld91/x3J/+hPvPfhQFzHFk9+VXf/NciHhvplT/p5E/65H9pwPyfjn3zbb9jOx9HnIze+f+Ya4//h5iYWyjy1mPPHCc+e/XUXvUf65c/2bv+lQHr/+761Hy/uaTM/9SJvT//XvnLa+Kt1jjSiHi7tS/b73TlePLm5Ad71T/bp/57ff4fDVj/F69vfD/gUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKApjYixSNKsE6dplkUcj4j/xbG0qNUbp+Zqa8uz5bGI8RhN5xaKfDIiKrvtpGyfacZ32lNd7bMR8d+IeLfyr2Y7q9aK2WEXDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMfxiBiLJM0iIo2IXyppmmXDHhUAAACw78aHPQAAAADgwLn/BwAAgEef+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIbhw/ny57WxvbVbL9uzl9bXF2uXTs3l9MVtaq2bV2upKNl+rzRd5Vq0t3ev1ilpt5Vwsr12ZaOT1xkR9fePSUm1tuXFpYWlmPr+Ujz6UqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPirxppbkmYRkTbjNM2yiH9HxHiMJnMLRT4ZEf+JiK8ro0fK9plhDxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9V1/fWJwpinxVIBAIOsGwZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIahvr6xOFMU+Wp92CMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABguNIfkogot5OVJ8a6jx5Ofq009xHx8vWL712ZaTRWz5T9P3f6G++3+qeGMX4AAACgW/s+vX0fDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKj6+sbiTFHkqwcYDLtGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/vweAAD//4rSy1s=") bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x52142, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) exit(0x7fffffffffffffff) 64.798884ms ago: executing program 3 (id=441): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/254, 0x37, 0xfe, 0x1}, 0x28) r5 = bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r5, &(0x7f0000000500), &(0x7f0000000200)=""/21}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200010, &(0x7f0000000240)={[{@resgid}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000340)='\"', 0x1, 0x4fed0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x24002, 0x47) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 13.477039ms ago: executing program 5 (id=442): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/254, 0x37, 0xfe, 0x1}, 0x28) r5 = bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r5, &(0x7f0000000500), &(0x7f0000000200)=""/21}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200010, &(0x7f0000000240)={[{@resgid}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000340)='\"', 0x1, 0x4fed0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x24002, 0x47) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 0 (id=443): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/254, 0x37, 0xfe, 0x1}, 0x28) r5 = bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r5, &(0x7f0000000500), &(0x7f0000000200)=""/21}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200010, &(0x7f0000000240)={[{@resgid}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000340)='\"', 0x1, 0x4fed0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x24002, 0x47) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. [ 21.013398][ T28] audit: type=1400 audit(1761109968.706:64): avc: denied { mounton } for pid=274 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.015006][ T274] cgroup: Unknown subsys name 'net' [ 21.036303][ T28] audit: type=1400 audit(1761109968.706:65): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.063777][ T28] audit: type=1400 audit(1761109968.736:66): avc: denied { unmount } for pid=274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.063990][ T274] cgroup: Unknown subsys name 'devices' [ 21.208387][ T274] cgroup: Unknown subsys name 'hugetlb' [ 21.214012][ T274] cgroup: Unknown subsys name 'rlimit' [ 21.319379][ T28] audit: type=1400 audit(1761109969.016:67): avc: denied { setattr } for pid=274 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.342451][ T276] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.342615][ T28] audit: type=1400 audit(1761109969.016:68): avc: denied { mounton } for pid=274 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.375856][ T28] audit: type=1400 audit(1761109969.016:69): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.383585][ T274] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.399432][ T28] audit: type=1400 audit(1761109969.056:70): avc: denied { relabelto } for pid=276 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.433113][ T28] audit: type=1400 audit(1761109969.056:71): avc: denied { write } for pid=276 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.458724][ T28] audit: type=1400 audit(1761109969.076:72): avc: denied { read } for pid=274 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.484276][ T28] audit: type=1400 audit(1761109969.076:73): avc: denied { open } for pid=274 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.522975][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.530089][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.537723][ T284] device bridge_slave_0 entered promiscuous mode [ 22.545541][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.552622][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.560115][ T284] device bridge_slave_1 entered promiscuous mode [ 22.579192][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.586268][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.593719][ T283] device bridge_slave_0 entered promiscuous mode [ 22.604114][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.611197][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.618724][ T282] device bridge_slave_0 entered promiscuous mode [ 22.625642][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.632712][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.640193][ T282] device bridge_slave_1 entered promiscuous mode [ 22.646945][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.654008][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.661535][ T283] device bridge_slave_1 entered promiscuous mode [ 22.719732][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.726962][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.734511][ T285] device bridge_slave_0 entered promiscuous mode [ 22.750169][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.757392][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.764843][ T285] device bridge_slave_1 entered promiscuous mode [ 22.797943][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.805268][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.812992][ T286] device bridge_slave_0 entered promiscuous mode [ 22.834114][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.841242][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.848969][ T286] device bridge_slave_1 entered promiscuous mode [ 23.022287][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.029385][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.036737][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.043766][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.061698][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.068778][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.076254][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.083349][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.098386][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.105457][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.112777][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.119829][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.135946][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.143026][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.150329][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.157385][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.171523][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.178687][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.185963][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.193032][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.212227][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.220138][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.227951][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.235238][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.242844][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.250127][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.257489][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.264644][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.272041][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.279276][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.287008][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.318541][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.326096][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.333761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.342090][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.349147][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.356649][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.364971][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.372234][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.381038][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.389328][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.396375][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.413276][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.433191][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.441612][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.449738][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.458701][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.465726][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.473160][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.484134][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.492831][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.501077][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.508113][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.531880][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.540457][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.548731][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.555756][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.564042][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.572272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.580528][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.588894][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.597211][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.604235][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.611752][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.619953][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.628031][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.636040][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.662112][ T284] device veth0_vlan entered promiscuous mode [ 23.669760][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.677927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.685880][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.694333][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.702718][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.709803][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.717343][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.725379][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.733463][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.741524][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.750097][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.758509][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.766892][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.774728][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.782928][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.790501][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.807598][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.816038][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.824502][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.832851][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.841442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.849405][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.871237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.878765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.886276][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.893763][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.901448][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.909991][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.918326][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.925357][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.932904][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.941311][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.949608][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.956659][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.964009][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.972143][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.980203][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.988318][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.996439][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.004626][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.012258][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.022661][ T283] device veth0_vlan entered promiscuous mode [ 24.032764][ T282] device veth0_vlan entered promiscuous mode [ 24.040290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.049710][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.067138][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.075352][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.085987][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.095661][ T283] device veth1_macvtap entered promiscuous mode [ 24.109684][ T284] device veth1_macvtap entered promiscuous mode [ 24.119079][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.127781][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.135900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.146676][ T285] device veth0_vlan entered promiscuous mode [ 24.153022][ T282] device veth1_macvtap entered promiscuous mode [ 24.163717][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.171822][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.180236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.188696][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.197161][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.204585][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.216412][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.224697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.234698][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.243447][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.259884][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.268691][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.277299][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.285514][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.294124][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.303609][ T286] device veth0_vlan entered promiscuous mode [ 24.313637][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.321302][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.329041][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.337553][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.361359][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.369781][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.370086][ T282] request_module fs-gadgetfs succeeded, but still no fs? [ 24.379374][ T285] device veth1_macvtap entered promiscuous mode [ 24.406350][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.414631][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.427068][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.435424][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.510016][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.518521][ T338] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.533574][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.625483][ T347] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2'. [ 24.694883][ T347] loop1: detected capacity change from 0 to 2048 [ 24.703260][ T347] ======================================================= [ 24.703260][ T347] WARNING: The mand mount option has been deprecated and [ 24.703260][ T347] and is ignored by this kernel. Remove the mand [ 24.703260][ T347] option from the mount to silence this warning. [ 24.703260][ T347] ======================================================= [ 24.978846][ T286] device veth1_macvtap entered promiscuous mode [ 25.600454][ T351] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3'. [ 25.611384][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.629543][ T347] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 25.871582][ T283] EXT4-fs (loop1): unmounting filesystem. [ 25.876150][ C0] sched: RT throttling activated [ 25.969208][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.994546][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.040054][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 26.040069][ T28] audit: type=1400 audit(1761109973.736:110): avc: denied { append } for pid=364 comm="syz.3.7" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.087728][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.125550][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.161654][ T374] capability: warning: `syz.0.10' uses deprecated v2 capabilities in a way that may be insecure [ 26.172637][ T28] audit: type=1400 audit(1761109973.846:111): avc: denied { write } for pid=364 comm="syz.3.7" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.196971][ T374] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 26.228569][ T28] audit: type=1400 audit(1761109973.926:112): avc: denied { name_bind } for pid=377 comm="syz.0.11" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 26.256052][ T28] audit: type=1400 audit(1761109973.956:113): avc: denied { node_bind } for pid=377 comm="syz.0.11" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 26.308451][ T28] audit: type=1400 audit(1761109973.996:114): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 26.336672][ T28] audit: type=1400 audit(1761109974.036:115): avc: denied { create } for pid=381 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.386628][ T385] loop1: detected capacity change from 0 to 1024 [ 26.388659][ T28] audit: type=1400 audit(1761109974.036:116): avc: denied { bind } for pid=381 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.415947][ T28] audit: type=1400 audit(1761109974.036:117): avc: denied { connect } for pid=381 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.415978][ T28] audit: type=1400 audit(1761109974.036:118): avc: denied { write } for pid=381 comm="syz.2.12" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 26.416004][ T28] audit: type=1400 audit(1761109974.036:119): avc: denied { open } for pid=381 comm="syz.2.12" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 26.435811][ T385] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 26.495376][ T385] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.518719][ T385] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 3: comm syz.1.14: lblock 3 mapped to illegal pblock 3 (length 3) [ 26.532907][ T385] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 26.545866][ T385] EXT4-fs (loop1): This should not happen!! Data will be lost [ 26.545866][ T385] [ 26.559714][ T385] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: block 3: comm syz.1.14: lblock 3 mapped to illegal pblock 3 (length 1) [ 26.580307][ T385] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: block 3: comm syz.1.14: lblock 3 mapped to illegal pblock 3 (length 1) [ 26.594581][ T385] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: block 3: comm syz.1.14: lblock 3 mapped to illegal pblock 3 (length 1) [ 26.609620][ T385] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: block 3: comm syz.1.14: lblock 3 mapped to illegal pblock 3 (length 1) [ 26.624338][ T396] EXT4-fs error (device loop1): ext4_ext_remove_space:2930: inode #15: comm syz.1.14: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 26.642600][ T396] EXT4-fs error (device loop1) in ext4_setattr:5660: Corrupt filesystem [ 26.663232][ T339] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: comm kworker/u4:3: lblock 0 mapped to illegal pblock 0 (length 1) [ 26.676945][ T339] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 26.689434][ T339] EXT4-fs (loop1): This should not happen!! Data will be lost [ 26.689434][ T339] [ 26.700210][ T283] EXT4-fs (loop1): unmounting filesystem. [ 26.731257][ T400] loop1: detected capacity change from 0 to 4096 [ 26.741351][ T400] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 26.751368][ T400] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 26.943134][ T283] EXT4-fs (loop1): unmounting filesystem. [ 26.962812][ T404] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 27.096883][ T410] device pim6reg1 entered promiscuous mode [ 27.373077][ T422] netlink: 96 bytes leftover after parsing attributes in process `syz.0.24'. [ 27.447544][ T422] loop0: detected capacity change from 0 to 2048 [ 27.717689][ T422] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 28.185679][ T432] loop3: detected capacity change from 0 to 2048 [ 28.349502][ T282] EXT4-fs (loop0): unmounting filesystem. [ 28.360773][ T432] Alternate GPT is invalid, using primary GPT. [ 28.367207][ T432] loop3: p2 p3 p7 [ 28.390947][ T432] loop2: detected capacity change from 0 to 7 [ 28.420549][ T432] loop2: [ 28.428433][ T102] loop2: [ 28.640363][ T458] loop2: detected capacity change from 0 to 1024 [ 28.649037][ T458] EXT4-fs: Ignoring removed orlov option [ 28.869328][ T458] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 29.122173][ T468] device pim6reg1 entered promiscuous mode [ 29.519727][ T284] EXT4-fs (loop2): unmounting filesystem. [ 29.525947][ T460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=460 comm=syz.0.37 [ 29.822487][ T484] netlink: 60 bytes leftover after parsing attributes in process `syz.0.42'. [ 31.038465][ T485] netlink: 96 bytes leftover after parsing attributes in process `syz.4.43'. [ 31.108976][ T485] loop4: detected capacity change from 0 to 2048 [ 31.316016][ T485] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 31.692501][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 31.692516][ T28] audit: type=1400 audit(1761109979.386:155): avc: denied { block_suspend } for pid=496 comm="syz.1.47" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.722702][ T286] EXT4-fs (loop4): unmounting filesystem. [ 31.760189][ T509] netlink: 76 bytes leftover after parsing attributes in process `syz.4.50'. [ 31.913264][ T513] loop0: detected capacity change from 0 to 2048 [ 31.941505][ T513] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 31.950028][ T513] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.962071][ T28] audit: type=1400 audit(1761109979.656:156): avc: denied { create } for pid=512 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.990754][ T28] audit: type=1400 audit(1761109979.656:157): avc: denied { write } for pid=512 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.126751][ T524] loop2: detected capacity change from 0 to 2048 [ 32.202545][ T524] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 32.211163][ T524] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.631039][ T531] syz.1.58 (531) used greatest stack depth: 22176 bytes left [ 32.747599][ T284] EXT4-fs (loop2): unmounting filesystem. [ 32.793693][ T282] EXT4-fs (loop0): unmounting filesystem. [ 32.932667][ T541] loop3: detected capacity change from 0 to 1024 [ 32.943108][ T541] EXT4-fs: Ignoring removed orlov option [ 33.118266][ T541] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 33.275672][ T28] audit: type=1400 audit(1761109980.966:158): avc: denied { read write } for pid=545 comm="syz.0.62" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.569686][ T28] audit: type=1400 audit(1761109980.996:159): avc: denied { open } for pid=545 comm="syz.0.62" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.620564][ T28] audit: type=1400 audit(1761109981.006:160): avc: denied { ioctl } for pid=545 comm="syz.0.62" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.675867][ T28] audit: type=1400 audit(1761109981.246:161): avc: denied { create } for pid=546 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.715830][ T28] audit: type=1400 audit(1761109981.246:162): avc: denied { setopt } for pid=546 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.735542][ T543] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.778429][ T285] EXT4-fs (loop3): unmounting filesystem. [ 33.809301][ T28] audit: type=1400 audit(1761109981.506:163): avc: denied { mounton } for pid=552 comm="syz.3.64" path="/10/file0" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 33.926200][ T543] usb 1-1: Using ep0 maxpacket: 8 [ 33.936621][ T28] audit: type=1400 audit(1761109981.636:164): avc: denied { setopt } for pid=545 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.960128][ T543] usb 1-1: unable to get BOS descriptor or descriptor too short [ 33.975866][ T543] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 33.983830][ T543] usb 1-1: can't read configurations, error -71 [ 34.541358][ T578] mmap: syz.3.75 (578) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.749711][ T585] loop0: detected capacity change from 0 to 1024 [ 34.758453][ T585] EXT4-fs: Ignoring removed orlov option [ 34.903343][ T585] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 35.592105][ T282] EXT4-fs (loop0): unmounting filesystem. [ 35.806310][ T601] loop1: detected capacity change from 0 to 1024 [ 35.815095][ T601] EXT4-fs: Ignoring removed orlov option [ 35.955596][ T601] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 36.590223][ T609] loop3: detected capacity change from 0 to 256 [ 36.633480][ T609] FAT-fs (loop3): Directory bread(block 64) failed [ 36.646381][ T609] FAT-fs (loop3): Directory bread(block 65) failed [ 36.663209][ T609] FAT-fs (loop3): Directory bread(block 66) failed [ 36.676846][ T609] FAT-fs (loop3): Directory bread(block 67) failed [ 36.693660][ T609] FAT-fs (loop3): Directory bread(block 68) failed [ 36.703753][ T609] FAT-fs (loop3): Directory bread(block 69) failed [ 36.720702][ T609] FAT-fs (loop3): Directory bread(block 70) failed [ 36.744389][ T609] FAT-fs (loop3): Directory bread(block 71) failed [ 36.744756][ T283] EXT4-fs (loop1): unmounting filesystem. [ 36.751212][ T609] FAT-fs (loop3): Directory bread(block 72) failed [ 36.763267][ T609] FAT-fs (loop3): Directory bread(block 73) failed [ 36.780578][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 36.780593][ T28] audit: type=1400 audit(1761109984.476:175): avc: denied { create } for pid=610 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.836239][ T28] audit: type=1400 audit(1761109984.476:176): avc: denied { connect } for pid=610 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.886196][ T28] audit: type=1400 audit(1761109984.476:177): avc: denied { write } for pid=610 comm="syz.4.87" laddr=fe80::3404:c9ff:feba:3b45 lport=1 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.958781][ T28] audit: type=1400 audit(1761109984.516:178): avc: denied { mount } for pid=608 comm="syz.3.84" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 37.018376][ T627] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3821099475 (7642198950 ns) > initial count (2842047336 ns). Using initial count to start timer. [ 37.047381][ T620] kvm: pic: single mode not supported [ 37.047399][ T620] kvm: pic: level sensitive irq not supported [ 37.058328][ T620] kvm: pic: non byte read [ 37.076922][ T620] kvm: pic: non byte read [ 37.083896][ T620] kvm: pic: non byte read [ 37.168694][ T632] loop4: detected capacity change from 0 to 1024 [ 37.177427][ T632] EXT4-fs: Ignoring removed orlov option [ 37.399524][ T620] kvm: pic: non byte read [ 37.455903][ T632] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.923660][ T620] kvm: pic: non byte read [ 37.929161][ T28] audit: type=1400 audit(1761109985.626:179): avc: denied { map } for pid=637 comm="syz.0.94" path="socket:[16905]" dev="sockfs" ino=16905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 38.038291][ T28] audit: type=1400 audit(1761109985.736:180): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.108708][ T28] audit: type=1400 audit(1761109985.796:181): avc: denied { create } for pid=643 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 38.138039][ T286] EXT4-fs (loop4): unmounting filesystem. [ 38.174222][ T648] loop2: detected capacity change from 0 to 512 [ 38.182169][ T648] EXT4-fs (loop2): Test dummy encryption mode enabled [ 38.189348][ T648] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.206273][ T648] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.272134][ T648] EXT4-fs (loop2): 1 truncate cleaned up [ 38.282775][ T648] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 38.295731][ T28] audit: type=1400 audit(1761109985.996:182): avc: denied { write } for pid=655 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.615799][ T657] loop3: detected capacity change from 0 to 1024 [ 38.629603][ T657] EXT4-fs: Ignoring removed orlov option [ 40.004359][ T659] loop4: detected capacity change from 0 to 1024 [ 40.018909][ T659] EXT4-fs: Ignoring removed orlov option [ 41.450380][ T659] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 41.463933][ T657] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 41.672451][ T284] EXT4-fs (loop2): unmounting filesystem. [ 41.899501][ T285] EXT4-fs (loop3): unmounting filesystem. [ 41.952793][ T28] audit: type=1400 audit(1761109989.646:183): avc: denied { setattr } for pid=667 comm="syz.1.102" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.013281][ T28] audit: type=1400 audit(1761109989.666:184): avc: denied { write } for pid=667 comm="syz.1.102" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.065351][ T28] audit: type=1400 audit(1761109989.706:185): avc: denied { bind } for pid=669 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.105086][ T28] audit: type=1400 audit(1761109989.706:186): avc: denied { listen } for pid=669 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.144928][ T28] audit: type=1400 audit(1761109989.706:187): avc: denied { setopt } for pid=669 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.164907][ T286] EXT4-fs (loop4): unmounting filesystem. [ 42.261000][ T28] audit: type=1400 audit(1761109989.956:188): avc: denied { create } for pid=680 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.367435][ T28] audit: type=1400 audit(1761109989.956:189): avc: denied { bpf } for pid=684 comm="syz.3.109" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.389914][ T28] audit: type=1400 audit(1761109989.966:190): avc: denied { map_create } for pid=684 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 42.409029][ T28] audit: type=1400 audit(1761109989.966:191): avc: denied { prog_load } for pid=684 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 42.429072][ T28] audit: type=1400 audit(1761109989.966:192): avc: denied { perfmon } for pid=684 comm="syz.3.109" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.501999][ T693] loop3: detected capacity change from 0 to 1024 [ 42.511605][ T693] EXT4-fs: Ignoring removed orlov option [ 42.787046][ T693] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 43.413120][ T285] EXT4-fs (loop3): unmounting filesystem. [ 43.515550][ T706] loop0: detected capacity change from 0 to 1024 [ 43.524079][ T706] EXT4-fs: Ignoring removed orlov option [ 43.780877][ T706] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 43.903290][ T708] loop2: detected capacity change from 0 to 2048 [ 43.903305][ T712] Driver unsupported XDP return value 0 on prog (id 63) dev N/A, expect packet loss! [ 44.525943][ T716] loop1: detected capacity change from 0 to 1024 [ 44.532744][ T716] EXT4-fs: Ignoring removed orlov option [ 44.562680][ T282] EXT4-fs (loop0): unmounting filesystem. [ 44.715001][ T716] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 44.812108][ T708] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 44.909532][ T708] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.314247][ T283] EXT4-fs (loop1): unmounting filesystem. [ 45.503504][ T744] loop1: detected capacity change from 0 to 512 [ 45.539979][ T744] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.570293][ T750] loop0: detected capacity change from 0 to 256 [ 45.580965][ T750] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 45.593569][ T744] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 45.606217][ T744] System zones: 1-12 [ 45.610894][ T750] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 45.619259][ T750] exFAT-fs (loop0): Filesystem has been set read-only [ 45.626329][ T744] EXT4-fs (loop1): 1 truncate cleaned up [ 45.631982][ T744] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 45.675545][ T753] bridge: RTM_NEWNEIGH with invalid ether address [ 45.714735][ T757] device syzkaller0 entered promiscuous mode [ 45.915249][ T765] xt_CT: You must specify a L4 protocol and not use inversions on it [ 46.050573][ T768] loop0: detected capacity change from 0 to 1024 [ 46.059224][ T768] EXT4-fs: Ignoring removed orlov option [ 46.367166][ T768] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 46.794386][ T283] EXT4-fs (loop1): unmounting filesystem. [ 47.062013][ T282] EXT4-fs (loop0): unmounting filesystem. [ 47.198450][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 47.198466][ T28] audit: type=1400 audit(1761109994.896:235): avc: denied { create } for pid=775 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.656546][ T28] audit: type=1400 audit(1761109995.096:236): avc: denied { name_bind } for pid=773 comm="syz.1.135" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 48.064962][ T779] syz.1.135 (779) used greatest stack depth: 21944 bytes left [ 48.093653][ T284] EXT4-fs (loop2): unmounting filesystem. [ 48.158300][ T28] audit: type=1400 audit(1761109995.856:237): avc: denied { create } for pid=781 comm="syz.3.138" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 48.213116][ T28] audit: type=1400 audit(1761109995.886:238): avc: denied { ioctl } for pid=781 comm="syz.3.138" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17395 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 48.317206][ T784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.139'. [ 48.353160][ T28] audit: type=1400 audit(1761109996.046:239): avc: denied { write } for pid=785 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.400422][ T28] audit: type=1400 audit(1761109996.066:240): avc: denied { read } for pid=785 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.449503][ T797] binder: 796:797 ioctl c0306201 200000000080 returned -14 [ 48.457094][ T28] audit: type=1400 audit(1761109996.146:241): avc: denied { read } for pid=796 comm="syz.0.144" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.460599][ T784] syz.4.139 (784) used greatest stack depth: 21152 bytes left [ 48.513343][ T28] audit: type=1400 audit(1761109996.146:242): avc: denied { open } for pid=796 comm="syz.0.144" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.540679][ T802] loop1: detected capacity change from 0 to 512 [ 48.556578][ T802] EXT4-fs: Ignoring removed orlov option [ 48.570588][ T28] audit: type=1400 audit(1761109996.146:243): avc: denied { ioctl } for pid=796 comm="syz.0.144" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.615334][ T808] loop2: detected capacity change from 0 to 128 [ 48.618306][ T28] audit: type=1400 audit(1761109996.146:244): avc: denied { set_context_mgr } for pid=796 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 48.653915][ T808] EXT4-fs (loop2): Test dummy encryption mode enabled [ 48.667251][ T802] EXT4-fs error (device loop1): ext4_find_extent:936: inode #4: comm syz.1.143: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 48.682230][ T808] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 48.694694][ T802] EXT4-fs warning (device loop1): ext4_enable_quotas:7055: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 48.723045][ T808] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.725910][ T802] EXT4-fs (loop1): mount failed [ 48.745468][ T808] fscrypt: AES-256-XTS using blk-crypto-fallback [ 48.868099][ T284] EXT4-fs (loop2): unmounting filesystem. [ 48.933766][ T823] Bluetooth: hci0: Frame reassembly failed (-90) [ 48.956249][ T717] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.069186][ T828] tipc: Started in network mode [ 49.089850][ T828] tipc: Node identity 0a3b74421e5b, cluster identity 4711 [ 49.117381][ T828] tipc: Enabled bearer , priority 0 [ 49.137152][ T827] tipc: Resetting bearer [ 49.165917][ T827] tipc: Disabling bearer [ 49.602621][ T849] loop0: detected capacity change from 0 to 1024 [ 49.611448][ T849] EXT4-fs: Ignoring removed orlov option [ 49.814592][ T849] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 50.205278][ T854] loop3: detected capacity change from 0 to 128 [ 50.335891][ T854] EXT4-fs (loop3): Test dummy encryption mode enabled [ 50.356547][ T854] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 50.375523][ T854] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.444783][ T285] EXT4-fs (loop3): unmounting filesystem. [ 50.532400][ T282] EXT4-fs (loop0): unmounting filesystem. [ 50.746287][ T869] device pim6reg1 entered promiscuous mode [ 50.986184][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 50.992805][ T824] Bluetooth: hci0: command 0x1003 tx timeout [ 51.750990][ T890] loop2: detected capacity change from 0 to 1024 [ 51.758241][ T890] EXT4-fs: Ignoring removed orlov option [ 52.065995][ T890] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 52.150859][ T888] netlink: 76 bytes leftover after parsing attributes in process `syz.4.173'. [ 52.591010][ T284] EXT4-fs (loop2): unmounting filesystem. [ 52.662459][ T905] loop2: detected capacity change from 0 to 512 [ 52.697709][ T905] EXT4-fs (loop2): Test dummy encryption mode enabled [ 52.702944][ T903] loop3: detected capacity change from 0 to 2048 [ 52.704609][ T905] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.734153][ T903] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 52.742746][ T903] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.756034][ T717] Bluetooth: hci0: Frame reassembly failed (-84) [ 52.758449][ T905] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.178: bad orphan inode 131083 [ 52.774804][ T905] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.785215][ T912] Bluetooth: hci0: Frame reassembly failed (-90) [ 52.801767][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 52.801781][ T28] audit: type=1400 audit(1761110000.496:257): avc: denied { create } for pid=904 comm="syz.2.178" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 52.828699][ T905] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 52.838444][ T905] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 52.846081][ T28] audit: type=1400 audit(1761110000.536:258): avc: denied { write } for pid=904 comm="syz.2.178" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 52.870033][ T905] EXT4-fs (loop2): Online defrag not supported for encrypted files [ 52.883944][ T28] audit: type=1400 audit(1761110000.536:259): avc: denied { add_name } for pid=904 comm="syz.2.178" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 52.904801][ T28] audit: type=1400 audit(1761110000.566:260): avc: denied { ioctl } for pid=904 comm="syz.2.178" path="/24/bus/bus/file1" dev="loop2" ino=20 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.930405][ T284] EXT4-fs (loop2): unmounting filesystem. [ 53.014590][ T28] audit: type=1400 audit(1761110000.706:261): avc: denied { read write } for pid=924 comm="syz.2.184" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.039651][ T28] audit: type=1400 audit(1761110000.706:262): avc: denied { open } for pid=924 comm="syz.2.184" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.108132][ T28] audit: type=1400 audit(1761110000.706:263): avc: denied { ioctl } for pid=924 comm="syz.2.184" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.142743][ T928] netlink: 60 bytes leftover after parsing attributes in process `syz.0.183'. [ 53.442279][ T28] audit: type=1400 audit(1761110001.136:264): avc: denied { connect } for pid=930 comm="syz.2.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.710622][ T285] EXT4-fs (loop3): unmounting filesystem. [ 54.234454][ T28] audit: type=1400 audit(1761110001.926:265): avc: denied { create } for pid=944 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 54.294048][ T28] audit: type=1400 audit(1761110001.926:266): avc: denied { write } for pid=944 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 54.319496][ T950] device pim6reg1 entered promiscuous mode [ 54.346201][ T955] binder: BINDER_SET_CONTEXT_MGR already set [ 54.363851][ T955] binder: 952:955 ioctl 4018620d 200000004a80 returned -16 [ 54.396753][ T958] loop0: detected capacity change from 0 to 512 [ 54.421206][ T958] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 54.432346][ T958] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.492436][ T282] EXT4-fs (loop0): unmounting filesystem. [ 54.549335][ T969] kvm [968]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 54.557583][ T969] kvm [968]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 54.568890][ T969] kvm [968]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 54.581629][ T982] loop2: detected capacity change from 0 to 512 [ 54.590919][ T982] ext4: Unknown parameter 'appraise_type' [ 54.592195][ T969] kvm [968]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 54.605202][ T969] kvm [968]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 54.616218][ T969] kvm [968]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 54.806186][ T875] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.806198][ T825] Bluetooth: hci0: command 0x1003 tx timeout [ 54.884428][ T997] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 55.015551][ T999] loop3: detected capacity change from 0 to 1024 [ 55.024655][ T999] EXT4-fs: Ignoring removed orlov option [ 55.169838][ T999] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 55.988064][ T1016] loop0: detected capacity change from 0 to 2048 [ 56.026670][ T285] EXT4-fs (loop3): unmounting filesystem. [ 56.237766][ T1016] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 56.246650][ T1016] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.972691][ T1032] netlink: 96 bytes leftover after parsing attributes in process `syz.4.216'. [ 56.989911][ T1032] loop4: detected capacity change from 0 to 2048 [ 57.026178][ T282] EXT4-fs (loop0): unmounting filesystem. [ 57.169544][ T1032] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 57.781738][ T1043] device syzkaller0 entered promiscuous mode [ 57.803947][ T1043] loop3: detected capacity change from 0 to 1024 [ 57.818387][ T1043] EXT4-fs: Ignoring removed orlov option [ 57.825427][ T1043] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.837953][ T1043] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 57.951993][ T286] EXT4-fs (loop4): unmounting filesystem. [ 57.986497][ T285] EXT4-fs (loop3): unmounting filesystem. [ 58.059870][ T1056] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 58.069730][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 58.069746][ T28] audit: type=1400 audit(1761110005.766:278): avc: denied { setopt } for pid=1048 comm="syz.2.222" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.209790][ T28] audit: type=1400 audit(1761110005.906:279): avc: denied { setattr } for pid=1067 comm="syz.3.229" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.380552][ T1073] netlink: 60 bytes leftover after parsing attributes in process `syz.4.228'. [ 58.634396][ T28] audit: type=1400 audit(1761110006.326:280): avc: denied { read write } for pid=1074 comm="syz.1.231" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.723517][ T28] audit: type=1400 audit(1761110006.396:281): avc: denied { open } for pid=1074 comm="syz.1.231" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.773715][ T28] audit: type=1400 audit(1761110006.396:282): avc: denied { ioctl } for pid=1074 comm="syz.1.231" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.221830][ T1079] loop0: detected capacity change from 0 to 1024 [ 59.237121][ T1079] EXT4-fs: Ignoring removed orlov option [ 60.708646][ T363] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 60.755380][ T1084] syz.2.233[1084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.755461][ T1084] syz.2.233[1084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.777136][ T1079] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 60.922608][ T1092] netlink: 96 bytes leftover after parsing attributes in process `syz.4.234'. [ 60.939717][ T1092] loop4: detected capacity change from 0 to 2048 [ 60.962244][ T363] usb 2-1: Using ep0 maxpacket: 32 [ 60.998725][ T363] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 61.019202][ T282] EXT4-fs (loop0): unmounting filesystem. [ 61.152859][ T1092] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 61.186041][ T363] usb 2-1: config 0 has no interface number 0 [ 61.250877][ T363] usb 2-1: config 0 interface 230 has no altsetting 0 [ 61.299444][ T363] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 61.383973][ T363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.414256][ T363] usb 2-1: Product: syz [ 61.419379][ T363] usb 2-1: Manufacturer: syz [ 61.424290][ T363] usb 2-1: SerialNumber: syz [ 61.451905][ T363] usb 2-1: config 0 descriptor?? [ 61.461975][ T363] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 61.482362][ T363] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 61.727653][ T363] ums-usbat: probe of 2-1:0.230 failed with error -5 [ 61.749799][ T363] usb 2-1: USB disconnect, device number 2 [ 61.871420][ T348] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.885027][ T286] EXT4-fs (loop4): unmounting filesystem. [ 61.899738][ T1106] binder: 1105:1106 ioctl c0306201 200000000680 returned -14 [ 61.972748][ T1114] netlink: 'syz.1.243': attribute type 4 has an invalid length. [ 61.985390][ T1114] netlink: 'syz.1.243': attribute type 4 has an invalid length. [ 62.016202][ T28] audit: type=1326 audit(1761110009.706:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1109 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fe98efc9 code=0x7ffc0000 [ 62.050228][ T28] audit: type=1326 audit(1761110009.706:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1109 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fe98efc9 code=0x7ffc0000 [ 62.073847][ T28] audit: type=1326 audit(1761110009.706:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1109 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fe98efc9 code=0x7ffc0000 [ 62.097420][ T28] audit: type=1326 audit(1761110009.706:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1109 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc0fe98efc9 code=0x7ffc0000 [ 62.120891][ T28] audit: type=1326 audit(1761110009.706:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1109 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fe98efc9 code=0x7ffc0000 [ 62.157729][ T1120] netlink: 60 bytes leftover after parsing attributes in process `syz.4.242'. [ 62.624327][ T1122] loop3: detected capacity change from 0 to 2048 [ 62.883642][ T1122] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 62.893014][ T1122] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.261614][ T1130] loop1: detected capacity change from 0 to 2048 [ 63.275589][ T285] EXT4-fs (loop3): unmounting filesystem. [ 63.306356][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 63.306372][ T28] audit: type=1400 audit(1761110010.996:327): avc: denied { bind } for pid=1131 comm="syz.4.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.355312][ T1130] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 63.364152][ T1130] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.431872][ T1137] device syzkaller0 entered promiscuous mode [ 63.442215][ T28] audit: type=1400 audit(1761110010.996:328): avc: denied { block_suspend } for pid=1131 comm="syz.4.249" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.495543][ T28] audit: type=1326 audit(1761110011.036:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1109 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc0fe98efc9 code=0x7ffc0000 [ 63.738242][ T1147] netlink: 96 bytes leftover after parsing attributes in process `syz.4.252'. [ 63.766647][ T1147] loop4: detected capacity change from 0 to 2048 [ 64.091322][ T875] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 64.132155][ T283] EXT4-fs (loop1): unmounting filesystem. [ 64.210895][ T28] audit: type=1400 audit(1761110011.906:330): avc: denied { read } for pid=1144 comm="syz.0.253" path="socket:[20622]" dev="sockfs" ino=20622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.271014][ T1147] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 64.715476][ T28] audit: type=1400 audit(1761110012.406:331): avc: denied { unlink } for pid=1155 comm="syz.2.257" name="#3" dev="tmpfs" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 64.740032][ T286] EXT4-fs (loop4): unmounting filesystem. [ 64.768273][ T28] audit: type=1400 audit(1761110012.466:332): avc: denied { remount } for pid=1155 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 64.811146][ T28] audit: type=1400 audit(1761110012.506:333): avc: denied { create } for pid=1161 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.817590][ T1159] incfs: Can't find or create .index dir in ./file0 [ 64.850655][ T28] audit: type=1400 audit(1761110012.506:334): avc: denied { mounton } for pid=1158 comm="syz.4.258" path="/55/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.873371][ T1159] incfs: mount failed -14 [ 64.889104][ T28] audit: type=1400 audit(1761110012.506:335): avc: denied { write } for pid=1158 comm="syz.4.258" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.918045][ T28] audit: type=1400 audit(1761110012.506:336): avc: denied { add_name } for pid=1158 comm="syz.4.258" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.029718][ T1167] loop3: detected capacity change from 0 to 2048 [ 65.060214][ T1167] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 65.068821][ T1167] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.079768][ T1168] netlink: 60 bytes leftover after parsing attributes in process `syz.0.260'. [ 65.256312][ T1175] loop4: detected capacity change from 0 to 2048 [ 65.323845][ T1175] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 65.332540][ T1175] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.675621][ T1179] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 65.813907][ T285] EXT4-fs (loop3): unmounting filesystem. [ 65.938603][ T1191] device syzkaller0 entered promiscuous mode [ 65.973669][ T286] EXT4-fs (loop4): unmounting filesystem. [ 65.976314][ T1193] device syzkaller0 entered promiscuous mode [ 66.164416][ T1203] netlink: 96 bytes leftover after parsing attributes in process `syz.0.269'. [ 66.279448][ T1203] loop0: detected capacity change from 0 to 2048 [ 66.419136][ T1203] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 66.434052][ T772] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 66.970366][ T772] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.010716][ T772] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.030469][ T1217] loop4: detected capacity change from 0 to 256 [ 67.041175][ T772] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.089990][ T1217] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 67.133253][ T772] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.175395][ T772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.190024][ T282] EXT4-fs (loop0): unmounting filesystem. [ 67.238064][ T772] usb 2-1: config 0 descriptor?? [ 67.319112][ T1244] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 67.671570][ T1268] loop2: detected capacity change from 0 to 2048 [ 67.685079][ T772] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 67.738267][ T772] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 67.759474][ T1268] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 67.768249][ T1268] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.876211][ T1207] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.958781][ T442] usb 2-1: USB disconnect, device number 3 [ 68.066189][ T1207] usb 4-1: Using ep0 maxpacket: 8 [ 68.072819][ T1207] usb 4-1: config 254 has an invalid interface number: 240 but max is 0 [ 68.081631][ T1207] usb 4-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 68.092287][ T1207] usb 4-1: config 254 has no interface number 0 [ 68.098794][ T1207] usb 4-1: config 254 interface 240 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 68.114085][ T1207] usb 4-1: New USB device found, idVendor=17ef, idProduct=3069, bcdDevice=3e.9b [ 68.123583][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.131897][ T1207] usb 4-1: Product: syz [ 68.136367][ T1207] usb 4-1: Manufacturer: syz [ 68.141041][ T1207] usb 4-1: SerialNumber: syz [ 68.295808][ T1273] fido_id[1273]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 68.318535][ T284] EXT4-fs (loop2): unmounting filesystem. [ 68.352326][ T1257] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.360493][ T1207] r8152-cfgselector 4-1: Unknown version 0x0000 [ 68.371993][ T1207] r8152-cfgselector 4-1: Unknown version 0x0000 [ 68.379047][ T1207] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 69.638012][ T1303] netlink: 96 bytes leftover after parsing attributes in process `syz.0.287'. [ 69.655381][ T1303] loop0: detected capacity change from 0 to 2048 [ 69.684300][ T1303] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 69.846834][ T282] EXT4-fs (loop0): unmounting filesystem. [ 69.875633][ T1313] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 70.116229][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.196414][ T1329] loop2: detected capacity change from 0 to 2048 [ 70.225659][ T1329] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 70.234291][ T1329] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.297221][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 70.304366][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.314946][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.326383][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 70.335762][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.343936][ T24] usb 5-1: Product: syz [ 70.348409][ T24] usb 5-1: Manufacturer: syz [ 70.353216][ T24] usb 5-1: SerialNumber: syz [ 70.603489][ T24] usb 5-1: 0:2 : does not exist [ 70.612857][ T24] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 70.643364][ T24] usb 5-1: USB disconnect, device number 2 [ 70.948302][ T1338] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 70.955592][ T1338] IPv6: NLM_F_CREATE should be set when creating new route [ 71.452639][ T1340] loop3: detected capacity change from 0 to 2048 [ 71.481998][ T284] EXT4-fs (loop2): unmounting filesystem. [ 71.508322][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.560255][ T1340] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 71.569183][ T1340] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.895245][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 71.895259][ T28] audit: type=1400 audit(1761110019.586:350): avc: denied { unmount } for pid=1345 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.979923][ T1352] 9pnet_fd: Insufficient options for proto=fd [ 72.291509][ T1359] netlink: 96 bytes leftover after parsing attributes in process `syz.2.310'. [ 72.317970][ T285] EXT4-fs (loop3): unmounting filesystem. [ 74.440062][ T1394] loop1: detected capacity change from 0 to 2048 [ 74.466988][ T1394] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 74.475567][ T1394] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.458241][ T283] EXT4-fs (loop1): unmounting filesystem. [ 76.545318][ T1421] netlink: 96 bytes leftover after parsing attributes in process `syz.4.324'. [ 76.562696][ T1421] loop4: detected capacity change from 0 to 2048 [ 76.707848][ T1421] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 76.909154][ T1429] overlayfs: statfs failed on './file0' [ 77.746650][ T286] EXT4-fs (loop4): unmounting filesystem. [ 79.646585][ T1438] loop3: detected capacity change from 0 to 2048 [ 79.857239][ T1438] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 80.069921][ T1443] process 'syz.0.330' launched './file0' with NULL argv: empty string added [ 80.176882][ T1431] netlink: 96 bytes leftover after parsing attributes in process `syz.3.326'. [ 80.222542][ T285] EXT4-fs (loop3): unmounting filesystem. [ 80.289232][ T1450] loop1: detected capacity change from 0 to 2048 [ 80.315912][ T1450] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 80.324526][ T1450] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.718359][ T1457] device syzkaller0 entered promiscuous mode [ 80.799867][ T1465] loop0: detected capacity change from 0 to 16 [ 80.813305][ T1465] erofs: (device loop0): mounted with root inode @ nid 36. [ 80.824933][ T28] audit: type=1400 audit(1761110028.526:351): avc: denied { append } for pid=1464 comm="syz.0.338" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.429253][ T1470] loop3: detected capacity change from 0 to 1024 [ 82.444168][ T1470] EXT4-fs: Ignoring removed orlov option [ 84.407624][ T283] EXT4-fs (loop1): unmounting filesystem. [ 84.803151][ T1474] netlink: 96 bytes leftover after parsing attributes in process `syz.4.339'. [ 84.820553][ T1474] loop4: detected capacity change from 0 to 2048 [ 84.963171][ T1470] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 86.487949][ T1474] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 86.497968][ T285] EXT4-fs (loop3): unmounting filesystem. [ 86.771000][ T1486] netlink: 60 bytes leftover after parsing attributes in process `syz.1.341'. [ 86.801446][ T286] EXT4-fs (loop4): unmounting filesystem. [ 87.016608][ T28] audit: type=1400 audit(1761110028.526:352): avc: denied { map } for pid=1464 comm="syz.0.338" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.246572][ T1491] loop3: detected capacity change from 0 to 2048 [ 87.278108][ T28] audit: type=1400 audit(1761110028.526:353): avc: denied { execute } for pid=1464 comm="syz.0.338" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.667968][ T1491] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 87.677009][ T1491] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.891551][ T28] audit: type=1400 audit(1761110028.526:354): avc: denied { read write } for pid=1464 comm="syz.0.338" name="file1" dev="loop0" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 87.914516][ T28] audit: type=1400 audit(1761110028.526:355): avc: denied { open } for pid=1464 comm="syz.0.338" path="/81/file2/file1" dev="loop0" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 89.402416][ T1501] loop0: detected capacity change from 0 to 2048 [ 89.468432][ T285] EXT4-fs (loop3): unmounting filesystem. [ 89.626594][ T1501] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 89.899344][ T1508] loop4: detected capacity change from 0 to 1024 [ 89.906141][ T1508] EXT4-fs: Ignoring removed orlov option [ 90.355929][ T1495] netlink: 96 bytes leftover after parsing attributes in process `syz.0.345'. [ 90.700883][ T1508] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 91.050057][ T282] EXT4-fs (loop0): unmounting filesystem. [ 91.060455][ T1517] bridge: RTM_NEWNEIGH with invalid ether address [ 91.096055][ T28] audit: type=1400 audit(1761110038.786:356): avc: denied { create } for pid=1521 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 91.118323][ T28] audit: type=1400 audit(1761110038.796:357): avc: denied { bind } for pid=1521 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.184546][ T286] EXT4-fs (loop4): unmounting filesystem. [ 91.531423][ T1541] loop3: detected capacity change from 0 to 1024 [ 91.545865][ T1541] EXT4-fs: Ignoring removed orlov option [ 93.962734][ T1545] netlink: 96 bytes leftover after parsing attributes in process `syz.4.355'. [ 93.985890][ T1545] loop4: detected capacity change from 0 to 2048 [ 94.705568][ T1546] loop1: detected capacity change from 0 to 2048 [ 94.798091][ T1543] netlink: 60 bytes leftover after parsing attributes in process `syz.2.357'. [ 96.612591][ T28] audit: type=1400 audit(1761110044.306:358): avc: denied { create } for pid=1551 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.636446][ T1541] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3. [ 96.649455][ T1545] EXT4-fs warning (device loop4): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop4. [ 96.661629][ T1546] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 96.726268][ T28] audit: type=1400 audit(1761110044.326:359): avc: denied { write } for pid=1551 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.751796][ T28] audit: type=1400 audit(1761110044.326:360): avc: denied { nlmsg_write } for pid=1551 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.027405][ T543] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.227329][ T543] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.238329][ T543] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.248310][ T543] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.261615][ T543] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.270825][ T543] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.282680][ T543] usb 1-1: config 0 descriptor?? [ 98.714523][ T1575] loop3: detected capacity change from 0 to 256 [ 98.733320][ T543] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 98.762182][ T1575] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 98.775831][ T1575] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 98.820683][ T1570] xt_hashlimit: size too large, truncated to 1048576 [ 98.889013][ T543] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 98.915513][ T543] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 99.088801][ T543] usb 1-1: USB disconnect, device number 4 [ 99.352402][ T1582] fido_id[1582]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 99.523903][ T1587] loop1: detected capacity change from 0 to 128 [ 99.537754][ T28] audit: type=1400 audit(1761110047.236:361): avc: denied { mount } for pid=1586 comm="syz.1.371" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 99.558132][ T1587] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 99.567857][ T1587] FAT-fs (loop1): Filesystem has been set read-only [ 99.574531][ T1587] syz.1.371: attempt to access beyond end of device [ 99.574531][ T1587] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.600597][ T1591] incfs_lookup_dentry err:-5 [ 99.605335][ T1591] incfs: Can't find or create .index dir in ./file0 [ 99.612907][ T1591] incfs: mount failed -5 [ 99.716209][ T28] audit: type=1400 audit(1761110047.386:362): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 99.807992][ T1207] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.023843][ T1606] loop4: detected capacity change from 0 to 1024 [ 100.038682][ T1606] EXT4-fs: Ignoring removed orlov option [ 101.319729][ T1610] loop0: detected capacity change from 0 to 2048 [ 101.453451][ T1606] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 101.515336][ T1610] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 101.524292][ T1610] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.635648][ T286] EXT4-fs (loop4): unmounting filesystem. [ 101.917447][ T1612] netlink: 96 bytes leftover after parsing attributes in process `syz.1.378'. [ 101.935343][ T1612] loop1: detected capacity change from 0 to 2048 [ 102.000162][ T282] EXT4-fs (loop0): unmounting filesystem. [ 102.040993][ T1207] usb 4-1: Using ep0 maxpacket: 32 [ 102.085776][ T1207] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.159380][ T1612] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 102.273040][ T1207] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 102.341121][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.349204][ T1207] usb 4-1: Product: syz [ 102.353474][ T1207] usb 4-1: Manufacturer: syz [ 102.358142][ T1207] usb 4-1: SerialNumber: syz [ 102.379559][ T1207] usb 4-1: config 0 descriptor?? [ 102.416597][ T1207] usb 4-1: bad CDC descriptors [ 102.421671][ T1207] usb 4-1: unsupported MDLM descriptors [ 102.496725][ T283] EXT4-fs (loop1): unmounting filesystem. [ 102.530023][ T19] usb 4-1: USB disconnect, device number 3 [ 102.583053][ T1633] netlink: 'syz.1.386': attribute type 12 has an invalid length. [ 102.598587][ T1633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.386'. [ 102.606651][ T1634] loop0: detected capacity change from 0 to 2048 [ 102.658928][ T1634] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 102.735588][ T282] EXT4-fs (loop0): unmounting filesystem. [ 102.836932][ T28] audit: type=1400 audit(1761110050.536:363): avc: denied { mounton } for pid=1642 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 102.885902][ T1643] loop1: detected capacity change from 0 to 2048 [ 102.923314][ T1643] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 102.931973][ T1643] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.960084][ T1642] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.967398][ T1642] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.974955][ T1642] device bridge_slave_0 entered promiscuous mode [ 102.976218][ T19] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.982213][ T1642] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.995920][ T1642] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.003553][ T1642] device bridge_slave_1 entered promiscuous mode [ 103.060295][ T10] device bridge_slave_1 left promiscuous mode [ 103.068615][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.097808][ T10] device bridge_slave_0 left promiscuous mode [ 103.104126][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.112767][ T10] device veth1_macvtap left promiscuous mode [ 103.118854][ T10] device veth0_vlan left promiscuous mode [ 103.830549][ T283] EXT4-fs (loop1): unmounting filesystem. [ 103.844915][ T1655] netlink: 60 bytes leftover after parsing attributes in process `syz.0.392'. [ 104.096392][ T717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.104321][ T717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.129430][ T717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.152794][ T717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.169715][ T717] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.176818][ T717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.198623][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 104.199283][ T717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.212924][ T19] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.228913][ T19] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.235524][ T717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.261182][ T19] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.270653][ T717] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.277726][ T717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.285148][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.293499][ T717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.301422][ T19] usb 4-1: Product: syz [ 104.305608][ T19] usb 4-1: Manufacturer: syz [ 104.310794][ T19] usb 4-1: SerialNumber: syz [ 104.323624][ T1669] netlink: 'syz.0.395': attribute type 16 has an invalid length. [ 104.331647][ T1669] netlink: 'syz.0.395': attribute type 17 has an invalid length. [ 104.354562][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.362561][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.381473][ T1666] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 104.388985][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 104.397712][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.407341][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 104.422460][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.077037][ T1676] loop1: detected capacity change from 0 to 2048 [ 106.172862][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.248518][ T1676] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 106.257397][ T1676] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.315642][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.533138][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.541501][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.550317][ T1672] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 106.576433][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.602593][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.689692][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.716700][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.747198][ T1642] device veth0_vlan entered promiscuous mode [ 106.755270][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.783583][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.811491][ T1642] device veth1_macvtap entered promiscuous mode [ 106.819377][ T283] EXT4-fs (loop1): unmounting filesystem. [ 106.825896][ T19] usb 4-1: 0:2 : does not exist [ 106.833689][ T19] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 106.852115][ T19] usb 4-1: USB disconnect, device number 4 [ 106.866309][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.876667][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.903183][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.927520][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.951131][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.970215][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.986461][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.008841][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.026552][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.044490][ T1693] netlink: 76 bytes leftover after parsing attributes in process `syz.1.400'. [ 107.064537][ T28] audit: type=1400 audit(1761110054.756:364): avc: denied { mounton } for pid=1642 comm="syz-executor" path="/root/syzkaller.LmEu65/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 107.090449][ T28] audit: type=1400 audit(1761110054.786:365): avc: denied { mount } for pid=1642 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 107.122774][ T28] audit: type=1400 audit(1761110054.786:366): avc: denied { mount } for pid=1642 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 107.159290][ T28] audit: type=1400 audit(1761110054.786:367): avc: denied { mounton } for pid=1642 comm="syz-executor" path="/root/syzkaller.LmEu65/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 107.186511][ T28] audit: type=1400 audit(1761110054.786:368): avc: denied { mounton } for pid=1642 comm="syz-executor" path="/root/syzkaller.LmEu65/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=22187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 107.226575][ T28] audit: type=1400 audit(1761110054.816:369): avc: denied { mounton } for pid=1642 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 107.250547][ T28] audit: type=1400 audit(1761110054.816:370): avc: denied { mounton } for pid=1642 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 107.285921][ T28] audit: type=1400 audit(1761110054.936:371): avc: denied { create } for pid=1701 comm="syz.5.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.595663][ T28] audit: type=1400 audit(1761110054.956:372): avc: denied { map } for pid=1701 comm="syz.5.403" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 108.371044][ T1708] netlink: 96 bytes leftover after parsing attributes in process `syz.1.404'. [ 108.388452][ T1708] loop1: detected capacity change from 0 to 2048 [ 108.597011][ T1708] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 108.836175][ T28] audit: type=1400 audit(1761110054.956:373): avc: denied { read write } for pid=1701 comm="syz.5.403" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 109.194052][ T283] EXT4-fs (loop1): unmounting filesystem. [ 109.842606][ T1727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.409'. [ 110.201938][ T1747] loop3: detected capacity change from 0 to 1024 [ 110.210784][ T1747] EXT4-fs: Ignoring removed orlov option [ 111.187481][ T1756] netlink: 96 bytes leftover after parsing attributes in process `syz.2.419'. [ 111.263618][ T1747] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 111.550074][ T285] EXT4-fs (loop3): unmounting filesystem. [ 112.024862][ T1769] netlink: 60 bytes leftover after parsing attributes in process `syz.3.420'. [ 112.868674][ T1772] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.924428][ T1786] netlink: 96 bytes leftover after parsing attributes in process `syz.1.428'. [ 113.086334][ T1786] loop1: detected capacity change from 0 to 2048 [ 113.384661][ T1794] loop3: detected capacity change from 0 to 1024 [ 113.393869][ T1794] EXT4-fs: Ignoring removed orlov option [ 114.397189][ T1772] usb 1-1: Using ep0 maxpacket: 8 [ 114.407362][ T1772] usb 1-1: config 0 has an invalid interface number: 63 but max is 0 [ 114.415709][ T1772] usb 1-1: config 0 has no interface number 0 [ 114.460903][ T1772] usb 1-1: New USB device found, idVendor=f65e, idProduct=3868, bcdDevice=c6.17 [ 114.528105][ T1786] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 114.565095][ T1794] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 114.767044][ T285] EXT4-fs (loop3): unmounting filesystem. [ 114.865329][ T1772] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.919045][ T28] audit: type=1400 audit(1761110062.616:374): avc: denied { ioctl } for pid=1805 comm="syz.5.433" path="socket:[23043]" dev="sockfs" ino=23043 ioctlcmd=0x48e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.952637][ T348] Bluetooth: hci0: Frame reassembly failed (-84) [ 114.966263][ T1772] usb 1-1: config 0 descriptor?? [ 114.972395][ T283] EXT4-fs (loop1): unmounting filesystem. [ 115.068783][ T1813] netlink: 96 bytes leftover after parsing attributes in process `syz.2.434'. [ 115.108907][ T1772] usb-storage 1-1:0.63: USB Mass Storage device detected [ 115.290502][ T1814] loop3: detected capacity change from 0 to 1024 [ 115.305099][ T1814] EXT4-fs: Ignoring removed orlov option [ 118.646310][ T875] Bluetooth: hci0: command 0x1003 tx timeout [ 118.667261][ T825] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 118.786253][ T1808] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 118.840740][ T1814] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 119.021028][ T285] EXT4-fs (loop3): unmounting filesystem. [ 119.073122][ T1772] usb 1-1: USB disconnect, device number 5 [ 119.311335][ T1836] loop3: detected capacity change from 0 to 1024 [ 119.318245][ T1836] EXT4-fs: Ignoring removed orlov option [ 119.403886][ T1836] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 119.668071][ T1849] loop5: detected capacity change from 0 to 1024 [ 119.675126][ T1850] loop0: detected capacity change from 0 to 1024 [ 119.719605][ T1849] EXT4-fs: Ignoring removed orlov option [ 119.729414][ T1850] EXT4-fs: Ignoring removed orlov option [ 119.753039][ T1772] ================================================================== [ 119.761232][ T1772] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 119.768305][ T1772] Write of size 8 at addr ffff88810d224a00 by task kworker/1:9/1772 [ 119.776305][ T1772] [ 119.778644][ T1772] CPU: 1 PID: 1772 Comm: kworker/1:9 Not tainted syzkaller #0 [ 119.786130][ T1772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 119.796217][ T1772] Workqueue: usb_hub_wq hub_event [ 119.801650][ T1772] Call Trace: [ 119.804953][ T1772] [ 119.807955][ T1772] __dump_stack+0x21/0x24 [ 119.812515][ T1772] dump_stack_lvl+0xee/0x150 [ 119.817141][ T1772] ? __cfi_dump_stack_lvl+0x8/0x8 [ 119.822211][ T1772] ? enqueue_timer+0xae/0x480 [ 119.826928][ T1772] print_address_description+0x71/0x200 [ 119.832519][ T1772] print_report+0x4a/0x60 [ 119.835592][ T1850] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 119.836887][ T1772] kasan_report+0x122/0x150 [ 119.836920][ T1772] ? enqueue_timer+0xae/0x480 [ 119.846073][ T1849] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 119.850284][ T1772] __asan_report_store8_noabort+0x17/0x20 [ 119.850315][ T1772] enqueue_timer+0xae/0x480 [ 119.874070][ T1772] __mod_timer+0x79f/0xb30 [ 119.878530][ T1772] ? ttwu_do_activate+0x174/0x280 [ 119.883668][ T1772] schedule_timeout+0x127/0x2e0 [ 119.888660][ T1772] ? __cfi_schedule_timeout+0x10/0x10 [ 119.894070][ T1772] ? __cfi_process_timeout+0x10/0x10 [ 119.899474][ T1772] ? _raw_spin_lock+0x8e/0xe0 [ 119.904196][ T1772] wait_for_common+0x354/0x620 [ 119.908994][ T1772] ? usb_hcd_giveback_urb+0x351/0x410 [ 119.914472][ T1772] ? wait_for_completion+0x20/0x20 [ 119.919605][ T1772] ? usb_submit_urb+0x1142/0x1810 [ 119.924649][ T1772] wait_for_completion_timeout+0xe/0x10 [ 119.930208][ T1772] usb_start_wait_urb+0x166/0x2f0 [ 119.935244][ T1772] ? usb_alloc_urb+0x44/0x140 [ 119.939941][ T1772] ? usb_api_blocking_completion+0xb0/0xb0 [ 119.945757][ T1772] ? kasan_save_alloc_info+0x25/0x30 [ 119.951100][ T1772] ? usb_alloc_urb+0x44/0x140 [ 119.955785][ T1772] ? __kasan_check_write+0x14/0x20 [ 119.960988][ T1772] usb_control_msg+0x241/0x3f0 [ 119.965765][ T1772] hub_ext_port_status+0x100/0x6b0 [ 119.970892][ T1772] hub_port_debounce+0x1c7/0x250 [ 119.975854][ T1772] hub_event+0x1b01/0x4350 [ 119.980417][ T1772] ? __cfi_hub_event+0x10/0x10 [ 119.985209][ T1772] ? __kasan_check_write+0x14/0x20 [ 119.990335][ T1772] ? _raw_spin_lock_irq+0x8f/0xe0 [ 119.995460][ T1772] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 120.001116][ T1772] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 120.006505][ T1772] process_one_work+0x71f/0xc40 [ 120.011371][ T1772] worker_thread+0xd2e/0x11f0 [ 120.016057][ T1772] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 120.021528][ T1772] ? __kthread_parkme+0x142/0x180 [ 120.026557][ T1772] kthread+0x281/0x320 [ 120.030634][ T1772] ? __cfi_worker_thread+0x10/0x10 [ 120.035745][ T1772] ? __cfi_kthread+0x10/0x10 [ 120.040434][ T1772] ret_from_fork+0x1f/0x30 [ 120.044866][ T1772] [ 120.047887][ T1772] [ 120.050221][ T1772] Allocated by task 1806: [ 120.054570][ T1772] kasan_set_track+0x4b/0x70 [ 120.059191][ T1772] kasan_save_alloc_info+0x25/0x30 [ 120.064316][ T1772] __kasan_kmalloc+0x95/0xb0 [ 120.068998][ T1772] __kmalloc+0xb1/0x1e0 [ 120.073177][ T1772] hci_alloc_dev_priv+0x27/0x1bd0 [ 120.078556][ T1772] hci_uart_tty_ioctl+0x3d6/0xa20 [ 120.083590][ T1772] tty_ioctl+0x8ef/0xc60 [ 120.087943][ T1772] __se_sys_ioctl+0x12f/0x1b0 [ 120.092635][ T1772] __x64_sys_ioctl+0x7b/0x90 [ 120.097225][ T1772] x64_sys_call+0x58b/0x9a0 [ 120.101737][ T1772] do_syscall_64+0x4c/0xa0 [ 120.106159][ T1772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.112321][ T1772] [ 120.114659][ T1772] Freed by task 1808: [ 120.118652][ T1772] kasan_set_track+0x4b/0x70 [ 120.123249][ T1772] kasan_save_free_info+0x31/0x50 [ 120.128309][ T1772] ____kasan_slab_free+0x132/0x180 [ 120.133439][ T1772] __kasan_slab_free+0x11/0x20 [ 120.138217][ T1772] slab_free_freelist_hook+0xc2/0x190 [ 120.143604][ T1772] __kmem_cache_free+0xb7/0x1b0 [ 120.148461][ T1772] kfree+0x6f/0xf0 [ 120.152198][ T1772] hci_release_dev+0x12a3/0x13b0 [ 120.157142][ T1772] bt_host_release+0x82/0x90 [ 120.161738][ T1772] device_release+0xa4/0x1d0 [ 120.166334][ T1772] kobject_put+0x19d/0x280 [ 120.170764][ T1772] put_device+0x1f/0x30 [ 120.174928][ T1772] hci_dev_cmd+0x265/0x720 [ 120.179355][ T1772] hci_sock_ioctl+0x41e/0x7f0 [ 120.184038][ T1772] sock_do_ioctl+0x101/0x310 [ 120.188741][ T1772] sock_ioctl+0x4d8/0x6e0 [ 120.193078][ T1772] __se_sys_ioctl+0x12f/0x1b0 [ 120.197755][ T1772] __x64_sys_ioctl+0x7b/0x90 [ 120.202349][ T1772] x64_sys_call+0x58b/0x9a0 [ 120.206853][ T1772] do_syscall_64+0x4c/0xa0 [ 120.211297][ T1772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.217210][ T1772] [ 120.219537][ T1772] Last potentially related work creation: [ 120.225251][ T1772] kasan_save_stack+0x3a/0x60 [ 120.230015][ T1772] __kasan_record_aux_stack+0xb6/0xc0 [ 120.235395][ T1772] kasan_record_aux_stack_noalloc+0xb/0x10 [ 120.241234][ T1772] insert_work+0x51/0x300 [ 120.245575][ T1772] __queue_work+0x9b1/0xd30 [ 120.250081][ T1772] queue_work_on+0xd2/0x140 [ 120.254597][ T1772] __hci_cmd_sync_sk+0xa3e/0xcf0 [ 120.259541][ T1772] hci_cmd_sync_status+0x53/0x120 [ 120.264572][ T1772] hci_dev_cmd+0x628/0x720 [ 120.269002][ T1772] hci_sock_ioctl+0x41e/0x7f0 [ 120.273697][ T1772] sock_do_ioctl+0x101/0x310 [ 120.278307][ T1772] sock_ioctl+0x4d8/0x6e0 [ 120.282643][ T1772] __se_sys_ioctl+0x12f/0x1b0 [ 120.287337][ T1772] __x64_sys_ioctl+0x7b/0x90 [ 120.292014][ T1772] x64_sys_call+0x58b/0x9a0 [ 120.296519][ T1772] do_syscall_64+0x4c/0xa0 [ 120.301028][ T1772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.306943][ T1772] [ 120.309267][ T1772] Second to last potentially related work creation: [ 120.315847][ T1772] kasan_save_stack+0x3a/0x60 [ 120.320534][ T1772] __kasan_record_aux_stack+0xb6/0xc0 [ 120.325948][ T1772] kasan_record_aux_stack_noalloc+0xb/0x10 [ 120.331763][ T1772] insert_work+0x51/0x300 [ 120.336104][ T1772] __queue_work+0x9b1/0xd30 [ 120.340613][ T1772] queue_work_on+0xd2/0x140 [ 120.345121][ T1772] hci_cmd_timeout+0x191/0x200 [ 120.349903][ T1772] process_one_work+0x71f/0xc40 [ 120.354752][ T1772] worker_thread+0xa29/0x11f0 [ 120.359433][ T1772] kthread+0x281/0x320 [ 120.363515][ T1772] ret_from_fork+0x1f/0x30 [ 120.367938][ T1772] [ 120.370269][ T1772] The buggy address belongs to the object at ffff88810d224000 [ 120.370269][ T1772] which belongs to the cache kmalloc-8k of size 8192 [ 120.384348][ T1772] The buggy address is located 2560 bytes inside of [ 120.384348][ T1772] 8192-byte region [ffff88810d224000, ffff88810d226000) [ 120.397820][ T1772] [ 120.400160][ T1772] The buggy address belongs to the physical page: [ 120.406573][ T1772] page:ffffea0004348800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10d220 [ 120.416830][ T1772] head:ffffea0004348800 order:3 compound_mapcount:0 compound_pincount:0 [ 120.425260][ T1772] flags: 0x4000000000010200(slab|head|zone=1) [ 120.431352][ T1772] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043500 [ 120.439939][ T1772] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 120.448604][ T1772] page dumped because: kasan: bad access detected [ 120.455024][ T1772] page_owner tracks the page as allocated [ 120.460735][ T1772] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2564840233, free_ts 0 [ 120.478802][ T1772] post_alloc_hook+0x1f5/0x210 [ 120.483586][ T1772] prep_new_page+0x1c/0x110 [ 120.488095][ T1772] get_page_from_freelist+0x2c7b/0x2cf0 [ 120.493655][ T1772] __alloc_pages+0x1c3/0x450 [ 120.498250][ T1772] alloc_slab_page+0x6e/0xf0 [ 120.502885][ T1772] new_slab+0x98/0x3d0 [ 120.506983][ T1772] ___slab_alloc+0x6bd/0xb20 [ 120.511594][ T1772] __slab_alloc+0x5e/0xa0 [ 120.515937][ T1772] __kmem_cache_alloc_node+0x203/0x2c0 [ 120.521408][ T1772] __kmalloc_node+0xa1/0x1e0 [ 120.526013][ T1772] kvmalloc_node+0x294/0x480 [ 120.530606][ T1772] sbitmap_init_node+0x43b/0x580 [ 120.535552][ T1772] scsi_realloc_sdev_budget_map+0x24e/0x3a0 [ 120.541448][ T1772] scsi_alloc_sdev+0x7ee/0xac0 [ 120.546231][ T1772] scsi_probe_and_add_lun+0x192/0x3bb0 [ 120.551695][ T1772] __scsi_scan_target+0x1e8/0xbb0 [ 120.556721][ T1772] page_owner free stack trace missing [ 120.562084][ T1772] [ 120.564417][ T1772] Memory state around the buggy address: [ 120.570050][ T1772] ffff88810d224900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.578116][ T1772] ffff88810d224980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.586186][ T1772] >ffff88810d224a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.594260][ T1772] ^ [ 120.598421][ T1772] ffff88810d224a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.606521][ T1772] ffff88810d224b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.614588][ T1772] ================================================================== [ 120.622641][ T1772] Disabling lock debugging due to kernel taint [ 120.640821][ T28] audit: type=1400 audit(1761110068.336:375): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 120.667970][ T28] audit: type=1400 audit(1761110068.356:376): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.690991][ T285] EXT4-fs (loop3): unmounting filesystem. [ 120.725641][ T28] audit: type=1400 audit(1761110068.356:377): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.779028][ T28] audit: type=1400 audit(1761110068.356:378): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.806173][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 120.818051][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 120.821763][ T28] audit: type=1400 audit(1761110068.356:379): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.826524][ C1] CPU: 1 PID: 1842 Comm: syz.0.443 Tainted: G B syzkaller #0 [ 120.826549][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.826567][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 120.871066][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 dc 28 00 4c 89 ff e8 70 db ac 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 cc 4b 6d 00 49 8b 7d 00 e8 53 d7 [ 120.874120][ T28] audit: type=1400 audit(1761110068.356:380): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.890714][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 120.890748][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88810d048000 [ 120.890762][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 120.890776][ C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007 [ 120.890791][ C1] R10: ffffed1021a44939 R11: 1ffff11021a44939 R12: dffffc0000000000 [ 120.890805][ C1] R13: 0000000000000000 R14: ffff88810d2249c8 R15: 0000000000000008 [ 120.890819][ C1] FS: 00007fc0ff8766c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 120.890839][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.890854][ C1] CR2: 0000000000000000 CR3: 0000000120cef000 CR4: 00000000003506a0 [ 120.890870][ C1] DR0: 000000000000004b DR1: 0000000000000000 DR2: 0000000000000000 [ 120.890883][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 120.982274][ T28] audit: type=1400 audit(1761110068.356:381): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.983150][ C1] Call Trace: [ 121.024889][ C1] [ 121.027763][ C1] delayed_work_timer_fn+0x61/0x80 [ 121.032910][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 121.038743][ C1] call_timer_fn+0x46/0x2a0 [ 121.043282][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 121.049119][ C1] __run_timers+0x667/0x9a0 [ 121.053759][ C1] ? calc_index+0x200/0x200 [ 121.058307][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 121.063551][ C1] run_timer_softirq+0x6a/0xf0 [ 121.068347][ C1] handle_softirqs+0x1d7/0x600 [ 121.073146][ C1] __irq_exit_rcu+0x52/0xf0 [ 121.077764][ C1] irq_exit_rcu+0x9/0x10 [ 121.082144][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 121.087898][ C1] [ 121.090845][ C1] [ 121.093797][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 121.099814][ C1] RIP: 0010:kasan_check_range+0x7f/0x290 [ 121.105494][ C1] Code: 5c 37 ff 48 c1 eb 03 4e 8d 14 3b 4d 89 d6 4d 29 ce 49 83 fe 10 7f 26 4d 85 f6 0f 84 39 01 00 00 48 f7 d3 4c 01 db 41 80 39 00 <0f> 85 c2 01 00 00 49 ff c1 48 ff c3 75 ee e9 1c 01 00 00 44 89 cb [ 121.125220][ C1] RSP: 0018:ffffc9000e047510 EFLAGS: 00000246 [ 121.131326][ C1] RAX: ffffffff84f3d301 RBX: fffffffffffffffa RCX: ffffffff84f3d3fc [ 121.139327][ C1] RDX: 0000000000000001 RSI: 0000000000000038 RDI: ffffc9000e047580 [ 121.147323][ C1] RBP: ffffc9000e047528 R08: dffffc0000000000 R09: fffff52001c08eb1 [ 121.155332][ C1] R10: fffff52001c08eb7 R11: 1ffff92001c08eb0 R12: dffffc0000000000 [ 121.163326][ C1] R13: 1ffff92001c08eac R14: 0000000000000007 R15: dffffc0000000001 [ 121.171329][ C1] ? rt_mutex_slowunlock+0x1f1/0x230 [ 121.176656][ C1] ? schedule_timeout+0x8c/0x2e0 [ 121.181638][ C1] memset+0x23/0x40 [ 121.185477][ C1] schedule_timeout+0x8c/0x2e0 [ 121.190273][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 121.195712][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 121.201548][ C1] ? prepare_to_wait_exclusive+0x191/0x1d0 [ 121.207404][ C1] unix_wait_for_peer+0x1e5/0x2e0 [ 121.212470][ C1] ? unix_find_other+0x880/0x880 [ 121.217436][ C1] ? __cfi_autoremove_wake_function+0x10/0x10 [ 121.223533][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 121.228762][ C1] ? security_unix_may_send+0x8c/0xb0 [ 121.234152][ C1] unix_dgram_sendmsg+0xed4/0x16d0 [ 121.239297][ C1] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 121.244870][ C1] ? security_socket_sendmsg+0x93/0xb0 [ 121.250792][ C1] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 121.256369][ C1] ____sys_sendmsg+0x5a9/0x990 [ 121.261160][ C1] ? _raw_spin_unlock+0x4c/0x70 [ 121.266037][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 121.271093][ C1] ? __schedule+0xb8f/0x14e0 [ 121.275702][ C1] ? import_iovec+0x7c/0xb0 [ 121.280233][ C1] ___sys_sendmsg+0x21c/0x290 [ 121.284932][ C1] ? __sys_sendmsg+0x270/0x270 [ 121.289718][ C1] ? futex_unqueue+0x132/0x160 [ 121.294513][ C1] ? __cfi_futex_wait+0x10/0x10 [ 121.299453][ C1] ? __fdget+0x19c/0x220 [ 121.303719][ C1] __sys_sendmmsg+0x274/0x460 [ 121.308423][ C1] ? __cfi___sys_sendmmsg+0x10/0x10 [ 121.313649][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 121.319303][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 121.324184][ C1] x64_sys_call+0x3f5/0x9a0 [ 121.328709][ C1] do_syscall_64+0x4c/0xa0 [ 121.333160][ C1] ? clear_bhb_loop+0x30/0x80 [ 121.337862][ C1] ? clear_bhb_loop+0x30/0x80 [ 121.342573][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.348493][ C1] RIP: 0033:0x7fc0fe98efc9 [ 121.352939][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.372560][ C1] RSP: 002b:00007fc0ff876038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 121.381002][ C1] RAX: ffffffffffffffda RBX: 00007fc0febe6090 RCX: 00007fc0fe98efc9 [ 121.388995][ C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000005 [ 121.396984][ C1] RBP: 00007fc0fea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 121.405064][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.413058][ C1] R13: 00007fc0febe6128 R14: 00007fc0febe6090 R15: 00007ffe66daa898 [ 121.421077][ C1] [ 121.424123][ C1] Modules linked in: [ 121.428137][ C1] ---[ end trace 0000000000000000 ]--- [ 121.433603][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 121.439177][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 dc 28 00 4c 89 ff e8 70 db ac 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 cc 4b 6d 00 49 8b 7d 00 e8 53 d7 [ 121.458893][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 121.464990][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88810d048000 [ 121.472982][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 121.480975][ C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007 [ 121.488974][ C1] R10: ffffed1021a44939 R11: 1ffff11021a44939 R12: dffffc0000000000 [ 121.496969][ C1] R13: 0000000000000000 R14: ffff88810d2249c8 R15: 0000000000000008 [ 121.505055][ C1] FS: 00007fc0ff8766c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 121.514058][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.520679][ C1] CR2: 0000000000000000 CR3: 0000000120cef000 CR4: 00000000003506a0 [ 121.528846][ C1] DR0: 000000000000004b DR1: 0000000000000000 DR2: 0000000000000000 [ 121.536833][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 121.544825][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 121.552151][ C1] Kernel Offset: disabled [ 121.556496][ C1] Rebooting in 86400 seconds..